last executing test programs: 3m26.715426175s ago: executing program 1 (id=2695): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r0 = syz_clone(0x20000, &(0x7f0000000480)="b0a4ee914556740f411ba81378f3fbe6bdff7b7f74f7e3dce01b", 0x1a, &(0x7f00000004c0), &(0x7f0000000700), &(0x7f0000000980)="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") prlimit64(r0, 0x6, &(0x7f0000000140)={0x8, 0xfffffffffffffff8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$read(0xb, 0x0, &(0x7f0000000340)=""/148, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0x2, &(0x7f0000000240)={0x8830c, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x80010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x0, 0x840) recvmmsg(r6, &(0x7f0000000800)=[{{&(0x7f0000000400)=@isdn, 0x80, &(0x7f0000000540)=[{&(0x7f0000000280)=""/24, 0x1}, {&(0x7f0000000100)=""/10, 0x5}, {&(0x7f0000000500)=""/25, 0x19}], 0x3, &(0x7f0000000580)=""/145, 0x91}, 0x3ff}, {{&(0x7f0000000640)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000880)=""/224, 0xee}, 0xcb}], 0x2, 0x2103, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xe) sendfile(r3, r2, 0x0, 0x20000023893) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 3m26.678998468s ago: executing program 1 (id=2696): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x1415, 0xbc7a16c12cb59ca1}, 0x10}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) r3 = syz_io_uring_setup(0x28cb, &(0x7f0000000200)={0x0, 0xd365, 0x10100, 0x3, 0x80000000}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) io_uring_enter(r3, 0x48e9, 0x225e, 0x2, 0x0, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r6 = fcntl$getown(r0, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r8 = syz_clone3(&(0x7f00000003c0)={0x8200000, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0), {0x40}, &(0x7f0000000200)=""/30, 0x1e, &(0x7f0000000300)=""/177, &(0x7f0000000240)=[r6, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0], 0x7}, 0x58) ptrace$getregset(0x4204, r8, 0x6, &(0x7f0000000440)={&(0x7f0000000280)=""/11, 0xb}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x2, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x8840) 3m26.460956202s ago: executing program 1 (id=2697): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000600)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3aab}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) r0 = getpid() keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x30144c8, &(0x7f0000000340)={[{@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@uni_xlate}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@nonumtail}, {@uni_xlateno}, {@shortname_mixed}, {@utf8no}, {@numtail}, {@uni_xlate}, {@numtail}, {@fat=@tz_utc}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@shortname_win95}, {@shortname_mixed}, {@shortname_win95}]}, 0x6, 0x2d5, &(0x7f0000000680)="$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") socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f00000003c0)={0x7, 'vlan0\x00', {0x6}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb1f0000) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x2, &(0x7f0000001080)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'cp932'}}, {@uni_xlate}, {@uni_xlateno}, {@rodir}, {@utf8}, {@utf8no}, {@utf8}, {@uni_xlateno}, {@numtail}, {@fat=@tz_utc}, {@shortname_winnt}, {@utf8no}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp852'}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@numtail}], [{@audit}]}, 0x1, 0x37c, &(0x7f00000005c0)="$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") r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x1e, 0x49, {0x49, 0x6, "78b4a8c5168886c13a6925554ba323521f613a41d81866b3baa974f54b311d3b23fb32927ae04f5067067f056ab20f9c0b10d72a8d1ff7611fca8ad67b8cd8d7df460a9a5e694a"}}, &(0x7f0000000980)={0x0, 0x3, 0xcd, @string={0xcd, 0x3, "b301e42572ac47120b0c386d24eaadad608f136ac9755d6f00360d1ecc892e2316f8e16d3b5af81cfeef6a7a91c984b1ba125e47f2469a606d2802c2b0db9138692c94b40918d2a7eb4f34a630af0de95c0151d3713581f0e92fcd7a27719af673571ede602f157b62c585da0d3df8801460a356564dc51d692315a6867c47961db32bbfb5adc05f8b27903b2f3e86cd570500ad66c0224db87d153754b47956e4dcc9ef55ab591cbf8d30c0a46db15be1309cbd45b7b2f86d9e747692075d3760b08f0a536f42bdef99c0"}}, &(0x7f0000000440)={0x0, 0xf, 0x45, {0x5, 0xf, 0x45, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x5, 0x6, 0x4, 0x7700, 0x859, [0x3ff0, 0xff001e, 0x0, 0x30, 0xff000f, 0xff0000]}, @ss_cap={0xa, 0x10, 0x3, 0x8e896047c3809389, 0x2, 0x3, 0x7, 0x7}, @wireless={0xb, 0x10, 0x1, 0x8, 0x4, 0xfd, 0x5, 0x9, 0x32}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x6, 0x9}]}}, &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x2, 0x5, 0x3, "2e698f98", "c4a1919e"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x8caf3dc7a085d36e, 0x90, 0x40, 0x7, 0xb0, 0x100}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000a80)={0x40, 0x10, 0x90, "fc2da89cba2180bbeb5a5eb7ccf5c3df49a603a38d86421a1ad4bba7b95f3c9a82fee0b04432a55efe03f5c4af01dffd2026ea52ae2710b513fb48e1f5ba718dced6902daddb17845d4dfd74b4696830961d228f9bcff4bcd71617e4ecb3a2c6f68b899a86593fbd4fed72e2cb06c290fe76e6aca3b2b098fa08b8892456b16a88877f75c1f72973ee5f18e276ca71bf"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x65}, &(0x7f0000000b40)={0x0, 0x8, 0x1}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000bc0)=ANY=[@ANYBLOB="200008009b2dc1640200f0000000"], &(0x7f0000000c00)={0x40, 0x7, 0x2, 0x743c}, &(0x7f0000000c40)={0x40, 0x9, 0x1, 0x2a}, &(0x7f0000000c80)={0x40, 0xb, 0x2, "5816"}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x67}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000d40)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000d80)={0x40, 0x19, 0x2, "81b8"}, &(0x7f0000000dc0)={0x40, 0x1a, 0x2, 0x2b}, &(0x7f0000000e00)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000e40)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0x42}}) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) lseek(r3, 0x9, 0x0) 3m23.703396607s ago: executing program 1 (id=2707): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'bond0\x00', &(0x7f0000000640)=@ethtool_per_queue_op={0x4b, 0x3a, [0x4, 0x8, 0xfffffff1, 0x8, 0x0, 0x1, 0x3e9, 0x5, 0x9, 0x7, 0x5, 0x6, 0x7ff, 0x4, 0x4, 0x3ff, 0x4, 0x8, 0x2, 0x4, 0x6, 0x4, 0x8, 0x1, 0xfffffa0c, 0x7, 0x8, 0x9be, 0x3, 0x3ff, 0x6, 0x14dc, 0x147, 0x400009, 0x1, 0x3, 0x4, 0x0, 0x9, 0x6, 0x7, 0x5, 0x0, 0xfffffffb, 0x8, 0x80000000, 0x9, 0x100, 0x5, 0x19dd, 0x7, 0x5, 0x0, 0x6, 0xf667, 0xfffffffc, 0x4007, 0x80000008, 0x7f, 0x6, 0xc8, 0x6, 0x0, 0xc3, 0x4, 0x10, 0xffffffa8, 0x1, 0x40000009, 0x9, 0x1, 0x83, 0x0, 0xcf, 0x10, 0x401, 0x7, 0x7, 0x2a, 0x71c9, 0x1, 0x321, 0xfffffeff, 0x7f, 0x66, 0x1c24, 0xff, 0x9, 0x1000, 0x2, 0x3, 0xff, 0xfd, 0x126, 0x4, 0x8, 0x40000000, 0xc, 0x4, 0x8, 0xffffffc0, 0x4, 0x10001, 0x5, 0x74a000, 0x44e27, 0x3ff, 0x0, 0x8356, 0x0, 0x6, 0x9b7, 0x1, 0x80000001, 0x82, 0xea, 0x6, 0x80000000, 0xff, 0x7, 0x0, 0x5, 0x10001, 0x8, 0x69e4, 0x80000001, 0xfffffff4, 0x100]}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) (async) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) (async) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x80000, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585"], 0x0) 3m21.73865275s ago: executing program 1 (id=2714): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) mmap$xdp(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2, 0x42031, 0xffffffffffffffff, 0xff01000000000000) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x0, 0x2, 0x4}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000003600)={{0x0, 0x3, 0x6, 0xffffffffffffffff, 0x9, 0x3, 0x800, 0x6, 0x6, 0x4, 0x3, 0x0, 0x80000000, 0xa, 0xa9f9}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000004600)={0x0, r2, "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", "5bef98eb6b0d94c713491ed20a5c8ee7b62f89904f69b11c13df7171f5c0875de91cc336d0e4a4eb88222caf04229d32be926e4524c4244c123cb0feec11c47c677bbe6d6be3387d000ad058eabc4dee7867751babdce0d9f424bb9e5bcfd83c81a95e9f695737993d9a7501e5ec1d9e19ed730fe86962a410e7faf3ca15293e62007dde74c06d8954312cbd09b5ec84cada86a59daf659c8c8423189fbc7359902f8dcc149ac4aa59bafbbf86927ef240e897ea81dd63a7f927460d23136cf3e6680a13ab966108397408b872c0ab95ac246d5e99eb22f7e310e9d700f438e372eb692c1cf276cff142cbeeeea523eeb64bfe4d13a76b23ee1d8b988ba17318f3c39cdc0116246d5170d58712a93f2212f37a1118f77c6bd2e1e82397071194fb66dfdee2eb26dcf78c10593df2414794d189d2ea8ee53ff61691da446d8097c073ec131f3b81cdacd06169bff54d0b6d60e3ce7ff24a20cc515627abfeae56dc3bd1f2659acd8bd66a7ce7d3efb4793d4157ab73b4bf2601f8020d8f09862e2c2e52558476a93bc1c1633cc4b358e5515b6d77b7efd2977f59fc547631e3e1c832d3bbbb298f4cbed8f35eab81ad2644c4b75b35726c7d2b3f524cb0d43686769ece6ca34ee42933010be9b1d1cd59a3d192213c801983fad8d08adb6c6373fe1366a5410f9ba44092161253633f794bfb5be56b2e8133d526d58624bf0be627291629e55f2ae9a9838ef34ef6b646156f371322842c31147bb2ce0770744b10bdfeff28133ee56c974249d792cd9efe3d86f087fc8a73313fa9fcd2d8310df065c83ec9c56fc4769396c2bbec72221a8f864d4f8117bebaffe82e94170aa9fa054c4fdb14b95e6aea2361833ae6648665cc205c16b7e16a47db71a75a4c9d950077278f18a048482ea807302d3c44c09b73761aa8c2bb7771bf504e8830bf6110c9d95af06dd3a14fb2e711c31f5c493e4e7f979c03847179774f2e83bd2fcfa26420b36d0ba917a0403738ce735073eaaeb7d606f3f4102ef5d5ffdb10305a20b007e1a90a6eb42796da40c8f02e4e85b90354a7ac282963aab6cec6bccfa9d8c76f802fd9daeed0e65b19a3b14bcfbf13970648072311ef91b107bae99caf1f83e2a9848c66a51d34258fb30621707d1b98ea4a0b22f6556e423e0f7640896869a3e2fecc7bb5fc2d97a1f6c6e859eeb2dce535e85de1012c22642e0465e5b66c886373ee692e8f86fbd7d33a1d9c7516644657808c3f520ebb6894cee2ca6644ae0c82f3af6e7aa01964e9a2e16f1fd362b67557965eda08ec74b1c4fcb8adae92b29c756f8cd9db7f459b949d2044de49cba5113924f8765ee6bf1afc971a31b41a6527d9eeee604a3ee2fdfa70264ed8d572930da21aaed040bffd9f7ec540322d7f42b4b6746aba8857c0618bc79767f6b3418ac8b17b0d0b23a9b8612240752de4f46a001cc255377cec00946034fde2ecac0519401d9730502928ea9d2cb7e5ea723a251cd84383d4148c6e4240bf63c308873e75a80f91f3260535d6225da786ef4bb40d68c2a57e89c13be44ed4d26431a1a28b835256acdcee116f17983b0f1e91e170f57a181a751ad51cca8f0c90a403e5e15e8e6b4c1f4ada9b743f77853dec23819ce54d3632cd1f5156ccaa97f624ee187673f196f69346385d9c272539ce2af59cc4d9e7d3df8b3efafd13c95a306e740870974f458fa36c93b95d85037b244859fa98cd23a162643b8dcbd1479121ca5f08a58b7f93fbe84edef076badc3c4a21dffd7c04bd3bf23b5bdbef3bba2676c4b943b817217154a0f2586486e3d97a998cd12b80f3f7afa1d812306866e4776cf0d9f4acbca3f981e76aee95c4a65a775566a3a09c12985402bdd8df83681bf2d71e93056ead1e4921696d31bdaed54fe8d78222758aeed9770554ae18af5ec33789624e329a0354ce03ab3e207288e79df508f8acad25061ee1433330807221fd3502b6243958ff741399f649211906ed41726d8fc7f6335f8a83a7344292c3dbf5c376bc3689f439ca7712ab211caf1769b77e4f82f91442d20f831bd0561700f3de4cb995f8c65e70023388bff56fdf43d16ce204bad1da11dd1143ce3203c28e67b0ee07a6124710be80b50cc2e3c3f1476cefb2ce4a0453470c19b645379690c279bc6ae984eef7515ec79302f60955d75537664f9d6c98699daadb50d9804beb27180e2863bc3e390a575445c2aad2d6ef1de2f2d15759fefc37de542bb81563431f6153cb8282ff8d95f7d3d57b2fdff49035458540d4aaf7f96f29e25a0c813b8397cb64075bfabeaf3572b4fab47663e393ce0036bab0b058608f1f17ed1e30e349d9dcec09537d594d59b6a5d2498f2466791762371c2035bfc92997e16877a366ea54dbe679ce5c41ab5569597e85b2a0845dc69efc18b537a56e06c446a590bf9a915052f0a1648bc5d1301b68f821d66087d3ee150518691d84db2b631c467d78f949604fca35c46b1851f9c134cf3f5e72bdde06e36fcd8335d55ae8dab3270f6b71298d16370e5309107d64a105fb65e698b75181cd3c9c728d589a66f8a4fa09fbf19ce5c1f2354a714d6f8c897c4ab62e8e85cb2c21b34e67355269eb0530d0c2cd14da38810033283419207e119daea671beb9b40cbc8c1934460166e5d638dea45b8ed17408b6b4868c75323339a37638c460a327a1628def603206dc15b56b24507456b2d7e585bb8eba437b9edc9ac4e8d7e6743f31d538d7b73d42b09b81d069d9cf0a0fb2011a03de02914062592f94917eba04e2decba7b11fb5f5536172dc1c8b3d1e42630fbdf253b5c5b87293852022d7adc30732d18d3179d5d49b6ce45f26326f0bc64d99f3e33db0d883cc08830dc787470e15707d6b5934973d34f1b2048b7d9b9f8dd8385cac3b513d81ada9e68e2654fceec91d37fdc2c3579aebda40c2ab7bb65fc57c6ab275d51bd903dfb4f4f6f8d9d8fd5e942f8e91c6ed0e3bd8ee057740aea2411cb95034240ad92d917db897c4ebaed58b68968ba6f7d0864db602c5e1f0897e67b68343d14842056a214d88029fada4845a97f5e2b0431bb4e8e94c3564df7e14f9ae6c0f69208753abdd8ffae8ffae1c9647205f9a527ecfba4abb60b42d67ed82c8f1702cc76248f9ed6abe83558775cdf647be53ee44c7f06ffe97542e8a44edb52b0d1223357c1a5d3630823fa03c2d92b2c1c610de6e7b8e529550c1f6f4ab91380cb78d191ff05b07ed2ec53c59ce918bbefc9b64c5b81cf0a08c9a221ef0b6fb35394da7e9a9f9845fe63368f7f63e8ba32e221135ac60566f65e6ebf4978495b16da003435e4787a6197b0bf9e3acbf356ba338a41f0d48f19a0dcd9df2a24b70cdd07e095b24dad1288956692b24c25eb220113ce586c914288db3d1f04e2e43f7789ec2e9298f1e7c56822262c07e346d2d04f89f6cbed6712c3621ce10c683677b6f3c6836508287ceca8345c970392444590954df06c413097ebfba44ed921d54068a8b4763efa6b5944cc4bba695cbba99d650afa1f04bf887bbae716c8082b4916b6853fceef78635675aa320505d867ae754ffe3f2bf3d821cdb092d77a99df753adac638b6c08fe39a446120975905d232ea25c21f00cc7ce9930eabb538e191fc99afabc483ebad71343186e1256d8e508ec5d931cd9861ebdafb11e294f44e9e26f678941f21865c96c1f0295ccc736b3690dd43f0d5f48aabb2f8b3defb1ff2b661b5e61187926d28adf80627fd50986f6c468aa60e603a47d62430b5b069f623a83b7de46c4b093b3a6c92fd2b8616e65dfeee3f8c1359837db58374de2f9ef984597d3d0c066af5fd7b492a3545e42e076ff24c9ea83d47aee7a1352d5d6c2eba3f273e994e65646eae463a3a2bd8c50295479251d4ad0078cefd8d124ba24d9b2419df07ce152a3531cc39d697a55b48861cd769b2e15c6b28a70e5da25c5e4faccf16d591963fc68c7c9286cb29d680c17b9d4f6810295b73ed0d8d856119861df76788294c4e1ee3ea997550a8ec8314fead383a78d3f512a9147d3f3423e1ddfd3bd16b3b06f70782f07bdc0773504b74b38e7c4f60278d690afebb791ba563b997c662dd935792c26a2b4691c1c07a8f8833669ddcec018ce09697f020b56aa9b1358dd41302190661d91b2ffb9aae89ec93a5c3528651369331517a8f50bf96aeef2a5e2576d46fc6ff101063789e0a5a16eb308fbd0a48410acaf831db29f887b3215a896d9a19b248ebb5d8b00cc7f26ba8534848ae25c01658ce61b6ea5aafc477f0a4e3bfa1ddcc9c427e3af246dd4114af21927bb9833dad1b1a537102f97fae1f886ffd7cec9ef2e04cca90dd56f2d145d508f861bcfb2f8f90158b3cd4e21ba3ca92b82f96aaf2906b289acd8fe333006306170f23b03be5d8bb629d51f3add4bae8fafb10b2f27f32530dc1c56d9f1bddde61a16275a6b6cdac170c04a728c0b090bee67edd31a5aeddc4748604a005dc4f0cdba40c17e0317d950e6b35b4aacf63cd36fa6ee726b5f9f73842131158cf34f4adfab0673216742ebdbb72e04c8542bfae03069c981b5ca4b06c9379c6111e2ab36ad6f1d682295ebf81ec8403de77c3224591933a647855d006f7ed7920adae5fda1c4f1f5e043de1344d74d38db4db9b41562d4f1c50a519e6c31dfb7e6a77347ffd5b95c6c7a83f42e3bc1aac9cdb95eec911cb227a45bd9191bce5be7011329a4a0b11aa8be1cf76a55835b4834f229bd8d3e482355d1d9eb98f1c1c99803531e24d303b8f3269d54df86d45a4d240e5bb55873e6ec839f714e50a3fd3800948c31f50bedf12249766f3ded25a5af4283d9f8d379f27b45b6cb7422c248dcc74044e4b2bbcd53c0cbf50ee14b039a64104b4f463566c323695be889fd21cd1a429a31b0883f72309ad5e285fd6b7e519c6b7ea9261e8d24c27b2507412bbbaacbe8fa83d7f163c86df611d2db3e094dea168c3a70cb8e6e2f87a60ffe004a3c8ed81c3efdf22070584cc007b49b40028e54c4ab9fc9e2a84ea00c769eeeb7ecca2c0bc9fdbf754090121337242da3e33901dcf0e64c202462e143bd7b6d52ca0a9c153a64c72dd70c2fc36435889c38b85ffd3d1a753e42b1ef8a08e62b91f48f49735ab6c900cd206ba340fdc3b5e01de24cb6b2dc61fbae9fd1a0fb15e557e82d66feaaf61b1a995246d6a3d407ca83bb35c1b5fbc791768bcd8d7dacc07ff47bd3fa2c2dc0c96670081d4d44414676694a963b67a551f3fcfc3f42bcf6d568cea9dafc5f3ce35e47a69619acd2d94a698d56e1655bc80a8b92c06b1881a6ac07d7596b96dfd7964e862e132f92a87de642e8601f3ac4126d54d6c3a8f94a0e681aa313c0b242c97a349c4bd16ff12a00447cdd707742a16ed9"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000001600)={0x4, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r3}, {}, {}, {0x0, r3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r2}], 0x0, "b60ba512f459fd"}) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) (async) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) (async) r6 = dup(0xffffffffffffffff) setsockopt$inet_int(r6, 0x0, 0xce, 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{}]}) (async) execveat$binfmt(0xffffffffffffffff, r5, &(0x7f0000000100)={[&(0x7f00000000c0)='&@-/\x00']}, &(0x7f0000000280)={[&(0x7f0000000140)='\x00', &(0x7f0000000180)=')%\x00', &(0x7f00000001c0)='\x00', &(0x7f0000000200)='\x00', &(0x7f0000000240)='{\x00']}, 0x800) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000040)={{0x0, 0x7fffffffffffffff, 0x7, 0x7, 0x7ff, 0x1000, 0x3, 0x1, 0x0, 0x4, 0x1, 0x0, 0x6, 0x0, 0x6}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000002600)={r4, r7, "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", "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"}) write$UHID_INPUT(r0, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) 3m21.048537309s ago: executing program 1 (id=2719): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x157]}, 0x8) r1 = syz_io_uring_setup(0x6934, &(0x7f0000000300)={0x0, 0xd615, 0x10100, 0xffffffff, 0x100000, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x21c) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffe}}) io_uring_enter(r1, 0x44fd, 0x0, 0x1, 0x0, 0x0) exit(0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x10, &(0x7f0000000080)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 3m20.216620599s ago: executing program 32 (id=2719): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x157]}, 0x8) r1 = syz_io_uring_setup(0x6934, &(0x7f0000000300)={0x0, 0xd615, 0x10100, 0xffffffff, 0x100000, 0x0, r0}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x21c) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xfffe}}) io_uring_enter(r1, 0x44fd, 0x0, 0x1, 0x0, 0x0) exit(0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x10, &(0x7f0000000080)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa9}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 2m29.395291743s ago: executing program 5 (id=2900): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000000)=[@in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r0, 0x644c, 0x3}, 0xc) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rthdr={{0x18, 0x29, 0x39, {0x2c, 0x0, 0x2, 0x9}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x30}}], 0x2, 0x20008050) 2m29.207528699s ago: executing program 5 (id=2901): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000015c0)=[@in6={0xa, 0x4e21, 0x6, @empty, 0x3}, @in6={0xa, 0x4e21, 0x1, @empty, 0x4}], 0x38) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x4, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r6 = openat$incfs(0xffffffffffffffff, &(0x7f00000002c0)='.log\x00', 0x101000, 0x18) accept4$llc(r6, 0x0, &(0x7f0000000300), 0x800) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000005480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100faffffff000000001d00000008000300", @ANYRES32=r7, @ANYBLOB="40002f800c00020000000000000000000800010000000000280003801c00038006000100000000000800020002000000760000000000000008000100"], 0x5c}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000006}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4044810) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000015c0)=[@in6={0xa, 0x4e21, 0x6, @empty, 0x3}, @in6={0xa, 0x4e21, 0x1, @empty, 0x4}], 0x38) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x4, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x4000) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000180)={'wpan0\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) (async) openat$incfs(0xffffffffffffffff, &(0x7f00000002c0)='.log\x00', 0x101000, 0x18) (async) accept4$llc(r6, 0x0, &(0x7f0000000300), 0x800) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000000)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000005480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100faffffff000000001d00000008000300", @ANYRES32=r7, @ANYBLOB="40002f800c00020000000000000000000800010000000000280003801c00038006000100000000000800020002000000760000000000000008000100"], 0x5c}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r2, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000006}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4044810) (async) 2m29.079117872s ago: executing program 5 (id=2902): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (async) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) readlinkat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000012c0)=""/168, 0xa8) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') write$tun(r3, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000306000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000080)="db4703c0122b0fae08baf80c66b8e052398766efbafc0cb001ee0f01cfd0800080660f01860200baf80c66b8ec75ff8f66efbafc0ced0f79780c6665dfd2", 0x3e}], 0x1, 0x74, 0x0, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0xe) (async) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x200, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010025bd", @ANYRES32, @ANYBLOB="138000002b92010024001280"], 0x44}, 0x1, 0x0, 0x0, 0x4044870}, 0x4000) 2m28.679595518s ago: executing program 5 (id=2904): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x7}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000180)={{}, [@netrom, @bcast, @netrom, @remote, @bcast, @netrom, @rose, @rose]}, &(0x7f00000002c0)=0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000380)=0xc) ioctl$SIOCAX25ADDUID(r1, 0x89e1, &(0x7f0000000440)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="020809090a00000027bd7000fddbdf250800120002000300be6b6e000600000006003c0002f800002500"/80], 0x50}}, 0x40) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x9}, {0x0, 0xb, 0xe8b, 0xfffffffffffffffd}, 0x9, 0x10000000}, {{@in=@multicast1, 0x0, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x2, 0x0, 0xf000000, 0xfffffffd}}, 0xe8) listen(r6, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x102a, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m27.992596943s ago: executing program 5 (id=2906): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) unshare(0x20000400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000240)={0x28, 0x5, r8, 0x0, &(0x7f00000002c0)="ee", 0x1, 0x20000800}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000001c0)={0x28, 0x3, r8, 0x0, &(0x7f0000ff8000/0x7000)=nil, 0x7000, 0xd7}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000300)={0x28, 0x2, r8, 0x0, &(0x7f000099f000/0x2000)=nil, 0x2000, 0x3}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r8, 0x0, &(0x7f0000000100)='f', 0x1, 0x1000401}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000000280)={0x28, 0x6, r8, 0x0, &(0x7f0000000340)="b5", 0x1, 0x7fffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r6, 0x34}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd27, 0xfffff000, {0x0, 0x0, 0x0, r10, {0xf000, 0xffff}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80080}, 0x20008800) 2m26.759371323s ago: executing program 5 (id=2912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x15d800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000ffff2bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000046680100140012800c0001006d616376746170000400028008000500", @ANYRESDEC=r0, @ANYBLOB="581d663f00000062dcaca1f5fcedc61d5dbfd18c76a37c19d76ba5850563e51bc30000000000000000000000cb64dc2d618f54d6d9a161d373f3fccf0cb2949f83b4a0304fe78e4a6e2876e50d8bfd133d0ddb1710247f40bec8de4e6400ed6a76baf5f18c4d5f01b4b131d802a95366b98b29473b4b4c31eb35ad4145dc29acee11f5f1d7825eeeb87e7d1b02c30eb1c4e15ddbcd696c551b8d86aa1e90a1febf28de3ff2788aeb1a9df977170ae264f071b33076e383efb67f4921660494dd2a2b31069547b01decb58efe56d41a7cd9"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20008840) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4c20, @loopback}, 0x10) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1a000}}, 0x40) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000017c0)={0x0, 0x12f4}, 0x1, 0x0, 0x0, 0x40840}, 0x8000) recvmsg$unix(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) pipe(0x0) syz_genetlink_get_family_id$smc(0x0, r3) (async) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000) 2m26.369117471s ago: executing program 33 (id=2912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x15d800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000ffff2bbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000046680100140012800c0001006d616376746170000400028008000500", @ANYRESDEC=r0, @ANYBLOB="581d663f00000062dcaca1f5fcedc61d5dbfd18c76a37c19d76ba5850563e51bc30000000000000000000000cb64dc2d618f54d6d9a161d373f3fccf0cb2949f83b4a0304fe78e4a6e2876e50d8bfd133d0ddb1710247f40bec8de4e6400ed6a76baf5f18c4d5f01b4b131d802a95366b98b29473b4b4c31eb35ad4145dc29acee11f5f1d7825eeeb87e7d1b02c30eb1c4e15ddbcd696c551b8d86aa1e90a1febf28de3ff2788aeb1a9df977170ae264f071b33076e383efb67f4921660494dd2a2b31069547b01decb58efe56d41a7cd9"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20008840) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4c20, @loopback}, 0x10) (async) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/devices\x00', 0x0, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1a000}}, 0x40) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xc, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(0xffffffffffffffff, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000017c0)={0x0, 0x12f4}, 0x1, 0x0, 0x0, 0x40840}, 0x8000) recvmsg$unix(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{0x0, 0x1802, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {&(0x7f0000000b80)=""/143, 0x8f}], 0x4}, 0x2}], 0x400000000000300, 0x22, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) pipe(0x0) syz_genetlink_get_family_id$smc(0x0, r3) (async) sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000) 13.440706555s ago: executing program 0 (id=3442): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000105002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x9c, 0x2f, 0x0, 0x70bd29, 0x25dfdbfb, "", [@generic="b5bdf01d3f2ca8fe5e2b27bbdd7eeaa970e22e07580febe5a3f5de71d4ddf1b8e95fd1f896760ed404637438c2840cec57130a481da25dacb8f7718827ecc429707f76f90ee1ee4f7692e277518b2d48f66fef3e023ab718138cbb54e4cd4518c63d0fbaa82a0cdb292c9939b9ad97e59c8671a21ea16c25399a02f3", @typed={0xd, 0xe0, 0x0, 0x0, @binary="6942b24d999d73f2c3"}]}, 0x9c}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x125f, 0x0) 13.23079226s ago: executing program 0 (id=3443): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe01, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0xa, 0x1, 'AUDIT\x00'}, @NFTA_TARGET_INFO={0x5, 0x3, "ef"}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000280)='./file1\x00', 0x810, &(0x7f00000000c0)={[{@discard}, {@thread_pool}, {@nobarrier}, {@usebackuproot}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x3}}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x65, 0x67, 0x6d, 0x70, 0xb61148b71cab6665]}}]}, 0x3, 0x510e, &(0x7f00000196c0)="$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") r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES64=r1], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r3 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x4161, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000500)={'ip_vti0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x8, 0x7, 0x2, 0xffffffff, {{0x5, 0x4, 0x3, 0xc, 0x14, 0x67, 0x0, 0x9, 0x29, 0x0, @remote, @private=0xa010101}}}}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x8, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x9, 0x3ff}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2688ca4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) accept4$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x0, @my=0x1}, 0x10, 0x80000) clock_gettime(0x0, &(0x7f00000000c0)) 11.703408918s ago: executing program 3 (id=3445): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000002c0)=@overlay={0x4, 0xc, 0x4, 0x7e014, 0x9, {0x77359400}, {0x5, 0x1, 0x8, 0x0, 0x80, 0xd, "eecafbb2"}, 0x400, 0x3, {}, 0x4}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 11.287088844s ago: executing program 3 (id=3448): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$netlink(r0, 0x10e, 0x5, 0x0, &(0x7f0000000100)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000080)={0xfffffffffffffffe, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x7a}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4082) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x24004044) syz_usb_connect(0x0, 0x6b, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a240102000502010209240703040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad0924030601010303df092403fb02030306"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) sendmsg$key(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) 10.571429738s ago: executing program 0 (id=3450): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl816\x00', [0x4f27, 0x52f, 0x10000, 0x0, 0x0, 0xcc7, 0x8, 0x5, 0x8, 0x100, 0x2, 0x3, 0x1db, 0x1000, 0x6, 0x101, 0x1, 0x87, 0x2, 0x40000003, 0xc5f, 0x100002, 0xf27, 0x20001e58, 0x80b, 0xe69, 0x3c, 0x10, 0x390ea647, 0x0, 0xfffffff8]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8000007) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000200001030000000000000000020020044400000100000000080002000a010101"], 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000021000100", @ANYRES64=r5], 0x28}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xbb}}, 0x2, 0x1, 0x8000}}, 0x2e) getsockopt(r7, 0x111, 0x3, 0x0, &(0x7f0000000080)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[]) ioctl$SG_IO(r0, 0x2285, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0000000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2) socket$nl_route(0x10, 0x3, 0x0) 9.179486755s ago: executing program 3 (id=3455): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async, rerun: 64) r1 = io_uring_setup(0x192, &(0x7f0000000300)={0x0, 0x4178, 0x10, 0x8001002, 0x3d7}) (async, rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) (async, rerun: 32) r4 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) (async, rerun: 32) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (rerun: 32) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x68, 0x24, 0xe0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x68}}, 0x0) (async) sendto$packet(r4, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c286dd", 0xe, 0x830, &(0x7f0000000780)={0x11, 0x0, r7, 0x1, 0x22, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB="05"], 0x10) (async) close(r2) close_range(r1, 0xffffffffffffffff, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000001c0)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x3, 0x9, 0xe4c, 0x2, 0x802, 0x3865, 0x8, 0xdfe, 0x44, 0x5, 0x65cf, 0x81}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) 8.635842106s ago: executing program 0 (id=3457): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x40, 0x227}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000018c0), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000180)={0x34, r6, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x0, 0x2, 'pim6reg0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004001}, 0x0) r7 = syz_io_uring_setup(0x6de4, &(0x7f0000000180)={0x0, 0x113a, 0x2, 0x2}, &(0x7f00000000c0), &(0x7f0000000000)) io_uring_enter(r7, 0x0, 0xe38e, 0x5, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900cd01000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a00000000000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) pidfd_send_signal(r10, 0x40, &(0x7f0000000380)={0x3c, 0x3, 0x80}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvfrom(r9, 0x0, 0x0, 0x40002062, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f00000024c0)={0x2, 0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000240)=""/191, 0xbf}], &(0x7f0000002480)=[0x0, 0x2]}, 0x20) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0xd, 0xd000, 0x0, r0, 0x5}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x14, 0x6a, 0x1, 0x0, 0x0, {0x1, 0x3, 0x2}}, 0x14}}, 0x0) 6.773863813s ago: executing program 3 (id=3464): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) io_uring_setup(0x4238, &(0x7f0000000000)={0x0, 0x0, 0x40}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ptrace(0x10, 0x0) r1 = socket(0x10, 0x80003, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 6.562297294s ago: executing program 0 (id=3465): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x401, 0x8007, 0xc, 0xfffffff5, 0x8, 0x3, 0x6, 0x0}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1, 0x4}, 0x8) syz_usb_connect(0x5, 0x24, &(0x7f0000001200)=ANY=[@ANYBLOB="1201500300000000000000216af20102030109021200010702400f0904dd0900ff02024a"], &(0x7f0000002180)={0x0, 0x0, 0x0, 0x0}) 5.438802406s ago: executing program 4 (id=3466): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x1, &(0x7f0000003100), 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x8, 0x6000, 0x20000000, 0x3, 0x7}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40880}, 0x0) pwritev2(r2, 0x0, 0x0, 0xfffffffc, 0xb, 0x10) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000040)='\n', 0x1}], 0x1) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r2, 0x8010661b, &(0x7f0000000180)) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000900)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x0, 0x300}, 0x0) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="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", 0xfff}, {&(0x7f0000000180)="dd43", 0x2}], 0x2}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x98, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_TX_RATES={0x7c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0xd9, 0xfffb, 0x5, 0x9, 0xffff, 0x10, 0x938]}}]}, @NL80211_BAND_5GHZ={0x58, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x40, 0x2, [{0x3, 0x2}, {0x3, 0x1}, {0x4, 0x7}, {0x4, 0x3}, {0x2, 0x8}, {0x0, 0x6}, {0x4, 0x2}, {0x1}, {0x0, 0x8}, {0x1, 0x5}, {0x3, 0x8}, {0x1, 0x6}, {0x1, 0x7}, {0x3, 0x9}, {0x2, 0x4}, {0x1, 0x5}, {0x3, 0x3}, {0x0, 0x7}, {0x3}, {0x7, 0x1}, {0x7, 0x5}, {0x1, 0x6}, {0x0, 0x9}, {0x5, 0x2}, {0x3, 0x9}, {0x5, 0x1}, {0x1}, {0x6, 0x9}, {0x1, 0x6}, {0x1, 0x1}, {0x1, 0x7}, {0x2}, {0x2, 0x3}, {0x3, 0x2}, {0x2, 0x7}, {0x3, 0xa}, {0x1, 0x9}, {0x3, 0x9}, {0x4, 0x7}, {0x2, 0x4}, {0x4, 0x6}, {0x1, 0x1}, {0x7, 0x6}, {0x6, 0x3}, {0x5, 0x7}, {0x1, 0x7}, {0x2, 0x3}, {0x0, 0x4}, {0x0, 0x8}, {0x7, 0x9}, {0x0, 0x7}, {0x4, 0x8}, {0x0, 0x6}, {0x1, 0x2}, {0x5, 0x1}, {0x0, 0x7}, {0x0, 0x7}, {0x6, 0x8}, {0x5, 0x3}, {0x4, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x87, 0x5, 0x0, 0x6, 0x8001, 0x4, 0x1]}}]}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x44041}, 0x4010) 5.083772098s ago: executing program 6 (id=3468): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000080)="f280", 0x2) dup(r1) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000300)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000240)={{0x0, 0x3, 0x5a70, 0x3, 0x3}}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00", 0x2) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, &(0x7f0000000040)=0x600) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) write$P9_RVERSION(r4, &(0x7f0000000140)={0x13, 0x65, 0xffff, 0x4, 0x6, '9P2000'}, 0x13) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r4, 0x6, 0x0, @val=@tracing}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) 4.121484462s ago: executing program 6 (id=3471): modify_ldt$write2(0x11, &(0x7f0000000040)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) modify_ldt$read(0x0, &(0x7f0000000240)=""/122, 0x7a) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x17) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0xeeee0000, 0x6, 0x5ce, 0x4, 0x0, [{0x0, 0x0, 0x6, '\x00', 0x7}, {0x42, 0x12, 0x3, '\x00', 0x8}, {0x0, 0x92, 0x29, '\x00', 0xbb}, {0x7, 0x4, 0xf, '\x00', 0x1}, {0x6, 0xe8, 0x6, '\x00', 0x9}, {0xd6, 0x5, 0x2, '\x00', 0xe}, {0x6, 0x1, 0x80, '\x00', 0xff}, {0x7, 0x1, 0x9, '\x00', 0x7f}, {0xf7, 0x7, 0x3, '\x00', 0x9}, {0x80, 0x2, 0x5, '\x00', 0x6}, {0x65, 0x2, 0x6, '\x00', 0x4}, {0x14, 0x7, 0x7, '\x00', 0x6}, {0x1, 0x17, 0x81, '\x00', 0x2}, {0x2, 0x8, 0xf}, {0x4, 0x3, 0x80, '\x00', 0x1}, {0x9, 0x6, 0x1f, '\x00', 0x4}, {0x4, 0x6, 0x9d, '\x00', 0xd}, {0x10, 0x8, 0x8, '\x00', 0x1}, {0x9, 0xff, 0xc, '\x00', 0x9}, {0x80, 0xc, 0xae, '\x00', 0x40}, {0x1, 0x9c, 0x8, '\x00', 0xdb}, {0x3, 0x9, 0xf7, '\x00', 0xb2}, {0xb, 0x91, 0x5, '\x00', 0x81}, {0x0, 0x7, 0x0, '\x00', 0xd2}]}}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sysvipc/msg\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) getsockopt$bt_hci(r0, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) 3.981172907s ago: executing program 3 (id=3473): bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) syz_open_dev$usbmon(0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x180, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) fsmount(r1, 0x0, 0x82) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r2 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102390, 0x18ff6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x4000084) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r1, 0x0, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_S_OUTPUT(r4, 0xc004562f, &(0x7f0000000080)=0x1) r5 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="2b63b274200000006ba4a2d2bd5eae98af489442cef9695be27dd8c829a3141c58c9a104cced35d641835d35cb4e2618547a1d195517c627e7ef5a81c2247e9dab2f61cf2b1c92"], 0x8) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) gettid() r6 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000022000058110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057000000952c5ef181646e192bf9decd00bfe46a02bf1832c3aa963db8e85fe1ac8dc1fa55741ebe2c3622fc40c5713d199cbd0611cb33f0ca3d8620afc7a5ab73d2425c43a13d3a527b78e1e16404c267ade2c6b1cadcf3ad832044ba5351964d"], 0x0, 0x7, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000dc0)={0x1f, 0x1}, 0x7) write$bt_hci(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="0175"], 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) 3.911745135s ago: executing program 4 (id=3474): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000105002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0xa0, 0x2f, 0x0, 0x70bd29, 0x25dfdbfb, "", [@generic="b5bdf01d3f2ca8fe5e2b27bbdd7eeaa970e22e07580febe5a3f5de71d4ddf1b8e95fd1f896760ed404637438c2840cec57130a481da25dacb8f7718827ecc429707f76f90ee1ee4f7692e277518b2d48f66fef3e023ab718138cbb54e4cd4518c63d0fbaa82a0cdb292c9939b9ad97e59c8671a21ea16c25399a02f33920576e", @typed={0xd, 0xe0, 0x0, 0x0, @binary="6942b24d999d73f2c3"}]}, 0xa0}], 0x1, 0x0, 0x0, 0xfffffffd}, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x125f, 0x0) 3.899572745s ago: executing program 2 (id=3475): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='/dev/usbmon#\x00') write$FUSE_CREATE_OPEN(r1, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x4e}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x88}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'tunl0\x00', 0x0, 0x10, 0x700, 0x1, 0x0, {{0x10, 0x4, 0x0, 0x9, 0x40, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @local, {[@timestamp_prespec={0x44, 0x2c, 0xa3, 0x3, 0x0, [{@private=0xa010102, 0x8}, {@loopback, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@remote, 0x6}, {@empty, 0x8}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f3, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000040)={'ip_vti0\x00', r4, 0x8, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3c, 0x14, 0x0, 0x0, 0xfd, 0x89, 0x0, @rand_addr, @private}}}}) sendfile(r2, r1, 0x0, 0x7f05) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f0000000040)) prctl$PR_SET_TSC(0x1a, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x980915, 0x2}) 3.873270391s ago: executing program 6 (id=3476): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000508a5b5f716a930d5244ee"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000508a5b5f716a930d5244ee"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) (async) syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r4]) 3.58743337s ago: executing program 4 (id=3477): gettid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180100"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000000c0), 0x4000000000002d8, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)={0xa0, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x44, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x20}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x98}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) socket$kcm(0x2, 0x5, 0x84) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r6, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002ec0)=[{&(0x7f0000000cc0)=""/4096, 0x1000}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x10000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) cachestat(r7, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080), 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x28}}, 0x0) 3.27716422s ago: executing program 6 (id=3478): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000180)={0x2, 0x1, 0xe}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000012c0)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r5, 0x408c5333, &(0x7f0000000200)={0x4, 0x4, 0x0, 'queue0\x00', 0x3}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001080)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6, 0x6, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 3.035757191s ago: executing program 0 (id=3479): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000340)={'\x00', 0x6, 0x8, 0x9, 0x4, 0x8, 0x0}) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10001402200bd2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) getdents(0xffffffffffffffff, 0x0, 0x58) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000480)='hpfs\x00', 0x1312009, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000002000000c600000000000000f5a100"/28], 0x50) listen(r2, 0x24) accept4(r2, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='map_files\x00') getdents(r3, &(0x7f0000000000)=""/159, 0x9f) ioctl$DRM_IOCTL_MODE_SETPLANE(r3, 0xc03064b7, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xa, 0x7fffffff, 0x1, 0xfffffff9, 0x800, 0x1, 0x1c4, 0x6, 0x24608c69}) getdents64(r3, 0xffffffffffffffff, 0x43) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vxcan0\x00'}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r6 = accept4$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x800) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f0000000080)=0x6, &(0x7f00000000c0)=0x1) setreuid(r5, r5) r7 = inotify_init1(0x0) close(r7) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.02301859s ago: executing program 6 (id=3480): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x1}, 'port0\x00', 0x100, 0x161c5d, 0x0, 0x0, 0x7, 0x0, 0x100000, 0x0, 0x1}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x4}, 'port0\x00', 0x89, 0x0, 0x0, 0xfffffeff, 0x0, 0x0, 0x200000, 0x0, 0x4875c99660ff2b28}) (async) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000100)) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2800000002030502000000000000fffff002000000000000000000000000000000000000000000006171252a1257cef5d8150cf0bd95597feaabd4ece66d01d0428a50a4dc15c6b4bfc932707fcba3d524baf4dcb4a5d2af40b1b323be122987828a0b838d72db78195837463478a7738967a3c538a58443b5966e030cf3e6ee84f32024bcfbe4fb0b0732d944eeaaf7a5b9eabc44df"], 0x28}, 0x1, 0x0, 0x0, 0x8804}, 0x24008014) (async) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffa000/0x2000)=nil) (async) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000940)=0x2321, 0x4) (async) sendto$inet6(r4, 0x0, 0x0, 0x400ad00, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f00000002c0)={0x0, 0x0, 0x80000}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000040)={0x0}) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async) sendmmsg$inet6(r4, &(0x7f0000000000)=[{{0x0, 0xfffffffffffffda3, &(0x7f0000000540)=[{&(0x7f00000000c0)="b3ab706204ee39c9dae21a1718ee351ebc92d2f0d482a863ae5c0b4d768ffe745af2c53a083d9b761b", 0x29}], 0x1}}], 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 2.964210407s ago: executing program 2 (id=3481): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000800)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) fsopen(&(0x7f0000000280)='gfs2meta\x00', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 2.883617902s ago: executing program 3 (id=3482): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='setgroups\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, 0x2}, 0x94) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x4, 0x6, 0x4, 0x0, 0xffffffffffffffff, 0x3}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5, 0x0, 0x1, 0x2004}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000070000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r4}, 0x10) ptrace(0x10, r1) keyctl$join(0x1, &(0x7f0000000300)={'syz', 0x0}) ptrace$getregset(0x4205, r1, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x942c054d347e396d}}, 0x20) ioctl$KVM_CLEAR_DIRTY_LOG(r0, 0xc018aec0, &(0x7f00000000c0)={0x10201, 0x3c0, 0x240, &(0x7f0000000500)=[0x2, 0xffff, 0xd, 0x6, 0x7, 0x8, 0x7, 0x1, 0x5b, 0x8, 0x1, 0x2, 0xffffffffffffffff, 0x2, 0x7, 0x8000, 0x8000000000000001, 0x3, 0x4, 0x3, 0x2, 0x60d908ab, 0x0, 0x5, 0x100, 0x400, 0x7f, 0x5, 0x100, 0x401, 0x10, 0x0, 0x8, 0x2, 0x6, 0x800, 0x80000001, 0x9, 0xff00000000000000, 0x7, 0x9, 0x5, 0x6, 0xe96, 0xffffffffffffffff, 0x3, 0x8, 0xfffffffffffffffc, 0x1, 0x6, 0x7a, 0x81, 0x51, 0x8, 0x4, 0xfffffffffffffffe, 0x2, 0x6, 0xfff, 0x7fff, 0x1000, 0xd910, 0x8, 0x8, 0x0, 0x7, 0x0, 0x3, 0x40, 0x8, 0x2, 0xb, 0x8000000000000000, 0x9, 0x8, 0x3, 0x100000, 0x5, 0x7, 0x8000000000000001, 0x0, 0xfffffffffffffff7, 0x719d, 0x48ffbfcd, 0x9, 0x8000000000000001, 0x0, 0x9, 0x0, 0x10000, 0x9, 0x4, 0x5, 0x0, 0x2, 0xd, 0x401, 0x6, 0xc, 0x100000001, 0x0, 0x5, 0x7, 0x8, 0x4, 0x3, 0xbb, 0x402, 0x8, 0x8, 0x1, 0x0, 0x2, 0x2, 0x2, 0x0, 0x7ff, 0x8000, 0xc, 0x0, 0x6d50, 0x6, 0x385e, 0xffffffff, 0x2cbf, 0xc, 0x2, 0x4]}) syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8a, 0x3, 0x1, 0xff, 0xa0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x2}, [@input_terminal={0xc, 0x24, 0x2, 0x1, 0x206, 0x1, 0x40, 0xa, 0xc, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x6, 0x10, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0xd6fb4b85f1208b75, 0x6, 0x20, 0x1, {0x7, 0x25, 0x1, 0x0, 0x6, 0xd}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x1, 0x8, 0x3, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}, @as_header={0x7, 0x24, 0x1, 0x16, 0x5, 0x1001}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xff, 0x7, 0xff, {0x7, 0x25, 0x1, 0x0, 0x1, 0x5}}}}}}}]}}, 0x0) 2.753998435s ago: executing program 6 (id=3483): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000400000000000000000000030000000003000000020000000000000000000000000000010500000008000000020000000000000c0000000000002e"], 0x0, 0x50}, 0x28) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x7, &(0x7f0000000340), &(0x7f0000000380)=0x4) r2 = syz_io_uring_setup(0x2fbd, &(0x7f0000000200)={0x0, 0x2240, 0x8, 0x3, 0x34d}, &(0x7f0000000140), &(0x7f0000000280)) r3 = syz_io_uring_setup(0x7a1d, &(0x7f00000002c0)={0x0, 0x755b, 0x8000, 0x4, 0x320, 0x0, r2}, &(0x7f0000000040)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_CLOSE={0x13, 0x4}) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x6, 0x252100) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$inet(0x2, 0x801, 0x0) setsockopt$sock_linger(r6, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x4}, 0x8) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$uinput_user_dev(r7, &(0x7f0000000740)={'syz0\x00', {0x8, 0x1, 0x200, 0x10}, 0x28, [0xfffffe01, 0x3, 0xfffffffc, 0x4, 0xfffffffc, 0x2, 0x8, 0xe7, 0x2, 0x81, 0x10, 0x0, 0x7, 0xde96, 0x3, 0x1000, 0x80f2, 0x10, 0x2, 0xe91, 0x100, 0x7, 0x6, 0x4, 0x2, 0xeb, 0xffff7fff, 0x5, 0x81, 0x3, 0x7f, 0x8001, 0x1, 0x1, 0x3, 0x1ff, 0x6, 0xd035, 0x3, 0x1412, 0x773e, 0x4, 0x634e, 0x6, 0x1, 0xb, 0xaca, 0x6, 0x0, 0x1, 0x8, 0x80000001, 0x2, 0x10001, 0x1, 0x7f, 0x9, 0x0, 0xa2, 0x5, 0x5, 0xe, 0x9, 0x5], [0x101, 0xf78, 0xa102, 0x2, 0xb, 0x80000000, 0xfffff001, 0xe43, 0xfffffffc, 0x3, 0x1, 0xfffffffb, 0x101, 0x7, 0x5, 0x0, 0x80, 0x4, 0x800, 0x9, 0xe8e, 0x2, 0x3, 0xd, 0xc, 0x7, 0x366, 0x9, 0xe0a1, 0x0, 0x6, 0x10b, 0xfffffe8e, 0x1, 0xffff631c, 0x0, 0x80, 0x6, 0x0, 0x7, 0x0, 0x3, 0xb3, 0x1, 0x2, 0x3, 0x5, 0x40, 0x8, 0x3, 0x9, 0xe, 0x1000, 0xb58, 0x9, 0xfffffffd, 0x2, 0xfffffff8, 0x2, 0x8001, 0x5, 0x9, 0x1, 0x8a], [0x1103cae1, 0x5, 0x3, 0x0, 0x8, 0x1, 0xfff, 0x117e, 0x6e37, 0xb1f3, 0x4, 0x2, 0x1, 0x5, 0x7, 0x1, 0x6, 0x2, 0xfff, 0x3, 0x2, 0xf, 0x4, 0x6, 0x8, 0x0, 0x5, 0x2, 0x1, 0xe, 0x400, 0x5636, 0x45, 0x7, 0x6, 0x1, 0x0, 0x603, 0x526, 0x80000001, 0x4, 0x2, 0x9, 0x9, 0x6, 0x7, 0x2, 0x9, 0xfffffff8, 0x800, 0x9, 0x0, 0x8c, 0x1, 0x6, 0x80000000, 0x5, 0xc, 0x9, 0x101, 0x81, 0x9, 0x0, 0x1], [0x0, 0xfffffffc, 0x6, 0xbe4, 0x8, 0x3, 0x5, 0x5, 0x10001, 0x4, 0x401, 0x328c, 0x0, 0x2, 0x5, 0x8, 0x0, 0x9, 0x10001, 0x3, 0xc, 0x9, 0x5, 0x14e0, 0xffffff80, 0xbfc, 0xfffffff8, 0x4, 0x0, 0x3, 0x8, 0x1, 0x5, 0xfffffff9, 0x7dd, 0x6, 0x5, 0xa80, 0xfffffffd, 0x2, 0x7, 0x47b, 0x101, 0x9d, 0x7fff, 0x2, 0x1, 0x80, 0xc5, 0x0, 0xfffffffc, 0xdfb, 0x80000001, 0x4, 0x1, 0x7f, 0x0, 0x6, 0xa84, 0x80000001, 0x6, 0x0, 0x9647, 0x5]}, 0x45c) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000040)={0x2, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e20, @multicast2}}}, 0x108) close(r6) io_uring_enter(r3, 0x3516, 0xd66e, 0x0, 0x0, 0x0) 1.921154644s ago: executing program 4 (id=3484): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$igmp(0x2, 0x3, 0x2) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x38, r6, 0x1, 0x0, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x466a0733}]}]}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)={0x60, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x44, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0xd9, 0xfffb, 0x5, 0x9, 0xffff, 0x10, 0x938]}}]}, @NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x87, 0x5, 0x0, 0x6, 0x8001, 0x4, 0x1]}}]}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44041}, 0x4010) 1.806199934s ago: executing program 2 (id=3485): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x9, 0x7, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7800, 0x7, 0x3, 0xb50e}}) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000691874000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x1c) (async) move_pages(0x0, 0x10, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x0) (async, rerun: 32) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x1) (async, rerun: 32) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140), 0x106, 0x9}}, 0x20) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x2, 0x0, 0x8001, 0x1, 0x800}}) (async) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000080)={0xffffffffffffffff, 0x3, 0x3d, 0x0, 0x662}) (async, rerun: 64) memfd_create(&(0x7f00000000c0)='GPL\x00', 0x0) (rerun: 64) 1.599753725s ago: executing program 2 (id=3486): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0xf0, "6614b8d0ca5db8f8fdba78c34d48fb8b5e4fa6852bccc3d8a08662a1a719d3d1943d49317a1d82033a6cd186fa4898131bee52f94b33840a397056656d8556b0b72ede197f82e108c1b1130f9c7cfd9fdba63ac55a790766c06c5fac6e63536e12def2abd29afb19592b6ad8b6c36e47c5072e12a4eff3f7d107d2d334ca4f5a332c75d83623d9a24019dc88bc36606ebaf05731997c50945e63a1a47bbded8f6b1c2940d578893895833f44aa04f73e1532c8cae6c213eac1885e9c164628f76bd966be7ee21870e3a7dad148d04011ec60b27d0d17d2cd733ca263388587b450820bad1d7e90c79a91d76850f2bb0d"}, &(0x7f0000000280)=0xf8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000002c0)={r2, 0x5, 0x0, 0x3, 0x80000001}, &(0x7f0000000300)=0x18) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8983, &(0x7f0000000340)={0x2, 'ip6erspan0\x00', {0x3}, 0x6}) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, 0x0, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000580)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x8, 0x700, 0x0, 0x8e, {{0x5, 0x4, 0x1, 0x5, 0x14, 0x68, 0x123c, 0x70, 0x29, 0x0, @loopback, @rand_addr=0x64010102}}}}) (async) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x13, 0x3, 0xa4, 0x40d64601, 0x1, r3, 0x3077, '\x00', r4, r5, 0x5, 0x1, 0x5}, 0x50) (async) r6 = openat$full(0xffffffffffffff9c, 0x0, 0x210040, 0x0) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000800)={{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@ipv4={""/10, ""/2, @empty}}}, &(0x7f0000000900)=0xe8) sendmsg$nl_xfrm(r6, &(0x7f0000000b00)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000940)=@migrate={0x160, 0x21, 0x800, 0x5, 0x25dfdbfc, {{@in=@local, @in6=@mcast2, 0x4e20, 0x7f, 0x4e20, 0x0, 0xa, 0x80, 0xa0, 0xff, r4, 0xee01}, 0x6e6bb6, 0x2}, [@replay_esn_val={0x2c, 0x17, {0x4, 0x70bd2a, 0x70bd2d, 0x70bd29, 0x70bd25, 0xf08e, [0x3ff, 0x2, 0x1d63, 0x6]}}, @sa={0xe4, 0x6, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@rand_addr=' \x01\x00', 0x4e21, 0x7, 0x4e22, 0xfffa, 0x2, 0x20, 0xc0, 0x33, r4, r7}, {@in=@local, 0x4d6, 0x3c}, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, {0xc, 0x7, 0x8000000000000001, 0xaf1a, 0x3, 0x2, 0x3, 0x1c}, {0xc6, 0x3, 0x3ff, 0xd6}, {0x5, 0x1, 0x3}, 0x70bd26, 0x3504, 0x2, 0x2, 0x7, 0x80}}]}, 0x160}, 0x1, 0x0, 0x0, 0x844}, 0x4048040) (async) bind$xdp(r6, &(0x7f0000000b40)={0x2c, 0x2, r4, 0x2e}, 0x10) (async) ioctl$GIO_UNIMAP(r6, 0x4b66, &(0x7f0000000bc0)={0x4, &(0x7f0000000b80)=[{}, {}, {}, {}]}) (async) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000c40), 0x20880, 0x0) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000c80)={&(0x7f0000000c00)='mm_compaction_kcompactd_sleep\x00', r8, 0x0, 0x5}, 0x18) syz_genetlink_get_family_id$gtp(&(0x7f0000000d40), r6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f40)={@cgroup=r6, 0x37, 0x1, 0x5, &(0x7f0000000e40)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000e80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000ec0)=[0x0, 0x0, 0x0], &(0x7f0000000f00)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000f80)={@ifindex=r4, r6, 0x5, 0x2, r3, @void, @value=r9, @void, @void, r10}, 0x20) r11 = getpid() sched_setscheduler(r11, 0x2, &(0x7f0000000200)=0x6) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r0, 0xffffffffffffffff, 0x5, 0x0, @void}, 0x10) 1.502764856s ago: executing program 2 (id=3487): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x1002, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000000)={&(0x7f00000001c0)={0x1d, r4}, 0x10, &(0x7f0000000080)={&(0x7f0000000240)=@can={{0x3, 0x1, 0x1}, 0xb, 0x2, 0x0, 0x0, "11aaea253cf5e0fe"}, 0x10}, 0x2, 0x0, 0x0, 0x2201c080}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl0\x00', r4, 0x4, 0x7c, 0x0, 0x3, 0x5a, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, 0x700, 0xf, 0x1, 0x36}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES16=0x0], 0x64}}, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001540)={0x2, 0x0, [{0x8082000, 0xdd, &(0x7f00000012c0)=""/221}, {0x1, 0x27, &(0x7f0000000600)=""/39}]}) 921.865221ms ago: executing program 4 (id=3488): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x40000000}, 0x48) sendmsg$IPCTNL_MSG_CT_DELETE(r0, 0x0, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x41, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x4, 0x4, 0x7ff}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r2, 0x0, 0x100000000000000}, 0x38) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014400000000c0a01011d000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, 0x0) 831.479485ms ago: executing program 2 (id=3489): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async, rerun: 64) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001400), 0x2000) (rerun: 64) fcntl$setstatus(r2, 0x4, 0x40000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r4 = ioctl$KVM_GET_STATS_FD_vm(r1, 0xaece) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) (async) r5 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x101441) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f0000000100)=0x22) (async) r6 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r6, 0x29, 0xce, &(0x7f0000000180), &(0x7f0000000200)=0x4) close(0x3) (async) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000000)={[0xd000, 0x1000, 0x4], 0x100, 0x42, 0x8}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0x20000011}) (async, rerun: 32) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080)={{0x4, @empty, 0x4e23, 0x2, 'sed\x00', 0x2e, 0x8, 0x51}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x4e22, 0x1, 0x7, 0x7fffffff, 0x4}}, 0x44) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d00010026bdf000fcdbdf25041a0000040010"], 0x18}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000300), 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'dvmrp1\x00'}) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket(0x1, 0x2, 0x0) (async) setsockopt$inet_tcp_TCP_REPAIR(r10, 0x6, 0x13, 0x0, 0x0) 0s ago: executing program 4 (id=3490): socket$unix(0x1, 0x5, 0x0) (async) clock_nanosleep(0xb, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) (async) clock_adjtime(0x0, &(0x7f0000000040)={0xd4e, 0xffffffffffffffff, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x800000, 0x4, 0x16e, 0x0, 0x1, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0x4, 0x2, 0x0, 0x10000, 0xfffffffffffffffd}) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) recvmmsg(r0, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/70, 0x46}, {0x0}], 0x2}, 0x2139}], 0x1, 0x40000002, 0x0) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000300)=0x4, 0x4) (async) r1 = socket$inet6(0xa, 0x2, 0x800000) sendmmsg$inet6(r1, &(0x7f0000007240), 0x0, 0x1c000) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1a1f00, 0x8) (async) bind$alg(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f0000000500)=ANY=[], 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000200)="28c7b53724dff60026495603107071eb33fdcb47256d182fe4a921c37581d6a3e7315d322d7d78500ec8957578e57da584c8d4c86a95c4445f77fba98fcaf803653370e6557d6d2dfbd7f4d3c0b909301e319e89dbb016e614bd3c4c4e9b90d727794e013ef418bf704f8def2e10320d13a4a73c4cbc3d94aa6d6be64c7c58903effd6374c2d68e7f70b90b594b5fd1caa6c3e30ebb9e3c54b00cff709df222c1597a49bc2f7dc91b47c46", 0x1}, {0x0, 0x27}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0, @ANYRES32, @ANYRESHEX=r0], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x8, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x80055}, {@remote, 0x4e23, 0x0, 0x0, 0x12d5c, 0x12d5c}}, 0x44) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8931, &(0x7f0000000000)={'netdevsim0\x00'}) (async) sendmsg$can_raw(r0, 0x0, 0x20000000) kernel console output (not intermixed with test programs): pected cc 0x1003 length: 249 > 9 [ 761.595424][ T8505] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.600140][T13149] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 761.614660][T13149] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 761.622570][T13149] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 761.638651][ T5942] usbhid 3-1:0.127: couldn't find an input interrupt endpoint [ 762.235608][ T5942] usb-storage 3-1:0.0: USB Mass Storage device detected [ 762.265770][ T5942] usb-storage 3-1:0.0: Quirks match for vid 1908 pid 1315: 20000 [ 762.282030][T16747] ufs: You didn't specify the type of your ufs filesystem [ 762.282030][T16747] [ 762.282030][T16747] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 762.282030][T16747] [ 762.282030][T16747] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 762.334872][ T8505] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 762.345932][ T8505] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 762.382502][T16747] I/O error, dev loop0, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 762.391738][T16739] virt_wifi0 speed is unknown, defaulting to 1000 [ 762.418052][ T5942] usb 3-1: USB disconnect, device number 33 [ 762.862433][ T8505] bridge_slave_1: left allmulticast mode [ 762.883235][ T8505] bridge_slave_1: left promiscuous mode [ 762.902855][ T8505] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.952534][ T8505] bridge_slave_0: left allmulticast mode [ 762.964917][ T8505] bridge_slave_0: left promiscuous mode [ 762.981129][ T8505] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.591200][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 763.739662][T13149] Bluetooth: hci0: command tx timeout [ 763.764690][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 763.772780][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.793195][ T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 763.824464][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 763.833573][ T10] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 763.856592][ T10] usb 4-1: Product: syz [ 763.860791][ T10] usb 4-1: Manufacturer: syz [ 763.870462][ T10] hub 4-1:4.0: USB hub found [ 763.883599][T16780] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 764.108301][ T10] hub 4-1:4.0: 2 ports detected [ 764.777951][T16787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.794814][T16787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.531873][ T8505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 765.543807][ T8505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 765.554454][ T8505] bond0 (unregistering): Released all slaves [ 765.583392][T16777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2931'. [ 765.703038][T16791] 9pnet_fd: Insufficient options for proto=fd [ 765.713014][ T10] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 765.732075][ T10] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 765.794826][ T10] usb 4-1: USB disconnect, device number 6 [ 765.802775][T16791] tc_dump_action: action bad kind [ 765.813999][T13149] Bluetooth: hci0: command tx timeout [ 765.939966][T16795] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 765.949819][T16795] hfsplus: unable to find HFS+ superblock [ 766.584590][ T10] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 766.777402][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 766.809065][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 766.824561][ T10] usb 3-1: config 0 has no interface number 0 [ 767.022984][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 767.040747][ T10] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 767.050333][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.081168][ T10] usb 3-1: config 0 descriptor?? [ 767.605044][ T10] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 767.661390][ T8505] hsr_slave_0: left promiscuous mode [ 767.679318][ T8505] hsr_slave_1: left promiscuous mode [ 767.695398][ T8505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 767.713065][ T8505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 767.739510][ T8505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 767.777650][ T8505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 767.867681][T16817] input: syz0 as /devices/virtual/input/input38 [ 767.894749][T13149] Bluetooth: hci0: command tx timeout [ 767.898566][ T8505] veth1_macvtap: left promiscuous mode [ 767.907777][T16817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2935'. [ 767.927875][ T8505] veth0_macvtap: left promiscuous mode [ 768.114616][ T8505] veth1_vlan: left promiscuous mode [ 768.120001][ T8505] veth0_vlan: left promiscuous mode [ 768.661239][T16826] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.673472][T16826] I/O error, dev loop3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.689195][T16826] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 768.714799][T16826] I/O error, dev loop3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.725558][T16826] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 768.736010][T16826] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 768.743808][T16826] UDF-fs: Scanning with blocksize 512 failed [ 768.752010][T16826] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.761830][T16826] I/O error, dev loop3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.784808][T16826] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 768.795225][T16826] I/O error, dev loop3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.822861][T16826] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 768.837828][T16826] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 768.861551][T16826] UDF-fs: Scanning with blocksize 1024 failed [ 768.874172][T16826] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.891366][T16826] I/O error, dev loop3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.914622][T16826] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 768.944927][T16826] I/O error, dev loop3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 768.954721][T16826] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 768.964431][T16826] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 768.972081][T16826] UDF-fs: Scanning with blocksize 2048 failed [ 768.992768][T16826] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 769.003132][T16826] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 769.016846][T16826] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512 [ 769.027785][T16826] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 769.036372][T16826] UDF-fs: Scanning with blocksize 4096 failed [ 769.043740][T16826] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1) [ 769.985832][T13149] Bluetooth: hci0: command tx timeout [ 770.038053][ T8505] team0 (unregistering): Port device team_slave_1 removed [ 770.156883][ T8505] team0 (unregistering): Port device team_slave_0 removed [ 770.685558][T16817] vlan0: entered promiscuous mode [ 770.725348][T16739] chnl_net:caif_netlink_parms(): no params data found [ 770.759803][T16840] fuse: Bad value for 'user_id' [ 770.782390][T16840] fuse: Bad value for 'user_id' [ 770.794919][T10595] usb 3-1: USB disconnect, device number 34 [ 771.126014][T16857] netlink: 'syz.3.2951': attribute type 83 has an invalid length. [ 771.168401][T16739] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.180588][T16739] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.201562][T16739] bridge_slave_0: entered allmulticast mode [ 771.210799][T16739] bridge_slave_0: entered promiscuous mode [ 771.229282][T16739] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.237637][T16739] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.245918][T16739] bridge_slave_1: entered allmulticast mode [ 771.254115][T16739] bridge_slave_1: entered promiscuous mode [ 771.267242][T16863] hfsplus: unable to find HFS+ superblock [ 771.315513][T16739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.334188][T16739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.385432][T16739] team0: Port device team_slave_0 added [ 771.397224][T16739] team0: Port device team_slave_1 added [ 771.448082][T16739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.455279][T16739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.481822][T16739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.497157][T16739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.504629][T16739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.531007][T16739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.609484][T16739] hsr_slave_0: entered promiscuous mode [ 771.617215][T16739] hsr_slave_1: entered promiscuous mode [ 771.627117][T16739] debugfs: 'hsr0' already exists in 'hsr' [ 771.633041][T16739] Cannot create hsr debugfs directory [ 772.222891][T16875] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2954'. [ 772.780858][T16739] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 772.815782][T16739] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 772.839668][T16739] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 772.858744][T16739] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 773.080361][T16739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 773.151910][T16739] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.227215][T15780] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.234451][T15780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 773.330103][T16903] overlayfs: failed to clone lowerpath [ 773.858290][T15780] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.865531][T15780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.996290][T16739] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 774.102775][ T5942] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 774.544038][T16739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 774.576356][ T5942] usb 3-1: device descriptor read/64, error -71 [ 774.725416][T16940] blk_print_req_error: 3 callbacks suppressed [ 774.725434][T16940] I/O error, dev loop3, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 774.746993][T16940] hfsplus: unable to find HFS+ superblock [ 774.793471][T16931] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2971'. [ 774.820266][ T5942] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 774.838331][T16931] vlan3: entered promiscuous mode [ 774.843505][T16931] dummy0: entered promiscuous mode [ 774.955721][ T5942] usb 3-1: device descriptor read/64, error -71 [ 775.041991][T16739] veth0_vlan: entered promiscuous mode [ 775.072621][T16739] veth1_vlan: entered promiscuous mode [ 775.076269][ T5942] usb usb3-port1: attempt power cycle [ 775.120755][T16739] veth0_macvtap: entered promiscuous mode [ 775.133730][T16739] veth1_macvtap: entered promiscuous mode [ 775.162463][T16739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.182187][T16739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.203879][ T8505] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.233269][ T8505] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.575484][ T5942] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 775.717128][ T8505] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.768503][ T5942] usb 3-1: device descriptor read/8, error -71 [ 775.768739][ T8505] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.950965][ T8505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.969602][ T8505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.048626][ T8505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 776.057804][ T8505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.071024][T16961] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.2979'. [ 776.106499][T16961] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2979'. [ 776.421437][T16961] veth0: entered promiscuous mode [ 776.432931][T16965] virt_wifi0 speed is unknown, defaulting to 1000 [ 776.461714][T16979] FAULT_INJECTION: forcing a failure. [ 776.461714][T16979] name failslab, interval 1, probability 0, space 0, times 0 [ 776.494530][T16979] CPU: 1 UID: 0 PID: 16979 Comm: syz.0.2983 Not tainted syzkaller #0 PREEMPT(full) [ 776.494557][T16979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 776.494569][T16979] Call Trace: [ 776.494576][T16979] [ 776.494586][T16979] dump_stack_lvl+0x189/0x250 [ 776.494614][T16979] ? __pfx____ratelimit+0x10/0x10 [ 776.494640][T16979] ? __pfx_dump_stack_lvl+0x10/0x10 [ 776.494661][T16979] ? __pfx__printk+0x10/0x10 [ 776.494692][T16979] ? __pfx___might_resched+0x10/0x10 [ 776.494714][T16979] ? fs_reclaim_acquire+0x7d/0x100 [ 776.494738][T16979] should_fail_ex+0x414/0x560 [ 776.494768][T16979] should_failslab+0xa8/0x100 [ 776.494789][T16979] __kmalloc_noprof+0xcb/0x7f0 [ 776.494813][T16979] ? tomoyo_encode+0x28b/0x550 [ 776.494850][T16979] tomoyo_encode+0x28b/0x550 [ 776.494879][T16979] tomoyo_realpath_from_path+0x58d/0x5d0 [ 776.494911][T16979] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 776.494930][T16979] tomoyo_path_number_perm+0x1e8/0x5a0 [ 776.494952][T16979] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 776.495014][T16979] ? __fget_files+0x2a/0x420 [ 776.495037][T16979] ? __fget_files+0x3a0/0x420 [ 776.495054][T16979] ? __fget_files+0x2a/0x420 [ 776.495076][T16979] security_file_ioctl+0xcb/0x2d0 [ 776.495098][T16979] __se_sys_ioctl+0x47/0x170 [ 776.495124][T16979] do_syscall_64+0xfa/0xfa0 [ 776.495144][T16979] ? lockdep_hardirqs_on+0x9c/0x150 [ 776.495164][T16979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.495181][T16979] ? clear_bhb_loop+0x60/0xb0 [ 776.495204][T16979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.495221][T16979] RIP: 0033:0x7fb472d8ec29 [ 776.495239][T16979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 776.495255][T16979] RSP: 002b:00007fb473b6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 776.495275][T16979] RAX: ffffffffffffffda RBX: 00007fb472fd5fa0 RCX: 00007fb472d8ec29 [ 776.495289][T16979] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000003 [ 776.495301][T16979] RBP: 00007fb473b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 776.495313][T16979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 776.495324][T16979] R13: 00007fb472fd6038 R14: 00007fb472fd5fa0 R15: 00007ffdd8de06d8 [ 776.495358][T16979] [ 776.495405][T16979] ERROR: Out of memory at tomoyo_realpath_from_path. [ 776.594329][ T5984] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 776.767158][T16982] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2985'. [ 776.785512][T16960] veth0: left promiscuous mode [ 776.864397][ T5942] usb 3-1: new low-speed USB device number 38 using dummy_hcd [ 776.891242][ T5942] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 776.906268][ T5942] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 776.918377][ T5942] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 776.931577][ T5942] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 776.942965][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 776.953270][ T5942] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 776.970715][ T5942] usb 3-1: string descriptor 0 read error: -22 [ 776.985064][ T5984] usb 7-1: device descriptor read/64, error -71 [ 776.988301][ T5942] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 777.021466][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.056760][ T5942] usb 3-1: config 0 descriptor?? [ 777.062395][T16977] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 777.082160][ T5942] hub 3-1:0.0: bad descriptor, ignoring hub [ 777.101475][ T5942] hub 3-1:0.0: probe with driver hub failed with error -5 [ 777.118079][ T5942] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input39 [ 777.294421][ T5984] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 777.465942][ T5942] usb 3-1: USB disconnect, device number 38 [ 777.592784][ T5984] usb 7-1: device descriptor read/64, error -71 [ 777.747095][ T5984] usb usb7-port1: attempt power cycle [ 777.860612][T16994] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 777.867801][T16994] overlayfs: failed to set xattr on upper [ 777.873606][T16994] overlayfs: ...falling back to redirect_dir=nofollow. [ 777.880846][T16994] overlayfs: ...falling back to index=off. [ 777.886796][T16994] overlayfs: ...falling back to uuid=null. [ 777.892997][T16994] overlayfs: conflicting lowerdir path [ 778.525042][ T5984] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 778.577143][ T5984] usb 7-1: device descriptor read/8, error -71 [ 779.354331][ T5984] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 779.410184][ T5984] usb 7-1: device descriptor read/8, error -71 [ 779.447120][T17006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2991'. [ 779.544720][ T5984] usb usb7-port1: unable to enumerate USB device [ 780.021994][ T5941] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 780.253800][T17017] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2995'. [ 780.298237][T17025] IPv6: NLM_F_REPLACE set, but no existing node found! [ 780.424461][ T5941] usb 4-1: Using ep0 maxpacket: 32 [ 780.445839][ T8505] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 780.459184][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 780.476352][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 780.489024][ T8505] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 780.499156][ T5941] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 780.519930][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.551525][ T5941] usb 4-1: Product: syz [ 780.572853][T17040] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 780.574899][ T5941] usb 4-1: Manufacturer: syz [ 780.582933][T17040] MINIX-fs: unable to read superblock [ 780.588840][ T5941] usb 4-1: SerialNumber: syz [ 780.608903][ T5941] usb 4-1: config 0 descriptor?? [ 780.619961][ T5941] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input40 [ 780.694508][ T5941] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 780.721514][ T5941] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 780.821902][T17049] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 780.834722][T17049] I/O error, dev loop6, sector 7 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 780.859315][T17049] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=7, location=7 [ 780.870979][T17049] I/O error, dev loop6, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 780.880888][T17049] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 780.902568][T17049] I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 780.912960][T17049] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 780.929985][T17049] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 780.941164][T17049] I/O error, dev loop6, sector 14 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 780.958906][T17049] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=7, location=7 [ 780.969251][T17049] I/O error, dev loop6, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 780.979538][T17049] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 780.989697][T17049] I/O error, dev loop6, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 780.999738][T17049] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 781.011806][T17049] I/O error, dev loop6, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 781.021797][T17049] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=7, location=7 [ 781.031645][T17049] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 781.046422][T17049] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 781.057349][T17049] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=7, location=7 [ 781.067294][T17049] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 781.077497][T17049] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 781.087977][T17049] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1) [ 781.164753][ T5984] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 781.261554][T17060] syzkaller1: entered promiscuous mode [ 781.268384][T17060] syzkaller1: entered allmulticast mode [ 781.324620][ T5984] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 781.715881][T17067] batman_adv: batadv0: Adding interface: gretap3 [ 781.722526][T17067] batman_adv: batadv0: The MTU of interface gretap3 is too small (1382) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.748813][T17067] batman_adv: batadv0: Interface activated: gretap3 [ 782.419721][T17062] overlayfs: statfs failed on './file0' [ 782.598067][ T5941] usb 4-1: USB disconnect, device number 7 [ 782.750826][ T5984] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 782.917506][T17114] netlink: 356 bytes leftover after parsing attributes in process `syz.4.3025'. [ 782.928666][ T5984] usb 7-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 782.938348][ T5984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.947623][ T5984] usb 7-1: Product: syz [ 782.951835][ T5984] usb 7-1: Manufacturer: syz [ 782.958314][ T5984] usb 7-1: SerialNumber: syz [ 782.971204][ T5984] usb 7-1: config 0 descriptor?? [ 782.988746][ T5941] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 783.044482][ T43] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 783.146406][ T5941] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 783.158045][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.169570][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 783.182518][ T5941] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 783.205038][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 783.215897][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 783.233914][ T43] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 783.247329][ T5941] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 783.248511][ T5984] usb 7-1: f81604_read: reg: 105 failed: -EPROTO [ 783.257111][ T5941] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 783.272629][T17126] netlink: 33912 bytes leftover after parsing attributes in process `syz.4.3027'. [ 783.283166][ T5941] usb 4-1: Manufacturer: syz [ 783.290669][ T43] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 783.300120][ T43] usb 3-1: New USB device strings: Mfr=14, Product=2, SerialNumber=3 [ 783.310415][ T5984] f81604 7-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 783.327977][ T5941] usb 4-1: config 0 descriptor?? [ 783.334284][ T43] usb 3-1: Product: syz [ 783.338603][ T43] usb 3-1: Manufacturer: syz [ 783.339249][ T5984] f81604 7-1:0.0: probe with driver f81604 failed with error -71 [ 783.353630][ T43] usb 3-1: SerialNumber: syz [ 783.380160][ T5984] usb 7-1: USB disconnect, device number 6 [ 783.903091][T17134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.933659][T17134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 784.323536][ T5984] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 784.489023][ T5984] usb 7-1: Using ep0 maxpacket: 32 [ 784.500699][ T5984] usb 7-1: descriptor type invalid, skip [ 784.508340][ T5984] usb 7-1: config 0 has an invalid interface number: 10 but max is 0 [ 784.534790][ T5984] usb 7-1: config 0 has no interface number 0 [ 784.540936][ T5984] usb 7-1: config 0 interface 10 has no altsetting 0 [ 784.592753][ T5984] usb 7-1: New USB device found, idVendor=0c44, idProduct=0022, bcdDevice=1d.02 [ 784.624588][ T5984] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.632649][ T5984] usb 7-1: Product: å ½ [ 784.648804][T17110] (syz.2.3023,17110,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 784.667246][ T5984] usb 7-1: Manufacturer: 몷採ㄡ墽匥퀽죠貅趋ﭱ邏달è½î½æ³¯åŒŽêµµãŸ¡æšÌ¥áŒªê¦€æ‚–éšåˆ“霫åœå‹¨ã˜œà¨¢æ Šç’·ë¡”í•­ç´©î’♅톴ⱓé’诊凯çœË¢à¶“ê¹¢ì— [ 784.686071][T17110] (syz.2.3023,17110,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 784.703508][T17110] (syz.2.3023,17110,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 784.723514][ T5984] usb 7-1: SerialNumber: syz [ 784.728786][T17110] (syz.2.3023,17110,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 784.739915][ T5984] usb 7-1: config 0 descriptor?? [ 784.779871][T17110] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 784.924780][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 784.986734][ T5984] usb_serial_simple 7-1:0.10: moto_modem converter detected [ 785.027524][ T5984] usb 7-1: moto_modem converter now attached to ttyUSB0 [ 785.072589][ T5984] usb 7-1: USB disconnect, device number 7 [ 785.097915][ T5984] moto_modem ttyUSB0: moto_modem converter now disconnected from ttyUSB0 [ 785.132335][ T5984] usb_serial_simple 7-1:0.10: device disconnected [ 785.379165][ T5880] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 785.393288][ T5880] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 785.411056][ T5880] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 785.422636][ T5880] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 785.430921][ T5880] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 785.486427][T17151] virt_wifi0 speed is unknown, defaulting to 1000 [ 785.713421][ T5941] usbhid 4-1:0.0: can't add hid device: -71 [ 785.745230][ T5941] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 785.888052][ T5941] usb 4-1: USB disconnect, device number 8 [ 786.042058][T17158] blk_print_req_error: 8 callbacks suppressed [ 786.042100][T17158] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 786.044086][T17164] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 786.048521][T17158] FAT-fs (loop6): unable to read boot sector [ 786.151044][T17167] ieee802154 phy1 wpan1: encryption failed: -22 [ 786.189515][T10595] hid_parser_main: 24 callbacks suppressed [ 786.189536][T10595] hid-generic FFFC:0003:0000.002B: unknown main item tag 0x0 [ 786.203334][T10595] hid-generic FFFC:0003:0000.002B: unknown main item tag 0x0 [ 786.237349][T10595] hid-generic FFFC:0003:0000.002B: unknown main item tag 0x0 [ 786.268137][T10595] hid-generic FFFC:0003:0000.002B: unknown main item tag 0x0 [ 786.298473][T10595] hid-generic FFFC:0003:0000.002B: unknown main item tag 0x0 [ 786.319045][ T43] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 786.321570][T10595] hid-generic FFFC:0003:0000.002B: unknown main item tag 0x0 [ 786.352614][ T43] cdc_ncm 3-1:1.0: bind() failure [ 786.380189][T10595] hid-generic FFFC:0003:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 786.389727][ T43] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 786.430399][ T43] cdc_ncm 3-1:1.1: bind() failure [ 786.484990][ T43] usb 3-1: USB disconnect, device number 39 [ 787.484558][ T5880] Bluetooth: hci5: command tx timeout [ 787.686733][T17151] chnl_net:caif_netlink_parms(): no params data found [ 787.724863][ T43] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 787.937045][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 787.971094][T17151] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.978481][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 787.993874][T17151] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.016487][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 788.022998][T17151] bridge_slave_0: entered allmulticast mode [ 788.051873][ T43] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 788.070871][T17151] bridge_slave_0: entered promiscuous mode [ 788.087595][ T43] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.138858][ T43] usb 3-1: config 0 descriptor?? [ 788.212472][T17151] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.337247][T17151] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.357853][T17151] bridge_slave_1: entered allmulticast mode [ 788.375381][T17151] bridge_slave_1: entered promiscuous mode [ 788.534121][T17151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.557059][T17151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.576840][ T43] chicony 0003:04F2:1421.002C: report_id 588946805 is invalid [ 788.587301][ T43] chicony 0003:04F2:1421.002C: item 0 4 1 8 parsing failed [ 788.620689][ T43] chicony 0003:04F2:1421.002C: Chicony hid parse failed: -22 [ 788.630611][ T43] chicony 0003:04F2:1421.002C: probe with driver chicony failed with error -22 [ 788.696258][ T8505] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 788.710368][ T8505] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 788.866138][ T8505] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 788.877705][ T8505] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 788.937487][T17151] team0: Port device team_slave_0 added [ 788.948965][T17151] team0: Port device team_slave_1 added [ 788.959534][T17192] ext4: Unknown parameter '/dev/snd/controlC#' [ 789.102760][T17151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.116555][T17151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 789.163419][T17151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.168468][T17181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.186072][T17181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.200065][ T8505] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 789.201765][T17181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.209998][ T8505] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 789.230315][T17181] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 789.231029][T17151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.245926][T17151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 789.254778][T10595] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 789.280048][T17151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.299912][ T8505] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 789.310310][ T8505] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 789.437356][T17151] hsr_slave_0: entered promiscuous mode [ 789.445344][T17151] hsr_slave_1: entered promiscuous mode [ 789.452265][T17151] debugfs: 'hsr0' already exists in 'hsr' [ 789.458197][T10595] usb 7-1: Using ep0 maxpacket: 8 [ 789.458239][T17151] Cannot create hsr debugfs directory [ 789.467640][T10595] usb 7-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 789.479384][T10595] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.488534][T10595] usb 7-1: Product: syz [ 789.492972][T10595] usb 7-1: Manufacturer: syz [ 789.498477][T10595] usb 7-1: SerialNumber: syz [ 789.564678][ T5880] Bluetooth: hci5: command tx timeout [ 789.606233][T10595] usb 7-1: config 0 descriptor?? [ 789.634498][T10595] hub 7-1:0.0: bad descriptor, ignoring hub [ 789.640456][T10595] hub 7-1:0.0: probe with driver hub failed with error -5 [ 789.653478][T10595] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 789.761506][ T8505] bridge_slave_1: left allmulticast mode [ 789.771324][ T8505] bridge_slave_1: left promiscuous mode [ 789.781664][ T8505] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.794702][ T8505] bridge_slave_0: left allmulticast mode [ 789.800513][ T8505] bridge_slave_0: left promiscuous mode [ 789.811136][ T8505] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.825196][T10595] usb 7-1: USB disconnect, device number 8 [ 789.840599][ T8505] batman_adv: batadv0: Interface deactivated: gretap3 [ 790.220051][ T8505] batman_adv: batadv0: Removing interface: gretap3 [ 790.382906][T17219] Bluetooth: MGMT ver 1.23 [ 790.441532][T17220] overlayfs: failed to clone lowerpath [ 790.513366][ T5941] usb 3-1: USB disconnect, device number 40 [ 790.784711][T10595] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 790.820228][ T8505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 790.838266][ T8505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.856426][ T8505] bond0 (unregistering): Released all slaves [ 790.875902][ T8505] bond1 (unregistering): Released all slaves [ 790.938348][T10595] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 791.018053][T10595] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.070949][T10595] usb 7-1: Product: syz [ 791.124456][T10595] usb 7-1: Manufacturer: syz [ 791.182194][T10595] usb 7-1: SerialNumber: syz [ 791.259395][T17229] netlink: 'syz.0.3054': attribute type 10 has an invalid length. [ 791.275907][T17229] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3054'. [ 791.455853][T17227] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 791.473891][T17227] FAT-fs (loop3): unable to read boot sector [ 791.677219][ T5880] Bluetooth: hci5: command tx timeout [ 791.855947][T17222] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 791.858449][ T5883] hid-generic FFFC:0003:0000.002D: unknown main item tag 0x0 [ 791.865126][T17222] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.881404][ T5883] hid-generic FFFC:0003:0000.002D: unknown main item tag 0x0 [ 791.903224][T10595] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 792.021227][ T5883] hid-generic FFFC:0003:0000.002D: unknown main item tag 0x0 [ 792.049324][T10595] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 792.059040][ T5883] hid-generic FFFC:0003:0000.002D: unknown main item tag 0x0 [ 792.087637][ T5883] hid-generic FFFC:0003:0000.002D: unknown main item tag 0x0 [ 792.110401][ T5883] hid-generic FFFC:0003:0000.002D: unknown main item tag 0x0 [ 792.156454][T10595] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 792.226976][T10595] lan78xx 7-1:1.0: probe with driver lan78xx failed with error -71 [ 792.250501][ T5883] hid-generic FFFC:0003:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 792.346570][T10595] usb 7-1: USB disconnect, device number 9 [ 792.399565][T17151] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 792.482438][T17151] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 792.596899][T17151] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 792.699412][T17151] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 792.850840][ T8505] hsr_slave_0: left promiscuous mode [ 792.865908][ T8505] hsr_slave_1: left promiscuous mode [ 792.897314][ T8505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.954482][ T8505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.969641][ T8505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.982821][ T8505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.043485][ T8505] veth1_macvtap: left allmulticast mode [ 793.050270][ T8505] veth0_macvtap: left promiscuous mode [ 793.058681][ T8505] veth1_vlan: left promiscuous mode [ 793.752648][ T5880] Bluetooth: hci5: command tx timeout [ 794.347805][ T8505] team0 (unregistering): Port device team_slave_1 removed [ 794.446882][ T8505] team0 (unregistering): Port device team_slave_0 removed [ 795.017834][T17260] bridge0: port 3(netdevsim0) entered blocking state [ 795.025198][T17260] bridge0: port 3(netdevsim0) entered disabled state [ 795.035301][T17260] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 795.396776][T17151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.456596][T17151] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.493988][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.501306][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.534793][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.542048][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.224656][ T8505] IPVS: stop unused estimator thread 0... [ 796.646002][T17151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.145731][T17151] veth0_vlan: entered promiscuous mode [ 797.162236][T17151] veth1_vlan: entered promiscuous mode [ 797.221183][T17151] veth0_macvtap: entered promiscuous mode [ 797.236340][T17151] veth1_macvtap: entered promiscuous mode [ 797.249223][ T5883] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 797.297573][T17151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 797.321624][T17151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 797.337855][ T3481] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.347018][ T3481] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.358515][ T3481] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.367648][ T3481] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.405609][ T5883] usb 3-1: Using ep0 maxpacket: 16 [ 797.419573][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.450386][ T5883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.465833][ T5883] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 797.475915][ T3481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.483821][ T3481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.492083][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.508909][ T5883] usb 3-1: config 0 descriptor?? [ 797.529400][ T8505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.537609][ T8505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.589294][T17304] veth0_vlan: mtu less than device minimum [ 797.717215][T17290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 797.753390][T17290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 797.792031][ T5883] hid (null): bogus close delimiter [ 798.154773][T17291] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 798.164155][T17291] FAT-fs (loop2): unable to read boot sector [ 798.194701][T13149] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 798.206293][T13149] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 798.218920][T13149] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 798.235137][T13149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 798.260390][T13149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 798.268481][ T5883] usb 3-1: string descriptor 0 read error: -71 [ 798.304578][ T5883] usb 3-1: Max retries (5) exceeded reading string descriptor 200 [ 798.308136][T17307] virt_wifi0 speed is unknown, defaulting to 1000 [ 798.329413][ T5883] letsketch 0003:6161:4D15.002E: probe with driver letsketch failed with error -32 [ 798.352366][ T5883] usb 3-1: USB disconnect, device number 41 [ 798.571947][T17316] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3070'. [ 798.677092][T17316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3070'. [ 798.932507][T17307] chnl_net:caif_netlink_parms(): no params data found [ 799.166658][T17307] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.173918][T17307] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.201413][T17307] bridge_slave_0: entered allmulticast mode [ 799.222097][T17307] bridge_slave_0: entered promiscuous mode [ 799.232722][T17307] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.247437][T17307] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.264928][T17307] bridge_slave_1: entered allmulticast mode [ 799.273242][T17307] bridge_slave_1: entered promiscuous mode [ 799.370440][T17307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.398836][T17307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.440997][T17344] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 799.581389][T17307] team0: Port device team_slave_0 added [ 799.591083][T17307] team0: Port device team_slave_1 added [ 799.811273][T17307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.818298][T17307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.880775][T17307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.897694][T17307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.925682][T17307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.997913][T17307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.123376][T17307] hsr_slave_0: entered promiscuous mode [ 800.144198][T17307] hsr_slave_1: entered promiscuous mode [ 800.160606][T17307] debugfs: 'hsr0' already exists in 'hsr' [ 800.172194][T17307] Cannot create hsr debugfs directory [ 800.243275][T17353] fuse: Bad value for 'fd' [ 800.365324][T13149] Bluetooth: hci3: command tx timeout [ 801.389557][T17307] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 801.785852][T17372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3083'. [ 801.819487][T17307] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.341830][T17307] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.445197][T13149] Bluetooth: hci3: command tx timeout [ 802.503001][T17307] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.801012][T17307] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 802.813339][T17307] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 802.829923][T17307] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 802.842165][T17307] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 803.020260][T17307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 803.071175][T17307] 8021q: adding VLAN 0 to HW filter on device team0 [ 803.097348][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.104579][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.161375][T15777] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.168652][T15777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.493339][T17307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 803.584847][T17410] usb usb8: usbfs: process 17410 (syz.2.3090) did not claim interface 0 before use [ 804.036873][T17307] veth0_vlan: entered promiscuous mode [ 804.081948][T17307] veth1_vlan: entered promiscuous mode [ 804.132161][T17307] veth0_macvtap: entered promiscuous mode [ 804.143696][T17307] veth1_macvtap: entered promiscuous mode [ 804.171228][T17307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.188039][T17307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.203861][ T8505] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.215608][ T8505] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.227200][ T8505] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.241166][ T8505] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.397313][T17428] netlink: 'syz.2.3093': attribute type 4 has an invalid length. [ 804.451392][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.459852][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.481655][T17428] netlink: 'syz.2.3093': attribute type 4 has an invalid length. [ 804.525661][T13149] Bluetooth: hci3: command tx timeout [ 804.536836][T15780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.545747][T15780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.626895][T17431] I/O error, dev loop3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 804.637803][T17431] isofs_fill_super: bread failed, dev=loop3, iso_blknum=16, block=32 [ 806.068374][T17452] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3101'. [ 806.144819][T17452] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3101'. [ 806.341963][ T5880] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 806.353043][ T5880] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 806.362225][ T5880] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 806.370657][ T5880] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 806.378650][ T5880] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 806.442620][T17466] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 806.452998][T17466] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 806.546995][T17463] virt_wifi0 speed is unknown, defaulting to 1000 [ 806.604668][T13149] Bluetooth: hci3: command tx timeout [ 806.775432][T15393] syz_tun (unregistering): left allmulticast mode [ 807.920122][T17463] chnl_net:caif_netlink_parms(): no params data found [ 808.017374][T17486] tap0: tun_chr_ioctl cmd 21731 [ 808.236056][T17463] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.254053][T17463] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.267251][ T10] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 808.286061][T17463] bridge_slave_0: entered allmulticast mode [ 808.313833][T17463] bridge_slave_0: entered promiscuous mode [ 808.324066][T17463] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.333821][T17463] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.348720][T17463] bridge_slave_1: entered allmulticast mode [ 808.360262][T17463] bridge_slave_1: entered promiscuous mode [ 808.384644][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.416012][T17463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 808.436283][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 808.447439][T13149] Bluetooth: hci1: command tx timeout [ 808.468266][T17463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 808.498683][T17492] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1169731583 (18715705328 ns) > initial count (14827118032 ns). Using initial count to start timer. [ 808.521605][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.532759][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 808.544179][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.577012][ T10] usb 7-1: config 0 descriptor?? [ 808.585445][ T10] hub 7-1:0.0: USB hub found [ 808.595193][T17463] team0: Port device team_slave_0 added [ 808.604453][T17463] team0: Port device team_slave_1 added [ 808.660998][T17463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 808.670944][T17463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.697839][T17463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 808.716890][T17463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 808.723926][T17463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 808.750104][T17463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 808.784722][ T10] hub 7-1:0.0: 1 port detected [ 808.892776][T17463] hsr_slave_0: entered promiscuous mode [ 808.901828][T17463] hsr_slave_1: entered promiscuous mode [ 808.911108][T17463] debugfs: 'hsr0' already exists in 'hsr' [ 808.919879][T17463] Cannot create hsr debugfs directory [ 808.988834][ T10] hub 7-1:0.0: hub_hub_status failed (err = -71) [ 809.002810][ T10] hub 7-1:0.0: config failed, can't get hub status (err -71) [ 809.029728][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 809.039977][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 809.062426][T17503] syzkaller0: entered promiscuous mode [ 809.068361][T17503] syzkaller0: entered allmulticast mode [ 809.075591][ T10] usb 7-1: USB disconnect, device number 10 [ 809.075805][T17502] tipc: Started in network mode [ 809.088237][T17502] tipc: Node identity c6993363409c, cluster identity 4711 [ 809.095728][T17502] tipc: Enabled bearer , priority 0 [ 809.152370][T17502] tipc: Resetting bearer [ 809.187480][T17502] tipc: Disabling bearer [ 809.370767][T17463] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.475969][T17463] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.551503][T17463] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.653931][T17516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3117'. [ 809.788245][T17463] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 809.902089][T17521] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 810.667856][T13149] Bluetooth: hci1: command tx timeout [ 811.417965][T17463] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 811.450179][T17463] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 811.473056][T17463] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 811.473376][T17538] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3121'. [ 811.497366][T17463] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 811.530006][T17535] sch_tbf: burst 1023 is lower than device lo mtu (11337746) ! [ 811.559898][T17539] virt_wifi0 speed is unknown, defaulting to 1000 [ 811.585876][T17542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3123'. [ 811.603534][T17542] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3123'. [ 811.621111][T17542] syzkaller1: entered promiscuous mode [ 811.628193][T17542] syzkaller1: entered allmulticast mode [ 811.783723][T17463] 8021q: adding VLAN 0 to HW filter on device bond0 [ 811.827439][T17463] 8021q: adding VLAN 0 to HW filter on device team0 [ 811.835922][ T5942] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 811.855966][ T8505] bridge0: port 1(bridge_slave_0) entered blocking state [ 811.863147][ T8505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 811.874434][ T24] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 811.914829][T15777] bridge0: port 2(bridge_slave_1) entered blocking state [ 811.922145][T15777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 812.005346][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.023170][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 812.036261][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 812.058207][ T5942] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 812.081831][ T24] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=f4.9b [ 812.095308][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.105721][ T24] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 812.125961][ T24] usb 3-1: Product: syz [ 812.131086][ T5942] usb 7-1: config 0 descriptor?? [ 812.146733][ T24] usb 3-1: SerialNumber: syz [ 812.262302][ T24] usb 3-1: config 0 descriptor?? [ 812.293348][ T24] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 812.312884][ T24] dvb_usb_af9015 3-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 812.336070][ T24] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 812.345548][ T24] dvb_usb_af9035 3-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 812.425985][T17463] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 812.520397][T17463] veth0_vlan: entered promiscuous mode [ 812.539226][T17463] veth1_vlan: entered promiscuous mode [ 812.619584][T17463] veth0_macvtap: entered promiscuous mode [ 812.633201][T17463] veth1_macvtap: entered promiscuous mode [ 812.673349][T17463] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 812.684984][T13149] Bluetooth: hci1: command tx timeout [ 812.697555][T17463] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.016001][T15778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.065760][T15778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.087284][ T5942] pyra 0003:1E7D:2CF6.002F: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 813.129503][T15777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.147442][T15777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.158130][T15777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.170933][T15777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 813.184049][T15777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.192473][T15777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.206491][T17585] hpfs: Unexpected value for 'help' [ 813.455405][T17543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 813.458464][T17593] tipc: Started in network mode [ 813.474862][T17593] tipc: Node identity ac14140f, cluster identity 4711 [ 813.486628][T17593] tipc: New replicast peer: 255.255.255.255 [ 813.494976][T17593] tipc: Enabled bearer , priority 1 [ 813.552338][T17593] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 813.564210][T17593] EXT4-fs (loop4): unable to read superblock [ 813.865490][T17596] can0: slcan on ttyS3. [ 813.875988][ T5942] pyra 0003:1E7D:2CF6.002F: couldn't init struct pyra_device [ 813.893993][ T5942] pyra 0003:1E7D:2CF6.002F: couldn't install mouse [ 814.042251][ T5942] pyra 0003:1E7D:2CF6.002F: probe with driver pyra failed with error -71 [ 814.094653][ T5942] usb 7-1: USB disconnect, device number 11 [ 814.186044][T17598] can0 (unregistered): slcan off ttyS3. [ 814.431146][ T5942] usb 3-1: USB disconnect, device number 42 [ 814.495148][ T5984] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 814.529643][T17616] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 814.536285][T17616] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 814.570803][T17616] vhci_hcd vhci_hcd.0: Device attached [ 814.719334][ T5935] tipc: Node number set to 2886997007 [ 814.760740][ T5984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 814.772806][T13149] Bluetooth: hci1: command tx timeout [ 814.778343][T17617] vhci_hcd: connection closed [ 814.782465][T17627] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3142'. [ 814.800551][ T5984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 814.825488][T10595] vhci_hcd: vhci_device speed not set [ 814.829587][ T3481] vhci_hcd: stop threads [ 814.831415][ T5984] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 814.858995][ T5984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.861713][ T3481] vhci_hcd: release socket [ 814.884649][T10595] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 814.917576][ T3481] vhci_hcd: disconnect device [ 814.921950][ T5984] usb 4-1: config 0 descriptor?? [ 814.948846][T17628] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 814.964682][ T5942] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 814.973682][T17628] cramfs: wrong magic [ 815.141032][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.155525][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.166942][ T5942] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 815.177253][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.275424][ T5942] usb 3-1: config 0 descriptor?? [ 815.433652][ T5984] cp2112 0003:10C4:EA90.0030: unknown main item tag 0x0 [ 815.464943][ T5984] cp2112 0003:10C4:EA90.0030: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 815.631294][ T5984] cp2112 0003:10C4:EA90.0030: Part Number: 0x82 Device Version: 0xFE [ 815.893309][ T5942] stadia 0003:18D1:9400.0031: hidraw1: USB HID v0.00 Device [HID 18d1:9400] on usb-dummy_hcd.2-1/input0 [ 815.987119][ T5942] stadia 0003:18D1:9400.0031: no inputs found [ 816.022645][ T5942] stadia 0003:18D1:9400.0031: force feedback init failed [ 816.060193][ T5942] usb 3-1: USB disconnect, device number 43 [ 816.318903][T17653] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 816.329768][T17653] EXT4-fs (loop6): unable to read superblock [ 816.399705][T17648] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 816.406997][T17653] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 816.414118][T17648] FAT-fs (loop4): unable to read boot sector [ 816.420082][ T5984] cp2112 0003:10C4:EA90.0030: error reading lock byte: -71 [ 816.435196][T17653] EXT4-fs (loop6): unable to read superblock [ 816.445941][ T5984] usb 4-1: USB disconnect, device number 10 [ 816.521021][T17653] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 816.555899][ T5935] hid-generic FFFC:0003:0000.0032: unknown main item tag 0x0 [ 816.565836][T17653] EXT4-fs (loop6): unable to read superblock [ 816.572064][ T5935] hid-generic FFFC:0003:0000.0032: unknown main item tag 0x0 [ 816.598933][T17660] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 816.606518][ T5935] hid-generic FFFC:0003:0000.0032: unknown main item tag 0x0 [ 816.606551][ T5935] hid-generic FFFC:0003:0000.0032: unknown main item tag 0x0 [ 816.606575][ T5935] hid-generic FFFC:0003:0000.0032: unknown main item tag 0x0 [ 816.606600][ T5935] hid-generic FFFC:0003:0000.0032: unknown main item tag 0x0 [ 816.636989][ T5935] hid-generic FFFC:0003:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 816.712790][T17653] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 816.723537][T17653] EXT4-fs (loop6): unable to read superblock [ 816.868323][T17653] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 816.884769][T17653] EXT4-fs (loop6): unable to read superblock [ 816.992373][T17653] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 817.008167][T17653] EXT4-fs (loop6): unable to read superblock [ 817.055185][T17671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3154'. [ 817.094714][T17653] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 817.124942][T17653] EXT4-fs (loop6): unable to read superblock [ 817.269751][T17653] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 817.290883][T17653] EXT4-fs (loop6): unable to read superblock [ 817.318414][T17653] EXT4-fs (loop6): unable to read superblock [ 817.344970][T17673] FAULT_INJECTION: forcing a failure. [ 817.344970][T17673] name failslab, interval 1, probability 0, space 0, times 0 [ 817.390789][T17653] EXT4-fs (loop6): unable to read superblock [ 817.401856][T17673] CPU: 1 UID: 0 PID: 17673 Comm: syz.3.3155 Not tainted syzkaller #0 PREEMPT(full) [ 817.401880][T17673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 817.401892][T17673] Call Trace: [ 817.401902][T17673] [ 817.401911][T17673] dump_stack_lvl+0x189/0x250 [ 817.401936][T17673] ? __pfx____ratelimit+0x10/0x10 [ 817.401957][T17673] ? __pfx_dump_stack_lvl+0x10/0x10 [ 817.401977][T17673] ? __pfx__printk+0x10/0x10 [ 817.402006][T17673] ? __pfx___might_resched+0x10/0x10 [ 817.402027][T17673] should_fail_ex+0x414/0x560 [ 817.402044][T17673] should_failslab+0xa8/0x100 [ 817.402056][T17673] __kmalloc_noprof+0xcb/0x7f0 [ 817.402069][T17673] ? kfree+0x4d/0x6d0 [ 817.402081][T17673] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 817.402098][T17673] tomoyo_realpath_from_path+0xe3/0x5d0 [ 817.402112][T17673] ? tomoyo_domain+0xd9/0x130 [ 817.402129][T17673] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 817.402140][T17673] tomoyo_path_number_perm+0x1e8/0x5a0 [ 817.402153][T17673] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 817.402164][T17673] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 817.402197][T17673] ? __fget_files+0x2a/0x420 [ 817.402210][T17673] ? __fget_files+0x3a0/0x420 [ 817.402219][T17673] ? __fget_files+0x2a/0x420 [ 817.402230][T17673] security_file_ioctl+0xcb/0x2d0 [ 817.402243][T17673] __se_sys_ioctl+0x47/0x170 [ 817.402258][T17673] do_syscall_64+0xfa/0xfa0 [ 817.402281][T17673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.402291][T17673] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 817.402300][T17673] ? clear_bhb_loop+0x60/0xb0 [ 817.402312][T17673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.402322][T17673] RIP: 0033:0x7f51f858ec29 [ 817.402332][T17673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.402340][T17673] RSP: 002b:00007f51f9376038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 817.402352][T17673] RAX: ffffffffffffffda RBX: 00007f51f87d5fa0 RCX: 00007f51f858ec29 [ 817.402360][T17673] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000003 [ 817.402366][T17673] RBP: 00007f51f9376090 R08: 0000000000000000 R09: 0000000000000000 [ 817.402372][T17673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 817.402378][T17673] R13: 00007f51f87d6038 R14: 00007f51f87d5fa0 R15: 00007ffc798810d8 [ 817.402395][T17673] [ 817.637212][T17673] ERROR: Out of memory at tomoyo_realpath_from_path. [ 817.653137][T17653] EXT4-fs (loop6): unable to read superblock [ 817.676920][T17653] EXT4-fs (loop6): unable to read superblock [ 817.696915][T17653] EXT4-fs (loop6): unable to read superblock [ 817.726849][T17653] EXT4-fs (loop6): unable to read superblock [ 817.769484][T17653] EXT4-fs (loop6): unable to read superblock [ 817.868254][T17653] EXT4-fs (loop6): unable to read superblock [ 817.918726][T17653] EXT4-fs (loop6): unable to read superblock [ 817.941993][T17653] EXT4-fs (loop6): unable to read superblock [ 817.963245][T17653] EXT4-fs (loop6): unable to read superblock [ 817.980378][T17653] EXT4-fs (loop6): unable to read superblock [ 817.994482][ T5942] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 817.994547][T17653] EXT4-fs (loop6): unable to read superblock [ 818.012761][T17653] EXT4-fs (loop6): unable to read superblock [ 818.111088][T17653] EXT4-fs (loop6): unable to read superblock [ 818.146973][ T5942] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 818.153262][T17653] EXT4-fs (loop6): unable to read superblock [ 818.172684][ T5942] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 818.187078][ T5942] usb 4-1: config 135 has no interface number 0 [ 818.201995][ T5942] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 818.226631][T17653] EXT4-fs (loop6): unable to read superblock [ 818.227217][ T5942] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 818.246903][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.255498][ T5942] usb 4-1: Product: syz [ 818.259814][ T5942] usb 4-1: Manufacturer: syz [ 818.264706][ T5942] usb 4-1: SerialNumber: syz [ 818.273572][T17653] EXT4-fs (loop6): unable to read superblock [ 818.298204][ T5942] uvcvideo 4-1:135.230: probe with driver uvcvideo failed with error -22 [ 818.302744][T17653] EXT4-fs (loop6): unable to read superblock [ 818.331680][T17653] EXT4-fs (loop6): unable to read superblock [ 818.353161][T17653] EXT4-fs (loop6): unable to read superblock [ 818.374970][T17653] EXT4-fs (loop6): unable to read superblock [ 818.400694][T17653] EXT4-fs (loop6): unable to read superblock [ 818.426814][T17653] EXT4-fs (loop6): unable to read superblock [ 818.449126][T17653] EXT4-fs (loop6): unable to read superblock [ 818.471433][T17653] EXT4-fs (loop6): unable to read superblock [ 818.496539][T17653] EXT4-fs (loop6): unable to read superblock [ 818.517473][T17653] EXT4-fs (loop6): unable to read superblock [ 818.543331][T17653] EXT4-fs (loop6): unable to read superblock [ 818.595843][T17653] blk_print_req_error: 29 callbacks suppressed [ 818.595861][T17653] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 818.620543][T17653] EXT4-fs (loop6): unable to read superblock [ 818.687193][T17653] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 818.711110][T17653] EXT4-fs (loop6): unable to read superblock [ 818.733790][T17653] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 818.743876][T17653] EXT4-fs (loop6): unable to read superblock [ 818.848709][T17653] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 818.882123][T17653] EXT4-fs (loop6): unable to read superblock [ 818.938363][T17653] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 818.961817][T17653] EXT4-fs (loop6): unable to read superblock [ 819.012768][T17653] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 819.037068][T17653] EXT4-fs (loop6): unable to read superblock [ 819.079335][T17653] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 819.084686][ T5984] usb 4-1: USB disconnect, device number 11 [ 819.109166][T17653] EXT4-fs (loop6): unable to read superblock [ 819.159399][T17653] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 819.174664][T17653] EXT4-fs (loop6): unable to read superblock [ 819.203682][T17653] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 819.213832][T17653] EXT4-fs (loop6): unable to read superblock [ 819.255027][T17689] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 819.265047][T17689] XFS (loop2): SB validate failed with error -5. [ 820.554464][T10595] vhci_hcd: vhci_device speed not set [ 820.592852][T17714] FAULT_INJECTION: forcing a failure. [ 820.592852][T17714] name failslab, interval 1, probability 0, space 0, times 0 [ 820.608645][T17714] CPU: 1 UID: 0 PID: 17714 Comm: syz.3.3166 Not tainted syzkaller #0 PREEMPT(full) [ 820.608671][T17714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 820.608680][T17714] Call Trace: [ 820.608686][T17714] [ 820.608694][T17714] dump_stack_lvl+0x189/0x250 [ 820.608719][T17714] ? __pfx____ratelimit+0x10/0x10 [ 820.608739][T17714] ? __pfx_dump_stack_lvl+0x10/0x10 [ 820.608755][T17714] ? __pfx__printk+0x10/0x10 [ 820.608783][T17714] ? __pfx___might_resched+0x10/0x10 [ 820.608803][T17714] ? fs_reclaim_acquire+0x7d/0x100 [ 820.608826][T17714] should_fail_ex+0x414/0x560 [ 820.608854][T17714] should_failslab+0xa8/0x100 [ 820.608873][T17714] __kmalloc_noprof+0xcb/0x7f0 [ 820.608893][T17714] ? tomoyo_encode+0x28b/0x550 [ 820.608919][T17714] tomoyo_encode+0x28b/0x550 [ 820.608943][T17714] tomoyo_realpath_from_path+0x58d/0x5d0 [ 820.608972][T17714] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 820.608990][T17714] tomoyo_path_number_perm+0x1e8/0x5a0 [ 820.609010][T17714] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 820.609071][T17714] ? __fget_files+0x2a/0x420 [ 820.609094][T17714] ? __fget_files+0x3a0/0x420 [ 820.609111][T17714] ? __fget_files+0x2a/0x420 [ 820.609132][T17714] security_file_ioctl+0xcb/0x2d0 [ 820.609153][T17714] __se_sys_ioctl+0x47/0x170 [ 820.609178][T17714] do_syscall_64+0xfa/0xfa0 [ 820.609196][T17714] ? lockdep_hardirqs_on+0x9c/0x150 [ 820.609211][T17714] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.609224][T17714] ? clear_bhb_loop+0x60/0xb0 [ 820.609242][T17714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.609254][T17714] RIP: 0033:0x7f51f858ec29 [ 820.609268][T17714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.609279][T17714] RSP: 002b:00007f51f9376038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 820.609295][T17714] RAX: ffffffffffffffda RBX: 00007f51f87d5fa0 RCX: 00007f51f858ec29 [ 820.609305][T17714] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000003 [ 820.609314][T17714] RBP: 00007f51f9376090 R08: 0000000000000000 R09: 0000000000000000 [ 820.609324][T17714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.609335][T17714] R13: 00007f51f87d6038 R14: 00007f51f87d5fa0 R15: 00007ffc798810d8 [ 820.609371][T17714] [ 820.870523][T17714] ERROR: Out of memory at tomoyo_realpath_from_path. [ 822.096488][T17730] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3170'. [ 822.124487][T17731] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3172'. [ 822.200243][T17731] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3172'. [ 822.477959][T17738] FAT-fs (loop3): unable to read boot sector [ 822.707578][T10595] hid-generic FFFC:0003:0000.0033: unknown main item tag 0x0 [ 822.707601][T10595] hid-generic FFFC:0003:0000.0033: unknown main item tag 0x0 [ 822.707616][T10595] hid-generic FFFC:0003:0000.0033: unknown main item tag 0x0 [ 822.707631][T10595] hid-generic FFFC:0003:0000.0033: unknown main item tag 0x0 [ 822.707646][T10595] hid-generic FFFC:0003:0000.0033: unknown main item tag 0x0 [ 822.707661][T10595] hid-generic FFFC:0003:0000.0033: unknown main item tag 0x0 [ 822.709770][T10595] hid-generic FFFC:0003:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 823.474453][ T5942] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 823.580827][T17750] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3176'. [ 824.004349][ T5942] usb 3-1: Using ep0 maxpacket: 16 [ 824.078655][ T5942] usb 3-1: config 222 has an invalid interface number: 213 but max is 0 [ 824.109330][ T5942] usb 3-1: config 222 has no interface number 0 [ 824.211102][ T5942] usb 3-1: config 222 interface 213 altsetting 11 bulk endpoint 0xE has invalid maxpacket 16 [ 824.236731][ T5942] usb 3-1: config 222 interface 213 has no altsetting 0 [ 824.273295][ T5942] usb 3-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice=3c.af [ 824.296349][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.304876][ T5942] usb 3-1: Product: syz [ 824.310734][ T5942] usb 3-1: Manufacturer: syz [ 824.316440][ T5942] usb 3-1: SerialNumber: syz [ 824.327962][T17745] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 824.415598][T17761] FAULT_INJECTION: forcing a failure. [ 824.415598][T17761] name failslab, interval 1, probability 0, space 0, times 0 [ 824.457738][T17761] CPU: 0 UID: 0 PID: 17761 Comm: syz.0.3179 Not tainted syzkaller #0 PREEMPT(full) [ 824.457763][T17761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 824.457774][T17761] Call Trace: [ 824.457782][T17761] [ 824.457790][T17761] dump_stack_lvl+0x189/0x250 [ 824.457816][T17761] ? __pfx____ratelimit+0x10/0x10 [ 824.457836][T17761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 824.457856][T17761] ? __pfx__printk+0x10/0x10 [ 824.457878][T17761] ? __pfx___might_resched+0x10/0x10 [ 824.457899][T17761] ? fs_reclaim_acquire+0x7d/0x100 [ 824.457918][T17761] should_fail_ex+0x414/0x560 [ 824.457943][T17761] should_failslab+0xa8/0x100 [ 824.457963][T17761] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 824.457986][T17761] ? __d_alloc+0x36/0x7a0 [ 824.458011][T17761] __d_alloc+0x36/0x7a0 [ 824.458035][T17761] d_alloc_pseudo+0x21/0xc0 [ 824.458055][T17761] alloc_file_pseudo_noaccount+0xcd/0x2c0 [ 824.458080][T17761] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 824.458113][T17761] bdev_file_open_by_dev+0x181/0x240 [ 824.458139][T17761] disk_scan_partitions+0x1c1/0x2c0 [ 824.458166][T17761] blkdev_common_ioctl+0x1686/0x2550 [ 824.458202][T17761] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 824.458220][T17761] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 824.458242][T17761] ? do_vfs_ioctl+0xbe8/0x1430 [ 824.458261][T17761] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 824.458281][T17761] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 824.458336][T17761] blkdev_ioctl+0x4f6/0x6d0 [ 824.458361][T17761] ? __pfx_blkdev_ioctl+0x10/0x10 [ 824.458381][T17761] ? __fget_files+0x3a0/0x420 [ 824.458397][T17761] ? __fget_files+0x2a/0x420 [ 824.458417][T17761] ? bpf_lsm_file_ioctl+0x9/0x20 [ 824.458438][T17761] ? __pfx_blkdev_ioctl+0x10/0x10 [ 824.458461][T17761] __se_sys_ioctl+0xfc/0x170 [ 824.458485][T17761] do_syscall_64+0xfa/0xfa0 [ 824.458504][T17761] ? lockdep_hardirqs_on+0x9c/0x150 [ 824.458523][T17761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.458540][T17761] ? clear_bhb_loop+0x60/0xb0 [ 824.458560][T17761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.458577][T17761] RIP: 0033:0x7f3e90d8ec29 [ 824.458593][T17761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 824.458608][T17761] RSP: 002b:00007f3e91c1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 824.458627][T17761] RAX: ffffffffffffffda RBX: 00007f3e90fd5fa0 RCX: 00007f3e90d8ec29 [ 824.458640][T17761] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000003 [ 824.458650][T17761] RBP: 00007f3e91c1f090 R08: 0000000000000000 R09: 0000000000000000 [ 824.458661][T17761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.458671][T17761] R13: 00007f3e90fd6038 R14: 00007f3e90fd5fa0 R15: 00007ffda9fda728 [ 824.458701][T17761] [ 824.737297][ C0] vkms_vblank_simulate: vblank timer overrun [ 824.743455][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 824.786496][ T5942] option 3-1:222.213: GSM modem (1-port) converter detected [ 824.819766][T17765] sg_write: data in/out 8192/1 bytes for SCSI command 0xf2-- guessing data in; [ 824.819766][T17765] program syz.6.3180 not setting count and/or reply_len properly [ 824.856313][ T5942] usb 3-1: USB disconnect, device number 44 [ 824.887241][ T5942] option 3-1:222.213: device disconnected [ 824.898397][T17763] ntfs3: Unknown parameter 'no' [ 824.904475][T17767] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3182'. [ 824.916819][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 824.930081][ T43] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 824.946579][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.965438][ T43] usb 4-1: Product: syz [ 824.969636][ T43] usb 4-1: Manufacturer: syz [ 825.094514][ T43] usb 4-1: SerialNumber: syz [ 825.102668][ T43] usb 4-1: config 0 descriptor?? [ 825.111716][ T43] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 825.219932][T17777] blk_print_req_error: 1 callbacks suppressed [ 825.219949][T17777] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 825.235402][T17777] FAT-fs (loop6): unable to read boot sector [ 825.375608][ T10] hid-generic FFFC:0003:0000.0034: unknown main item tag 0x0 [ 825.475284][ T10] hid-generic FFFC:0003:0000.0034: unknown main item tag 0x0 [ 825.542715][ T10] hid-generic FFFC:0003:0000.0034: unknown main item tag 0x0 [ 825.627138][ T43] gspca_ov534_9: reg_w failed -110 [ 825.709056][ T10] hid-generic FFFC:0003:0000.0034: unknown main item tag 0x0 [ 825.800417][ T10] hid-generic FFFC:0003:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 825.879810][T17784] ntfs3(loop2): try to read out of volume at offset 0x0 [ 826.072049][ T43] gspca_ov534_9: Unknown sensor 0000 [ 826.072139][ T43] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 826.113958][ T43] usb 4-1: USB disconnect, device number 12 [ 827.453297][T17818] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3195'. [ 827.810069][T17827] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 827.819304][T17827] FAT-fs (loop2): unable to read boot sector [ 828.109779][ T5935] hid_parser_main: 2 callbacks suppressed [ 828.109792][ T5935] hid-generic FFFC:0003:0000.0035: unknown main item tag 0x0 [ 828.142144][ T5935] hid-generic FFFC:0003:0000.0035: unknown main item tag 0x0 [ 828.155356][ T5935] hid-generic FFFC:0003:0000.0035: unknown main item tag 0x0 [ 828.165668][ T5935] hid-generic FFFC:0003:0000.0035: unknown main item tag 0x0 [ 828.206724][ T5935] hid-generic FFFC:0003:0000.0035: unknown main item tag 0x0 [ 828.277359][ T5935] hid-generic FFFC:0003:0000.0035: unknown main item tag 0x0 [ 828.296949][ T5935] hid-generic FFFC:0003:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 829.142282][T17842] erofs (device loop6): cannot find valid erofs superblock [ 829.205911][T17842] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3201'. [ 829.312667][T17850] netlink: 'syz.2.3204': attribute type 10 has an invalid length. [ 829.391611][T17850] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 829.427654][T17850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3204'. [ 830.254355][ T5935] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 830.426967][ T5935] usb 7-1: config 8 has an invalid interface number: 223 but max is 0 [ 830.435234][ T5935] usb 7-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 830.443967][ T5935] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 830.458734][ T5935] usb 7-1: config 8 has no interface number 0 [ 830.465121][ T5935] usb 7-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 830.476747][ T5935] usb 7-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 830.493123][ T5935] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 830.502216][ T5935] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.510219][ T5935] usb 7-1: Product: syz [ 830.514568][ T5935] usb 7-1: Manufacturer: syz [ 830.519182][ T5935] usb 7-1: SerialNumber: syz [ 830.650619][T17860] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 830.738508][ T5935] usb 7-1: USB disconnect, device number 12 [ 832.094471][ T43] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 832.289764][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 833.095904][ T43] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 833.104113][ T43] usb 4-1: config 0 has no interface number 0 [ 833.147177][ T43] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 833.163065][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.173065][ T43] usb 4-1: Product: syz [ 833.177447][ T43] usb 4-1: Manufacturer: syz [ 833.182067][ T43] usb 4-1: SerialNumber: syz [ 833.189741][ T43] usb 4-1: config 0 descriptor?? [ 833.197974][ T43] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 833.375935][T17906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3223'. [ 833.418608][ T43] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 833.452903][ T43] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 833.628928][T17885] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 834.102510][ T8490] Bluetooth: hci2: Frame reassembly failed (-84) [ 834.464967][ T43] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 834.580300][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 834.580872][ T10] usb 4-1: USB disconnect, device number 13 [ 834.599025][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 834.620066][ T43] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 834.623637][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 834.628765][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 834.651372][ T43] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 834.656127][ T10] quatech2 4-1:0.51: device disconnected [ 834.669594][ T43] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 834.678017][ T43] usb 3-1: Manufacturer: syz [ 834.684513][ T43] usb 3-1: config 0 descriptor?? [ 834.734562][ T43] rc_core: IR keymap rc-hauppauge not found [ 834.740631][ T43] Registered IR keymap rc-empty [ 834.746660][ T43] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 834.758379][ T43] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input43 [ 834.897457][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 834.907273][T17925] sctp: [Deprecated]: syz.2.3228 (pid 17925) Use of int in maxseg socket option. [ 834.907273][T17925] Use struct sctp_assoc_value instead [ 834.925524][ T5935] usb 3-1: USB disconnect, device number 45 [ 834.974562][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 835.134592][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 835.141929][ T10] usb 4-1: config 0 has an invalid interface number: 112 but max is 1 [ 835.150239][ T10] usb 4-1: config 0 has an invalid interface number: 17 but max is 1 [ 835.158388][ T10] usb 4-1: config 0 has no interface number 0 [ 835.170656][ T10] usb 4-1: config 0 has no interface number 1 [ 835.179763][ T10] usb 4-1: New USB device found, idVendor=04c1, idProduct=009d, bcdDevice=1f.14 [ 835.188919][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.197325][ T10] usb 4-1: Product: syz [ 835.201500][ T10] usb 4-1: Manufacturer: syz [ 835.206116][ T10] usb 4-1: SerialNumber: syz [ 835.212525][ T10] usb 4-1: config 0 descriptor?? [ 835.427609][ T43] usb 4-1: USB disconnect, device number 14 [ 835.525155][T17939] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 835.885012][ T5880] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 836.170956][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 836.170973][ T30] audit: type=1800 audit(2000000389.288:596): pid=17948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.3234" name="file0" dev="fuse" ino=2 res=0 errno=0 [ 836.347719][T17941] btrfs: Unknown parameter 'fragment' [ 836.361479][T17941] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3232'. [ 836.444588][ T43] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 836.599735][ T43] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x6C, changing to 0xC [ 836.618005][ T43] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 836.619569][T17956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.628512][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.638391][T17956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.644171][ T43] usb 7-1: Product: syz [ 836.656492][ T43] usb 7-1: Manufacturer: syz [ 836.661096][ T43] usb 7-1: SerialNumber: syz [ 836.667799][ T43] usb 7-1: config 0 descriptor?? [ 836.673335][T17949] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 836.682257][ T43] streamzap 7-1:0.0: streamzap_probe: endpoint doesn't match input device 020c [ 836.854888][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 837.184321][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 837.242457][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.257005][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 837.263984][ T43] usb 7-1: USB disconnect, device number 13 [ 837.268365][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 837.281534][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.289749][ T10] usb 4-1: Product: syz [ 837.293935][ T10] usb 4-1: Manufacturer: syz [ 837.298688][ T10] usb 4-1: SerialNumber: syz [ 837.498905][T17960] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3238'. [ 837.630922][ T10] usb 4-1: cannot find UAC_HEADER [ 837.696518][ T10] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 837.714411][ T10] usb 4-1: USB disconnect, device number 15 [ 838.134656][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 838.301811][ T10] usb 4-1: config 120 has too many interfaces: 48, using maximum allowed: 32 [ 838.325231][ T10] usb 4-1: config 120 has an invalid descriptor of length 48, skipping remainder of the config [ 838.336385][ T10] usb 4-1: config 120 has 0 interfaces, different from the descriptor's value: 48 [ 838.349710][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 838.365697][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.649524][ T10] usb 4-1: string descriptor 0 read error: -71 [ 838.732358][ T10] usb 4-1: USB disconnect, device number 16 [ 839.206317][T17980] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3243'. [ 839.402925][T17987] netlink: 'syz.4.3244': attribute type 3 has an invalid length. [ 839.425323][T17990] netlink: 'syz.4.3244': attribute type 3 has an invalid length. [ 839.634672][ T5942] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 840.024358][ T5942] usb 4-1: Using ep0 maxpacket: 8 [ 840.031432][ T5942] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 840.043235][ T5942] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.054004][ T5942] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 840.063566][ T5942] usb 4-1: config 0 has no interface number 0 [ 840.072080][ T5942] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 840.127410][ T5942] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 840.142972][ T5942] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 210 [ 840.158816][ T5942] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 840.174926][ T5942] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 840.188526][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.198044][ T5942] usb 4-1: Product: syz [ 840.202234][ T5942] usb 4-1: Manufacturer: syz [ 840.207184][ T5942] usb 4-1: SerialNumber: syz [ 840.221327][ T5942] usb 4-1: config 0 descriptor?? [ 840.231878][T17984] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 840.244372][ T43] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 840.253852][ T5942] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 840.375487][ T43] usb 7-1: device descriptor read/64, error -71 [ 840.394522][ T5941] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 840.541831][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3254'. [ 840.850335][ T10] usb 4-1: USB disconnect, device number 17 [ 840.942744][ T30] audit: type=1326 audit(2000000394.058:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18003 comm="syz.4.3252" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f732db8ec29 code=0x0 [ 840.970893][ T43] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 841.001121][ T5941] usb 3-1: New USB device found, idVendor=002b, idProduct=0000, bcdDevice= 0.00 [ 841.011005][ T5941] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.026197][ T5941] usb 3-1: config 0 descriptor?? [ 841.114543][ T43] usb 7-1: device descriptor read/64, error -71 [ 841.330961][T18002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 841.443397][T18002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.516985][T18022] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3256'. [ 841.614852][ T43] usb usb7-port1: attempt power cycle [ 841.944193][T18026] bridge0: entered allmulticast mode [ 841.966442][ T43] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 841.974547][T18026] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3257'. [ 842.003424][T18026] bridge_slave_1: left allmulticast mode [ 842.018128][ T43] usb 7-1: device descriptor read/8, error -71 [ 842.029505][T18026] bridge_slave_1: left promiscuous mode [ 842.053029][T18026] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.066887][T18026] bridge_slave_0: left allmulticast mode [ 842.072963][T18026] bridge_slave_0: left promiscuous mode [ 842.080842][T18026] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.136863][T18026] bridge0 (unregistering): left allmulticast mode [ 842.181728][T18028] NILFS (loop0): device size too small [ 842.265245][ T43] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 842.296494][ T43] usb 7-1: device descriptor read/8, error -71 [ 842.405467][ T43] usb usb7-port1: unable to enumerate USB device [ 842.932601][T18033] tipc: Started in network mode [ 842.940166][T18033] tipc: Node identity 8e08a67d1e4, cluster identity 4711 [ 842.947598][T18033] tipc: Enabled bearer , priority 0 [ 842.960114][T18034] syzkaller0: entered promiscuous mode [ 842.971011][T18034] syzkaller0: entered allmulticast mode [ 843.021383][T18034] tipc: Resetting bearer [ 843.025975][T18038] ttyS ttyS3: ldisc open failed (-12), clearing slot 3 [ 843.051409][T18034] tipc: Disabling bearer [ 843.234771][ T5942] usb 3-1: USB disconnect, device number 46 [ 844.989690][T18082] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 845.000400][T18082] EXT4-fs (loop2): unable to read superblock [ 845.007928][T10595] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 845.235030][T10595] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 845.245712][T10595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.258019][T10595] usb 4-1: Product: syz [ 845.267673][T10595] usb 4-1: Manufacturer: syz [ 845.275554][T10595] usb 4-1: SerialNumber: syz [ 845.291144][T10595] usb 4-1: config 0 descriptor?? [ 845.311978][T18096] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 845.526190][T10595] usb 4-1: USB disconnect, device number 18 [ 845.824397][ T5984] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 845.952616][ T10] IPVS: starting estimator thread 0... [ 846.008389][ T5984] usb 7-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 846.018050][ T5984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.033434][ T5984] pwc: Logitech ViewPort AV 100 webcam detected. [ 846.044687][T18117] IPVS: using max 35 ests per chain, 84000 per kthread [ 846.208016][T18133] sg_write: data in/out 32731/10 bytes for SCSI command 0xfd-- guessing data in; [ 846.208016][T18133] program syz.0.3282 not setting count and/or reply_len properly [ 846.414017][T18142] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 846.423334][T18142] exFAT-fs (loop3): unable to read boot sector [ 846.429712][T18142] exFAT-fs (loop3): failed to read boot sector [ 846.436656][T18142] exFAT-fs (loop3): failed to recognize exfat type [ 846.467485][ T5984] pwc: send_video_command error -71 [ 846.478996][ T5984] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 846.516994][ T5984] Philips webcam 7-1:127.0: probe with driver Philips webcam failed with error -71 [ 846.528838][ T5984] usb 7-1: USB disconnect, device number 18 [ 848.193316][T18177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3293'. [ 848.670386][T18184] nbd: must specify a size in bytes for the device [ 848.683796][T18184] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3295'. [ 848.855623][T18184] IPVS: set_ctl: invalid protocol: 33 172.20.20.187:20004 [ 849.145750][T18194] netlink: 'syz.6.3298': attribute type 19 has an invalid length. [ 849.229469][ T5984] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 849.458051][T15777] bridge_slave_1: left allmulticast mode [ 849.483017][T15777] bridge_slave_1: left promiscuous mode [ 849.503536][T15777] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.574568][ T5984] usb 3-1: Using ep0 maxpacket: 32 [ 849.588237][ T5984] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=fa.e4 [ 849.613647][T15777] bridge_slave_0: left allmulticast mode [ 849.634639][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.663989][ T5984] usb 3-1: Product: syz [ 849.664441][T15777] bridge_slave_0: left promiscuous mode [ 849.670405][ T5984] usb 3-1: Manufacturer: syz [ 849.674062][T15777] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.678478][ T5984] usb 3-1: SerialNumber: syz [ 849.697126][ T5984] usb 3-1: config 0 descriptor?? [ 849.705595][ T5984] yurex 3-1:0.0: Could not find endpoints [ 849.915396][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 849.963973][ T5984] usb 3-1: USB disconnect, device number 47 [ 850.104745][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 850.113903][ T10] usb 4-1: config 0 has an invalid interface number: 16 but max is 0 [ 850.127650][ T10] usb 4-1: config 0 has no interface number 0 [ 850.142793][ T10] usb 4-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 850.176726][ T10] usb 4-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 850.250284][T18208] siw: device registration error -23 [ 850.297246][ T10] usb 4-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d [ 850.358388][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.366709][ T10] usb 4-1: Product: syz [ 850.371001][ T10] usb 4-1: Manufacturer: syz [ 850.375728][ T10] usb 4-1: SerialNumber: syz [ 850.383887][ T10] usb 4-1: config 0 descriptor?? [ 850.393376][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 851.100324][ T10] snd-usb-audio 4-1:0.16: probe with driver snd-usb-audio failed with error -2 [ 851.368040][T18219] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 851.400777][T18219] EXT4-fs (loop0): unable to read superblock [ 851.435558][T18219] ext4: Unknown parameter 'smackfshat' [ 851.515704][T18219] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 851.525375][T18219] I/O error, dev loop0, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 851.534851][T18219] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 851.544669][T18219] I/O error, dev loop0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 851.554030][T18219] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 851.564545][T18219] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 851.572632][T18219] UDF-fs: Scanning with blocksize 512 failed [ 851.579801][T18219] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 851.589285][T18219] I/O error, dev loop0, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 851.600398][T18219] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 851.610266][T18219] I/O error, dev loop0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 851.619875][T18219] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 851.629491][T18219] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 851.637194][T18219] UDF-fs: Scanning with blocksize 1024 failed [ 851.643654][T18219] I/O error, dev loop0, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 851.653247][T18219] I/O error, dev loop0, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 851.663904][T18219] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 851.673696][T18219] I/O error, dev loop0, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 851.683218][T18219] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 851.692904][T18219] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 851.700715][T18219] UDF-fs: Scanning with blocksize 2048 failed [ 851.707645][T18219] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 851.717456][T18219] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 851.727203][T18219] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 851.735197][T18219] UDF-fs: Scanning with blocksize 4096 failed [ 851.741277][T18219] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 852.069870][T18222] sctp: [Deprecated]: syz.2.3309 (pid 18222) Use of struct sctp_assoc_value in delayed_ack socket option. [ 852.069870][T18222] Use struct sctp_sack_info instead [ 852.681908][ T24] usb 4-1: USB disconnect, device number 19 [ 852.932047][T15777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 852.944604][T15777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 852.976606][T15777] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 852.990027][T15777] bond0 (unregistering): Released all slaves [ 853.318470][T15777] bond1 (unregistering): Released all slaves [ 853.434408][T15777] tipc: Left network mode [ 853.484417][T15777] IPVS: stopping master sync thread 8605 ... [ 853.991188][T15777] hsr_slave_0: left promiscuous mode [ 853.998949][T15777] hsr_slave_1: left promiscuous mode [ 854.013081][T15777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 854.031687][T15777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 854.059534][T15777] veth1_macvtap: left promiscuous mode [ 854.065620][T15777] veth0_macvtap: left promiscuous mode [ 854.071278][T15777] veth1_vlan: left promiscuous mode [ 854.076646][T15777] veth0_vlan: left promiscuous mode [ 854.658099][T15777] team0 (unregistering): Port device team_slave_1 removed [ 854.712723][T15777] team0 (unregistering): Port device team_slave_0 removed [ 855.584564][T15777] IPVS: stop unused estimator thread 0... [ 865.610403][T18230] binder: 18227:18230 ioctl 81f8943c 2000000ba600 returned -22 [ 865.619650][T18230] binder: 18227:18230 ioctl 81f8943c 2000000c0800 returned -22 [ 866.423878][T18235] netlink: 'syz.0.3313': attribute type 1 has an invalid length. [ 866.432419][T18235] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3313'. [ 866.473022][T18237] blk_print_req_error: 3 callbacks suppressed [ 866.473041][T18237] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 866.489880][T18237] FAT-fs (loop3): unable to read boot sector [ 866.656714][T18244] netlink: 'syz.6.3318': attribute type 2 has an invalid length. [ 866.789648][T18253] netlink: 'syz.0.3319': attribute type 10 has an invalid length. [ 866.822752][T18253] team0: Port device syz_tun added [ 866.947109][ T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 867.104355][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 867.549253][ T24] usb 4-1: config 1 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 237, changing to 11 [ 867.567482][ T24] usb 4-1: config 1 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 867.602077][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 867.779045][ T24] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 867.789275][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 867.799294][ T24] usb 4-1: Product: syz [ 867.804043][ T24] usb 4-1: Manufacturer: syz [ 867.815599][ T24] usb 4-1: SerialNumber: syz [ 868.050635][ T24] usbhid 4-1:1.0: can't add hid device: -71 [ 868.067223][ T24] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 868.126826][ T24] usb 4-1: USB disconnect, device number 20 [ 868.236099][T18267] nfs: Unknown parameter '6' [ 868.599993][T18273] overlayfs: failed to resolve './file1': -2 [ 868.641580][T18273] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3325'. [ 868.666237][T18273] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3325'. [ 868.846807][ T5883] IPVS: starting estimator thread 0... [ 868.954639][T18284] IPVS: using max 30 ests per chain, 72000 per kthread [ 869.808520][T18304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3332'. [ 869.811867][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.099143][T18314] input: syz1 as /devices/virtual/input/input45 [ 873.097387][T18334] Bluetooth: MGMT ver 1.23 [ 873.185076][T18336] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3340'. [ 873.203299][T18336] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3340'. [ 874.284983][T18348] netlink: 'syz.3.3342': attribute type 1 has an invalid length. [ 874.609421][T18356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.673439][T18356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 874.734444][ T10] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 874.920472][T18362] ntfs3(loop6): try to read out of volume at offset 0x0 [ 874.936769][ T10] usb 3-1: config 0 has an invalid interface number: 3 but max is 0 [ 874.960695][ T10] usb 3-1: config 0 has no interface number 0 [ 874.967578][ T10] usb 3-1: New USB device found, idVendor=1199, idProduct=6821, bcdDevice=98.59 [ 874.988500][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.119908][ T10] usb 3-1: config 0 descriptor?? [ 875.127750][ T10] hub 3-1:0.3: bad descriptor, ignoring hub [ 875.133699][ T10] hub 3-1:0.3: probe with driver hub failed with error -5 [ 875.152928][ T10] sierra 3-1:0.3: Sierra USB modem converter detected [ 875.625490][ T10] usb 3-1: Sierra USB modem converter now attached to ttyUSB0 [ 875.665318][ T10] usb 3-1: USB disconnect, device number 48 [ 875.738691][ T10] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 875.758967][ T10] sierra 3-1:0.3: device disconnected [ 876.059942][T18385] dummy0: entered promiscuous mode [ 876.065498][ T43] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 876.143487][T18391] vivid-007: ================= START STATUS ================= [ 876.243163][T18391] vivid-007: Enable Output Cropping: true [ 876.251474][T18391] vivid-007: Enable Output Composing: true [ 876.258247][T18391] vivid-007: Enable Output Scaler: true [ 876.266756][T18391] vivid-007: Tx RGB Quantization Range: Automatic [ 876.274047][T18391] vivid-007: Transmit Mode: HDMI [ 876.279120][T18384] dummy0: left promiscuous mode [ 876.283154][T18391] vivid-007: Hotplug Present: 0x00000000 [ 876.296991][T18391] vivid-007: RxSense Present: 0x00000000 [ 876.305279][T18391] vivid-007: EDID Present: 0x00000000 [ 876.310733][T18391] vivid-007: ================== END STATUS ================== [ 876.913677][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 876.988205][ T5880] Bluetooth: hci3: adv larger than maximum supported [ 876.988278][ T5880] Bluetooth: hci3: Malformed LE Event: 0x0d [ 878.165071][T18414] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 878.175412][T18414] EXT4-fs (loop0): unable to read superblock [ 878.690960][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 878.706453][ T43] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 878.718845][T18416] binder: 18411:18416 ioctl c0306201 200000000300 returned -14 [ 878.732858][ T43] usb 4-1: can't read configurations, error -71 [ 879.075058][T18438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3367'. [ 879.084076][T18438] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3367'. [ 879.461221][T18444] sp0: Synchronizing with TNC [ 880.562196][T18467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3374'. [ 881.379340][T18478] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 881.484014][T18477] virt_wifi0 speed is unknown, defaulting to 1000 [ 882.411509][T18503] syz_tun: entered promiscuous mode [ 882.417217][T18503] macsec1: entered allmulticast mode [ 882.422675][T18503] syz_tun: entered allmulticast mode [ 882.434825][T18503] syz_tun: left allmulticast mode [ 882.439935][T18503] syz_tun: left promiscuous mode [ 882.484526][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 882.521649][ T5883] IPVS: starting estimator thread 0... [ 882.614441][T18506] IPVS: using max 27 ests per chain, 64800 per kthread [ 882.644517][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 882.654464][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 882.699443][T18511] 9pnet_fd: Insufficient options for proto=fd [ 882.734918][ T24] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 882.745059][ T24] usb 7-1: can't read configurations, error -71 [ 883.216997][ T5941] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 883.504676][ T5941] usb 3-1: Using ep0 maxpacket: 32 [ 883.512976][ T5941] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 883.547168][ T5941] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 883.560341][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 883.588771][ T5941] usb 3-1: Product: syz [ 883.595610][ T5941] usb 3-1: Manufacturer: syz [ 883.604798][ T5941] usb 3-1: SerialNumber: syz [ 883.618868][ T5941] usb 3-1: config 0 descriptor?? [ 883.625104][T18515] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 883.641014][ T5941] hub 3-1:0.0: bad descriptor, ignoring hub [ 883.663505][ T5941] hub 3-1:0.0: probe with driver hub failed with error -5 [ 883.851577][T18515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 883.872401][T18515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.128836][ T24] usb 3-1: USB disconnect, device number 49 [ 884.173430][T18545] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 884.183249][T18545] hfsplus: unable to find HFS+ superblock [ 884.197888][T18547] random: crng reseeded on system resumption [ 884.429171][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3402'. [ 884.445703][T18558] ipvlan0: entered promiscuous mode [ 884.452212][T18558] ipvlan0: left promiscuous mode [ 884.503851][T18560] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 884.594770][T18564] virt_wifi0 speed is unknown, defaulting to 1000 [ 884.737085][T18570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 884.746190][T18570] EXT4-fs: Ignoring removed nomblk_io_submit option [ 884.753359][T18570] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 884.763925][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 884.771981][T18570] EXT4-fs (loop0): unable to read superblock [ 884.926707][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 884.933799][ T24] usb 4-1: config 128 has an invalid interface number: 185 but max is 0 [ 884.944399][ T24] usb 4-1: config 128 has no interface number 0 [ 884.954170][ T24] usb 4-1: New USB device found, idVendor=04e6, idProduct=1010, bcdDevice=1c.9e [ 884.963379][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.973529][ T24] usb 4-1: Product: syz [ 884.977957][ T24] usb 4-1: Manufacturer: syz [ 884.983269][ T24] usb 4-1: SerialNumber: syz [ 885.083979][ T24] ums-usbat 4-1:128.185: USB Mass Storage device detected [ 885.293139][ T24] ums-usbat 4-1:128.185: Quirks match for vid 04e6 pid 1010: 1 [ 885.346222][T18558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.555240][T18558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.819009][ T5942] usb 4-1: USB disconnect, device number 23 [ 886.192555][T18590] __vm_enough_memory: pid: 18590, comm: syz.6.3408, bytes: 4115879641088 not enough memory for the allocation [ 886.958579][T18590] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 887.244516][T18578] Bluetooth: hci0: command 0x0406 tx timeout [ 888.368119][T18606] ntfs3: Unknown parameter 'ÿÿÿÿ' [ 888.428826][T18606] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 888.481399][T18603] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 888.551172][T18603] FAT-fs (loop2): unable to read boot sector [ 890.105291][T10595] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 890.144203][T18629] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 890.156662][T18629] hfsplus: unable to find HFS+ superblock [ 890.170078][T18631] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 890.180220][T18631] FAT-fs (loop4): unable to read boot sector [ 890.287273][T10595] usb 4-1: Using ep0 maxpacket: 32 [ 890.294340][T10595] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 890.314640][T10595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.338372][T10595] usb 4-1: config 0 descriptor?? [ 890.358262][T10595] gspca_main: sunplus-2.14.0 probing 041e:400b [ 891.032984][T10595] gspca_sunplus: reg_r err -71 [ 891.052416][T10595] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 891.066795][T10595] usb 4-1: USB disconnect, device number 24 [ 891.762339][T18668] I/O error, dev loop0, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 891.772278][T18668] EXT4-fs (loop0): unable to read superblock [ 892.004375][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 892.639456][T18681] virt_wifi0 speed is unknown, defaulting to 1000 [ 892.650823][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 892.658449][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.678830][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.692395][T18682] netlink: 'syz.0.3435': attribute type 12 has an invalid length. [ 892.724534][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 892.746519][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.772254][ T24] usb 4-1: config 0 descriptor?? [ 892.787880][T18685] sctp: [Deprecated]: syz.0.3435 (pid 18685) Use of int in max_burst socket option. [ 892.787880][T18685] Use struct sctp_assoc_value instead [ 892.808962][ T24] hub 4-1:0.0: USB hub found [ 892.987262][ T24] hub 4-1:0.0: 1 port detected [ 893.144936][ T5942] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 893.295370][ T5942] usb 7-1: Using ep0 maxpacket: 32 [ 893.303198][ T5942] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 893.311706][ T5942] usb 7-1: config 0 has no interface number 0 [ 893.320105][ T10] kernel read not supported for file /dsp (pid: 10 comm: kworker/0:1) [ 893.320605][ T5942] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 893.335079][T18683] [U]  [ 893.337920][ T5942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.354059][ T5942] usb 7-1: Product: syz [ 893.358498][ T5942] usb 7-1: Manufacturer: syz [ 893.363766][ T5942] usb 7-1: SerialNumber: syz [ 893.505531][ T5942] usb 7-1: config 0 descriptor?? [ 893.523308][ T5942] smsc95xx v2.0.0 [ 893.669217][T18696] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3440'. [ 893.937056][ T5942] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 894.003725][ T5942] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 894.152910][T18687] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 894.185248][T18687] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 894.210038][T18687] comedi comedi3: 8255: I/O port conflict (0x401,4) [ 894.218625][T18703] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 894.228696][ T24] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 894.234592][T18687] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 894.238379][ T24] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 894.325966][ T24] usbhid 4-1:0.0: can't add hid device: -32 [ 894.362448][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 894.498238][ T24] usb 4-1: USB disconnect, device number 25 [ 894.558973][T10595] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 894.932124][ T5942] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 894.968003][ T5942] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 895.022028][ T5942] usb 7-1: USB disconnect, device number 21 [ 896.451309][T15782] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.573133][T18703] BTRFS error: invalid value 0 for thread_pool [ 896.594843][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 896.613192][T18722] netlink: 'syz.6.3449': attribute type 10 has an invalid length. [ 896.649718][T18722] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.665920][T18722] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.754585][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 896.763735][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 896.799129][ T10] usb 4-1: config 4 has an invalid interface number: 147 but max is 0 [ 896.813252][ T10] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 896.828133][ T10] usb 4-1: config 4 has no interface number 0 [ 896.838371][ T10] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 896.852583][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 896.872920][ T10] usb 4-1: Product: syz [ 896.884049][ T10] usb 4-1: Manufacturer: syz [ 896.894561][ T10] usb 4-1: SerialNumber: syz [ 897.009623][T18727] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 897.035917][T18727] MINIX-fs: unable to read superblock [ 897.218936][ T10] uvcvideo 4-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 897.410033][ T10] uvcvideo 4-1:4.147: No valid video chain found. [ 897.520270][ T10] usb 4-1: USB disconnect, device number 26 [ 898.191599][T18741] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 898.191599][T18741] program syz.0.3450 not setting count and/or reply_len properly [ 898.434559][ T5984] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 898.598682][ T5984] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 899.696008][ T5984] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 899.828129][ T5984] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 899.828947][T18754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3457'. [ 899.853890][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.886384][ T5984] usb 4-1: Product: syz [ 899.891411][ T5984] usb 4-1: Manufacturer: syz [ 899.910271][T18754] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3457'. [ 899.924734][ T5984] usb 4-1: SerialNumber: syz [ 899.961522][ T5984] cdc_mbim 4-1:1.0: skipping garbage [ 900.073793][T18761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3457'. [ 900.175305][T18740] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 900.424325][ T43] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 900.485639][ T5984] cdc_mbim 4-1:1.0: bind() failure [ 900.539344][ T5984] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 900.567694][ T5984] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 900.585216][T15782] vlan2: left allmulticast mode [ 900.588679][ T5984] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 900.590569][T15782] dummy0: left allmulticast mode [ 900.606582][T15782] vlan2: left promiscuous mode [ 900.616152][T15782] dummy0: left promiscuous mode [ 900.621513][T15782] bridge0: port 3(vlan2) entered disabled state [ 900.628615][ T43] usb 3-1: Using ep0 maxpacket: 8 [ 900.640847][ T5984] usb 4-1: USB disconnect, device number 27 [ 900.645924][ T43] usb 3-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 900.661851][T15782] bridge_slave_1: left allmulticast mode [ 900.671897][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.701497][T15782] bridge_slave_1: left promiscuous mode [ 900.717930][T15782] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.729728][ T43] usb 3-1: Product: syz [ 900.739474][ T43] usb 3-1: Manufacturer: syz [ 900.753071][T15782] bridge_slave_0: left allmulticast mode [ 900.771821][ T43] usb 3-1: SerialNumber: syz [ 900.782323][T15782] bridge_slave_0: left promiscuous mode [ 900.797673][ T43] usb 3-1: config 0 descriptor?? [ 900.805230][T15782] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.828686][ T43] pwc: Philips PCVC720K/40 (ToUCam XS) USB webcam detected. [ 901.413173][T18766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 901.563772][T18766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 901.747769][ T43] pwc: send_video_command error -71 [ 901.753154][ T43] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 901.761565][ T43] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 901.774092][ T43] usb 3-1: USB disconnect, device number 51 [ 902.891042][T15782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 902.904863][T15782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 902.921374][T15782] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 902.932743][T15782] bond0 (unregistering): Released all slaves [ 902.950513][T15782] bond1 (unregistering): Released all slaves [ 902.996389][T15782] bond2 (unregistering): Released all slaves [ 903.260686][T18806] 9pnet_fd: Insufficient options for proto=fd [ 903.274981][T18806] sctp: [Deprecated]: syz.6.3471 (pid 18806) Use of int in maxseg socket option. [ 903.274981][T18806] Use struct sctp_assoc_value instead [ 903.442673][T15782] IPVS: stopping master sync thread 13715 ... [ 904.102148][T18828] netlink: 'syz.6.3478': attribute type 1 has an invalid length. [ 904.167618][T18828] bond2: (slave bridge1): Enslaving as an active interface with a down link [ 904.315306][T18833] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3480'. [ 905.774460][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 905.954696][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 906.104389][T18578] Bluetooth: hci1: command tx timeout [ 906.265795][ T24] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 906.340669][ T24] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 906.384369][ T24] usb 4-1: config 1 has no interface number 1 [ 906.390612][ T24] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 906.473797][ T24] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 906.956139][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 906.985105][T15782] hsr_slave_0: left promiscuous mode [ 907.014088][T15782] hsr_slave_1: left promiscuous mode [ 907.019585][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.062535][ T24] usb 4-1: Product: syz [ 907.063882][T15782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 907.087315][ T24] usb 4-1: Manufacturer: syz [ 907.115198][ T24] usb 4-1: SerialNumber: syz [ 907.120056][T15782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.172415][T15782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 907.215337][T15782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.359728][T15782] veth1_macvtap: left promiscuous mode [ 907.374450][ T24] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 907.384824][T15782] veth0_macvtap: left promiscuous mode [ 907.395092][ T24] usb 4-1: 2:1: All rates were zero [ 907.400784][T15782] veth1_vlan: left promiscuous mode [ 907.408739][T15782] veth0_vlan: left promiscuous mode [ 907.423467][ T24] usb 4-1: USB disconnect, device number 28 [ 1012.444280][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1012.451263][ C1] rcu: 0-...!: (1 GPs behind) idle=9e2c/1/0x4000000000000000 softirq=115864/115865 fqs=1 [ 1012.462772][ C1] rcu: (detected by 1, t=10505 jiffies, g=91033, q=521 ncpus=2) [ 1012.470516][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1012.470549][ C0] NMI backtrace for cpu 0 [ 1012.470574][ C0] CPU: 0 UID: 0 PID: 18879 Comm: syz.4.3490 Not tainted syzkaller #0 PREEMPT(full) [ 1012.470593][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1012.470605][ C0] RIP: 0010:rcu_is_watching+0x1c/0xb0 [ 1012.470635][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 65 ff 05 10 1d 1d 11 e8 db 87 de 09 89 c3 83 f8 08 73 65 <49> bf 00 00 00 00 00 fc ff df 4c 8d 34 dd d0 ad dc 8d 4c 89 f0 48 [ 1012.470650][ C0] RSP: 0018:ffffc90000007c50 EFLAGS: 00000093 [ 1012.470665][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: f60402dbc7fe0800 [ 1012.470677][ C0] RDX: ffff88802c455ac0 RSI: ffffffff8c03aa40 RDI: ffffffff8c03aa00 [ 1012.470689][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff89a340f8 [ 1012.470701][ C0] R10: dffffc0000000000 R11: ffffed100ad8665e R12: ffff888056c33360 [ 1012.470714][ C0] R13: ffff888056c33000 R14: 1bcbc6f7e6f1bc3d R15: ffff888042db9800 [ 1012.470727][ C0] FS: 00007f732e9a56c0(0000) GS:ffff8881259e7000(0000) knlGS:0000000000000000 [ 1012.470747][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1012.470759][ C0] CR2: 00002000003d9030 CR3: 00000000784ec000 CR4: 00000000003526f0 [ 1012.470773][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1012.470783][ C0] DR3: 0000000000009292 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1012.470795][ C0] Call Trace: [ 1012.470803][ C0] [ 1012.470811][ C0] ? advance_sched+0x9f8/0xc90 [ 1012.470834][ C0] advance_sched+0xa31/0xc90 [ 1012.470860][ C0] ? __pfx_advance_sched+0x10/0x10 [ 1012.470877][ C0] __hrtimer_run_queues+0x52c/0xc60 [ 1012.470909][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1012.470930][ C0] ? read_tsc+0x9/0x20 [ 1012.470954][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 1012.470988][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 1012.471014][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1012.471034][ C0] [ 1012.471040][ C0] [ 1012.471047][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1012.471065][ C0] RIP: 0010:do_syscall_64+0xc3/0xfa0 [ 1012.471084][ C0] Code: 00 48 8b 7d 08 48 89 7b 18 e8 b9 72 00 00 0f 1f 44 00 00 0f 1f 44 00 00 90 e8 49 12 43 f6 90 90 e8 f2 11 43 f6 fb 49 8b 57 08 c2 3f 74 0e 4c 89 f7 4c 89 ee e8 cd ed 25 f6 49 89 c4 90 90 41 [ 1012.471099][ C0] RSP: 0018:ffffc9000b70fee0 EFLAGS: 00000282 [ 1012.471112][ C0] RAX: f60402dbc7fe0800 RBX: ffffc9000b70fee0 RCX: f60402dbc7fe0800 [ 1012.471125][ C0] RDX: 0000000000000000 RSI: ffffffff8dba2d53 RDI: ffffffff8c03aa60 [ 1012.471137][ C0] RBP: ffffc9000b70ff38 R08: ffffffff8fc39677 R09: 1ffffffff1f872ce [ 1012.471150][ C0] R10: dffffc0000000000 R11: fffffbfff1f872cf R12: 00000000000000ca [ 1012.471162][ C0] R13: 00000000000000ca R14: ffffc9000b70ff48 R15: ffff88802c455ac0 [ 1012.471182][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1012.471200][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.471216][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1012.471233][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.471249][ C0] RIP: 0033:0x7f732db8ec29 [ 1012.471265][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1012.471278][ C0] RSP: 002b:00007f732e9a50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1012.471294][ C0] RAX: ffffffffffffffda RBX: 00007f732ddd5fa8 RCX: 00007f732db8ec29 [ 1012.471306][ C0] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f732ddd5fac [ 1012.471317][ C0] RBP: 00007f732ddd5fa0 R08: 7fffffffffffffff R09: 0000000000000000 [ 1012.471329][ C0] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 1012.471339][ C0] R13: 00007f732ddd6038 R14: 00007ffd0f8257d0 R15: 00007ffd0f8258b8 [ 1012.471359][ C0] [ 1012.471542][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g91033 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1012.853236][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1012.863205][ C1] rcu: RCU grace-period kthread stack dump: [ 1012.869083][ C1] task:rcu_preempt state:R running task stack:26464 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1012.882572][ C1] Call Trace: [ 1012.885859][ C1] [ 1012.888797][ C1] __schedule+0x1798/0x4cc0 [ 1012.893325][ C1] ? __lock_acquire+0xab9/0xd20 [ 1012.898182][ C1] ? __pfx___schedule+0x10/0x10 [ 1012.903048][ C1] ? schedule+0x91/0x360 [ 1012.907292][ C1] schedule+0x165/0x360 [ 1012.911453][ C1] schedule_timeout+0x12b/0x270 [ 1012.916388][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1012.921761][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1012.927687][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1012.932981][ C1] ? prepare_to_swait_event+0x341/0x380 [ 1012.938539][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 1012.943419][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1012.949329][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1012.954623][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1012.959825][ C1] ? finish_swait+0xcd/0x1f0 [ 1012.964510][ C1] rcu_gp_kthread+0x99/0x390 [ 1012.969107][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1012.974311][ C1] ? __kthread_parkme+0x7b/0x200 [ 1012.979245][ C1] ? __kthread_parkme+0x1a1/0x200 [ 1012.984270][ C1] kthread+0x711/0x8a0 [ 1012.988354][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1012.993556][ C1] ? __pfx_kthread+0x10/0x10 [ 1012.998146][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1013.003349][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1013.008550][ C1] ? __pfx_kthread+0x10/0x10 [ 1013.013145][ C1] ret_from_fork+0x4bc/0x870 [ 1013.017744][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1013.022869][ C1] ? __switch_to_asm+0x39/0x70 [ 1013.027634][ C1] ? __switch_to_asm+0x33/0x70 [ 1013.032401][ C1] ? __pfx_kthread+0x10/0x10 [ 1013.036994][ C1] ret_from_fork_asm+0x1a/0x30 [ 1013.041786][ C1] [ 1013.044804][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1013.051125][ C1] CPU: 1 UID: 0 PID: 18850 Comm: syz.6.3483 Not tainted syzkaller #0 PREEMPT(full) [ 1013.060489][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1013.070540][ C1] RIP: 0010:smp_call_function_many_cond+0xd33/0x12d0 [ 1013.077227][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 36 79 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 e1 74 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 c5 74 [ 1013.096826][ C1] RSP: 0018:ffffc9000b427340 EFLAGS: 00000293 [ 1013.102893][ C1] RAX: ffffffff81b4645b RBX: 1ffff110170c8441 RCX: ffff888027a6bc80 [ 1013.110863][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1013.118830][ C1] RBP: ffffc9000b4274c0 R08: ffffffff8fc39677 R09: 1ffffffff1f872ce [ 1013.126800][ C1] R10: dffffc0000000000 R11: fffffbfff1f872cf R12: ffff8880b8642208 [ 1013.134787][ C1] R13: dffffc0000000000 R14: ffff8880b873b200 R15: 0000000000000000 [ 1013.142861][ C1] FS: 0000000000000000(0000) GS:ffff888125ae7000(0000) knlGS:0000000000000000 [ 1013.151965][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1013.158554][ C1] CR2: 0000200000404030 CR3: 000000000e138000 CR4: 00000000003526f0 [ 1013.166525][ C1] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000081 [ 1013.174493][ C1] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1013.182457][ C1] Call Trace: [ 1013.185731][ C1] [ 1013.188745][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1013.193958][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1013.200303][ C1] ? rcu_is_watching+0x15/0xb0 [ 1013.205073][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1013.210269][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 1013.215387][ C1] flush_tlb_mm_range+0x6b1/0x12d0 [ 1013.220505][ C1] ? free_pgd_range+0x144b/0x14c0 [ 1013.225528][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1013.231081][ C1] tlb_flush_mmu+0x1a7/0x680 [ 1013.235675][ C1] tlb_finish_mmu+0xc3/0x1d0 [ 1013.240261][ C1] ? free_pgd_range+0x144b/0x14c0 [ 1013.245288][ C1] free_ldt_pgtables+0x17b/0x320 [ 1013.250239][ C1] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 1013.255817][ C1] ? down_read+0x1ad/0x2e0 [ 1013.260256][ C1] exit_mmap+0x174/0xb40 [ 1013.264508][ C1] ? uprobe_clear_state+0x20f/0x290 [ 1013.269717][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1013.274488][ C1] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1013.280149][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1013.284850][ C1] ? uprobe_clear_state+0x27c/0x290 [ 1013.290143][ C1] __mmput+0x118/0x430 [ 1013.294220][ C1] exit_mm+0x1da/0x2c0 [ 1013.298298][ C1] ? __pfx_exit_mm+0x10/0x10 [ 1013.302889][ C1] ? rcu_is_watching+0x15/0xb0 [ 1013.307666][ C1] do_exit+0x648/0x2300 [ 1013.311836][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1013.316865][ C1] ? __pfx_do_exit+0x10/0x10 [ 1013.321472][ C1] do_group_exit+0x21c/0x2d0 [ 1013.326064][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1013.331267][ C1] get_signal+0x1285/0x1340 [ 1013.335794][ C1] arch_do_signal_or_restart+0xa0/0x790 [ 1013.341343][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1013.347513][ C1] ? exit_to_user_mode_loop+0x40/0x130 [ 1013.352975][ C1] exit_to_user_mode_loop+0x72/0x130 [ 1013.358266][ C1] do_syscall_64+0x2bd/0xfa0 [ 1013.362856][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1013.368055][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.374119][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1013.378799][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.384703][ C1] RIP: 0033:0x7f0dc598ec29 [ 1013.389121][ C1] Code: Unable to access opcode bytes at 0x7f0dc598ebff. [ 1013.396136][ C1] RSP: 002b:00007f0dc3bd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1013.404634][ C1] RAX: 0000000000010106 RBX: 00007f0dc5bd6090 RCX: 00007f0dc598ec29 [ 1013.412601][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1013.420569][ C1] RBP: 00007f0dc5a11e41 R08: 0000000000000000 R09: 0000000000000000 [ 1013.428536][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1013.436510][ C1] R13: 00007f0dc5bd6128 R14: 00007f0dc5bd6090 R15: 00007ffcb2cac358 [ 1013.444500][ C1]