last executing test programs: 14m49.190042394s ago: executing program 3 (id=1807): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x7, &(0x7f0000001f80)=@raw=[@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffb}, @tail_call], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x24}, 0x94) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x3b, 0x0, 0x8) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000001c00)=[{{&(0x7f00000000c0)=@alg, 0x0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/97}, {&(0x7f0000000240)=""/121}, {&(0x7f0000000340)=""/107}, {&(0x7f00000001c0)=""/12}, {&(0x7f00000003c0)=""/124}, {&(0x7f0000001cc0)=""/213}, {&(0x7f0000000580)=""/181}], 0x0, &(0x7f00000009c0)=""/4096}, 0xbac00000}, {{&(0x7f00000006c0), 0x0, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/214}, {&(0x7f0000000840)=""/201}]}, 0x100}, {{&(0x7f00000019c0)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x0, &(0x7f0000000940)=[{&(0x7f0000001a40)=""/207}], 0x0, &(0x7f0000001b40)=""/173}, 0x7a}], 0x400000000000273, 0x2b, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r3, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) prctl$PR_SET_NO_NEW_PRIVS(0x34, 0x1) 14m47.078957501s ago: executing program 3 (id=1809): openat$hwrng(0xffffff9c, 0x0, 0x202, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/66, 0x42}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000002c0)={0x100042, 0xf7, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x3, 0x1}, 0x10) sendmsg$tipc(r4, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0}, 0x0) syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}}, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x374b) 14m45.318888294s ago: executing program 3 (id=1815): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee4, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_REMOVE={0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r8, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfbff}, 0x94) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000300)="ca0e808bb35bdabb", 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], &(0x7f0000000240)=[0x2], 0x0, 0x1}}, 0x40) socket$key(0xf, 0x3, 0x2) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r9, &(0x7f0000001480)=[{&(0x7f0000000600)=""/240, 0xf0}], 0x1) sendmsg$key(r9, &(0x7f0000000180)={0x3, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)={0x2, 0x1, 0x6, 0x2, 0x13, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_sec_ctx={0x5, 0x18, 0x0, 0xcf, 0x1f, "6030489f406e68b98fe774c3d15a60df4aa0e66c8e8b2d5ce567ba775e0aae"}, @sadb_address={0x3, 0x5, 0x0, 0x80, 0x0, @in={0x2, 0x4e20, @local}}, @sadb_ident={0x2, 0xa, 0x9, 0x0, 0x2}, @sadb_ident={0x2, 0xb, 0xfff0, 0x0, 0x9}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d6}]}, 0x98}, 0x1, 0x7}, 0x0) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1f, 0x12, r0, 0x2000) 14m39.161927476s ago: executing program 3 (id=1825): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000003980)}}], 0x1, 0x4001c00) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r2 = openat(0xffffffffffffffff, 0x0, 0x442040, 0x1aa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000008000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd96}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='devlink_health_reporter_state_update\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000140)="7d796f979e952c4b78a9bf4fc777b2d585bacc56d18e0461100e1de078948e31bb57334747450ccb9b4ca821999794277e8ce2f5c60a0c21163b583a48cbf88ceb3cefd5d00466d65771138e03efac75869d8c2ce5f95141be45e718d2ef65bb4cebfed1f612126a4f3595d673ef", 0x6e}, {&(0x7f00000005c0)="00967b666454ddd2393c797c0cbfb1f3338bad2276a9dcf2c1ebd4143e38eee9f7fcf72fac7bb29ccdca58b91544260847f575f060702de3f95c6a582705558f3def38fe0c1abfe7cc7d0ffdaf851c6e8ef75ec9cf2fb1ec773a8109bedc5c3c249e515c7f6401790a517faec8715989433690ec30408d78c83c506d58188bdf68274daa989ceecc0a72756ff64e2013c967177c595646b4f4d21a1d9920", 0x9e}, {&(0x7f0000000680)="7d5143fb28cbb4de5526828a05270e32f2e0836450e680d1dd8388d8fb4afb2faf5cd0b84dc9bc2424f2c7d698aa79067b7e95df4ec98abcc468595a66e4bfc7bd68", 0x42}], 0x3) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x145102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000080)=0x20000003) getpid() sched_setscheduler(0x0, 0x3, &(0x7f0000000200)=0xffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000c40)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000480)=[{{&(0x7f0000000500)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000b40)="bc0b59bcae4923ec3530622bdb3ae8a1b147a1a9c20bbfbbcdff0b2ce53b4c0ae3a7cb5e34ad1b5b5c8a4f95ea18dc0d60601357fc9836ca8bdd4ac43b72188ab76d06cca6fb0a057977e035f317e4c12b11d8be300a2b5f250509c71dddb2357252372613ba604b0d8de02826ea8c86da3f11641d7341b3d2162a0789274fae3447ecf1e0abc5400768c9954e3faae3db5075ef53e04af6f3b6fa543c3bc5ddef9316edf5e7f0068c2b99c7b2133fddd53b1cd6a37a27e1afcdf357143741391a", 0xc1}, {&(0x7f0000001c40)="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", 0x1000}], 0x2, &(0x7f0000000400)=ANY=[@ANYRES16=r4, @ANYRESOCT=r1, @ANYRESDEC=0x0]}}], 0x32, 0x4004004) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000000)={0x2005}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getrlimit(0x3, &(0x7f0000000040)) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0xe8, 0x0, 0x260, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x87, 0x6, 0x4, 0xa}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbc, 0x7, 0x5aa9, @remote, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3980}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000000}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 14m35.063686345s ago: executing program 3 (id=1833): r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x120000, 0x0, 0x0, 0x0, 0x1}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r4, 0x10c, 0x4, 0x0, &(0x7f0000000000)) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22044028}, 0x40) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x0, 0x0, 0x3, 0x11, 0x0, @empty=0x4c0, @remote}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB]) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) sendmsg$ETHTOOL_MSG_COALESCE_GET(r8, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000380)={&(0x7f00000006c0)={0x17c, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5dd13eafda958d75}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20004001}, 0x20040000) 14m29.492171334s ago: executing program 3 (id=1839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000340)=ANY=[@ANYBLOB="d803f32e4445ffffffffffff81004f00000d0200008035030000fa626a5a1a5ede3b512453729ca4fa7fabc7d57ca50df4c4c4325d809a22848207ee42dee622de233c6604ea233439405a84a7336808ce479be7538386b8a698"], &(0x7f0000000040)={0x0, 0x3, [0xd4e, 0xe19, 0x5d9, 0x611]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x3000c041) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f00000000c0)={0x77359400}, 0x10) recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000440)=0x81) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 14m14.069723243s ago: executing program 32 (id=1839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000340)=ANY=[@ANYBLOB="d803f32e4445ffffffffffff81004f00000d0200008035030000fa626a5a1a5ede3b512453729ca4fa7fabc7d57ca50df4c4c4325d809a22848207ee42dee622de233c6604ea233439405a84a7336808ce479be7538386b8a698"], &(0x7f0000000040)={0x0, 0x3, [0xd4e, 0xe19, 0x5d9, 0x611]}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, 0x0}, 0x3000c041) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r5, 0x28, 0x6, &(0x7f00000000c0)={0x77359400}, 0x10) recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2002) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000440)=0x81) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f2130809d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff000000000000000000", 0x89}], 0x1}, 0x0) 12m45.266655649s ago: executing program 5 (id=2061): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r4, &(0x7f0000000340)=""/128, 0x80) r5 = syz_open_dev$vcsn(&(0x7f0000000b40), 0x1ff, 0x400) r6 = syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x200) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r6, 0xc008551a, 0x0) read$FUSE(r5, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRES8, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=r0]) read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000500)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0xfc1b2d1c5df07dbb, 0x0, 0x441, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) lstat(&(0x7f00000000c0)='./file0\x00', 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x38, 0x0, 0x0, 0x8000000000b4b, 0x9, 0x8, 0x1000000, 0x400003}, 0x0) getresuid(&(0x7f00000000c0)=0x0, &(0x7f0000000180), &(0x7f00000001c0)) ioprio_set$uid(0x0, r8, 0x4004) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_INIT(r9, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) 12m43.359825979s ago: executing program 5 (id=2068): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a40)={r0}, 0x4) 12m42.934973314s ago: executing program 5 (id=2072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}, 0x1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x1, 0xff}, 0x1}, 0x18) sendmmsg(r0, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r2 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r2, r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2$watch_queue(0x0, 0x80) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0xece2ed523b104b4b, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f00000002c0)="8996c6e7099027d302e0c8cf4c045c94142349a2bfcbd782fa62bb7179b709418fb14de20bb7863ea6c9f60ee389c17b149cdca9691aa45e8330fb0ac372250d79fc4f7a532b7001f22634e605b22b5503298183166824645b8ab27ae3bf94623eb0c2074916ab3d11a7198cb9ecd89bbb4f55b5f5def401c2048fb41e7bcdbc068c960aff6b8c4bb78cb401b93739565efb7cf3c4156929c9c902a0d92513133b0ca026c5aac2554d7f814b490acab86a82874da8ff84832c2c7c0e67aaec3ca9836b46880800000000000000d6a10c739370c7aeea60248195493b57951ec849ce9e941d04a9d0950d", 0xea) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r5 = dup(r4) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000004c0)=ANY=[@ANYBLOB="0100000000e0ffff8b"]) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r5, 0x5760, 0x7) creat(&(0x7f00000000c0)='./file0\x00', 0x8b) socket$pppl2tp(0x18, 0x1, 0x1) 12m38.446673992s ago: executing program 5 (id=2080): memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) openat$comedi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vbi(&(0x7f0000000b80), 0x2, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x26da8e97, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x300}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}}], {0x14, 0x10}}, 0xa0}}, 0x0) 12m35.138845343s ago: executing program 5 (id=2084): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newtclass={0x38, 0x28, 0x200, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {0xfff2, 0x7}, {0x9, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x7}}, @tclass_kind_options=@c_qfq={{0x8}, {0x4}}]}, 0x38}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r2, @ANYBLOB="003000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@s={0x5, @SEQ_MIDIPUTC=0xe5, 0x0, 0xe}) socketpair$unix(0x1, 0x1, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000280)=0x10) read$FUSE(r3, &(0x7f00000024c0)={0x2020}, 0x2020) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r5 = socket$kcm(0x10, 0x2, 0x4) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="39000000140081ae50003c00fbff008311001f9f660fcf065c05acb612f691f3bd3508abca1be6eeb89c44ebb37358582bb8b7d553b4e92155", 0x39}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) 12m33.514980285s ago: executing program 5 (id=2088): r0 = add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 12m18.296361171s ago: executing program 33 (id=2088): r0 = add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0xfffffe00, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x4, r0, r0, 0x0, 0x0) 10m16.421118294s ago: executing program 0 (id=2342): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0200000004000004080000000100000080000000bee6cfd7dad43f888399201fbed8"], 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "feeeff000000001b"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x14, 0x38, 0x301, 0x70bd25, 0x25dfdbfe, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x8004000}, 0x0) 10m13.994965916s ago: executing program 0 (id=2347): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r1, &(0x7f00000022c0)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0xdb0078e66880d4ef, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) unshare(0x22020600) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, &(0x7f0000000200)=""/197, 0x0, &(0x7f0000000300), 0x2, r6}, 0x38) syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x80, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000640)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x5c, 0x6a, 0x0, 0xa, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}}, @redirect={0x5, 0x2, 0x0, @multicast1, {0x10, 0x4, 0x3, 0x1f, 0x501, 0x66, 0x7f2, 0x48, 0x1, 0xf, @rand_addr=0x64010102, @loopback, {[@rr={0x7, 0x2b, 0x76, [@empty, @broadcast, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x41}, @multicast2, @multicast1, @rand_addr=0x64010100, @private=0xa010101, @private=0xa010100]}]}}}}}}}, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) 10m12.806730894s ago: executing program 0 (id=2349): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000002c0), 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1b, 0x0, 0x0, 0x7fff, 0x810}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5, 0x0, 0x4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x1c, r7, 0x9c3fa077fa966179, 0x1, 0x25dfdbfd, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x110}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m8.378353554s ago: executing program 0 (id=2354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003640)={&(0x7f00000030c0)={0x28, r4, 0x1, 0x70bd29, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz1\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x74) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x12, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @broadcast}) r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r7, r8, 0x0, 0x20000023896) read$FUSE(0xffffffffffffffff, &(0x7f0000001040)={0x2020}, 0x2020) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x13, 0xffffffffffffffff, 0x2000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) ioprio_set$uid(0x3, 0x0, 0x6000) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$FUSE_INIT(r9, 0x0, 0x0) 10m5.69478895s ago: executing program 0 (id=2360): socket$pptp(0x18, 0x1, 0x2) r0 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x200900) close_range(r0, r0, 0x0) r1 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x1c, 0x2, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}]}, 0x1c}}, 0x800) lseek(r1, 0x7ffffffffffffffe, 0x3) 10m3.691398567s ago: executing program 0 (id=2363): syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc299, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc5, 0xc0, 0xfb, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x101, 0x5, 0x1, {0x22, 0x841}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xf7, 0xe}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xd, 0x7, 0x2, 0x10, 0x4}, 0x36, &(0x7f0000000080)={0x5, 0xf, 0x36, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x82, 0x4, 0x9, 0x1, 0xe7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x47, 0x0, 0x7, 0x1, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "70e55029f09ab396f5fb711094ff44ce"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x6, 0x9}]}, 0xa, [{0xfb, &(0x7f0000000340)=@string={0xfb, 0x3, "efe766d7a09c793d4861d1410b615fa502ee68154b1773c72852dce251aba6b2962e69bade1e3b30bb870c23c2898d8e18d144de7cf7197f461ee7dca142d5f6394bed49263bb807642db56e2d7ff0fe6bc22c4b6a2742cf57969e9f9ad9585095ff93253c3ac1c579c49479fd4e6ccb2d437557d004d32916d65518fc81fc8a9e2ca6174fcfb2a839a5610c8ae19d6fba0228cca57aaef67165b4385ffb6dac5e3c32621faa045e64827a3abaa07d33f476b1cbc2e4201e07731042ae7f559f5317b89fe82707f926a84eef943cfdbceb84c44a3212f745ff34818fbb62f2dd7d3f512b04507e733e596332cbe883800b3fdf7f6eca3cf943"}}, {0x36, &(0x7f00000000c0)=@string={0x36, 0x3, "45c50fc744e6b1e008b94bc1529abc4e88fb1a5975bb5a6f22dc546fe2654b70e283f88d6364a562d45073852d3cefd02216565d"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40b}}, {0x3b, &(0x7f0000000140)=@string={0x3b, 0x3, "494c1503838f80110238d526c086aa5725e3ed3c243b166359e76a6165d5c29307b69426a7a60fc8c49c68cf2d42a33dcc17a9cca81111fb6d"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x300a}}, {0x57, &(0x7f00000004c0)=@string={0x57, 0x3, "474d7da4c038b36472761622c6258bbc5c145e6b1925e8b4cdff1507cf8a3c49afbc9579dbbf8b7c27fab7630823bb3c8165d6c0399e31b2d0efde97843b4772cee2814b741039cbbe4e48e0bd8b1e23eb1311bc11"}}, {0xc5, &(0x7f0000000540)=@string={0xc5, 0x3, "e87243829e34dd190b244dd5cebd76337cb1b40b1117cdf648292533f5440b97efe6dc8568da9a552086adb1928db026f11a3a741c6603117055419d0c328a4497b77ee0cc5527971580e3eb93fe48b5cf526f040a7a29ae0065225b246a2e2492215c731cbe52d22a5ba79031eb9a23c6c498602a919b505fc64414227d3bfa83e49fae3793d41217f4cbaa9478dd10b3dc965694801f1ec24f7e3f3f7ab54b536fb1066d1d18a251bb2197b3400f3d76f838e9901a8866892373de0c25fc8aae2e1d"}}]}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000e80000000"], 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) shutdown(0xffffffffffffffff, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) accept4(r4, 0x0, 0x0, 0x800) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 9m48.359949537s ago: executing program 34 (id=2363): syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc299, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xc5, 0xc0, 0xfb, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x101, 0x5, 0x1, {0x22, 0x841}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0xf7, 0xe}}]}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xd, 0x7, 0x2, 0x10, 0x4}, 0x36, &(0x7f0000000080)={0x5, 0xf, 0x36, 0x4, [@wireless={0xb, 0x10, 0x1, 0x4, 0x82, 0x4, 0x9, 0x1, 0xe7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x47, 0x0, 0x7, 0x1, 0x7}, @ss_container_id={0x14, 0x10, 0x4, 0xf6, "70e55029f09ab396f5fb711094ff44ce"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x6, 0x9}]}, 0xa, [{0xfb, &(0x7f0000000340)=@string={0xfb, 0x3, "efe766d7a09c793d4861d1410b615fa502ee68154b1773c72852dce251aba6b2962e69bade1e3b30bb870c23c2898d8e18d144de7cf7197f461ee7dca142d5f6394bed49263bb807642db56e2d7ff0fe6bc22c4b6a2742cf57969e9f9ad9585095ff93253c3ac1c579c49479fd4e6ccb2d437557d004d32916d65518fc81fc8a9e2ca6174fcfb2a839a5610c8ae19d6fba0228cca57aaef67165b4385ffb6dac5e3c32621faa045e64827a3abaa07d33f476b1cbc2e4201e07731042ae7f559f5317b89fe82707f926a84eef943cfdbceb84c44a3212f745ff34818fbb62f2dd7d3f512b04507e733e596332cbe883800b3fdf7f6eca3cf943"}}, {0x36, &(0x7f00000000c0)=@string={0x36, 0x3, "45c50fc744e6b1e008b94bc1529abc4e88fb1a5975bb5a6f22dc546fe2654b70e283f88d6364a562d45073852d3cefd02216565d"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x40b}}, {0x3b, &(0x7f0000000140)=@string={0x3b, 0x3, "494c1503838f80110238d526c086aa5725e3ed3c243b166359e76a6165d5c29307b69426a7a60fc8c49c68cf2d42a33dcc17a9cca81111fb6d"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x300a}}, {0x57, &(0x7f00000004c0)=@string={0x57, 0x3, "474d7da4c038b36472761622c6258bbc5c145e6b1925e8b4cdff1507cf8a3c49afbc9579dbbf8b7c27fab7630823bb3c8165d6c0399e31b2d0efde97843b4772cee2814b741039cbbe4e48e0bd8b1e23eb1311bc11"}}, {0xc5, &(0x7f0000000540)=@string={0xc5, 0x3, "e87243829e34dd190b244dd5cebd76337cb1b40b1117cdf648292533f5440b97efe6dc8568da9a552086adb1928db026f11a3a741c6603117055419d0c328a4497b77ee0cc5527971580e3eb93fe48b5cf526f040a7a29ae0065225b246a2e2492215c731cbe52d22a5ba79031eb9a23c6c498602a919b505fc64414227d3bfa83e49fae3793d41217f4cbaa9478dd10b3dc965694801f1ec24f7e3f3f7ab54b536fb1066d1d18a251bb2197b3400f3d76f838e9901a8866892373de0c25fc8aae2e1d"}}]}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000e80000000"], 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) shutdown(0xffffffffffffffff, 0x1) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xcc) accept4(r4, 0x0, 0x0, 0x800) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r5 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x6007, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffbf}, 0x48) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m9.428354898s ago: executing program 1 (id=2816): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_create_resource$binfmt(0x0) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}]}}) syz_fuse_handle_req(r1, &(0x7f00000022c0)="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", 0x2000, &(0x7f0000007a80)={&(0x7f0000006400)={0x50, 0x0, 0x1ff, {0x7, 0x29, 0x1, 0xdb0078e66880d4ef, 0xdcf, 0x4005, 0xb, 0x800, 0x0, 0x0, 0x2, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xb, 0xff, 0x4932, 0x7f, 0x1, 0x1}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) unshare(0x22020600) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000100)=0x7d8, &(0x7f0000000140)='%pi6 \x00'}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000300), 0x2, r7}, 0x38) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000640)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0xb, 0x5c, 0x6a, 0x0, 0xa, 0x1, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x17}}, @redirect={0x5, 0x2, 0x0, @multicast1, {0x10, 0x4, 0x3, 0x1f, 0x501, 0x66, 0x7f2, 0x48, 0x1, 0xf, @rand_addr=0x64010102, @loopback, {[@rr={0x7, 0x2b, 0x76, [@empty, @broadcast, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x41}, @multicast2, @multicast1, @rand_addr=0x64010100, @private=0xa010101, @private=0xa010100]}]}}}}}}}, 0x0) 6m7.910544957s ago: executing program 1 (id=2818): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000010c0)={0x2, 0x0, @loopback}, 0x10) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x406}}}, 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r2, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_sctp(0x2, 0x5, 0x84) socket(0x1e, 0x805, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000240)=@ng={0x4, 0x12}, 0x2, 0x0) dup3(0xffffffffffffffff, r5, 0x0) finit_module(0xffffffffffffffff, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) 6m6.928894347s ago: executing program 1 (id=2821): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000180)="d2ff03cb4608008cb89e08d986dd8af46937a3f6552f276b9a0a3f7e6ac17a835a83245ac19eb53fa94abbf023538509a259c8051dfc", 0x0, 0x95b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m5.661932682s ago: executing program 1 (id=2824): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) r1 = syz_open_dev$swradio(&(0x7f00000004c0), 0x1, 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x840000000002, 0x3, 0xff) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7}) pread64(r1, &(0x7f0000000700)=""/115, 0x73, 0x5) r9 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xdcec, 0x0, 0x0, 0xb9}, &(0x7f0000000340)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1}}) io_uring_enter(r9, 0x3516, 0x0, 0x0, 0x0, 0x0) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) getpgrp(0xffffffffffffffff) r12 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r12, 0xc0405602, &(0x7f0000000140)={0x14, 0x2, 0x0, "d569e8000000fa44966262638c48f8bf65080abd0000000000000000002000"}) 6m3.975529901s ago: executing program 1 (id=2828): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@deltfilter={0x54, 0x2d, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x8}, {0x7, 0xd}, {0xfff2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @TCA_RATE={0x6, 0x5, {0x7f, 0xf}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$packet(0x11, 0x2, 0x300) recvfrom$packet(r1, &(0x7f0000000000)=""/46, 0x2e, 0x40010121, &(0x7f0000000500)={0x11, 0x6, 0x0, 0x1, 0x37}, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000540)={'bond_slave_1\x00', {0x2, 0x4e22, @private=0xa010102}}) socket$inet6_tcp(0xa, 0x1, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) 6m3.17519092s ago: executing program 1 (id=2832): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000fddbdf250100000008000585413023ef890eecdadd0001000000060006004e220000140002007767300000000000000000000000000024000300"/86], 0x5c}, 0x1, 0x0, 0x0, 0x4040}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6, 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r8, 0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c27, 0x0, 0x1, 0x0, 0x0, 0x5}) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) dup3(r2, r9, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r11 = accept$alg(r10, 0x0, 0x0) recvmmsg(r11, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000100)}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) 6m2.636550464s ago: executing program 35 (id=2832): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xd, 0x200200090}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012cbd7000fddbdf250100000008000585413023ef890eecdadd0001000000060006004e220000140002007767300000000000000000000000000024000300"/86], 0x5c}, 0x1, 0x0, 0x0, 0x4040}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6, 0x0, 0x8}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r8 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0), 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r8, 0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c27, 0x0, 0x1, 0x0, 0x0, 0x5}) r9 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) dup3(r2, r9, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r11 = accept$alg(r10, 0x0, 0x0) recvmmsg(r11, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000100)}, 0xffffff0b}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000028c0)=""/4096, 0x1000}], 0x1}, 0xf}], 0x2, 0x2101, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) 12.187768092s ago: executing program 7 (id=3975): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0xa1, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="b9800000c00f3235000800000f300f06f30faee9c462fd31e166ba6100ecf20f45610048b8cc8e0000000000000f23c00f21f83502000e000f23f8363ed0542c6dc4827d32720026430f01c4", 0x4c}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0, 0xfffffffffffffd69}], 0x1, 0x6fcef00345e8684, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) 10.863310741s ago: executing program 4 (id=3977): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x7d012b4cafbe7efb, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, 0x0) socket(0x200000100000011, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x106) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r2}, 0x10) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r4, &(0x7f0000000100)='./file0\x00') recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000240)}, {0x0}, {&(0x7f00000006c0)=""/127, 0x7f}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/201, 0xc9}, {&(0x7f0000000880)=""/36, 0x24}], 0x8, &(0x7f0000000940)=""/11, 0xb}, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) 10.511207441s ago: executing program 7 (id=3979): r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000002c0), 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r2, 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) read$FUSE(r1, &(0x7f0000002f40)={0x2020}, 0x2020) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7fffffff}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0xfffffff3}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000800) 10.325754805s ago: executing program 8 (id=3980): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r0, &(0x7f0000019540)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000030000000000000f8ffffff851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 9.166833514s ago: executing program 7 (id=3983): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8) socket$unix(0x1, 0x2, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000000)={@local, @broadcast, @void, {@llc={0x4, {@llc={0x42, 0x0, "af4f"}}}}}, 0x0) msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r1, &(0x7f0000000640)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) rseq(&(0x7f0000000340), 0x20, 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3ff) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX]) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) 8.579831468s ago: executing program 4 (id=3984): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680)) pivot_root(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000010000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) mount$overlay(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e000000000000000000180002801400038010000180"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r6 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r6, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) ioctl$vim2m_VIDIOC_EXPBUF(r6, 0xc0405610, &(0x7f0000000200)={0x2, 0xdb8, 0x4, 0x800}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xa) connect$x25(r6, &(0x7f0000000000)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) socket$inet_mptcp(0x2, 0x1, 0x106) 8.570993295s ago: executing program 8 (id=3985): fallocate(0xffffffffffffffff, 0x60, 0xffffffff, 0x1001f3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r4 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0xe1002) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000540)="5802009400140091d491321dcea4acd70729723b4789c749380e24811f70c68fee4456", 0x23}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r3]) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x50801, 0x0) r6 = epoll_create(0x80f04) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000300)) ioctl$FS_IOC_GETFLAGS(r5, 0x5437, 0x0) syz_open_procfs(0x0, 0x0) timer_create(0x7d012b4cafbe7efb, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, 0x0, 0x80402, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000001c0)=0x12) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0xd) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 8.513636861s ago: executing program 6 (id=3986): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e00000001090224"], 0x0) pipe2$9p(&(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x100) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc1, 0x0, r0}) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x1) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200, 0x10) socket$packet(0x11, 0x2, 0x300) open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x190) pipe(&(0x7f0000000000)) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 8.07126106s ago: executing program 8 (id=3988): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_io_uring_setup(0x5392, &(0x7f0000000100)={0x0, 0x92c1, 0x100, 0x2, 0x3b, 0x0, r0}, &(0x7f0000000240), &(0x7f0000000280)) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create(0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000540)={0x0, 0x8fb7, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x4, 0x1cd83f7c25e05491, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1, {0x3}}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) 7.131826322s ago: executing program 7 (id=3990): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x7, &(0x7f00000031c0)={0x1, 0x0, 0x8002, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffff}) 6.886378947s ago: executing program 2 (id=3991): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000740)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x0, 0x2b, 0x1, @empty, @local}}}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={0x0}}, 0x20000010) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000080)={0x0, 0x1, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, &(0x7f0000001680)={&(0x7f0000000680)=[0x100000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x70, 0x0, 0xf2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6d1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe02e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xcf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4, 0x7, 0x800, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x413f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0xd, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x789], 0x1, 0x400}) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x5, 0x7, 0xe51, 0x1, 0x5479, 0x103d, 0x6, 0x0, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x40000000009, 0x5, 0x6a], 0x2000, 0x808d6}) write$rfkill(0xffffffffffffffff, &(0x7f0000000000)={0x3, 0x2, 0x0, 0x0, 0x1}, 0x8) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000013c0)={0xffffffffffffffff, 0xa, {0x0, 0x0, 0x0, 0x5, 0x8000, 0x0, 0x4, 0x1f, 0x10, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "143939c787a16c1ca43f80026d1a8554fe581b59dee430e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d200", "24431a1e77a68e17000000040008000000000000000000e5e900", [0x83]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000080)=0x800, 0x4) recvfrom(r0, 0x0, 0x0, 0x40, 0x0, 0x0) 6.589854453s ago: executing program 8 (id=3992): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x2, 0x0, @loopback, 0x401}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x8c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x8c}}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000240)="04", 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) syz_usb_connect(0x0, 0x64, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002ffa940081915130000010203010902"], 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='highspeed\x00', 0xa) shutdown(r0, 0x1) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "eb24c812bcbc7165", "7f860414e0cd87e871b10c2e56320c58", "a4df4d39", "8270d403d0ba5ee9"}, 0x28) 6.178210082s ago: executing program 6 (id=3993): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000140)="b9800d01c00f3235000800000f300f06f30faee9c462fd31e166ba6100ecf20f45610048b8cc8e0000000000000f23c00f21f83502000e000f23f8363ed0542c6dc4827d32720026430f01c4", 0x4c}], 0x1, 0x51, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text32={0x20, 0x0, 0xfffffffffffffd69}], 0x1, 0x6fcef00345e8684, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.800971673s ago: executing program 4 (id=3994): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) timer_create(0x7d012b4cafbe7efb, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x110, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, 0x0) socket(0x200000100000011, 0x803, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$kcm(0x2, 0x0, 0x106) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x200}}, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r2}, 0x10) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r4, &(0x7f0000000100)='./file0\x00') recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000240)}, {0x0}, {&(0x7f00000006c0)=""/127, 0x7f}, {&(0x7f0000000740)=""/54, 0x36}, {&(0x7f0000000780)=""/201, 0xc9}, {&(0x7f0000000880)=""/36, 0x24}], 0x8, &(0x7f0000000940)=""/11, 0xb}, 0x1) ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_READY(r4, 0x9360, 0x800000000000001) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) 4.736932345s ago: executing program 2 (id=3995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r0, &(0x7f0000019540)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000030000000000000f8ffffff851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 4.018803002s ago: executing program 2 (id=3996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x44, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x44000}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x8, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000840}, 0x4000050) 3.927033146s ago: executing program 6 (id=3997): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f0000000440)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b80)=@newtaction={0x14, 0x30, 0x1}, 0x14}}, 0x8000) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x6}]}, 0x14}], 0x1}, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000015c0)={0x0, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e21, @private=0xa010100}, {0x2, 0x4e20, @multicast2}, 0x200, 0x0, 0x0, 0x0, 0x28b, 0x0, 0x1, 0x3, 0x2}) semop(0x0, &(0x7f00000003c0), 0x0) r4 = geteuid() r5 = getgid() write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000001880)={0x78, 0x0, 0x0, {0x58c, 0x1ff, 0x0, {0x0, 0x4, 0x4, 0x8, 0xcf9f, 0x80000001, 0x4, 0x8, 0x8, 0x4000, 0x10001, r4, r5, 0x7, 0x2}}}, 0x78) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r7, 0x3ba0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1468, 0x1170, 0x1170, 0x1398, 0x0, 0x1170, 0x1398, 0x1398, 0x1398, 0x1398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {}, {}, 0x6}, 0x0, 0x1128, 0x1170, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x2, 0x0, 0x0, './cgroup.net/syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x23, 0x0, [@empty, @local, @remote, @mcast2, @loopback, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @local}, @mcast1, @loopback, @remote, @mcast2, @empty, @rand_addr=' \x01\x00', @mcast1, @remote]}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x14c8) readv(r1, &(0x7f0000001840), 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r8, 0x5423, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r8}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) 3.292275707s ago: executing program 2 (id=3998): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000200)=0x3, 0x4) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) chdir(&(0x7f0000000380)='./file1\x00') symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') r4 = openat$comedi(0xffffffffffffff9c, &(0x7f000000b200)='/dev/comedi1\x00', 0x8040, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000100)={'c6xdigio\x00', [0x8001, 0xf, 0x6, 0x8, 0xfffffffb, 0x3ff, 0x4d7, 0x2, 0x4, 0x4, 0x0, 0x401, 0x3, 0x47, 0x9, 0x7ff, 0xa, 0x0, 0x1f29, 0x5, 0x8000, 0x8c, 0x6, 0x6, 0x54, 0x10001, 0x101, 0x5, 0x10001, 0x8, 0x1]}) 2.664822427s ago: executing program 8 (id=3999): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00'}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000002b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4807}, 0x8080) 2.663868474s ago: executing program 4 (id=4000): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) (async, rerun: 64) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x6000, 0x1000, &(0x7f000099e000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x4004884) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, 0x0) (async, rerun: 32) r4 = socket$packet(0x11, 0x2, 0x300) (async, rerun: 32) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c080000180009020000000000000000020000000800000000000033c1d94b800b0000007b26282f283a0000d58b36b52ee9b00d6bf1266a90fc6079f7696778c9471581afc19bf7f9ba6f660cbfe3984145"], 0x2c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$video4linux(&(0x7f0000001540), 0x6, 0x0) (async) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async, rerun: 32) munlockall() (rerun: 32) socket(0x6, 0x1, 0x0) (async) syz_open_dev$loop(0x0, 0x81, 0x2a82) syz_init_net_socket$rose(0xb, 0x5, 0x0) 2.654046896s ago: executing program 6 (id=4001): ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) unshare(0x22020400) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x4, 0x0, @void}, 0x10) 2.5865129s ago: executing program 2 (id=4002): socket(0x25, 0x5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000140)='\b\x00\x00\x00(\x00\x00\x00', 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)='\b\x00\x00\x00\x00\x00\x00\x00', 0x8}], 0x7}}], 0x2, 0x20044090) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x3eb2, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_emit_vhci(0x0, 0x11) ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) 2.051301861s ago: executing program 8 (id=4003): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$usbmon(&(0x7f00000000c0), 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e00000001090224"], 0x0) pipe2$9p(&(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x100) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc1, 0x0, r0}) syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x1) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200, 0x10) socket$packet(0x11, 0x2, 0x300) open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x190) pipe(&(0x7f0000000000)) io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 1.81458539s ago: executing program 6 (id=4004): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @multicast2}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) prlimit64(r2, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) dup3(0xffffffffffffffff, r4, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @local}, 0xc) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r6, 0x40049366, 0x0) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x54, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x7c}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r1, 0xfffffe4d}}, 0x48) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x1000003}, r8, 0x7}}, 0x48) syz_emit_ethernet(0x2a, &(0x7f0000000400)=ANY=[@ANYBLOB="bbbbbbbbbbbb0000000000000806000108000604000100000000f50064010101ffffffffffffac1414bb31f2d8222854cb465160cff0158f23572a00114e454b6c9e887327defca264c2119e30a22cd1877efd5e156a651249f701ffa3fe040823ed9b6852e68bf7a7d94717dbc3fee43d2df7fc0da7b7bb0cef46e0c40cde38b06540a87de6b6ad35bace91e2aee524d67ab1967e9f"], 0x0) 1.100528498s ago: executing program 7 (id=4005): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = io_uring_setup(0x7d5, &(0x7f0000000500)) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xcb) bind$ax25(r2, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) connect$ax25(r2, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) close_range(r1, 0xffffffffffffffff, 0x0) 955.025817ms ago: executing program 4 (id=4006): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r0, &(0x7f0000019540)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000030000000000000f8ffffff851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 384.683736ms ago: executing program 6 (id=4007): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='kfree\x00'}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x200080, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000580)='attr/exec\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x7}) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/power/pm_wakeup_irq', 0x40, 0x101) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0), 0x58, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r6 = landlock_create_ruleset(&(0x7f0000000240)={0xb101, 0x3, 0x1}, 0x18, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020}, 0x2020) landlock_restrict_self(r6, 0x0) mknodat(r0, &(0x7f0000000300)='./file2\x00', 0x40, 0xfffffffd) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000280)={'wg1\x00'}) 150.683669ms ago: executing program 7 (id=4008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x8) socket$unix(0x1, 0x2, 0x0) syz_emit_ethernet(0x12, &(0x7f0000000000)={@local, @broadcast, @void, {@llc={0x4, {@llc={0x42, 0x0, "af4f"}}}}}, 0x0) msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRES8], 0x401, 0x0) msgrcv(0x0, 0x0, 0x0, 0x1, 0x3000) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r1, &(0x7f0000000640)=[{0x0}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) rseq(&(0x7f0000000340), 0x20, 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x3ff) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x4}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX]) fchmodat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x1ff) 59.432854ms ago: executing program 4 (id=4009): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000040)={0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0d000000000000006400000000000000f3410f6f84b0b5"], 0x64}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000a00)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x40060000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x7, 0x4], 0x10000, 0x202}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_syzos_vm$x86(r6, &(0x7f000037f000/0x400000)=nil) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) preadv(r2, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000000280)=""/145, 0x91}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000000680)=""/211, 0xd3}], 0x4, 0xfffffffa, 0x4) ioctl$KVM_XEN_HVM_CONFIG(r9, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x3, 0x4000000000000, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x43, 0x7, 0xb], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r7, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r10 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r10, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)={0x0, 0xc, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r10, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)={0x0, 0x16}, 0x0, 0x0, 0x0, 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xe40ca4f7c51e5624}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x32, 0x1, [@m_skbmod={0x30, 0x14, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2008}, 0xc, &(0x7f0000000900)={&(0x7f0000001a80)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x4004810) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 2 (id=4010): ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000000000000000000000200"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xe48}) r2 = eventfd2(0x0, 0x0) r3 = getpgrp(0xffffffffffffffff) sched_setaffinity(r3, 0x8, &(0x7f00000001c0)=0xfffffffffffffffe) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000001780), 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB, @ANYRESHEX=r5, @ANYBLOB=',sgq']) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000200)={r5, &(0x7f0000000280)="7bbc60ff4c7fdddf1b663cdc2f3f443d749ebc5a5ab88a98656188236d8c882d2e46404e35f5406035f748d863d92b504fff20944bbd7cb2a68c10deee02d5b02f1eb442fa4789095c66749b379e8a5bfb2a0b03775bdb6a3862a38e763c014151d307f2f1c03e658ab528ccd2bcf0d7a044be890c7b", &(0x7f0000000300)=""/238}, 0x20) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[]) r6 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1809, 0x20200}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x8001}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) r7 = open(&(0x7f0000000180)='./bus\x00', 0x14167e, 0xa0) fallocate(r7, 0x0, 0x0, 0x1000f4) ioctl$KVM_CAP_SPLIT_IRQCHIP(r7, 0x4068aea3, &(0x7f0000000140)={0x79, 0x0, 0x562}) write$eventfd(r2, &(0x7f00000000c0)=0x33482a89, 0x8) kernel console output (not intermixed with test programs): 3]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1574.309966][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1575.195550][ T5948] usb 3-1: can't set config #1, error -71 [ 1575.205211][ T5948] usb 3-1: USB disconnect, device number 47 [ 1575.317048][T16593] udevd[16593]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 1575.388400][T18234] udevd[18234]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1576.518000][T16760] udevd[16760]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1576.600255][T16593] udevd[16593]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 1576.866348][ T5948] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1577.056785][ T5948] usb 7-1: Using ep0 maxpacket: 16 [ 1577.100903][ T5948] usb 7-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1577.191803][ T5948] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 1577.311360][ T5948] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1577.365896][ T5948] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1577.408121][ T5948] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1577.545670][ T5948] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1577.639331][ T5948] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1578.136322][ T5948] usb 7-1: SerialNumber: syz [ 1578.475006][T19283] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1578.628621][T19283] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1578.740370][T19306] fuse: Bad value for 'group_id' [ 1578.745581][T19306] fuse: Bad value for 'group_id' [ 1578.775954][ T5948] Process accounting resumed [ 1578.832574][T16760] udevd[16760]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 1578.854170][ T5948] usb 7-1: USB disconnect, device number 8 [ 1579.238948][T19310] delete_channel: no stack [ 1579.297856][T16760] udevd[16760]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 1579.472704][T19306] Process accounting resumed [ 1579.866150][T19326] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1580.140842][T16593] udevd[16593]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1580.486651][T16593] udevd[16593]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 1581.062713][T16593] udevd[16593]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1581.858986][T19353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3077'. [ 1581.901962][T19353] bio_check_eod: 2 callbacks suppressed [ 1581.902002][T19353] syz.2.3077: attempt to access beyond end of device [ 1581.902002][T19353] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1581.923281][T19353] syz.2.3077: attempt to access beyond end of device [ 1581.923281][T19353] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1581.936976][T19353] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1581.948505][T19353] syz.2.3077: attempt to access beyond end of device [ 1581.948505][T19353] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1581.964922][T19353] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1581.980328][T19353] syz.2.3077: attempt to access beyond end of device [ 1581.980328][T19353] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1582.030900][T19353] syz.2.3077: attempt to access beyond end of device [ 1582.030900][T19353] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1582.044559][T19353] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1582.055447][T19353] syz.2.3077: attempt to access beyond end of device [ 1582.055447][T19353] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1582.069123][T19353] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1582.082491][T19353] syz.2.3077: attempt to access beyond end of device [ 1582.082491][T19353] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1582.096761][T19353] syz.2.3077: attempt to access beyond end of device [ 1582.096761][T19353] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1582.110373][T19353] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1582.121469][T19353] syz.2.3077: attempt to access beyond end of device [ 1582.121469][T19353] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1582.135506][T19353] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1582.147990][T19353] syz.2.3077: attempt to access beyond end of device [ 1582.147990][T19353] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1582.162454][T19353] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1582.174688][T19353] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1582.184417][T19353] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 1582.440263][T16593] udevd[16593]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1583.846961][T16593] udevd[16593]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1583.882872][T19358] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3080'. [ 1584.235861][T16593] udevd[16593]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1584.300208][T16760] udevd[16760]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 1584.400431][T19386] FAULT_INJECTION: forcing a failure. [ 1584.400431][T19386] name failslab, interval 1, probability 0, space 0, times 0 [ 1584.536175][T19386] CPU: 0 UID: 0 PID: 19386 Comm: syz.2.3089 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1584.536209][T19386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1584.536223][T19386] Call Trace: [ 1584.536232][T19386] [ 1584.536242][T19386] dump_stack_lvl+0x189/0x250 [ 1584.536273][T19386] ? __pfx____ratelimit+0x10/0x10 [ 1584.536296][T19386] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1584.536320][T19386] ? __pfx__printk+0x10/0x10 [ 1584.536354][T19386] ? __pfx___might_resched+0x10/0x10 [ 1584.536377][T19386] ? fs_reclaim_acquire+0x7d/0x100 [ 1584.536420][T19386] should_fail_ex+0x414/0x560 [ 1584.536460][T19386] should_failslab+0xa8/0x100 [ 1584.536487][T19386] __kmalloc_cache_noprof+0x70/0x3d0 [ 1584.536508][T19386] ? afs_lookup_cell+0x4db/0x1860 [ 1584.536536][T19386] afs_lookup_cell+0x4db/0x1860 [ 1584.536569][T19386] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1584.536596][T19386] ? __pfx_afs_lookup_cell+0x10/0x10 [ 1584.536620][T19386] ? __fs_parse+0x444/0x730 [ 1584.536671][T19386] afs_parse_param+0x639/0x860 [ 1584.536704][T19386] ? smack_fs_context_parse_param+0x102/0x170 [ 1584.536738][T19386] ? __pfx_afs_parse_param+0x10/0x10 [ 1584.536771][T19386] ? static_key_count+0x41/0x70 [ 1584.536802][T19386] vfs_parse_fs_param+0x1a6/0x420 [ 1584.536828][T19386] __se_sys_fsconfig+0x78e/0x8d0 [ 1584.536863][T19386] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 1584.536888][T19386] ? ksys_write+0x22a/0x250 [ 1584.536910][T19386] ? __pfx_ksys_write+0x10/0x10 [ 1584.536926][T19386] ? rcu_is_watching+0x15/0xb0 [ 1584.536955][T19386] ? do_syscall_64+0xbe/0x3b0 [ 1584.536975][T19386] ? __x64_sys_fsconfig+0x20/0xc0 [ 1584.537004][T19386] do_syscall_64+0xfa/0x3b0 [ 1584.537024][T19386] ? lockdep_hardirqs_on+0x9c/0x150 [ 1584.537044][T19386] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.537065][T19386] ? clear_bhb_loop+0x60/0xb0 [ 1584.537090][T19386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1584.537109][T19386] RIP: 0033:0x7fc38258e929 [ 1584.537128][T19386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1584.537146][T19386] RSP: 002b:00007fc3803f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1584.537168][T19386] RAX: ffffffffffffffda RBX: 00007fc3827b5fa0 RCX: 00007fc38258e929 [ 1584.537183][T19386] RDX: 0000200000000300 RSI: 0000000000000001 RDI: 0000000000000005 [ 1584.537196][T19386] RBP: 00007fc3803f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1584.537209][T19386] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1584.537222][T19386] R13: 0000000000000000 R14: 00007fc3827b5fa0 R15: 00007ffca61466d8 [ 1584.537255][T19386] [ 1584.537264][T19386] kAFS: unable to lookup cell '(,' [ 1584.967884][T19397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3090'. [ 1584.977024][T19397] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3090'. [ 1585.040115][T19397] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1585.049872][T19397] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1585.058717][T19397] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1585.067564][T19397] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1585.990468][T16593] udevd[16593]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 1586.055482][ T30] audit: type=1800 audit(1752801735.108:638): pid=19405 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.3093" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1586.084192][T16760] udevd[16760]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1586.320066][T16593] udevd[16593]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 1586.561061][T19418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3092'. [ 1586.607704][T19418] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1586.619730][T19418] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1586.636904][T19418] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1586.648283][T19418] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1586.662802][T19418] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1586.673622][T19418] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1586.687225][T19418] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1586.735075][T19418] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1586.744829][T19418] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 1587.166540][T16593] udevd[16593]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 1587.559393][T19422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3098'. [ 1587.687046][T19445] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3101'. [ 1588.910808][T16593] udevd[16593]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 1589.370391][T16760] udevd[16760]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1589.409972][ T6015] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 1590.135821][ T6015] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1590.153736][ T6015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1590.215020][ T6015] usb 5-1: Product: syz [ 1590.285455][ T6015] usb 5-1: Manufacturer: syz [ 1590.290139][ T6015] usb 5-1: SerialNumber: syz [ 1590.293404][T16593] udevd[16593]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1590.391844][ T6015] usb 5-1: config 0 descriptor?? [ 1590.670828][T16760] udevd[16760]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1590.671449][ T977] kernel write not supported for file /450/attr/exec (pid: 977 comm: kworker/0:2) [ 1591.023906][ T6015] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1591.491887][T16760] udevd[16760]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 1591.606002][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3112'. [ 1591.623064][T16760] udevd[16760]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1592.952506][T16760] udevd[16760]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1593.779124][T16760] udevd[16760]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 1594.416946][ T6015] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1594.500139][ T6015] usb 5-1: USB disconnect, device number 54 [ 1594.519110][T16760] udevd[16760]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 1595.398083][T19540] rdma_op ffff8880294179f0 conn xmit_rdma 0000000000000000 [ 1595.408217][T19540] Bluetooth: MGMT ver 1.23 [ 1596.940532][T16593] udevd[16593]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 1597.218632][T16593] udevd[16593]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1597.433904][T19558] program syz.7.3124 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1597.478728][T16593] udevd[16593]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 1597.526831][ T977] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1597.695561][ T977] usb 7-1: Using ep0 maxpacket: 8 [ 1597.723695][ T977] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 1597.763681][ T977] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1597.809920][ T977] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 1597.873066][ T977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.903898][ T977] usb 7-1: Product: syz [ 1597.921849][ T977] usb 7-1: Manufacturer: syz [ 1597.933610][ T977] usb 7-1: SerialNumber: syz [ 1598.192983][ T977] usb 7-1: config 0 descriptor?? [ 1598.274083][ T977] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found [ 1598.478892][ T977] snd_usb_toneport 7-1:0.0: cannot get proper max packet size [ 1598.500896][ T977] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected [ 1598.543362][ T977] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -22 [ 1598.682403][ T977] usb 7-1: USB disconnect, device number 9 [ 1598.734992][T16593] udevd[16593]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 1599.720535][T16593] udevd[16593]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1599.775215][T16760] udevd[16760]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 1599.998161][T16593] udevd[16593]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1600.989256][T16593] udevd[16593]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 1601.372076][T19617] C: renamed from team_slave_0 (while UP) [ 1601.392951][T16593] udevd[16593]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1601.430257][T19617] netlink: 'syz.7.3136': attribute type 3 has an invalid length. [ 1601.437935][T19619] trusted_key: syz.7.3136 sent an empty control message without MSG_MORE. [ 1601.495243][T16593] udevd[16593]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 1601.506804][T19617] netlink: 152 bytes leftover after parsing attributes in process `syz.7.3136'. [ 1601.507481][T19617] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 1602.979065][T19639] netlink: 'syz.7.3140': attribute type 1 has an invalid length. [ 1603.329595][T19646] No such timeout policy "syz1" [ 1603.331187][T19639] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3140'. [ 1603.372337][T19646] pim6reg: entered allmulticast mode [ 1603.380213][T18234] udevd[18234]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1604.286929][T16593] udevd[16593]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1604.345459][T10292] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1604.530324][T10292] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 1604.551343][T10292] usb 5-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 1604.594190][T19661] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1604.605725][T10292] usb 5-1: Product: syz [ 1604.618906][T10292] usb 5-1: Manufacturer: syz [ 1604.634888][T10292] usb 5-1: SerialNumber: syz [ 1604.699080][T10292] usb 5-1: config 0 descriptor?? [ 1605.131930][T16593] udevd[16593]: symlink '../../loop6' '/dev/disk/by-diskseq/104.tmp-b7:6' failed: Read-only file system [ 1605.305165][ T30] audit: type=1400 audit(1752801754.328:639): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=19653 comm="syz.4.3144" daddr=::ffff:172.20.20.32 dest=20003 [ 1605.874256][T18234] udevd[18234]: symlink '../../loop2' '/dev/disk/by-diskseq/101.tmp-b7:2' failed: Read-only file system [ 1606.395501][T10292] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1606.442960][T10292] asix 5-1:0.0: probe with driver asix failed with error -71 [ 1606.550886][T16760] udevd[16760]: failed to send result of seq 25356 to main daemon: Connection refused [ 1606.560886][T10292] usb 5-1: USB disconnect, device number 55 [ 1607.522254][T16760] printk: udevd: 3 output lines suppressed due to ratelimiting [ 1607.570979][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.577542][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.584536][T19689] netlink: 84 bytes leftover after parsing attributes in process `syz.7.3152'. [ 1609.187391][T19706] xt_connbytes: Forcing CT accounting to be enabled [ 1609.194517][T19706] Cannot find set identified by id 0 to match [ 1610.528721][T19711] 9pnet_fd: Insufficient options for proto=fd [ 1615.485502][ T30] audit: type=1400 audit(1752801764.218:640): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=19747 comm="syz.7.3166" daddr=::ffff:172.20.20.32 dest=20003 [ 1615.934114][T19751] bio_check_eod: 14 callbacks suppressed [ 1615.934137][T19751] syz.7.3167: attempt to access beyond end of device [ 1615.934137][T19751] nbd7: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1615.955994][T19751] syz.7.3167: attempt to access beyond end of device [ 1615.955994][T19751] nbd7: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1616.035892][T19751] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1616.080977][T19752] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.3167'. [ 1616.090892][T19751] syz.7.3167: attempt to access beyond end of device [ 1616.090892][T19751] nbd7: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1616.116669][T19752] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3167'. [ 1616.352225][T19751] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1616.594144][T19751] syz.7.3167: attempt to access beyond end of device [ 1616.594144][T19751] nbd7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1616.921638][T19751] syz.7.3167: attempt to access beyond end of device [ 1616.921638][T19751] nbd7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1617.196357][T19751] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1617.283336][T19751] syz.7.3167: attempt to access beyond end of device [ 1617.283336][T19751] nbd7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1617.502075][T19751] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1617.516259][ T30] audit: type=1800 audit(1752804344.531:641): pid=19766 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.3165" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1617.597893][T19751] syz.7.3167: attempt to access beyond end of device [ 1617.597893][T19751] nbd7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1617.674307][T19751] syz.7.3167: attempt to access beyond end of device [ 1617.674307][T19751] nbd7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1617.716515][T19751] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1617.775366][T19751] syz.7.3167: attempt to access beyond end of device [ 1617.775366][T19751] nbd7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1617.810099][T19751] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1617.849666][T19751] syz.7.3167: attempt to access beyond end of device [ 1617.849666][T19751] nbd7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1617.897869][T19751] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=256, location=256 [ 1617.948314][T19751] UDF-fs: error (device nbd7): udf_read_tagged: read failed, block=512, location=512 [ 1617.988764][T19751] UDF-fs: warning (device nbd7): udf_fill_super: No partition found (1) [ 1618.249384][T19752] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1618.271861][T19752] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1618.288288][T19752] bond0 (unregistering): Released all slaves [ 1619.041221][T19802] tipc: Started in network mode [ 1619.046875][T19802] tipc: Node identity 0295e6f4650d, cluster identity 4711 [ 1619.054418][T19802] tipc: Enabled bearer , priority 0 [ 1619.062788][T19802] syzkaller0: entered promiscuous mode [ 1619.070871][T19802] syzkaller0: entered allmulticast mode [ 1619.114046][T19802] tipc: Resetting bearer [ 1619.141982][T19800] tipc: Resetting bearer [ 1619.168895][T19800] tipc: Disabling bearer [ 1619.214928][ T977] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1619.385118][ T977] usb 7-1: Using ep0 maxpacket: 16 [ 1619.393034][ T977] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1619.404130][ T977] usb 7-1: config 0 has no interface number 0 [ 1619.418562][ T977] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 1619.427999][ T977] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.437616][ T977] usb 7-1: Product: syz [ 1619.444649][ T977] usb 7-1: Manufacturer: syz [ 1619.449797][ T977] usb 7-1: SerialNumber: syz [ 1619.463183][ T977] usb 7-1: config 0 descriptor?? [ 1619.474224][ T977] hub 7-1:0.132: bad descriptor, ignoring hub [ 1619.481819][ T977] hub 7-1:0.132: probe with driver hub failed with error -5 [ 1619.518973][ T977] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.132/input/input52 [ 1619.659741][T19821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1619.693278][T19823] bridge0: port 3(syz_tun) entered blocking state [ 1619.755826][T19823] bridge0: port 3(syz_tun) entered disabled state [ 1619.773672][T19823] syz_tun: entered allmulticast mode [ 1619.797169][T19823] syz_tun: entered promiscuous mode [ 1619.805761][T19823] bridge0: port 3(syz_tun) entered blocking state [ 1619.813963][T19823] bridge0: port 3(syz_tun) entered forwarding state [ 1619.826656][ T977] usb 7-1: USB disconnect, device number 10 [ 1619.863378][T19829] bond_slave_0: entered promiscuous mode [ 1619.869200][T19829] bond_slave_1: entered promiscuous mode [ 1619.897868][T19829] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1619.917693][T19829] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 1620.368375][T19850] mac80211_hwsim hwsim104 wlan1: entered allmulticast mode [ 1620.433771][T19850] netlink: 'syz.2.3205': attribute type 10 has an invalid length. [ 1620.487511][T19858] bridge_slave_0: left allmulticast mode [ 1620.508845][T19858] bridge_slave_0: left promiscuous mode [ 1620.518676][T19858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1620.551323][T19858] bridge_slave_1: left allmulticast mode [ 1620.594627][T19858] bridge_slave_1: left promiscuous mode [ 1620.600513][T19858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1620.653345][T19858] bond0: (slave bond_slave_0): Releasing backup interface [ 1620.672282][T19858] bond0: (slave bond_slave_1): Releasing backup interface [ 1620.790732][T19858] team0: Port device team_slave_0 removed [ 1620.798003][T19880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1620.858468][T19858] team0: Port device team_slave_1 removed [ 1620.903867][T19858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1620.922281][T19858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1620.936318][T19858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1620.964231][T19858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1622.030711][T19887] dlm: non-version read from control device 240 [ 1622.038660][ T30] audit: type=1804 audit(1752804349.091:642): pid=19887 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.3217" name="/newroot/51/file0" dev="tmpfs" ino=287 res=1 errno=0 [ 1622.069211][T19850] mac80211_hwsim hwsim104 wlan1: left allmulticast mode [ 1622.364184][T19850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1622.412385][T19850] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1622.480447][T19901] fuse: Unknown parameter 'grou00000000000000000000' [ 1623.025855][T10292] Process accounting resumed [ 1623.288307][T19907] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1623.923312][T19901] Process accounting resumed [ 1625.339468][T10292] Process accounting resumed [ 1626.416967][T10292] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1626.586503][T10292] usb 9-1: Using ep0 maxpacket: 8 [ 1626.630758][T10292] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1626.652999][T10292] usb 9-1: config 0 has no interfaces? [ 1626.683368][T10292] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1626.719822][T19933] Process accounting resumed [ 1626.738832][T10292] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.769247][T10292] usb 9-1: config 0 descriptor?? [ 1627.040632][T19951] dlm: non-version read from control device 240 [ 1627.218853][ T30] audit: type=1804 audit(1752804354.102:643): pid=19951 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.7.3231" name="/newroot/173/file0" dev="tmpfs" ino=946 res=1 errno=0 [ 1627.923456][T19954] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 1627.996960][ T6015] usb 9-1: USB disconnect, device number 2 [ 1629.054424][T19964] netlink: 'syz.4.3236': attribute type 2 has an invalid length. [ 1629.357904][T19972] bridge0: port 3(syz_tun) entered disabled state [ 1629.364935][T19972] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.372706][T19972] bridge0: port 1(bridge_slave_0) entered disabled state [ 1630.684479][T19986] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3243'. [ 1630.929204][T19991] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3242'. [ 1630.978444][T19991] bio_check_eod: 2 callbacks suppressed [ 1630.978485][T19991] syz.7.3242: attempt to access beyond end of device [ 1630.978485][T19991] loop7: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1630.999356][T19991] syz.7.3242: attempt to access beyond end of device [ 1630.999356][T19991] loop7: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1631.012755][T19991] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1631.024140][T19991] syz.7.3242: attempt to access beyond end of device [ 1631.024140][T19991] loop7: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1631.037633][T19991] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1631.054099][T19991] syz.7.3242: attempt to access beyond end of device [ 1631.054099][T19991] loop7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1631.069443][T19991] syz.7.3242: attempt to access beyond end of device [ 1631.069443][T19991] loop7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1631.115185][T19991] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1631.126176][T19991] syz.7.3242: attempt to access beyond end of device [ 1631.126176][T19991] loop7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1631.139814][T19991] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1631.154099][T19991] syz.7.3242: attempt to access beyond end of device [ 1631.154099][T19991] loop7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1631.169072][T19991] syz.7.3242: attempt to access beyond end of device [ 1631.169072][T19991] loop7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1631.183027][T19991] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1631.193828][T19991] syz.7.3242: attempt to access beyond end of device [ 1631.193828][T19991] loop7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1631.209166][T19991] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1631.222597][T19991] syz.7.3242: attempt to access beyond end of device [ 1631.222597][T19991] loop7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1631.237266][T19991] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1631.248110][T19991] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1631.257879][T19991] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1) [ 1631.547814][T19982] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3243'. [ 1631.558687][ T30] audit: type=1400 audit(1752804358.613:644): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=19985 comm="syz.4.3245" daddr=::ffff:172.20.20.32 dest=20003 [ 1632.607038][T20004] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1632.901964][T20011] dlm: non-version read from control device 240 [ 1633.197242][ T30] audit: type=1804 audit(1752804360.203:645): pid=20007 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.8.3246" name="/newroot/35/file0" dev="tmpfs" ino=205 res=1 errno=0 [ 1635.047868][T20018] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1635.793139][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 1636.313285][T20032] tipc: Started in network mode [ 1636.318248][T20032] tipc: Node identity ac1414aa, cluster identity 4711 [ 1636.329801][T20032] tipc: Enabled bearer , priority 10 [ 1636.373852][T20034] FAULT_INJECTION: forcing a failure. [ 1636.373852][T20034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1636.514587][T20034] CPU: 1 UID: 0 PID: 20034 Comm: syz.4.3255 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1636.514621][T20034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1636.514636][T20034] Call Trace: [ 1636.514646][T20034] [ 1636.514657][T20034] dump_stack_lvl+0x189/0x250 [ 1636.514687][T20034] ? __pfx____ratelimit+0x10/0x10 [ 1636.514710][T20034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1636.514733][T20034] ? __pfx__printk+0x10/0x10 [ 1636.514764][T20034] ? irqentry_exit+0x74/0x90 [ 1636.514793][T20034] should_fail_ex+0x414/0x560 [ 1636.514845][T20034] _copy_to_user+0x31/0xb0 [ 1636.514876][T20034] copy_siginfo_to_user+0x22/0xc0 [ 1636.514900][T20034] x64_setup_rt_frame+0x777/0xd40 [ 1636.514960][T20034] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1636.515001][T20034] arch_do_signal_or_restart+0x3dc/0x750 [ 1636.515031][T20034] ? __pfx___schedule+0x10/0x10 [ 1636.515064][T20034] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1636.515092][T20034] ? irqentry_exit+0x74/0x90 [ 1636.515128][T20034] ? schedule+0x16f/0x360 [ 1636.515160][T20034] exit_to_user_mode_loop+0x75/0x110 [ 1636.515181][T20034] do_syscall_64+0x2bd/0x3b0 [ 1636.515201][T20034] ? lockdep_hardirqs_on+0x9c/0x150 [ 1636.515224][T20034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.515244][T20034] ? clear_bhb_loop+0x60/0xb0 [ 1636.515268][T20034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.515288][T20034] RIP: 0033:0x7f746f78e929 [ 1636.515306][T20034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1636.515323][T20034] RSP: 002b:00007f747057f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1636.515346][T20034] RAX: 0000000000000008 RBX: 00007f746f9b5fa0 RCX: 00007f746f78e929 [ 1636.515360][T20034] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1636.515373][T20034] RBP: 00007f747057f090 R08: 0000000000000000 R09: 0000000000000000 [ 1636.515386][T20034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1636.515398][T20034] R13: 0000000000000000 R14: 00007f746f9b5fa0 R15: 00007ffc3f619d48 [ 1636.515430][T20034] [ 1637.441907][ T5948] tipc: Node number set to 2886997162 [ 1638.136383][T20046] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3257'. [ 1638.268244][T20051] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3257'. [ 1638.668282][T20056] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.676118][T20056] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.768109][T20056] bond_slave_0: left promiscuous mode [ 1638.801958][T20056] bond_slave_1: left promiscuous mode [ 1638.917052][T20067] dlm: non-version read from control device 240 [ 1639.390341][ T30] audit: type=1804 audit(1752804366.104:646): pid=20065 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.3264" name="/newroot/163/file0" dev="tmpfs" ino=884 res=1 errno=0 [ 1643.623530][T18057] Bluetooth: hci2: Frame reassembly failed (-84) [ 1643.738594][T20056] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1643.779182][T20056] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1643.979345][T20056] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.989401][T20056] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.000670][T20056] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.015301][T20056] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.299578][T20089] input: syz0 as /devices/virtual/input/input53 [ 1645.639986][T20012] Bluetooth: hci2: command 0x1003 tx timeout [ 1645.640565][ T5849] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1646.303493][T20104] fuse: Unknown parameter 'group_id00000000000000000000' [ 1646.321970][T16920] Process accounting resumed [ 1646.820116][ T5948] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1647.021167][T20113] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3281'. [ 1647.032101][T20112] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3281'. [ 1647.229009][T20100] Process accounting resumed [ 1648.029921][ T5948] usb 9-1: Using ep0 maxpacket: 16 [ 1648.039898][ T5948] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.057916][ T5948] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1648.070754][ T5948] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.088928][ T5948] usb 9-1: config 0 descriptor?? [ 1648.200292][T19146] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1648.382379][T19146] usb 3-1: config 1 has an invalid descriptor of length 103, skipping remainder of the config [ 1648.404707][T19146] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1648.426385][T19146] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1648.436064][T19146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1648.451726][T19146] usb 3-1: SerialNumber: syz [ 1648.505722][T20108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1648.537418][T20108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1648.565782][T20141] bridge0: port 3(syz_tun) entered blocking state [ 1648.580203][T20141] bridge0: port 3(syz_tun) entered disabled state [ 1648.587273][T20141] syz_tun: entered allmulticast mode [ 1648.612232][T20141] syz_tun: entered promiscuous mode [ 1648.621398][T20141] bridge0: port 3(syz_tun) entered blocking state [ 1648.628136][T20141] bridge0: port 3(syz_tun) entered forwarding state [ 1648.695817][T19146] usb 3-1: 0:2 : does not exist [ 1648.714702][T19146] usb 3-1: unit 255 not found! [ 1648.715517][ T5948] usbhid 9-1:0.0: can't add hid device: -71 [ 1648.727179][ T5948] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1648.738458][ T5948] usb 9-1: USB disconnect, device number 3 [ 1648.745878][T19146] usb 3-1: 5:0: cannot get min/max values for control 1 (id 5) [ 1648.772346][T19146] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1648.791770][T19146] usb 3-1: 5:0: cannot get min/max values for control 15 (id 5) [ 1648.803558][T20145] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3293'. [ 1648.812573][T19146] usb 3-1: 5:0: cannot get min/max values for control 16 (id 5) [ 1648.818720][T19146] usb 3-1: 5:0: cannot get min/max values for control 17 (id 5) [ 1648.833360][T20145] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3293'. [ 1648.846934][T19146] usb 3-1: 5:0: cannot get min/max values for control 18 (id 5) [ 1648.865396][T19146] usb 3-1: 5:0: cannot get min/max values for control 19 (id 5) [ 1648.879213][T19146] usb 3-1: 5:0: cannot get min/max values for control 20 (id 5) [ 1648.903571][T19146] usb 3-1: USB disconnect, device number 48 [ 1649.463226][T20161] bridge0: port 1(syz_tun) entered blocking state [ 1649.473500][T20161] bridge0: port 1(syz_tun) entered disabled state [ 1649.480267][T20161] syz_tun: entered allmulticast mode [ 1649.487578][T20161] syz_tun: entered promiscuous mode [ 1649.500574][T20161] bridge0: port 1(syz_tun) entered blocking state [ 1649.507213][T20161] bridge0: port 1(syz_tun) entered forwarding state [ 1649.517157][T20163] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3297'. [ 1649.537498][T20155] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3297'. [ 1649.860108][ T5948] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1650.279531][T20176] sp0: Synchronizing with TNC [ 1650.400073][ T5948] usb 7-1: Using ep0 maxpacket: 32 [ 1650.453284][ T5948] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1650.662156][ T5948] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.715157][ T5948] usb 7-1: config 0 descriptor?? [ 1650.777041][ T5948] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1651.316541][T20171] 9pnet_fd: Insufficient options for proto=fd [ 1651.596665][T20195] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.3308'. [ 1651.607359][T20195] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1652.635889][ T5948] gspca_vc032x: reg_w err -71 [ 1652.681597][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1652.703026][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1652.738090][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1652.756426][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1652.779391][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1652.797577][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1652.868093][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1652.930656][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1652.936718][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1652.944071][T20213] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3315'. [ 1652.945810][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1652.963543][T20210] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3315'. [ 1652.994905][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1653.013070][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1653.031424][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1653.045978][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1653.058075][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1653.075126][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1653.092515][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1653.153697][ T5948] gspca_vc032x: I2c Bus Busy Wait 00 [ 1653.160087][ T5948] gspca_vc032x: Unknown sensor... [ 1653.165401][ T5948] vc032x 7-1:0.0: probe with driver vc032x failed with error -22 [ 1653.176712][ T5948] usb 7-1: USB disconnect, device number 11 [ 1653.617417][T20228] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3320'. [ 1653.631715][T20228] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3320'. [ 1654.639698][ T30] audit: type=1400 audit(1752804381.697:647): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=20237 comm="syz.2.3323" dest=20000 [ 1654.680551][T20238] netlink: 'syz.2.3323': attribute type 10 has an invalid length. [ 1655.481934][T20253] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3326'. [ 1655.666642][T20250] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3326'. [ 1656.551640][ T5898] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 1656.597566][T20268] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3333'. [ 1656.606874][T20268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3333'. [ 1656.723677][T20271] pimreg: entered allmulticast mode [ 1656.747570][ T5898] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 1656.773679][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1656.794083][ T5898] usb 3-1: Product: syz [ 1656.869895][ T5898] usb 3-1: Manufacturer: syz [ 1657.275047][ T5898] usb 3-1: SerialNumber: syz [ 1657.282669][ T5898] usb 3-1: config 0 descriptor?? [ 1657.710922][T20284] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3337'. [ 1657.743114][T20284] bio_check_eod: 2 callbacks suppressed [ 1657.743153][T20284] syz.7.3337: attempt to access beyond end of device [ 1657.743153][T20284] loop7: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1657.763327][T20284] syz.7.3337: attempt to access beyond end of device [ 1657.763327][T20284] loop7: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1657.776676][T20284] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1657.787434][T20284] syz.7.3337: attempt to access beyond end of device [ 1657.787434][T20284] loop7: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1657.800894][T20284] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1657.814508][T20284] syz.7.3337: attempt to access beyond end of device [ 1657.814508][T20284] loop7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1657.828704][T20284] syz.7.3337: attempt to access beyond end of device [ 1657.828704][T20284] loop7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1657.869542][T20284] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1657.880261][T20284] syz.7.3337: attempt to access beyond end of device [ 1657.880261][T20284] loop7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1657.893784][T20284] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1657.906388][T20284] syz.7.3337: attempt to access beyond end of device [ 1657.906388][T20284] loop7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1657.920316][T20284] syz.7.3337: attempt to access beyond end of device [ 1657.920316][T20284] loop7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1657.933777][T20284] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1657.947001][T20284] syz.7.3337: attempt to access beyond end of device [ 1657.947001][T20284] loop7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1657.960543][T20284] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1657.972373][T20284] syz.7.3337: attempt to access beyond end of device [ 1657.972373][T20284] loop7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1657.986698][T20284] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1657.998313][T20284] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1658.007990][T20284] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1) [ 1658.277098][ T5898] airspy 3-1:0.0: Board ID: 00 [ 1658.283669][ T5898] airspy 3-1:0.0: Firmware version: [ 1658.764889][ T5898] airspy 3-1:0.0: usb_control_msg() failed -71 request 11 [ 1658.813786][ T5898] airspy 3-1:0.0: Registered as swradio24 [ 1658.829396][ T5898] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 1658.863372][ T5898] usb 3-1: USB disconnect, device number 49 [ 1659.000297][T20294] tipc: Enabling of bearer rejected, already enabled [ 1660.826902][T20305] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3345'. [ 1660.920965][T20305] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3345'. [ 1663.380968][T20336] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3354'. [ 1663.495590][T20334] netlink: 60 bytes leftover after parsing attributes in process `syz.8.3354'. [ 1666.896107][T20363] tipc: Started in network mode [ 1666.969432][T20363] tipc: Node identity ac1414aa, cluster identity 4711 [ 1667.018406][T20363] tipc: Enabled bearer , priority 10 [ 1667.428159][T20372] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1667.518037][T20374] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 1667.800228][T20384] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.3371' sets config #0 [ 1668.200389][T16920] tipc: Node number set to 2886997162 [ 1669.098717][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.108926][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.988733][T20402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3378'. [ 1670.071993][T20404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3378'. [ 1670.176644][T20405] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3379'. [ 1670.287500][T20407] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3380'. [ 1670.364002][T20411] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3380'. [ 1670.383293][T20412] tipc: Enabled bearer , priority 10 [ 1671.147575][T20424] tmpfs: Bad value for 'mpol' [ 1671.376152][T10514] tipc: Node number set to 1738073844 [ 1672.465542][T20439] overlay: ./file0 is not a directory [ 1673.520366][T20456] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3394'. [ 1673.549306][T20456] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3394'. [ 1673.577997][T20456] bridge0: port 3(syz_tun) entered disabled state [ 1673.585026][T20456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1673.592543][T20456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1673.905513][T10514] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1674.049822][T20470] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.3399'. [ 1674.063184][T20470] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1674.076256][T10514] usb 9-1: Using ep0 maxpacket: 32 [ 1674.483512][T10514] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1674.493444][T10514] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1674.507568][T10514] usb 9-1: Product: syz [ 1674.511813][T10514] usb 9-1: Manufacturer: syz [ 1674.517702][T10514] usb 9-1: SerialNumber: syz [ 1674.525100][T10514] usb 9-1: config 0 descriptor?? [ 1674.568888][T10514] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1674.782912][T20476] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1675.116690][T10514] gspca_stk1135: reg_w 0x2 err -110 [ 1675.246297][T10514] gspca_stk1135: serial bus timeout: status=0x00 [ 1675.255247][T10514] gspca_stk1135: Sensor write failed [ 1675.260623][T10514] gspca_stk1135: serial bus timeout: status=0x00 [ 1675.283664][T10514] gspca_stk1135: Sensor write failed [ 1675.295228][T10514] gspca_stk1135: serial bus timeout: status=0x00 [ 1675.322121][T10514] gspca_stk1135: Sensor read failed [ 1675.365453][T10514] gspca_stk1135: serial bus timeout: status=0x00 [ 1675.387301][T10514] gspca_stk1135: Sensor read failed [ 1675.392553][T10514] gspca_stk1135: Detected sensor type unknown (0x0) [ 1675.437236][T10514] gspca_stk1135: serial bus timeout: status=0x00 [ 1675.453842][T10514] gspca_stk1135: Sensor read failed [ 1675.470790][T10514] gspca_stk1135: serial bus timeout: status=0x00 [ 1675.486005][T10514] gspca_stk1135: Sensor read failed [ 1675.491620][T10514] gspca_stk1135: serial bus timeout: status=0x00 [ 1675.506119][T10514] gspca_stk1135: Sensor write failed [ 1675.524533][T10514] gspca_stk1135: serial bus timeout: status=0x00 [ 1675.541368][T10514] gspca_stk1135: Sensor write failed [ 1675.554038][T10514] stk1135 9-1:0.0: probe with driver stk1135 failed with error -110 [ 1676.713337][ T977] usb 9-1: USB disconnect, device number 4 [ 1677.564633][T20527] fuse: Bad value for 'fd' [ 1677.582220][ T6015] Process accounting resumed [ 1678.044145][T20529] Process accounting resumed [ 1678.136903][T20535] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3421'. [ 1678.155343][T20535] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3421'. [ 1678.274934][T20544] bridge0: port 3(syz_tun) entered blocking state [ 1678.291898][T20544] bridge0: port 3(syz_tun) entered disabled state [ 1678.304981][T20544] syz_tun: entered allmulticast mode [ 1678.337350][T20544] syz_tun: left allmulticast mode [ 1679.288319][ T30] audit: type=1326 audit(1752804406.341:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20562 comm="syz.6.3431" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb0ab58e929 code=0x0 [ 1680.957599][ T6015] IPVS: starting estimator thread 0... [ 1680.971423][T20592] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1681.004408][T20590] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1681.054904][T20597] IPVS: using max 24 ests per chain, 57600 per kthread [ 1681.727965][T20607] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 1681.734564][T20607] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1681.786071][T20607] vhci_hcd vhci_hcd.0: Device attached [ 1681.984625][T10514] vhci_hcd: vhci_device speed not set [ 1682.065429][T10514] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 1682.262289][T20608] vhci_hcd: connection reset by peer [ 1682.289622][T18052] vhci_hcd: stop threads [ 1682.304438][T18052] vhci_hcd: release socket [ 1682.314589][T18052] vhci_hcd: disconnect device [ 1682.529117][T20627] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.3448'. [ 1682.538939][T20627] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1683.462923][T20638] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3451'. [ 1683.502688][T20635] netlink: 'syz.6.3451': attribute type 25 has an invalid length. [ 1683.529435][T20635] netlink: 'syz.6.3451': attribute type 8 has an invalid length. [ 1684.190490][T20654] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3457'. [ 1684.240768][T20654] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3457'. [ 1684.293288][T20654] bridge0: port 2(bridge_slave_1) entered disabled state [ 1684.300858][T20654] bridge0: port 1(bridge_slave_0) entered disabled state [ 1684.548218][T20663] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3459'. [ 1684.558449][T20663] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1684.870282][T20665] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3460'. [ 1687.224160][T10514] vhci_hcd: vhci_device speed not set [ 1687.788163][T20695] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3467'. [ 1688.033065][T19146] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1688.345985][T19146] usb 7-1: device descriptor read/64, error -71 [ 1688.613471][T19146] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1688.719925][T20710] syzkaller1: entered promiscuous mode [ 1688.725727][ T30] audit: type=1804 audit(1752804415.783:649): pid=20709 uid=60929 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.3473" name="file0" dev="ramfs" ino=71485 res=1 errno=0 [ 1688.745984][T20710] syzkaller1: entered allmulticast mode [ 1688.753055][T19146] usb 7-1: device descriptor read/64, error -71 [ 1688.904399][T19146] usb usb7-port1: attempt power cycle [ 1689.399252][T19146] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1689.450187][T19146] usb 7-1: device descriptor read/8, error -71 [ 1689.552009][T20714] FAULT_INJECTION: forcing a failure. [ 1689.552009][T20714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1689.648242][T20714] CPU: 1 UID: 0 PID: 20714 Comm: syz.2.3475 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1689.648275][T20714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1689.648290][T20714] Call Trace: [ 1689.648299][T20714] [ 1689.648308][T20714] dump_stack_lvl+0x189/0x250 [ 1689.648339][T20714] ? __pfx____ratelimit+0x10/0x10 [ 1689.648361][T20714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1689.648385][T20714] ? __pfx__printk+0x10/0x10 [ 1689.648426][T20714] should_fail_ex+0x414/0x560 [ 1689.648465][T20714] _copy_to_user+0x31/0xb0 [ 1689.648497][T20714] simple_read_from_buffer+0xe1/0x170 [ 1689.648525][T20714] proc_fail_nth_read+0x1df/0x250 [ 1689.648555][T20714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1689.648584][T20714] ? rw_verify_area+0x258/0x650 [ 1689.648614][T20714] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1689.648641][T20714] vfs_read+0x1fd/0x980 [ 1689.648679][T20714] ? __pfx___mutex_lock+0x10/0x10 [ 1689.648702][T20714] ? __pfx_vfs_read+0x10/0x10 [ 1689.648736][T20714] ? __fget_files+0x2a/0x420 [ 1689.648764][T20714] ? __fget_files+0x3a0/0x420 [ 1689.648786][T20714] ? __fget_files+0x2a/0x420 [ 1689.648818][T20714] ksys_read+0x145/0x250 [ 1689.648841][T20714] ? __pfx_ksys_read+0x10/0x10 [ 1689.648858][T20714] ? rcu_is_watching+0x15/0xb0 [ 1689.648887][T20714] ? do_syscall_64+0xbe/0x3b0 [ 1689.648920][T20714] do_syscall_64+0xfa/0x3b0 [ 1689.648939][T20714] ? lockdep_hardirqs_on+0x9c/0x150 [ 1689.648960][T20714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.648981][T20714] ? clear_bhb_loop+0x60/0xb0 [ 1689.649007][T20714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1689.649028][T20714] RIP: 0033:0x7fc38258d33c [ 1689.649046][T20714] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1689.649065][T20714] RSP: 002b:00007fc3803f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1689.649089][T20714] RAX: ffffffffffffffda RBX: 00007fc3827b5fa0 RCX: 00007fc38258d33c [ 1689.649105][T20714] RDX: 000000000000000f RSI: 00007fc3803f60a0 RDI: 0000000000000003 [ 1689.649118][T20714] RBP: 00007fc3803f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1689.649131][T20714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1689.649144][T20714] R13: 0000000000000000 R14: 00007fc3827b5fa0 R15: 00007ffca61466d8 [ 1689.649178][T20714] [ 1689.712757][T19146] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1690.414395][T19146] usb 7-1: device descriptor read/8, error -71 [ 1690.535216][T19146] usb usb7-port1: unable to enumerate USB device [ 1692.377821][T20748] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3484'. [ 1692.446609][T20748] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3484'. [ 1692.804389][T20755] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3486'. [ 1692.832550][T20755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3486'. [ 1693.000650][T20764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3490'. [ 1695.881325][T20794] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3500'. [ 1695.901406][T20794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3500'. [ 1695.933255][T20794] bridge0: port 1(syz_tun) entered disabled state [ 1696.809269][T20803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3504'. [ 1696.870753][T20806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3504'. [ 1697.745858][T20824] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.3510'. [ 1697.755455][T20824] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1698.649648][T20836] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3512'. [ 1698.687771][T20836] bio_check_eod: 2 callbacks suppressed [ 1698.687811][T20836] syz.8.3512: attempt to access beyond end of device [ 1698.687811][T20836] loop8: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1698.708490][T20836] syz.8.3512: attempt to access beyond end of device [ 1698.708490][T20836] loop8: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1698.722032][T20836] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1698.733477][T20836] syz.8.3512: attempt to access beyond end of device [ 1698.733477][T20836] loop8: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1698.746960][T20836] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 1698.794519][T20836] syz.8.3512: attempt to access beyond end of device [ 1698.794519][T20836] loop8: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1698.808952][T20836] syz.8.3512: attempt to access beyond end of device [ 1698.808952][T20836] loop8: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1698.822452][T20836] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1698.833322][T20836] syz.8.3512: attempt to access beyond end of device [ 1698.833322][T20836] loop8: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1698.846902][T20836] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 1698.860228][T20836] syz.8.3512: attempt to access beyond end of device [ 1698.860228][T20836] loop8: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1698.874319][T20836] syz.8.3512: attempt to access beyond end of device [ 1698.874319][T20836] loop8: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1698.887590][T20836] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1698.898113][T20836] syz.8.3512: attempt to access beyond end of device [ 1698.898113][T20836] loop8: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1698.911706][T20836] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 1698.925835][T20836] syz.8.3512: attempt to access beyond end of device [ 1698.925835][T20836] loop8: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1698.940361][T20836] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 1698.951080][T20836] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 1698.960710][T20836] UDF-fs: warning (device loop8): udf_fill_super: No partition found (1) [ 1699.424715][T20842] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1700.779111][T20866] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3522'. [ 1700.812782][T20866] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3522'. [ 1705.094221][T20913] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3537'. [ 1705.641733][T20918] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1706.046146][T20922] tmpfs: Bad value for 'nr_inodes' [ 1706.567128][T20931] netlink: 'syz.8.3544': attribute type 25 has an invalid length. [ 1706.603913][T20931] netlink: 'syz.8.3544': attribute type 8 has an invalid length. [ 1707.169949][T20937] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3544'. [ 1707.811357][T20957] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3550'. [ 1707.841793][T20959] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3552'. [ 1707.841983][T20954] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3550'. [ 1707.922507][T20964] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3552'. [ 1707.967908][T20966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3554'. [ 1708.032107][T20969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3554'. [ 1708.109888][T10514] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1708.259887][T10514] usb 9-1: Using ep0 maxpacket: 8 [ 1708.270095][T10514] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1708.279639][T10514] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.294065][T10514] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1708.301310][T10514] pvrusb2: ********** [ 1708.305323][T10514] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1708.320655][T10514] pvrusb2: Important functionality might not be entirely working. [ 1708.328520][T10514] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1708.340181][T10514] pvrusb2: ********** [ 1708.496872][ T2343] pvrusb2: Invalid write control endpoint [ 1708.549297][T19146] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1708.588539][ T2343] pvrusb2: Invalid write control endpoint [ 1708.594999][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1708.613217][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1708.626166][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1708.637031][ T2343] pvrusb2: Device being rendered inoperable [ 1708.647344][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1708.656539][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1708.686406][ T2343] pvrusb2: Attached sub-driver cx25840 [ 1708.700655][T19146] usb 3-1: Using ep0 maxpacket: 32 [ 1708.702273][ T6015] usb 9-1: USB disconnect, device number 5 [ 1708.708232][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1708.734758][T20981] netlink: 'syz.7.3560': attribute type 25 has an invalid length. [ 1708.746063][T20981] netlink: 'syz.7.3560': attribute type 8 has an invalid length. [ 1708.754075][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1708.763877][T19146] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 1708.771871][T20981] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3560'. [ 1708.775839][T19146] usb 3-1: config 0 has no interface number 0 [ 1708.799355][T19146] usb 3-1: config 0 interface 89 has no altsetting 0 [ 1708.809939][T19146] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1708.904997][T19146] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1709.307956][T19146] usb 3-1: Product: syz [ 1709.359420][T19146] usb 3-1: Manufacturer: syz [ 1709.364103][T19146] usb 3-1: SerialNumber: syz [ 1709.392316][T19146] usb 3-1: config 0 descriptor?? [ 1709.411872][T19146] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1709.429799][T20981] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3560'. [ 1709.442000][T19146] em28xx 3-1:0.89: Video interface 89 found: bulk [ 1711.199397][T19146] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 1711.837299][T21001] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3565'. [ 1711.991553][T20998] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3565'. [ 1712.022205][ T5849] Bluetooth: hci3: command 0x0405 tx timeout [ 1712.087660][T19146] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1712.110197][T19146] em28xx 3-1:0.89: board has no eeprom [ 1712.328905][T19146] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 1712.336840][T19146] em28xx 3-1:0.89: analog set to bulk mode. [ 1712.354410][ T977] em28xx 3-1:0.89: Registering V4L2 extension [ 1712.369242][T19146] usb 3-1: USB disconnect, device number 50 [ 1712.377046][T19146] em28xx 3-1:0.89: Disconnecting em28xx [ 1712.466639][ T977] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 1712.490207][ T977] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 1712.497314][ T977] em28xx 3-1:0.89: No AC97 audio processor [ 1712.533884][ T977] usb 3-1: Decoder not found [ 1712.538561][ T977] em28xx 3-1:0.89: failed to create media graph [ 1712.539339][T21014] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3571'. [ 1712.564316][ T977] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 1712.584550][T21018] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3573'. [ 1712.594117][T21018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3573'. [ 1712.594940][ T977] em28xx 3-1:0.89: Registering snapshot button... [ 1712.624746][T21020] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3571'. [ 1712.637217][ T977] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input55 [ 1712.657283][ T977] em28xx 3-1:0.89: Remote control support is not available for this card. [ 1712.674496][T19146] em28xx 3-1:0.89: Closing input extension [ 1712.684282][T19146] em28xx 3-1:0.89: Deregistering snapshot button [ 1712.724731][T21021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1712.741986][T19146] em28xx 3-1:0.89: Freeing device [ 1713.228422][T21038] netlink: 'syz.7.3580': attribute type 25 has an invalid length. [ 1713.245714][T21038] netlink: 'syz.7.3580': attribute type 8 has an invalid length. [ 1713.266575][T21042] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 1713.416787][T21052] netlink: 'syz.8.3585': attribute type 1 has an invalid length. [ 1713.518919][T21052] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1713.704511][T21044] 9pnet_fd: Insufficient options for proto=fd [ 1713.839657][T21068] bio_check_eod: 2 callbacks suppressed [ 1713.839696][T21068] syz.6.3586: attempt to access beyond end of device [ 1713.839696][T21068] loop6: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1713.860484][T21068] syz.6.3586: attempt to access beyond end of device [ 1713.860484][T21068] loop6: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1713.874089][T21068] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1713.885470][T21068] syz.6.3586: attempt to access beyond end of device [ 1713.885470][T21068] loop6: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1713.898991][T21068] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1713.913728][T21068] syz.6.3586: attempt to access beyond end of device [ 1713.913728][T21068] loop6: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1713.963279][T21068] syz.6.3586: attempt to access beyond end of device [ 1713.963279][T21068] loop6: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1713.976771][T21068] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1713.987684][T21068] syz.6.3586: attempt to access beyond end of device [ 1713.987684][T21068] loop6: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1714.001240][T21068] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1714.014688][T21068] syz.6.3586: attempt to access beyond end of device [ 1714.014688][T21068] loop6: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1714.029074][T21068] syz.6.3586: attempt to access beyond end of device [ 1714.029074][T21068] loop6: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1714.042640][T21068] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1714.053168][T21068] syz.6.3586: attempt to access beyond end of device [ 1714.053168][T21068] loop6: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1714.066722][T21068] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1714.080784][T21068] syz.6.3586: attempt to access beyond end of device [ 1714.080784][T21068] loop6: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1714.095287][T21068] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1714.105851][T21068] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1714.115534][T21068] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 1714.323099][T21070] fuse: Bad value for 'rootmode' [ 1714.359779][T10514] Process accounting resumed [ 1715.792789][T21071] Process accounting resumed [ 1715.923980][T21090] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3593'. [ 1715.982950][T21093] bridge_slave_1: entered allmulticast mode [ 1715.998787][T21095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3593'. [ 1716.143244][T21098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3596'. [ 1716.205890][T21099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3596'. [ 1717.118489][T21101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1717.175698][T21101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1717.304407][T21118] fuse: Unknown parameter 'use00000000000000000000' [ 1717.325141][T10514] Process accounting resumed [ 1717.815791][T21101] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.826173][T21101] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.837382][T21101] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.846516][T21101] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1717.942142][T21124] Process accounting resumed [ 1718.018957][T21101] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1718.029157][T21101] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1718.038159][T21101] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1718.047518][T21101] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1718.082952][T21111] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3599'. [ 1718.105232][T21133] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3606'. [ 1719.044292][T21150] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3611'. [ 1719.428328][T21157] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3611'. [ 1720.002905][T21162] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1720.394759][T21163] fuse: Unknown parameter 'use00000000000000000000' [ 1720.533327][ T6015] Process accounting resumed [ 1720.826782][T21160] Process accounting resumed [ 1720.963375][T21182] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3620'. [ 1720.998701][T21178] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3620'. [ 1721.119152][T21187] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3624'. [ 1721.128474][T21187] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3624'. [ 1722.266038][T21212] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3635'. [ 1722.402175][T21212] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3635'. [ 1722.421518][T21217] fuse: Unknown parameter 'use00000000000000000000' [ 1722.472192][T19146] Process accounting resumed [ 1723.516590][T21217] Process accounting resumed [ 1723.714430][T21248] __nla_validate_parse: 4 callbacks suppressed [ 1723.714456][T21248] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3647'. [ 1724.137043][T21248] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3647'. [ 1724.277415][T21259] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3649'. [ 1724.288717][T21259] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3649'. [ 1724.875794][T21277] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1725.577907][T21284] fuse: Unknown parameter 'user_i00000000000000000000' [ 1725.806744][T19146] Process accounting resumed [ 1726.337138][T21285] Process accounting resumed [ 1726.650767][T21301] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3661'. [ 1726.765673][T21305] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1726.784867][T21305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1726.850857][T21307] FAULT_INJECTION: forcing a failure. [ 1726.850857][T21307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1726.869855][T21307] CPU: 0 UID: 0 PID: 21307 Comm: syz.2.3663 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1726.869894][T21307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1726.869907][T21307] Call Trace: [ 1726.869915][T21307] [ 1726.869925][T21307] dump_stack_lvl+0x189/0x250 [ 1726.869954][T21307] ? __pfx____ratelimit+0x10/0x10 [ 1726.869975][T21307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1726.869998][T21307] ? __pfx__printk+0x10/0x10 [ 1726.870024][T21307] ? __might_fault+0xb0/0x130 [ 1726.870057][T21307] should_fail_ex+0x414/0x560 [ 1726.870095][T21307] _copy_from_user+0x2d/0xb0 [ 1726.870124][T21307] __sys_bpf+0x1ed/0x860 [ 1726.870157][T21307] ? __pfx___sys_bpf+0x10/0x10 [ 1726.870201][T21307] ? ksys_write+0x22a/0x250 [ 1726.870223][T21307] ? __pfx_ksys_write+0x10/0x10 [ 1726.870240][T21307] ? rcu_is_watching+0x15/0xb0 [ 1726.870271][T21307] __x64_sys_bpf+0x7c/0x90 [ 1726.870299][T21307] do_syscall_64+0xfa/0x3b0 [ 1726.870320][T21307] ? lockdep_hardirqs_on+0x9c/0x150 [ 1726.870340][T21307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.870360][T21307] ? clear_bhb_loop+0x60/0xb0 [ 1726.870386][T21307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.870406][T21307] RIP: 0033:0x7fc38258e929 [ 1726.870425][T21307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1726.870443][T21307] RSP: 002b:00007fc3803f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1726.870465][T21307] RAX: ffffffffffffffda RBX: 00007fc3827b5fa0 RCX: 00007fc38258e929 [ 1726.870481][T21307] RDX: 0000000000000094 RSI: 0000200000000100 RDI: 0000000000000005 [ 1726.870494][T21307] RBP: 00007fc3803f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1726.870507][T21307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1726.870520][T21307] R13: 0000000000000000 R14: 00007fc3827b5fa0 R15: 00007ffca61466d8 [ 1726.870552][T21307] [ 1727.536489][T16920] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1727.547746][T21327] fuse: Unknown parameter 'user_i00000000000000000000' [ 1727.585894][T19146] Process accounting resumed [ 1727.898854][T21333] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3672'. [ 1727.950825][T21335] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3673'. [ 1727.956299][T16920] usb 3-1: Using ep0 maxpacket: 8 [ 1727.978639][T21336] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3672'. [ 1727.989682][T16920] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 1728.011141][T16920] usb 3-1: config 2 has no interface number 0 [ 1728.018873][T16920] usb 3-1: config 2 interface 31 has no altsetting 0 [ 1728.060585][T16920] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1728.063005][T21327] Process accounting resumed [ 1728.074483][T16920] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1728.083542][T16920] usb 3-1: Product: syz [ 1728.090346][T16920] usb 3-1: Manufacturer: syz [ 1728.095134][T16920] usb 3-1: SerialNumber: syz [ 1728.110782][T16920] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 1728.426597][T19146] usb 3-1: USB disconnect, device number 51 [ 1728.506934][T21344] geneve2: entered allmulticast mode [ 1730.084665][T21356] FAULT_INJECTION: forcing a failure. [ 1730.084665][T21356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1730.120082][T21356] CPU: 1 UID: 0 PID: 21356 Comm: syz.6.3677 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1730.120115][T21356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1730.120129][T21356] Call Trace: [ 1730.120138][T21356] [ 1730.120148][T21356] dump_stack_lvl+0x189/0x250 [ 1730.120178][T21356] ? __pfx____ratelimit+0x10/0x10 [ 1730.120199][T21356] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1730.120223][T21356] ? __pfx__printk+0x10/0x10 [ 1730.120263][T21356] should_fail_ex+0x414/0x560 [ 1730.120301][T21356] _copy_to_user+0x31/0xb0 [ 1730.120333][T21356] simple_read_from_buffer+0xe1/0x170 [ 1730.120360][T21356] proc_fail_nth_read+0x1df/0x250 [ 1730.120389][T21356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1730.120418][T21356] ? rw_verify_area+0x258/0x650 [ 1730.120449][T21356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1730.120476][T21356] vfs_read+0x1fd/0x980 [ 1730.120513][T21356] ? __pfx___mutex_lock+0x10/0x10 [ 1730.120544][T21356] ? __pfx_vfs_read+0x10/0x10 [ 1730.120577][T21356] ? __fget_files+0x2a/0x420 [ 1730.120605][T21356] ? __fget_files+0x3a0/0x420 [ 1730.120627][T21356] ? __fget_files+0x2a/0x420 [ 1730.120659][T21356] ksys_read+0x145/0x250 [ 1730.120681][T21356] ? __pfx_ksys_read+0x10/0x10 [ 1730.120698][T21356] ? rcu_is_watching+0x15/0xb0 [ 1730.120727][T21356] ? do_syscall_64+0xbe/0x3b0 [ 1730.120753][T21356] do_syscall_64+0xfa/0x3b0 [ 1730.120773][T21356] ? lockdep_hardirqs_on+0x9c/0x150 [ 1730.120794][T21356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.120815][T21356] ? clear_bhb_loop+0x60/0xb0 [ 1730.120840][T21356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1730.120860][T21356] RIP: 0033:0x7fb0ab58d33c [ 1730.120879][T21356] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1730.120898][T21356] RSP: 002b:00007fb0ac499030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1730.120921][T21356] RAX: ffffffffffffffda RBX: 00007fb0ab7b5fa0 RCX: 00007fb0ab58d33c [ 1730.120936][T21356] RDX: 000000000000000f RSI: 00007fb0ac4990a0 RDI: 0000000000000004 [ 1730.120950][T21356] RBP: 00007fb0ac499090 R08: 0000000000000000 R09: 0000000000000000 [ 1730.120964][T21356] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000001 [ 1730.120978][T21356] R13: 0000000000000000 R14: 00007fb0ab7b5fa0 R15: 00007ffd115ae298 [ 1730.121011][T21356] [ 1730.427680][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.434083][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.660587][T21368] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1730.791214][T21373] fuse: Unknown parameter 'user_i00000000000000000000' [ 1730.827605][T10292] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1730.846053][ T6015] Process accounting resumed [ 1732.116993][T10292] usb 9-1: config 0 has an invalid interface number: 135 but max is 0 [ 1732.125231][T10292] usb 9-1: config 0 has no interface number 0 [ 1732.134772][T10292] usb 9-1: config 0 interface 135 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 32 [ 1732.159916][T10292] usb 9-1: config 0 interface 135 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1732.299697][T10292] usb 9-1: New USB device found, idVendor=05ac, idProduct=1402, bcdDevice=45.65 [ 1732.314141][T21382] __nla_validate_parse: 1 callbacks suppressed [ 1732.314161][T21382] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3689'. [ 1732.329520][T10292] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.349282][T21373] Process accounting resumed [ 1732.370364][T10292] usb 9-1: Product: syz [ 1732.374722][T10292] usb 9-1: Manufacturer: syz [ 1732.385349][T10292] usb 9-1: SerialNumber: syz [ 1732.397055][T10292] usb 9-1: config 0 descriptor?? [ 1732.403036][T21366] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1732.411817][T21387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3689'. [ 1732.424713][T21366] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1732.796290][T21366] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1733.032919][T21366] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1733.287636][T10292] asix 9-1:0.135 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1733.313678][T10292] asix 9-1:0.135: probe with driver asix failed with error -71 [ 1733.327779][T10292] usb 9-1: USB disconnect, device number 6 [ 1733.350452][T21403] FAULT_INJECTION: forcing a failure. [ 1733.350452][T21403] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.365629][T21403] CPU: 0 UID: 0 PID: 21403 Comm: syz.6.3697 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1733.365658][T21403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1733.365682][T21403] Call Trace: [ 1733.365691][T21403] [ 1733.365699][T21403] dump_stack_lvl+0x189/0x250 [ 1733.365728][T21403] ? __pfx____ratelimit+0x10/0x10 [ 1733.365747][T21403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1733.365770][T21403] ? __pfx__printk+0x10/0x10 [ 1733.365802][T21403] ? __pfx___might_resched+0x10/0x10 [ 1733.365831][T21403] should_fail_ex+0x414/0x560 [ 1733.365868][T21403] ? traverse+0xd9/0x570 [ 1733.365895][T21403] should_failslab+0xa8/0x100 [ 1733.365920][T21403] __kvmalloc_node_noprof+0x161/0x5f0 [ 1733.365943][T21403] ? traverse+0xd9/0x570 [ 1733.365977][T21403] traverse+0xd9/0x570 [ 1733.366006][T21403] ? __lock_acquire+0xab9/0xd20 [ 1733.366037][T21403] seq_read_iter+0xcfe/0xe10 [ 1733.366069][T21403] ? _parse_integer_limit+0x1ae/0x1f0 [ 1733.366096][T21403] ? __asan_memset+0x22/0x50 [ 1733.366131][T21403] seq_read+0x2e2/0x3d0 [ 1733.366169][T21403] ? __pfx_seq_read+0x10/0x10 [ 1733.366212][T21403] ? rw_verify_area+0x258/0x650 [ 1733.366246][T21403] vfs_readv+0x5aa/0x850 [ 1733.366271][T21403] ? __pfx_seq_read+0x10/0x10 [ 1733.366302][T21403] ? __pfx_vfs_readv+0x10/0x10 [ 1733.366342][T21403] ? __fget_files+0x2a/0x420 [ 1733.366370][T21403] ? __fget_files+0x3a0/0x420 [ 1733.366416][T21403] ? __fget_files+0x2a/0x420 [ 1733.366467][T21403] __x64_sys_preadv+0x197/0x2a0 [ 1733.366493][T21403] ? __pfx___x64_sys_preadv+0x10/0x10 [ 1733.366512][T21403] ? rcu_is_watching+0x15/0xb0 [ 1733.366541][T21403] ? do_syscall_64+0xbe/0x3b0 [ 1733.366568][T21403] do_syscall_64+0xfa/0x3b0 [ 1733.366589][T21403] ? lockdep_hardirqs_on+0x9c/0x150 [ 1733.366609][T21403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1733.366630][T21403] ? clear_bhb_loop+0x60/0xb0 [ 1733.366656][T21403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1733.366682][T21403] RIP: 0033:0x7fb0ab58e929 [ 1733.366702][T21403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1733.366720][T21403] RSP: 002b:00007fb0ac499038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 1733.366742][T21403] RAX: ffffffffffffffda RBX: 00007fb0ab7b5fa0 RCX: 00007fb0ab58e929 [ 1733.366758][T21403] RDX: 0000000000000001 RSI: 0000200000004740 RDI: 0000000000000003 [ 1733.366772][T21403] RBP: 00007fb0ac499090 R08: 000000001248ca9a R09: 0000000000000000 [ 1733.366786][T21403] R10: 0000000000000eee R11: 0000000000000246 R12: 0000000000000001 [ 1733.366799][T21403] R13: 0000000000000000 R14: 00007fb0ab7b5fa0 R15: 00007ffd115ae298 [ 1733.366832][T21403] [ 1734.426428][ T977] kernel write not supported for file /875/attr/exec (pid: 977 comm: kworker/0:2) [ 1734.955156][ T977] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1735.443883][T21428] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3705'. [ 1735.495023][T19146] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1735.528294][T21431] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3705'. [ 1735.537753][ T977] usb 9-1: Using ep0 maxpacket: 8 [ 1735.562445][ T977] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.574497][ T977] usb 9-1: config 0 has no interfaces? [ 1735.580953][ T977] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1735.594417][ T977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.613924][ T977] usb 9-1: config 0 descriptor?? [ 1735.656936][T19146] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1735.675958][T19146] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1735.689371][T19146] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1735.702183][T19146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1735.712577][T19146] usb 3-1: SerialNumber: syz [ 1735.886330][ T6015] usb 9-1: USB disconnect, device number 7 [ 1736.090645][T21438] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1737.744068][T19146] usb 3-1: 0:2 : does not exist [ 1737.759594][T19146] usb 3-1: unit 5: unexpected type 0x0a [ 1737.813050][T19146] usb 3-1: USB disconnect, device number 52 [ 1738.147632][T21467] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1738.267362][T21465] bio_check_eod: 2 callbacks suppressed [ 1738.267382][T21465] syz.7.3712: attempt to access beyond end of device [ 1738.267382][T21465] loop7: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1738.286349][T21465] syz.7.3712: attempt to access beyond end of device [ 1738.286349][T21465] loop7: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1738.299492][T21465] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1738.309688][T21465] syz.7.3712: attempt to access beyond end of device [ 1738.309688][T21465] loop7: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1738.322970][T21465] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1738.333592][T21465] syz.7.3712: attempt to access beyond end of device [ 1738.333592][T21465] loop7: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1738.346863][T21465] syz.7.3712: attempt to access beyond end of device [ 1738.346863][T21465] loop7: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1738.359976][T21465] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1738.369753][T21465] syz.7.3712: attempt to access beyond end of device [ 1738.369753][T21465] loop7: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1738.382904][T21465] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1738.392994][T21465] syz.7.3712: attempt to access beyond end of device [ 1738.392994][T21465] loop7: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1738.406122][T21465] syz.7.3712: attempt to access beyond end of device [ 1738.406122][T21465] loop7: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1738.419646][T21465] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1738.429590][T21465] syz.7.3712: attempt to access beyond end of device [ 1738.429590][T21465] loop7: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1738.442704][T21465] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1738.452701][T21465] syz.7.3712: attempt to access beyond end of device [ 1738.452701][T21465] loop7: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1738.464454][T10514] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1738.465910][T21465] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1738.482910][T21465] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=512, location=512 [ 1738.492514][T21465] UDF-fs: warning (device loop7): udf_fill_super: No partition found (1) [ 1738.724636][T10514] usb 7-1: Using ep0 maxpacket: 32 [ 1738.752206][T10514] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1738.793510][T10514] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1738.821996][T10514] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1738.843426][T10514] usb 7-1: Product: syz [ 1738.857778][T10514] usb 7-1: Manufacturer: syz [ 1738.872368][T10514] usb 7-1: SerialNumber: syz [ 1738.899878][T10514] usb 7-1: config 0 descriptor?? [ 1738.914023][T21469] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1738.950130][ T30] audit: type=1400 audit(1752804466.021:650): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=21475 comm="syz.2.3721" dest=20002 [ 1740.173606][T21469] netlink: 'syz.6.3718': attribute type 1 has an invalid length. [ 1740.181985][T21469] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3718'. [ 1740.191254][T21469] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3718'. [ 1740.330961][T21469] loop2: detected capacity change from 0 to 7 [ 1740.342773][T21469] Dev loop2: unable to read RDB block 7 [ 1740.348471][T21469] loop2: unable to read partition table [ 1740.354640][T21469] loop2: partition table beyond EOD, truncated [ 1740.360810][T21469] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1740.398014][T16920] usb 7-1: USB disconnect, device number 16 [ 1740.823416][T21482] fuse: Bad value for 'group_id' [ 1740.828557][T21482] fuse: Bad value for 'group_id' [ 1741.264144][T21486] netlink: 'syz.8.3725': attribute type 1 has an invalid length. [ 1741.395986][T21486] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3725'. [ 1741.409550][T21486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1741.457772][T21490] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1741.472181][T21490] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1741.489065][T21490] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1741.498201][T21490] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1741.516479][T21490] bond1: (slave geneve2): making interface the new active one [ 1741.530013][T21490] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 1741.539246][T21486] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3725'. [ 1741.624313][T10292] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1741.804388][T10292] usb 3-1: Using ep0 maxpacket: 8 [ 1741.837436][T10292] usb 3-1: config 0 has no interfaces? [ 1741.846482][T10292] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=a9.dc [ 1741.860811][T10292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1741.870727][T10292] usb 3-1: Product: syz [ 1741.875073][T10292] usb 3-1: Manufacturer: syz [ 1741.879728][T10292] usb 3-1: SerialNumber: syz [ 1741.915744][T10292] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1741.954320][T10292] r8152-cfgselector 3-1: config 0 descriptor?? [ 1744.546607][T21513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1744.559145][T21513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1745.129202][T10292] IPVS: starting estimator thread 0... [ 1745.353429][T21516] IPVS: using max 24 ests per chain, 57600 per kthread [ 1745.935630][T21518] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3732'. [ 1746.017708][T21518] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3732'. [ 1746.360425][T10292] r8152-cfgselector 3-1: USB disconnect, device number 53 [ 1747.379227][T21524] netlink: 'syz.7.3735': attribute type 1 has an invalid length. [ 1747.578211][T21528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1747.587325][T21528] bond1: (slave bond2): making interface the new active one [ 1747.596546][T21524] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3735'. [ 1747.601310][T21528] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1747.627958][T21529] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 1747.651055][T21524] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1747.880592][T21542] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3739'. [ 1748.339792][T21542] overlayfs: failed to resolve './file0': -2 [ 1750.031508][T10292] kernel write not supported for file /405/attr/exec (pid: 10292 comm: kworker/0:0) [ 1750.883421][T21563] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3746'. [ 1750.932755][T21563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3746'. [ 1751.456985][T21578] virtio-fs: tag not found [ 1751.512856][T21578] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3752'. [ 1753.405202][T21599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1753.435979][T21599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1753.569965][T21599] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1753.588693][T21599] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1753.598828][T21599] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1753.615786][T21599] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1754.295774][T21640] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3775'. [ 1754.375494][T21640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3775'. [ 1755.868920][T21657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1755.888249][T21657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1755.987646][T21657] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.997519][T21657] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.019396][T21657] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.033593][T21657] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.177349][T21657] netdevsim netdevsim8 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1756.191541][T21657] netdevsim netdevsim8 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1756.200767][T21657] netdevsim netdevsim8 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1756.220877][T21657] netdevsim netdevsim8 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1756.555606][T21670] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3785'. [ 1756.591880][T19146] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1756.753963][T19146] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1756.753994][T19146] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1756.755476][T19146] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1756.755506][T19146] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1756.755528][T19146] usb 9-1: SerialNumber: syz [ 1756.968009][T19146] usb 9-1: 0:2 : does not exist [ 1756.986750][T19146] usb 9-1: USB disconnect, device number 8 [ 1757.054413][T21679] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3789'. [ 1757.054449][T21679] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3789'. [ 1757.181392][T21681] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3790'. [ 1757.181436][T21681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3790'. [ 1759.254393][T21712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3797'. [ 1759.282346][T21712] bio_check_eod: 2 callbacks suppressed [ 1759.282391][T21712] syz.4.3797: attempt to access beyond end of device [ 1759.282391][T21712] loop4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1759.302486][T21712] syz.4.3797: attempt to access beyond end of device [ 1759.302486][T21712] loop4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1759.315825][T21712] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1759.326920][T21712] syz.4.3797: attempt to access beyond end of device [ 1759.326920][T21712] loop4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1759.340444][T21712] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1759.354608][T21712] syz.4.3797: attempt to access beyond end of device [ 1759.354608][T21712] loop4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1759.368998][T21712] syz.4.3797: attempt to access beyond end of device [ 1759.368998][T21712] loop4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1759.413796][T21712] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1759.424846][T21712] syz.4.3797: attempt to access beyond end of device [ 1759.424846][T21712] loop4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1759.438429][T21712] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1759.452027][T21712] syz.4.3797: attempt to access beyond end of device [ 1759.452027][T21712] loop4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1759.466115][T21712] syz.4.3797: attempt to access beyond end of device [ 1759.466115][T21712] loop4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1759.479548][T21712] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1759.490541][T21712] syz.4.3797: attempt to access beyond end of device [ 1759.490541][T21712] loop4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1759.504174][T21712] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1759.516166][T21712] syz.4.3797: attempt to access beyond end of device [ 1759.516166][T21712] loop4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1759.531923][T21712] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1759.542461][T21712] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 1759.552628][T21712] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 1759.979295][T21717] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3800'. [ 1760.003186][T21717] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3800'. [ 1760.984146][T21724] 9pnet_fd: Insufficient options for proto=fd [ 1761.332908][T21729] netlink: 44 bytes leftover after parsing attributes in process `syz.7.3802'. [ 1761.384565][T21732] FAULT_INJECTION: forcing a failure. [ 1761.384565][T21732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1761.419603][T21732] CPU: 1 UID: 0 PID: 21732 Comm: syz.2.3803 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1761.419637][T21732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1761.419651][T21732] Call Trace: [ 1761.419659][T21732] [ 1761.419670][T21732] dump_stack_lvl+0x189/0x250 [ 1761.419699][T21732] ? __pfx____ratelimit+0x10/0x10 [ 1761.419721][T21732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1761.419745][T21732] ? __pfx__printk+0x10/0x10 [ 1761.419786][T21732] should_fail_ex+0x414/0x560 [ 1761.419826][T21732] _copy_to_user+0x31/0xb0 [ 1761.419857][T21732] simple_read_from_buffer+0xe1/0x170 [ 1761.419884][T21732] proc_fail_nth_read+0x1df/0x250 [ 1761.419913][T21732] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1761.419943][T21732] ? rw_verify_area+0x258/0x650 [ 1761.419974][T21732] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1761.420001][T21732] vfs_read+0x1fd/0x980 [ 1761.420039][T21732] ? __pfx___mutex_lock+0x10/0x10 [ 1761.420063][T21732] ? __pfx_vfs_read+0x10/0x10 [ 1761.420096][T21732] ? __fget_files+0x2a/0x420 [ 1761.420125][T21732] ? __fget_files+0x3a0/0x420 [ 1761.420146][T21732] ? __fget_files+0x2a/0x420 [ 1761.420179][T21732] ksys_read+0x145/0x250 [ 1761.420197][T21732] ? __fget_files+0x3a0/0x420 [ 1761.420222][T21732] ? __pfx_ksys_read+0x10/0x10 [ 1761.420247][T21732] ? do_syscall_64+0xbe/0x3b0 [ 1761.420274][T21732] do_syscall_64+0xfa/0x3b0 [ 1761.420293][T21732] ? lockdep_hardirqs_on+0x9c/0x150 [ 1761.420313][T21732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.420334][T21732] ? clear_bhb_loop+0x60/0xb0 [ 1761.420360][T21732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1761.420379][T21732] RIP: 0033:0x7fc38258d33c [ 1761.420397][T21732] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1761.420419][T21732] RSP: 002b:00007fc3803f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1761.420442][T21732] RAX: ffffffffffffffda RBX: 00007fc3827b5fa0 RCX: 00007fc38258d33c [ 1761.420456][T21732] RDX: 000000000000000f RSI: 00007fc3803f60a0 RDI: 0000000000000004 [ 1761.420470][T21732] RBP: 00007fc3803f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1761.420482][T21732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1761.420501][T21732] R13: 0000000000000000 R14: 00007fc3827b5fa0 R15: 00007ffca61466d8 [ 1761.420535][T21732] [ 1761.422861][T21729] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3802'. [ 1761.880672][T21744] fuse: Unknown parameter '0x0000000000000007' [ 1762.059410][ T30] audit: type=1326 audit(1752804489.135:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21746 comm="syz.8.3808" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f006538e929 code=0xffff0000 [ 1762.105454][T10514] Process accounting resumed [ 1762.342219][T21756] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3811'. [ 1762.356518][T21756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3811'. [ 1762.428241][T21744] Process accounting resumed [ 1762.631905][T21766] 9pnet_fd: Insufficient options for proto=fd [ 1765.355214][T21802] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3824'. [ 1765.364666][T21802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3824'. [ 1769.948478][T21839] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3835'. [ 1769.962157][T21841] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3837'. [ 1769.979117][T21841] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3837'. [ 1770.035726][T21845] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3836'. [ 1770.150653][T21839] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3835'. [ 1770.406365][T21856] 9pnet_fd: Insufficient options for proto=fd [ 1770.552377][ T977] kernel write not supported for file /451/attr/exec (pid: 977 comm: kworker/0:2) [ 1771.581650][ T977] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1771.682874][T21882] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3849'. [ 1771.694154][T21882] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3849'. [ 1771.749074][ T977] usb 3-1: Using ep0 maxpacket: 16 [ 1771.758513][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1771.775827][ T977] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1771.985819][ T977] usb 3-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 1772.029555][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.110091][ T977] usb 3-1: config 0 descriptor?? [ 1773.177860][ T977] usbhid 3-1:0.0: can't add hid device: -71 [ 1773.229907][ T977] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1773.442571][ T977] usb 3-1: USB disconnect, device number 54 [ 1774.018474][T21896] tipc: Enabling of bearer rejected, already enabled [ 1775.388888][T21912] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.3856'. [ 1775.398921][T21912] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1777.028273][ T30] audit: type=1326 audit(1752804504.098:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.2.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38258e929 code=0x7ffc0000 [ 1777.090551][ T30] audit: type=1326 audit(1752804504.098:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.2.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38258e929 code=0x7ffc0000 [ 1777.205805][ T30] audit: type=1326 audit(1752804504.108:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.2.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fc38258e929 code=0x7ffc0000 [ 1777.281482][ T30] audit: type=1326 audit(1752804504.108:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.2.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38258e929 code=0x7ffc0000 [ 1777.348216][ T30] audit: type=1326 audit(1752804504.118:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.2.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fc38258e929 code=0x7ffc0000 [ 1777.385306][ T30] audit: type=1326 audit(1752804504.118:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.2.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc38258e929 code=0x7ffc0000 [ 1777.498272][ T30] audit: type=1326 audit(1752804504.118:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.2.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc38258d290 code=0x7ffc0000 [ 1777.812105][ T30] audit: type=1326 audit(1752804504.118:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.2.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc382590157 code=0x7ffc0000 [ 1777.838508][ T30] audit: type=1326 audit(1752804504.118:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.2.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc38258e929 code=0x7ffc0000 [ 1777.860445][ T30] audit: type=1326 audit(1752804504.118:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21897 comm="syz.2.3855" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fc382590157 code=0x7ffc0000 [ 1779.107883][T21954] tipc: Enabling of bearer rejected, already enabled [ 1779.670078][T21965] FAULT_INJECTION: forcing a failure. [ 1779.670078][T21965] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1780.669249][T21965] CPU: 1 UID: 0 PID: 21965 Comm: syz.2.3873 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1780.669273][T21965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1780.669283][T21965] Call Trace: [ 1780.669290][T21965] [ 1780.669297][T21965] dump_stack_lvl+0x189/0x250 [ 1780.669319][T21965] ? __pfx____ratelimit+0x10/0x10 [ 1780.669334][T21965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1780.669351][T21965] ? __pfx__printk+0x10/0x10 [ 1780.669380][T21965] should_fail_ex+0x414/0x560 [ 1780.669408][T21965] _copy_to_user+0x31/0xb0 [ 1780.669431][T21965] simple_read_from_buffer+0xe1/0x170 [ 1780.669451][T21965] proc_fail_nth_read+0x1df/0x250 [ 1780.669472][T21965] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1780.669493][T21965] ? rw_verify_area+0x258/0x650 [ 1780.669516][T21965] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1780.669535][T21965] vfs_read+0x1fd/0x980 [ 1780.669562][T21965] ? __pfx___mutex_lock+0x10/0x10 [ 1780.669579][T21965] ? __pfx_vfs_read+0x10/0x10 [ 1780.669603][T21965] ? __fget_files+0x2a/0x420 [ 1780.669623][T21965] ? __fget_files+0x3a0/0x420 [ 1780.669639][T21965] ? __fget_files+0x2a/0x420 [ 1780.669662][T21965] ksys_read+0x145/0x250 [ 1780.669678][T21965] ? __pfx_ksys_read+0x10/0x10 [ 1780.669689][T21965] ? rcu_is_watching+0x15/0xb0 [ 1780.669710][T21965] ? do_syscall_64+0xbe/0x3b0 [ 1780.669728][T21965] do_syscall_64+0xfa/0x3b0 [ 1780.669743][T21965] ? lockdep_hardirqs_on+0x9c/0x150 [ 1780.669757][T21965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.669771][T21965] ? clear_bhb_loop+0x60/0xb0 [ 1780.669789][T21965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1780.669803][T21965] RIP: 0033:0x7fc38258d33c [ 1780.669817][T21965] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1780.669830][T21965] RSP: 002b:00007fc3803f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1780.669846][T21965] RAX: ffffffffffffffda RBX: 00007fc3827b5fa0 RCX: 00007fc38258d33c [ 1780.669858][T21965] RDX: 000000000000000f RSI: 00007fc3803f60a0 RDI: 0000000000000005 [ 1780.669868][T21965] RBP: 00007fc3803f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1780.669877][T21965] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1780.669892][T21965] R13: 0000000000000000 R14: 00007fc3827b5fa0 R15: 00007ffca61466d8 [ 1780.669915][T21965] [ 1780.908149][ C1] vkms_vblank_simulate: vblank timer overrun [ 1782.470316][T21991] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1783.235996][T22012] ptrace attach of "./syz-executor exec"[17551] was attempted by "\x09   Àÿ Àÿ Ðÿ 0 ðÿ °ÿ Àÿ ÿÿÿÿ  "[22012] [ 1783.392183][T22016] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3887'. [ 1784.280378][T22039] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1785.252066][T22048] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 1785.258757][T22048] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1785.271600][T22053] binder: 22051:22053 ioctl c018620c 0 returned -14 [ 1785.367303][T22052] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 1785.373986][T22052] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1785.383291][T22048] vhci_hcd vhci_hcd.0: Device attached [ 1785.542292][T22061] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(14) [ 1785.548967][T22061] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1785.559023][T19146] vhci_hcd: vhci_device speed not set [ 1785.566464][T22052] vhci_hcd vhci_hcd.0: Device attached [ 1785.645716][T22048] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(17) [ 1785.652400][T22048] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1785.666457][T19146] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 1785.679528][T22061] vhci_hcd vhci_hcd.0: Device attached [ 1785.698314][T22068] netlink: 'syz.6.3899': attribute type 83 has an invalid length. [ 1785.726530][T22048] vhci_hcd vhci_hcd.0: Device attached [ 1785.802554][T20012] Bluetooth: Wrong link type (-71) [ 1786.950461][T22092] fuse: Unknown parameter 'fd0x0000000000000007' [ 1786.971157][T10514] Process accounting resumed [ 1787.028584][T22066] vhci_hcd: connection closed [ 1787.028875][T22056] vhci_hcd: connection closed [ 1787.034825][ T6559] vhci_hcd: stop threads [ 1787.034976][T22062] vhci_hcd: connection closed [ 1787.044556][T22054] vhci_hcd: connection reset by peer [ 1787.076256][ T6559] vhci_hcd: release socket [ 1787.115272][ T6559] vhci_hcd: disconnect device [ 1787.140218][ T6559] vhci_hcd: stop threads [ 1787.222170][ T6559] vhci_hcd: release socket [ 1787.245202][ T6559] vhci_hcd: disconnect device [ 1787.321805][T22088] Process accounting resumed [ 1787.336637][ T6559] vhci_hcd: stop threads [ 1787.341087][ T6559] vhci_hcd: release socket [ 1787.351424][ T6559] vhci_hcd: disconnect device [ 1787.371603][ T6559] vhci_hcd: stop threads [ 1787.381559][ T6559] vhci_hcd: release socket [ 1787.394809][ T6559] vhci_hcd: disconnect device [ 1787.406055][T10292] kernel write not supported for file /545/attr/exec (pid: 10292 comm: kworker/0:0) [ 1787.740147][T22102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3906'. [ 1787.756999][T22102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3906'. [ 1788.160780][T22113] vivid-007: ================= START STATUS ================= [ 1788.168971][T22113] vivid-007: Enable Output Cropping: true [ 1788.176040][T22113] vivid-007: Enable Output Composing: true [ 1788.182192][T22113] vivid-007: Enable Output Scaler: true [ 1788.188120][T22113] vivid-007: Tx RGB Quantization Range: Automatic [ 1788.194868][T22113] vivid-007: Transmit Mode: HDMI [ 1788.200198][T22113] vivid-007: Hotplug Present: 0x00000000 [ 1788.206201][T22113] vivid-007: RxSense Present: 0x00000000 [ 1788.221635][T22114] netlink: 316 bytes leftover after parsing attributes in process `syz.6.3910'. [ 1788.349464][T22113] vivid-007: EDID Present: 0x00000000 [ 1788.355203][T22113] vivid-007: ================== END STATUS ================== [ 1788.753232][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 1788.753292][ T30] audit: type=1400 audit(1752804515.810:676): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=22110 comm="syz.7.3911" daddr=::ffff:172.20.20.32 dest=20003 [ 1789.506419][T22129] tipc: Enabling of bearer rejected, already enabled [ 1789.856391][T22140] netlink: 209852 bytes leftover after parsing attributes in process `syz.7.3916'. [ 1789.866046][T22140] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 1790.518294][T22141] fuse: Unknown parameter 'fd0x0000000000000007' [ 1790.534972][T10292] Process accounting resumed [ 1790.915912][T19146] vhci_hcd: vhci_device speed not set [ 1791.853911][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.860464][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.969822][T22167] 9pnet_fd: Insufficient options for proto=fd [ 1793.074462][T22149] Process accounting resumed [ 1793.100261][T22177] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3927'. [ 1793.181523][T22179] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3928'. [ 1793.452991][T22198] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3932'. [ 1793.466362][T22193] netlink: 60 bytes leftover after parsing attributes in process `syz.7.3932'. [ 1793.649486][T10292] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1793.707085][T22201] Unknown options in mask 5 [ 1794.056173][T10292] usb 7-1: Using ep0 maxpacket: 32 [ 1794.122625][T10292] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1794.248238][T10292] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1794.260790][T10292] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1794.272210][T10292] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1794.405313][T10292] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.416171][T10292] usb 7-1: config 0 descriptor?? [ 1794.454842][T22188] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1794.473588][T10292] hub 7-1:0.0: USB hub found [ 1794.627987][T22204] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1795.085617][T22215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3935'. [ 1795.109522][T22215] bio_check_eod: 2 callbacks suppressed [ 1795.109561][T22215] syz.2.3935: attempt to access beyond end of device [ 1795.109561][T22215] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1795.129872][T22215] syz.2.3935: attempt to access beyond end of device [ 1795.129872][T22215] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1795.143276][T22215] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1795.154173][T22215] syz.2.3935: attempt to access beyond end of device [ 1795.154173][T22215] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1795.167695][T22215] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1795.181591][T22215] syz.2.3935: attempt to access beyond end of device [ 1795.181591][T22215] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1795.221989][T22215] syz.2.3935: attempt to access beyond end of device [ 1795.221989][T22215] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1795.235456][T22215] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1795.245978][T22215] syz.2.3935: attempt to access beyond end of device [ 1795.245978][T22215] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1795.259453][T22215] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1795.271943][T22215] syz.2.3935: attempt to access beyond end of device [ 1795.271943][T22215] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1795.286027][T22215] syz.2.3935: attempt to access beyond end of device [ 1795.286027][T22215] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1795.299532][T22215] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1795.310167][T22215] syz.2.3935: attempt to access beyond end of device [ 1795.310167][T22215] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1795.323850][T22215] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1795.336720][T22215] syz.2.3935: attempt to access beyond end of device [ 1795.336720][T22215] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1795.350850][T22215] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1795.361336][T22215] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 1795.371103][T22215] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 1796.816801][T10292] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 1796.893022][T10292] usbhid 7-1:0.0: can't add hid device: -71 [ 1796.916693][T10292] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1797.127318][T10292] usb 7-1: USB disconnect, device number 17 [ 1798.068474][T22232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3942'. [ 1798.214750][T22239] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3942'. [ 1798.224913][T22235] netlink: 44 bytes leftover after parsing attributes in process `syz.8.3943'. [ 1799.474679][T19146] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1799.956370][T19146] usb 9-1: config 1 has an invalid interface number: 239 but max is 0 [ 1799.964914][T19146] usb 9-1: config 1 has no interface number 0 [ 1799.981302][T19146] usb 9-1: config 1 interface 239 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1800.008925][T19146] usb 9-1: config 1 interface 239 altsetting 9 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 1800.021060][T19146] usb 9-1: config 1 interface 239 altsetting 9 endpoint 0x86 has an invalid bInterval 230, changing to 11 [ 1800.032681][T19146] usb 9-1: config 1 interface 239 altsetting 9 endpoint 0x86 has invalid maxpacket 59105, setting to 1024 [ 1800.259256][T19146] usb 9-1: config 1 interface 239 altsetting 9 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1800.308778][T19146] usb 9-1: config 1 interface 239 has no altsetting 0 [ 1800.345102][T19146] usb 9-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=b3.a7 [ 1800.371303][T19146] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1800.374983][T22265] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1800.388334][T19146] usb 9-1: Product: syz [ 1800.403796][T19146] usb 9-1: Manufacturer: syz [ 1800.414133][T19146] usb 9-1: SerialNumber: syz [ 1800.432818][T22251] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1801.172241][T19146] cypress_m8 9-1:1.239: DeLorme Earthmate USB converter detected [ 1801.189611][T19146] earthmate ttyUSB0: required endpoint is missing [ 1801.242918][T19146] usb 9-1: USB disconnect, device number 9 [ 1801.261190][T19146] cypress_m8 9-1:1.239: device disconnected [ 1802.367381][T16920] kernel write not supported for file /875/attr/exec (pid: 16920 comm: kworker/1:4) [ 1803.112039][T22292] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3957'. [ 1803.254034][T22296] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3957'. [ 1805.317541][T22326] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1805.471817][T22324] tipc: Started in network mode [ 1805.481089][T22324] tipc: Node identity ac1414aa, cluster identity 4711 [ 1805.655426][T22324] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1805.663891][T22324] tipc: Enabled bearer , priority 10 [ 1805.793225][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1805.933291][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1806.073028][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1806.213025][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1806.352998][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1806.493017][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1806.642916][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1806.783100][T16920] tipc: Node number set to 2886997162 [ 1806.922884][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1807.052884][T19146] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1807.192861][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1807.983828][T19146] usb 7-1: device descriptor read/64, error -71 [ 1808.292774][T19146] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1809.242585][T19146] usb 7-1: device descriptor read/64, error -71 [ 1809.423128][T19146] usb usb7-port1: attempt power cycle [ 1809.508657][T22351] Process accounting resumed [ 1809.903503][T19146] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1809.925364][T19146] usb 7-1: device descriptor read/8, error -71 [ 1810.882210][ C1] net_ratelimit: 3 callbacks suppressed [ 1810.882228][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1811.619942][T22381] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1811.832852][T22397] 9pnet_fd: Insufficient options for proto=fd [ 1811.845610][T22401] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3984'. [ 1811.922043][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1811.985081][T22392] program syz.8.3985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1812.152237][T19146] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1812.192911][T19146] usb 7-1: Using ep0 maxpacket: 8 [ 1812.207150][T19146] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1812.225393][T19146] usb 7-1: config 0 has no interfaces? [ 1812.240395][T19146] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1812.267441][T19146] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.298811][T22408] vivid-007: ================= START STATUS ================= [ 1812.356277][T19146] usb 7-1: config 0 descriptor?? [ 1812.371374][T22408] vivid-007: Enable Output Cropping: true [ 1812.418971][T22408] vivid-007: Enable Output Composing: true [ 1812.468752][T22408] vivid-007: Enable Output Scaler: true [ 1812.502582][T22408] vivid-007: Tx RGB Quantization Range: Automatic [ 1812.543200][T22408] vivid-007: Transmit Mode: HDMI [ 1812.601634][T22408] vivid-007: Hotplug Present: 0x00000000 [ 1812.650844][T22408] vivid-007: RxSense Present: 0x00000000 [ 1812.711634][T22408] vivid-007: EDID Present: 0x00000000 [ 1812.764046][T22408] vivid-007: ================== END STATUS ================== [ 1812.961879][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1813.298758][ T977] usb 7-1: USB disconnect, device number 21 [ 1813.964352][ T30] audit: type=1400 audit(1752804541.034:677): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=22415 comm="syz.8.3992" dest=2 [ 1814.001703][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1814.776317][T22422] overlayfs: failed to resolve './file1': -2 [ 1815.041516][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1815.097979][ T977] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1815.497032][ T977] usb 9-1: config 0 has no interfaces? [ 1815.512856][ T977] usb 9-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 1815.531572][ T977] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1815.557095][ T977] usb 9-1: Product: syz [ 1815.597338][ T977] usb 9-1: Manufacturer: syz [ 1816.047522][ T977] usb 9-1: SerialNumber: syz [ 1816.072432][ T977] usb 9-1: config 0 descriptor?? [ 1816.081351][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1816.315283][T16920] usb 9-1: USB disconnect, device number 10 [ 1816.728965][T22442] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1817.121191][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1817.482582][ T30] audit: type=1400 audit(1752804544.195:678): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=22443 comm="syz.2.3998" daddr=::ffff:172.20.20.32 dest=20003 [ 1818.160992][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1819.021008][T10292] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1819.072545][T22461] tipc: Enabling of bearer rejected, already enabled [ 1819.200835][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1819.200900][T10292] usb 9-1: Using ep0 maxpacket: 8 [ 1819.234672][T10292] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1819.800797][T10292] usb 9-1: config 0 has no interfaces? [ 1819.806349][T10292] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1819.859942][T10292] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.892843][T10292] usb 9-1: config 0 descriptor?? [ 1819.897701][T16920] kernel write not supported for file /1041/attr/exec (pid: 16920 comm: kworker/1:4) [ 1820.129189][T10514] usb 9-1: USB disconnect, device number 11 [ 1820.240678][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1820.329733][T22482] 9pnet_fd: Insufficient options for proto=fd [ 1820.353660][T22487] ------------[ cut here ]------------ [ 1820.359949][T22487] WARNING: CPU: 0 PID: 22487 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310 [ 1820.370133][T22487] Modules linked in: [ 1820.375092][T22487] CPU: 0 UID: 0 PID: 22487 Comm: syz.4.4009 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1820.387294][T22487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1820.397564][T22487] RIP: 0010:folio_memcg+0x1a8/0x310 [ 1820.402929][T22487] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 99 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 1820.422932][T22487] RSP: 0018:ffffc900118ef250 EFLAGS: 00010287 [ 1820.429062][T22487] RAX: ffffffff82044487 RBX: 0000000000000000 RCX: 0000000000080000 [ 1820.437341][T22487] RDX: ffffc90014876000 RSI: 0000000000002176 RDI: 0000000000002177 [ 1820.445707][T22487] RBP: 0000000000000000 R08: ffffea000176ba87 R09: 1ffffd40002ed750 [ 1820.453786][T22487] R10: dffffc0000000000 R11: fffff940002ed751 R12: ffffea000176bab0 [ 1820.461896][T22487] R13: dffffc0000000000 R14: ffff888031a0a080 R15: 0000000000000002 [ 1820.469892][T22487] FS: 00007f747055d6c0(0000) GS:ffff888125c5a000(0000) knlGS:0000000000000000 [ 1820.478881][T22487] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1820.485528][T22487] CR2: 0000000000000000 CR3: 00000000501a2000 CR4: 00000000003526f0 [ 1820.493620][T22487] Call Trace: [ 1820.496938][T22487] [ 1820.499893][T22487] workingset_activation+0x5f/0x4a0 [ 1820.505197][T22487] ? folio_mark_accessed+0x381/0x4a0 [ 1820.510607][T22487] folio_mark_accessed+0x3b5/0x4a0 [ 1820.515775][T22487] kvm_release_page_clean+0x9a/0xe0 [ 1820.521064][T22487] kvm_tdp_page_fault+0x2dd/0x370 [ 1820.526121][T22487] kvm_mmu_do_page_fault+0x2c5/0x640 [ 1820.531507][T22487] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 1820.537397][T22487] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 1820.543038][T22487] kvm_mmu_page_fault+0x22f/0xb70 [ 1820.548109][T22487] ? __pfx_handle_ept_violation+0x10/0x10 [ 1820.553905][T22487] vmx_handle_exit+0x1090/0x18a0 [ 1820.558884][T22487] ? vcpu_run+0x361c/0x6f70 [ 1820.563784][T22487] ? rcu_is_watching+0x15/0xb0 [ 1820.568627][T22487] vcpu_run+0x432e/0x6f70 [ 1820.573065][T22487] ? vcpu_run+0x361c/0x6f70 [ 1820.577678][T22487] ? __pfx_vcpu_run+0x10/0x10 [ 1820.582471][T22487] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1820.588340][T22487] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 1820.594039][T22487] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1820.599882][T22487] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1820.605987][T22487] ? rcu_is_watching+0x15/0xb0 [ 1820.610889][T22487] ? look_up_lock_class+0x74/0x170 [ 1820.616066][T22487] ? register_lock_class+0x51/0x320 [ 1820.621402][T22487] ? __lock_acquire+0xab9/0xd20 [ 1820.626346][T22487] kvm_vcpu_ioctl+0x95c/0xe90 [ 1820.631232][T22487] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1820.636491][T22487] ? __lock_acquire+0xab9/0xd20 [ 1820.641898][T22487] ? __asan_memset+0x22/0x50 [ 1820.646559][T22487] ? smack_file_ioctl+0x302/0x340 [ 1820.651706][T22487] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1820.657161][T22487] ? __fget_files+0x2a/0x420 [ 1820.661883][T22487] ? __fget_files+0x3a0/0x420 [ 1820.666619][T22487] ? __fget_files+0x2a/0x420 [ 1820.671304][T22487] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1820.676308][T22487] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1820.681626][T22487] __se_sys_ioctl+0xfc/0x170 [ 1820.686277][T22487] do_syscall_64+0xfa/0x3b0 [ 1820.690874][T22487] ? lockdep_hardirqs_on+0x9c/0x150 [ 1820.696123][T22487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1820.702388][T22487] ? clear_bhb_loop+0x60/0xb0 [ 1820.707131][T22487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1820.713114][T22487] RIP: 0033:0x7f746f78e929 [ 1820.717575][T22487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1820.737379][T22487] RSP: 002b:00007f747055d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1820.745891][T22487] RAX: ffffffffffffffda RBX: 00007f746f9b6080 RCX: 00007f746f78e929 [ 1820.753960][T22487] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1820.762058][T22487] RBP: 00007f746f810ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1820.770087][T22487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1820.778324][T22487] R13: 0000000000000001 R14: 00007f746f9b6080 R15: 00007ffc3f619d48 [ 1820.786397][T22487] [ 1820.789473][T22487] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1820.796824][T22487] CPU: 0 UID: 0 PID: 22487 Comm: syz.4.4009 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(full) [ 1820.808939][T22487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1820.819054][T22487] Call Trace: [ 1820.822394][T22487] [ 1820.825369][T22487] dump_stack_lvl+0x99/0x250 [ 1820.830028][T22487] ? __asan_memcpy+0x40/0x70 [ 1820.834683][T22487] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1820.839950][T22487] ? __pfx__printk+0x10/0x10 [ 1820.844615][T22487] panic+0x2db/0x790 [ 1820.848575][T22487] ? __pfx_panic+0x10/0x10 [ 1820.853059][T22487] __warn+0x31b/0x4b0 [ 1820.857066][T22487] ? folio_memcg+0x1a8/0x310 [ 1820.861692][T22487] ? folio_memcg+0x1a8/0x310 [ 1820.866306][T22487] report_bug+0x2be/0x4f0 [ 1820.870660][T22487] ? folio_memcg+0x1a8/0x310 [ 1820.875286][T22487] ? folio_memcg+0x1a8/0x310 [ 1820.879897][T22487] ? folio_memcg+0x1aa/0x310 [ 1820.884513][T22487] handle_bug+0x84/0x160 [ 1820.888883][T22487] exc_invalid_op+0x1a/0x50 [ 1820.893421][T22487] asm_exc_invalid_op+0x1a/0x20 [ 1820.898292][T22487] RIP: 0010:folio_memcg+0x1a8/0x310 [ 1820.903523][T22487] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 99 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 1820.923240][T22487] RSP: 0018:ffffc900118ef250 EFLAGS: 00010287 [ 1820.929327][T22487] RAX: ffffffff82044487 RBX: 0000000000000000 RCX: 0000000000080000 [ 1820.937315][T22487] RDX: ffffc90014876000 RSI: 0000000000002176 RDI: 0000000000002177 [ 1820.945328][T22487] RBP: 0000000000000000 R08: ffffea000176ba87 R09: 1ffffd40002ed750 [ 1820.953313][T22487] R10: dffffc0000000000 R11: fffff940002ed751 R12: ffffea000176bab0 [ 1820.961314][T22487] R13: dffffc0000000000 R14: ffff888031a0a080 R15: 0000000000000002 [ 1820.969312][T22487] ? folio_memcg+0x1a7/0x310 [ 1820.973939][T22487] workingset_activation+0x5f/0x4a0 [ 1820.979162][T22487] ? folio_mark_accessed+0x381/0x4a0 [ 1820.984482][T22487] folio_mark_accessed+0x3b5/0x4a0 [ 1820.989624][T22487] kvm_release_page_clean+0x9a/0xe0 [ 1820.994846][T22487] kvm_tdp_page_fault+0x2dd/0x370 [ 1820.999899][T22487] kvm_mmu_do_page_fault+0x2c5/0x640 [ 1821.005218][T22487] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 1821.011073][T22487] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 1821.016665][T22487] kvm_mmu_page_fault+0x22f/0xb70 [ 1821.021738][T22487] ? __pfx_handle_ept_violation+0x10/0x10 [ 1821.027480][T22487] vmx_handle_exit+0x1090/0x18a0 [ 1821.032447][T22487] ? vcpu_run+0x361c/0x6f70 [ 1821.036976][T22487] ? rcu_is_watching+0x15/0xb0 [ 1821.041766][T22487] vcpu_run+0x432e/0x6f70 [ 1821.046136][T22487] ? vcpu_run+0x361c/0x6f70 [ 1821.050706][T22487] ? __pfx_vcpu_run+0x10/0x10 [ 1821.055413][T22487] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1821.061167][T22487] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 1821.066753][T22487] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1821.072493][T22487] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1821.078500][T22487] ? rcu_is_watching+0x15/0xb0 [ 1821.083279][T22487] ? look_up_lock_class+0x74/0x170 [ 1821.088406][T22487] ? register_lock_class+0x51/0x320 [ 1821.093637][T22487] ? __lock_acquire+0xab9/0xd20 [ 1821.098529][T22487] kvm_vcpu_ioctl+0x95c/0xe90 [ 1821.103238][T22487] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1821.108456][T22487] ? __lock_acquire+0xab9/0xd20 [ 1821.113330][T22487] ? __asan_memset+0x22/0x50 [ 1821.117946][T22487] ? smack_file_ioctl+0x302/0x340 [ 1821.123001][T22487] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1821.128419][T22487] ? __fget_files+0x2a/0x420 [ 1821.133031][T22487] ? __fget_files+0x3a0/0x420 [ 1821.137729][T22487] ? __fget_files+0x2a/0x420 [ 1821.142344][T22487] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1821.147305][T22487] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1821.152526][T22487] __se_sys_ioctl+0xfc/0x170 [ 1821.157150][T22487] do_syscall_64+0xfa/0x3b0 [ 1821.161671][T22487] ? lockdep_hardirqs_on+0x9c/0x150 [ 1821.166889][T22487] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1821.172974][T22487] ? clear_bhb_loop+0x60/0xb0 [ 1821.177677][T22487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1821.183590][T22487] RIP: 0033:0x7f746f78e929 [ 1821.188025][T22487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1821.207655][T22487] RSP: 002b:00007f747055d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1821.216097][T22487] RAX: ffffffffffffffda RBX: 00007f746f9b6080 RCX: 00007f746f78e929 [ 1821.224089][T22487] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1821.232079][T22487] RBP: 00007f746f810ca1 R08: 0000000000000000 R09: 0000000000000000 [ 1821.240063][T22487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1821.248050][T22487] R13: 0000000000000001 R14: 00007f746f9b6080 R15: 00007ffc3f619d48 [ 1821.256054][T22487] [ 1821.259431][T22487] Kernel Offset: disabled [ 1821.263772][T22487] Rebooting in 86400 seconds..