last executing test programs: 3m44.873321921s ago: executing program 0 (id=1654): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x4, 0x9}, 0x50) r0 = syz_io_uring_setup(0x10d, 0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r0, 0x3512, 0x9d5c, 0x4, 0x0, 0x0) 3m44.707409242s ago: executing program 0 (id=1655): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3m44.359355357s ago: executing program 0 (id=1658): r0 = syz_open_procfs(0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x3200898, 0x0) pread64(r0, &(0x7f0000002240)=""/237, 0xfecf, 0x4eb) 3m43.084412941s ago: executing program 0 (id=1659): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x38, 0x0, 0x9, 0x305, 0x0, 0x0, {0x0, 0x0, 0x100}, [@NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_PRIV_DATA_LEN={0x8}]}, 0x38}}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000240)=[@mss={0x2, 0x8}, @sack_perm, @sack_perm, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x7) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x2, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 3m41.981004054s ago: executing program 0 (id=1662): syz_open_dev$radio(0x0, 0x1, 0x2) mkdir(&(0x7f0000000080)='./file1\x00', 0x18) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r1}, './file0\x00'}) 3m40.791333888s ago: executing program 0 (id=1665): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x4, 0x9}, 0x50) r0 = syz_io_uring_setup(0x10d, 0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r0, 0x3512, 0x9d5c, 0x4, 0x0, 0x0) 3m25.459778395s ago: executing program 32 (id=1665): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x4, 0x9}, 0x50) r0 = syz_io_uring_setup(0x10d, 0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r0, 0x3512, 0x9d5c, 0x4, 0x0, 0x0) 3m16.372176976s ago: executing program 1 (id=1712): bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x5, 0xffff8000, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0xfffffffd}, 0x50) 3m16.06325707s ago: executing program 1 (id=1714): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) creat(&(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x8}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r4 = dup2(r3, 0xffffffffffffffff) lseek(r4, 0x0, 0x4) 3m14.861102949s ago: executing program 2 (id=1719): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x64, 0x0) 3m13.207204975s ago: executing program 1 (id=1721): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) 3m13.012987058s ago: executing program 1 (id=1722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff000800034000000038580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c000380280000800800034000"], 0xec}}, 0x0) 3m12.708296172s ago: executing program 1 (id=1724): syz_open_dev$radio(0x0, 0x1, 0x2) mkdir(&(0x7f0000000080)='./file1\x00', 0x18) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 3m12.424947907s ago: executing program 1 (id=1726): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@NFTA_COMPAT_NAME={0x11, 0x1, '/proc/mdstat\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x30}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 3m12.293581369s ago: executing program 2 (id=1728): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10408, 0x8}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r5 = dup2(r4, r2) lseek(r5, 0x0, 0x4) 3m9.546540531s ago: executing program 2 (id=1730): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='tlb_flush\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) 3m7.961343006s ago: executing program 2 (id=1731): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x5, 0x3, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3m7.607367891s ago: executing program 2 (id=1733): syz_open_dev$radio(0x0, 0x1, 0x2) mkdir(&(0x7f0000000080)='./file1\x00', 0x18) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 3m7.416499224s ago: executing program 2 (id=1735): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x64, 0x0) 2m56.766107649s ago: executing program 33 (id=1726): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x0, 0xb, 0x101, 0x0, 0x0, {}, [@NFTA_COMPAT_NAME={0x11, 0x1, '/proc/mdstat\x00'}, @NFTA_COMPAT_REV={0x8}]}, 0x30}}, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x96d) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x1}) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 2m52.213490929s ago: executing program 34 (id=1735): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x64, 0x0) 11.000147869s ago: executing program 4 (id=2058): creat(0x0, 0x108) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x6, 0x800) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat$vcs(0xffffff9c, 0x0, 0x400000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0xba7b, 0x0, 0x4, 0x2c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 9.185918208s ago: executing program 6 (id=2061): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x2735, &(0x7f00000005c0)={0x0, 0x2bf3, 0x53fd, 0x2, 0x8001da}, &(0x7f0000000000), 0x0) io_uring_enter(r3, 0x3517, 0x173d, 0x42, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x10}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) 9.00093445s ago: executing program 4 (id=2062): creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = dup2(r2, r0) lseek(r3, 0x0, 0x4) 8.974917651s ago: executing program 6 (id=2063): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1a22"], 0x1d) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x40000020) 8.845379393s ago: executing program 6 (id=2064): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) timerfd_create(0x4, 0x80800) syz_io_uring_setup(0x19ff, 0x0, &(0x7f0000000240), &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000007f721185d1bd3a0ddc9b4f4fb93aedd0a03ab11a8cb57ca3b63a1566d7b8c329386274571eb19ffef06b6d1fff919327c75193a37bfd8eccb5961ba7d48b24796f3025fac2b1f918"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r4}, 0x38) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x10000002, 0x1001}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r6, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r6, 0x7a9, &(0x7f00000003c0)={{@my=0x1}, 0xfff, 0xffffffffffffffff, 0x0, 0x0, 0x80000, 0x2, 0x1000000000ff6, 0x58df}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) 8.746782014s ago: executing program 4 (id=2065): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020}, 0x2020) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x200, 0x70bd26, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x0, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0xdf}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x10000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r0, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2d, 0x0, 0x0, 0xcbf, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, 0x700, 0x8, 0x8, 0xd66}}) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r8, 0xc2c45512, &(0x7f0000000640)={{0xb, 0x2, 0x81, 0x5, 'syz1\x00', 0xb}, 0x0, [0x2, 0x10e8af, 0x1, 0xcc0, 0xe, 0x101, 0x80, 0xa6da, 0x2, 0x1, 0x10000009, 0x8, 0x8, 0xfffefff7, 0x8, 0x10, 0x10000005, 0x4, 0x40f, 0x1080, 0x962, 0x2, 0x1, 0x400, 0x7fffffff, 0xc360, 0x80000001, 0x6, 0x60e3, 0x8a81, 0x10000008, 0x10000, 0x7, 0x9, 0x107430, 0x2, 0x2, 0x60a, 0x1, 0x3, 0x8, 0x5, 0x8001, 0x8, 0x9, 0x1, 0x2, 0x0, 0xffff1688, 0x2, 0x0, 0x4, 0x9000, 0xe93, 0x4, 0x7ff, 0x7, 0x81, 0x50a, 0x0, 0x6, 0x7ff, 0x1000, 0xffffffff, 0xfffffffc, 0x5, 0x7a, 0x2, 0x9, 0x2, 0x3, 0x7, 0x1000ac, 0x7, 0x7, 0x4, 0x8000, 0x9, 0x4, 0x7, 0x10, 0x7, 0x5, 0x0, 0x0, 0x40, 0x2, 0x8000, 0xfff, 0x3, 0x3b9, 0x6, 0x100004, 0x4660917f, 0x487d, 0x8000, 0x1, 0x5, 0x3, 0x0, 0x5, 0x4, 0xe, 0x1, 0x2cd, 0x9, 0xc, 0x4, 0x1, 0x2, 0x3ce, 0xa, 0x8, 0x9, 0x0, 0x106, 0xfffffff7, 0xffffbf90, 0x0, 0x7, 0x2, 0x0, 0x7, 0xa, 0x809, 0xffffffff, 0x73938332, 0x7763]}) 8.182427413s ago: executing program 3 (id=2067): set_mempolicy(0x4005, &(0x7f0000000080)=0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 6.940723762s ago: executing program 3 (id=2069): socket(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) iopl(0x3) rt_sigsuspend(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xf, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0x8, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)=0x7fffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x200006, 0x2, 0x4964, 0x9}) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x2) 6.851215413s ago: executing program 5 (id=2070): creat(0x0, 0x108) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) msgrcv(0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1000) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x6, 0x800) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) openat$vcs(0xffffff9c, 0x0, 0x400000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0xba7b, 0x0, 0x4, 0x2c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 5.430337406s ago: executing program 3 (id=2071): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_io_uring_setup(0x2735, &(0x7f00000005c0)={0x0, 0x2bf3, 0x53fd, 0x2, 0x8001da}, &(0x7f0000000000), 0x0) io_uring_enter(r3, 0x3517, 0x173d, 0x42, 0x0, 0x0) socket(0x10, 0x3, 0x0) r4 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x10}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) 5.306989537s ago: executing program 4 (id=2072): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1a22"], 0x1d) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x40000020) 5.064502431s ago: executing program 5 (id=2073): creat(&(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r3 = dup2(r2, r0) lseek(r3, 0x0, 0x4) 5.012176722s ago: executing program 4 (id=2074): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$pptp(0xffffffffffffffff, 0x0, 0x0) connect$pptp(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x2, {0xfffc, @initdev={0xac, 0x1e, 0x5, 0x0}}}, 0x1e) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6(0xa, 0x80002, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x2f5380, 0x41414770, 0x58595556, 0x425, 0x10001, 0xa, 0x9e0, 0x1, 0x3, 0x0, 0x7}}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r5, 0x4010ae68, &(0x7f0000000000)={0x4, 0x1a000}) 4.843292165s ago: executing program 5 (id=2075): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x12712, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x2, 0x1, {0x0, 0x1}, {0x48, 0xfbff}, @rumble={0xf, 0xff}}) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x8c2b01) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x1, 0x0, 0x0}) write$char_usb(r2, &(0x7f0000000040)="e2", 0x12d8) munlockall() r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @broadcast}, @nfc, @nl=@unspec, 0x401}) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT_ADD_MFC(0xffffffffffffffff, 0x0, 0xcc, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x122}, 0x1, 0x0, 0x0, 0x2}, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x1}, 0x1c) ioctl$UFFDIO_COPY(r7, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r9, 0xffffffffffffffff, 0x0) 3.83762484s ago: executing program 6 (id=2076): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x25dfdbfb, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x3, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0x5b, 0x0}}], 0x800000000000214, 0x20000001) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) pipe2$9p(&(0x7f00000000c0), 0x4000) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000180)={0x0, 0xa, 0xd, 0x2}) 2.851375966s ago: executing program 6 (id=2077): ioctl$SNDCTL_DSP_POST(0xffffffffffffffff, 0x5008, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000140)=""/156, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23, &(0x7f00000016c0), 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="0404190c4f"], 0xd) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f0000000400000004", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/20], 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001030000000000f20000020000040000"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}}, 0x0) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x25) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, &(0x7f0000000240)={0x1ff, 0x2}, 0x1) setsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x801, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000340)=ANY=[@ANYBLOB="5f476cf53f84ffffffffffff08060001080006040002aaaaaaaaaa3b7f00000caaaaaaaaaaaaac1414bb1504d06d76dad98a2bfd8ca2b928cabc10381fe9b9429ffac44d7c05d2df82a2a4fcece79dcf7abf258b6b3954722fc5403c7cb42a485c93c2"], 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)) 2.55770287s ago: executing program 5 (id=2078): r0 = socket$inet(0xa, 0x801, 0x84) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt(r1, 0x84, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) 1.766321542s ago: executing program 5 (id=2079): socket(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) iopl(0x3) rt_sigsuspend(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000002c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xf, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_uring_register$IORING_REGISTER_FILES2(0xffffffffffffffff, 0x8, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x20) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)=0x7fffffff) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000040)={'\x00', 0x7ff, 0x200006, 0x2, 0x4964, 0x9}) ioctl$SG_BLKTRACETEARDOWN(r5, 0x1276, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x2) 1.570950875s ago: executing program 6 (id=2080): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$video4linux(&(0x7f00000002c0), 0x10000, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r5) sendmsg$TIPC_NL_PUBL_GET(r5, 0x0, 0x40) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r5) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000004, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 1.370758228s ago: executing program 3 (id=2081): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x4c}}, 0x0) 896.599756ms ago: executing program 3 (id=2082): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r0}, 0x10) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x40000020) 211.169826ms ago: executing program 3 (id=2083): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000100)=0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x10, &(0x7f0000000480)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x9c, &(0x7f0000000140)=""/156, 0x41000, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x850}, 0x20000000) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e00000027fff"], 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25017c0000100036800c00020004000500000000000c000180060006008e"], 0x30}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000280)=ANY=[], 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x50) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) connect$phonet_pipe(0xffffffffffffffff, 0x0, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}, {0x3, &(0x7f0000000040)=0x3, 0x2}], 0x2, 0x0, 0x0, 0x0) futex(&(0x7f0000000140), 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 138.520147ms ago: executing program 5 (id=2084): r0 = socket$inet6(0xa, 0xa, 0x400000) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'ipvlan1\x00', {0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x3d}}}) sendmmsg$inet6(r0, 0x0, 0x0, 0xc8000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000f00)=ANY=[@ANYBLOB="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", @ANYRESHEX=r2, @ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f2f, 0xf, 0x3253, &(0x7f00000007c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x23) setrlimit(0x63b507edc49d5658, &(0x7f0000000300)={0x8, 0x9}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r5, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000004c0)={0x2710, 0x0, 0x10000, 0x2000, &(0x7f0000000000/0x2000)=nil}) preadv(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x0, 0x0) 0s ago: executing program 4 (id=2085): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x4087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000240), 0x43d3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f00000002c0)=0x1) close_range(r1, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): O error on dev loop6, logical block 0, async page read [ 594.997160][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 595.005911][T10376] Dev loop6: unable to read RDB block 0 [ 595.012027][ T1097] loop: Write error at byte offset 521217, length 4096. [ 595.029815][ T1097] loop: Write error at byte offset 1045505, length 4096. [ 595.053857][ T1097] loop: Write error at byte offset 1569793, length 4096. [ 595.069308][ T1097] loop: Write error at byte offset 2094081, length 4096. [ 595.104970][T10376] loop6: unable to read partition table [ 595.112624][T10376] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 595.127860][ T1097] loop: Write error at byte offset 2618369, length 4096. [ 595.154206][ T1097] loop: Write error at byte offset 3142657, length 4096. [ 595.184798][ T1097] loop: Write error at byte offset 3666945, length 4096. [ 595.245862][ T1097] loop: Write error at byte offset 4191233, length 4096. [ 595.321272][ T1097] loop: Write error at byte offset 4715521, length 4096. [ 595.597567][ T55] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 595.799258][ T55] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 595.829539][ T55] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 595.859910][ T55] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 595.895835][ T55] usb 4-1: config 1 interface 0 has no altsetting 0 [ 595.910529][ T55] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 595.929912][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.957328][ T55] usb 4-1: Product: ࢩ鱴ꑕ诶숔⊬ᶟ㫫롧茩샘鎸ꮼ瘗ힲᄌ嗚⣱늹⪶씻촛墀똇㵕㬅凡뉹ኵ⡜䢶୷憮벮꭪핎썵鿞尖ผ벟瘢흴Ⲽ풛֊ᚅ [ 596.017576][ T55] usb 4-1: Manufacturer: ї [ 596.036421][ T55] usb 4-1: SerialNumber: 仈吪꨷麷씿⃔৐἟㟜⭨끥⏕ᚴ庆럣굘 [ 596.060300][T10384] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 596.084892][T10384] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 596.336603][T10390] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 596.343224][T10390] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 596.352088][T10394] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[10394] [ 596.433562][T10390] vhci_hcd vhci_hcd.0: Device attached [ 596.470263][T10390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1150'. [ 596.790025][T10392] vhci_hcd: connection closed [ 596.790417][ T11] vhci_hcd: stop threads [ 596.807176][ T11] vhci_hcd: release socket [ 596.812127][ T11] vhci_hcd: disconnect device [ 596.827718][ T8] usb 33-1: new high-speed USB device number 6 using vhci_hcd [ 596.845775][ T8] usb 33-1: enqueue for inactive port 0 [ 597.206581][ T8] vhci_hcd: vhci_device speed not set [ 597.552872][ T55] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 597.647682][ T55] usb 4-1: USB disconnect, device number 21 [ 598.237421][ T2133] vhci_hcd: vhci_device speed not set [ 598.387713][T10410] mkiss: ax0: crc mode is auto. [ 599.287001][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1159'. [ 599.362747][T10431] loop6: detected capacity change from 0 to 524287999 [ 599.398926][T10431] ldm_validate_partition_table(): Disk read failed. [ 599.406273][T10431] Dev loop6: unable to read RDB block 0 [ 599.412984][T10431] loop6: unable to read partition table [ 599.418933][T10431] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 599.741723][ C0] blk_print_req_error: 100 callbacks suppressed [ 599.741739][ C0] I/O error, dev loop6, sector 7250 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 599.758141][ C0] I/O error, dev loop6, sector 7250 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 599.774053][ C0] I/O error, dev loop6, sector 8274 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 599.784101][ C0] I/O error, dev loop6, sector 8274 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 599.794144][ C0] I/O error, dev loop6, sector 9298 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 599.804160][ C0] I/O error, dev loop6, sector 9298 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 599.814312][ C0] I/O error, dev loop6, sector 10322 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 599.824419][ C0] I/O error, dev loop6, sector 10322 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 599.834568][ C0] I/O error, dev loop6, sector 11346 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 599.844628][ C0] I/O error, dev loop6, sector 11346 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 599.948284][ T8779] lo_write_bvec: 32 callbacks suppressed [ 599.948305][ T8779] loop: Write error at byte offset 6857729, length 4096. [ 600.040567][ T8779] loop: Write error at byte offset 7382017, length 4096. [ 600.061639][ T8779] loop: Write error at byte offset 7906305, length 4096. [ 600.139030][ T8779] loop: Write error at byte offset 8430593, length 4096. [ 600.405009][ T8779] loop: Write error at byte offset 8954881, length 4096. [ 600.453653][ T8779] loop: Write error at byte offset 9479169, length 4096. [ 600.509700][ T8779] loop: Write error at byte offset 10003457, length 4096. [ 600.517122][ T8779] loop: Write error at byte offset 10527745, length 4096. [ 600.524503][ T8779] loop: Write error at byte offset 11052033, length 4096. [ 600.531996][ T8779] loop: Write error at byte offset 11576321, length 4096. [ 600.550345][ C1] buffer_io_error: 26 callbacks suppressed [ 600.550361][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 600.567332][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 600.577938][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 600.587316][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 600.596470][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 600.608623][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 600.631095][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 600.643818][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 600.651926][ T5142] ldm_validate_partition_table(): Disk read failed. [ 600.659094][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 600.678316][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 600.686620][ T5142] Dev loop6: unable to read RDB block 0 [ 600.702918][ T5142] loop6: unable to read partition table [ 601.172944][T10450] ptrace attach of "./syz-executor exec"[5777] was attempted by ""[10450] [ 601.277433][ T23] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 601.509278][ T23] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 601.522650][ T23] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 601.564109][ T23] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 601.631598][ T23] usb 3-1: config 1 interface 0 has no altsetting 0 [ 601.674064][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 601.728029][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.736104][ T23] usb 3-1: Product: ࢩ鱴ꑕ诶숔⊬ᶟ㫫롧茩샘鎸ꮼ瘗ힲᄌ嗚⣱늹⪶씻촛墀똇㵕㬅凡뉹ኵ⡜䢶୷憮벮꭪핎썵鿞尖ผ벟瘢흴Ⲽ풛֊ᚅ [ 601.775529][ T23] usb 3-1: Manufacturer: ї [ 601.790407][ T23] usb 3-1: SerialNumber: 仈吪꨷麷씿⃔৐἟㟜⭨끥⏕ᚴ庆럣굘 [ 601.842580][T10448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 601.861406][T10448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 602.589340][T10471] mkiss: ax0: crc mode is auto. [ 603.305058][T10480] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 603.311654][T10480] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 603.336130][T10480] vhci_hcd vhci_hcd.0: Device attached [ 603.617414][ T2133] usb 33-1: new low-speed USB device number 7 using vhci_hcd [ 603.652037][T10480] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1164'. [ 603.690320][ T23] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 603.732493][ T23] usb 3-1: USB disconnect, device number 13 [ 603.805757][T10481] vhci_hcd: connection reset by peer [ 603.815513][ T39] vhci_hcd: stop threads [ 603.819994][ T39] vhci_hcd: release socket [ 603.830894][ T39] vhci_hcd: disconnect device [ 604.449927][T10493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1169'. [ 606.772300][T10509] nft_compat: unsupported protocol 0 [ 608.509305][T10510] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 608.515982][T10510] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 608.616551][T10510] vhci_hcd vhci_hcd.0: Device attached [ 608.678828][T10515] vhci_hcd: connection closed [ 608.697541][ T1097] vhci_hcd: stop threads [ 608.781369][ T2133] vhci_hcd: vhci_device speed not set [ 608.818272][ T1097] vhci_hcd: release socket [ 608.867458][ T5860] usb 35-1: new high-speed USB device number 10 using vhci_hcd [ 608.907337][ T1097] vhci_hcd: disconnect device [ 608.985774][T10520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1175'. [ 610.513142][T10527] lo speed is unknown, defaulting to 1000 [ 611.034513][T10530] ptrace attach of "./syz-executor exec"[5775] was attempted by ""[10530] [ 611.284358][T10534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1178'. [ 612.292953][T10540] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.384188][T10540] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.446531][T10540] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.532813][T10540] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.708929][T10540] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.749187][T10540] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.804755][T10540] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.836227][T10553] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 612.842809][T10553] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 612.855694][T10553] vhci_hcd vhci_hcd.0: Device attached [ 612.913026][T10540] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.935726][T10553] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1181'. [ 612.960723][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1183'. [ 613.092295][T10554] vhci_hcd: connection closed [ 613.102681][ T1141] vhci_hcd: stop threads [ 613.117358][ T2133] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 613.128512][ T1141] vhci_hcd: release socket [ 613.133264][ T1141] vhci_hcd: disconnect device [ 613.422818][T10557] mkiss: ax0: crc mode is auto. [ 613.977532][ T5860] vhci_hcd: vhci_device speed not set [ 614.282387][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1188'. [ 616.440173][T10579] lo speed is unknown, defaulting to 1000 [ 617.630074][T10592] mkiss: ax0: crc mode is auto. [ 617.766797][T10596] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[10596] [ 618.048903][T10604] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1197'. [ 618.217499][ T2133] vhci_hcd: vhci_device speed not set [ 619.478240][T10628] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 619.484838][T10628] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 619.583242][T10632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1198'. [ 619.613422][T10628] vhci_hcd vhci_hcd.0: Device attached [ 619.740813][T10629] vhci_hcd: connection closed [ 619.741258][ T1097] vhci_hcd: stop threads [ 619.785005][ T1097] vhci_hcd: release socket [ 619.853527][ T1097] vhci_hcd: disconnect device [ 619.877359][ T2133] usb 37-1: new low-speed USB device number 7 using vhci_hcd [ 620.029350][ T2133] usb 37-1: enqueue for inactive port 0 [ 620.207488][ T2133] vhci_hcd: vhci_device speed not set [ 620.628723][T10647] loop6: detected capacity change from 0 to 524287999 [ 620.678433][ C0] blk_print_req_error: 57 callbacks suppressed [ 620.678445][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.693846][ C0] buffer_io_error: 7 callbacks suppressed [ 620.693856][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.724888][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.734087][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.746560][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.755785][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.797332][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.806526][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.862104][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.871337][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.911211][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.920497][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 620.937730][ T39] lo_write_bvec: 9 callbacks suppressed [ 620.937747][ T39] loop: Write error at byte offset 1, length 1024. [ 620.977376][ T39] loop: Write error at byte offset 553985, length 4096. [ 620.984402][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 620.984435][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 621.086679][ T39] loop: Write error at byte offset 1078273, length 4096. [ 621.086706][ C1] I/O error, dev loop6, sector 1082 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 621.103940][ C1] I/O error, dev loop6, sector 1082 op 0x1:(WRITE) flags 0x8800 phys_seg 128 prio class 2 [ 621.125375][ T39] loop: Write error at byte offset 1602561, length 4096. [ 621.147215][ T39] loop: Write error at byte offset 2126849, length 4096. [ 621.168821][ T39] loop: Write error at byte offset 2651137, length 4096. [ 621.209860][ T39] loop: Write error at byte offset 3175425, length 4096. [ 621.242096][ T39] loop: Write error at byte offset 3699713, length 4096. [ 621.307369][ T39] loop: Write error at byte offset 4224001, length 4096. [ 621.314708][ T39] loop: Write error at byte offset 4748289, length 4096. [ 621.358185][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 621.368112][T10647] ldm_validate_partition_table(): Disk read failed. [ 621.375467][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 621.417775][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 621.447298][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 621.456980][T10647] Dev loop6: unable to read RDB block 0 [ 621.506998][T10647] loop6: unable to read partition table [ 621.537550][T10647] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 622.259422][T10663] mkiss: ax0: crc mode is auto. [ 622.376871][T10662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1204'. [ 622.552977][T10673] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1207'. [ 623.563762][T10683] ptrace attach of "./syz-executor exec"[5782] was attempted by ""[10683] [ 624.019812][T10689] loop6: detected capacity change from 0 to 524287999 [ 624.104095][T10689] ldm_validate_partition_table(): Disk read failed. [ 624.148481][T10689] Dev loop6: unable to read RDB block 0 [ 624.235738][T10689] loop6: unable to read partition table [ 624.259493][T10689] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 624.541365][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.554290][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.571524][ T5142] ldm_validate_partition_table(): Disk read failed. [ 624.583539][ T5142] Dev loop6: unable to read RDB block 0 [ 624.604644][ T5142] loop6: unable to read partition table [ 626.009104][T10707] mkiss: ax0: crc mode is auto. [ 626.104937][T10713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1218'. [ 626.167948][T10714] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 626.174532][T10714] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 626.246306][T10714] vhci_hcd vhci_hcd.0: Device attached [ 626.439978][T10718] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1213'. [ 626.547453][ T42] usb 33-1: new low-speed USB device number 8 using vhci_hcd [ 626.651083][T10715] vhci_hcd: connection reset by peer [ 626.859634][ T1097] vhci_hcd: stop threads [ 626.913225][ T1097] vhci_hcd: release socket [ 626.918131][ T1097] vhci_hcd: disconnect device [ 627.375568][ T27] audit: type=1326 audit(1750848998.974:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10725 comm="syz.2.1222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 628.695973][T10744] ptrace attach of "./syz-executor exec"[5782] was attempted by ""[10744] [ 628.838458][T10746] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 628.845148][T10746] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 628.884090][T10746] vhci_hcd vhci_hcd.0: Device attached [ 629.246581][T10747] vhci_hcd: connection closed [ 629.257382][ T12] vhci_hcd: stop threads [ 629.266424][ T12] vhci_hcd: release socket [ 629.301657][ T12] vhci_hcd: disconnect device [ 630.044328][T10762] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1230'. [ 630.710643][T10768] IPv6: Can't replace route, no match found [ 630.783633][T10770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1232'. [ 630.843890][T10767] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 630.858356][T10767] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 630.931173][T10767] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 630.941444][T10767] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 631.018173][T10767] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 631.037991][T10767] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 631.137023][T10767] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 632.793528][T10767] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 632.837383][ T42] vhci_hcd: vhci_device speed not set [ 633.012400][T10779] loop6: detected capacity change from 0 to 524287999 [ 633.048375][ C1] blk_print_req_error: 141 callbacks suppressed [ 633.048396][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 633.064006][ C1] buffer_io_error: 43 callbacks suppressed [ 633.064017][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 633.078177][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 633.087456][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 633.110502][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 633.119754][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 633.129015][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 633.138324][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 633.151327][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 633.160516][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 633.169919][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 633.179117][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 633.187686][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 633.196900][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 633.207727][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 633.216907][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 633.225102][T10779] ldm_validate_partition_table(): Disk read failed. [ 633.239296][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 633.248525][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 633.261589][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 633.270787][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 633.282488][T10779] Dev loop6: unable to read RDB block 0 [ 633.288303][ T12] lo_write_bvec: 38 callbacks suppressed [ 633.288314][ T12] loop: Write error at byte offset 1, length 1024. [ 633.295277][T10767] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 633.306662][T10779] loop6: unable to read partition table [ 633.314436][ T12] loop: Write error at byte offset 578561, length 4096. [ 633.324638][ T12] loop: Write error at byte offset 1102849, length 4096. [ 633.343904][ T12] loop: Write error at byte offset 1627137, length 4096. [ 633.357401][T10767] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 633.379106][ T12] loop: Write error at byte offset 2151425, length 4096. [ 633.399147][T10779] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 633.426380][ T12] loop: Write error at byte offset 2675713, length 4096. [ 633.453641][ T12] loop: Write error at byte offset 3200001, length 4096. [ 633.469032][T10767] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 633.487450][ T12] loop: Write error at byte offset 3724289, length 4096. [ 633.507561][ T12] loop: Write error at byte offset 4248577, length 4096. [ 633.517556][ T12] loop: Write error at byte offset 4772865, length 4096. [ 633.565418][T10767] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 633.690710][T10767] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 633.717692][T10767] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 633.782388][T10767] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 633.801015][T10767] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 634.346549][T10791] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1239'. [ 634.561699][T10798] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1242'. [ 634.815770][T10800] ptrace attach of "./syz-executor exec"[5777] was attempted by ""[10800] [ 636.669976][T10816] nft_compat: unsupported protocol 0 [ 636.881785][T10819] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.005777][T10819] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.059029][T10819] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.141346][T10819] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.384677][T10819] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.483445][T10819] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.534174][T10819] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.572867][T10819] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.907389][ T42] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 639.067643][ T42] usb 1-1: device descriptor read/64, error -71 [ 639.357622][ T42] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 639.527472][ T42] usb 1-1: device descriptor read/64, error -71 [ 639.664146][ T42] usb usb1-port1: attempt power cycle [ 639.965978][T10854] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[10854] [ 640.094755][ T42] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 640.178228][ T42] usb 1-1: device descriptor read/8, error -71 [ 640.299425][T10866] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.365304][T10866] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.452209][T10866] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.478157][ T42] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 640.519898][ T42] usb 1-1: device descriptor read/8, error -71 [ 640.582014][T10866] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.647734][ T42] usb usb1-port1: unable to enumerate USB device [ 640.809202][T10866] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.862247][T10866] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.976437][T10866] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.070466][T10866] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 641.592536][T10873] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1263'. [ 642.493201][T10878] lo speed is unknown, defaulting to 1000 [ 642.525464][T10880] nft_compat: unsupported protocol 0 [ 643.038504][T10890] loop6: detected capacity change from 0 to 524287999 [ 643.047811][ C0] blk_print_req_error: 69 callbacks suppressed [ 643.047825][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 643.063280][ C0] buffer_io_error: 8 callbacks suppressed [ 643.063295][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.077211][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 643.086493][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.097330][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 643.106583][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.117283][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 643.126547][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.137273][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 643.146494][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.155296][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 643.164527][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.190326][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 643.199833][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.208781][ T1122] lo_write_bvec: 20 callbacks suppressed [ 643.208796][ T1122] loop: Write error at byte offset 1, length 1024. [ 643.221293][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 643.221324][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.221431][T10890] ldm_validate_partition_table(): Disk read failed. [ 643.255505][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 643.265368][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 643.275286][ T1122] loop: Write error at byte offset 521217, length 4096. [ 643.287655][ T1122] loop: Write error at byte offset 1045505, length 4096. [ 643.290651][ T42] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 643.294905][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.315248][ T1122] loop: Write error at byte offset 1569793, length 4096. [ 643.333073][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 643.342552][ T1122] loop: Write error at byte offset 2094081, length 4096. [ 643.361233][ T1122] loop: Write error at byte offset 2618369, length 4096. [ 643.373934][ T1122] loop: Write error at byte offset 3142657, length 4096. [ 643.385080][ T1122] loop: Write error at byte offset 3666945, length 4096. [ 643.400839][ T1122] loop: Write error at byte offset 4191233, length 4096. [ 643.411148][ T1122] loop: Write error at byte offset 4715521, length 4096. [ 643.421047][T10890] Dev loop6: unable to read RDB block 0 [ 643.443522][T10890] loop6: unable to read partition table [ 643.449660][T10890] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 643.509916][ T42] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 643.534523][ T42] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 643.582287][ T42] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 643.637026][ T42] usb 1-1: config 1 interface 0 has no altsetting 0 [ 643.656977][ T42] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 643.676693][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.691998][ T42] usb 1-1: Product: ࢩ鱴ꑕ诶숔⊬ᶟ㫫롧茩샘鎸ꮼ瘗ힲᄌ嗚⣱늹⪶씻촛墀똇㵕㬅凡뉹ኵ⡜䢶୷憮벮꭪핎썵鿞尖ผ벟瘢흴Ⲽ풛֊ᚅ [ 643.747540][ T42] usb 1-1: Manufacturer: ї [ 643.757545][ T42] usb 1-1: SerialNumber: 仈吪꨷麷씿⃔৐἟㟜⭨끥⏕ᚴ庆럣굘 [ 643.796629][T10888] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 643.804217][T10888] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 644.985215][T10905] ptrace attach of "./syz-executor exec"[5777] was attempted by ""[10905] [ 645.167739][ T42] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 645.208473][ T42] usb 1-1: USB disconnect, device number 20 [ 645.314112][T10908] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 645.353242][T10908] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 645.501380][T10908] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 645.557493][T10908] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 645.628991][T10908] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 645.657982][T10908] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 645.771948][T10908] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 645.799457][T10908] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 645.991652][T10915] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1274'. [ 646.138438][T10908] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 646.213387][T10908] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 646.724882][T10908] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 646.794560][T10908] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 646.820544][T10908] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 646.847392][T10908] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 646.869129][T10908] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 646.877633][T10908] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 647.837524][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 648.047595][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 648.070418][ T8] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 648.097292][ T8] usb 3-1: config 0 has no interface number 0 [ 648.113762][ T8] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 648.157314][ T8] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 648.186841][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.221635][ T8] usb 3-1: config 0 descriptor?? [ 648.233164][ T8] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 648.433135][ T8] usb 3-1: USB disconnect, device number 14 [ 649.075714][T10942] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 649.082271][T10942] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 649.185776][T10942] vhci_hcd vhci_hcd.0: Device attached [ 649.211914][T10945] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1282'. [ 649.287359][ T5860] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 649.366656][T10943] vhci_hcd: connection closed [ 649.367063][ T1116] vhci_hcd: stop threads [ 649.387120][ T1116] vhci_hcd: release socket [ 649.392298][ T1116] vhci_hcd: disconnect device [ 649.457463][ T42] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 649.464929][ T42] usb 39-1: enqueue for inactive port 0 [ 649.496424][ T5860] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 649.538052][ T5860] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 649.573108][ T5860] usb 2-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 649.597404][ T42] vhci_hcd: vhci_device speed not set [ 649.637340][ T5860] usb 2-1: config 1 interface 0 has no altsetting 0 [ 649.715835][T10948] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1285'. [ 650.073269][ T5860] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 650.120767][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.187421][ T5860] usb 2-1: Product: ࢩ鱴ꑕ诶숔⊬ᶟ㫫롧茩샘鎸ꮼ瘗ힲᄌ嗚⣱늹⪶씻촛墀똇㵕㬅凡뉹ኵ⡜䢶୷憮벮꭪핎썵鿞尖ผ벟瘢흴Ⲽ풛֊ᚅ [ 650.573480][ T5860] usb 2-1: Manufacturer: ї [ 650.587532][ T5860] usb 2-1: SerialNumber: 仈吪꨷麷씿⃔৐἟㟜⭨끥⏕ᚴ庆럣굘 [ 650.632932][T10939] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 650.654672][T10939] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 652.015249][ T5860] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 652.107715][ T5860] usb 2-1: USB disconnect, device number 18 [ 652.366154][T10964] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.475199][T10964] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.536158][T10964] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.628504][T10964] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.840984][T10964] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.881159][T10964] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.931997][T10964] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.000839][T10964] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.203706][T10974] ptrace attach of "./syz-executor exec"[5775] was attempted by ""[10974] [ 653.305202][T10976] nft_compat: unsupported protocol 0 [ 654.125561][T10984] fuse: Bad value for 'fd' [ 655.012724][T10994] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 655.019323][T10994] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 655.177530][T10994] vhci_hcd vhci_hcd.0: Device attached [ 655.591328][T10995] vhci_hcd: connection closed [ 655.591742][ T1122] vhci_hcd: stop threads [ 655.622800][ T1122] vhci_hcd: release socket [ 655.637385][T10997] usb 37-1: new low-speed USB device number 8 using vhci_hcd [ 655.649327][ T1122] vhci_hcd: disconnect device [ 655.853664][T10997] usb 37-1: enqueue for inactive port 0 [ 655.987557][T10997] vhci_hcd: vhci_device speed not set [ 657.039546][ T5860] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 657.279942][ T5860] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 657.321164][ T5860] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 657.367290][ T5860] usb 2-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 657.393255][ T5860] usb 2-1: config 1 interface 0 has no altsetting 0 [ 657.415637][ T5860] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 657.432481][ T5860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 657.443875][ T5860] usb 2-1: Product: ࢩ鱴ꑕ诶숔⊬ᶟ㫫롧茩샘鎸ꮼ瘗ힲᄌ嗚⣱늹⪶씻촛墀똇㵕㬅凡뉹ኵ⡜䢶୷憮벮꭪핎썵鿞尖ผ벟瘢흴Ⲽ풛֊ᚅ [ 657.465873][ T5860] usb 2-1: Manufacturer: ї [ 657.470797][ T5860] usb 2-1: SerialNumber: 仈吪꨷麷씿⃔৐἟㟜⭨끥⏕ᚴ庆럣굘 [ 657.492327][T11005] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 657.513712][T11005] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 658.003328][T10990] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.012023][T10990] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.021521][T10990] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.030391][T10990] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 658.187111][T11000] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1297'. [ 658.427376][ T8712] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 658.479524][T11014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1303'. [ 658.566027][T11014] lo speed is unknown, defaulting to 1000 [ 658.587419][ T8712] usb 1-1: device descriptor read/64, error -71 [ 658.783867][T11021] fuse: Bad value for 'fd' [ 658.835917][ T5860] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 658.867341][ T8712] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 658.882596][ T5860] usb 2-1: USB disconnect, device number 19 [ 659.080497][T11026] nft_compat: unsupported protocol 0 [ 659.795853][ T8712] usb 1-1: device descriptor read/64, error -71 [ 659.927782][ T8712] usb usb1-port1: attempt power cycle [ 660.154242][T11034] ptrace attach of "./syz-executor exec"[5777] was attempted by ""[11034] [ 660.498010][ T8712] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 660.568344][ T8712] usb 1-1: device descriptor read/8, error -71 [ 660.867484][ T8712] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 660.918973][ T8712] usb 1-1: device descriptor read/8, error -71 [ 661.037814][ T8712] usb usb1-port1: unable to enumerate USB device [ 662.466079][T11052] fuse: Bad value for 'fd' [ 662.992111][T11062] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 662.998699][T11062] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 663.178127][T11062] vhci_hcd vhci_hcd.0: Device attached [ 663.195778][T11062] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1312'. [ 663.220377][T11068] nft_compat: unsupported protocol 0 [ 663.228888][ T8712] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 663.332694][T11064] vhci_hcd: connection closed [ 663.334480][ T1116] vhci_hcd: stop threads [ 663.334526][ T1116] vhci_hcd: release socket [ 663.335402][ T1116] vhci_hcd: disconnect device [ 663.377448][ T23] vhci_hcd: vhci_device speed not set [ 663.431379][ T8712] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 663.431415][ T8712] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 663.431438][ T8712] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 663.431464][ T8712] usb 1-1: config 1 interface 0 has no altsetting 0 [ 663.434851][ T8712] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 663.434873][ T8712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.434887][ T8712] usb 1-1: Product: ࢩ鱴ꑕ诶숔⊬ᶟ㫫롧茩샘鎸ꮼ瘗ힲᄌ嗚⣱늹⪶씻촛墀똇㵕㬅凡뉹ኵ⡜䢶୷憮벮꭪핎썵鿞尖ผ벟瘢흴Ⲽ풛֊ᚅ [ 663.434905][ T8712] usb 1-1: Manufacturer: ї [ 663.434916][ T8712] usb 1-1: SerialNumber: 仈吪꨷麷씿⃔৐἟㟜⭨끥⏕ᚴ庆럣굘 [ 663.439594][T11056] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 663.439702][T11056] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 664.737780][ T8712] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 664.779627][ T8712] usb 1-1: USB disconnect, device number 25 [ 666.284377][T11091] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1324'. [ 667.520171][T11101] tipc: Can't bind to reserved service type 2 [ 668.077612][ T8712] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 668.349732][ T8712] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 668.361514][ T8712] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 668.577273][ T8712] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 668.609617][ T8712] usb 1-1: config 1 interface 0 has no altsetting 0 [ 668.624809][ T8712] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 668.634136][ T8712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.645791][ T8712] usb 1-1: Product: ࢩ鱴ꑕ诶숔⊬ᶟ㫫롧茩샘鎸ꮼ瘗ힲᄌ嗚⣱늹⪶씻촛墀똇㵕㬅凡뉹ኵ⡜䢶୷憮벮꭪핎썵鿞尖ผ벟瘢흴Ⲽ풛֊ᚅ [ 668.663490][ T8712] usb 1-1: Manufacturer: ї [ 668.668394][ T8712] usb 1-1: SerialNumber: 仈吪꨷麷씿⃔৐἟㟜⭨끥⏕ᚴ庆럣굘 [ 668.708995][T11104] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 668.718519][T11104] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 668.736183][T11107] ptrace attach of "./syz-executor exec"[5782] was attempted by ""[11107] [ 669.487950][T11115] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 669.494564][T11115] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 669.543296][T11115] vhci_hcd vhci_hcd.0: Device attached [ 669.647054][T11115] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1329'. [ 669.807458][ T5860] usb 39-1: new low-speed USB device number 7 using vhci_hcd [ 669.839648][T11116] vhci_hcd: connection reset by peer [ 669.857360][ T1136] vhci_hcd: stop threads [ 669.899296][ T1136] vhci_hcd: release socket [ 669.927475][ T1136] vhci_hcd: disconnect device [ 670.071920][ T8712] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 670.182591][ T8712] usb 1-1: USB disconnect, device number 26 [ 670.633888][T11122] nft_compat: unsupported protocol 0 [ 671.739911][ T9666] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 671.830031][ T5781] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 672.157464][ T2133] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 672.487713][ T2133] usb 3-1: device descriptor read/64, error -71 [ 672.767459][ T2133] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 673.073354][ T2133] usb 3-1: device descriptor read/64, error -71 [ 673.197531][ T2133] usb usb3-port1: attempt power cycle [ 673.667619][ T2133] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 673.721431][ T2133] usb 3-1: device descriptor read/8, error -71 [ 674.047464][ T2133] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 674.099176][ T2133] usb 3-1: device descriptor read/8, error -71 [ 674.238971][ T2133] usb usb3-port1: unable to enumerate USB device [ 674.707352][T10997] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 674.901777][T10997] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 674.939205][ T5860] vhci_hcd: vhci_device speed not set [ 674.947430][T10997] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 674.957649][T10997] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 674.972645][T10997] usb 4-1: config 1 interface 0 has no altsetting 0 [ 674.983713][T10997] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 674.993750][T10997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.002507][T10997] usb 4-1: Product: ࢩ鱴ꑕ诶숔⊬ᶟ㫫롧茩샘鎸ꮼ瘗ힲᄌ嗚⣱늹⪶씻촛墀똇㵕㬅凡뉹ኵ⡜䢶୷憮벮꭪핎썵鿞尖ผ벟瘢흴Ⲽ풛֊ᚅ [ 675.021470][T10997] usb 4-1: Manufacturer: ї [ 675.026181][T10997] usb 4-1: SerialNumber: 仈吪꨷麷씿⃔৐἟㟜⭨끥⏕ᚴ庆럣굘 [ 675.039926][T11151] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 675.050605][T11151] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 675.293113][T11151] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 675.498717][T11162] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.503903][T10997] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 675.563263][T10997] usb 4-1: USB disconnect, device number 22 [ 675.697057][T11162] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.803733][T11162] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.881308][T11162] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.974194][T11166] ptrace attach of "./syz-executor exec"[5782] was attempted by ""[11166] [ 676.152692][T11162] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.248788][T11162] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.338024][T11162] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.431361][T11162] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.952796][ T5781] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 676.979146][ T1116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 677.002416][ T1116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.250402][ T9666] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 678.739007][T11190] syz.1.1348[11190]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 679.197450][ T8712] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 679.389625][ T8712] usb 3-1: config 0 has no interfaces? [ 679.447773][ T8712] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 679.457468][ T8712] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 679.465516][ T8712] usb 3-1: Manufacturer: syz [ 679.502009][ T8712] usb 3-1: config 0 descriptor?? [ 679.734191][ T8712] usb 3-1: USB disconnect, device number 19 [ 679.964322][T11198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1352'. [ 683.511314][ T9666] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 683.722112][ T5781] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 684.322194][T11230] ptrace attach of "./syz-executor exec"[5771] was attempted by ""[11230] [ 685.007404][ T5860] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 685.199526][ T5860] usb 4-1: config 0 has no interfaces? [ 685.206590][ T5860] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 685.282505][ T5860] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 685.342624][ T5860] usb 4-1: Manufacturer: syz [ 685.360293][ T5860] usb 4-1: config 0 descriptor?? [ 685.611279][ T8712] usb 4-1: USB disconnect, device number 23 [ 685.909190][T11244] 9pnet_fd: Insufficient options for proto=fd [ 686.067942][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.074348][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.366744][T11264] IPv6: Can't replace route, no match found [ 689.643630][T11267] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1370'. [ 690.547797][ T5781] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 690.604697][ T9666] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 690.739104][T11281] 9pnet_fd: Insufficient options for proto=fd [ 691.387765][T11286] fuse: Bad value for 'fd' [ 691.549214][T11288] IPVS: set_ctl: invalid protocol: 59 172.20.20.187:20003 [ 692.710095][T11298] ptrace attach of "./syz-executor exec"[5777] was attempted by ""[11298] [ 693.738337][T11304] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1380'. [ 693.955961][T11312] 9pnet_fd: Insufficient options for proto=fd [ 694.609868][T11318] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1384'. [ 695.471440][T11320] fuse: Bad value for 'fd' [ 695.652363][T11322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 696.016343][T11322] lo speed is unknown, defaulting to 1000 [ 698.511745][T11345] 9pnet_fd: Insufficient options for proto=fd [ 699.172924][T11349] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1392'. [ 700.084789][T11361] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1394'. [ 700.418362][ T9337] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 700.813400][ T9337] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.892399][ T9337] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 700.944292][ T9337] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 700.973899][ T9337] usb 1-1: Manufacturer: syz [ 701.175119][ T9337] usb 1-1: config 0 descriptor?? [ 701.308294][ T9666] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 702.589153][T10997] usb 1-1: USB disconnect, device number 27 [ 702.716180][T11371] 8021q: adding VLAN 0 to HW filter on device bond1 [ 702.960062][T11380] nft_compat: unsupported protocol 0 [ 703.520567][T11382] 9pnet_fd: Insufficient options for proto=fd [ 704.005870][T11371] bond1 (unregistering): Released all slaves [ 704.205786][T11392] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1402'. [ 705.558821][ T9666] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 705.776877][ T5781] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 706.466157][T11408] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1405'. [ 708.876582][T11420] 9pnet_fd: Insufficient options for proto=fd [ 709.521880][T11426] nft_compat: unsupported protocol 0 [ 710.269929][T11428] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1412'. [ 710.297155][T11432] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 710.622273][T11440] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1415'. [ 712.743468][ T27] audit: type=1326 audit(1750849084.344:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11454 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 712.767442][T11457] 9pnet_fd: Insufficient options for proto=fd [ 712.948588][ T27] audit: type=1326 audit(1750849084.344:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11454 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 713.002656][T11452] lo speed is unknown, defaulting to 1000 [ 713.232432][ T27] audit: type=1326 audit(1750849084.534:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11454 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 713.373874][ T27] audit: type=1326 audit(1750849084.544:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11454 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 713.462301][ T27] audit: type=1326 audit(1750849084.544:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11454 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 713.485096][ T27] audit: type=1326 audit(1750849085.064:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11454 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 713.507810][T11464] netlink: 'syz.0.1421': attribute type 10 has an invalid length. [ 713.516727][T11464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.568211][ T27] audit: type=1326 audit(1750849085.064:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11454 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 713.611789][T11464] team0: Port device bond0 added [ 713.781525][ T27] audit: type=1326 audit(1750849085.064:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11454 comm="syz.2.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 716.879341][T11490] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1426'. [ 717.502698][T11494] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1427'. [ 721.083360][T11511] netlink: 'syz.2.1433': attribute type 10 has an invalid length. [ 721.147751][T11511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.470693][T11511] team0: Port device bond0 added [ 721.921510][T11523] lo speed is unknown, defaulting to 1000 [ 722.782379][T11530] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1437'. [ 722.797340][T11530] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1437'. [ 726.033714][T11560] netlink: 'syz.1.1446': attribute type 10 has an invalid length. [ 726.058660][T11560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 726.115302][T11560] team0: Port device bond0 added [ 726.193245][T11565] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1447'. [ 726.209582][T11565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1447'. [ 727.477942][ T5781] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 728.719246][T11577] lo speed is unknown, defaulting to 1000 [ 730.959763][T11606] nft_compat: unsupported protocol 0 [ 735.701715][T11639] lo speed is unknown, defaulting to 1000 [ 736.472809][T11646] nft_compat: unsupported protocol 0 [ 738.396927][T11670] random: crng reseeded on system resumption [ 740.717154][ T27] audit: type=1326 audit(1750849111.634:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11669 comm="syz.2.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7ffc0000 [ 740.795248][ T27] audit: type=1326 audit(1750849111.634:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11669 comm="syz.2.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7ffc0000 [ 740.990332][ T27] audit: type=1326 audit(1750849111.894:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11669 comm="syz.2.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f612ab8e929 code=0x7ffc0000 [ 741.107399][ T27] audit: type=1326 audit(1750849111.894:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11669 comm="syz.2.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7ffc0000 [ 741.176817][ T27] audit: type=1326 audit(1750849111.894:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11669 comm="syz.2.1479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7ffc0000 [ 741.462864][T11682] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1481'. [ 741.490369][T11682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1481'. [ 742.089845][T11685] block device autoloading is deprecated and will be removed. [ 742.104780][T11690] nft_compat: unsupported protocol 0 [ 743.763083][T11701] lo speed is unknown, defaulting to 1000 [ 747.369729][ T23] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 747.420954][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.427801][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.571236][ T23] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 747.607261][ T23] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 747.641275][ T23] usb 2-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 747.677387][ T23] usb 2-1: config 1 interface 0 has no altsetting 0 [ 747.687098][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 747.702237][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.717286][ T23] usb 2-1: Product: ࢩ鱴ꑕ诶숔⊬ᶟ㫫롧茩샘鎸ꮼ瘗ힲᄌ嗚⣱늹⪶씻촛墀똇㵕㬅凡뉹ኵ⡜䢶୷憮벮꭪핎썵鿞尖ผ벟瘢흴Ⲽ풛֊ᚅ [ 747.797340][ T23] usb 2-1: Manufacturer: ї [ 747.823667][ T23] usb 2-1: SerialNumber: 仈吪꨷麷씿⃔৐἟㟜⭨끥⏕ᚴ庆럣굘 [ 748.011972][T11725] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 748.019558][T11725] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 749.377684][ T23] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 749.406303][ T23] usb 2-1: USB disconnect, device number 20 [ 751.159010][T11745] lo speed is unknown, defaulting to 1000 [ 751.431113][T11750] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1495'. [ 751.847377][ T8712] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 752.169795][ T8712] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.220710][ T8712] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 752.581784][T11757] lo speed is unknown, defaulting to 1000 [ 752.994022][ T8712] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 753.009834][ T8712] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 753.023651][ T8712] usb 2-1: Manufacturer: syz [ 753.040097][ T8712] usb 2-1: config 0 descriptor?? [ 753.390663][ T8712] usb 2-1: USB disconnect, device number 21 [ 754.737611][ T8712] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 754.891738][ T27] audit: type=1326 audit(1750849126.494:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 754.922895][ T27] audit: type=1326 audit(1750849126.494:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 754.953738][ T8712] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 754.966889][ T8712] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 754.991111][ T8712] usb 2-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 755.011940][ T8712] usb 2-1: config 1 interface 0 has no altsetting 0 [ 755.024988][ T8712] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 755.037827][ T8712] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.046485][ T8712] usb 2-1: Product: ࢩ鱴ꑕ诶숔⊬ᶟ㫫롧茩샘鎸ꮼ瘗ힲᄌ嗚⣱늹⪶씻촛墀똇㵕㬅凡뉹ኵ⡜䢶୷憮벮꭪핎썵鿞尖ผ벟瘢흴Ⲽ풛֊ᚅ [ 755.081025][ T8712] usb 2-1: Manufacturer: ї [ 755.085604][ T8712] usb 2-1: SerialNumber: 仈吪꨷麷씿⃔৐἟㟜⭨끥⏕ᚴ庆럣굘 [ 755.119722][T11774] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 755.138165][ T27] audit: type=1326 audit(1750849126.734:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 755.198672][T11774] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 755.217364][ T27] audit: type=1326 audit(1750849126.734:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 755.665064][ T27] audit: type=1326 audit(1750849127.204:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11778 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 755.819718][T11789] lo speed is unknown, defaulting to 1000 [ 756.913529][ T8712] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 756.937516][T11793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1508'. [ 756.999074][ T8712] usb 2-1: USB disconnect, device number 22 [ 758.587461][ T8712] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 758.715683][T11815] lo speed is unknown, defaulting to 1000 [ 758.881453][ T8712] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.944139][ T8712] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 759.048647][ T8712] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 759.085899][ T8712] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 759.150492][ T8712] usb 1-1: Manufacturer: syz [ 759.175497][ T8712] usb 1-1: config 0 descriptor?? [ 759.402372][ T23] usb 1-1: USB disconnect, device number 28 [ 759.932453][ T27] audit: type=1326 audit(1750849131.524:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11816 comm="syz.1.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 760.087016][ T27] audit: type=1326 audit(1750849131.524:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11816 comm="syz.1.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 760.182517][ T27] audit: type=1326 audit(1750849131.634:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11816 comm="syz.1.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 760.430143][ T27] audit: type=1326 audit(1750849131.634:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11816 comm="syz.1.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 762.098328][ T27] audit: type=1326 audit(1750849131.634:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11816 comm="syz.1.1516" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 762.343948][T11836] lo speed is unknown, defaulting to 1000 [ 762.785502][T11843] lo speed is unknown, defaulting to 1000 [ 763.325332][ T2133] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 763.590238][ T2133] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 763.612542][ T2133] usb 3-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 763.630406][ T2133] usb 3-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 763.643677][ T2133] usb 3-1: config 1 interface 0 has no altsetting 0 [ 763.654064][ T2133] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 763.665573][ T2133] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.684917][ T2133] usb 3-1: Product: ࢩ鱴ꑕ诶숔⊬ᶟ㫫롧茩샘鎸ꮼ瘗ힲᄌ嗚⣱늹⪶씻촛墀똇㵕㬅凡뉹ኵ⡜䢶୷憮벮꭪핎썵鿞尖ผ벟瘢흴Ⲽ풛֊ᚅ [ 763.707571][ T2133] usb 3-1: Manufacturer: ї [ 763.712139][ T2133] usb 3-1: SerialNumber: 仈吪꨷麷씿⃔৐἟㟜⭨끥⏕ᚴ庆럣굘 [ 763.736512][T11846] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 763.754168][T11846] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 765.132218][ T2133] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 765.194032][ T2133] usb 3-1: USB disconnect, device number 20 [ 766.163486][T11870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1526'. [ 766.603493][ T27] audit: type=1326 audit(1750849138.204:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11871 comm="syz.1.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 767.127320][ T27] audit: type=1326 audit(1750849138.624:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11871 comm="syz.1.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 767.220594][ T27] audit: type=1326 audit(1750849138.624:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11871 comm="syz.1.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 767.307345][ T27] audit: type=1326 audit(1750849138.634:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11871 comm="syz.1.1527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 768.054640][T11888] lo speed is unknown, defaulting to 1000 [ 768.309790][T11892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1531'. [ 769.357473][ T9337] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 769.418443][T11902] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1533'. [ 770.501395][ T9337] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 770.542124][ T9337] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 770.561810][ T9337] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 770.576452][ T9337] usb 1-1: config 1 interface 0 has no altsetting 0 [ 770.606941][ T9337] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 770.622193][ T9337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.641778][T11909] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1536'. [ 770.651573][ T9337] usb 1-1: Product: ࢩ鱴ꑕ诶숔⊬ᶟ㫫롧茩샘鎸ꮼ瘗ힲᄌ嗚⣱늹⪶씻촛墀똇㵕㬅凡뉹ኵ⡜䢶୷憮벮꭪핎썵鿞尖ผ벟瘢흴Ⲽ풛֊ᚅ [ 770.704837][ T9337] usb 1-1: Manufacturer: ї [ 770.721979][ T9337] usb 1-1: SerialNumber: 仈吪꨷麷씿⃔৐἟㟜⭨끥⏕ᚴ庆럣굘 [ 770.740280][T11899] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 770.748437][T11899] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 771.330945][ T27] audit: type=1326 audit(1750849142.754:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.2.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 771.355807][ T27] audit: type=1326 audit(1750849142.764:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.2.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 771.397350][ T27] audit: type=1326 audit(1750849142.954:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.2.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 771.562844][ T9337] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 771.663372][ T9337] usb 1-1: USB disconnect, device number 29 [ 771.792833][ T27] audit: type=1326 audit(1750849143.394:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.2.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 771.825733][ T27] audit: type=1326 audit(1750849143.394:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.2.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 771.881657][ T27] audit: type=1326 audit(1750849143.394:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11913 comm="syz.2.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 773.482593][T11934] lo speed is unknown, defaulting to 1000 [ 774.194940][T11948] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1545'. [ 775.026023][T11943] lo speed is unknown, defaulting to 1000 [ 775.397615][ T27] audit: type=1326 audit(1750849146.984:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dcb8e929 code=0x7fc00000 [ 775.592938][ T27] audit: type=1326 audit(1750849146.984:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dcb8e929 code=0x7fc00000 [ 775.674796][ T27] audit: type=1326 audit(1750849147.134:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dcb8e929 code=0x7fc00000 [ 775.747322][ T27] audit: type=1326 audit(1750849147.134:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dcb8e929 code=0x7fc00000 [ 776.107299][ T27] audit: type=1326 audit(1750849147.704:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dcb8e929 code=0x7fc00000 [ 776.269513][ T27] audit: type=1326 audit(1750849147.704:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f98dcb8e929 code=0x7fc00000 [ 776.372360][ T27] audit: type=1326 audit(1750849147.704:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11949 comm="syz.3.1546" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dcb8e929 code=0x7fc00000 [ 776.647517][ T8712] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 776.883821][ T8712] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 776.904681][ T8712] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 776.939222][ T8712] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 776.992291][ T8712] usb 4-1: config 1 interface 0 has no altsetting 0 [ 777.184056][ T8712] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 777.197229][ T8712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.227330][ T8712] usb 4-1: Product: syz [ 777.231586][ T8712] usb 4-1: Manufacturer: syz [ 777.242146][ T8712] usb 4-1: SerialNumber: syz [ 777.271007][T11955] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 777.293014][T11955] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 777.928125][ T8712] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 777.990974][ T8712] usb 4-1: USB disconnect, device number 24 [ 779.487779][T11981] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1553'. [ 779.619071][T11984] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1554'. [ 780.707783][ T27] audit: type=1326 audit(1750849152.194:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.1.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 780.819415][ T27] audit: type=1326 audit(1750849152.194:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.1.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 780.842154][ T27] audit: type=1326 audit(1750849152.414:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.1.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 780.888198][ T27] audit: type=1326 audit(1750849152.414:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.1.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 781.225115][ T27] audit: type=1326 audit(1750849152.824:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.1.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 781.278718][ T27] audit: type=1326 audit(1750849152.824:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.1.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 781.333694][ T27] audit: type=1326 audit(1750849152.824:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11986 comm="syz.1.1555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 781.506891][T11998] team0: Port device bond0 removed [ 781.747303][ T2133] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 781.762675][T12002] netlink: 'syz.2.1559': attribute type 10 has an invalid length. [ 781.833523][T12002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 781.842988][T12002] team0: Port device bond0 added [ 781.948992][ T2133] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 782.017008][ T2133] usb 2-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 782.037629][ T2133] usb 2-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 782.050903][ T2133] usb 2-1: config 1 interface 0 has no altsetting 0 [ 782.063127][ T2133] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 782.075020][ T2133] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.097853][ T2133] usb 2-1: Product: syz [ 782.102077][ T2133] usb 2-1: Manufacturer: syz [ 782.121352][ T2133] usb 2-1: SerialNumber: syz [ 782.152069][T12004] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 782.167859][T12004] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 783.491340][ T2133] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 783.542356][ T2133] usb 2-1: USB disconnect, device number 23 [ 783.940173][T12017] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1563'. [ 784.404600][T12029] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1567'. [ 785.648546][ T27] audit: type=1326 audit(1750849157.044:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.2.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 785.673075][ T27] audit: type=1326 audit(1750849157.044:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.2.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 785.695704][ T27] audit: type=1326 audit(1750849157.274:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.2.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 786.191873][ T27] audit: type=1326 audit(1750849157.794:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.2.1569" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f612ab8e929 code=0x7fc00000 [ 786.735149][T12049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1573'. [ 787.277609][ T8712] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 787.511754][ T8712] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 787.542222][ T8712] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 787.572748][ T8712] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 787.616274][ T8712] usb 1-1: config 1 interface 0 has no altsetting 0 [ 787.645747][ T8712] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 787.665210][ T8712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.683575][ T8712] usb 1-1: Product: syz [ 787.693695][ T8712] usb 1-1: Manufacturer: syz [ 787.707480][ T8712] usb 1-1: SerialNumber: syz [ 787.729252][T12053] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 787.787604][T12053] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 789.127497][ T8712] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 789.149506][ T8712] usb 1-1: USB disconnect, device number 30 [ 789.455194][ T27] audit: type=1326 audit(1750849161.054:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12068 comm="syz.3.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dcb8e929 code=0x7fc00000 [ 789.705127][ T27] audit: type=1326 audit(1750849161.054:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12068 comm="syz.3.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dcb8e929 code=0x7fc00000 [ 789.904593][ T27] audit: type=1326 audit(1750849161.224:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12068 comm="syz.3.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dcb8e929 code=0x7fc00000 [ 789.976461][ T27] audit: type=1326 audit(1750849161.234:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12068 comm="syz.3.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dcb8e929 code=0x7fc00000 [ 790.181742][ T27] audit: type=1326 audit(1750849161.784:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12068 comm="syz.3.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dcb8e929 code=0x7fc00000 [ 790.279570][ T27] audit: type=1326 audit(1750849161.784:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12068 comm="syz.3.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f98dcb8e929 code=0x7fc00000 [ 790.347277][ T27] audit: type=1326 audit(1750849161.784:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12068 comm="syz.3.1580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dcb8e929 code=0x7fc00000 [ 791.600019][ T5781] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 791.748634][ T9666] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 792.440037][T12093] lo speed is unknown, defaulting to 1000 [ 793.609717][T12098] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 793.616271][T12098] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 793.714304][T12098] vhci_hcd vhci_hcd.0: Device attached [ 793.808299][T12101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1585'. [ 793.987327][ T2133] usb 35-1: new low-speed USB device number 12 using vhci_hcd [ 794.077289][T12099] vhci_hcd: connection reset by peer [ 794.097825][ T39] vhci_hcd: stop threads [ 794.102148][ T39] vhci_hcd: release socket [ 794.123373][ T39] vhci_hcd: disconnect device [ 797.147279][ T55] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 797.414776][ T55] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 797.463005][ T55] usb 1-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 797.507529][ T55] usb 1-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 797.529733][ T55] usb 1-1: config 1 interface 0 has no altsetting 0 [ 797.550467][ T55] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 797.573682][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.582866][ T55] usb 1-1: Product: ࢩ鱴ꑕ诶숔⊬ᶟ㫫롧茩샘鎸ꮼ瘗ힲᄌ嗚⣱늹⪶씻촛墀똇㵕㬅凡뉹ኵ⡜䢶୷憮벮꭪핎썵鿞尖ผ벟瘢흴Ⲽ풛֊ᚅ [ 797.607695][ T55] usb 1-1: Manufacturer: ї [ 797.612373][ T55] usb 1-1: SerialNumber: 仈吪꨷麷씿⃔৐἟㟜⭨끥⏕ᚴ庆럣굘 [ 797.660202][T12118] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 797.677559][T12118] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 797.731772][ T27] audit: type=1326 audit(1750849169.334:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 797.781680][ T27] audit: type=1326 audit(1750849169.334:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 797.968376][ T27] audit: type=1326 audit(1750849169.574:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 798.048899][ T27] audit: type=1326 audit(1750849169.574:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 798.527372][ T27] audit: type=1326 audit(1750849170.014:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 798.672588][ T27] audit: type=1326 audit(1750849170.014:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 798.694918][ C1] vkms_vblank_simulate: vblank timer overrun [ 798.969729][ T27] audit: type=1326 audit(1750849170.014:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12120 comm="syz.1.1592" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 798.992105][ C1] vkms_vblank_simulate: vblank timer overrun [ 799.211321][ T55] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 799.247661][ T2133] vhci_hcd: vhci_device speed not set [ 799.274503][ T55] usb 1-1: USB disconnect, device number 31 [ 800.453084][T12147] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1597'. [ 803.468006][ T27] audit: type=1326 audit(1750849174.954:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12158 comm="syz.3.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dcb8e929 code=0x7fc00000 [ 803.571103][ T27] audit: type=1326 audit(1750849174.954:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12158 comm="syz.3.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dcb8e929 code=0x7fc00000 [ 803.605475][ T27] audit: type=1326 audit(1750849175.194:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12158 comm="syz.3.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dcb8e929 code=0x7fc00000 [ 804.039388][ T27] audit: type=1326 audit(1750849175.644:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12158 comm="syz.3.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dcb8e929 code=0x7fc00000 [ 804.134650][ T27] audit: type=1326 audit(1750849175.644:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12158 comm="syz.3.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f98dcb8e929 code=0x7fc00000 [ 804.248462][ T27] audit: type=1326 audit(1750849175.644:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12158 comm="syz.3.1602" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98dcb8e929 code=0x7fc00000 [ 804.592031][T12174] lo speed is unknown, defaulting to 1000 [ 804.608007][ T9337] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 804.829373][ T9337] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 32 [ 804.865107][ T9337] usb 4-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 804.942499][ T9337] usb 4-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 804.973479][ T9337] usb 4-1: config 1 interface 0 has no altsetting 0 [ 804.990100][ T9337] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 804.999630][ T9337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.017994][ T9337] usb 4-1: Product: ࢩ鱴ꑕ诶숔⊬ᶟ㫫롧茩샘鎸ꮼ瘗ힲᄌ嗚⣱늹⪶씻촛墀똇㵕㬅凡뉹ኵ⡜䢶୷憮벮꭪핎썵鿞尖ผ벟瘢흴Ⲽ풛֊ᚅ [ 805.036668][ T9337] usb 4-1: Manufacturer: ї [ 805.102074][T12179] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1607'. [ 805.884487][ T9337] usb 4-1: SerialNumber: 仈吪꨷麷씿⃔৐἟㟜⭨끥⏕ᚴ庆럣굘 [ 805.937767][T12170] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 805.947622][T12170] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 808.016770][ T9337] cdc_ether: probe of 4-1:1.0 failed with error -71 [ 808.127660][ T9337] usb 4-1: USB disconnect, device number 25 [ 808.739106][ T27] audit: type=1326 audit(1750849180.344:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12195 comm="syz.1.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 808.916935][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.929589][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.982880][ T27] audit: type=1326 audit(1750849180.344:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12195 comm="syz.1.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 809.005842][ T27] audit: type=1326 audit(1750849180.514:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12195 comm="syz.1.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 809.030945][ T27] audit: type=1326 audit(1750849180.514:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12195 comm="syz.1.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 809.453446][ T27] audit: type=1326 audit(1750849180.964:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12195 comm="syz.1.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 809.505478][ T27] audit: type=1326 audit(1750849180.964:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12195 comm="syz.1.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 809.583931][ T27] audit: type=1326 audit(1750849180.964:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12195 comm="syz.1.1612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f53be98e929 code=0x7fc00000 [ 809.966494][T12208] lo speed is unknown, defaulting to 1000 [ 813.440916][T12246] lo speed is unknown, defaulting to 1000 [ 814.471969][T12255] lo speed is unknown, defaulting to 1000 [ 815.094791][T12264] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1629'. [ 816.439493][T12273] ksmbd: Unknown IPC event: 6, ignore. [ 818.270386][T12284] lo speed is unknown, defaulting to 1000 [ 818.934273][T12293] lo speed is unknown, defaulting to 1000 [ 820.431255][T12308] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1641'. [ 824.520751][T12333] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1650'. [ 825.622502][T12334] lo speed is unknown, defaulting to 1000 [ 829.881989][T12369] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1661'. [ 829.939877][T12370] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1659'. [ 836.370092][T12405] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1671'. [ 837.377507][T12408] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1673'. [ 843.488944][T12435] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1682'. [ 844.477967][T12439] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1684'. [ 847.491867][T12465] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.1692'. [ 849.041054][T12472] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 849.051351][T12472] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 849.085187][T12472] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 849.108983][T12472] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 849.116911][T12472] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 849.125415][T12472] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 849.405380][T12476] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1695'. [ 849.478984][T12471] lo speed is unknown, defaulting to 1000 [ 849.629634][ T11] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.879281][ T11] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.059672][ T11] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.196317][T12489] fuse: Bad value for 'fd' [ 850.197115][ T11] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 851.373501][ T9666] Bluetooth: hci4: command tx timeout [ 851.890154][T12471] chnl_net:caif_netlink_parms(): no params data found [ 852.598771][T12471] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.605969][T12471] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.652527][T12471] bridge_slave_0: entered allmulticast mode [ 852.683960][T12471] bridge_slave_0: entered promiscuous mode [ 852.814858][T12471] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.857977][T12471] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.908494][T12471] bridge_slave_1: entered allmulticast mode [ 852.915980][T12471] bridge_slave_1: entered promiscuous mode [ 853.278275][T12471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 853.407839][T12523] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1705'. [ 853.417812][ T9666] Bluetooth: hci4: command tx timeout [ 853.439469][T12471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 853.835668][T12471] team0: Port device team_slave_0 added [ 854.009275][T12471] team0: Port device team_slave_1 added [ 855.476074][T12471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 855.497427][ T9666] Bluetooth: hci4: command tx timeout [ 855.524351][T12471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 855.598493][T12471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 855.978155][T12471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 855.985146][T12471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 856.057275][T12471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.455971][T12471] hsr_slave_0: entered promiscuous mode [ 856.496271][T12471] hsr_slave_1: entered promiscuous mode [ 856.557447][T12471] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 856.565069][T12471] Cannot create hsr debugfs directory [ 856.670289][T12549] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1713'. [ 856.740909][ T11] hsr_slave_0: left promiscuous mode [ 856.750007][ T11] hsr_slave_1: left promiscuous mode [ 856.829630][ T11] veth1_macvtap: left promiscuous mode [ 856.835795][ T11] veth0_macvtap: left promiscuous mode [ 856.867411][ T11] veth1_vlan: left promiscuous mode [ 856.873165][ T11] veth0_vlan: left promiscuous mode [ 856.921659][T12556] fuse: Bad value for 'fd' [ 857.577377][ T9666] Bluetooth: hci4: command tx timeout [ 859.850967][T12584] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1722'. [ 861.209614][ T11] team0 (unregistering): Port device bond0 removed [ 861.480317][ T11] bond0 (unregistering): Released all slaves [ 862.386234][T12471] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 862.429450][T12471] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 862.458852][T12471] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 862.509589][T12471] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 862.513950][ T11] IPVS: stop unused estimator thread 0... [ 862.865448][T12471] 8021q: adding VLAN 0 to HW filter on device bond0 [ 863.072996][T12471] 8021q: adding VLAN 0 to HW filter on device team0 [ 863.145657][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.152892][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 863.437435][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.444594][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 864.125344][T12471] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 865.111497][T12471] veth0_vlan: entered promiscuous mode [ 865.158880][T12471] veth1_vlan: entered promiscuous mode [ 865.273620][T12471] veth0_macvtap: entered promiscuous mode [ 865.302668][T12471] veth1_macvtap: entered promiscuous mode [ 865.349330][T12471] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 865.375561][T12471] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 865.408285][T12471] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.424570][T12471] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.433572][T12471] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.442674][T12471] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.721204][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.741696][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.811274][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.822194][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 867.054204][T12682] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 867.060804][T12682] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 867.150377][T12682] vhci_hcd vhci_hcd.0: Device attached [ 867.374771][T12683] vhci_hcd: connection closed [ 867.375100][ T12] vhci_hcd: stop threads [ 867.407662][ T12] vhci_hcd: release socket [ 867.420777][ T5860] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 867.424533][ T12] vhci_hcd: disconnect device [ 867.454217][ T5860] usb 41-1: enqueue for inactive port 0 [ 867.577398][ T5860] vhci_hcd: vhci_device speed not set [ 870.302489][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.308979][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.344725][T12766] fuseblk: Bad value for 'fd' [ 873.802811][T12762] syz.4.1744 (12762) used greatest stack depth: 17960 bytes left [ 874.302598][T12777] block device autoloading is deprecated and will be removed. [ 876.875208][T12472] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 876.878333][T12472] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 876.879616][T12472] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 876.881582][T12472] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 876.895766][T12472] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 876.897577][T12472] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 877.006078][T12795] tty tty3: ldisc open failed (-12), clearing slot 2 [ 877.091000][T12797] lo speed is unknown, defaulting to 1000 [ 879.981450][T12472] Bluetooth: hci1: command tx timeout [ 880.070557][T12808] block nbd0: shutting down sockets [ 880.242144][ T8779] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.364428][ T8779] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.520788][ T8779] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.903654][ T8779] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.057511][T12472] Bluetooth: hci1: command tx timeout [ 882.283035][T12797] chnl_net:caif_netlink_parms(): no params data found [ 882.794781][ T9666] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 882.804573][ T9666] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 882.812967][ T9666] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 882.821490][ T9666] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 882.829412][ T9666] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 882.836713][ T9666] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 883.465384][T12832] lo speed is unknown, defaulting to 1000 [ 883.531588][T12797] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.562392][T12797] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.582777][T12797] bridge_slave_0: entered allmulticast mode [ 883.619713][T12797] bridge_slave_0: entered promiscuous mode [ 883.668407][T12797] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.679791][T12797] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.707478][T12797] bridge_slave_1: entered allmulticast mode [ 883.716169][T12797] bridge_slave_1: entered promiscuous mode [ 884.152582][T12472] Bluetooth: hci1: command tx timeout [ 884.947690][T12472] Bluetooth: hci0: command tx timeout [ 885.170608][T12797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.224957][T12797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.642228][T12797] team0: Port device team_slave_0 added [ 886.227382][T12472] Bluetooth: hci1: command tx timeout [ 886.358635][T12797] team0: Port device team_slave_1 added [ 886.716709][T12797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.757277][T12797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.862145][T12797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.025335][T12472] Bluetooth: hci0: command tx timeout [ 887.180823][T12797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.226035][T12797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.324352][T12797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.128724][T12472] Bluetooth: hci0: command tx timeout [ 889.643904][T12797] hsr_slave_0: entered promiscuous mode [ 889.665867][T12797] hsr_slave_1: entered promiscuous mode [ 889.838204][T12797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 889.845829][T12797] Cannot create hsr debugfs directory [ 890.267960][T12472] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 890.278643][T12472] CPU: 1 PID: 12472 Comm: kworker/u5:1 Not tainted 6.6.94-syzkaller #0 [ 890.286903][T12472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 890.296967][T12472] Workqueue: hci4 hci_rx_work [ 890.301671][T12472] Call Trace: [ 890.304958][T12472] [ 890.307901][T12472] dump_stack_lvl+0x16c/0x230 [ 890.312601][T12472] ? show_regs_print_info+0x20/0x20 [ 890.317816][T12472] ? load_image+0x3b0/0x3b0 [ 890.322344][T12472] sysfs_create_dir_ns+0x256/0x280 [ 890.327469][T12472] ? hci_rx_work+0x43a/0xd80 [ 890.332079][T12472] ? sysfs_warn_dup+0xa0/0xa0 [ 890.336784][T12472] ? do_raw_spin_unlock+0x121/0x230 [ 890.342028][T12472] kobject_add_internal+0x6b8/0xc70 [ 890.347296][T12472] kobject_add+0x156/0x220 [ 890.351858][T12472] ? __rwlock_init+0x150/0x150 [ 890.356676][T12472] ? kobject_init+0x1e0/0x1e0 [ 890.361400][T12472] ? _raw_spin_unlock+0x28/0x40 [ 890.366306][T12472] ? get_device_parent+0x366/0x390 [ 890.371463][T12472] device_add+0x408/0xc20 [ 890.375836][T12472] hci_conn_add_sysfs+0xd5/0x1e0 [ 890.380820][T12472] le_conn_complete_evt+0xc37/0x1220 [ 890.386141][T12472] ? hci_event_packet+0x4a7/0x1210 [ 890.391316][T12472] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 890.397592][T12472] ? __copy_skb_header+0xa7/0x550 [ 890.402655][T12472] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 890.408364][T12472] ? skb_pull_data+0xfb/0x200 [ 890.413101][T12472] hci_le_conn_complete_evt+0x187/0x440 [ 890.418696][T12472] ? hci_remote_host_features_evt+0x160/0x160 [ 890.424808][T12472] hci_event_packet+0x795/0x1210 [ 890.429800][T12472] ? bis_list+0x290/0x290 [ 890.434174][T12472] ? lockdep_hardirqs_on+0x98/0x150 [ 890.439410][T12472] ? hci_send_to_monitor+0xd7/0x4f0 [ 890.444646][T12472] hci_rx_work+0x43a/0xd80 [ 890.449126][T12472] ? process_scheduled_works+0x957/0x15b0 [ 890.454887][T12472] process_scheduled_works+0xa45/0x15b0 [ 890.460503][T12472] ? assign_work+0x400/0x400 [ 890.465138][T12472] ? assign_work+0x39e/0x400 [ 890.469773][T12472] worker_thread+0xa55/0xfc0 [ 890.474400][T12472] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 890.480336][T12472] ? _raw_spin_unlock+0x40/0x40 [ 890.485227][T12472] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 890.491288][T12472] kthread+0x2fa/0x390 [ 890.495405][T12472] ? pr_cont_work+0x560/0x560 [ 890.500135][T12472] ? kthread_blkcg+0xd0/0xd0 [ 890.504766][T12472] ret_from_fork+0x48/0x80 [ 890.509258][T12472] ? kthread_blkcg+0xd0/0xd0 [ 890.513893][T12472] ret_from_fork_asm+0x11/0x20 [ 890.518722][T12472] [ 890.559192][T12472] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 890.575687][T12472] Bluetooth: hci4: failed to register connection device [ 891.237628][T12472] Bluetooth: hci0: command tx timeout [ 891.707226][ T8779] hsr_slave_0: left promiscuous mode [ 891.720919][ T8779] hsr_slave_1: left promiscuous mode [ 891.953839][ T8779] veth1_macvtap: left promiscuous mode [ 891.972384][ T8779] veth1_vlan: left promiscuous mode [ 891.987987][ T8779] veth0_vlan: left promiscuous mode [ 896.237602][T12960] syz.3.1783[12960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 896.237706][T12960] syz.3.1783[12960] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 896.697569][T12961] trusted_key: encrypted_key: master key parameter 'cY?(<`Ͼ3Q#Pd' is invalid [ 897.257530][T12472] Bluetooth: hci4: command 0x0406 tx timeout [ 898.503357][T12472] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 900.119972][ T8779] team0 (unregistering): Port device bond0 removed [ 900.312888][ T8779] bond0 (unregistering): Released all slaves [ 900.339554][T12981] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 900.412489][T12981] kvm: pic: non byte read [ 900.435879][T12832] chnl_net:caif_netlink_parms(): no params data found [ 900.436209][T12981] kvm: pic: non byte read [ 900.473775][T12981] kvm: pic: non byte read [ 900.650271][T12981] kvm: pic: non byte read [ 900.955467][T12832] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.983104][T12832] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.009133][T12832] bridge_slave_0: entered allmulticast mode [ 901.066372][T12832] bridge_slave_0: entered promiscuous mode [ 901.106909][T12832] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.135277][T12832] bridge0: port 2(bridge_slave_1) entered disabled state [ 901.163002][T12832] bridge_slave_1: entered allmulticast mode [ 901.204947][T12832] bridge_slave_1: entered promiscuous mode [ 901.592158][T12832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 903.433186][T12832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.002246][T12832] team0: Port device team_slave_0 added [ 904.027549][T12832] team0: Port device team_slave_1 added [ 904.403262][T12797] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 904.441345][T12797] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 904.629590][T12832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.636578][T12832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.668724][T12832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.684602][T12832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.715382][T12832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.997351][T12832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.025751][ T8779] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 905.040079][ T8779] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 905.145227][ T8779] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 905.162605][ T8779] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 905.186697][T12797] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 905.421533][ T8779] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 905.493795][ T8779] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 905.568183][T12797] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 905.690798][ T8779] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 905.767052][ T8779] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 905.839940][T12832] hsr_slave_0: entered promiscuous mode [ 905.886648][T12832] hsr_slave_1: entered promiscuous mode [ 906.724900][T12797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.755053][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 906.819064][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 907.103639][T12797] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.175646][T13053] fido_id[13053]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 907.532994][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.540262][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 907.990739][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.997916][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 908.725059][ T9666] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 908.975478][T12832] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 909.018618][T12832] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 909.435651][T12797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 909.461511][T12797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 909.957336][T12832] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 909.969182][T12832] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 911.070438][T12797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 911.244205][T13114] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 911.971196][ T8779] hsr_slave_0: left promiscuous mode [ 911.994356][ T8779] hsr_slave_1: left promiscuous mode [ 912.203949][ T8779] veth1_macvtap: left promiscuous mode [ 912.227259][ T8779] veth0_macvtap: left promiscuous mode [ 912.243146][ T8779] veth1_vlan: left promiscuous mode [ 912.257299][ T8779] veth0_vlan: left promiscuous mode [ 914.161860][T12472] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 915.878654][T13153] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 916.882004][ T8779] team0 (unregistering): Port device bond0 removed [ 917.116656][ T8779] bond0 (unregistering): Released all slaves [ 917.247600][T12832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.284188][T12832] 8021q: adding VLAN 0 to HW filter on device team0 [ 917.323974][T12361] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.324087][T12361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 917.368740][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.368821][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 917.524581][T12832] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 917.524607][T12832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 918.069325][T12797] veth0_vlan: entered promiscuous mode [ 918.103295][T12797] veth1_vlan: entered promiscuous mode [ 918.289463][T12797] veth0_macvtap: entered promiscuous mode [ 918.334909][T12797] veth1_macvtap: entered promiscuous mode [ 918.460762][T12797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 918.502747][T12797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.550858][T12797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 918.600235][T12797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.625975][T12797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.658570][T12797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.680299][T12797] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.707180][T12797] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.731303][T12797] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.762477][T12797] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.893815][T12832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 919.020106][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.049042][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.153642][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.173837][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.875906][T12832] veth0_vlan: entered promiscuous mode [ 919.939239][T12832] veth1_vlan: entered promiscuous mode [ 920.033892][T12832] veth0_macvtap: entered promiscuous mode [ 920.070418][T12832] veth1_macvtap: entered promiscuous mode [ 920.151404][T12832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.199523][T12832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.230086][T12832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 920.267188][T12832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.309177][T12832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 920.390552][T12832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.420544][T12832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.468087][T12832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 920.487617][T13218] Bluetooth: MGMT ver 1.22 [ 920.859574][T12832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 920.913111][T12832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 920.999971][T12832] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.044313][T12832] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.053653][T12832] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.067215][T12832] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 921.303834][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.345763][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 921.450715][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 921.483676][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.600518][T13259] lo speed is unknown, defaulting to 1000 [ 925.254861][ T9666] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 925.267202][ T9666] CPU: 0 PID: 9666 Comm: kworker/u5:0 Not tainted 6.6.94-syzkaller #0 [ 925.275426][ T9666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 925.285516][ T9666] Workqueue: hci0 hci_rx_work [ 925.290227][ T9666] Call Trace: [ 925.293508][ T9666] [ 925.296441][ T9666] dump_stack_lvl+0x16c/0x230 [ 925.301144][ T9666] ? show_regs_print_info+0x20/0x20 [ 925.306361][ T9666] ? load_image+0x3b0/0x3b0 [ 925.310885][ T9666] sysfs_create_dir_ns+0x256/0x280 [ 925.316003][ T9666] ? hci_rx_work+0x43a/0xd80 [ 925.320614][ T9666] ? sysfs_warn_dup+0xa0/0xa0 [ 925.325301][ T9666] ? do_raw_spin_unlock+0x121/0x230 [ 925.330514][ T9666] kobject_add_internal+0x6b8/0xc70 [ 925.335726][ T9666] kobject_add+0x156/0x220 [ 925.340184][ T9666] ? __rwlock_init+0x150/0x150 [ 925.344976][ T9666] ? kobject_init+0x1e0/0x1e0 [ 925.349669][ T9666] ? _raw_spin_unlock+0x28/0x40 [ 925.354536][ T9666] ? get_device_parent+0x366/0x390 [ 925.359655][ T9666] device_add+0x408/0xc20 [ 925.363994][ T9666] hci_conn_add_sysfs+0xd5/0x1e0 [ 925.368977][ T9666] le_conn_complete_evt+0xc37/0x1220 [ 925.374295][ T9666] ? hci_event_packet+0x4a7/0x1210 [ 925.379437][ T9666] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 925.385686][ T9666] ? __copy_skb_header+0xa7/0x550 [ 925.390726][ T9666] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 925.396379][ T9666] ? skb_pull_data+0xfb/0x200 [ 925.401078][ T9666] hci_le_conn_complete_evt+0x187/0x440 [ 925.406648][ T9666] ? hci_remote_host_features_evt+0x160/0x160 [ 925.412730][ T9666] hci_event_packet+0x795/0x1210 [ 925.417693][ T9666] ? bis_list+0x290/0x290 [ 925.422036][ T9666] ? lockdep_hardirqs_on+0x98/0x150 [ 925.427249][ T9666] ? hci_send_to_monitor+0xd7/0x4f0 [ 925.432459][ T9666] hci_rx_work+0x43a/0xd80 [ 925.436900][ T9666] ? process_scheduled_works+0x957/0x15b0 [ 925.442627][ T9666] process_scheduled_works+0xa45/0x15b0 [ 925.448209][ T9666] ? assign_work+0x400/0x400 [ 925.452811][ T9666] ? assign_work+0x39e/0x400 [ 925.457412][ T9666] worker_thread+0xa55/0xfc0 [ 925.462039][ T9666] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 925.467964][ T9666] ? _raw_spin_unlock+0x40/0x40 [ 925.472826][ T9666] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 925.478764][ T9666] kthread+0x2fa/0x390 [ 925.482935][ T9666] ? pr_cont_work+0x560/0x560 [ 925.487632][ T9666] ? kthread_blkcg+0xd0/0xd0 [ 925.492323][ T9666] ret_from_fork+0x48/0x80 [ 925.496755][ T9666] ? kthread_blkcg+0xd0/0xd0 [ 925.501354][ T9666] ret_from_fork_asm+0x11/0x20 [ 925.506148][ T9666] [ 925.509246][ C0] vkms_vblank_simulate: vblank timer overrun [ 925.518316][ T9666] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 925.532427][ T9666] Bluetooth: hci0: failed to register connection device [ 930.505011][T13329] lo speed is unknown, defaulting to 1000 [ 931.741716][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.380306][T12472] Bluetooth: hci0: command 0x0406 tx timeout [ 932.487186][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.707932][T12472] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 934.366791][T13368] netlink: 4768 bytes leftover after parsing attributes in process `syz.6.1841'. [ 936.131269][T13381] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1842'. [ 937.828434][T13394] lo speed is unknown, defaulting to 1000 [ 938.883347][T13393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1846'. [ 939.596558][T13419] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 940.797637][ T9666] Bluetooth: hci2: command 0x0406 tx timeout [ 944.865929][T13493] lo speed is unknown, defaulting to 1000 [ 945.507985][T13505] macvlan2: entered promiscuous mode [ 945.521199][T13505] macvlan2: entered allmulticast mode [ 945.536275][T13505] bond0: entered promiscuous mode [ 945.546928][T13505] bond_slave_0: entered promiscuous mode [ 945.558763][T13505] bond_slave_1: entered promiscuous mode [ 945.589120][T13505] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 945.615145][T13505] bond0: left promiscuous mode [ 945.634519][T13505] bond_slave_0: left promiscuous mode [ 945.634753][T13505] bond_slave_1: left promiscuous mode [ 948.037507][T13539] lo speed is unknown, defaulting to 1000 [ 948.954911][ T9666] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 949.115120][T12472] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 949.554920][ T8] libceph: connect (1)[c::]:6789 error -101 [ 949.827809][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 950.024118][T13555] ceph: No mds server is up or the cluster is laggy [ 950.119074][ T8] libceph: connect (1)[c::]:6789 error -101 [ 950.125352][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 951.067652][T13584] lo speed is unknown, defaulting to 1000 [ 951.860165][T13589] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1880'. [ 953.657735][T12472] Bluetooth: hci0: command 0x0406 tx timeout [ 954.879776][ T2133] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 954.964219][T13634] lo speed is unknown, defaulting to 1000 [ 956.135927][ T2133] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.177432][ T2133] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 956.217398][ T2133] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 956.228987][T13626] netlink: 'syz.4.1890': attribute type 4 has an invalid length. [ 956.262854][ T2133] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 956.428837][ T2133] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 956.445529][ T2133] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 956.455695][ T2133] usb 6-1: Manufacturer: syz [ 957.422755][ T2133] usb 6-1: config 0 descriptor?? [ 957.508968][ T2133] usb 6-1: can't set config #0, error -71 [ 957.567709][ T2133] usb 6-1: USB disconnect, device number 2 [ 958.467938][T13647] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1892'. [ 960.467787][T12472] Bluetooth: hci1: command tx timeout [ 960.856693][T13675] lo speed is unknown, defaulting to 1000 [ 961.116562][T12472] Bluetooth: hci0: command 0x0406 tx timeout [ 963.787987][T13704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1903'. [ 964.409038][T13706] mmap: syz.3.1899 (13706) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 965.046547][T13676] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 966.227434][ T9666] Bluetooth: hci4: command 0x0406 tx timeout [ 967.187225][T12472] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 972.080086][T13797] netlink: 'syz.4.1921': attribute type 4 has an invalid length. [ 972.396600][T13805] netlink: 4768 bytes leftover after parsing attributes in process `syz.5.1923'. [ 974.779426][T12472] Bluetooth: hci4: command 0x0406 tx timeout [ 975.815092][T13845] netlink: 4768 bytes leftover after parsing attributes in process `syz.3.1932'. [ 978.464120][T13879] netlink: 'syz.4.1939': attribute type 4 has an invalid length. [ 992.500217][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1964'. [ 992.511164][T14021] netlink: 'syz.4.1964': attribute type 5 has an invalid length. [ 992.519585][T14021] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1964'. [ 992.593503][T14021] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 992.655220][T14021] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 992.665333][T14021] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 992.674457][T14021] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 992.685736][T14021] geneve2: entered promiscuous mode [ 992.691421][T14021] geneve2: entered allmulticast mode [ 993.077416][T14032] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 993.195551][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.202078][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.210864][T14042] kvm: pic: non byte read [ 993.255020][T14042] kvm: pic: non byte read [ 993.320146][T14042] kvm: pic: non byte read [ 993.352420][T14042] kvm: pic: non byte read [ 993.377047][T14042] kvm: pic: non byte read [ 993.397645][T14042] kvm: pic: non byte read [ 1000.377231][T12472] Bluetooth: hci1: command 0x0406 tx timeout [ 1004.417277][ T1116] Bluetooth: hci3: Frame reassembly failed (-84) [ 1004.425159][T14158] Bluetooth: hci3: Frame reassembly failed (-84) [ 1004.605312][T14153] capability: warning: `syz.3.1989' uses 32-bit capabilities (legacy support in use) [ 1004.753826][T14162] autofs4:pid:14162:autofs_fill_super: called with bogus options [ 1005.490008][T14170] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1992'. [ 1006.459396][ T9666] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 1006.467383][T12472] Bluetooth: hci3: command 0xfc11 tx timeout [ 1007.517405][ T9666] Bluetooth: hci1: command 0x0406 tx timeout [ 1011.441608][T14209] autofs4:pid:14209:autofs_fill_super: called with bogus options [ 1011.562627][T14214] syz.5.2003 uses obsolete (PF_INET,SOCK_PACKET) [ 1011.638579][T14215] netlink: 'syz.6.2002': attribute type 4 has an invalid length. [ 1013.667678][T14214] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1015.687742][T14244] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2007'. [ 1018.428470][T14277] autofs4:pid:14277:autofs_fill_super: called with bogus options [ 1020.571484][T14307] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2020'. [ 1020.649437][T14307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.184648][T14327] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 1022.191244][T14327] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1022.610399][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2023'. [ 1023.103251][T14327] vhci_hcd vhci_hcd.0: Device attached [ 1023.384064][ T23] usb 39-1: new low-speed USB device number 8 using vhci_hcd [ 1023.928474][T14350] blktrace: Concurrent blktraces are not allowed on sg0 [ 1028.657422][T14328] vhci_hcd: connection reset by peer [ 1028.680474][T14174] vhci_hcd: stop threads [ 1028.684831][T14174] vhci_hcd: release socket [ 1028.691981][T14174] vhci_hcd: disconnect device [ 1028.767248][ T23] vhci_hcd: vhci_device speed not set [ 1039.143523][T14472] fuse: Bad value for 'fd' [ 1040.722788][T14505] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2056'. [ 1040.731998][T14505] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2056'. [ 1043.824775][T14548] fuse: Bad value for 'fd' [ 1047.769593][T14588] fuse: Bad value for 'fd' [ 1050.278392][T14614] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2077'. [ 1054.638168][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.645178][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1223.587123][ C0] ------------[ cut here ]------------ [ 1223.594190][ C0] WARNING: CPU: 0 PID: 0 at kernel/rcu/tree_stall.h:1001 rcu_check_gp_start_stall+0x2dc/0x460 [ 1223.604522][ C0] Modules linked in: [ 1223.608465][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.6.94-syzkaller #0 [ 1223.616139][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1223.626224][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 1223.632610][ C0] Code: ff ff ff 48 c7 c7 a0 e4 ec 96 be 04 00 00 00 e8 0a 19 6e 00 48 89 df b8 01 00 00 00 87 05 cc be 7c 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff c0 4f d3 8c 74 47 48 c7 c0 dc df 49 8e 48 c1 e8 03 [ 1223.652259][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 1223.658370][ C0] RAX: 0000000000000000 RBX: ffffffff8cd34fc0 RCX: ffffffff817025c6 [ 1223.666390][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd34fc0 [ 1223.674403][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 1223.682414][ C0] R10: dffffc0000000000 R11: fffffbfff2dd9c94 R12: 0000000000002904 [ 1223.690431][ C0] R13: 1ffff110171c7a6a R14: 0000000000000a02 R15: dffffc0000000000 [ 1223.698438][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1223.707406][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1223.714021][ C0] CR2: 00007f07f2c36949 CR3: 000000001e3fc000 CR4: 00000000003526f0 [ 1223.722034][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1223.730042][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1223.738142][ C0] Call Trace: [ 1223.741451][ C0] [ 1223.744341][ C0] rcu_core+0x612/0x1720 [ 1223.748642][ C0] ? ktime_get+0x7f/0x280 [ 1223.753012][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 1223.758247][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1223.763484][ C0] ? sched_clock+0x3f/0x60 [ 1223.767934][ C0] ? sched_clock_cpu+0x75/0x430 [ 1223.772825][ C0] ? ktime_get+0x7f/0x280 [ 1223.777211][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1223.783238][ C0] ? lock_chain_count+0x20/0x20 [ 1223.788144][ C0] handle_softirqs+0x280/0x820 [ 1223.792948][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 1223.797750][ C0] ? do_softirq+0x180/0x180 [ 1223.802304][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1223.807551][ C0] __irq_exit_rcu+0xc7/0x190 [ 1223.812173][ C0] ? irq_exit_rcu+0x20/0x20 [ 1223.816719][ C0] irq_exit_rcu+0x9/0x20 [ 1223.820999][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1223.826695][ C0] [ 1223.829653][ C0] [ 1223.832626][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1223.838700][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1223.844464][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 63 f0 41 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 1223.864112][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c2 [ 1223.870218][ C0] RAX: c065ede89d5c7f00 RBX: ffffffff81618a7b RCX: c065ede89d5c7f00 [ 1223.878228][ C0] RDX: 0000000000000001 RSI: ffffffff8aaab2c0 RDI: ffffffff8afc6900 [ 1223.886246][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36d4b R09: 1ffff110171c6da9 [ 1223.894265][ C0] R10: dffffc0000000000 R11: ffffed10171c6daa R12: ffffffff8e49ab28 [ 1223.902271][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670 [ 1223.910285][ C0] ? do_idle+0x1eb/0x510 [ 1223.914590][ C0] default_idle+0x13/0x20 [ 1223.918967][ C0] default_idle_call+0x6c/0xa0 [ 1223.923771][ C0] do_idle+0x1eb/0x510 [ 1223.927889][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1223.933122][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1223.939328][ C0] cpu_startup_entry+0x43/0x60 [ 1223.944138][ C0] rest_init+0x2e2/0x300 [ 1223.948422][ C0] ? time_init+0x40/0x40 [ 1223.952708][ C0] arch_call_rest_init+0xe/0x10 [ 1223.957597][ C0] start_kernel+0x459/0x4e0 [ 1223.962152][ C0] x86_64_start_reservations+0x2a/0x30 [ 1223.967662][ C0] x86_64_start_kernel+0x60/0x60 [ 1223.972636][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1223.978770][ C0] [ 1223.981823][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1223.989131][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.6.94-syzkaller #0 [ 1223.996790][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1224.006870][ C0] Call Trace: [ 1224.010176][ C0] [ 1224.013058][ C0] dump_stack_lvl+0x16c/0x230 [ 1224.017801][ C0] ? show_regs_print_info+0x20/0x20 [ 1224.023068][ C0] ? load_image+0x3b0/0x3b0 [ 1224.027643][ C0] panic+0x2c0/0x710 [ 1224.031592][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1224.036148][ C0] ? secondary_startup_64_no_verify+0x179/0x17b [ 1224.042445][ C0] __warn+0x2e0/0x470 [ 1224.046465][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1224.052240][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1224.058005][ C0] report_bug+0x2be/0x4f0 [ 1224.062382][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1224.068144][ C0] ? rcu_check_gp_start_stall+0x2dc/0x460 [ 1224.073905][ C0] ? rcu_check_gp_start_stall+0x2de/0x460 [ 1224.079675][ C0] handle_bug+0xcf/0x120 [ 1224.083962][ C0] exc_invalid_op+0x1a/0x50 [ 1224.088512][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1224.093403][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2dc/0x460 [ 1224.099770][ C0] Code: ff ff ff 48 c7 c7 a0 e4 ec 96 be 04 00 00 00 e8 0a 19 6e 00 48 89 df b8 01 00 00 00 87 05 cc be 7c 15 85 c0 0f 85 19 ff ff ff <0f> 0b 48 81 ff c0 4f d3 8c 74 47 48 c7 c0 dc df 49 8e 48 c1 e8 03 [ 1224.119404][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 1224.125501][ C0] RAX: 0000000000000000 RBX: ffffffff8cd34fc0 RCX: ffffffff817025c6 [ 1224.133502][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8cd34fc0 [ 1224.141496][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 1224.149491][ C0] R10: dffffc0000000000 R11: fffffbfff2dd9c94 R12: 0000000000002904 [ 1224.157511][ C0] R13: 1ffff110171c7a6a R14: 0000000000000a02 R15: dffffc0000000000 [ 1224.165523][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 1224.171294][ C0] ? rcu_check_gp_start_stall+0x2c6/0x460 [ 1224.177055][ C0] rcu_core+0x612/0x1720 [ 1224.181347][ C0] ? ktime_get+0x7f/0x280 [ 1224.185710][ C0] ? rcu_cpu_kthread_park+0x90/0x90 [ 1224.190959][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1224.196198][ C0] ? sched_clock+0x3f/0x60 [ 1224.200652][ C0] ? sched_clock_cpu+0x75/0x430 [ 1224.205617][ C0] ? ktime_get+0x7f/0x280 [ 1224.209987][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1224.216008][ C0] ? lock_chain_count+0x20/0x20 [ 1224.220901][ C0] handle_softirqs+0x280/0x820 [ 1224.225710][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 1224.230513][ C0] ? do_softirq+0x180/0x180 [ 1224.235051][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1224.240295][ C0] __irq_exit_rcu+0xc7/0x190 [ 1224.244924][ C0] ? irq_exit_rcu+0x20/0x20 [ 1224.249465][ C0] irq_exit_rcu+0x9/0x20 [ 1224.253738][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1224.259408][ C0] [ 1224.262359][ C0] [ 1224.265314][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1224.271332][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1224.277089][ C0] Code: cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 63 f0 41 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 66 0f 1f 00 55 41 57 41 56 [ 1224.296727][ C0] RSP: 0018:ffffffff8ca07d80 EFLAGS: 000002c2 [ 1224.302830][ C0] RAX: c065ede89d5c7f00 RBX: ffffffff81618a7b RCX: c065ede89d5c7f00 [ 1224.310832][ C0] RDX: 0000000000000001 RSI: ffffffff8aaab2c0 RDI: ffffffff8afc6900 [ 1224.318831][ C0] RBP: ffffffff8ca07eb8 R08: ffff8880b8e36d4b R09: 1ffff110171c6da9 [ 1224.326831][ C0] R10: dffffc0000000000 R11: ffffed10171c6daa R12: ffffffff8e49ab28 [ 1224.334836][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1952670 [ 1224.342841][ C0] ? do_idle+0x1eb/0x510 [ 1224.347138][ C0] default_idle+0x13/0x20 [ 1224.351506][ C0] default_idle_call+0x6c/0xa0 [ 1224.356305][ C0] do_idle+0x1eb/0x510 [ 1224.360419][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 1224.365659][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1224.371866][ C0] cpu_startup_entry+0x43/0x60 [ 1224.376670][ C0] rest_init+0x2e2/0x300 [ 1224.380950][ C0] ? time_init+0x40/0x40 [ 1224.385225][ C0] arch_call_rest_init+0xe/0x10 [ 1224.390210][ C0] start_kernel+0x459/0x4e0 [ 1224.394750][ C0] x86_64_start_reservations+0x2a/0x30 [ 1224.400238][ C0] x86_64_start_kernel+0x60/0x60 [ 1224.405217][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 1224.411344][ C0] [ 1224.414731][ C0] Kernel Offset: disabled [ 1224.419622][ C0] Rebooting in 86400 seconds..