last executing test programs: 1m12.960047719s ago: executing program 0 (id=4335): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000008, 0x10, 0xffffffffffffffff, 0x8000000) r2 = gettid() socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x84) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x9, {0x22, 0xff, 0x4, 0x7, 0x800}}) sendto(0xffffffffffffffff, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0x1}, {0x0}], 0x2}}], 0x2, 0x0) 1m11.107567588s ago: executing program 0 (id=4338): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xc5) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r0, 0xde34) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) close(r4) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f00000000c0)={0x4}) ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) ioctl$VHOST_RESET_OWNER(r6, 0xaf02, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_mount_image$ubifs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x189000b0, &(0x7f0000000540)={[{@compr_none}, {@bulk_read}, {@auth_key={'auth_key', 0x3d, 'norm_unmount'}}, {@no_chk_data_crc}, {@no_bulk_read}, {@no_chk_data_crc}, {@compr_none}], [{@dont_appraise}, {@pcr={'pcr', 0x3d, 0x21}}]}, 0x1, 0x9dc3, &(0x7f0000009ec0)="$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") r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, 0x0, 0x0) connect$inet(r8, &(0x7f0000000000)={0x2, 0x2, @remote}, 0x10) 1m8.684595296s ago: executing program 0 (id=4343): open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xf073b432b489e539) mprotect(&(0x7f0000ff6000/0x8000)=nil, 0x8000, 0x2000007) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000480)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0xff, 0x7fff0010}]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB="61158c000000000061134c0000000000bfa00000000000001705000008004ef02d3501000000000095000000000000006916000000000000bf67000000000000350604000fff07206706000004000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9d0cc7d3b4814261bdb94a050000a28a404be266df76965947c73c00c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b540dcfc7ad0500c4063b3b8754c0686cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44e2a2235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188090eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb40000000000000000000000000040007abf9c20d89cbc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000007b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eb29000000000000003cc3aa39ee4b1386bab561cda886fa64ffffff7f473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59801fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d00000000d3114dbc7e2bf2402a75fd7a5573336004088000000000000000fb38c7f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf73400000000000000cc308e936d7637e07c0acd5db6538824c600d9ef418cf19e7a8c4c328be0ce91798adc2dca871073f6bd61d1f5b2a443faa9bda0577383dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db009acaba9eaea90000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8a10300004d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c39e9d8547c666b6764a3c7dd62a94eee45881441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a365b5b11df7216652b5703f31e078ecdefe8e6bfc45a9980a7a8de863e3477dd47d0f11611ca92d89641a183c8f629f17cfc28fde209a793d9c0cf6e3bb3f82670d33396982988b9f5207a732908fdf1506f307ccae47a69319ee2242272e4f7ceb7a40e49a21ce6405af3ecb3381bf0668749c81fc6c2d97e68a693e3e622af52e572f4fa7b20d5c72cf5ff8016461130a46803de45029489921a48bd7688dd593e4a3e9803263ecbd8ae8570293508ebe5fabc1842cbc01ae8fabbf41820c31b7bb83a3439d4540f839ed5c23828a33d7645baa1ec32bb7aa8a786bb0997ccf6bba0a2cf6ef2157a63974d5e525a3f3f7f993ea9e82732ccc2e12c631012175d5d474bef818bdf8f27a7e563684a225dee6ca5f5ff18a89ac6c627ff0e0e4769b6fbcfc847b20960704a4b13e962333bddb966de8bcade6f6bd3915a580ddec2e1bd88fbfdb749789cdc946822212f1cbacb03ba8d3e51e48ccdae20a43bf79ca0131b830620a97877242989e78dfec1d6df5f97ca5cddece50d0cae5d6eabbc1913aa3660e0b00000000000000000000000000bc16b71cb118d93461aa2914d6e454ef05c41beab7382787ba46b68c8d8b35da9fb58b259b4447b59c667ddcac0bb2d066eb0579be84bdca8ed5d693411b7e5b21efaceddacef03daa9772f2715b5613ae0d88f8d109e36f8b8871b646d9ebbcc25d527ad3f828c92cb6597f82ed4d496a511007781be0c7cac07fc508a585f415ef81a887475286df80fb6ff9c6524d0e22d50f88ca15545bc688063b04eb8e0248aca60b9983dd5966216499ccfc0551f6e0323859ae64f55e4d496a695f8e6382aa714b92f95dcfd0b456d9ce7a24f736e4009ef64230e8f83f8283a4cc5f178d4698b94ccd8d0e0e3e2e35e1a7ac0cb3ee52013e8c2802d2f89b3f708fb53c17c3e4fbe0326ee510c4317b5f5f1eb34ca8441c23755acfc469909b16fba134de01d484c1b380622d37"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffb1}, 0x48) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000980)={0x48, 0x5, r2, 0x0, 0x0, 0x1}) 1m8.405753536s ago: executing program 0 (id=4345): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1a1011, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) prlimit64(0x0, 0x9, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) lsetxattr$trusted_overlay_origin(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000400), &(0x7f0000000440), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r4, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0x200101}, {{0x0, 0x0, 0x0}, 0x2044}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000002e00)=""/4095, 0xfff}, {&(0x7f0000000340)=""/240, 0xf0}], 0x4}, 0x101}, {{0x0, 0x0, 0x0}, 0xd}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000540)=""/122, 0x7a}, {&(0x7f0000000a00)=""/245, 0xf5}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4064, 0xfe0}, {&(0x7f0000000600)=""/135, 0x87}], 0x5}, 0x266e}, {{0x0, 0x0, 0x0}, 0x9}], 0x8, 0x40010020, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, 0x0, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0302}}}, 0x14, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20044005}, 0x0) 1m8.337048317s ago: executing program 0 (id=4346): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) r0 = timerfd_create(0x9, 0x80000) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000100)={&(0x7f00000000c0)=""/31, 0x1f}) syz_usb_connect$uac1(0x0, 0x9d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8b, 0x3, 0x1, 0x0, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x3}, [@feature_unit={0x7}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x3}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x7, '\x00\x00\x00\x00'}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x1ff, 0x4, 0x5}, @selector_unit={0xa, 0x24, 0x5, 0x4, 0x2, "00008b85ac"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x0, 0x80, {0x7, 0x25, 0x1, 0x0, 0x0, 0xff1d}}}}}}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8) 1m0.92616116s ago: executing program 0 (id=4350): syz_open_procfs(0x0, 0x0) io_setup(0x226, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000800)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) stat(0x0, &(0x7f00000000c0)) r5 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r8, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x23}}) io_uring_enter(r5, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x5, 0x1, 0x5}, 0x14}}, 0x2400c000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 59.434511141s ago: executing program 32 (id=4350): syz_open_procfs(0x0, 0x0) io_setup(0x226, &(0x7f0000000000)) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000000, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x1, 0x2b8, &(0x7f0000000800)="$eJzs3NFLU38Yx/Hn5/y5OdEtiKCgeqibuhm6/oAaoRANCnNSXQTHPKux0ybnDGMRuZvotr9DuuwuqP4Bb6Kb7ruTIOjGi+gbnrPpmU6durml7xfIeXae74fzdZvybLCt3n/7rJj3UnmrIgMxlQGRmqyJJNeruv/qxwG/HpKwmlwd+fXt/L0HD29nstnJadWpzMy1tKqOXfz4/OW7S58rI7Pvxz5EZSX5aPVn+vvK0MrZ1T8zTwueFjwtlStq6Vy5XLHmHFvnC14xpXrXsS3P1kLJs92mft4pLyxU1SrNj8YXXNvz1CpVtWhXtVLWiltV64lVKGkqldLRuJxsg22syS1PT1uZHdsm0tEdoeuGW5103UytdTO3fAR7AgAAfWb3+T+Y9Xee/7OzwXE/8/+Zved/Eeb/Lqk13dpj/sex4LoZK17/+23G/A8AAAAAAAAAAAAAAAAAAAAAwL9gzZiEMSaxfqyf8m9HRSQmIqbe7/E20SXhx9+EfvZ4/K/3aLvosNAH92IizpvF3GIuOAb9TF4K4ogt45KQ3/7zoS6op25lJ8fVl5RPzlI9v7SYi0i0kW9ItspfODUR5LU5/7/Ew9dPS0JOt75+umV+SK5cDuVTkpAvj6Usjsz7z+vN/KsJ1Zt3slvyw/46AAAAAACOg5Ru2Pb63e/7C2KyvR/kQ+8PGGOWdnt/YMvr60E5185XVAIAAAAAgEPzqi+KluPY7gGKqIgcIt75whiR3m8jIv1xbzQXN0SkD7ZxVEVMRIIzepD4j414WynTxppBEen53bKPotf/mQAAAAB02ubQv4/Q19dd3BEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACdPu98H1li/rdVo7BIPXS5y5L8gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Ef+BgAA//+4IRyf") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) stat(0x0, &(0x7f00000000c0)) r5 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r5, 0x16, &(0x7f0000000380)={&(0x7f0000001000)}, 0x1) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r8, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x23}}) io_uring_enter(r5, 0x27e2, 0x0, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x14, 0x5, 0x1, 0x5}, 0x14}}, 0x2400c000) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) 16.513943075s ago: executing program 3 (id=4470): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r4 = open(&(0x7f0000000100)='./file0\x00', 0x145bc2, 0xab) copy_file_range(r4, 0x0, r4, &(0x7f0000000000)=0x6e65cea5, 0x5, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0xfffffffffffffffe, 0x1000000000, 0xfffffffffffffffc, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r5 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x0) setuid(0xee01) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000900)={0x53, 0xfffffffffffffffd, 0x6, 0x34, @buffer={0x0, 0x5d, &(0x7f00000001c0)=""/93}, &(0x7f00000004c0)="190acad5f317", 0x0, 0x4, 0x10002, 0x3, 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x2, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) (async) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) (async) open(&(0x7f0000000100)='./file0\x00', 0x145bc2, 0xab) (async) copy_file_range(r4, 0x0, r4, &(0x7f0000000000)=0x6e65cea5, 0x5, 0x0) (async) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800, 0x2, 0x80000000000004, 0x6}, 0x0, &(0x7f0000000400)={0x1f, 0x0, 0x800000000000, 0xfffffffffffffffe, 0x1000000000, 0xfffffffffffffffc, 0xfffffffffffffffe}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (async) syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x0) (async) setuid(0xee01) (async) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000900)={0x53, 0xfffffffffffffffd, 0x6, 0x34, @buffer={0x0, 0x5d, &(0x7f00000001c0)=""/93}, &(0x7f00000004c0)="190acad5f317", 0x0, 0x4, 0x10002, 0x3, 0x0}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x3}, {}, {0x2, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) (async) 15.981651368s ago: executing program 3 (id=4473): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r1, 0x0) syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000000)='./bus\x00', 0x2000000, &(0x7f0000000500)={[{@file_umask={'file_umask', 0x3d, 0x1}}, {@part={'part', 0x3d, 0x2}}, {@codepage={'codepage', 0x3d, 'cp866'}}, {@codepage={'codepage', 0x3d, 'cp936'}}, {@codepage={'codepage', 0x3d, 'iso8859-13'}}]}, 0x4, 0x30e, &(0x7f0000000740)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2000000000000021, 0x2, 0x10000000000002) r5 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 12.460495823s ago: executing program 4 (id=4485): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f0000000100)={0x2, 0x0, 0x0, 0xfffffefe, 0x4}) 11.037463621s ago: executing program 3 (id=4494): syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='/dev/dri/card#\x00', &(0x7f0000000040)='!{%\x00', 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000000)='./file0\x00', 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="646973636172642c646973636172642c646973636172642c63703d30786666666666666666666666666666666442b178b7e9f7508da2d78a472c6e6f7265636f766572792c63703d3078303030303030303030303030303030332c646973636172642c6f726465723d72656c617865642c6e6f646973636172642c00"], 0x0, 0xa0d, &(0x7f0000000a80)="$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") setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000000080)=0x34, 0x4) write$UHID_INPUT(r1, &(0x7f00000012c0)={0xfc, {"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", 0xffffffffffffff96}}, 0x1006) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc00000000020500000000000000000002000002080009400000ab080600074000040000060007400003000008000440000007d80600074000020000b00001802c0001801400030000000000000000000000000000000001140004"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x24008000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c500000005000000"], &(0x7f0000000240)='GPL\x00', 0x800, 0x0, 0x0, 0xc1100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r2, &(0x7f0000000040)='net/raw6\x00') keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000380)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#%\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce5+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) readlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000680)=""/4096, 0x1000) getsockopt$SO_J1939_ERRQUEUE(r5, 0x6b, 0x4, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000500)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x11, [{{0x9, 0x2, 0x48}}]}}, 0x0) 9.51019354s ago: executing program 4 (id=4497): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='statm\x00') preadv(r2, &(0x7f00000025c0)=[{&(0x7f0000002500)=""/79, 0x4f}], 0x1, 0x10006c, 0x0) syz_emit_ethernet(0x32, &(0x7f0000001c80)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x20, 0x0, @gue={{0x1, 0x1, 0x1, 0x4, 0x0, @void}, "95b8bcc0"}}}}}}, 0x0) socket(0x200000000000011, 0x2, 0xd) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r5 = socket(0x200000000000011, 0x2, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0x2, 0x0) bind$packet(r5, &(0x7f0000000080)={0x11, 0x800, r4, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) syz_emit_ethernet(0x32, &(0x7f0000000200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x10, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e23, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x4, 0x0, @val=0x80}}}}}}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a300000000040000380080001400000000008000240000000002c0900000000000000656e65766530000000000000000000140001007767320000000000000000000000000048000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000"], 0xfc}}, 0x0) 8.341172175s ago: executing program 4 (id=4498): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x20080) r0 = syz_io_uring_setup(0x2ee7, &(0x7f0000000380)={0x0, 0x8ac4, 0x400, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @none}, &(0x7f0000000200)=0xe, 0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x1, 0x14, r3, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@tipc=@name, 0x80, &(0x7f00000009c0), 0x0, &(0x7f0000000300)=""/36, 0x24}, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="03000000000000002c64657670747300"]) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) sendmsg$tipc(r4, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @broadcast}], 0x10) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) semget(0x1, 0xdf9d981d985f570c, 0x200) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000000c0)=0x29) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000100)=0xff) ioctl$TCSETSW2(r7, 0x402c542c, &(0x7f0000000540)={0xfffffff7, 0x200401, 0xfffffffd, 0xc6cf, 0x91, "0000080100", 0x240000, 0x1fd}) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x8) ioctl$KDFONTOP_GET(r7, 0x4b72, 0x0) syz_fuse_handle_req(r6, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_DEST(0xffffffffffffffff, 0x0, 0x4) 7.497679709s ago: executing program 4 (id=4501): fspick(0xffffffffffffff9c, 0x0, 0x1) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)=""/150, 0x96) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20600, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) keyctl$session_to_parent(0x12) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [0x0, 0x9], [0x8200], 0x1}}}) r6 = socket(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x5c00, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) sendmmsg(r6, &(0x7f0000000000), 0x400000000000235, 0x0) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) prlimit64(0x0, 0x7, 0x0, 0x0) madvise(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5) close_range(r1, 0xffffffffffffffff, 0x0) 5.682744339s ago: executing program 3 (id=4504): userfaultfd(0x801) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x102) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_pressure(r0, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) fcntl$setownex(r2, 0xf, &(0x7f00000003c0)={0x33a536d2b930c7f2}) read$FUSE(r1, &(0x7f000000a440)={0x2020}, 0x2020) openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x840, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="8f000000", @ANYRES16=r4, @ANYBLOB="01002bbd7000fdffffff01000000080001000200000074000c8034000b8008000a00e76d00000800090082100049080009000387cd07080009003c8f162b08000900e6eda14108000a00bc5c00003c000b80080009006421916c08000900733cb6300800090067d2860108000900e268264708000900ce9aea430800090067924a3408000900c2f87b170800020002000000"], 0x98}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000000100000604000000010000000a00000000610000610000000000000000000000000000000000b693e2f3dfacd97640c963598f350487a23711be8445d29f7aa46b4d6586e14e76215dd76906b3832c9b2ddcf8ac422ea1a3bd383afc6fecc8d712a1525a386df63561b81f8f1301ed675968a57ff00af68e99a45323b34fb978927a0d38a5529b0e54b3f98695fba81ecb7abe7a0b59a6df8e5e6abfdf2c58e5a746f68bf89c382f982dfb7847c02b2d69b32c5cf740d72217e3"], &(0x7f00000000c0)=""/158, 0x32, 0x9e, 0x1}, 0x28) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket$kcm(0x1e, 0x5, 0x0) recvmsg(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000000c0)=""/217, 0xd9}], 0x1}, 0x40002022) prctl$PR_SET_TIMERSLACK(0x1d, 0x6) close(r5) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000b7"], 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) 5.601810595s ago: executing program 5 (id=4505): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}}}, &(0x7f0000000100)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000180)={r3, 0x3, 0x10}, &(0x7f00000001c0)=0xc) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xeeee0000, 0xb5, 0xa9c1, 0x8, 0x0, [{0x2, 0x80, 0x0, '\x00', 0x1}, {0x6, 0xff, 0x0, '\x00', 0x10}, {0xfe, 0x3}, {0x3, 0x90, 0x3, '\x00', 0x13}, {0x8, 0x2, 0x5, '\x00', 0x9}, {0x0, 0x60}, {0x0, 0x85, 0x5}, {0x0, 0x6, 0x1, '\x00', 0xfc}, {0x0, 0xff, 0x0, '\x00', 0x7}, {0xc, 0x4, 0xfa, '\x00', 0x42}, {0x4, 0x2, 0x10}, {0x4, 0x50, 0xb, '\x00', 0x40}, {0x0, 0x0, 0x31, '\x00', 0x5}, {0x87, 0x4d, 0x5}, {0xff, 0x8, 0x4, '\x00', 0xfe}, {0x7, 0x3}, {0x1, 0x0, 0x4, '\x00', 0x4}, {0xf, 0x0, 0x0, '\x00', 0x2}, {0x1, 0x3, 0x7, '\x00', 0xa}, {0x90, 0x0, 0xe, '\x00', 0x7}, {0x5, 0xe5, 0x1}, {0xfb, 0x40, 0x0, '\x00', 0x70}, {0x1, 0x40, 0xfe, '\x00', 0xe}, {0x10, 0x2, 0xe, '\x00', 0xf4}]}}) 5.252612311s ago: executing program 2 (id=4506): socket$nl_route(0x10, 0x3, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_access\x00', 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="1bc387f31bf6681b5b", 0x9}], 0x1}, 0x48005) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f38437", 0x7}], 0x1}, 0x4048081) 4.635521183s ago: executing program 3 (id=4507): socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x19, 0x64, 0xd4, 0x8, 0x1a86, 0xe092, 0x533f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x1f, 0x2, 0x2, 0xe9, 0x17, 0xf3, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5}, {{}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = socket(0x10, 0x3, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000880)={0x0, 0x5, 0x3, "bc510a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)={0x40, 0x17, 0x6, @local}, &(0x7f0000000d00)={0x40, 0x19, 0x2, "a136"}, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) 4.465513302s ago: executing program 5 (id=4508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x38b6, &(0x7f00000005c0)={0x0, 0xa3a3, 0x40, 0x2, 0x375}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000640)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x1c}, @ioring_restriction_sqe_op={0x1, 0x16}, @ioring_restriction_register_op={0x0, 0x7}, @ioring_restriction_sqe_flags_allowed={0x2, 0x15}], 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) io_setup(0xd6, &(0x7f0000000300)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[0x0]) syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x8d, 0x7c, 0x41, 0x10, 0x6b9, 0x4061, 0x93b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x6a, 0xef}}]}}]}}, 0x0) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsmount(r6, 0x0, 0x5) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001f000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) 4.284195715s ago: executing program 2 (id=4510): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x22, 0x51, 0x43, 0x8, 0x4e7, 0x20, 0x36e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x93, 0xf2, 0xe2, 0x0, [], [{{0x9, 0x5, 0x88}}]}}]}}]}}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000500)='g', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @remote, 0x2}, 0x1c) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/120, 0x78}], 0x1) shutdown(r0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b7000000e9ff0180bfa30000000000000703000028feffff7a0af0fff8ffffff61a4f0ff0000000015040200000002000f040000000000003404000001ed0a0014040000170000800f340000000000007b0a00fe000000002c04000000000000c6000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d0cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090d030000003acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931481747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347932a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87ddbd23834a50d7eb8e327fb5db12cbd6a9efe8e671c4f251fe3bf440cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa2c910fb8de24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f626483632a2ab547f88dd6efec73a0271a19ca3aa860aa4dcaeeb9bd91a0cb429efae2a5fcc08b3a572969bbe91c921ac1476027772c87d1767e31a3446cd57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c828c02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007f00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d05d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b530500d8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f322df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bd9b075f1488d22230592a79000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7cd4d5cb9076b81b7741ec03877afb5237ea1694addebc14c3ae49f88c462aa2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399f055f2fa278783fefb0a5ef0b41e14a6fe6ba306206670b84894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014f38fee012365f963b2a85e7d8075c333475b9be0bdd37220e316f2297743dd4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd08000000e843591d2618e2d2cdc7081c8fafffe9c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119d2a673bdae05779208409e6cf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8a9d3374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df5aa29f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21d24fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696eb3f4b642f36c9006c0067e24a64aa8c53dd824a4ee271e35ed9eed636338f1835fc957729d63dc1bfc7b772cbe536c2d3aff27c22f9a2f876512616a5bdaf22a16e19d1b5f52abb40b433983d0cf50234de659c1a397ce901000000caae1bcfdce33dae6adc260321702f239c25ab181390e7dc8c1e5b1cf3b4fef1cd5c44a89b5e5d8314e02f4673ded90bce9a4025b0232eec970f7aa17f175a14e8dc8de9bac0006b98a8283eee5665f3aede28228e0468dbcf8b776fe4c629d3af183a7cba5adf77f23d31f9d5a183c0da4e95f75b1496a97a46a06e4e1f5a8438d49dbd493ba2482c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) 3.595937705s ago: executing program 1 (id=4511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1000008, 0x4000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = syz_open_dev$media(&(0x7f0000000280), 0x4d2, 0x6000) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000003c0)={0x80000000, &(0x7f0000000300), &(0x7f0000000340)=[{}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000900)={0x0, 0x9, 0x0, &(0x7f0000000400)=[{}, {0x80000000}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000000780)=[{}], 0x3, 0x0, &(0x7f0000000800)=[{}, {}, {}], 0x2, 0x0, &(0x7f0000000880)=[{}, {}]}) r6 = syz_open_dev$media(&(0x7f0000000380), 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000000100)={0x80000000, 0x0, &(0x7f0000000200)=[{{}, {0x80000000, 0x0}}, {{}, {0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f00000001c0)={{r8, r7, 0x1, [0x0, 0xf7df]}, {0x80000000, r9, 0x4, [0x6]}, 0x1, [0x8, 0x3df]}) ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000980)={{r4, 0x0, 0x2, [0xf16, 0x81]}, {r5, r7, 0x1, [0x9, 0x3]}, 0x4, [0x4, 0x14]}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r2, 0x5452, &(0x7f0000000140)=0x1) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r1) pipe(&(0x7f0000000200)) 2.607471414s ago: executing program 1 (id=4512): r0 = getpgid(0x0) syz_clone3(&(0x7f0000000580)={0x40000000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) r5 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r5, 0x21, 0x0, 0x4) 2.489878599s ago: executing program 4 (id=4513): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r0, r0, 0x0, 0x40000f63c) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000000)={0x3, 0x6d, 0x8}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0xa) 2.043802769s ago: executing program 1 (id=4514): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="b11e089aa113d722448bc40367cae86b2e128cc156f0eaedd753d0e6e67069830746d9ec94c88d45c4e5e90c213a83fcea33bf1d7a3653e9d19eb7019beaf68067c4e5c9ed023e653183bb207a7f19b3912744da7008d6b0d2189e9db77cd1c91d5023f9197ca2e1f7", @ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000005}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$nl_route(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) epoll_create1(0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) fsetxattr$trusted_overlay_nlink(r2, 0x0, &(0x7f0000000200)={'U+', 0x100}, 0x16, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5, 0x0, 0x7f}) socket$inet6_sctp(0xa, 0x2, 0x84) connect$unix(0xffffffffffffffff, &(0x7f0000000940)=@abs, 0x6e) socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x20, r8, 0x65283e1aaa2ddbb1, 0x0, 0x1ffffffc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x20}}, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f0000000780)=[{{&(0x7f00000003c0)=@l2, 0x80, &(0x7f0000000640)=[{&(0x7f0000000500)=""/162, 0xa2}, {&(0x7f0000000880)=""/133, 0x85}, {&(0x7f00000001c0)=""/64, 0x40}, {&(0x7f0000000440)=""/112, 0x70}], 0x4, &(0x7f00000005c0)=""/15, 0xf}, 0x10}], 0x1, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000df130af50200000000a8cdf351380000080003ba131a2644fe53084000000000b40900000000000000239b51faffa56c24627500aa65000000000000"], 0x1c}}, 0x0) 1.807313582s ago: executing program 3 (id=4515): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) sched_setscheduler(r0, 0x0, &(0x7f00000000c0)) ioctl$VIDIOC_G_TUNER(0xffffffffffffffff, 0xc054561d, &(0x7f0000000ac0)={0x0, "12f7f538cc9ae4f769d66b3d1dd9cd911e9a080bd3ae2ae3ea00", 0x0, 0x10, 0x0, 0x3, 0x0, 0x0, 0x2, 0x2}) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001980)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x20381) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r6, 0x80dc5521, &(0x7f0000001080)=""/4096) setrlimit(0x0, &(0x7f0000000080)={0x4, 0x5}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) sched_getscheduler(r1) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000180)={'veth0_virt_wifi\x00', &(0x7f0000000100)=@ethtool_cmd={0xa, 0xf, 0x80, 0x3, 0x1, 0x9, 0x80, 0x6, 0x3, 0x63, 0x9, 0x7, 0x1, 0x3, 0x7, 0x8001, [0x0, 0x7]}}) 1.741754652s ago: executing program 2 (id=4516): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r3, &(0x7f0000000200), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x1, 0x8001) syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f00000004c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) creat(0x0, 0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r1) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01020000000000000000030026001400030000000000000000000000ffffac1e000114000600736974300000000000000000000000001400070000000000000000000000ffffac14140014000200fe800000000000000000e97709130000"], 0x64}, 0x8, 0x3000000000002}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {}, 0x1}) 1.146538819s ago: executing program 5 (id=4517): syz_open_procfs(0x0, &(0x7f00000000c0)='ns\x00') munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = open$dir(&(0x7f0000001040)='./file0\x00', 0x208102, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x20010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x82806, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0xf) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r7, 0x4048aecb, &(0x7f0000000080)=ANY=[]) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000951000/0x2000)=nil, 0x2000, 0xb635773f06ebbeef, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1001, 0x3) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) 982.725021ms ago: executing program 4 (id=4518): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xc4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4808}, 0x8048) r2 = dup(r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd29, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}]}, 0x24}}, 0x80) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x7}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8008000}, 0x4000000) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) fallocate(r6, 0x11, 0x0, 0x74000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_genetlink_get_family_id$wireguard(&(0x7f0000000240), r2) 897.720541ms ago: executing program 5 (id=4519): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x10}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x8000, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x3, 0x1}}, 0x10) 884.71383ms ago: executing program 2 (id=4520): socket$nl_route(0x10, 0x3, 0x0) fgetxattr(0xffffffffffffffff, &(0x7f0000000000)=@known='system.posix_acl_access\x00', 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000480)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="1bc387f31bf6681b5b", 0x9}], 0x1}, 0x48005) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f38437", 0x7}], 0x1}, 0x4048081) 836.260914ms ago: executing program 1 (id=4521): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000580)) sendmsg$NFC_CMD_SE_IO(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)={0x20, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_SE_APDU={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 709.660051ms ago: executing program 5 (id=4522): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$inet_buf(r0, 0x0, 0x2e, &(0x7f0000000540)="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", 0x1000) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) 494.706871ms ago: executing program 1 (id=4523): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x10000, 0x4, 0x8, 0xfffffbc5, 0x0, [{0x6d, 0x8, 0xb0, '\x00', 0xe}, {0x7, 0x8, 0xb9, '\x00', 0x5}, {0x0, 0x41, 0x9, '\x00', 0x3}, {0x67, 0x3, 0x8, '\x00', 0x9}, {0x8, 0x50, 0x82, '\x00', 0x60}, {0x0, 0x4, 0x2, '\x00', 0x7}, {0x3, 0xf4, 0x1, '\x00', 0x8}, {0xa, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0xfe, '\x00', 0xff}, {0x6, 0xd, 0x0, '\x00', 0x6}, {0x40, 0x13, 0x4, '\x00', 0x1}, {0x8, 0x24, 0x0, '\x00', 0xff}, {0x1, 0x86, 0xc, '\x00', 0xe9}, {0x5, 0x4e, 0x2}, {0x4, 0x4, 0x2, '\x00', 0x7}, {0x0, 0x20, 0x7, '\x00', 0x7f}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x4c, 0x3, 0x2, '\x00', 0x1}, {0x8, 0x1, 0xbe, '\x00', 0xff}, {0x2, 0x3, 0x8, '\x00', 0x48}, {0x7, 0x21, 0x2, '\x00', 0x4}, {0x5, 0x0, 0x0, '\x00', 0x4}, {0x93, 0x7, 0x4, '\x00', 0xe5}, {0x3, 0x7f, 0x8, '\x00', 0x57}]}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) r4 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) recvfrom$inet(r4, &(0x7f00000005c0)=""/4096, 0x1000, 0x1, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000500)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@assoc={0x10, 0x117, 0x4, 0x5}], 0x10, 0x48814}, 0x14000092) close_range(r1, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000340)={0x2, 0x0, @ioapic={0x10000, 0x4, 0x8, 0xfffffbc5, 0x0, [{0x6d, 0x8, 0xb0, '\x00', 0xe}, {0x7, 0x8, 0xb9, '\x00', 0x5}, {0x0, 0x41, 0x9, '\x00', 0x3}, {0x67, 0x3, 0x8, '\x00', 0x9}, {0x8, 0x50, 0x82, '\x00', 0x60}, {0x0, 0x4, 0x2, '\x00', 0x7}, {0x3, 0xf4, 0x1, '\x00', 0x8}, {0xa, 0x7, 0xb, '\x00', 0x45}, {0x8, 0x5, 0xfe, '\x00', 0xff}, {0x6, 0xd, 0x0, '\x00', 0x6}, {0x40, 0x13, 0x4, '\x00', 0x1}, {0x8, 0x24, 0x0, '\x00', 0xff}, {0x1, 0x86, 0xc, '\x00', 0xe9}, {0x5, 0x4e, 0x2}, {0x4, 0x4, 0x2, '\x00', 0x7}, {0x0, 0x20, 0x7, '\x00', 0x7f}, {0x3, 0x7, 0xd1, '\x00', 0x4}, {0x4c, 0x3, 0x2, '\x00', 0x1}, {0x8, 0x1, 0xbe, '\x00', 0xff}, {0x2, 0x3, 0x8, '\x00', 0x48}, {0x7, 0x21, 0x2, '\x00', 0x4}, {0x5, 0x0, 0x0, '\x00', 0x4}, {0x93, 0x7, 0x4, '\x00', 0xe5}, {0x3, 0x7f, 0x8, '\x00', 0x57}]}}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x2}}, 0x26) (async) accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) (async) recvfrom$inet(r4, &(0x7f00000005c0)=""/4096, 0x1000, 0x1, &(0x7f0000000080)={0x2, 0x4e24, @broadcast}, 0x10) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r5, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000500)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r5, 0x0, 0x0, 0x0) (async) sendmsg$alg(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@assoc={0x10, 0x117, 0x4, 0x5}], 0x10, 0x48814}, 0x14000092) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) (async) ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) (async) 465.832691ms ago: executing program 5 (id=4524): r0 = getpgid(0x0) syz_clone3(&(0x7f0000000580)={0x40000000, 0x0, 0x0, 0x0, {0x15}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000080)={0x2832, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x123}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) r5 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r5, 0x21, 0x0, 0x4) 373.869482ms ago: executing program 2 (id=4525): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x810) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x403}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r3}]}, 0x3c}}, 0x0) 47.741808ms ago: executing program 1 (id=4526): syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) write$FUSE_INIT(r2, &(0x7f0000000140)={0x50, 0xb, 0x0, {0x7, 0x29, 0xfefffffa, 0x4048388c, 0x4, 0x80, 0x5, 0x41, 0x0, 0x0, 0x20, 0x3000b}}, 0x50) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) (async) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) (async) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) syz_usb_connect(0x4, 0x556, &(0x7f00000006c0)={{0x12, 0x1, 0x110, 0x26, 0x7a, 0xac, 0xff, 0xc52, 0x2842, 0xa5b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x544, 0x3, 0x0, 0x3, 0x20, 0x0, [{{0x9, 0x4, 0xdd, 0x2, 0x8, 0xd2, 0x43, 0x94, 0x5, [@hid_hid={0x9, 0x21, 0x8, 0x87, 0x1, {0x22, 0x932}}, @cdc_ncm={{0xb, 0x24, 0x6, 0x0, 0x1, "f1b4092c7d1b"}, {0x5, 0x24, 0x0, 0x3c}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x5, 0xff, 0x4}, {0x6, 0x24, 0x1a, 0x4, 0x8}, [@acm={0x4, 0x24, 0x2, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0x4, 0x6, 0x3}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x2, 0xffff}, @mbim={0xc, 0x24, 0x1b, 0xffff, 0x6, 0xb4, 0x0, 0xffff}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x5, 0x2}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x1c, 0x9}]}], [{{0x9, 0x5, 0x2, 0x4, 0x400, 0x1, 0x2, 0x6, [@generic={0xcf, 0x0, "20f51076bff2d5c37d54eec23dc9cfd71be3029b62fe717705609c7eaa153b0e3fb25307ba8ece6349c20cc1de446a555c0b949fe538e1eaaf9fdc7ad5e4c9241afbcb574990711c5ccddb1b677e9fbf57ca1dfac6a350d101c30e114bfee108b94d57a94273a47ad95ac42a8e435af8bac9d422eee1457c7ac6097943749bc084fba167839499183a879b69801f74df1498fdd77f6581aa0157846dcaf8af46c76ec32148056050d32ba2e5a9833c14b60ebdea333bac2b97557238a4578ec319c91371047ec134233be5d167"}, @generic={0xe5, 0xd, "6cd0380b81e62045b5f6d5a8be0d3b8287f383b6541b42e5af068c04433715361b3dcda9287851d42b8790542ca4af900d2c83c9ef5b39567661c592c42eb15bdaeafb28febbe3e19d6587b2b578735ca94a35458fe683761995382540ea6d3841dae3106db4354717b681af105b97fa34b075748eb241bdead858801ef8d863e16707d269a9c3ca89c95155233a9f9635568cb3e4476af47a6624647f4255cf7e4df4f45d15208f978b796c399a9dcbe28034a5c83242abccd6ae20735f755519c44863f9fb40adc9ff34d0c9a12a559b2f0ea3059e29793150b73c65a7382d6ff4f1"}]}}, {{0x9, 0x5, 0xc, 0xc, 0x20, 0xd0, 0x56, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7}]}}, {{0x9, 0x5, 0x3, 0x3, 0x10, 0x0, 0x7, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xf7, 0x74}]}}, {{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x81, 0x71, 0xff}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x8, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0xb, 0x10, 0x3f7, 0x8, 0x8, 0x0, [@generic={0x1e, 0xf, "06c73520163e1462bf4c8956feeec367cda66d31d2b117ea275b3a0a"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x40, 0x88, 0x2, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x3, 0xf800}, @generic={0x5, 0xe, "d265fb"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x6, 0x2, 0x3, [@generic={0x67, 0x31, "c03dd7aea64ddf4e09da03bbd6faf34a22b4853ee320182453fb41150fc3587716b4bad5987a48d1d88187e6880ce37a36dae22f45a3c49221ae6404cb015e07ee7efd4b51799252e73bc9f16121c7fdbe7c41f092b534cee217a40c85f2211399accb1b45"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xb8b1}]}}]}}, {{0x9, 0x4, 0x40, 0x7, 0x7, 0x2f, 0x1a, 0xaa, 0x1, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "0fa3c4"}, {0x5, 0x24, 0x0, 0x9a}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x0, 0x7f, 0x27}}, @uac_as={[@format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0xa, 0x3ff, 0x8, "8f"}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x3, 0x1, 0xd3, "8ad8042466abfeac"}, @format_type_ii_discrete={0xd, 0x24, 0x2, 0x2, 0x7fff, 0x8, 0x1, "989f1eeb"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x5, 0x8, "c4beff72177ab5"}]}], [{{0x9, 0x5, 0x9, 0x0, 0x8, 0xdc, 0x3}}, {{0x9, 0x5, 0x80, 0x0, 0x3ff, 0x54, 0x5, 0xb}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x2, 0x0, 0x5}}, {{0x9, 0x5, 0x3, 0x14, 0x40, 0x9, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x6}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0xfb, 0x7, 0x8}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x2, 0x7, 0x58}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x0, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x80}]}}]}}, {{0x9, 0x4, 0x98, 0x4, 0x8, 0x13, 0x9b, 0xcf, 0x5, [], [{{0x9, 0x5, 0x6, 0xc, 0x8, 0x24, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x7}]}}, {{0x9, 0x5, 0xd, 0x4, 0x10, 0x80, 0x7, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x40, 0xfc01}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x7, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x6, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x4}]}}, {{0x9, 0x5, 0x84, 0x8, 0x400, 0xb, 0x4, 0x80, [@generic={0x2b, 0x7, "90e3811958fa390f8fec9f454d86f6c01eb5568bdf7873dcf6b9a31b8724c544d0300f89c46c4aec8e"}, @generic={0x7d, 0xe, "6c20d696c0d938bc2495faab1c34657970f7f3a6fb14a2fa5e18c143c072538ad36498cbe7eee7b2e05280ca62f1f23d54367c844174579e1b8398baaf18f8040886a943b841caf6c6e71f2dd6a23388e26b854b60d3d9cbcb4790aeffe2a8fa69b184e1f4e94624d7c953d2f39d7b15473a1b679af6121af43742"}]}}, {{0x9, 0x5, 0x0, 0x2, 0x20, 0x2, 0x1, 0x5, [@generic={0x50, 0x11, "bf77904e0bf5c7db6030fb11fcaf81d9459be0be4ff4bb6d42275087fcbb0c64dc06747e4c0cf1ffaf29a297c975fc276964e12b58cc4f92240a7948bf25a8d5b069448e7ddf614997fb30062f23"}]}}, {{0x9, 0x5, 0x9c, 0x10, 0x40, 0x79, 0x6, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x67, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x7913}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0xde, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xe9}]}}, {{0x9, 0x5, 0x0, 0x2, 0x10, 0xc2, 0x9, 0x3}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x80, 0x7, 0x8, 0x10, 0x1}, 0x10, &(0x7f00000002c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x2b981a73f1aab822, 0x3, 0x8, 0x0, 0x4}]}, 0xa, [{0x0, 0xfffffffffffffffd}, {0x10, &(0x7f0000000300)=@string={0x10, 0x3, "e80a4e36513e3e52824ad48e1a5c"}}, {0x17, &(0x7f0000000340)=@string={0x17, 0x3, "92a2ad729d2fa3730bb1fd7fb161b3b7c6c7cac261"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x860}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x426}}, {0xf2, &(0x7f0000000440)=@string={0xf2, 0x3, "ab821ddd74edbb0eac0d25715d2cdf9fc9f806ec8938d06a60f0c48ac584ec64c6db8123da534d9c5e126faf6fc31de5cdf8b6f4cec29f5a43bd4828e2270ccec13c54dacf97c625971a5f22fa2bf3e7db29549acc3b61b5d05cb821f8a180783672fde7375bd123c6a4ccb0f307ace21acb282b55e8ca628bf820b860f86860debc76c80a7bfcdfabed56431186308ca43059dcdfe25f4706f77f58bb8a267db2d1b40351146b35c386989bfdf4ab9e0a39196b74841de4986b98135d42b2e75c6e7654b940a089a3fe919a067621986864f61b1aa73c71a781df855d33062ee37ad0a0170b7f1aa7be2e50f2a22e0a"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2009}}, {0x82, &(0x7f0000000580)=@string={0x82, 0x3, "4514d6b4603519334c60a196b72158cbf4b7a2c1677cb6fb659d999591be1552b4ef3c8e2836c4280d1cac4bbc7279f1e13fa73bffd8c8e1da7811db5a716572af7a0dea4a491988bf58d611c89ff8adb27537657ee2bafcd0eb94a6568b79940be841fbb2dd38c6ee25e9165ab93c6ce6827defe81e6393ad194d951f4da5e3"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0xc07}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x41e}}]}) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x7, &(0x7f0000000000)=0x4, 0x4) (async) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[{0x27c}, {0x1, 0x2}, {0x480, 0x100}]}) 0s ago: executing program 2 (id=4527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = io_uring_setup(0x38b6, &(0x7f00000005c0)={0x0, 0xa3a3, 0x40, 0x2, 0x375}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r3, 0xb, &(0x7f0000000640)=[@ioring_restriction_sqe_flags_allowed={0x2, 0x1c}, @ioring_restriction_sqe_op={0x1, 0x16}, @ioring_restriction_register_op={0x0, 0x7}, @ioring_restriction_sqe_flags_allowed={0x2, 0x15}], 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd502000000090001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) io_setup(0xd6, &(0x7f0000000300)=0x0) io_submit(r5, 0x1, &(0x7f0000000580)=[0x0]) syz_usb_connect(0x0, 0x24, &(0x7f0000001740)={{0x12, 0x1, 0x0, 0x8d, 0x7c, 0x41, 0x10, 0x6b9, 0x4061, 0x93b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa0, 0x6a, 0xef}}]}}]}}, 0x0) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsmount(r6, 0x0, 0x5) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001f000605142603600e12080005007a010401a800160020e0034004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080020851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000016608fffffff30000180000000000000000000000001000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) kernel console output (not intermixed with test programs): 09.466824][T17238] bridge_slave_1: entered promiscuous mode [ 1209.586131][T17269] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3097'. [ 1209.782839][T17238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1209.836654][T17238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1209.979297][T17283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3100'. [ 1209.997635][T17238] team0: Port device team_slave_0 added [ 1210.166162][T17238] team0: Port device team_slave_1 added [ 1210.351309][T17238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1210.378369][T17238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.404394][ C0] vkms_vblank_simulate: vblank timer overrun [ 1210.501275][T17238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1210.539918][T17238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1210.560521][T17238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.586503][ C0] vkms_vblank_simulate: vblank timer overrun [ 1210.623221][T17238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1210.746393][T10546] Bluetooth: hci2: command tx timeout [ 1210.820059][T17298] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3108'. [ 1210.859121][T17238] hsr_slave_0: entered promiscuous mode [ 1210.886965][T17238] hsr_slave_1: entered promiscuous mode [ 1210.893487][T17238] debugfs: 'hsr0' already exists in 'hsr' [ 1210.915866][T17238] Cannot create hsr debugfs directory [ 1210.994474][T17304] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3110'. [ 1211.536951][T17238] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.280224][T17238] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.407453][T17328] nbd: couldn't find device at index 2 [ 1212.483571][T17331] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3119'. [ 1212.523862][T17238] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.693917][T10546] Bluetooth: hci2: command tx timeout [ 1212.705226][T17238] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.925967][T17238] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1213.026301][T17238] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1213.037631][T17238] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1213.062183][T17238] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1213.110794][T17346] fuse: Bad value for 'user_id' [ 1213.122034][T17346] fuse: Bad value for 'user_id' [ 1213.931889][T17238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1213.976470][T17238] 8021q: adding VLAN 0 to HW filter on device team0 [ 1214.040209][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.047443][ T6041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1214.105898][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.113218][ T6041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1214.132752][T17370] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3132'. [ 1214.187976][T17374] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1214.202629][T17374] exFAT-fs (loop3): unable to read boot sector [ 1214.209577][T17374] exFAT-fs (loop3): failed to read boot sector [ 1214.216920][T17374] exFAT-fs (loop3): failed to recognize exfat type [ 1214.388020][T17376] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3134'. [ 1214.412830][T16481] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 1214.624407][T10546] Bluetooth: hci2: command tx timeout [ 1214.828680][T16481] usb 3-1: config 7 interface 0 has no altsetting 0 [ 1214.860890][T16481] usb 3-1: string descriptor 0 read error: -22 [ 1214.869789][T16481] usb 3-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 1214.908567][T16481] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.955466][T16481] usb 3-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 1214.987250][T16481] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1215.006169][T16481] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 1215.027930][T16481] usb 3-1: media controller created [ 1215.104903][T16481] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1215.114220][T17385] fuse: Bad value for 'user_id' [ 1215.124785][T17385] fuse: Bad value for 'user_id' [ 1215.638222][T17393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3133'. [ 1216.152509][T17396] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1216.174111][T17396] qnx6: wrong signature (magic) in superblock #1. [ 1216.185607][T17396] qnx6: unable to read the first superblock [ 1216.238234][T17238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1217.487612][T16481] usb 3-1: USB disconnect, device number 72 [ 1217.509315][T17238] veth0_vlan: entered promiscuous mode [ 1217.562664][T17238] veth1_vlan: entered promiscuous mode [ 1217.766853][T17238] veth0_macvtap: entered promiscuous mode [ 1217.799372][T17238] veth1_macvtap: entered promiscuous mode [ 1217.806603][T17425] lo speed is unknown, defaulting to 1000 [ 1217.957584][T17238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.968928][T17433] nbd: couldn't find device at index 2 [ 1218.116787][T17238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1218.153421][ T3007] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.195692][ T3007] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.459082][ T3007] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.506279][ T3007] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.170792][T17454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3156'. [ 1219.427685][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.452601][T16477] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1219.453574][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.569874][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.570270][T17462] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3160'. [ 1219.599732][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.712609][T16477] usb 1-1: Using ep0 maxpacket: 16 [ 1219.728497][T16477] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=93.b9 [ 1219.807759][T16477] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.811265][T17462] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3160'. [ 1220.188109][T16477] usb 1-1: Product: syz [ 1220.193126][T16477] usb 1-1: Manufacturer: syz [ 1220.199265][T16477] usb 1-1: SerialNumber: syz [ 1220.254198][T16477] usb 1-1: config 0 descriptor?? [ 1220.710910][T17476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3165'. [ 1220.722547][T17476] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1220.730398][T17476] IPv6: NLM_F_CREATE should be set when creating new route [ 1221.333596][T12734] syz_tun (unregistering): left allmulticast mode [ 1221.651993][T16477] speedtch 1-1:0.0: speedtch_bind: wrong device class 141 [ 1222.552905][T16477] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1222.595838][T16477] usb 1-1: USB disconnect, device number 66 [ 1222.696495][ T5879] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1222.707982][ T5879] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1222.716927][ T5879] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1222.730953][ T5879] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1222.739678][ T5879] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1222.782916][T17494] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3173'. [ 1222.878635][T17491] lo speed is unknown, defaulting to 1000 [ 1222.995128][T17502] fuse: Bad value for 'user_id' [ 1223.000059][T17502] fuse: Bad value for 'user_id' [ 1223.265499][T17494] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3173'. [ 1223.855675][T17491] chnl_net:caif_netlink_parms(): no params data found [ 1224.196418][T16494] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1224.204353][T17525] lo speed is unknown, defaulting to 1000 [ 1224.344809][T16494] usb 2-1: Using ep0 maxpacket: 8 [ 1224.352340][T16494] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1224.359671][T17530] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1224.363726][T16494] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 1224.372351][T17491] bridge0: port 1(bridge_slave_0) entered blocking state [ 1224.380726][T16494] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.406615][T16494] usb 2-1: config 0 descriptor?? [ 1224.410100][T17530] exFAT-fs (loop0): unable to read boot sector [ 1224.416386][T17491] bridge0: port 1(bridge_slave_0) entered disabled state [ 1224.424922][T17530] exFAT-fs (loop0): failed to read boot sector [ 1224.432737][T17491] bridge_slave_0: entered allmulticast mode [ 1224.439076][T17530] exFAT-fs (loop0): failed to recognize exfat type [ 1224.441747][T17491] bridge_slave_0: entered promiscuous mode [ 1224.691266][ T5879] Bluetooth: hci3: command tx timeout [ 1224.743441][T17532] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3182'. [ 1224.793341][T17491] bridge0: port 2(bridge_slave_1) entered blocking state [ 1224.805130][T17491] bridge0: port 2(bridge_slave_1) entered disabled state [ 1224.851307][T17491] bridge_slave_1: entered allmulticast mode [ 1226.435946][T17491] bridge_slave_1: entered promiscuous mode [ 1226.627843][ T5879] Bluetooth: hci3: command tx timeout [ 1227.180754][T16494] usbhid 2-1:0.0: can't add hid device: -71 [ 1227.197470][T16494] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1227.209820][T16494] usb 2-1: USB disconnect, device number 54 [ 1227.288745][T17491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1227.344230][T17491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1227.488177][T17491] team0: Port device team_slave_0 added [ 1227.511620][T17491] team0: Port device team_slave_1 added [ 1227.646519][T17491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1227.653603][T17491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1227.692712][T17545] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3185'. [ 1227.709527][T17545] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3185'. [ 1227.720037][T17491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1227.736801][T17491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1227.745504][T17491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1227.777810][T17491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1227.881881][T17491] hsr_slave_0: entered promiscuous mode [ 1227.899512][T17491] hsr_slave_1: entered promiscuous mode [ 1227.917848][T17491] debugfs: 'hsr0' already exists in 'hsr' [ 1227.925062][T17549] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3188'. [ 1227.932190][T17491] Cannot create hsr debugfs directory [ 1228.147863][T17549] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3188'. [ 1228.566729][ T5879] Bluetooth: hci3: command tx timeout [ 1230.042632][T17491] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1230.088725][T17491] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1230.176096][T17491] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1230.200887][T17491] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1230.239025][T17588] lo speed is unknown, defaulting to 1000 [ 1230.325965][T17605] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3202'. [ 1230.340786][T17605] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3202'. [ 1230.460099][T17611] nilfs2: Bad value for 'cp' [ 1230.506173][ T5879] Bluetooth: hci3: command tx timeout [ 1231.249995][ T5945] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1231.490769][ T5945] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 1231.494128][T17491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1231.689514][ T5945] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1231.698625][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.707846][ T5945] usb 1-1: Product: syz [ 1231.712065][ T5945] usb 1-1: Manufacturer: syz [ 1231.716687][ T5945] usb 1-1: SerialNumber: syz [ 1231.763326][T17491] 8021q: adding VLAN 0 to HW filter on device team0 [ 1231.786311][ T5945] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1231.808014][T16492] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1231.825581][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.832961][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1231.900206][ T2974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.907375][ T2974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1232.608303][T17644] hub 9-0:1.0: USB hub found [ 1232.615381][T17644] hub 9-0:1.0: 1 port detected [ 1232.910504][T16492] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1233.327592][T16492] ath9k_htc: Failed to initialize the device [ 1233.361430][T17646] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3215'. [ 1233.376654][T16492] usb 1-1: ath9k_htc: USB layer deinitialized [ 1233.398058][T17491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1233.451642][ T983] usb 1-1: USB disconnect, device number 67 [ 1233.730620][T17491] veth0_vlan: entered promiscuous mode [ 1233.778441][T17491] veth1_vlan: entered promiscuous mode [ 1233.839448][T17652] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1233.873899][T17652] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1233.897631][T17652] FAT-fs (loop2): unable to read boot sector [ 1233.903511][T17491] veth0_macvtap: entered promiscuous mode [ 1233.962798][T17654] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3219'. [ 1234.117653][T17491] veth1_macvtap: entered promiscuous mode [ 1234.710252][T17491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1234.724596][T17491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1234.772366][ T1145] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.838078][ T1145] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.855339][ T1145] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1234.969315][T17661] qrtr: Invalid version 0 [ 1235.334750][ T1145] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1235.638178][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.671080][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.749180][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.816887][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1237.247397][T17705] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3238'. [ 1237.370490][T17709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3239'. [ 1237.514089][T17713] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3242'. [ 1237.551384][T17713] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3242'. [ 1237.629261][T17718] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3243'. [ 1238.104923][T17738] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3251'. [ 1238.664235][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.670800][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.832746][T10546] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1238.844907][T10546] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1238.853280][T10546] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1238.855773][T17761] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3260'. [ 1238.861634][T10546] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1238.880284][T10546] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1238.956117][T17755] lo speed is unknown, defaulting to 1000 [ 1239.164201][T17767] dvmrp0: entered allmulticast mode [ 1239.549839][T17755] chnl_net:caif_netlink_parms(): no params data found [ 1239.609764][T17792] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1239.621915][T17794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3272'. [ 1239.664588][T17792] exFAT-fs (loop3): unable to read boot sector [ 1239.679623][T17792] exFAT-fs (loop3): failed to read boot sector [ 1239.699095][T17792] exFAT-fs (loop3): failed to recognize exfat type [ 1240.110325][T17755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1240.117884][T17755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.125985][T17755] bridge_slave_0: entered allmulticast mode [ 1240.135575][T17755] bridge_slave_0: entered promiscuous mode [ 1240.149085][T17755] bridge0: port 2(bridge_slave_1) entered blocking state [ 1240.156683][T17755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1240.164969][T17755] bridge_slave_1: entered allmulticast mode [ 1240.187500][T17755] bridge_slave_1: entered promiscuous mode [ 1240.301608][T17816] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3280'. [ 1240.320827][T16477] usb 5-1: new low-speed USB device number 66 using dummy_hcd [ 1240.331842][T17755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1240.351222][T17755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1240.452218][T17755] team0: Port device team_slave_0 added [ 1240.464412][T17755] team0: Port device team_slave_1 added [ 1240.490804][T16477] usb 5-1: config 7 interface 0 has no altsetting 0 [ 1240.506086][T16477] usb 5-1: string descriptor 0 read error: -22 [ 1240.522900][T16477] usb 5-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 1240.553826][T16477] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.569793][T17755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1240.587727][T17755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1240.639374][T16477] usb 5-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 1240.667934][T16477] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1240.714379][T16477] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 1240.725680][T17755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1240.799827][T17822] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3281'. [ 1240.891187][T10546] Bluetooth: hci1: command tx timeout [ 1241.224539][T16489] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1241.328336][T16477] usb 5-1: media controller created [ 1241.347312][T17755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1241.354402][T17755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.411163][T16477] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1241.472429][T17755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.569783][T16489] usb 2-1: Using ep0 maxpacket: 16 [ 1241.592816][T16489] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=93.b9 [ 1241.603842][T16489] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.315825][T16489] usb 2-1: Product: syz [ 1242.320576][T16489] usb 2-1: Manufacturer: syz [ 1242.326529][T16489] usb 2-1: SerialNumber: syz [ 1242.361383][T16489] usb 2-1: config 0 descriptor?? [ 1242.580284][T17755] hsr_slave_0: entered promiscuous mode [ 1242.615514][T17755] hsr_slave_1: entered promiscuous mode [ 1242.650974][T17755] debugfs: 'hsr0' already exists in 'hsr' [ 1242.672852][T17755] Cannot create hsr debugfs directory [ 1242.809820][T10546] Bluetooth: hci1: command tx timeout [ 1243.338918][T17755] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.351325][T17755] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.503631][T17755] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.516975][T17755] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.764123][T17755] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1243.805574][T17755] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.831829][T17855] __nla_validate_parse: 1 callbacks suppressed [ 1243.831853][T17855] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3291'. [ 1243.835200][T16494] usb 5-1: USB disconnect, device number 66 [ 1243.853580][T16489] speedtch 2-1:0.0: speedtch_bind: wrong device class 141 [ 1243.860757][T16489] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1243.909112][T16489] usb 2-1: USB disconnect, device number 55 [ 1244.007124][T17755] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1244.018782][T17755] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.074703][T17864] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1244.084610][T17864] exFAT-fs (loop0): unable to read boot sector [ 1244.092963][T17864] exFAT-fs (loop0): failed to read boot sector [ 1244.096031][T17855] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3291'. [ 1244.127429][T17864] exFAT-fs (loop0): failed to recognize exfat type [ 1244.374324][T17867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3295'. [ 1244.382010][T17755] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1244.431884][T17755] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1244.461383][T17755] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1244.480331][T17755] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1244.892607][T10546] Bluetooth: hci1: command tx timeout [ 1245.426447][T17755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.622777][T17755] 8021q: adding VLAN 0 to HW filter on device team0 [ 1245.640535][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.647866][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1245.721230][T17887] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3300'. [ 1245.987305][ T983] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1246.191502][ T983] usb 4-1: Using ep0 maxpacket: 16 [ 1246.212983][ T983] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=93.b9 [ 1246.241297][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.271415][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.278608][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1246.293684][ T983] usb 4-1: Product: syz [ 1246.326570][ T983] usb 4-1: Manufacturer: syz [ 1246.349000][ T983] usb 4-1: SerialNumber: syz [ 1246.412094][ T983] usb 4-1: config 0 descriptor?? [ 1246.555873][T17892] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3303'. [ 1246.835504][T10546] Bluetooth: hci1: command tx timeout [ 1247.074430][T17755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1247.248028][T17755] veth0_vlan: entered promiscuous mode [ 1247.266282][T17755] veth1_vlan: entered promiscuous mode [ 1247.311703][T17909] tipc: Started in network mode [ 1247.316803][T17909] tipc: Node identity f6d376a116fd, cluster identity 4711 [ 1247.324956][T17909] tipc: Enabled bearer , priority 0 [ 1247.346823][T17909] tipc: Resetting bearer [ 1247.376657][T17908] tipc: Disabling bearer [ 1247.390054][T17755] veth0_macvtap: entered promiscuous mode [ 1247.402479][T17755] veth1_macvtap: entered promiscuous mode [ 1247.425982][T17755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1247.446724][T17755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1247.486214][ T1168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.502809][ T1168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.519504][ T1168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.529618][ T1168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1247.696280][ T2974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1247.720121][ T2974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1247.771411][ T3007] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1247.796725][ T3007] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.417801][ T983] speedtch 4-1:0.0: speedtch_bind: wrong device class 141 [ 1248.442087][ T983] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1248.469745][ T983] usb 4-1: USB disconnect, device number 56 [ 1248.503324][T17931] lo speed is unknown, defaulting to 1000 [ 1248.882028][T17948] lo speed is unknown, defaulting to 1000 [ 1249.179710][T17958] netlink: 'syz.0.3324': attribute type 6 has an invalid length. [ 1249.939254][T16492] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 1249.951294][T17980] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1249.989093][T17980] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1250.001878][T17980] FAT-fs (loop2): unable to read boot sector [ 1250.078746][T17988] netlink: 'syz.1.3336': attribute type 6 has an invalid length. [ 1250.110855][T16492] usb 4-1: config 7 interface 0 has no altsetting 0 [ 1250.150012][T16492] usb 4-1: string descriptor 0 read error: -22 [ 1250.187797][T16492] usb 4-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 1250.241320][T16492] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.262556][T17992] lo speed is unknown, defaulting to 1000 [ 1250.711518][T16492] usb 4-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 1250.790873][T16492] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1250.823080][T16492] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 1251.070607][T16492] usb 4-1: media controller created [ 1251.099370][T16492] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1252.692123][T18018] qrtr: Invalid version 0 [ 1253.323031][T16492] usb 4-1: USB disconnect, device number 57 [ 1253.598513][T18035] netlink: 'syz.3.3349': attribute type 6 has an invalid length. [ 1254.875732][T18049] hub 9-0:1.0: USB hub found [ 1254.883919][T18049] hub 9-0:1.0: 1 port detected [ 1255.674371][T18050] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1255.698211][T18046] nilfs2: Bad value for 'cp' [ 1255.714453][T18050] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1255.727112][T18050] FAT-fs (loop2): unable to read boot sector [ 1257.116205][ T5952] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 1257.258000][T16479] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1257.657205][ T5952] usb 4-1: config 7 interface 0 has no altsetting 0 [ 1257.674848][T18066] qrtr: Invalid version 0 [ 1257.687991][ T5952] usb 4-1: string descriptor 0 read error: -22 [ 1257.708656][ T5952] usb 4-1: New USB device found, idVendor=0ace, idProduct=13a1, bcdDevice= 4.44 [ 1257.730143][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1257.798042][ T5952] usb 4-1: dvb_usb_v2: found a 'ZyDAS ZD1301 reference design' in warm state [ 1257.830810][ T5952] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1257.874040][ T5952] dvbdev: DVB: registering new adapter (ZyDAS ZD1301 reference design) [ 1257.907533][ T5952] usb 4-1: media controller created [ 1257.969741][ T5952] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1259.053765][ T2974] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1259.103717][ T2974] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1259.157441][ T2974] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1259.184214][ T2974] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1259.506937][T18109] hub 9-0:1.0: USB hub found [ 1259.517198][T18109] hub 9-0:1.0: 1 port detected [ 1260.347751][T18112] sctp: [Deprecated]: syz.4.3371 (pid 18112) Use of int in max_burst socket option deprecated. [ 1260.347751][T18112] Use struct sctp_assoc_value instead [ 1260.452965][ T5952] usb 4-1: USB disconnect, device number 58 [ 1261.467029][T18126] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3376'. [ 1262.135929][T18146] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1262.158073][T18146] qnx6: wrong signature (magic) in superblock #1. [ 1262.202743][T18146] qnx6: unable to read the first superblock [ 1262.720279][T18153] qrtr: Invalid version 0 [ 1262.985216][ T6041] bridge_slave_1: left allmulticast mode [ 1262.991110][ T6041] bridge_slave_1: left promiscuous mode [ 1263.051196][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.160459][T18161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3391'. [ 1263.690833][ T6041] bridge_slave_0: left allmulticast mode [ 1263.709411][ T6041] bridge_slave_0: left promiscuous mode [ 1263.728910][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.506201][T18205] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1265.525779][T18205] qnx6: wrong signature (magic) in superblock #1. [ 1265.539680][T18205] qnx6: unable to read the first superblock [ 1266.568344][ T6041] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.634959][ T6041] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1266.697259][ T6041] bond0 (unregistering): Released all slaves [ 1266.889217][ T6041] tipc: Disabling bearer [ 1266.948658][ T6041] tipc: Left network mode [ 1267.213157][T18214] block nbd4: NBD_DISCONNECT [ 1267.702335][T18227] fuse: Bad value for 'user_id' [ 1267.707625][T18227] fuse: Bad value for 'user_id' [ 1268.827922][ T6041] hsr_slave_0: left promiscuous mode [ 1268.848404][ T6041] hsr_slave_1: left promiscuous mode [ 1268.880712][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1268.977872][ T6041] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.170200][T18247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3418'. [ 1269.943203][ T6041] team0 (unregistering): Port device team_slave_1 removed [ 1269.995707][ T6041] team0 (unregistering): Port device team_slave_0 removed [ 1270.714678][T18251] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3420'. [ 1270.823979][T16494] lo speed is unknown, defaulting to 1000 [ 1270.847028][T16494] infiniband syz0: ib_query_port failed (-19) [ 1274.963697][T18296] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3430'. [ 1275.086215][T18301] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3433'. [ 1275.334423][ T6041] IPVS: stop unused estimator thread 0... [ 1275.334625][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3435'. [ 1276.289507][T18329] hub 9-0:1.0: USB hub found [ 1276.294583][T18329] hub 9-0:1.0: 1 port detected [ 1277.957399][T18337] netlink: 196 bytes leftover after parsing attributes in process `syz.4.3445'. [ 1277.960724][T18340] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1278.056013][T18340] exFAT-fs (loop1): unable to read boot sector [ 1278.111065][T18340] exFAT-fs (loop1): failed to read boot sector [ 1278.144549][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3447'. [ 1278.167274][T18340] exFAT-fs (loop1): failed to recognize exfat type [ 1278.297920][T18348] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3448'. [ 1278.338858][T18340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3446'. [ 1278.512830][T18348] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3448'. [ 1278.855323][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d457000: rx timeout, send abort [ 1279.321140][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d456800: rx timeout, send abort [ 1279.329743][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d457000: abort rx timeout. Force session deactivation [ 1279.795624][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807d456800: abort rx timeout. Force session deactivation [ 1279.827224][T18376] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3458'. [ 1280.155064][T18380] netlink: 196 bytes leftover after parsing attributes in process `syz.3.3459'. [ 1280.290348][T18384] nilfs2: Bad value for 'cp' [ 1280.883157][ T983] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1281.192711][T18406] hub 9-0:1.0: USB hub found [ 1281.198810][T18406] hub 9-0:1.0: 1 port detected [ 1281.816639][ T983] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 1281.840366][ T983] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1281.934167][ T983] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.951282][ T983] usb 1-1: Product: syz [ 1281.961888][ T983] usb 1-1: Manufacturer: syz [ 1281.973536][ T983] usb 1-1: SerialNumber: syz [ 1282.039107][ T983] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1282.059452][ T5952] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1282.684105][T18420] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3472'. [ 1283.082604][ T5952] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1283.102567][ T5952] ath9k_htc: Failed to initialize the device [ 1283.147218][ T5952] usb 1-1: ath9k_htc: USB layer deinitialized [ 1283.317490][T16491] usb 1-1: USB disconnect, device number 69 [ 1283.721368][T18441] hub 9-0:1.0: USB hub found [ 1283.728403][T18441] hub 9-0:1.0: 1 port detected [ 1284.909117][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057bd6c00: rx timeout, send abort [ 1285.375190][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028528800: rx timeout, send abort [ 1285.394749][ C1] vcan0: j1939_tp_rxtimer: 0xffff888057bd6c00: abort rx timeout. Force session deactivation [ 1285.772164][T18460] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1285.815887][T18460] qnx6: wrong signature (magic) in superblock #1. [ 1285.823266][T18460] qnx6: unable to read the first superblock [ 1285.857735][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028528800: abort rx timeout. Force session deactivation [ 1289.037334][T18481] nilfs2: Bad value for 'cp' [ 1290.243045][T18503] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3499'. [ 1290.269596][T18504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3497'. [ 1290.352817][ T5952] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1290.530772][ T5952] usb 5-1: too many configurations: 17, using maximum allowed: 8 [ 1290.585596][ T5952] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1290.604710][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.624681][ T5952] usb 5-1: Product: syz [ 1290.630018][ T5952] usb 5-1: Manufacturer: syz [ 1290.645204][ T5952] usb 5-1: SerialNumber: syz [ 1290.740338][ T5952] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1290.783653][T16477] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1293.140864][T18523] Bluetooth: hci5: command 0x0406 tx timeout [ 1295.833443][T16477] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 1295.840484][T16477] ath9k_htc: Failed to initialize the device [ 1295.849899][T16479] usb 5-1: USB disconnect, device number 67 [ 1295.889625][T16479] usb 5-1: ath9k_htc: USB layer deinitialized [ 1295.904646][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1295.915192][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1297.980096][T18540] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3510'. [ 1298.010661][T18538] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1298.088922][T18538] exFAT-fs (loop4): unable to read boot sector [ 1298.096847][T18538] exFAT-fs (loop4): failed to read boot sector [ 1298.106759][T18538] exFAT-fs (loop4): failed to recognize exfat type [ 1298.335433][T18545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3508'. [ 1298.998225][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1299.038242][ T49] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1299.077629][ T49] bond0 (unregistering): Released all slaves [ 1299.426317][ T49] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1299.454709][ T49] bond1 (unregistering): Released all slaves [ 1299.494163][ T49] bond2 (unregistering): Released all slaves [ 1299.529619][ T49] bond3 (unregistering): Released all slaves [ 1299.600678][T18564] bridge_slave_0: left allmulticast mode [ 1299.656431][T18564] bridge_slave_0: left promiscuous mode [ 1299.689547][T18564] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.762215][T18564] bridge_slave_1: left allmulticast mode [ 1299.785097][T18564] bridge_slave_1: left promiscuous mode [ 1299.827642][T18564] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.864542][T18564] bond0: (slave bond_slave_0): Releasing backup interface [ 1299.883284][T18564] bond0: (slave bond_slave_1): Releasing backup interface [ 1299.913764][T18564] team0: Port device team_slave_0 removed [ 1299.929554][T18564] team0: Port device team_slave_1 removed [ 1299.947586][T18564] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1299.955772][T18564] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1299.970871][T18564] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1299.979913][T18564] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1300.008368][T18564] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1300.026552][ T49] tipc: Left network mode [ 1300.409238][ T49] hsr_slave_0: left promiscuous mode [ 1300.433854][ T49] hsr_slave_1: left promiscuous mode [ 1300.454386][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1300.480111][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1301.037320][ T49] veth1_macvtap: left promiscuous mode [ 1301.119326][ T49] veth0_macvtap: left promiscuous mode [ 1301.223318][ T49] veth1_vlan: left promiscuous mode [ 1302.803022][T18612] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3528'. [ 1303.428430][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1303.483752][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1303.879735][ T49] team0 (unregistering): Port device dummy0 removed [ 1304.209850][T18603] tipc: Enabling of bearer rejected, failed to enable media [ 1304.477700][T18619] netlink: 'syz.2.3531': attribute type 6 has an invalid length. [ 1304.783731][ T49] IPVS: stop unused estimator thread 0... [ 1305.498234][T18637] sctp: [Deprecated]: syz.3.3536 (pid 18637) Use of int in max_burst socket option deprecated. [ 1305.498234][T18637] Use struct sctp_assoc_value instead [ 1306.062412][T18643] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1306.209479][T18643] exFAT-fs (loop0): unable to read boot sector [ 1306.215770][T18643] exFAT-fs (loop0): failed to read boot sector [ 1306.228374][T18643] exFAT-fs (loop0): failed to recognize exfat type [ 1306.341381][T18650] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3540'. [ 1306.391951][T18646] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3538'. [ 1306.438115][T18645] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3539'. [ 1306.480265][T18645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3539'. [ 1306.530357][T18645] tipc: Started in network mode [ 1306.554540][T18645] tipc: Node identity fffe01, cluster identity 64 [ 1306.572867][T18645] tipc: Node number set to 16776705 [ 1307.381517][T18523] Bluetooth: hci0: command 0x0406 tx timeout [ 1307.658302][T18675] sctp: [Deprecated]: syz.2.3551 (pid 18675) Use of int in max_burst socket option deprecated. [ 1307.658302][T18675] Use struct sctp_assoc_value instead [ 1308.552743][T18681] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3552'. [ 1308.634740][T18683] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3553'. [ 1308.820718][T18686] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3555'. [ 1309.330598][T18686] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3555'. [ 1310.449073][T18710] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3564'. [ 1310.652108][T16491] IPVS: starting estimator thread 0... [ 1310.764400][T18713] IPVS: using max 24 ests per chain, 57600 per kthread [ 1314.529793][T18735] ALSA: seq fatal error: cannot create timer (-22) [ 1315.162376][T18758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3578'. [ 1315.965393][T16479] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1316.038098][T18769] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3581'. [ 1316.115711][T16479] usb 1-1: Using ep0 maxpacket: 16 [ 1316.165094][T16479] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=93.b9 [ 1316.187353][T16479] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.213627][T16479] usb 1-1: Product: syz [ 1316.230141][T16479] usb 1-1: Manufacturer: syz [ 1316.242802][T16479] usb 1-1: SerialNumber: syz [ 1316.259381][T16479] usb 1-1: config 0 descriptor?? [ 1317.764143][T16479] speedtch 1-1:0.0: speedtch_bind: wrong device class 141 [ 1317.779933][T16479] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1317.823854][T16479] usb 1-1: USB disconnect, device number 70 [ 1318.743045][T18797] ALSA: seq fatal error: cannot create timer (-22) [ 1320.250049][T18819] hub 9-0:1.0: USB hub found [ 1320.262850][T18819] hub 9-0:1.0: 1 port detected [ 1321.707310][T10546] Bluetooth: hci2: command 0x0406 tx timeout [ 1323.987413][T18873] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3610'. [ 1324.905708][T18895] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3620'. [ 1325.163083][T18901] hub 9-0:1.0: USB hub found [ 1325.169040][T18901] hub 9-0:1.0: 1 port detected [ 1325.952227][T18908] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3624'. [ 1325.965280][T18908] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3624'. [ 1328.070074][T18895] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3620'. [ 1328.079739][T18908] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3624'. [ 1328.101948][T18908] tipc: Started in network mode [ 1328.106883][T18908] tipc: Node identity fffffe01, cluster identity 64 [ 1328.127453][T18908] tipc: Node number set to 4294966785 [ 1328.222685][T18912] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3626'. [ 1329.262550][T18938] sctp: [Deprecated]: syz.0.3635 (pid 18938) Use of int in max_burst socket option deprecated. [ 1329.262550][T18938] Use struct sctp_assoc_value instead [ 1329.783434][T18951] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3638'. [ 1330.061744][T18951] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3638'. [ 1333.712141][T18996] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3649'. [ 1333.763799][T19002] sctp: [Deprecated]: syz.2.3651 (pid 19002) Use of int in max_burst socket option deprecated. [ 1333.763799][T19002] Use struct sctp_assoc_value instead [ 1333.952998][T18978] udevd[18978]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 1334.739062][ T5952] IPVS: starting estimator thread 0... [ 1334.747295][T19015] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1334.830220][T19016] IPVS: using max 26 ests per chain, 62400 per kthread [ 1335.463028][T19032] nilfs2: Bad value for 'cp' [ 1336.209454][T16479] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1336.378543][T16479] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 1336.392707][T16479] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1336.392741][T16479] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1336.392757][T16479] usb 2-1: Product: syz [ 1336.392768][T16479] usb 2-1: Manufacturer: syz [ 1336.392780][T16479] usb 2-1: SerialNumber: syz [ 1336.413547][T16479] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1336.452658][T16479] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1337.434451][T16479] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1337.441752][T16479] ath9k_htc: Failed to initialize the device [ 1337.510332][T16479] usb 2-1: ath9k_htc: USB layer deinitialized [ 1338.207196][ T5952] usb 2-1: USB disconnect, device number 56 [ 1338.813669][T19061] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3663'. [ 1340.790022][T18523] Bluetooth: hci3: command 0x0406 tx timeout [ 1343.778569][T19100] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3674'. [ 1343.948784][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051e35400: rx timeout, send abort [ 1344.414732][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f6d7400: rx timeout, send abort [ 1344.423790][ C1] vcan0: j1939_tp_rxtimer: 0xffff888051e35400: abort rx timeout. Force session deactivation [ 1344.889638][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802f6d7400: abort rx timeout. Force session deactivation [ 1345.849570][T19088] udevd[19088]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 1346.845977][T19142] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3687'. [ 1349.011500][T19175] syzkaller0: entered promiscuous mode [ 1349.039978][T19175] syzkaller0: entered allmulticast mode [ 1352.141273][T19228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3711'. [ 1352.567850][T16489] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1352.883810][T16489] usb 1-1: Using ep0 maxpacket: 16 [ 1352.919428][T16489] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=93.b9 [ 1352.950825][T16489] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.963005][T16489] usb 1-1: Product: syz [ 1352.967375][T16489] usb 1-1: Manufacturer: syz [ 1352.972378][T16489] usb 1-1: SerialNumber: syz [ 1353.009867][T16489] usb 1-1: config 0 descriptor?? [ 1353.173952][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1353.180336][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1354.947154][T16489] speedtch 1-1:0.0: speedtch_bind: wrong device class 141 [ 1354.973157][T16489] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1355.018284][T16489] usb 1-1: USB disconnect, device number 71 [ 1355.118160][T19241] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3714'. [ 1355.120589][T10546] Bluetooth: hci1: command 0x0406 tx timeout [ 1357.673852][ T5952] IPVS: starting estimator thread 0... [ 1357.757410][T19288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3724'. [ 1358.370574][T19284] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 1358.439809][T19286] IPVS: using max 22 ests per chain, 52800 per kthread [ 1358.627221][T16479] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1358.784116][T16479] usb 1-1: Using ep0 maxpacket: 16 [ 1358.796554][T16479] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=93.b9 [ 1358.813639][T16479] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1358.840213][T16479] usb 1-1: Product: syz [ 1358.844604][T16479] usb 1-1: Manufacturer: syz [ 1358.855714][T16479] usb 1-1: SerialNumber: syz [ 1358.877563][T16479] usb 1-1: config 0 descriptor?? [ 1359.011868][T19285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1359.020286][T19285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.419965][T19285] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1359.444744][T19285] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1359.853081][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.898278][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.948836][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1359.982082][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1360.374115][T16479] speedtch 1-1:0.0: speedtch_bind: wrong device class 141 [ 1360.411026][T16479] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1360.497006][T16479] usb 1-1: USB disconnect, device number 72 [ 1361.940781][T19360] bridge0: port 2(bridge_slave_1) entered disabled state [ 1361.948640][T19360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.359741][T19360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1362.376119][T19360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1363.456720][ T36] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.489288][ T36] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.515610][ T1168] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.561798][ T1168] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.810707][T19428] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3760'. [ 1363.859771][T19428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3760'. [ 1364.472259][T19441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3765'. [ 1364.522312][T19441] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1364.529641][T19441] IPv6: NLM_F_CREATE should be set when creating new route [ 1366.088234][T19466] syzkaller0: entered promiscuous mode [ 1366.114078][T19466] syzkaller0: entered allmulticast mode [ 1366.487253][T19494] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1366.531829][T19494] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1366.567913][T19494] FAT-fs (loop0): unable to read boot sector [ 1367.310407][T19508] hub 9-0:1.0: USB hub found [ 1367.318125][T19508] hub 9-0:1.0: 1 port detected [ 1373.130973][T19621] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1373.208297][T19621] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1373.260442][T19621] FAT-fs (loop0): unable to read boot sector [ 1373.554797][T19632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3815'. [ 1373.577422][T19632] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3815'. [ 1373.904016][T19636] ALSA: seq fatal error: cannot create timer (-22) [ 1375.485796][T19655] fuse: Bad value for 'user_id' [ 1375.505283][T19655] fuse: Bad value for 'user_id' [ 1375.661191][T19660] syzkaller0: entered promiscuous mode [ 1375.672529][T19660] syzkaller0: entered allmulticast mode [ 1376.465810][T19666] sctp: [Deprecated]: syz.2.3828 (pid 19666) Use of int in max_burst socket option deprecated. [ 1376.465810][T19666] Use struct sctp_assoc_value instead [ 1377.008405][T19673] nilfs2: Bad value for 'cp' [ 1377.657716][T16494] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1377.827912][T16494] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 1377.890105][T16494] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1377.901553][T16494] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1377.917851][T16494] usb 4-1: Product: syz [ 1377.928605][T16494] usb 4-1: Manufacturer: syz [ 1377.933810][T16494] usb 4-1: SerialNumber: syz [ 1378.203289][T16494] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1378.271149][T16491] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1379.264810][T16491] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1379.364883][T16491] ath9k_htc: Failed to initialize the device [ 1379.707087][T16491] usb 4-1: ath9k_htc: USB layer deinitialized [ 1379.796026][T19716] syzkaller0: entered promiscuous mode [ 1379.837617][T19716] syzkaller0: entered allmulticast mode [ 1379.909080][ T9] usb 4-1: USB disconnect, device number 59 [ 1381.036151][T19748] nilfs2: Bad value for 'cp' [ 1382.023774][T19759] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3856'. [ 1382.234389][T16492] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1382.516826][T16492] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 1382.659372][T16492] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1382.694430][T16492] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.710313][T16492] usb 3-1: Product: syz [ 1382.717213][T16492] usb 3-1: Manufacturer: syz [ 1382.727822][T16492] usb 3-1: SerialNumber: syz [ 1382.766170][T16492] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1382.792239][T16491] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1383.106286][T19774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3860'. [ 1383.371246][ T9] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1383.576326][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1383.650308][ T9] usb 2-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=93.b9 [ 1383.744566][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1383.829674][ T9] usb 2-1: Product: syz [ 1383.844197][T16491] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1383.851657][T16491] ath9k_htc: Failed to initialize the device [ 1383.853432][ T9] usb 2-1: Manufacturer: syz [ 1383.878754][ T9] usb 2-1: SerialNumber: syz [ 1383.891006][T16491] usb 3-1: ath9k_htc: USB layer deinitialized [ 1383.906190][ T9] usb 2-1: config 0 descriptor?? [ 1384.043808][T19783] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1384.066508][T19783] exFAT-fs (loop0): unable to read boot sector [ 1384.084771][T13772] usb 3-1: USB disconnect, device number 73 [ 1384.093165][T19783] exFAT-fs (loop0): failed to read boot sector [ 1384.126663][T19783] exFAT-fs (loop0): failed to recognize exfat type [ 1384.232783][T19789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3864'. [ 1385.769656][ T9] speedtch 2-1:0.0: speedtch_bind: wrong device class 141 [ 1385.785823][ T9] speedtch 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1385.799540][ T9] usb 2-1: USB disconnect, device number 57 [ 1386.014203][T19806] syzkaller0: entered promiscuous mode [ 1386.020712][T19809] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1386.032743][T19806] syzkaller0: entered allmulticast mode [ 1386.042310][T19809] exFAT-fs (loop4): unable to read boot sector [ 1386.062529][T19809] exFAT-fs (loop4): failed to read boot sector [ 1386.086895][T19809] exFAT-fs (loop4): failed to recognize exfat type [ 1386.246352][T19814] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1386.280887][T19815] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3872'. [ 1386.302529][T19814] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1386.312891][T19814] FAT-fs (loop3): unable to read boot sector [ 1387.065213][T19821] tipc: Started in network mode [ 1387.159045][T19821] tipc: Node identity 862312c8ef, cluster identity 4711 [ 1387.603079][T19821] tipc: Enabled bearer , priority 0 [ 1387.839202][T19821] tipc: Resetting bearer [ 1388.628017][T16477] tipc: Node number set to 1763906248 [ 1388.695322][T19820] tipc: Disabling bearer [ 1389.977384][T19844] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3883'. [ 1390.375001][T16478] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1390.856274][T16478] usb 1-1: Using ep0 maxpacket: 16 [ 1390.880523][T16478] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=93.b9 [ 1390.903809][T16478] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.930041][T16478] usb 1-1: Product: syz [ 1390.978566][T16478] usb 1-1: Manufacturer: syz [ 1390.991423][T16478] usb 1-1: SerialNumber: syz [ 1391.050399][T16478] usb 1-1: config 0 descriptor?? [ 1391.406878][T19865] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1391.468677][T19865] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1391.506387][T19865] FAT-fs (loop4): unable to read boot sector [ 1392.393737][T16478] speedtch 1-1:0.0: speedtch_bind: wrong device class 141 [ 1392.409646][T19873] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1392.419819][T19873] exFAT-fs (loop1): unable to read boot sector [ 1392.437958][T16478] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1392.445065][T19873] exFAT-fs (loop1): failed to read boot sector [ 1392.445082][T19873] exFAT-fs (loop1): failed to recognize exfat type [ 1392.501096][T16478] usb 1-1: USB disconnect, device number 73 [ 1393.102364][T19880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3890'. [ 1393.888081][T19891] qrtr: Invalid version 0 [ 1394.394942][T19898] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1394.412764][T19898] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1394.423421][T19898] FAT-fs (loop3): unable to read boot sector [ 1398.611617][T19931] tipc: Enabling of bearer rejected, failed to enable media [ 1398.752385][T19963] tmpfs: Bad value for 'huge' [ 1398.921026][T19973] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1398.986571][T19973] exFAT-fs (loop0): unable to read boot sector [ 1398.996615][T19973] exFAT-fs (loop0): failed to read boot sector [ 1399.065824][T19973] exFAT-fs (loop0): failed to recognize exfat type [ 1399.185013][T19981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3912'. [ 1402.715738][T20014] tipc: Enabling of bearer rejected, failed to enable media [ 1402.738030][T20014] syzkaller0: entered promiscuous mode [ 1402.744218][T20014] syzkaller0: entered allmulticast mode [ 1403.446052][T20028] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1403.535326][T20028] qnx6: wrong signature (magic) in superblock #1. [ 1403.542038][T20028] qnx6: unable to read the first superblock [ 1406.058724][T20038] tmpfs: Bad value for 'huge' [ 1407.481900][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056899000: rx timeout, send abort [ 1407.715251][T20049] udevd[20049]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 1407.762828][T20048] udevd[20048]: inotify_add_watch(7, /dev/nbd0, 10) failed: No such file or directory [ 1407.948335][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806009dc00: rx timeout, send abort [ 1407.956900][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056899000: abort rx timeout. Force session deactivation [ 1408.422805][ C0] vcan0: j1939_tp_rxtimer: 0xffff88806009dc00: abort rx timeout. Force session deactivation [ 1410.317781][T20087] syzkaller0: entered promiscuous mode [ 1410.328175][T20087] syzkaller0: entered allmulticast mode [ 1410.433559][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1410.439970][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1412.921489][T20112] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1413.262770][T20112] qnx6: wrong signature (magic) in superblock #1. [ 1413.336213][T20112] qnx6: unable to read the first superblock [ 1413.868025][T20136] tmpfs: Bad value for 'huge' [ 1416.588438][T20167] tipc: Enabled bearer , priority 0 [ 1416.624519][T20167] syzkaller0: entered promiscuous mode [ 1416.653611][T20167] syzkaller0: entered allmulticast mode [ 1416.821474][T20168] tipc: Resetting bearer [ 1417.397262][T20165] tipc: Resetting bearer [ 1417.536506][T20165] tipc: Disabling bearer [ 1417.540498][T16491] tipc: Node number set to 3761141409 [ 1419.770960][T20210] hub 9-0:1.0: USB hub found [ 1419.778177][T20210] hub 9-0:1.0: 1 port detected [ 1420.153182][T20203] udevd[20203]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 1420.375535][T20203] udevd[20203]: inotify_add_watch(7, /dev/nbd2, 10) failed: No such file or directory [ 1420.482235][T20215] sctp: [Deprecated]: syz.4.3967 (pid 20215) Use of int in max_burst socket option deprecated. [ 1420.482235][T20215] Use struct sctp_assoc_value instead [ 1420.507520][T20213] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1420.544292][T20213] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1420.560182][T20213] FAT-fs (loop2): unable to read boot sector [ 1426.379976][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056c9bc00: rx timeout, send abort [ 1426.846318][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056c98400: rx timeout, send abort [ 1426.854976][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056c9bc00: abort rx timeout. Force session deactivation [ 1427.320841][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056c98400: abort rx timeout. Force session deactivation [ 1428.355564][T20293] ALSA: seq fatal error: cannot create timer (-22) [ 1430.733018][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880330de400: rx timeout, send abort [ 1430.736377][T20324] ALSA: seq fatal error: cannot create timer (-22) [ 1431.199127][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880330df000: rx timeout, send abort [ 1431.207524][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880330de400: abort rx timeout. Force session deactivation [ 1431.311704][T20326] tmpfs: Bad value for 'huge' [ 1431.393889][T20329] Bluetooth: MGMT ver 1.23 [ 1431.673681][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880330df000: abort rx timeout. Force session deactivation [ 1433.044238][T20366] nbd: must specify at least one socket [ 1434.641750][T20388] ALSA: seq fatal error: cannot create timer (-22) [ 1435.522379][T20397] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1435.558911][T20397] qnx6: wrong signature (magic) in superblock #1. [ 1435.565561][T20397] qnx6: unable to read the first superblock [ 1435.782767][T16492] IPVS: starting estimator thread 0... [ 1435.892558][T20403] IPVS: using max 24 ests per chain, 57600 per kthread [ 1437.362027][T20424] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1437.496425][T20424] exFAT-fs (loop2): unable to read boot sector [ 1437.550190][T20424] exFAT-fs (loop2): failed to read boot sector [ 1437.571330][T20424] exFAT-fs (loop2): failed to recognize exfat type [ 1437.736441][T20430] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4016'. [ 1438.194519][T20432] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1438.262829][T20432] exFAT-fs (loop0): unable to read boot sector [ 1438.271575][T20432] exFAT-fs (loop0): failed to read boot sector [ 1438.297099][T20432] exFAT-fs (loop0): failed to recognize exfat type [ 1438.621327][T20433] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4017'. [ 1440.317313][T20440] ALSA: seq fatal error: cannot create timer (-22) [ 1441.115731][T20444] ALSA: seq fatal error: cannot create timer (-22) [ 1441.347513][T20447] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1441.387826][T20447] qnx6: wrong signature (magic) in superblock #1. [ 1441.419049][T20447] qnx6: unable to read the first superblock [ 1441.703762][T20454] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4024'. [ 1441.714654][T20452] syzkaller0: entered promiscuous mode [ 1441.733604][T20452] syzkaller0: entered allmulticast mode [ 1441.780169][T20455] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1441.791245][T20455] qnx6: wrong signature (magic) in superblock #1. [ 1441.801739][T20455] qnx6: unable to read the first superblock [ 1442.053109][T20461] ALSA: seq fatal error: cannot create timer (-22) [ 1445.093303][T20502] netlink: 196 bytes leftover after parsing attributes in process `syz.4.4037'. [ 1448.717097][T20512] tipc: Enabling of bearer rejected, failed to enable media [ 1449.053408][T20545] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1449.138218][T20545] qnx6: wrong signature (magic) in superblock #1. [ 1449.189690][T20545] qnx6: unable to read the first superblock [ 1451.448313][T20553] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4047'. [ 1451.458642][T20553] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4047'. [ 1452.236692][T20561] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4049'. [ 1452.250799][T20561] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4049'. [ 1452.550210][T20570] ALSA: seq fatal error: cannot create timer (-22) [ 1453.314430][T20578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4054'. [ 1454.705603][T20599] sctp: [Deprecated]: syz.1.4059 (pid 20599) Use of int in max_burst socket option deprecated. [ 1454.705603][T20599] Use struct sctp_assoc_value instead [ 1455.380681][T20612] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1455.409567][T20612] qnx6: wrong signature (magic) in superblock #1. [ 1455.416278][T20612] qnx6: unable to read the first superblock [ 1457.768065][T20617] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4064'. [ 1457.857303][T20617] vlan2: entered promiscuous mode [ 1457.864194][T20622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4063'. [ 1457.888997][T20617] team0: entered promiscuous mode [ 1457.894181][T20617] team_slave_0: entered promiscuous mode [ 1457.963734][T20617] team_slave_1: entered promiscuous mode [ 1458.035963][T20625] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1458.073740][T20625] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1458.098083][T20625] FAT-fs (loop2): unable to read boot sector [ 1459.338132][T20648] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1459.359295][T20647] delete_channel: no stack [ 1459.371419][T20648] qnx6: wrong signature (magic) in superblock #1. [ 1459.381611][T20648] qnx6: unable to read the first superblock [ 1460.144325][T20660] /dev/nullb0: Can't open blockdev [ 1462.972468][ T1168] bridge_slave_1: left allmulticast mode [ 1462.993592][T20692] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1463.020531][ T1168] bridge_slave_1: left promiscuous mode [ 1463.046685][T20692] hpfs: hpfs_map_sector(): read error [ 1463.053204][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 1463.090857][T20692] 9pnet_fd: Insufficient options for proto=fd [ 1463.094601][ T1168] bridge_slave_0: left allmulticast mode [ 1463.114509][ T1168] bridge_slave_0: left promiscuous mode [ 1463.362072][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.705646][ T1168] bond1 (unregistering): Released all slaves [ 1466.213745][T20726] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4090'. [ 1467.705017][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1467.711726][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1471.539547][T20775] tmpfs: Bad value for 'huge' [ 1473.224007][T20801] input: syz0 as /devices/virtual/input/input25 [ 1473.268605][T20801] input: failed to attach handler leds to device input25, error: -6 [ 1474.334810][T20813] Bluetooth: MGMT ver 1.23 [ 1474.347716][T20813] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 1475.322960][T20825] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1475.413193][T20825] EXT4-fs (loop3): unable to read superblock [ 1476.433713][T20848] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1476.476834][T20848] hfs: can't find a HFS filesystem on dev loop3 [ 1476.574452][T20849] FAULT_INJECTION: forcing a failure. [ 1476.574452][T20849] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.587625][T20849] CPU: 0 UID: 0 PID: 20849 Comm: syz.3.4124 Not tainted syzkaller #0 PREEMPT(full) [ 1476.587655][T20849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1476.587669][T20849] Call Trace: [ 1476.587680][T20849] [ 1476.587690][T20849] dump_stack_lvl+0x189/0x250 [ 1476.587724][T20849] ? lockdep_hardirqs_on+0x9c/0x150 [ 1476.587741][T20849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1476.587766][T20849] ? dump_stack+0x9/0x20 [ 1476.587789][T20849] should_fail_ex+0x414/0x560 [ 1476.587815][T20849] should_failslab+0xa8/0x100 [ 1476.587834][T20849] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1476.587858][T20849] ? __alloc_skb+0x112/0x2d0 [ 1476.587879][T20849] __alloc_skb+0x112/0x2d0 [ 1476.587898][T20849] netlink_ack+0x146/0xa50 [ 1476.587912][T20849] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1476.587932][T20849] ? __pfx_devlink_nl_pre_doit+0x10/0x10 [ 1476.587954][T20849] ? __pfx_devlink_nl_post_doit+0x10/0x10 [ 1476.587987][T20849] netlink_rcv_skb+0x28c/0x470 [ 1476.588002][T20849] ? __lock_acquire+0xab9/0xd20 [ 1476.588024][T20849] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1476.588046][T20849] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1476.588076][T20849] ? down_read+0x1ad/0x2e0 [ 1476.588096][T20849] genl_rcv+0x28/0x40 [ 1476.588115][T20849] netlink_unicast+0x82f/0x9e0 [ 1476.588146][T20849] ? __pfx_netlink_unicast+0x10/0x10 [ 1476.588171][T20849] ? netlink_sendmsg+0x642/0xb30 [ 1476.588186][T20849] ? skb_put+0x11b/0x210 [ 1476.588205][T20849] netlink_sendmsg+0x805/0xb30 [ 1476.588229][T20849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1476.588248][T20849] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1476.588272][T20849] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1476.588288][T20849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1476.588305][T20849] __sock_sendmsg+0x21c/0x270 [ 1476.588330][T20849] ____sys_sendmsg+0x505/0x830 [ 1476.588353][T20849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1476.588386][T20849] ? import_iovec+0x74/0xa0 [ 1476.588407][T20849] ___sys_sendmsg+0x21f/0x2a0 [ 1476.588439][T20849] ? __pfx____sys_sendmsg+0x10/0x10 [ 1476.588460][T20849] ? rcu_is_watching+0x15/0xb0 [ 1476.588511][T20849] ? __fget_files+0x2a/0x420 [ 1476.588526][T20849] ? __fget_files+0x3a0/0x420 [ 1476.588549][T20849] __x64_sys_sendmsg+0x19b/0x260 [ 1476.588569][T20849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1476.588595][T20849] ? __pfx_ksys_write+0x10/0x10 [ 1476.588621][T20849] ? do_syscall_64+0xbe/0xfa0 [ 1476.588638][T20849] do_syscall_64+0xfa/0xfa0 [ 1476.588652][T20849] ? lockdep_hardirqs_on+0x9c/0x150 [ 1476.588666][T20849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.588680][T20849] ? clear_bhb_loop+0x60/0xb0 [ 1476.588698][T20849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.588713][T20849] RIP: 0033:0x7fd0a858eba9 [ 1476.588729][T20849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1476.588742][T20849] RSP: 002b:00007fd0a93ba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1476.588758][T20849] RAX: ffffffffffffffda RBX: 00007fd0a87d6090 RCX: 00007fd0a858eba9 [ 1476.588770][T20849] RDX: 0000000000000010 RSI: 0000200000001f40 RDI: 0000000000000008 [ 1476.588779][T20849] RBP: 00007fd0a93ba090 R08: 0000000000000000 R09: 0000000000000000 [ 1476.588789][T20849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1476.588798][T20849] R13: 00007fd0a87d6128 R14: 00007fd0a87d6090 R15: 00007ffe30aa69f8 [ 1476.588822][T20849] [ 1478.125868][T20864] binder: 20861:20864 ioctl c0306201 200000000780 returned -11 [ 1478.900234][T20868] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4129'. [ 1479.514728][T20872] erofs (device loop2): cannot find valid erofs superblock [ 1479.602017][T20872] dns_resolver: Unsupported content type (3) [ 1480.452351][T20894] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1480.470832][T20894] netlink: 'syz.1.4139': attribute type 1 has an invalid length. [ 1480.540760][T20894] bond1 (unregistering): Released all slaves [ 1480.541368][T20897] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4139'. [ 1481.232665][T20902] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1481.244065][T20902] efs: cannot read volume header [ 1481.367655][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1481.717851][ T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1481.728374][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1481.742213][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1481.752282][ T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1481.969622][ T9] usb 4-1: Product: syz [ 1481.974117][ T9] usb 4-1: Manufacturer: syz [ 1481.979003][ T9] usb 4-1: SerialNumber: syz [ 1481.991425][ T9] usb 4-1: config 0 descriptor?? [ 1482.008871][ T9] usb 4-1: selecting invalid altsetting 0 [ 1482.209258][ T9] usb 4-1: USB disconnect, device number 60 [ 1482.504117][T20927] udevd[20927]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1483.213643][T20943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4150'. [ 1483.319700][T20945] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4150'. [ 1483.478689][T20945] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4150'. [ 1483.687626][T20954] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4151'. [ 1484.430239][T20968] Can't find a SQUASHFS superblock on nullb0 [ 1485.075878][T20971] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1485.105146][T20969] ALSA: seq fatal error: cannot create timer (-22) [ 1485.509671][T20971] FAT-fs (loop1): unable to read boot sector [ 1486.210574][T20980] ALSA: seq fatal error: cannot create timer (-22) [ 1486.945002][T21000] tipc: Failed to remove unknown binding: 66,1,1/4294966785:2254388569/2254388571 [ 1486.954689][T21000] tipc: Failed to remove unknown binding: 66,1,1/4294966785:2254388569/2254388571 [ 1488.499221][T21016] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1488.522817][T21016] efs: cannot read volume header [ 1490.317584][T21000] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1490.335932][T21006] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4167'. [ 1490.570552][T21028] tipc: Enabled bearer , priority 0 [ 1491.005356][T21037] tipc: Resetting bearer [ 1491.464553][T21027] tipc: Disabling bearer [ 1492.893962][T21058] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4183'. [ 1496.369370][T21099] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1496.844318][T21114] FAULT_INJECTION: forcing a failure. [ 1496.844318][T21114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1496.857774][T21114] CPU: 1 UID: 0 PID: 21114 Comm: syz.3.4192 Not tainted syzkaller #0 PREEMPT(full) [ 1496.857806][T21114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1496.857824][T21114] Call Trace: [ 1496.857834][T21114] [ 1496.857844][T21114] dump_stack_lvl+0x189/0x250 [ 1496.857877][T21114] ? __pfx____ratelimit+0x10/0x10 [ 1496.857920][T21114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1496.857947][T21114] ? __pfx__printk+0x10/0x10 [ 1496.857994][T21114] should_fail_ex+0x414/0x560 [ 1496.858029][T21114] _copy_to_user+0x31/0xb0 [ 1496.858057][T21114] simple_read_from_buffer+0xe1/0x170 [ 1496.858098][T21114] proc_fail_nth_read+0x1b3/0x220 [ 1496.858132][T21114] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1496.858166][T21114] ? rw_verify_area+0x2a6/0x4d0 [ 1496.858197][T21114] ? __lock_acquire+0xab9/0xd20 [ 1496.858226][T21114] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1496.858258][T21114] vfs_read+0x200/0xa30 [ 1496.858289][T21114] ? fdget_pos+0x247/0x320 [ 1496.858317][T21114] ? __pfx___mutex_lock+0x10/0x10 [ 1496.858341][T21114] ? __pfx_vfs_read+0x10/0x10 [ 1496.858376][T21114] ? __fget_files+0x2a/0x420 [ 1496.858405][T21114] ? __fget_files+0x3a0/0x420 [ 1496.858425][T21114] ? __fget_files+0x2a/0x420 [ 1496.858459][T21114] ksys_read+0x145/0x250 [ 1496.858493][T21114] ? __pfx_ksys_read+0x10/0x10 [ 1496.858530][T21114] ? do_syscall_64+0xbe/0xfa0 [ 1496.858557][T21114] do_syscall_64+0xfa/0xfa0 [ 1496.858579][T21114] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.858601][T21114] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1496.858623][T21114] ? clear_bhb_loop+0x60/0xb0 [ 1496.858651][T21114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1496.858673][T21114] RIP: 0033:0x7fd0a858d5bc [ 1496.858693][T21114] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1496.858713][T21114] RSP: 002b:00007fd0a9399030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1496.858737][T21114] RAX: ffffffffffffffda RBX: 00007fd0a87d6180 RCX: 00007fd0a858d5bc [ 1496.858754][T21114] RDX: 000000000000000f RSI: 00007fd0a93990a0 RDI: 000000000000000b [ 1496.858768][T21114] RBP: 00007fd0a9399090 R08: 0000000000000000 R09: 0000000000000000 [ 1496.858782][T21114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1496.858796][T21114] R13: 00007fd0a87d6218 R14: 00007fd0a87d6180 R15: 00007ffe30aa69f8 [ 1496.858834][T21114] [ 1497.465209][T21116] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4195'. [ 1501.113114][T21158] netlink: 196 bytes leftover after parsing attributes in process `syz.2.4207'. [ 1501.448853][T21153] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 1 [ 1501.458468][T21153] EXT4-fs (loop3): unable to read superblock [ 1502.800168][T21171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4211'. [ 1504.138272][T21200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4222'. [ 1505.341902][T21219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4226'. [ 1505.557294][ T9] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1506.185213][ T9] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1506.317443][ T9] usb 5-1: config 63 has an invalid interface number: 66 but max is 0 [ 1506.341725][ T9] usb 5-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 1506.397472][ T9] usb 5-1: config 63 has no interface number 0 [ 1506.421210][ T9] usb 5-1: config 63 interface 66 has no altsetting 0 [ 1506.672679][ T9] usb 5-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 1506.691724][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1506.707508][ T9] usb 5-1: Product: syz [ 1506.712306][ T9] usb 5-1: Manufacturer: syz [ 1506.717849][ T9] usb 5-1: SerialNumber: syz [ 1507.812362][T16492] usb 1-1: new low-speed USB device number 74 using dummy_hcd [ 1508.238082][T16492] usb 1-1: config 1 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 1508.359958][ T9] uvcvideo 5-1:63.66: Found UVC 0.07 device syz (174f:8a31) [ 1508.367475][ T9] uvcvideo 5-1:63.66: No valid video chain found. [ 1508.374090][T16492] usb 1-1: config 1 interface 0 altsetting 16 endpoint 0x2 has invalid maxpacket 16, setting to 8 [ 1508.398088][T16492] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1508.398807][T21287] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1508.453345][T21287] qnx6: wrong signature (magic) in superblock #1. [ 1508.459908][T21287] qnx6: unable to read the first superblock [ 1508.536514][ T9] usb 5-1: USB disconnect, device number 68 [ 1509.655369][T21299] FAULT_INJECTION: forcing a failure. [ 1509.655369][T21299] name failslab, interval 1, probability 0, space 0, times 0 [ 1509.724539][T21299] CPU: 0 UID: 0 PID: 21299 Comm: syz.4.4248 Not tainted syzkaller #0 PREEMPT(full) [ 1509.724569][T21299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1509.724584][T21299] Call Trace: [ 1509.724593][T21299] [ 1509.724604][T21299] dump_stack_lvl+0x189/0x250 [ 1509.724636][T21299] ? __pfx____ratelimit+0x10/0x10 [ 1509.724669][T21299] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1509.724696][T21299] ? __pfx__printk+0x10/0x10 [ 1509.724733][T21299] ? __pfx___might_resched+0x10/0x10 [ 1509.724764][T21299] ? fs_reclaim_acquire+0x7d/0x100 [ 1509.724792][T21299] should_fail_ex+0x414/0x560 [ 1509.724841][T21299] should_failslab+0xa8/0x100 [ 1509.724868][T21299] __kmalloc_noprof+0xcb/0x7f0 [ 1509.724900][T21299] ? io_cache_alloc_new+0x40/0x100 [ 1509.724929][T21299] io_cache_alloc_new+0x40/0x100 [ 1509.724953][T21299] io_msg_alloc_async+0x1b2/0x2d0 [ 1509.724997][T21299] io_bind_prep+0x152/0x250 [ 1509.725024][T21299] io_submit_sqes+0x935/0x1e60 [ 1509.725109][T21299] __se_sys_io_uring_enter+0x2df/0x2b20 [ 1509.725157][T21299] ? ksys_write+0x1cb/0x250 [ 1509.725192][T21299] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 1509.725218][T21299] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1509.725241][T21299] ? __pfx_vfs_write+0x10/0x10 [ 1509.725277][T21299] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1509.725304][T21299] ? __fget_files+0x3a0/0x420 [ 1509.725340][T21299] ? fput+0xa0/0xd0 [ 1509.725367][T21299] ? ksys_write+0x22a/0x250 [ 1509.725402][T21299] ? __pfx_ksys_write+0x10/0x10 [ 1509.725439][T21299] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 1509.725472][T21299] do_syscall_64+0xfa/0xfa0 [ 1509.725492][T21299] ? lockdep_hardirqs_on+0x9c/0x150 [ 1509.725514][T21299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.725536][T21299] ? clear_bhb_loop+0x60/0xb0 [ 1509.725563][T21299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1509.725585][T21299] RIP: 0033:0x7f9356f8eba9 [ 1509.725607][T21299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1509.725627][T21299] RSP: 002b:00007f9357e1f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1509.725650][T21299] RAX: ffffffffffffffda RBX: 00007f93571d5fa0 RCX: 00007f9356f8eba9 [ 1509.725667][T21299] RDX: 000000000000ec84 RSI: 0000000000002d3e RDI: 0000000000000003 [ 1509.725680][T21299] RBP: 00007f9357e1f090 R08: 0000000000000000 R09: 0000000000000000 [ 1509.725695][T21299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1509.725708][T21299] R13: 00007f93571d6038 R14: 00007f93571d5fa0 R15: 00007ffe6b542228 [ 1509.725745][T21299] [ 1510.386890][T16492] usb 1-1: string descriptor 0 read error: -71 [ 1510.408188][T16492] usb 1-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.40 [ 1510.442645][T16492] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.532053][T16492] usb 1-1: can't set config #1, error -71 [ 1510.596839][T16492] usb 1-1: USB disconnect, device number 74 [ 1512.117016][T21357] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 1512.127689][T21357] exFAT-fs (nullb0): invalid boot record signature [ 1512.134228][T21357] exFAT-fs (nullb0): failed to read boot sector [ 1512.140631][T21357] exFAT-fs (nullb0): failed to recognize exfat type [ 1512.344580][T21361] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4264'. [ 1512.806004][T18523] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1512.806030][T10546] Bluetooth: hci4: command 0x1003 tx timeout [ 1513.202900][T21372] input: syz0 as /devices/virtual/input/input26 [ 1513.590537][ T9] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1513.784317][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1513.800277][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1513.828151][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1513.850203][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1513.912556][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1513.979164][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.999611][T21396] FAULT_INJECTION: forcing a failure. [ 1513.999611][T21396] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.213060][ T9] usb 1-1: config 0 descriptor?? [ 1514.257901][T21396] CPU: 0 UID: 0 PID: 21396 Comm: syz.1.4275 Not tainted syzkaller #0 PREEMPT(full) [ 1514.257934][T21396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1514.257949][T21396] Call Trace: [ 1514.257959][T21396] [ 1514.257969][T21396] dump_stack_lvl+0x189/0x250 [ 1514.258002][T21396] ? __pfx____ratelimit+0x10/0x10 [ 1514.258035][T21396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1514.258063][T21396] ? __pfx__printk+0x10/0x10 [ 1514.258101][T21396] ? __pfx___might_resched+0x10/0x10 [ 1514.258132][T21396] ? fs_reclaim_acquire+0x7d/0x100 [ 1514.258160][T21396] should_fail_ex+0x414/0x560 [ 1514.258196][T21396] should_failslab+0xa8/0x100 [ 1514.258232][T21396] __kmalloc_noprof+0xcb/0x7f0 [ 1514.258277][T21396] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1514.258322][T21396] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1514.258372][T21396] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1514.258417][T21396] genl_family_rcv_msg_doit+0xb8/0x300 [ 1514.258457][T21396] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1514.258502][T21396] ? apparmor_capable+0x137/0x1b0 [ 1514.258527][T21396] ? bpf_lsm_capable+0x9/0x20 [ 1514.258555][T21396] ? security_capable+0x7e/0x2e0 [ 1514.258590][T21396] genl_rcv_msg+0x60e/0x790 [ 1514.258628][T21396] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1514.258656][T21396] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1514.258694][T21396] ? __pfx_nl80211_authenticate+0x10/0x10 [ 1514.258716][T21396] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1514.258751][T21396] ? __asan_memcpy+0x40/0x70 [ 1514.258781][T21396] ? __pfx_ref_tracker_free+0x10/0x10 [ 1514.258822][T21396] netlink_rcv_skb+0x208/0x470 [ 1514.258843][T21396] ? __lock_acquire+0xab9/0xd20 [ 1514.258874][T21396] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1514.258904][T21396] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1514.258948][T21396] ? down_read+0x1ad/0x2e0 [ 1514.258977][T21396] genl_rcv+0x28/0x40 [ 1514.259002][T21396] netlink_unicast+0x82f/0x9e0 [ 1514.259043][T21396] ? __pfx_netlink_unicast+0x10/0x10 [ 1514.259077][T21396] ? netlink_sendmsg+0x642/0xb30 [ 1514.259099][T21396] ? skb_put+0x11b/0x210 [ 1514.259126][T21396] netlink_sendmsg+0x805/0xb30 [ 1514.259161][T21396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1514.259187][T21396] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1514.259219][T21396] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1514.259241][T21396] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1514.259265][T21396] __sock_sendmsg+0x21c/0x270 [ 1514.259301][T21396] ____sys_sendmsg+0x505/0x830 [ 1514.259335][T21396] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1514.259371][T21396] ? import_iovec+0x74/0xa0 [ 1514.259400][T21396] ___sys_sendmsg+0x21f/0x2a0 [ 1514.259433][T21396] ? __pfx____sys_sendmsg+0x10/0x10 [ 1514.259498][T21396] ? __fget_files+0x2a/0x420 [ 1514.259520][T21396] ? __fget_files+0x3a0/0x420 [ 1514.259554][T21396] __x64_sys_sendmsg+0x19b/0x260 [ 1514.259584][T21396] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1514.259622][T21396] ? __pfx_ksys_write+0x10/0x10 [ 1514.259660][T21396] ? do_syscall_64+0xbe/0xfa0 [ 1514.259697][T21396] do_syscall_64+0xfa/0xfa0 [ 1514.259720][T21396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.259742][T21396] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1514.259763][T21396] ? clear_bhb_loop+0x60/0xb0 [ 1514.259790][T21396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.259811][T21396] RIP: 0033:0x7fc82ff8eba9 [ 1514.259830][T21396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1514.259849][T21396] RSP: 002b:00007fc830d4c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1514.259872][T21396] RAX: ffffffffffffffda RBX: 00007fc8301d5fa0 RCX: 00007fc82ff8eba9 [ 1514.259888][T21396] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 1514.259903][T21396] RBP: 00007fc830d4c090 R08: 0000000000000000 R09: 0000000000000000 [ 1514.259917][T21396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1514.259931][T21396] R13: 00007fc8301d6038 R14: 00007fc8301d5fa0 R15: 00007fff39c38f78 [ 1514.259969][T21396] [ 1514.963236][T21398] fuse: Bad value for 'fd' [ 1515.284274][T21385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1515.318362][T21385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1516.733717][T21420] ALSA: seq fatal error: cannot create timer (-22) [ 1517.191435][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1517.197602][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1517.227458][ T9] usb 1-1: USB disconnect, device number 75 [ 1518.799455][T21448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1518.874101][T21452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1519.091965][T21455] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1519.101081][T21455] VFS: Can't find a romfs filesystem on dev nullb0. [ 1519.101081][T21455] [ 1519.139619][ T12] Bluetooth: Error in BCSP hdr checksum [ 1519.210292][T21457] netlink: 324 bytes leftover after parsing attributes in process `syz.1.4291'. [ 1519.395487][T19112] Bluetooth: Error in BCSP hdr checksum [ 1519.768586][ T1145] Bluetooth: Error in BCSP hdr checksum [ 1519.862421][ T12] Bluetooth: Error in BCSP hdr checksum [ 1520.114019][ T6041] Bluetooth: Error in BCSP hdr checksum [ 1521.017323][T10546] Bluetooth: hci4: command 0x1003 tx timeout [ 1521.028209][T18523] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1523.331570][T21482] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1523.403921][T21482] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1523.418174][T21482] FAT-fs (loop3): unable to read boot sector [ 1524.967337][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1524.973902][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1527.690767][T16491] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1528.689526][T16491] usb 2-1: device descriptor read/64, error -71 [ 1528.708906][T21533] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1528.721718][T21533] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1528.731731][T21533] FAT-fs (loop2): unable to read boot sector [ 1529.612715][T16491] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1529.806593][T16491] usb 2-1: device descriptor read/64, error -71 [ 1529.969002][T16491] usb usb2-port1: attempt power cycle [ 1530.393412][T16491] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1530.607660][T16491] usb 2-1: device not accepting address 60, error -71 [ 1530.852302][T21565] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 1530.878310][T21565] EXT4-fs (loop4): unable to read superblock [ 1530.923457][T21572] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4315'. [ 1531.633590][T13772] usb 1-1: new full-speed USB device number 76 using dummy_hcd [ 1531.793697][T13772] usb 1-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30 [ 1531.829593][T13772] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1531.886090][T13772] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1531.898027][T13772] usb 1-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 1531.928565][T13772] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1531.963570][T13772] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1531.977443][T13772] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1532.000512][T13772] usb 1-1: SerialNumber: syz [ 1532.030908][T13772] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 1532.337052][T21602] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4317'. [ 1532.377117][T21602] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4317'. [ 1534.444241][T16478] usb 1-1: USB disconnect, device number 76 [ 1535.072632][T21610] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1535.090650][T21610] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1535.105240][T21610] FAT-fs (loop4): unable to read boot sector [ 1537.369400][T21629] netlink: 80 bytes leftover after parsing attributes in process `syz.2.4324'. [ 1537.720732][T21641] input: syz0 as /devices/virtual/input/input27 [ 1537.916222][T21646] Invalid ELF header magic: != ELF [ 1538.812817][T21667] tmpfs: Bad value for 'mpol' [ 1538.994188][T21658] new mount options do not match the existing superblock, will be ignored [ 1540.389668][T21693] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1541.980755][T21699] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1542.007576][T21699] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1542.017647][T21699] FAT-fs (loop2): unable to read boot sector [ 1542.191693][ T9] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1542.193180][T10546] Bluetooth: hci5: command 0x0406 tx timeout [ 1542.274461][ T9] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1542.337510][T21706] ntfs3: Unknown parameter 'spars–ˆþ¹ùý#ß' [ 1543.725039][T21721] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4340'. [ 1544.043800][T21729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4342'. [ 1544.646744][T21751] nilfs2: Bad value for 'cp' [ 1545.513716][T16491] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1545.655356][T16491] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 1545.682879][T16491] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1545.692235][T16491] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1545.700707][T16491] usb 3-1: Product: syz [ 1545.705412][T16491] usb 3-1: Manufacturer: syz [ 1545.710487][T16491] usb 3-1: SerialNumber: syz [ 1545.726565][T16491] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1545.767877][T16490] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1545.911947][T10546] Bluetooth: hci0: command 0x0406 tx timeout [ 1545.918167][ T9] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1545.924618][ T9] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1546.732276][T16490] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1546.742473][T16490] ath9k_htc: Failed to initialize the device [ 1546.776609][T16490] usb 3-1: ath9k_htc: USB layer deinitialized [ 1547.927143][T10546] Bluetooth: hci2: command 0x0406 tx timeout [ 1547.927181][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1547.933335][ T9] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1549.863778][T10546] Bluetooth: hci3: command 0x0406 tx timeout [ 1549.864456][ T9] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1549.876105][ T9] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1551.803234][T10546] Bluetooth: hci1: command 0x0406 tx timeout [ 1551.809388][ T9] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1551.815599][ T9] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1552.041961][T16491] usb 3-1: USB disconnect, device number 74 [ 1552.449679][T21808] ALSA: seq fatal error: cannot create timer (-22) [ 1552.613017][T21811] overlayfs: overlapping lowerdir path [ 1554.029679][T21832] nilfs2: Bad value for 'cp' [ 1555.692935][T18523] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1555.700294][T18523] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1555.702558][T18523] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1555.704198][T18523] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1555.705403][T18523] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1555.780984][T16478] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1555.783171][T10546] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1555.792493][T10546] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1555.792991][T10546] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1555.795663][T10546] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1555.796385][T10546] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1555.987634][ T9] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1556.016108][T16478] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 1556.026700][T16478] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1556.026734][T16478] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.026757][T16478] usb 3-1: Product: syz [ 1556.026773][T16478] usb 3-1: Manufacturer: syz [ 1556.026789][T16478] usb 3-1: SerialNumber: syz [ 1556.033517][T16478] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1556.140588][T16477] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1556.147174][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1556.149870][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1556.149903][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1556.149994][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1556.150020][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.154296][ T9] usb 4-1: config 0 descriptor?? [ 1556.574213][ T9] playstation 0003:054C:05C4.0014: unbalanced delimiter at end of report description [ 1556.591238][ T9] playstation 0003:054C:05C4.0014: Parse failed [ 1556.601461][ T9] playstation 0003:054C:05C4.0014: probe with driver playstation failed with error -22 [ 1556.616256][T21839] chnl_net:caif_netlink_parms(): no params data found [ 1556.731663][ T9] usb 4-1: USB disconnect, device number 61 [ 1556.915297][T21839] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.925940][T21839] bridge0: port 1(bridge_slave_0) entered disabled state [ 1556.935046][T21839] bridge_slave_0: entered allmulticast mode [ 1556.956505][T21839] bridge_slave_0: entered promiscuous mode [ 1556.991699][T21839] bridge0: port 2(bridge_slave_1) entered blocking state [ 1557.000515][T21839] bridge0: port 2(bridge_slave_1) entered disabled state [ 1557.010088][T21839] bridge_slave_1: entered allmulticast mode [ 1557.022428][T21839] bridge_slave_1: entered promiscuous mode [ 1557.171552][T16477] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 1557.173930][T21839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1557.178956][T16477] ath9k_htc: Failed to initialize the device [ 1557.241108][T21839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1557.304199][T21864] ALSA: seq fatal error: cannot create timer (-22) [ 1557.710221][T18523] Bluetooth: hci4: command tx timeout [ 1557.728798][T16477] usb 3-1: ath9k_htc: USB layer deinitialized [ 1557.913606][ T9] usb 3-1: USB disconnect, device number 75 [ 1558.046514][T21839] team0: Port device team_slave_0 added [ 1558.078670][T21839] team0: Port device team_slave_1 added [ 1558.171233][T21839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1558.187073][T21839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1558.213203][ C0] vkms_vblank_simulate: vblank timer overrun [ 1558.221908][T21839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1558.252836][T21839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1558.266467][T21839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1558.292587][ C0] vkms_vblank_simulate: vblank timer overrun [ 1558.301963][T21839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1558.413968][T21839] hsr_slave_0: entered promiscuous mode [ 1558.421283][T21839] hsr_slave_1: entered promiscuous mode [ 1558.597128][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1558.598498][T16494] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1558.638077][T21839] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1558.649228][T21839] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1558.660961][T21839] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1558.672962][T21839] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1558.764046][T21839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1558.771625][T16494] usb 5-1: Using ep0 maxpacket: 32 [ 1558.778301][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 1558.785698][T16494] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 1558.789649][ T9] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 1558.796449][T16494] usb 5-1: config 0 has no interface number 0 [ 1558.808500][ T9] usb 4-1: config 0 has no interface number 0 [ 1558.815245][ T9] usb 4-1: config 0 interface 12 has no altsetting 0 [ 1558.828455][ T9] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1558.831864][T16494] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1558.839571][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.862394][ T9] usb 4-1: Product: syz [ 1558.866887][ T9] usb 4-1: Manufacturer: syz [ 1558.872237][ T9] usb 4-1: SerialNumber: syz [ 1558.873663][T21839] 8021q: adding VLAN 0 to HW filter on device team0 [ 1558.884091][T16494] usb 5-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1558.899207][ T9] usb 4-1: config 0 descriptor?? [ 1558.916312][T16494] usb 5-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 1558.931356][ T3007] bridge0: port 1(bridge_slave_0) entered blocking state [ 1558.938599][T16494] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1558.938636][ T3007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1558.953344][T16494] usb 5-1: Product: syz [ 1558.958400][T16494] usb 5-1: Manufacturer: syz [ 1559.004717][T16494] usb 5-1: SerialNumber: syz [ 1559.014437][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.021728][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1559.031697][T16494] usb 5-1: config 0 descriptor?? [ 1559.057513][T21886] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1559.070438][T21886] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1559.096677][T16494] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1559.124890][ T9] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 1559.150622][ T9] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 1559.165835][ T9] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1559.185474][ T9] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 1559.222129][ T9] usb 4-1: USB disconnect, device number 62 [ 1559.467211][T16494] usb 5-1: USB disconnect, device number 69 [ 1559.652038][T18523] Bluetooth: hci4: command tx timeout [ 1560.366511][T21839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1560.375722][T21911] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4376'. [ 1560.906020][T21914] nilfs2: Bad value for 'cp' [ 1561.757058][T18523] Bluetooth: hci4: command tx timeout [ 1562.126849][T16490] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1562.329923][T16490] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 1562.380397][T16490] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1562.402496][T21839] veth0_vlan: entered promiscuous mode [ 1562.487010][T16490] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.497726][T16490] usb 2-1: Product: syz [ 1562.501949][T16490] usb 2-1: Manufacturer: syz [ 1562.524710][T16490] usb 2-1: SerialNumber: syz [ 1562.525095][T21839] veth1_vlan: entered promiscuous mode [ 1562.876035][T16491] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1563.310784][T21839] veth0_macvtap: entered promiscuous mode [ 1563.438648][T16491] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1563.521682][T21839] veth1_macvtap: entered promiscuous mode [ 1563.559933][T21839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1563.580905][T16491] usb 3-1: config 3 interface 0 has no altsetting 0 [ 1563.595082][T16490] usb 2-1: can't set config #1, error -71 [ 1563.601480][T21839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1563.615327][T16491] usb 3-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice= 0.40 [ 1563.632473][T16490] usb 2-1: USB disconnect, device number 62 [ 1563.639773][T16491] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.653646][T16491] usb 3-1: Product: syz [ 1563.665081][T16491] usb 3-1: Manufacturer: syz [ 1563.673331][T16491] usb 3-1: SerialNumber: syz [ 1563.674213][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.719147][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.733062][T18523] Bluetooth: hci4: command tx timeout [ 1563.747276][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.766021][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1563.910138][T21942] overlayfs: overlapping lowerdir path [ 1563.962665][T19112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1563.991201][T19112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1564.093042][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1564.110358][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1565.292531][T16491] ldusb 3-1:3.0: Interrupt in endpoint not found [ 1565.320921][T16491] usb 3-1: USB disconnect, device number 76 [ 1566.176065][T21992] nilfs2: Unknown parameter 'dipùKr^y§' [ 1567.369561][T22011] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4400'. [ 1569.871938][ T30] audit: type=1804 audit(1655.662:364): pid=22046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.4410" name="/newroot/6/file0" dev="tmpfs" ino=48 res=1 errno=0 [ 1570.126535][T22054] netlink: 'syz.2.4413': attribute type 10 has an invalid length. [ 1570.251543][T22054] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1570.769817][T22054] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 1570.797083][T22054] qnx6: wrong signature (magic) in superblock #1. [ 1570.813418][T22054] qnx6: unable to read the first superblock [ 1570.971002][T22058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4414'. [ 1570.980261][T22058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4414'. [ 1570.989263][T22058] tc_dump_action: action bad kind [ 1572.524562][T22072] tipc: Enabled bearer , priority 0 [ 1572.543536][T22072] syzkaller0: entered promiscuous mode [ 1572.549194][T22072] syzkaller0: entered allmulticast mode [ 1572.602706][T22072] tipc: Resetting bearer [ 1572.633555][T22071] tipc: Resetting bearer [ 1572.864281][T22071] tipc: Disabling bearer [ 1573.075801][T22080] sctp: [Deprecated]: syz.1.4421 (pid 22080) Use of int in max_burst socket option deprecated. [ 1573.075801][T22080] Use struct sctp_assoc_value instead [ 1575.165695][T16486] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1576.353370][T16486] usb 3-1: Using ep0 maxpacket: 16 [ 1576.627790][T16486] usb 3-1: device descriptor read/all, error -71 [ 1582.113539][T16486] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1582.231623][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 1582.239355][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 1582.248435][T16486] usb 4-1: device descriptor read/64, error -71 [ 1582.482267][T16486] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1582.616684][T16486] usb 4-1: device descriptor read/64, error -71 [ 1582.723849][T16486] usb usb4-port1: attempt power cycle [ 1583.045048][T16486] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1583.149160][T16486] usb 4-1: device descriptor read/8, error -71 [ 1583.417907][T16486] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1583.598174][T16486] usb 4-1: device descriptor read/8, error -71 [ 1583.902583][T16486] usb usb4-port1: unable to enumerate USB device [ 1584.862846][T22185] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4446'. [ 1584.872882][T16486] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1585.086876][T16486] usb 3-1: Using ep0 maxpacket: 32 [ 1585.398323][T16486] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 1585.432747][T16486] usb 3-1: config 0 has no interface number 0 [ 1585.440554][T16478] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1585.490696][T16486] usb 3-1: config 0 interface 12 has no altsetting 0 [ 1585.501031][T16486] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1585.520258][T16486] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.539255][T16486] usb 3-1: Product: syz [ 1585.544457][T16486] usb 3-1: Manufacturer: syz [ 1585.552789][T16486] usb 3-1: SerialNumber: syz [ 1585.584905][T16486] usb 3-1: config 0 descriptor?? [ 1585.626699][T16478] usb 6-1: Using ep0 maxpacket: 16 [ 1585.651364][T16478] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=93.b9 [ 1585.689503][T16478] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.721265][T16478] usb 6-1: Product: syz [ 1585.725533][T16478] usb 6-1: Manufacturer: syz [ 1585.739036][T16478] usb 6-1: SerialNumber: syz [ 1585.799194][T16486] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 1585.811445][T16478] usb 6-1: config 0 descriptor?? [ 1585.831762][T16486] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 1585.877989][T16486] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1585.905471][T16486] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 1585.947267][T16486] usb 3-1: USB disconnect, device number 79 [ 1587.259589][T22217] fuse: Bad value for 'fd' [ 1587.327623][T22216] netlink: 248 bytes leftover after parsing attributes in process `syz.3.4450'. [ 1587.696316][T16478] speedtch 6-1:0.0: speedtch_bind: wrong device class 141 [ 1587.713751][T16478] speedtch 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1587.739913][T16478] usb 6-1: USB disconnect, device number 2 [ 1587.757610][T22224] FAULT_INJECTION: forcing a failure. [ 1587.757610][T22224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1587.907311][T22224] CPU: 1 UID: 0 PID: 22224 Comm: syz.1.4451 Not tainted syzkaller #0 PREEMPT(full) [ 1587.907342][T22224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1587.907356][T22224] Call Trace: [ 1587.907365][T22224] [ 1587.907376][T22224] dump_stack_lvl+0x189/0x250 [ 1587.907420][T22224] ? __pfx____ratelimit+0x10/0x10 [ 1587.907454][T22224] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1587.907481][T22224] ? __pfx__printk+0x10/0x10 [ 1587.907511][T22224] ? __might_fault+0xb0/0x130 [ 1587.907557][T22224] should_fail_ex+0x414/0x560 [ 1587.907593][T22224] _copy_from_user+0x2d/0xb0 [ 1587.907618][T22224] ___sys_sendmsg+0x158/0x2a0 [ 1587.907648][T22224] ? __pfx____sys_sendmsg+0x10/0x10 [ 1587.907713][T22224] ? __fget_files+0x2a/0x420 [ 1587.907735][T22224] ? __fget_files+0x3a0/0x420 [ 1587.907767][T22224] __x64_sys_sendmsg+0x19b/0x260 [ 1587.907796][T22224] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1587.907833][T22224] ? __pfx_ksys_write+0x10/0x10 [ 1587.907870][T22224] ? do_syscall_64+0xbe/0xfa0 [ 1587.907895][T22224] do_syscall_64+0xfa/0xfa0 [ 1587.907915][T22224] ? lockdep_hardirqs_on+0x9c/0x150 [ 1587.907936][T22224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.907957][T22224] ? clear_bhb_loop+0x60/0xb0 [ 1587.907984][T22224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1587.908006][T22224] RIP: 0033:0x7fc82ff8eba9 [ 1587.908026][T22224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1587.908045][T22224] RSP: 002b:00007fc82e1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1587.908070][T22224] RAX: ffffffffffffffda RBX: 00007fc8301d6090 RCX: 00007fc82ff8eba9 [ 1587.908086][T22224] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000003 [ 1587.908100][T22224] RBP: 00007fc82e1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1587.908115][T22224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1587.908128][T22224] R13: 00007fc8301d6128 R14: 00007fc8301d6090 R15: 00007fff39c38f78 [ 1587.908164][T22224] [ 1590.147102][T16492] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1591.736262][T22268] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4460'. [ 1591.955885][T16492] usb 2-1: Using ep0 maxpacket: 32 [ 1591.965374][T16492] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 1591.987085][T16492] usb 2-1: config 0 has no interface number 0 [ 1591.997334][T16492] usb 2-1: config 0 interface 12 has no altsetting 0 [ 1592.020126][T16492] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1592.098330][T16492] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1592.123940][T16492] usb 2-1: Product: syz [ 1592.170259][T16492] usb 2-1: Manufacturer: syz [ 1592.186457][T16492] usb 2-1: SerialNumber: syz [ 1592.376024][T16492] usb 2-1: config 0 descriptor?? [ 1592.636524][T16492] f81534 2-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 1592.672359][T16492] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 1592.680521][T16492] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1592.762998][T16492] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 1592.868495][T16492] usb 2-1: USB disconnect, device number 63 [ 1594.714258][T16490] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1594.858547][T22296] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4463'. [ 1594.997048][T16490] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1595.049703][T16490] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1595.127752][ T30] audit: type=1800 audit(1682.764:365): pid=22317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.4467" name="/newroot/266/bus/#1396//deleted" dev="tmpfs" ino=1396 res=0 errno=0 [ 1595.319272][T16490] usb 2-1: config 0 descriptor?? [ 1595.349946][T16492] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1595.406426][T16490] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1595.501323][T16492] usb 3-1: Using ep0 maxpacket: 16 [ 1595.513313][T16492] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=93.b9 [ 1595.525996][T16492] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1595.537268][T16492] usb 3-1: Product: syz [ 1595.541812][T16492] usb 3-1: Manufacturer: syz [ 1595.547099][T16492] usb 3-1: SerialNumber: syz [ 1595.612331][T22322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1595.634640][T22322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1595.660866][T16492] usb 3-1: config 0 descriptor?? [ 1596.249721][T16492] usb 3-1: can't set config #0, error -71 [ 1596.276981][T16492] usb 3-1: USB disconnect, device number 80 [ 1596.793997][T22352] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 1597.011431][T22322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1597.030604][T22322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.185520][T16490] usb 2-1: USB disconnect, device number 64 [ 1597.631835][T22377] binder: Unknown parameter 'sats' [ 1598.088576][T16478] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 1598.500813][T16478] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1598.511020][T16478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1598.610966][T16478] usb 5-1: config 0 descriptor?? [ 1598.641126][T16478] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1599.279059][T22419] sctp: [Deprecated]: syz.2.4483 (pid 22419) Use of int in max_burst socket option deprecated. [ 1599.279059][T22419] Use struct sctp_assoc_value instead [ 1600.295660][T16478] gp8psk: usb in 128 operation failed. [ 1600.306172][T16478] gp8psk: usb in 137 operation failed. [ 1600.412659][T16478] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1600.508057][T16478] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1600.572017][T16478] usb 5-1: USB disconnect, device number 70 [ 1601.024950][T16478] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1601.082815][T22437] input: syz0 as /devices/virtual/input/input28 [ 1601.164832][T16478] usb 5-1: device descriptor read/64, error -71 [ 1601.406652][T16478] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1601.565137][T16478] usb 5-1: device descriptor read/64, error -71 [ 1601.686773][T16478] usb usb5-port1: attempt power cycle [ 1601.846643][T22449] dvmrp0: entered allmulticast mode [ 1602.049850][T16478] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1602.110224][T22456] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1602.117945][T22456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1602.130974][T16478] usb 5-1: device descriptor read/8, error -71 [ 1602.197945][T22456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1602.276653][T22456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1602.373801][T22462] nilfs2: Bad value for 'cp' [ 1602.385393][T16478] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1602.424859][T16478] usb 5-1: device descriptor read/8, error -71 [ 1602.687247][T16478] usb usb5-port1: unable to enumerate USB device [ 1603.080794][T18523] Bluetooth: hci4: command 0x0c1a tx timeout [ 1603.317238][T16478] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1603.400736][T16492] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1603.400802][T16492] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1603.505072][T16478] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 1603.530385][T16478] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1603.530408][T16478] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1603.530424][T16478] usb 4-1: Product: syz [ 1603.530435][T16478] usb 4-1: Manufacturer: syz [ 1603.530446][T16478] usb 4-1: SerialNumber: syz [ 1603.534753][T16478] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1603.565599][T16478] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1603.863121][T22486] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4497'. [ 1603.863173][T22486] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4497'. [ 1604.542439][T16478] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1604.542797][T16478] ath9k_htc: Failed to initialize the device [ 1604.568468][T16478] usb 4-1: ath9k_htc: USB layer deinitialized [ 1605.892036][T22511] netlink: 'syz.4.4501': attribute type 12 has an invalid length. [ 1605.971771][T22511] netlink: 'syz.4.4501': attribute type 29 has an invalid length. [ 1606.893321][T22511] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4501'. [ 1606.897912][T16492] usb 4-1: USB disconnect, device number 67 [ 1606.962268][T22519] netlink: 'syz.4.4501': attribute type 12 has an invalid length. [ 1607.040469][T22519] netlink: 'syz.4.4501': attribute type 29 has an invalid length. [ 1607.140107][T22519] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4501'. [ 1607.345644][T22531] udf: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 1607.360037][T22532] udf: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 1607.465730][T22535] netlink: 115 bytes leftover after parsing attributes in process `syz.3.4504'. [ 1608.976358][T22569] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4508'. [ 1608.986703][T16478] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1609.255780][T16478] usb 4-1: Using ep0 maxpacket: 8 [ 1609.351270][T16478] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 1609.382626][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1609.466970][T16478] usb 4-1: config 2 has no interface number 0 [ 1609.498573][T16478] usb 4-1: config 2 interface 31 has no altsetting 0 [ 1609.522925][T16478] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 1609.602581][T16491] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1609.611691][T16478] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.632895][T16478] usb 4-1: Product: syz [ 1609.637347][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 1609.713902][T16478] usb 4-1: Manufacturer: syz [ 1609.769624][T16491] usb 3-1: Using ep0 maxpacket: 8 [ 1609.769945][ T9] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=93.b9 [ 1609.785383][T16478] usb 4-1: SerialNumber: syz [ 1609.804927][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.810668][T16491] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1609.813011][ T9] usb 6-1: Product: syz [ 1609.933763][T16491] usb 3-1: New USB device found, idVendor=04e7, idProduct=0020, bcdDevice=36.e1 [ 1609.971593][ T9] usb 6-1: Manufacturer: syz [ 1609.976689][ T9] usb 6-1: SerialNumber: syz [ 1609.985104][T16491] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.991873][ T9] usb 6-1: config 0 descriptor?? [ 1610.024137][T16491] usb 3-1: Product: syz [ 1610.214880][T16491] usb 3-1: Manufacturer: syz [ 1610.229207][T16491] usb 3-1: SerialNumber: syz [ 1610.251769][T16491] usb 3-1: config 0 descriptor?? [ 1610.305706][T16491] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input29 [ 1610.576881][T16478] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 1610.617147][T16478] usb 4-1: USB disconnect, device number 68 [ 1610.662363][T16477] usb 3-1: USB disconnect, device number 81 [ 1611.661206][ T9] speedtch 6-1:0.0: speedtch_bind: wrong device class 141 [ 1611.883271][ T9] speedtch 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1611.916453][ T9] usb 6-1: USB disconnect, device number 3 [ 1613.244065][ T31] INFO: task kworker/u8:7:1168 blocked for more than 144 seconds. [ 1613.255847][ T31] Not tainted syzkaller #0 [ 1613.288585][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1613.383486][T22656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4527'. [ 1613.830983][ T9] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1613.948073][ T31] task:kworker/u8:7 state:D stack:21128 pid:1168 tgid:1168 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1613.966480][ T31] Workqueue: netns cleanup_net [ 1613.972964][ T31] Call Trace: [ 1613.976550][ T31] [ 1613.980017][ T31] __schedule+0x1798/0x4cc0 [ 1613.984831][ T31] ? __lock_acquire+0xab9/0xd20 [ 1614.003005][ T31] ? __pfx___schedule+0x10/0x10 [ 1614.009101][ T31] ? schedule+0x91/0x360 [ 1614.013874][ T31] schedule+0x165/0x360 [ 1614.018825][ T31] afs_cell_purge+0x3d9/0x540 [ 1614.023824][ T31] ? __pfx_afs_cell_purge+0x10/0x10 [ 1614.032098][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 1614.039721][ T31] ? afs_net+0x45/0x270 [ 1614.044076][ T31] ? afs_net+0x45/0x270 [ 1614.050580][ T31] afs_net_exit+0x50/0x100 [ 1614.055565][ T31] ops_undo_list+0x49a/0x990 [ 1614.060474][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1614.067959][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1614.073778][ T31] cleanup_net+0x4d8/0x810 [ 1614.078337][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1614.084370][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1614.091874][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1614.097557][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1614.108407][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1614.115523][ T9] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=93.b9 [ 1614.125431][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1614.139679][ T31] process_scheduled_works+0xae1/0x17b0 [ 1614.145055][ T9] usb 3-1: Product: syz [ 1614.145331][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1614.156867][ T9] usb 3-1: Manufacturer: syz [ 1614.168973][ T9] usb 3-1: SerialNumber: syz [ 1614.187588][ T31] worker_thread+0x8a0/0xda0 [ 1614.192295][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1614.198063][ T9] usb 3-1: config 0 descriptor?? [ 1614.222611][ T31] ? __kthread_parkme+0x7b/0x200 [ 1614.231976][ T31] kthread+0x711/0x8a0 [ 1614.236116][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1614.250543][ T31] ? __pfx_kthread+0x10/0x10 [ 1614.259768][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1614.268983][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1614.274229][ T31] ? __pfx_kthread+0x10/0x10 [ 1614.288032][ T31] ret_from_fork+0x4bc/0x870 [ 1614.297049][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1614.302237][ T31] ? __switch_to_asm+0x39/0x70 [ 1614.315790][ T31] ? __switch_to_asm+0x33/0x70 [ 1614.325840][ T31] ? __pfx_kthread+0x10/0x10 [ 1614.334474][ T31] ret_from_fork_asm+0x1a/0x30 [ 1614.339324][ T31] [ 1614.364430][ T31] [ 1614.364430][ T31] Showing all locks held in the system: [ 1614.393007][ T31] 5 locks held by kworker/0:0/9: [ 1614.455636][ T31] #0: ffff8880206c6d48 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1614.474100][ T31] #1: ffffc900000e7ba0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1614.502256][ T31] #2: ffff888027f48198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 1614.511238][ T31] #3: ffff8880502be198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1614.539772][ T31] #4: ffff888024713160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 1614.558138][ T31] 1 lock held by khungtaskd/31: [ 1614.567782][ T31] #0: ffffffff8e33d360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1614.595511][ T31] 3 locks held by kworker/u8:7/1168: [ 1614.600871][ T31] #0: ffff88801aea6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1614.621843][ T31] #1: ffffc90003e97ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1614.633309][ T31] #2: ffffffff8f73a230 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x810 [ 1614.643281][ T31] 2 locks held by getty/5621: [ 1614.647998][ T31] #0: ffff888033a360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1614.659126][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1614.669725][ T31] 4 locks held by udevd/22438: [ 1614.674531][ T31] #0: ffff8880780f9540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe20 [ 1614.683862][ T31] #1: ffff8880314ea488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5c/0x420 [ 1614.693663][ T31] #2: ffff88805ffb7008 (kn->active#27){++++}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 1614.703503][ T31] #3: ffff8880502be198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 1614.713182][ T31] 2 locks held by syz.2.4527/22657: [ 1614.718661][ T31] #0: ffff888056d88cd8 (&nft_net->commit_mutex){+.+.}-{4:4}, at: nf_tables_valid_genid+0x3b/0x100 [ 1614.729533][ T31] #1: ffffffff8e342df8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 1614.740802][ T31] [ 1614.743220][ T31] ============================================= [ 1614.743220][ T31] [ 1614.772946][ T31] NMI backtrace for cpu 1 [ 1614.772965][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1614.772988][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1614.773001][ T31] Call Trace: [ 1614.773010][ T31] [ 1614.773021][ T31] dump_stack_lvl+0x189/0x250 [ 1614.773057][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1614.773083][ T31] ? __pfx__printk+0x10/0x10 [ 1614.773118][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1614.773143][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1614.773178][ T31] ? __pfx__printk+0x10/0x10 [ 1614.773213][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1614.773246][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1614.773270][ T31] watchdog+0xf60/0xfa0 [ 1614.773297][ T31] ? watchdog+0x1e2/0xfa0 [ 1614.773335][ T31] kthread+0x711/0x8a0 [ 1614.773364][ T31] ? __pfx_watchdog+0x10/0x10 [ 1614.773393][ T31] ? __pfx_kthread+0x10/0x10 [ 1614.773419][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1614.773460][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1614.773480][ T31] ? __pfx_kthread+0x10/0x10 [ 1614.773505][ T31] ret_from_fork+0x4bc/0x870 [ 1614.773538][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1614.773569][ T31] ? __switch_to_asm+0x39/0x70 [ 1614.773589][ T31] ? __switch_to_asm+0x33/0x70 [ 1614.773615][ T31] ? __pfx_kthread+0x10/0x10 [ 1614.773642][ T31] ret_from_fork_asm+0x1a/0x30 [ 1614.773699][ T31] [ 1614.773706][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1614.928436][ C0] NMI backtrace for cpu 0 [ 1614.928469][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1614.928490][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1614.928502][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1614.928538][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 0a 24 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1614.928554][ C0] RSP: 0018:ffffffff8e007d80 EFLAGS: 000002c6 [ 1614.928572][ C0] RAX: 61cc332968f49700 RBX: ffffffff8196a397 RCX: 61cc332968f49700 [ 1614.928586][ C0] RDX: 0000000000000001 RSI: ffffffff8dbc41e9 RDI: ffffffff8c03aae0 [ 1614.928599][ C0] RBP: ffffffff8e007ea8 R08: ffff8880b8632fdb R09: 1ffff110170c65fb [ 1614.928613][ C0] R10: dffffc0000000000 R11: ffffed10170c65fc R12: ffffffff8fc45d30 [ 1614.928627][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1c12a38 [ 1614.928639][ C0] FS: 0000000000000000(0000) GS:ffff8881259dd000(0000) knlGS:0000000000000000 [ 1614.928654][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1614.928666][ C0] CR2: 00007ffe30aa5c9c CR3: 000000005c110000 CR4: 00000000003526f0 [ 1614.928682][ C0] Call Trace: [ 1614.928690][ C0] [ 1614.928698][ C0] default_idle+0x13/0x20 [ 1614.928718][ C0] default_idle_call+0x73/0xb0 [ 1614.928741][ C0] do_idle+0x1e7/0x510 [ 1614.928777][ C0] ? __pfx_do_idle+0x10/0x10 [ 1614.928812][ C0] cpu_startup_entry+0x44/0x60 [ 1614.928839][ C0] rest_init+0x2de/0x300 [ 1614.928862][ C0] start_kernel+0x3ae/0x410 [ 1614.928888][ C0] x86_64_start_reservations+0x24/0x30 [ 1614.928917][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1614.928946][ C0] common_startup_64+0x13e/0x147 [ 1614.928975][ C0] [ 1614.940988][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1614.941015][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1614.941047][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1614.941064][ T31] Call Trace: [ 1614.941075][ T31] [ 1614.941090][ T31] dump_stack_lvl+0x99/0x250 [ 1614.941128][ T31] ? __asan_memcpy+0x40/0x70 [ 1614.941165][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1614.941196][ T31] ? __pfx__printk+0x10/0x10 [ 1614.941248][ T31] vpanic+0x237/0x6d0 [ 1614.941277][ T31] ? __pfx_vpanic+0x10/0x10 [ 1614.941308][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1614.941357][ T31] panic+0xb9/0xc0 [ 1614.941385][ T31] ? __pfx_panic+0x10/0x10 [ 1614.941418][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1614.941449][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1614.941487][ T31] watchdog+0xf9f/0xfa0 [ 1614.941536][ T31] ? watchdog+0x1e2/0xfa0 [ 1614.941576][ T31] kthread+0x711/0x8a0 [ 1614.941610][ T31] ? __pfx_watchdog+0x10/0x10 [ 1614.941645][ T31] ? __pfx_kthread+0x10/0x10 [ 1614.941679][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1614.941717][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1614.941741][ T31] ? __pfx_kthread+0x10/0x10 [ 1614.941771][ T31] ret_from_fork+0x4bc/0x870 [ 1614.941810][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1614.941855][ T31] ? __switch_to_asm+0x39/0x70 [ 1614.941889][ T31] ? __switch_to_asm+0x33/0x70 [ 1614.941922][ T31] ? __pfx_kthread+0x10/0x10 [ 1614.941952][ T31] ret_from_fork_asm+0x1a/0x30 [ 1614.942007][ T31] [ 1615.257080][ T31] Kernel Offset: disabled [ 1615.261406][ T31] Rebooting in 86400 seconds..