last executing test programs: 7m29.904176172s ago: executing program 4 (id=297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_procfs(0x0, 0x0) sendmsg$key(r1, 0x0, 0x40040) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x177) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4620040000000000000000000002003e00ebffffff7c000000000000004000000000000000820000000000000000000000090038000100feff02000300030000000f000000080000000000f6fffe070000000000000000000000000000e5"], 0xed) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0xff32, &(0x7f00000001c0)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_open_pts(0xffffffffffffffff, 0x420600) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) accept$ax25(r1, 0x0, &(0x7f00000000c0)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x120, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000001880)="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", 0xf53}, {&(0x7f0000000280)="7ef94abd985807a49d19bc8d00a98ea7a8092c39bdb2", 0x16}, {&(0x7f00000002c0)="7af8a8ac3e9cff598422c68efc79abb567c109c09c93ffaa3d4f53e2c1c05dd92c7085ad04e20efe1d4f544aad47335064", 0x31}], 0x3, 0x2001, 0x2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 7m29.056303878s ago: executing program 4 (id=299): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f0000000180)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, 0x0, 0x4000080) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) bind$unix(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, 0x0, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x208000, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r4, &(0x7f0000000080)={0x2, @short={0x2, 0xffff}}, 0x66) io_uring_register$IORING_REGISTER_NAPI(0xffffffffffffffff, 0x1b, 0x0, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) dup(r0) 7m27.526632053s ago: executing program 4 (id=302): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) pipe2$watch_queue(&(0x7f0000000140), 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffffffffffffa8, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x80047437, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) 7m26.487011168s ago: executing program 4 (id=303): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x13, 0x0, 0xe, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "e7431ae0778a8e17e2000000000000ffff0000000000000000000000000500", [0x1f00000000000000, 0x2]}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000400000000000004400000000009500000000000000153cfd5f8b2e81f14585725747d32eeec4abc8e5ecfc90a03d27d85e6c7c115bfff53b2c3153b727426ad2e2912a35debe01de6a8cdea282ece05f3d6ccfc11d9b41de6603fb9916627ea082395f1e786f57f9558d96d5503c0d51e9d8322b14080b6a487d0c6c958fc652552417de402ad4cff0cd2eda00b8b71746a5c5430d6365fcb367fe9ae5b9ecac9fc6d032deea190f5ba44c9dd5"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000480), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000400)={0x50, 0x0, r5, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r6, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r6, r7, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 7m25.935232116s ago: executing program 4 (id=307): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 7m25.680504119s ago: executing program 4 (id=308): io_setup(0x6, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) 7m9.950480771s ago: executing program 32 (id=308): io_setup(0x6, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) quotactl_fd$Q_GETFMT(0xffffffffffffffff, 0xffffffff80000402, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000000000000001"], 0x14}}, 0x0) 6m55.476572575s ago: executing program 1 (id=353): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x3, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) r1 = request_key(0x0, 0x0, 0x0, 0xfffffffffffffffc) socket$nl_generic(0x10, 0x3, 0x10) keyctl$dh_compute(0x17, &(0x7f00000003c0)={0x0, r1}, &(0x7f0000000500)=""/62, 0x3e, &(0x7f0000000480)={&(0x7f0000000440)={'crct10dif-arm64-ce\x00'}}) mount$tmpfs(0x0, 0x0, 0x0, 0x84, &(0x7f0000000580)=ANY=[]) listen(0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000300)="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", 0x987}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e000000"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="12000000"], 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001bc0)=ANY=[@ANYBLOB="300000000d0a0108e823cb96439c1a400a0000010900020073797a31000000000900010073797a310000000004b8927b938699ccc6f62908000300f404fcc3ff9cb3c9a60faf9243e251a5a97fd24671488fb998f11bbf3394862432f9ca5d17ef2d69c9d5d5426da1b1855c81e144dccc0238059fc591"], 0x30}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[], 0x10) recvmsg(r0, &(0x7f0000000000)={&(0x7f0000000240)=@alg, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000740)=""/96, 0x60}, {&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/233, 0xe9}, {&(0x7f00000018c0)=""/150, 0x96}, {&(0x7f0000001980)=""/65, 0x41}], 0x6, &(0x7f0000001a80)=""/161, 0xa1}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, 0x0, 0x0}, 0x20) 6m54.486155156s ago: executing program 1 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_procfs(0x0, 0x0) sendmsg$key(r1, 0x0, 0x40040) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x177) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4620040000000000000000000002003e00ebffffff7c000000000000004000000000000000820000000000000000000000090038000100feff02000300030000000f000000080000000000f6fffe070000000000000000000000000000e5"], 0xed) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0xff32, &(0x7f00000001c0)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_open_pts(0xffffffffffffffff, 0x420600) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) accept$ax25(r1, &(0x7f0000000380)={{0x3, @default}, [@default, @remote, @default, @remote, @rose, @null, @remote, @bcast]}, &(0x7f00000000c0)=0x48) r4 = openat$kvm(0xffffffffffffff9c, 0x0, 0x120, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000001880)="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", 0xf53}, {&(0x7f0000000280)="7ef94abd985807a49d19bc8d00a98ea7a8092c39bdb2", 0x16}, {&(0x7f00000002c0)="7af8a8ac3e9cff598422c68efc79abb567c109c09c93ffaa3d4f53e2c1c05dd92c7085ad04e20efe1d4f544aad47335064", 0x31}], 0x3, 0x2001, 0x2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 6m53.755690985s ago: executing program 1 (id=356): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) pipe2$watch_queue(&(0x7f0000000140), 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffffffffffffa8, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x80047437, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) 6m51.930030226s ago: executing program 1 (id=359): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r3, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r5, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r4, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r4}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r3, 0x0, 0x0, 0xffffffffffffffff}]) 6m49.382472909s ago: executing program 1 (id=361): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$video(0x0, 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4, 0x2008, 0xffffbfff}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200970}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000002580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f00000002c0)='./file0/file0\x00') open(&(0x7f0000000000)='./file1\x00', 0x105101, 0x95) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002540)={'wlan1\x00'}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000002000000020000000400000000000000", @ANYRES8=r3, @ANYBLOB="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", @ANYRESHEX=r3, @ANYRES64=r5, @ANYBLOB='\x00'/20, @ANYRES64=r4, @ANYBLOB="b714f3e6faf9ba02cc204ba350f1806168da78724ffecc6db95d2c829f5754879a02525e7fecef1b704fc0db9634da70df4d33d0d3bf8868e71db502423fce5806f0a4bf5bf46803de606dc6e7e2afc20b1c214ab542cc9d"], 0x50) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) 6m47.084023318s ago: executing program 1 (id=364): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e010000090581039c76755746", @ANYRESDEC], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, 0x0, 0x0, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001d00)={0x2020}, 0x2020) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 6m46.517008401s ago: executing program 33 (id=364): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d44ebb40ec188832cf690102030109021b00010000000009040000010e010000090581039c76755746", @ANYRESDEC], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, 0x0, 0x0, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001d00)={0x2020}, 0x2020) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010102000000000000000002000000240002800c000280040001003a00000014000180080001cd4bde2a0192000000000000000c001980080002"], 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 2m5.902502106s ago: executing program 5 (id=915): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x20, 0x4, 0x31384142, 0x3234564e, [0x10001, 0x4], [0x1000, 0x8], 0x13a}}) syz_init_net_socket$ax25(0x3, 0x3, 0xcd) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r5, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r5, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 2m3.817140345s ago: executing program 5 (id=918): openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x143040, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x237, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r4, @ANYBLOB="140004006e696376663000000093a4a30466a7000000610f526400000000"], 0x30}}, 0x0) 2m2.147753353s ago: executing program 5 (id=920): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_procfs(0x0, 0x0) sendmsg$key(r1, 0x0, 0x40040) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x177) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4620040000000000000000000002003e00ebffffff7c000000000000004000000000000000820000000000000000000000090038000100feff02000300030000000f000000080000000000f6fffe070000000000000000000000000000e5"], 0xed) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0xff32, &(0x7f00000001c0)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_open_pts(0xffffffffffffffff, 0x420600) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) accept$ax25(r1, &(0x7f0000000380)={{0x3, @default}, [@default, @remote, @default, @remote, @rose, @null, @remote, @bcast]}, &(0x7f00000000c0)=0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x120, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000001880)="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", 0xf53}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="7af8a8ac3e9cff598422c68efc79abb567c109c09c93ffaa3d4f53e2c1c05dd92c7085ad04e20efe1d4f544aad47335064", 0x31}], 0x3, 0x2001, 0x2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2m0.964067444s ago: executing program 5 (id=923): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000540)=[@code={0xa, 0x52, {"b3c9f0832f56360fc77cf10e66bad00466b8cc4466ef410f23346566420f38817c8aceb805000000b9006800000f01c1640fc76b25e900800000b97e0900000f32"}}], 0x52}) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000000)={[{0x3cd2ef60, 0x404, 0x1, 0xff, 0x8, 0x80, 0x8, 0xb, 0x90, 0x0, 0x7, 0x7, 0x3c5baf4e}, {0xa9, 0xd9, 0x0, 0x2, 0x7, 0x8, 0x5, 0x6, 0xb, 0x1, 0x3, 0x9, 0xf2}, {0x7fffffff, 0x4, 0xc, 0x2, 0x0, 0x2, 0x7, 0x0, 0x9, 0x4, 0x4, 0x4, 0x1}], 0x7}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)={0xcc, 0x0, 0x1}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f0000000540)=[@in_dx={0x69, 0x20, {0xe3ce, 0x2}}, @code={0xa, 0x5a, {"420f23ecf047804f0000f38aaca8080000000f32c4a2d93a748d053e41c32e41a766420f38823bc441b1689c1b0000000048b885000000000000000f23d80f21f835800000000f23f8"}}, @uexit={0x0, 0x18, 0x800}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x40000000}}, @nested_load_code={0x12e, 0x91, {0x1, "48b8e41a0000000000000f23c80f21f8350c00e0000f23f866b823000f00d866baf80cb83c485284ef66bafc0c66b8020066ef8f6970013bc744240000000000c744240200000000c7442406000000000f011424f20f32b8010000000f01c166430f205d420f01cf66baf80cb84de13c86ef66bafc0cb00fee"}}, @uexit={0x0, 0x18, 0x5}, @rdmsr={0x66, 0x18, {0x924}}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @uexit={0x0, 0x18, 0x7}, @rdmsr={0x66, 0x18, {0x203}}, @in_dx={0x69, 0x20, {0x1e53}}, @in_dx={0x69, 0x20, {0x8bcc}}], 0x223}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0x8, 0x2, 0x404, 0xffffffffefffff14, 0x3, 0x100000000, 0x7, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m58.685215572s ago: executing program 5 (id=927): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) write$binfmt_script(r4, &(0x7f0000000080)={'#! ', './file1'}, 0xb) close(r4) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) 1m57.073091643s ago: executing program 5 (id=930): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r3}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff}]) 1m41.486972725s ago: executing program 34 (id=930): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES64, @ANYRES64, @ANYRES16], 0x1, 0x374, &(0x7f0000000f80)="$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") r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) io_setup(0x7d, &(0x7f0000000600)=0x0) io_submit(r4, 0x2, &(0x7f0000001d00)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r3, &(0x7f0000000000)="96", 0xfffffe10, 0x0, 0x0, 0x0, r3}, &(0x7f0000000740)={0x0, 0x0, 0x41, 0x3, 0x0, r2, 0x0, 0x0, 0xffffffffffffffff}]) 27.341559189s ago: executing program 6 (id=1065): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, &(0x7f0000004380)={0x2020}, 0x2020) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r4 = socket$inet(0x2, 0xa, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @private=0xa010104}, 0x10) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000dc0)}], 0x1}}], 0x1, 0xc0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') pread64(r5, &(0x7f00000000c0)=""/105, 0x69, 0xfff) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, &(0x7f00000000c0)=""/43) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd2(0x0, 0x0) io_setup(0x974, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, 0x0, 0x240040, 0x8) 24.661585627s ago: executing program 6 (id=1069): r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}], 0x1) pipe2$watch_queue(0x0, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0xffffffffffffffa8, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x80047437, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, 0xffffffffffffffff, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r5 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r5, 0x40049366, 0x0) 23.54562358s ago: executing program 6 (id=1072): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) syz_io_uring_submit(0x0, 0x0, 0x0) 22.256969339s ago: executing program 7 (id=1073): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r1, 0x0, 0x0, 0x0, 0x80800}) listen(r1, 0x5) io_uring_enter(r2, 0x3517, 0xc2de, 0x9, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 21.236644518s ago: executing program 6 (id=1075): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x2, 0x2) syz_open_dev$usbfs(0x0, 0x77, 0x101301) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x1, 0x6, {0x77359400}, {0x1, 0x0, 0x5, 0x9, 0x64, 0xe, "7cf93be8"}, 0xfffffff7, 0x1, {}, 0x2}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) dup3(0xffffffffffffffff, r5, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 18.249999702s ago: executing program 0 (id=1078): openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x143040, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="140004006e696376663000000093a4a30466a7000000610f526400000000"], 0x30}}, 0x0) 18.023107061s ago: executing program 0 (id=1079): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$video(0x0, 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r2, 0x4014563c, &(0x7f0000000040)={0x9, {0xf8000000, 0x4, 0x2008, 0xffffbfff}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200970}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, &(0x7f0000002580)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c) symlinkat(&(0x7f0000000040)='./file1\x00', 0xffffffffffffff9c, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f00000002c0)='./file0/file0\x00') open(&(0x7f0000000000)='./file1\x00', 0x105101, 0x95) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002540)={'wlan1\x00'}) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0900000002000000020000000400000000000000", @ANYRES8=r3, @ANYBLOB="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", @ANYRESHEX=r3, @ANYRES64=r5, @ANYBLOB='\x00'/20, @ANYRES64=r4, @ANYBLOB="b714f3e6faf9ba02cc204ba350f1806168da78724ffecc6db95d2c829f5754879a02525e7fecef1b704fc0db9634da70df4d33d0d3bf8868e71db502423fce5806f0a4bf5bf46803de606dc6e7"], 0x50) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000000)) ioctl$KVM_RUN(r8, 0xae80, 0x0) 16.732968064s ago: executing program 6 (id=1081): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="60bc010004a701002400128009000100626f6e6400"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4040044) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) memfd_create(&(0x7f0000000380)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xc8}\xac\x06\x9c&\xf5\xe3j\xda*4\x9a1\xa0o\xa0G\xa5\xb8\xf4\x8dy\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x983U@\xf2M\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xd1\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\x9c\xa1&&\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84@\xeag\x94\x84\xd9\x1b\xc3OeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91f\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeU\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x03D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x00'/397, 0x3) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) close_range(r1, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=r8], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x4b) 16.100404218s ago: executing program 0 (id=1082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x27c4}}, './file0/../file0\x00'}) r1 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x0, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) io_uring_enter(r1, 0x847ba, 0x3f00, 0xe, 0x0, 0x0) 16.059365834s ago: executing program 3 (id=1083): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 15.434532879s ago: executing program 0 (id=1084): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) write$dsp(r2, 0x0, 0xffda) write$vhost_msg_v2(r0, &(0x7f0000002540)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) syz_open_dev$video(0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000b0a500007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578020000000000", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x9f) sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000025c0)={0xc4, 0x1a, 0x8, 0x70bd2c, 0x25dfdbfe, {0x11}, [@generic="7f87c8cdb22059203a848ddaac1b061e96ec1902b975b749b5650ee02f9b836fe8bee2487bbf65ae66dfca2158d0157cb61765040eeda7ac1b2a7a2257029531cbf7fd55c68ac049a0ce646c6f77b2714d71a45ea9a330d0784b667130f2468dc705c3", @typed={0x4, 0x144, 0x0, 0x0, @binary}, @typed={0x4, 0x34}, @typed={0x8, 0x109, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="ce2142f588cc61a71023fd2e85db28ce9f8a7f57d70c3e6962e4a6f7751a372a3cb184743d0cdfff87deb60de85641c59cc758463b59646a416975", @generic]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000040)=@ethtool_stats={0x1d, 0x6, [0x1b2b, 0x101, 0x8, 0x7, 0x3, 0x80000000000]}}) 11.091387242s ago: executing program 3 (id=1085): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x200000002) 10.973590201s ago: executing program 0 (id=1086): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) r2 = syz_open_dev$vim2m(&(0x7f0000000180), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0) socket(0x1d, 0x2, 0x6) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/wireless\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r3, &(0x7f0000004380)={0x2020}, 0x2020) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) r4 = socket$inet(0x2, 0xa, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @private=0xa010104}, 0x10) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000dc0)}], 0x1}}], 0x1, 0xc0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00') pread64(r5, &(0x7f00000000c0)=""/105, 0x69, 0xfff) ioctl$HIDIOCGDEVINFO(r0, 0x801c4803, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) eventfd2(0x0, 0x0) io_setup(0x974, &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x240040, 0x8) 9.855100273s ago: executing program 3 (id=1087): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x13, 0x0, 0xe, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "e7431ae0778a8e17e2000000000000ffff0000000000000000000000000500", [0x1f00000000000000, 0x2]}}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000400000000000004400000000009500000000000000153cfd5f8b2e81f14585725747d32eeec4abc8e5ecfc90a03d27d85e6c7c115bfff53b2c3153b727426ad2e2912a35debe01de6a8cdea282ece05f3d6ccfc11d9b41de6603fb9916627ea082395f1e786f57f9558d96d5503c0d51e9d8322b14080b6a487d0c6c958fc652552417de402ad4cff0cd2eda00b8b71746a5c5430d6365fcb367fe9ae5b9ecac9fc6d032deea190f5ba44c9dd5"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESDEC=r2], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000480), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r4, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r4, &(0x7f0000000400)={0x50, 0x0, r5, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r6, r7, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) 9.587773285s ago: executing program 7 (id=1088): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x4, 0x1c, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x8, "e80ee304ecb784ec"}]}}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x1a0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.059126458s ago: executing program 6 (id=1089): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x8010, r2, 0x1978b000) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040), 0x0, 0x40800) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r6, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) 8.997983212s ago: executing program 7 (id=1090): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x100009, 0xffffffffc2c4adcc, 0x0, 0x4, 0x0, 0x2000004, 0x0, 0x0, 0x4}}, 0x50) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYBLOB="030300000000fcffff290dbbe844b5b96e94feff0c000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "750538d1ee602ec4802a04ea7cdcd151bb2cd9893bc31f80718336d9bd3517076db9ad1f6a120d8be6d7f81cd81ec275000386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000100)=@generic={0x8}) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000000100", @ANYRES32=0x0, @ANYBLOB], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a6970"], 0x60}}, 0x0) sendmsg(r1, &(0x7f0000000440)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x6, @local, 0xe}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000100)}, {&(0x7f0000000140)="9b87a7e080d34ad499b9b36f4e70aee186d5d1e5772aa3f0467475f8094db20c5e5127a95234343b77c67c308ea9c06415fc620429d23dbfc0ef1a0e7dda683e", 0x40}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000180)="c5b755bb45e1f3c340d438006dde6f05e385d0c7f8d02d9e53cc1d31329ec33529d7017f11e4ff150c155a844235938f3e54cc915d4add4d4e356f37f84cba1e208d464bc1df12e391766e6edf700b83b4", 0x51}], 0x4, &(0x7f0000001700)=ANY=[@ANYBLOB="600000000000000084000000f7ffffff1c2cd211a6c738377413ecad1015c7b24a04613b3cf2d93fbf53703b1000f4c62137dfa60e159a4e6eb030755820677db90979fe3a9deaddeeb1aa9efe3c7b5fb7b8bfc2136bc2d9f3f8010000000000100000000000000013010000feb0ffff70000000000000000f010000090000006d8ee527374f15fac538cde3e25698a117b2ea8f7f9acfebebeb26c648b1742d0f66ce18f455175851346c8102e5790eaec776f9d12639a282d1e64fb53721c82f6cffe0583d8337ff84a5bbbd1db0a490a6a5969d90018b84d58ec320f2ce507a00000000000000d0000000000000000f0100000000000065f869128288bdcd38d8b5c5ee12184be16af530c0f7dc0aa7d03e8ab21e6b6d6b05d0a767ffa230d5e8ab0287fc8f402409c0a6188b71b6c7a951377364844a769da7ad4ce4e62fc6079f01943acc0d375f8ce53a17411d7347988dc91e8c69e4dc0293b989dfaf7b21ed33f5aad03545e63b78ca11d1c471e2a07ed5b7fcf2e99b040c62e1c95773ae31cd9edb59906dabd786fbe7cc920c95f8975e3ae268295ef53cc544d92c5acb2173a75487920ff440072aa321abf35d180000000000"], 0x1b0}, 0x8004) 8.754841329s ago: executing program 3 (id=1091): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) syz_open_dev$video(0x0, 0x8, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000000)={0x10, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x1}], 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x32}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) write$binfmt_misc(r0, &(0x7f0000000000), 0x6) 8.739441145s ago: executing program 2 (id=1092): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000020c0), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x2, {0x7, 0x29, 0x7, 0x2300c29, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x40, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x200000002) 7.296771561s ago: executing program 3 (id=1093): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = syz_open_procfs(0x0, 0x0) sendmsg$key(r1, 0x0, 0x40040) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x177) write$binfmt_elf64(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c4620040000000000000000000002003e00ebffffff7c000000000000004000000000000000820000000000000000000000090038000100feff02000300030000000f000000080000000000f6fffe070000000000000000000000000000e5"], 0xed) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0xff32, &(0x7f00000001c0)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) syz_open_pts(0xffffffffffffffff, 0x420600) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) accept$ax25(r1, &(0x7f0000000380)={{0x3, @default}, [@default, @remote, @default, @remote, @rose, @null, @remote, @bcast]}, &(0x7f00000000c0)=0x48) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x120, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000001880)="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", 0xf53}, {&(0x7f0000000280)}, {&(0x7f00000002c0)="7af8a8ac3e9cff598422c68efc79abb567c109c09c93ffaa3d4f53e2c1c05dd92c7085ad04e20efe1d4f544aad47335064", 0x31}], 0x3, 0x2001, 0x2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 7.293193289s ago: executing program 2 (id=1094): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4, 0x8010, r2, 0x1978b000) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x80) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r6, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r2, 0x627, 0x4c1, 0x43, 0x0, 0x30) 7.180112676s ago: executing program 7 (id=1095): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x27c4}}, './file0/../file0\x00'}) r1 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x0, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0xc000000, &(0x7f0000000000)=[{0x0}], 0x1, 0x12}) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) io_uring_enter(r1, 0x847ba, 0x3f00, 0xe, 0x0, 0x0) 6.851406123s ago: executing program 7 (id=1096): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 5.182892617s ago: executing program 2 (id=1097): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x36, 0x36}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x200000002) 4.851270477s ago: executing program 3 (id=1098): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x2, r1, 0x0, 0x0, 0x0, 0x80800}) listen(r1, 0x5) io_uring_enter(r2, 0x3517, 0xc2de, 0x9, 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 4.106310984s ago: executing program 0 (id=1099): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="60bc010004a701002400128009000100626f6e640000000014000280080007"], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x4040044) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) memfd_create(&(0x7f0000000380)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xc8}\xac\x06\x9c&\xf5\xe3j\xda*4\x9a1\xa0o\xa0G\xa5\xb8\xf4\x8dy\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x983U@\xf2M\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xd1\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\x9c\xa1&&\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84@\xeag\x94\x84\xd9\x1b\xc3OeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91f\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeU\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x03D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92\x00'/397, 0x3) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) close_range(r1, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000008000000e27f000001"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYRESDEC=r8], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) creat(&(0x7f0000000040)='./file0\x00', 0x4b) 3.957494586s ago: executing program 2 (id=1100): openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x143040, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x18, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x237, &(0x7f0000000240)={0x0, 0xebcc, 0x1, 0x2, 0x24e}, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f00000001c0)={0x0, 0x0, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47bc, 0x3bf6, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x0, 0xc9}}}, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000100)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r3, @ANYBLOB="140004006e696376663000000093a4a30466a7000000610f526400000000"], 0x30}}, 0x0) 3.7608126s ago: executing program 2 (id=1101): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{0x0}, {0x0}], 0x2}}], 0x1, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x100, 0x29, 0x4, {0x4, 0x1c, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x72, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252f6836a0d67a7782c675a838ea989e567e4774de1f52d188e0b0888c5"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0x8, "e80ee304ecb784ec"}]}}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0x73, 0x0, '\x00', [@pad1]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x1a0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.058408833s ago: executing program 7 (id=1102): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, 0x0) write$vhost_msg_v2(r0, 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0xa0842, 0x0) write$dsp(r2, 0x0, 0xffda) write$vhost_msg_v2(r0, &(0x7f0000002540)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) syz_open_dev$video(0x0, 0x8, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000b0a500007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e6a65585578020000000000", 0x0, 0x7fffffff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x9f) sendmsg$nl_generic(r1, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000300)={&(0x7f00000025c0)={0xc4, 0x1a, 0x8, 0x70bd2c, 0x25dfdbfe, {0x11}, [@generic="7f87c8cdb22059203a848ddaac1b061e96ec1902b975b749b5650ee02f9b836fe8bee2487bbf65ae66dfca2158d0157cb61765040eeda7ac1b2a7a2257029531cbf7fd55c68ac049a0ce646c6f77b2714d71a45ea9a330d0784b667130f2468dc705c3", @typed={0x4, 0x144, 0x0, 0x0, @binary}, @typed={0x4, 0x34}, @typed={0x8, 0x109, 0x0, 0x0, @ipv4=@private=0xa010101}, @generic="ce2142f588cc61a71023fd2e85db28ce9f8a7f57d70c3e6962e4a6f7751a372a3cb184743d0cdfff87deb60de85641c59cc758463b59646a416975", @generic]}, 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000100)={'wlan0\x00', &(0x7f0000000040)=@ethtool_stats={0x1d, 0x6, [0x1b2b, 0x101, 0x8, 0x7, 0x3, 0x80000000000]}}) 0s ago: executing program 2 (id=1103): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) listen(0xffffffffffffffff, 0xb0d1) socket$key(0xf, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x400000000008d}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$audion(&(0x7f0000000380), 0x100000000, 0xe25c2) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x10, 0x2e, 0x8, 0x11, 0x5, 0x2c000, 0x0, 0x134, 0xffffffffffffffff}) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, &(0x7f00000001c0)='usrquota') r4 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000540)={'pcl711\x00', [0x6, 0x8000000, 0x3, 0x5, 0x2f, 0x4, 0x5, 0x5, 0x1000, 0x1, 0x3, 0x8500, 0x200009, 0x4, 0x79, 0xffff, 0xffffffa8, 0x7ffffffa, 0x2e6a, 0x3, 0x7, 0x0, 0xa, 0xe2df, 0x746f, 0x8, 0x1, 0x3, 0xa, 0xffff, 0x1fe]}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x349a53d2, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): -71 req 02 val 2400 [ 266.122658][ T5835] Bluetooth: hci5: command tx timeout [ 266.214432][ T7393] loop3: detected capacity change from 0 to 128 [ 267.197086][ T5882] pwc: recv_control_msg error -71 req 02 val 2600 [ 267.214519][ T5882] pwc: recv_control_msg error -71 req 02 val 2900 [ 268.179663][ T5835] Bluetooth: hci5: command tx timeout [ 268.450122][ T5882] pwc: recv_control_msg error -71 req 02 val 2800 [ 268.489791][ T5882] pwc: recv_control_msg error -71 req 04 val 1100 [ 268.546676][ T5882] pwc: recv_control_msg error -71 req 04 val 1200 [ 268.595946][ T5882] pwc: Registered as video103. [ 268.605220][ T5882] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 268.678413][ T7344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.267974][ T5882] usb 3-1: USB disconnect, device number 4 [ 269.388371][ T7344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.342134][ T7344] team0: Port device team_slave_0 added [ 270.392580][ T7344] team0: Port device team_slave_1 added [ 270.617263][ T7344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.637856][ T7344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.702945][ T7344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.884664][ T7344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.014919][ T7344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.239163][ T7344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.676953][ T5984] bridge_slave_1: left allmulticast mode [ 272.086803][ T5984] bridge_slave_1: left promiscuous mode [ 272.185558][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.228951][ T5984] bridge_slave_0: left allmulticast mode [ 272.255544][ T5984] bridge_slave_0: left promiscuous mode [ 272.275503][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.629365][ T7435] loop6: detected capacity change from 0 to 524287487 [ 272.637557][ T7435] buffer_io_error: 7 callbacks suppressed [ 272.637572][ T7435] Buffer I/O error on dev loop6, logical block 0, async page read [ 272.829249][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.353'. [ 273.123587][ T7435] Buffer I/O error on dev loop6, logical block 0, async page read [ 273.128363][ T7441] fuse: Bad value for 'fd' [ 273.239059][ T7435] Buffer I/O error on dev loop6, logical block 0, async page read [ 273.294602][ T7435] Buffer I/O error on dev loop6, logical block 0, async page read [ 273.348366][ T7435] Buffer I/O error on dev loop6, logical block 0, async page read [ 273.372649][ T7435] Buffer I/O error on dev loop6, logical block 0, async page read [ 273.391096][ T7435] Buffer I/O error on dev loop6, logical block 0, async page read [ 273.406556][ T7435] Buffer I/O error on dev loop6, logical block 0, async page read [ 273.434901][ T7435] ldm_validate_partition_table(): Disk read failed. [ 273.465240][ T7435] Buffer I/O error on dev loop6, logical block 0, async page read [ 273.470207][ T7438] could not allocate digest TFM handle crct10dif-arm64-ce [ 273.513993][ T7435] Buffer I/O error on dev loop6, logical block 0, async page read [ 273.543069][ T7435] Dev loop6: unable to read RDB block 0 [ 273.585062][ T7435] loop6: unable to read partition table [ 273.606456][ T7435] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 275.443672][ T5984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 276.188684][ T5984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 276.291902][ T5984] bond0 (unregistering): Released all slaves [ 277.367928][ T7464] loop1: detected capacity change from 0 to 128 [ 277.486782][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'. [ 278.445993][ T30] audit: type=1800 audit(1764022043.206:9): pid=7464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.359" name="bus" dev="loop1" ino=1048615 res=0 errno=0 [ 278.502626][ T7464] syz.1.359: attempt to access beyond end of device [ 278.502626][ T7464] loop1: rw=0, sector=121, nr_sectors = 920 limit=128 [ 279.152930][ T5984] tipc: Left network mode [ 279.189298][ T7344] hsr_slave_0: entered promiscuous mode [ 279.198497][ T5974] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 279.703013][ T7344] hsr_slave_1: entered promiscuous mode [ 279.971117][ T7344] debugfs: 'hsr0' already exists in 'hsr' [ 280.052515][ T7344] Cannot create hsr debugfs directory [ 281.037759][ T5974] usb 4-1: Using ep0 maxpacket: 32 [ 281.058988][ T5974] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 281.077652][ T5974] usb 4-1: config 0 has no interface number 0 [ 281.083790][ T5974] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 281.121672][ T5974] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 281.147842][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.170980][ T5974] usb 4-1: Product: syz [ 281.175187][ T5974] usb 4-1: Manufacturer: syz [ 281.200440][ T5974] usb 4-1: SerialNumber: syz [ 281.221631][ T5974] usb 4-1: config 0 descriptor?? [ 281.234754][ T7468] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 281.258061][ T5974] asix 4-1:0.188: probe with driver asix failed with error -22 [ 281.595084][ T5984] hsr_slave_0: left promiscuous mode [ 281.664644][ T5984] hsr_slave_1: left promiscuous mode [ 282.087709][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.095172][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.134744][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.162369][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.384476][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 282.398345][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 282.405178][ T5984] veth1_macvtap: left promiscuous mode [ 282.413431][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 282.421817][ T5984] veth0_macvtap: left promiscuous mode [ 282.428209][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 282.438113][ T7495] loop0: detected capacity change from 0 to 128 [ 282.448849][ T5984] veth1_vlan: left promiscuous mode [ 282.448929][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 282.455811][ T5984] veth0_vlan: left promiscuous mode [ 282.559828][ T5974] usb 4-1: USB disconnect, device number 7 [ 283.935596][ T7511] blktrace: Concurrent blktraces are not allowed on nullb0 [ 284.576332][ T51] Bluetooth: hci2: command tx timeout [ 284.595812][ T7513] loop6: detected capacity change from 0 to 524287487 [ 284.627660][ T6006] buffer_io_error: 7 callbacks suppressed [ 284.627677][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.657896][ T7514] fuse: Invalid rootmode [ 284.702718][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.723509][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.744481][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.769116][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.786784][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.803632][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.821815][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.844975][ T6006] ldm_validate_partition_table(): Disk read failed. [ 284.861563][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.880522][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.901787][ T6006] Dev loop6: unable to read RDB block 0 [ 284.913481][ T6006] loop6: unable to read partition table [ 284.977646][ T7513] ldm_validate_partition_table(): Disk read failed. [ 284.986680][ T7513] Dev loop6: unable to read RDB block 0 [ 285.011663][ T7513] loop6: unable to read partition table [ 285.108179][ T7513] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 285.513686][ T5984] team0 (unregistering): Port device team_slave_1 removed [ 285.799108][ T5984] team0 (unregistering): Port device team_slave_0 removed [ 286.223440][ T7527] blktrace: Concurrent blktraces are not allowed on nullb0 [ 286.799938][ T51] Bluetooth: hci2: command tx timeout [ 287.157724][ T7532] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 288.849116][ T51] Bluetooth: hci2: command tx timeout [ 290.389274][ T7344] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 290.534750][ T7344] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 290.601202][ T7344] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 290.662352][ T7344] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 290.898501][ T51] Bluetooth: hci2: command tx timeout [ 291.187808][ T5825] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 291.214828][ T5984] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.284934][ T7496] chnl_net:caif_netlink_parms(): no params data found [ 291.405517][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 291.436346][ T5825] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26268, setting to 1024 [ 291.470108][ T5825] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 291.492344][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.521582][ T5825] usb 3-1: Product: syz [ 291.530916][ T5825] usb 3-1: Manufacturer: syz [ 291.535544][ T5825] usb 3-1: SerialNumber: syz [ 291.575599][ T5825] usb 3-1: config 0 descriptor?? [ 291.604090][ T7578] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 291.625926][ T5825] uvcvideo 3-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 291.649955][ T5825] uvcvideo 3-1:0.0: No valid video chain found. [ 291.683368][ T5984] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.210593][ T6786] usb 3-1: USB disconnect, device number 5 [ 292.413731][ T5984] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.650206][ T5984] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.805415][ T7496] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.958666][ T7496] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.965871][ T7496] bridge_slave_0: entered allmulticast mode [ 293.988130][ T7496] bridge_slave_0: entered promiscuous mode [ 294.055226][ T7496] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.076262][ T7496] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.083456][ T7496] bridge_slave_1: entered allmulticast mode [ 294.115480][ T7496] bridge_slave_1: entered promiscuous mode [ 294.568532][ T7496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.671441][ T7496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.908255][ T7619] overlayfs: missing 'workdir' [ 296.211016][ T5835] Bluetooth: hci1: command 0x0406 tx timeout [ 296.329014][ T7496] team0: Port device team_slave_0 added [ 296.339927][ T7344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.531290][ T7496] team0: Port device team_slave_1 added [ 297.076226][ T6786] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 297.091281][ T7496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.101595][ T7496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 297.166510][ T7496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.199924][ T7344] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.218483][ T5984] bridge_slave_1: left allmulticast mode [ 297.327979][ T5984] bridge_slave_1: left promiscuous mode [ 297.357678][ T6786] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 297.397204][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.406822][ T6786] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 297.517045][ T6786] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 297.540128][ T5984] bridge_slave_0: left allmulticast mode [ 297.545804][ T5984] bridge_slave_0: left promiscuous mode [ 297.554136][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.565509][ T6786] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 297.576200][ T6786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.584242][ T6786] usb 3-1: Product: syz [ 297.596581][ T7645] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 297.766773][ T6786] usb 3-1: Manufacturer: syz [ 297.771422][ T6786] usb 3-1: SerialNumber: syz [ 297.808588][ T6786] usb 3-1: config 0 descriptor?? [ 297.814117][ T7635] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 297.845605][ T6786] usb 3-1: ucan: probing device on interface #0 [ 297.857925][ T6786] usb 3-1: ucan: invalid EP count (1) [ 297.889264][ T6786] usb 3-1: ucan: probe failed; try to update the device firmware [ 299.564068][ T5882] usb 3-1: USB disconnect, device number 6 [ 299.659857][ T5984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.939107][ T7660] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 300.179733][ T5984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.286935][ T5984] bond0 (unregistering): Released all slaves [ 300.310075][ T7496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.326287][ T7496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.366421][ T7496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.432402][ T7662] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 300.448423][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.455715][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.482203][ T7658] could not allocate digest TFM handle crct10dif-arm64-ce [ 301.256884][ T197] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.265800][ T197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 301.689288][ T7676] overlayfs: missing 'workdir' [ 302.052334][ T7496] hsr_slave_0: entered promiscuous mode [ 302.103715][ T7682] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 302.255565][ T7496] hsr_slave_1: entered promiscuous mode [ 302.382240][ T7496] debugfs: 'hsr0' already exists in 'hsr' [ 302.422053][ T7496] Cannot create hsr debugfs directory [ 303.409661][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'. [ 303.629638][ T5984] hsr_slave_0: left promiscuous mode [ 303.674980][ T5984] hsr_slave_1: left promiscuous mode [ 303.791752][ T7700] overlayfs: missing 'workdir' [ 303.897321][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.904735][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.098381][ T7695] could not allocate digest TFM handle crct10dif-arm64-ce [ 304.115367][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.122882][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.157128][ T5984] veth1_macvtap: left promiscuous mode [ 304.168809][ T5984] veth0_macvtap: left promiscuous mode [ 304.180600][ T5984] veth1_vlan: left promiscuous mode [ 304.187067][ T5984] veth0_vlan: left promiscuous mode [ 307.271616][ T5984] team0 (unregistering): Port device team_slave_1 removed [ 307.396887][ T5984] team0 (unregistering): Port device team_slave_0 removed [ 309.037848][ T7496] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 309.131642][ T7496] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 309.390145][ T7496] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 309.583029][ T7496] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 309.781133][ T7344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.891483][ T7496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.118754][ T7496] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.190498][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.197678][ T5973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.329200][ T1006] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.336390][ T1006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.256408][ T7344] veth0_vlan: entered promiscuous mode [ 311.269261][ T7344] veth1_vlan: entered promiscuous mode [ 311.515684][ T7344] veth0_macvtap: entered promiscuous mode [ 311.556785][ T7783] xt_hashlimit: max too large, truncated to 1048576 [ 311.632345][ T7344] veth1_macvtap: entered promiscuous mode [ 311.729037][ T7344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.085345][ T7799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 312.316006][ T7496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.421656][ T7792] could not allocate digest TFM handle crct10dif-arm64-ce [ 312.468812][ T7344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.652919][ T6628] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.700141][ T6628] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.824811][ T6628] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.887120][ T6628] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.294390][ T3003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.326157][ T3003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.930229][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.968900][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.232992][ T7496] veth0_vlan: entered promiscuous mode [ 314.253177][ T7496] veth1_vlan: entered promiscuous mode [ 314.633054][ T7496] veth0_macvtap: entered promiscuous mode [ 314.660526][ T7496] veth1_macvtap: entered promiscuous mode [ 314.728731][ T7496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.739109][ T5882] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 314.964004][ T7496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.982404][ T5882] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 314.991942][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.020957][ T5996] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.020984][ T5882] usb 1-1: Product: syz [ 315.167959][ T5961] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.190490][ T5961] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.201173][ T5961] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.276495][ T5882] usb 1-1: Manufacturer: syz [ 315.294791][ T5882] usb 1-1: SerialNumber: syz [ 315.331320][ T5882] usb 1-1: config 0 descriptor?? [ 315.351122][ T5882] hub 1-1:0.0: bad descriptor, ignoring hub [ 315.387367][ T5882] hub 1-1:0.0: probe with driver hub failed with error -5 [ 315.854652][ T5882] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 315.897019][ T5961] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.910741][ T5961] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.963541][ T5882] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 316.027205][ T5882] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 316.033520][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.067406][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.086149][ T5882] usb 1-1: media controller created [ 316.153415][ T5882] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 316.266797][ T5882] DVB: Unable to find symbol dib7000p_attach() [ 316.284015][ T5882] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 316.506222][ T5882] rc_core: IR keymap rc-dib0700-rc5 not found [ 316.516257][ T5882] Registered IR keymap rc-empty [ 316.544243][ T5882] dvb-usb: could not initialize remote control. [ 316.566292][ T5882] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 316.608823][ T5882] usb 1-1: USB disconnect, device number 5 [ 316.699454][ T5882] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 317.332225][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.388489][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.934358][ T7872] fuse: Unknown parameter 'use00000000000000000000' [ 319.050519][ T7882] could not allocate digest TFM handle crct10dif-arm64-ce [ 319.173459][ T7880] netlink: 4 bytes leftover after parsing attributes in process `syz.6.430'. [ 319.501319][ T7893] loop6: detected capacity change from 0 to 524287487 [ 319.548610][ T7893] buffer_io_error: 23 callbacks suppressed [ 319.548620][ T7893] Buffer I/O error on dev loop6, logical block 0, async page read [ 319.591960][ T7893] Buffer I/O error on dev loop6, logical block 0, async page read [ 319.677941][ T7898] fuse: Unknown parameter 'use00000000000000000000' [ 319.706543][ T7893] Buffer I/O error on dev loop6, logical block 0, async page read [ 319.761625][ T7893] Buffer I/O error on dev loop6, logical block 0, async page read [ 319.797974][ T7893] Buffer I/O error on dev loop6, logical block 0, async page read [ 319.846420][ T7893] Buffer I/O error on dev loop6, logical block 0, async page read [ 319.878258][ T7893] Buffer I/O error on dev loop6, logical block 0, async page read [ 319.924254][ T7893] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.007583][ T7893] ldm_validate_partition_table(): Disk read failed. [ 320.034980][ T7893] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.055705][ T7893] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.102487][ T7893] Dev loop6: unable to read RDB block 0 [ 320.124482][ T7893] loop6: unable to read partition table [ 320.232148][ T7893] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 320.288717][ T5195] ldm_validate_partition_table(): Disk read failed. [ 320.345600][ T5195] Dev loop6: unable to read RDB block 0 [ 320.377426][ T5195] loop6: unable to read partition table [ 321.907977][ T5974] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 322.367406][ T5974] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 322.737233][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.771788][ T5974] usb 3-1: Product: syz [ 322.796816][ T5974] usb 3-1: Manufacturer: syz [ 322.801954][ T5974] usb 3-1: SerialNumber: syz [ 322.828903][ T5974] usb 3-1: config 0 descriptor?? [ 322.844041][ T5974] hub 3-1:0.0: bad descriptor, ignoring hub [ 322.863446][ T5974] hub 3-1:0.0: probe with driver hub failed with error -5 [ 323.307331][ T7938] loop5: detected capacity change from 0 to 128 [ 323.918116][ T7938] syz.5.441: attempt to access beyond end of device [ 323.918116][ T7938] loop5: rw=0, sector=121, nr_sectors = 920 limit=128 [ 324.065151][ T30] audit: type=1800 audit(1764022089.126:10): pid=7938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.441" name="bus" dev="loop5" ino=1048627 res=0 errno=0 [ 325.246951][ T5974] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 326.027212][ T5974] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 326.035910][ T5974] dib0700: firmware download failed at 7 with -22 [ 326.229588][ T5974] usb 3-1: USB disconnect, device number 7 [ 331.381392][ T8009] (syz.0.454,8009,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 332.850021][ T8021] tipc: Enabling of bearer rejected, failed to enable media [ 333.059436][ T8021] netlink: 12 bytes leftover after parsing attributes in process `syz.2.458'. [ 333.145931][ T8027] syzkaller0: entered promiscuous mode [ 334.574837][ T8049] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 338.219796][ T8087] loop6: detected capacity change from 0 to 128 [ 338.227015][ T8087] vfat: Unknown parameter 'uni_xl%PB^°cwiet' [ 338.500473][ T8091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 338.507888][ T8091] IPv6: NLM_F_CREATE should be set when creating new route [ 338.515415][ T8091] IPv6: NLM_F_CREATE should be set when creating new route [ 339.182366][ T8093] loop0: detected capacity change from 0 to 128 [ 339.189874][ T8093] vfat: Unknown parameter 'uni_xl%PB^°cwiet' [ 339.597144][ T8099] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 339.604463][ T8099] IPv6: NLM_F_CREATE should be set when creating new route [ 339.611830][ T8099] IPv6: NLM_F_CREATE should be set when creating new route [ 341.426279][ T5829] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 341.750564][ T5829] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.791653][ T5829] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 342.386143][ T5829] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.448244][ T5829] usb 7-1: config 0 descriptor?? [ 342.758486][ T5829] pwc: Askey VC010 type 2 USB webcam detected. [ 342.795633][ T8130] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 343.210652][ T5829] pwc: recv_control_msg error -32 req 02 val 2b00 [ 343.220496][ T8134] tipc: Enabling of bearer rejected, failed to enable media [ 343.236797][ T5829] pwc: recv_control_msg error -32 req 02 val 2700 [ 343.281587][ T5829] pwc: recv_control_msg error -32 req 02 val 2c00 [ 343.327148][ T5829] pwc: recv_control_msg error -32 req 04 val 1000 [ 343.362516][ T5829] pwc: recv_control_msg error -32 req 04 val 1300 [ 343.398828][ T5829] pwc: recv_control_msg error -32 req 04 val 1400 [ 343.422123][ T5829] pwc: recv_control_msg error -32 req 02 val 2000 [ 343.442612][ T5829] pwc: recv_control_msg error -32 req 02 val 2100 [ 343.659541][ T5829] pwc: recv_control_msg error -71 req 02 val 2500 [ 343.682995][ T5829] pwc: recv_control_msg error -71 req 02 val 2400 [ 343.710172][ T5829] pwc: recv_control_msg error -71 req 02 val 2600 [ 343.720782][ T5829] pwc: recv_control_msg error -71 req 02 val 2900 [ 344.256992][ T5829] pwc: recv_control_msg error -71 req 02 val 2800 [ 344.295407][ T5829] pwc: recv_control_msg error -71 req 04 val 1100 [ 344.372216][ T5829] pwc: recv_control_msg error -71 req 04 val 1200 [ 344.464415][ T5829] pwc: Registered as video103. [ 344.497715][ T5829] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input16 [ 344.550785][ T5829] usb 7-1: USB disconnect, device number 2 [ 345.506736][ T8161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.484'. [ 345.860326][ T8166] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 346.319144][ T8158] could not allocate digest TFM handle crct10dif-arm64-ce [ 347.881735][ T8189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'. [ 348.302108][ T8190] could not allocate digest TFM handle crct10dif-arm64-ce [ 349.916526][ T8216] tipc: Enabling of bearer rejected, failed to enable media [ 350.519446][ T8219] overlayfs: missing 'workdir' [ 351.036190][ T7876] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 351.921556][ T7876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 351.958100][ T7876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26268, setting to 1024 [ 352.173938][ T7876] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 352.278670][ T7876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.326161][ T7876] usb 3-1: Product: syz [ 352.348434][ T7876] usb 3-1: Manufacturer: syz [ 352.364231][ T7876] usb 3-1: SerialNumber: syz [ 352.415834][ T7876] usb 3-1: config 0 descriptor?? [ 352.455523][ T8224] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 352.492261][ T7876] uvcvideo 3-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 352.512925][ T7876] uvcvideo 3-1:0.0: No valid video chain found. [ 355.564215][ T8285] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 356.474763][ T8300] tipc: Enabling of bearer rejected, failed to enable media [ 356.696238][ T5930] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 356.929164][ T5930] usb 6-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 356.971266][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.991649][ T5930] usb 6-1: Product: syz [ 357.005560][ T5930] usb 6-1: Manufacturer: syz [ 357.015700][ T5930] usb 6-1: SerialNumber: syz [ 357.050977][ T5930] usb 6-1: config 0 descriptor?? [ 357.093740][ T5930] hub 6-1:0.0: bad descriptor, ignoring hub [ 357.120048][ T5930] hub 6-1:0.0: probe with driver hub failed with error -5 [ 358.074990][ T5825] usb 3-1: USB disconnect, device number 8 [ 359.174782][ T5930] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 359.193206][ T5930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 359.213613][ T5930] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 359.239823][ T5930] usb 6-1: media controller created [ 359.281388][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 359.475952][ T5930] DVB: Unable to find symbol dib7000p_attach() [ 359.498415][ T5930] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 360.064356][ T5930] rc_core: IR keymap rc-dib0700-rc5 not found [ 360.084370][ T5930] Registered IR keymap rc-empty [ 360.111705][ T5930] dvb-usb: could not initialize remote control. [ 360.146153][ T5930] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 360.184045][ T5930] usb 6-1: USB disconnect, device number 2 [ 360.297752][ T5930] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 361.472203][ T8362] netlink: 4 bytes leftover after parsing attributes in process `syz.3.519'. [ 369.363695][ T8455] loop5: detected capacity change from 0 to 128 [ 369.371191][ T8455] vfat: Unknown parameter 'uni_xl%PB^°cwiet' [ 369.734763][ T8459] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 369.742032][ T8459] IPv6: NLM_F_CREATE should be set when creating new route [ 369.749306][ T8459] IPv6: NLM_F_CREATE should be set when creating new route [ 372.015232][ T8482] blktrace: Concurrent blktraces are not allowed on loop12 [ 372.096262][ T5975] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 372.687696][ T5975] usb 4-1: Using ep0 maxpacket: 32 [ 372.760215][ T5975] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 372.787862][ T5975] usb 4-1: config 0 has no interface number 0 [ 372.809329][ T5975] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 372.835668][ T5975] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 372.863668][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.923808][ T5975] usb 4-1: Product: syz [ 372.943871][ T5975] usb 4-1: Manufacturer: syz [ 373.025150][ T8486] bond1 (unregistering): Released all slaves [ 373.280500][ T8492] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 376.351599][ T5975] usb 4-1: SerialNumber: syz [ 376.374085][ T5975] usb 4-1: config 0 descriptor?? [ 376.381002][ T5975] usb 4-1: can't set config #0, error -71 [ 376.564646][ T5975] usb 4-1: USB disconnect, device number 8 [ 378.671558][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.678383][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.813651][ T8545] overlayfs: missing 'workdir' [ 380.948982][ T8558] overlayfs: missing 'workdir' [ 381.077557][ T8557] loop6: detected capacity change from 0 to 128 [ 381.084792][ T8557] vfat: Unknown parameter 'uni_xl%PB^°cwiet' [ 381.526367][ T8561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 383.149668][ T8572] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 383.537625][ T5973] Bluetooth: (null): Invalid header checksum [ 383.921935][ T5973] Bluetooth: (null): Invalid header checksum [ 383.942950][ T5973] Bluetooth: (null): Invalid header checksum [ 383.963061][ T5973] Bluetooth: (null): Invalid header checksum [ 383.985480][ T5973] Bluetooth: (null): Invalid header checksum [ 384.018312][ T1006] Bluetooth: (null): Invalid header checksum [ 384.027502][ T8582] loop6: detected capacity change from 0 to 524287487 [ 384.046558][ T6006] buffer_io_error: 23 callbacks suppressed [ 384.046574][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read [ 384.093335][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read [ 384.134805][ T8583] fuse: Unknown parameter '0x0000000000000007' [ 384.225952][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read [ 384.250936][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read [ 384.259457][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read [ 384.322530][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read [ 384.359617][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read [ 384.389464][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read [ 384.468318][ T6006] ldm_validate_partition_table(): Disk read failed. [ 384.564159][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read [ 384.614090][ T5974] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 384.664003][ T6006] Buffer I/O error on dev loop6, logical block 0, async page read [ 384.744969][ T6006] Dev loop6: unable to read RDB block 0 [ 384.849115][ T6006] loop6: unable to read partition table [ 384.943480][ T8582] ldm_validate_partition_table(): Disk read failed. [ 384.957224][ T8582] Dev loop6: unable to read RDB block 0 [ 384.967667][ T5974] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 384.980035][ T8582] loop6: unable to read partition table [ 385.001919][ T5974] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 385.016687][ T8582] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 385.046385][ T5974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.122912][ T5974] usb 6-1: config 0 descriptor?? [ 385.150849][ T5974] pwc: Askey VC010 type 2 USB webcam detected. [ 385.599533][ T5974] pwc: recv_control_msg error -32 req 02 val 2b00 [ 385.890602][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 385.937579][ T5974] pwc: recv_control_msg error -32 req 02 val 2700 [ 385.945356][ T5974] pwc: recv_control_msg error -32 req 02 val 2c00 [ 385.955365][ T5974] pwc: recv_control_msg error -32 req 04 val 1000 [ 385.967284][ T5974] pwc: recv_control_msg error -32 req 04 val 1300 [ 385.974667][ T5974] pwc: recv_control_msg error -32 req 04 val 1400 [ 385.981967][ T5974] pwc: recv_control_msg error -32 req 02 val 2000 [ 385.989747][ T5974] pwc: recv_control_msg error -32 req 02 val 2100 [ 386.601814][ T5974] pwc: recv_control_msg error -71 req 02 val 2500 [ 386.617337][ T5974] pwc: recv_control_msg error -71 req 02 val 2400 [ 386.624351][ T5974] pwc: recv_control_msg error -71 req 02 val 2600 [ 386.631440][ T5974] pwc: recv_control_msg error -71 req 02 val 2900 [ 386.638458][ T5974] pwc: recv_control_msg error -71 req 02 val 2800 [ 387.062556][ T1006] Bluetooth: (null): Invalid header checksum [ 387.070126][ T5974] pwc: recv_control_msg error -71 req 04 val 1100 [ 387.077131][ T5974] pwc: recv_control_msg error -71 req 04 val 1200 [ 387.090590][ T5974] pwc: Registered as video103. [ 387.102931][ T1006] Bluetooth: (null): Invalid header checksum [ 387.229009][ T1006] Bluetooth: (null): Invalid header checksum [ 387.235157][ T1006] Bluetooth: (null): Invalid header checksum [ 387.272740][ T5974] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input18 [ 387.388005][ T5974] usb 6-1: USB disconnect, device number 3 [ 388.643644][ T8618] loop6: detected capacity change from 0 to 128 [ 388.895314][ T8618] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 389.066427][ T8618] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 390.541095][ T7496] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 390.629095][ T8638] loop3: detected capacity change from 0 to 128 [ 390.636282][ T8638] vfat: Unknown parameter 'uni_xl%PB^°cwiet' [ 390.900202][ T8642] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 390.907489][ T8642] IPv6: NLM_F_CREATE should be set when creating new route [ 390.914714][ T8642] IPv6: NLM_F_CREATE should be set when creating new route [ 391.596566][ T5974] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 392.400243][ T5974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 392.437700][ T5974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26268, setting to 1024 [ 392.489152][ T5974] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 392.576782][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.607944][ T5974] usb 3-1: Product: syz [ 392.631437][ T5974] usb 3-1: Manufacturer: syz [ 392.656739][ T5974] usb 3-1: SerialNumber: syz [ 392.670724][ T5974] usb 3-1: config 0 descriptor?? [ 392.680080][ T8639] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 392.805024][ T5974] uvcvideo 3-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 392.858658][ T5974] uvcvideo 3-1:0.0: No valid video chain found. [ 394.441908][ T5903] usb 3-1: USB disconnect, device number 9 [ 394.605767][ T8663] loop0: detected capacity change from 0 to 128 [ 394.612911][ T8663] vfat: Unknown parameter 'uni_xl%PB^°cwiet' [ 394.879502][ T8665] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 396.435439][ T8680] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 399.192804][ T8704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.590'. [ 399.781004][ T8710] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 400.055974][ T8702] could not allocate digest TFM handle crct10dif-arm64-ce [ 400.922146][ T8721] overlayfs: missing 'workdir' [ 402.795627][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.3.601'. [ 403.042597][ T8740] could not allocate digest TFM handle crct10dif-arm64-ce [ 406.382459][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 407.006159][ T5986] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 407.329267][ T49] Bluetooth: (null): Invalid header checksum [ 407.781158][ T5986] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.791630][ T5986] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 407.801037][ T5986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.819632][ T49] Bluetooth: (null): Invalid header checksum [ 407.826187][ T49] Bluetooth: (null): Invalid header checksum [ 407.833127][ T49] Bluetooth: (null): Invalid header checksum [ 407.833764][ T5986] usb 3-1: config 0 descriptor?? [ 407.839422][ T49] Bluetooth: (null): Invalid header checksum [ 407.886718][ T65] Bluetooth: (null): Invalid header checksum [ 407.911167][ T5986] pwc: Askey VC010 type 2 USB webcam detected. [ 408.377773][ T5986] pwc: recv_control_msg error -32 req 02 val 2b00 [ 409.658015][ T5986] pwc: recv_control_msg error -32 req 02 val 2700 [ 409.665028][ T5986] pwc: recv_control_msg error -32 req 02 val 2c00 [ 409.833954][ T5986] pwc: recv_control_msg error -71 req 04 val 1000 [ 409.841981][ T5986] pwc: recv_control_msg error -71 req 04 val 1300 [ 409.912043][ T5986] pwc: recv_control_msg error -71 req 04 val 1400 [ 409.947355][ T5986] pwc: recv_control_msg error -71 req 02 val 2000 [ 409.962842][ T5986] pwc: recv_control_msg error -71 req 02 val 2100 [ 409.978629][ T5986] pwc: recv_control_msg error -71 req 04 val 1500 [ 409.999596][ T8801] loop2: detected capacity change from 0 to 128 [ 410.008471][ T5986] pwc: recv_control_msg error -71 req 02 val 2500 [ 410.016153][ T5986] pwc: recv_control_msg error -71 req 02 val 2400 [ 410.137118][ T5986] pwc: recv_control_msg error -71 req 02 val 2600 [ 410.144026][ T5986] pwc: recv_control_msg error -71 req 02 val 2900 [ 410.152111][ T5986] pwc: recv_control_msg error -71 req 02 val 2800 [ 410.161175][ T5986] pwc: recv_control_msg error -71 req 04 val 1100 [ 410.168338][ T5986] pwc: recv_control_msg error -71 req 04 val 1200 [ 410.178758][ T5986] pwc: Registered as video103. [ 410.733603][ T5986] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input19 [ 410.750502][ T3003] Bluetooth: (null): Invalid header checksum [ 410.758210][ T5986] usb 3-1: USB disconnect, device number 10 [ 410.784654][ T3003] Bluetooth: (null): Invalid header checksum [ 410.813128][ T3003] Bluetooth: (null): Invalid header checksum [ 410.869279][ T8801] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 410.884488][ T8801] ext4 filesystem being mounted at /130/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 411.456364][ T5829] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 411.818666][ T5829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 411.907619][ T5829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26268, setting to 1024 [ 412.331188][ T5822] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 412.368573][ T5829] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 412.407261][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.443557][ T5829] usb 7-1: Product: syz [ 412.457945][ T5829] usb 7-1: Manufacturer: syz [ 412.462580][ T5829] usb 7-1: SerialNumber: syz [ 412.501270][ T5829] usb 7-1: config 0 descriptor?? [ 412.548338][ T8809] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 412.562823][ T5829] uvcvideo 7-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 412.604940][ T5829] uvcvideo 7-1:0.0: No valid video chain found. [ 413.397643][ T5829] usb 7-1: USB disconnect, device number 3 [ 414.819625][ T8843] tipc: Enabling of bearer rejected, failed to enable media [ 415.766688][ T1208] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 416.069223][ T1208] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 416.097930][ T1208] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 416.116159][ T1208] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 416.173075][ T1208] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 416.182843][ T8856] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 416.220972][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.241762][ T1208] usb 3-1: Product: syz [ 416.268532][ T1208] usb 3-1: Manufacturer: syz [ 416.273283][ T1208] usb 3-1: SerialNumber: syz [ 416.316708][ T1208] usb 3-1: config 0 descriptor?? [ 416.329451][ T8852] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 416.346281][ T8852] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 416.419978][ T1208] usb 3-1: ucan: probing device on interface #0 [ 416.637668][ T1208] usb 3-1: ucan: could not read protocol version, ret=-32 [ 416.647524][ T1208] usb 3-1: ucan: probe failed; try to update the device firmware [ 417.882548][ T8872] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 418.060184][ T8875] loop5: detected capacity change from 0 to 128 [ 418.067299][ T8875] vfat: Unknown parameter 'uni_xl%PB^°cwiet' [ 419.049088][ T8878] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 419.368166][ T5986] usb 3-1: USB disconnect, device number 11 [ 419.474950][ T8880] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 420.282840][ T8887] tipc: Enabling of bearer rejected, failed to enable media [ 420.625066][ T8896] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 422.028330][ T8908] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 423.766268][ T5974] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 424.036204][ T5974] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 424.078146][ T5974] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 424.126146][ T5974] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 424.167904][ T5974] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 424.196302][ T5974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.224721][ T5974] usb 6-1: Product: syz [ 424.236084][ T5974] usb 6-1: Manufacturer: syz [ 424.332089][ T5974] usb 6-1: SerialNumber: syz [ 424.675747][ T5974] usb 6-1: config 0 descriptor?? [ 424.688727][ T8922] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 424.706458][ T8922] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 424.723162][ T5974] usb 6-1: ucan: probing device on interface #0 [ 425.011183][ T5974] usb 6-1: ucan: could not read protocol version, ret=-32 [ 425.018689][ T5974] usb 6-1: ucan: probe failed; try to update the device firmware [ 425.316619][ T8927] syzkaller0: entered promiscuous mode [ 425.322118][ T8927] syzkaller0: entered allmulticast mode [ 425.376791][ T8927] netlink: 12 bytes leftover after parsing attributes in process `syz.3.650'. [ 425.867915][ T8935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'. [ 426.223427][ T8934] could not allocate digest TFM handle crct10dif-arm64-ce [ 426.669967][ T5974] usb 6-1: USB disconnect, device number 4 [ 426.828903][ T8951] loop5: detected capacity change from 0 to 128 [ 426.835971][ T8951] vfat: Unknown parameter 'uni_xl%PB^°cwiet' [ 431.136356][ T5930] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 431.682184][ T6628] Bluetooth: (null): Invalid header checksum [ 431.691619][ T6628] Bluetooth: (null): Invalid header checksum [ 431.698843][ T6628] Bluetooth: (null): Invalid header checksum [ 431.706575][ T6628] Bluetooth: (null): Invalid header checksum [ 431.713377][ T6628] Bluetooth: (null): Invalid header checksum [ 431.849677][ T5930] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 431.888089][ T5930] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 431.930418][ T5930] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 432.340822][ T5930] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 432.353085][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.365291][ T5930] usb 6-1: Product: syz [ 432.372246][ T5930] usb 6-1: Manufacturer: syz [ 432.378190][ T5930] usb 6-1: SerialNumber: syz [ 432.428000][ T5930] usb 6-1: config 0 descriptor?? [ 432.436610][ T8984] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 432.481391][ T8984] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 432.670219][ T5930] usb 6-1: ucan: probing device on interface #0 [ 433.272607][ T5930] usb 6-1: ucan: could not read protocol version, ret=0 [ 433.375729][ T5930] usb 6-1: ucan: probe failed; try to update the device firmware [ 435.385143][ T5825] usb 6-1: USB disconnect, device number 5 [ 436.612603][ T9020] netlink: 12 bytes leftover after parsing attributes in process `syz.5.674'. [ 436.814968][ T9035] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 437.130996][ T9024] syzkaller0: entered promiscuous mode [ 437.226647][ T9038] overlayfs: missing 'workdir' [ 437.277785][ T9024] syzkaller0: entered allmulticast mode [ 438.367830][ T5973] Bluetooth: (null): Invalid header checksum [ 438.847138][ T5973] Bluetooth: (null): Invalid header checksum [ 438.881389][ T5973] Bluetooth: (null): Invalid header checksum [ 438.951402][ T5973] Bluetooth: (null): Invalid header checksum [ 438.966875][ T5973] Bluetooth: (null): Invalid header checksum [ 439.848586][ T9065] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 440.124351][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.306328][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.245209][ T5829] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 441.985738][ T5829] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 442.191663][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 442.261923][ T5829] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 442.476512][ T5829] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 442.708775][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.724028][ T5829] usb 3-1: Product: syz [ 442.734191][ T5829] usb 3-1: Manufacturer: syz [ 442.749027][ T5829] usb 3-1: SerialNumber: syz [ 442.765329][ T5829] usb 3-1: config 0 descriptor?? [ 442.776781][ T9074] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 442.807189][ T9074] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 442.871026][ T5829] usb 3-1: ucan: probing device on interface #0 [ 443.420525][ T5829] usb 3-1: ucan: could not read protocol version, ret=0 [ 443.506166][ T5975] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 443.506292][ T5829] usb 3-1: ucan: probe failed; try to update the device firmware [ 443.667930][ T5975] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.684281][ T5975] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 443.714829][ T5975] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.736364][ T5975] usb 7-1: config 0 descriptor?? [ 443.751262][ T5975] pwc: Askey VC010 type 2 USB webcam detected. [ 444.160412][ T5975] pwc: recv_control_msg error -32 req 02 val 2b00 [ 444.243627][ T5975] pwc: recv_control_msg error -32 req 02 val 2700 [ 444.391594][ T5975] pwc: recv_control_msg error -32 req 02 val 2c00 [ 444.407010][ T5975] pwc: recv_control_msg error -32 req 04 val 1000 [ 444.498691][ T9100] loop0: detected capacity change from 0 to 128 [ 446.328193][ T5975] pwc: recv_control_msg error -32 req 04 val 1300 [ 446.338237][ T5975] pwc: recv_control_msg error -32 req 04 val 1400 [ 446.374979][ T5975] pwc: recv_control_msg error -32 req 02 val 2000 [ 446.482846][ T5975] pwc: recv_control_msg error -32 req 02 val 2100 [ 446.498904][ T5975] pwc: recv_control_msg error -32 req 04 val 1500 [ 446.509678][ T5975] pwc: recv_control_msg error -71 req 02 val 2500 [ 446.518765][ T5975] pwc: recv_control_msg error -71 req 02 val 2400 [ 446.528342][ T5975] pwc: recv_control_msg error -71 req 02 val 2600 [ 446.535325][ T5975] pwc: recv_control_msg error -71 req 02 val 2900 [ 446.550695][ T5975] pwc: recv_control_msg error -71 req 02 val 2800 [ 446.559760][ T7876] usb 3-1: USB disconnect, device number 12 [ 446.670500][ T5975] pwc: recv_control_msg error -71 req 04 val 1100 [ 446.687191][ T5975] pwc: recv_control_msg error -71 req 04 val 1200 [ 446.724885][ T5975] pwc: Registered as video103. [ 446.743472][ T5975] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input20 [ 446.819770][ T5975] usb 7-1: USB disconnect, device number 4 [ 447.647013][ T6035] Bluetooth: (null): Invalid header checksum [ 447.717130][ T6035] Bluetooth: (null): Invalid header checksum [ 447.751312][ T6035] Bluetooth: (null): Invalid header checksum [ 447.781960][ T6035] Bluetooth: (null): Invalid header checksum [ 447.814373][ T6035] Bluetooth: (null): Invalid header checksum [ 448.735435][ T9126] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 450.238774][ T9141] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 451.546228][ T5974] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 451.720652][ T5974] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 451.733264][ T5974] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 451.783347][ T5974] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 451.826327][ T5974] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 451.844610][ T5974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.862964][ T5974] usb 3-1: Product: syz [ 451.868402][ T5974] usb 3-1: Manufacturer: syz [ 451.876144][ T5974] usb 3-1: SerialNumber: syz [ 451.889475][ T5974] usb 3-1: config 0 descriptor?? [ 451.957300][ T9153] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 451.964657][ T9153] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 452.035912][ T5974] usb 3-1: ucan: probing device on interface #0 [ 452.223442][ T5974] usb 3-1: ucan: could not read protocol version, ret=0 [ 452.237629][ T5974] usb 3-1: ucan: probe failed; try to update the device firmware [ 453.053559][ T1325] Bluetooth: (null): Invalid header checksum [ 453.540041][ T1325] Bluetooth: (null): Invalid header checksum [ 453.858845][ T9168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.710'. [ 454.041069][ T1325] Bluetooth: (null): Invalid header checksum [ 454.051169][ T1325] Bluetooth: (null): Invalid header checksum [ 454.067412][ T1325] Bluetooth: (null): Invalid header checksum [ 454.209790][ T5903] usb 3-1: USB disconnect, device number 13 [ 454.277807][ T9169] could not allocate digest TFM handle crct10dif-arm64-ce [ 454.376878][ T9175] evm: overlay not supported [ 454.486676][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 454.492800][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 454.662278][ T5903] libceph: connect (1)[c::]:6789 error -101 [ 455.627375][ T9175] ceph: No mds server is up or the cluster is laggy [ 455.661784][ T5903] libceph: mon0 (1)[c::]:6789 connect error [ 456.088512][ T1208] libceph: connect (1)[c::]:6789 error -101 [ 456.105452][ T1208] libceph: mon0 (1)[c::]:6789 connect error [ 456.924200][ T9194] syzkaller0: entered promiscuous mode [ 456.935550][ T9194] syzkaller0: entered allmulticast mode [ 457.101504][ T9198] overlayfs: missing 'workdir' [ 457.634107][ T9194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.716'. [ 462.336639][ T5974] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 462.830313][ T5974] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 464.019669][ T5974] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 464.020766][ T9236] loop6: detected capacity change from 0 to 524287487 [ 464.031349][ T5974] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 464.033639][ T5974] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 464.057554][ T5974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.065639][ T5974] usb 6-1: Product: syz [ 464.073316][ T5974] usb 6-1: Manufacturer: syz [ 464.076759][ T9236] buffer_io_error: 23 callbacks suppressed [ 464.076774][ T9236] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.094403][ T9236] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.096079][ T5974] usb 6-1: SerialNumber: syz [ 464.104544][ T9236] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.117980][ T9236] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.125877][ T9236] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.137234][ T5974] usb 6-1: config 0 descriptor?? [ 464.143034][ T9217] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 464.150399][ T9217] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 464.168206][ T9236] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.171659][ T5974] usb 6-1: ucan: probing device on interface #0 [ 464.178327][ T9236] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.207094][ T9236] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.229147][ T9236] ldm_validate_partition_table(): Disk read failed. [ 464.655056][ T9236] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.692866][ T9236] Buffer I/O error on dev loop6, logical block 0, async page read [ 464.704496][ T5974] usb 6-1: ucan: could not read protocol version, ret=-71 [ 464.714357][ T5974] usb 6-1: ucan: probe failed; try to update the device firmware [ 464.733089][ T9236] Dev loop6: unable to read RDB block 0 [ 464.759258][ T9236] loop6: unable to read partition table [ 464.787416][ T9236] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 465.248683][ T5195] ldm_validate_partition_table(): Disk read failed. [ 465.255482][ T5195] Dev loop6: unable to read RDB block 0 [ 465.277835][ T5974] usb 6-1: USB disconnect, device number 6 [ 465.289386][ T5195] loop6: unable to read partition table [ 465.443401][ T9252] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 465.444239][ T5195] ldm_validate_partition_table(): Disk read failed. [ 465.465700][ T5195] Dev loop6: unable to read RDB block 0 [ 465.489017][ T5195] loop6: unable to read partition table [ 469.526494][ T5974] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 470.367817][ T5974] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 470.421972][ T5974] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 470.453094][ T5974] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 470.482793][ T5974] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 470.503136][ T5974] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.739902][ T5974] usb 7-1: Product: syz [ 470.770828][ T5974] usb 7-1: Manufacturer: syz [ 470.862129][ T5974] usb 7-1: SerialNumber: syz [ 470.869974][ T5974] usb 7-1: config 0 descriptor?? [ 470.875638][ T9286] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 470.886709][ T9286] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 470.903910][ T5974] usb 7-1: ucan: probing device on interface #0 [ 471.112889][ T5974] usb 7-1: ucan: could not read protocol version, ret=0 [ 471.152330][ T5974] usb 7-1: ucan: probe failed; try to update the device firmware [ 472.457418][ T5903] usb 7-1: USB disconnect, device number 5 [ 472.504611][ T9312] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 473.411941][ T9325] netlink: 12 bytes leftover after parsing attributes in process `syz.6.750'. [ 473.630331][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.6.750'. [ 474.316706][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 474.388584][ T9342] loop6: detected capacity change from 0 to 524287487 [ 474.447017][ T7496] buffer_io_error: 39 callbacks suppressed [ 474.447043][ T7496] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.476301][ T7496] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.621086][ T7496] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.701852][ T7496] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.723165][ T7496] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.754441][ T9337] could not allocate digest TFM handle crct10dif-arm64-ce [ 474.765118][ T7496] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.792575][ T7496] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.816699][ T7496] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.834081][ T7496] ldm_validate_partition_table(): Disk read failed. [ 474.856266][ T7496] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.877533][ T7496] Buffer I/O error on dev loop6, logical block 0, async page read [ 474.897780][ T7496] Dev loop6: unable to read RDB block 0 [ 474.915106][ T7496] loop6: unable to read partition table [ 474.936361][ T9342] ldm_validate_partition_table(): Disk read failed. [ 474.962236][ T9342] Dev loop6: unable to read RDB block 0 [ 474.982742][ T9342] loop6: unable to read partition table [ 474.998756][ T9342] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 475.117194][ T5195] ldm_validate_partition_table(): Disk read failed. [ 475.155867][ T5195] Dev loop6: unable to read RDB block 0 [ 475.160312][ T9350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.755'. [ 475.484650][ T5195] loop6: unable to read partition table [ 476.712076][ T9348] could not allocate digest TFM handle crct10dif-arm64-ce [ 478.669681][ T9379] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 479.023055][ T5825] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 479.930350][ T5825] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 479.940729][ T5825] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 479.955730][ T5825] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 480.034135][ T5825] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 480.045774][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.060226][ T5825] usb 3-1: Product: syz [ 480.074183][ T5825] usb 3-1: Manufacturer: syz [ 480.081992][ T5825] usb 3-1: SerialNumber: syz [ 480.288581][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.5.765'. [ 480.528337][ T5825] usb 3-1: config 0 descriptor?? [ 480.536784][ T9375] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 480.544595][ T9375] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 480.588226][ T5825] usb 3-1: ucan: probing device on interface #0 [ 480.809676][ T5825] usb 3-1: ucan: could not read protocol version, ret=0 [ 480.834902][ T9390] could not allocate digest TFM handle crct10dif-arm64-ce [ 480.838183][ T5825] usb 3-1: ucan: probe failed; try to update the device firmware [ 482.441131][ T5882] usb 3-1: USB disconnect, device number 14 [ 482.656215][ T9410] overlayfs: missing 'workdir' [ 487.569172][ T9451] xt_hashlimit: max too large, truncated to 1048576 [ 487.728114][ T9457] loop0: detected capacity change from 0 to 128 [ 487.735570][ T9457] vfat: Unknown parameter 'uni_xl%PB^°cwiet' [ 487.746181][ T5882] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 487.969382][ T9461] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 488.262642][ T5930] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 488.413896][ T9463] loop6: detected capacity change from 0 to 524287487 [ 488.465412][ T9463] buffer_io_error: 38 callbacks suppressed [ 488.465425][ T9463] Buffer I/O error on dev loop6, logical block 0, async page read [ 488.470822][ T5882] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 488.476712][ T9463] Buffer I/O error on dev loop6, logical block 0, async page read [ 488.482352][ T5882] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 488.570563][ T5882] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 488.627395][ T5882] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 488.637443][ T9463] Buffer I/O error on dev loop6, logical block 0, async page read [ 488.651874][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.652134][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 488.673368][ T5882] usb 7-1: Product: syz [ 488.677710][ T5882] usb 7-1: Manufacturer: syz [ 488.682320][ T5882] usb 7-1: SerialNumber: syz [ 488.787350][ T9463] Buffer I/O error on dev loop6, logical block 0, async page read [ 488.826850][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26268, setting to 1024 [ 488.827281][ T9463] Buffer I/O error on dev loop6, logical block 0, async page read [ 488.841073][ T5882] usb 7-1: config 0 descriptor?? [ 488.854142][ T5930] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 489.385025][ T5930] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.393688][ T9452] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 489.401154][ T9452] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 489.408416][ T5930] usb 6-1: Product: syz [ 489.412616][ T5930] usb 6-1: Manufacturer: syz [ 489.419225][ T5882] usb 7-1: ucan: probing device on interface #0 [ 489.426831][ T5930] usb 6-1: SerialNumber: syz [ 489.432897][ T9463] Buffer I/O error on dev loop6, logical block 0, async page read [ 489.445059][ T5930] usb 6-1: config 0 descriptor?? [ 489.455648][ T9459] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 489.464451][ T9463] Buffer I/O error on dev loop6, logical block 0, async page read [ 489.487168][ T5930] uvcvideo 6-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 489.496229][ T9463] Buffer I/O error on dev loop6, logical block 0, async page read [ 489.504161][ T5930] uvcvideo 6-1:0.0: No valid video chain found. [ 489.636384][ T5882] usb 7-1: ucan: device protocol version 0 is not supported [ 489.650169][ T5882] usb 7-1: ucan: probe failed; try to update the device firmware [ 489.683694][ T9463] ldm_validate_partition_table(): Disk read failed. [ 489.985637][ T9463] Buffer I/O error on dev loop6, logical block 0, async page read [ 490.023119][ T9463] Buffer I/O error on dev loop6, logical block 0, async page read [ 490.181198][ T9463] Dev loop6: unable to read RDB block 0 [ 490.193457][ T9463] loop6: unable to read partition table [ 490.199408][ T9463] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 491.058854][ T5930] usb 7-1: USB disconnect, device number 6 [ 491.929642][ T7965] libceph: connect (1)[c::]:6789 error -101 [ 491.935740][ T7965] libceph: mon0 (1)[c::]:6789 connect error [ 492.076187][ T9487] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 492.136843][ T5825] usb 6-1: USB disconnect, device number 7 [ 492.217499][ T7965] libceph: connect (1)[c::]:6789 error -101 [ 492.223631][ T7965] libceph: mon0 (1)[c::]:6789 connect error [ 492.611773][ T9492] ceph: No mds server is up or the cluster is laggy [ 496.963925][ T9524] loop6: detected capacity change from 0 to 524287487 [ 496.983362][ T9524] buffer_io_error: 6 callbacks suppressed [ 496.983378][ T9524] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.003503][ T9524] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.019707][ T9524] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.166118][ T9524] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.174055][ T9524] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.330250][ T9524] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.381151][ T9524] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.414684][ T9524] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.461868][ T9524] ldm_validate_partition_table(): Disk read failed. [ 497.502378][ T9524] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.534794][ T9524] Buffer I/O error on dev loop6, logical block 0, async page read [ 497.556862][ T9524] Dev loop6: unable to read RDB block 0 [ 497.563425][ T9524] loop6: unable to read partition table [ 497.569461][ T9524] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 498.076199][ T5903] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 498.256696][ T5903] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 498.606224][ T5903] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 498.646268][ T5903] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 498.678734][ T5903] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 498.714215][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.746081][ T5903] usb 7-1: Product: syz [ 498.760705][ T5903] usb 7-1: Manufacturer: syz [ 498.770845][ T5903] usb 7-1: SerialNumber: syz [ 498.795902][ T5903] usb 7-1: config 0 descriptor?? [ 498.815441][ T9532] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 498.842198][ T9532] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 498.867887][ T5903] usb 7-1: ucan: probing device on interface #0 [ 499.735161][ T197] Bluetooth: (null): Invalid header checksum [ 499.758492][ T197] Bluetooth: (null): Invalid header checksum [ 499.783449][ T5903] usb 7-1: ucan: device protocol version 0 is not supported [ 499.786654][ T197] Bluetooth: (null): Invalid header checksum [ 499.790928][ T5903] usb 7-1: ucan: probe failed; try to update the device firmware [ 499.822266][ T197] Bluetooth: (null): Invalid header checksum [ 499.851927][ T197] Bluetooth: (null): Invalid header checksum [ 499.887180][ T9546] loop3: detected capacity change from 0 to 128 [ 499.937732][ T9546] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 500.066873][ T9546] ext4 filesystem being mounted at /170/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 501.109689][ T5820] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 501.136970][ T7965] usb 7-1: USB disconnect, device number 7 [ 501.576158][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.592204][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.587765][ T30] audit: type=1107 audit(1764022269.306:11): pid=9583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 504.968174][ T5984] Bluetooth: (null): Invalid header checksum [ 504.975427][ T5984] Bluetooth: (null): Invalid header checksum [ 504.988294][ T5984] Bluetooth: (null): Invalid header checksum [ 505.033884][ T5984] Bluetooth: (null): Invalid header checksum [ 505.099610][ T5984] Bluetooth: (null): Invalid header checksum [ 505.924563][ T9609] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 506.466151][ T5829] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 506.526316][ T55] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 506.994414][ T5829] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 507.101007][ T5829] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 507.116328][ T5829] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 507.147735][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 507.188439][ T5829] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 507.206433][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.227738][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26268, setting to 1024 [ 507.267503][ T5829] usb 3-1: Product: syz [ 507.285475][ T5829] usb 3-1: Manufacturer: syz [ 507.721139][ T5829] usb 3-1: SerialNumber: syz [ 507.724504][ T55] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 507.745799][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.772952][ T5829] usb 3-1: config 0 descriptor?? [ 507.781951][ T55] usb 1-1: Product: syz [ 507.791005][ T9612] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 507.798489][ T9612] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 507.819365][ T5829] usb 3-1: ucan: probing device on interface #0 [ 507.856289][ T55] usb 1-1: Manufacturer: syz [ 507.886168][ T55] usb 1-1: SerialNumber: syz [ 508.336256][ T5829] usb 3-1: ucan: device protocol version 0 is not supported [ 508.354076][ T5829] usb 3-1: ucan: probe failed; try to update the device firmware [ 508.354685][ T55] usb 1-1: config 0 descriptor?? [ 508.464967][ T9613] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 508.490362][ T55] uvcvideo 1-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 508.532184][ T55] uvcvideo 1-1:0.0: No valid video chain found. [ 509.620996][ T6786] usb 3-1: USB disconnect, device number 15 [ 510.449142][ T9642] syzkaller0: entered promiscuous mode [ 510.499081][ T9642] syzkaller0: entered allmulticast mode [ 510.656917][ T9635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.830'. [ 510.972504][ T1006] Bluetooth: (null): Invalid header checksum [ 511.463550][ T1006] Bluetooth: (null): Invalid header checksum [ 511.481977][ T1006] Bluetooth: (null): Invalid header checksum [ 511.490295][ T1006] Bluetooth: (null): Invalid header checksum [ 511.497347][ T1006] Bluetooth: (null): Invalid header checksum [ 511.508229][ T6787] Bluetooth: (null): Invalid header checksum [ 512.199412][ T9659] loop6: detected capacity change from 0 to 128 [ 512.206755][ T9659] vfat: Unknown parameter 'uni_xl%PB^°cwiet' [ 512.431329][ T9661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 513.553792][ T9667] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 514.286656][ T5974] usb 1-1: USB disconnect, device number 6 [ 517.183369][ T1006] Bluetooth: (null): Invalid header checksum [ 517.191050][ T1006] Bluetooth: (null): Invalid header checksum [ 517.202911][ T1006] Bluetooth: (null): Invalid header checksum [ 517.215663][ T1006] Bluetooth: (null): Invalid header checksum [ 517.265883][ T1006] Bluetooth: (null): Invalid header checksum [ 518.043595][ T9700] loop2: detected capacity change from 0 to 128 [ 518.951691][ T30] audit: type=1800 audit(1764022284.666:12): pid=9700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.845" name="bus" dev="loop2" ino=1048629 res=0 errno=0 [ 522.112484][ T9717] blktrace: Concurrent blktraces are not allowed on loop0 [ 525.955383][ T1006] Bluetooth: (null): Invalid header checksum [ 525.982513][ T1006] Bluetooth: (null): Invalid header checksum [ 526.033465][ T1006] Bluetooth: (null): Invalid header checksum [ 526.069929][ T1006] Bluetooth: (null): Invalid header checksum [ 527.536068][ T5835] Bluetooth: hci5: command 0x0406 tx timeout [ 531.790842][ T36] Bluetooth: (null): Invalid header checksum [ 532.198054][ T9787] loop3: detected capacity change from 0 to 128 [ 532.438938][ T9787] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 532.482023][ T9789] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 532.538231][ T9787] ext4 filesystem being mounted at /186/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 534.330715][ T5820] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 535.915763][ T9812] overlayfs: missing 'workdir' [ 536.331946][ T9816] loop6: detected capacity change from 0 to 128 [ 536.339128][ T9816] vfat: Unknown parameter 'uni_xl%PB^°cwiet' [ 536.608168][ T9818] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 543.382075][ T36] Bluetooth: (null): Invalid header checksum [ 543.899926][ T36] Bluetooth: (null): Invalid header checksum [ 543.922037][ T36] Bluetooth: (null): Invalid header checksum [ 543.940204][ T36] Bluetooth: (null): Invalid header checksum [ 543.972260][ T36] Bluetooth: (null): Invalid header checksum [ 544.596390][ T5829] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 544.712455][ T9850] overlayfs: missing 'workdir' [ 545.068091][ T5829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 545.096080][ T5829] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26268, setting to 1024 [ 545.126133][ T5829] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 545.145673][ T5829] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.164392][ T5829] usb 7-1: Product: syz [ 545.194545][ T5829] usb 7-1: Manufacturer: syz [ 545.206926][ T5829] usb 7-1: SerialNumber: syz [ 545.426620][ T5829] usb 7-1: config 0 descriptor?? [ 545.452931][ T9846] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 545.476088][ T5829] uvcvideo 7-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 545.502390][ T5829] uvcvideo 7-1:0.0: No valid video chain found. [ 546.092160][ T9859] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 547.826607][ T9867] blktrace: Concurrent blktraces are not allowed on loop6 [ 551.305265][ T5974] usb 7-1: USB disconnect, device number 8 [ 554.210185][ T9910] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 555.016874][ T9914] loop3: detected capacity change from 0 to 128 [ 555.025263][ T9914] vfat: Unknown parameter 'uni_xl%PB^°cwiet' [ 555.365392][ T9918] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 559.996162][ T5825] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 560.148402][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 560.176071][ T5825] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26268, setting to 1024 [ 560.280471][ T5825] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 560.417493][ T5825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.431696][ T5825] usb 4-1: Product: syz [ 560.480429][ T5825] usb 4-1: Manufacturer: syz [ 560.485785][ T5825] usb 4-1: SerialNumber: syz [ 560.699064][ T5825] usb 4-1: config 0 descriptor?? [ 560.716185][ T9935] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 560.746445][ T5825] uvcvideo 4-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 560.767688][ T5825] uvcvideo 4-1:0.0: No valid video chain found. [ 562.988869][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.009271][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.057932][ T9956] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 563.318171][ T9962] loop6: detected capacity change from 0 to 128 [ 563.863175][ T5825] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 564.355192][ T5825] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 564.396197][ T5825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.417658][ T9962] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 564.456096][ T5825] usb 3-1: Product: syz [ 564.460372][ T5825] usb 3-1: Manufacturer: syz [ 564.486570][ T5825] usb 3-1: SerialNumber: syz [ 564.749381][ T9962] ext4 filesystem being mounted at /106/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 564.805665][ T5825] usb 3-1: config 0 descriptor?? [ 564.979360][ T5825] hub 3-1:0.0: bad descriptor, ignoring hub [ 565.018173][ T5825] hub 3-1:0.0: probe with driver hub failed with error -5 [ 565.819263][ T7496] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 566.631504][ T5825] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 566.687359][ T5825] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 566.748643][ T5825] dib0700: firmware download failed at 7 with -22 [ 566.786893][ T5825] usb 3-1: USB disconnect, device number 16 [ 566.851859][ T24] usb 4-1: USB disconnect, device number 9 [ 567.279845][ T9990] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 567.785905][ T9737] Bluetooth: hci2: command 0x0406 tx timeout [ 569.436906][T10010] loop5: detected capacity change from 0 to 128 [ 569.499835][T10010] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 569.539276][T10014] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 569.715539][T10010] ext4 filesystem being mounted at /83/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 570.955384][ T7344] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 572.084421][T10031] loop5: detected capacity change from 0 to 128 [ 573.037605][ T30] audit: type=1800 audit(1764022338.756:13): pid=10031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.930" name="bus" dev="loop5" ino=1048630 res=0 errno=0 [ 573.636519][T10038] syz.5.930: attempt to access beyond end of device [ 573.636519][T10038] loop5: rw=2049, sector=985, nr_sectors = 56 limit=128 [ 574.681229][T10041] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 576.047707][T10052] loop6: detected capacity change from 0 to 524287487 [ 576.056964][T10052] buffer_io_error: 7 callbacks suppressed [ 576.056980][T10052] Buffer I/O error on dev loop6, logical block 0, async page read [ 576.143666][T10052] Buffer I/O error on dev loop6, logical block 0, async page read [ 576.943355][T10052] Buffer I/O error on dev loop6, logical block 0, async page read [ 577.514191][T10052] Buffer I/O error on dev loop6, logical block 0, async page read [ 577.536218][T10052] Buffer I/O error on dev loop6, logical block 0, async page read [ 577.612976][T10063] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 577.759180][T10052] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.409306][T10052] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.418100][T10052] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.427295][T10052] ldm_validate_partition_table(): Disk read failed. [ 578.434044][T10052] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.442149][T10052] Buffer I/O error on dev loop6, logical block 0, async page read [ 578.527633][T10052] Dev loop6: unable to read RDB block 0 [ 578.534859][T10052] loop6: unable to read partition table [ 578.543482][T10052] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 578.867341][ T5195] ldm_validate_partition_table(): Disk read failed. [ 578.899393][ T5195] Dev loop6: unable to read RDB block 0 [ 578.905270][ T5195] loop6: unable to read partition table [ 586.827076][T10109] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 586.969886][T10105] tipc: Started in network mode [ 586.974777][T10105] tipc: Node identity 2a74184adc9, cluster identity 4711 [ 587.140042][T10105] tipc: Enabled bearer , priority 0 [ 587.164573][T10111] syzkaller0: entered promiscuous mode [ 587.183742][T10111] syzkaller0: entered allmulticast mode [ 587.198388][ T9737] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 587.207638][ T9737] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 587.216519][ T9737] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 587.224818][ T9737] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 587.233483][ T9737] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 587.421542][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.6.952'. [ 587.474832][T10105] tipc: Resetting bearer [ 587.527266][T10103] tipc: Resetting bearer [ 587.655106][T10103] tipc: Disabling bearer [ 589.416023][ T5835] Bluetooth: hci4: command tx timeout [ 589.682649][T10112] chnl_net:caif_netlink_parms(): no params data found [ 590.863927][T10141] netlink: 36 bytes leftover after parsing attributes in process `syz.3.958'. [ 591.461061][ T5835] Bluetooth: hci4: command tx timeout [ 592.794076][T10112] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.822498][T10112] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.958636][T10112] bridge_slave_0: entered allmulticast mode [ 593.282630][T10112] bridge_slave_0: entered promiscuous mode [ 593.436193][T10159] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 593.542101][ T5835] Bluetooth: hci4: command tx timeout [ 593.593797][T10112] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.679024][T10112] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.912431][T10112] bridge_slave_1: entered allmulticast mode [ 593.986912][T10112] bridge_slave_1: entered promiscuous mode [ 594.352203][ T6500] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.616935][ T5835] Bluetooth: hci4: command tx timeout [ 595.701942][T10178] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 595.973586][T10112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.113884][ T6500] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.334701][T10112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.935334][ T6500] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.085013][T10112] team0: Port device team_slave_0 added [ 597.362043][T10190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.969'. [ 597.557609][ T6500] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.588820][T10112] team0: Port device team_slave_1 added [ 597.780323][T10188] could not allocate digest TFM handle crct10dif-arm64-ce [ 597.930753][T10112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.968383][T10112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.475832][T10112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.645304][T10112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.676414][T10112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 598.735623][T10112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.647011][ T6500] bridge_slave_1: left allmulticast mode [ 599.693083][ T6500] bridge_slave_1: left promiscuous mode [ 599.707094][ T6500] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.735153][ T6500] bridge_slave_0: left allmulticast mode [ 599.798890][ T6500] bridge_slave_0: left promiscuous mode [ 599.804806][ T6500] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.215207][T10218] netlink: 36 bytes leftover after parsing attributes in process `syz.0.975'. [ 601.613480][T10226] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 604.643157][T10217] syz.0.975 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 604.654335][T10217] CPU: 0 UID: 0 PID: 10217 Comm: syz.0.975 Not tainted syzkaller #0 PREEMPT(full) [ 604.654358][T10217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 604.654378][T10217] Call Trace: [ 604.654387][T10217] [ 604.654396][T10217] dump_stack_lvl+0x189/0x250 [ 604.654424][T10217] ? lockdep_hardirqs_on+0x9c/0x150 [ 604.654445][T10217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 604.654470][T10217] ? __pfx__printk+0x10/0x10 [ 604.654503][T10217] dump_header+0xd4/0x4c0 [ 604.654528][T10217] oom_kill_process+0x263/0x800 [ 604.654555][T10217] out_of_memory+0xf0c/0x12b0 [ 604.654573][T10217] ? rcu_is_watching+0x15/0xb0 [ 604.654593][T10217] ? preempt_schedule_irq+0xde/0x150 [ 604.654617][T10217] ? __pfx_out_of_memory+0x10/0x10 [ 604.654636][T10217] ? irqentry_exit+0x5dd/0x660 [ 604.654663][T10217] mem_cgroup_out_of_memory+0x145/0x240 [ 604.654690][T10217] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 604.654733][T10217] try_charge_memcg+0xdf0/0x1280 [ 604.654772][T10217] ? __pfx_try_charge_memcg+0x10/0x10 [ 604.654812][T10217] charge_memcg+0x9f/0x180 [ 604.654834][T10217] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 604.654854][T10217] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 604.654879][T10217] __read_swap_cache_async+0x212/0x480 [ 604.654906][T10217] swap_cluster_readahead+0x500/0x630 [ 604.654931][T10217] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 604.654959][T10217] ? get_vma_policy+0x29e/0x3c0 [ 604.654981][T10217] ? get_vma_policy+0x27c/0x3c0 [ 604.655007][T10217] swapin_readahead+0x189/0xc60 [ 604.655037][T10217] ? __pfx_swapin_readahead+0x10/0x10 [ 604.655057][T10217] ? swap_table_get+0x1e/0x260 [ 604.655079][T10217] ? swap_table_get+0x1e/0x260 [ 604.655105][T10217] ? swap_table_get+0x1e/0x260 [ 604.655130][T10217] ? swap_table_get+0x216/0x260 [ 604.655155][T10217] ? swap_cache_get_folio+0x51c/0x530 [ 604.655187][T10217] do_swap_page+0x8ee/0x5d70 [ 604.655218][T10217] ? __lock_acquire+0xab9/0xd20 [ 604.655253][T10217] ? do_swap_page+0x17f/0x5d70 [ 604.655278][T10217] ? __pfx_do_swap_page+0x10/0x10 [ 604.655306][T10217] ? __pfx_default_wake_function+0x10/0x10 [ 604.655338][T10217] ? ___pte_offset_map+0x1ae/0x240 [ 604.655361][T10217] ? pte_offset_map_rw_nolock+0xea/0x160 [ 604.655383][T10217] handle_mm_fault+0x127a/0x32c0 [ 604.655415][T10217] ? handle_mm_fault+0xdb/0x32c0 [ 604.655443][T10217] ? __pfx_handle_mm_fault+0x10/0x10 [ 604.655460][T10217] ? lock_vma_under_rcu+0x42c/0x4a0 [ 604.655479][T10217] ? __pfx_do_futex+0x10/0x10 [ 604.655518][T10217] ? do_user_addr_fault+0x1a8/0x1380 [ 604.655545][T10217] do_user_addr_fault+0xa7c/0x1380 [ 604.655574][T10217] ? rcu_is_watching+0x15/0xb0 [ 604.655590][T10217] ? trace_page_fault_user+0x84/0x1e0 [ 604.655615][T10217] exc_page_fault+0x82/0x100 [ 604.655636][T10217] asm_exc_page_fault+0x26/0x30 [ 604.655652][T10217] RIP: 0033:0x7f8886f8f751 [ 604.655675][T10217] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 604.655690][T10217] RSP: 002b:00007ffd05f8d228 EFLAGS: 00010207 [ 604.655715][T10217] RAX: 0000000000000001 RBX: 00007f88871e6278 RCX: 00007f8886f8f749 [ 604.655728][T10217] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f88871e6278 [ 604.655739][T10217] RBP: 0000000000000003 R08: 0000000000000001 R09: 0000001605f8d51f [ 604.655750][T10217] R10: 00007f88871e5fa0 R11: 0000000000000246 R12: 00007f88871e627c [ 604.655762][T10217] R13: 00007f88871e6270 R14: 000000000000009d R15: 0000000000000003 [ 604.655793][T10217] [ 604.655808][T10217] memory: usage 307200kB, limit 307200kB, failcnt 4088 [ 605.047202][T10217] memory+swap: usage 307256kB, limit 9007199254740988kB, failcnt 0 [ 605.055146][T10217] kmem: usage 306440kB, limit 9007199254740988kB, failcnt 0 [ 605.382165][T10217] Memory cgroup stats for /syz0: [ 605.382578][T10217] cache 532480 [ 605.392239][T10217] rss 8192 [ 605.402130][T10217] rss_huge 0 [ 605.418332][T10217] shmem 532480 [ 605.429850][T10217] mapped_file 0 [ 605.970904][T10217] dirty 0 [ 605.994018][T10217] writeback 0 [ 606.157390][T10217] workingset_refault_anon 4296 [ 606.162212][T10217] workingset_refault_file 937 [ 606.226172][T10217] swap 225280 [ 606.229549][T10217] swapcached 4096 [ 606.239703][T10217] pgpgin 170747 [ 606.243225][T10217] pgpgout 170615 [ 606.291617][T10217] pgfault 224634 [ 606.295188][T10217] pgmajfault 699 [ 606.312779][T10217] inactive_anon 8192 [ 606.326656][T10217] active_anon 0 [ 606.330606][T10217] inactive_file 0 [ 606.341972][T10217] active_file 0 [ 606.350740][T10217] unevictable 532480 [ 606.479563][T10217] hierarchical_memory_limit 314572800 [ 606.512401][T10217] hierarchical_memsw_limit 9223372036854771712 [ 606.535416][T10217] total_cache 532480 [ 606.697550][T10217] total_rss 8192 [ 606.705926][T10217] total_rss_huge 0 [ 606.721651][T10217] total_shmem 532480 [ 606.730504][T10217] total_mapped_file 0 [ 606.744890][T10217] total_dirty 0 [ 606.757564][T10217] total_writeback 0 [ 606.768741][T10217] total_workingset_refault_anon 4296 [ 606.778446][T10217] total_workingset_refault_file 937 [ 606.789940][T10217] total_swap 225280 [ 606.797777][ T6500] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.806429][T10217] total_swapcached 4096 [ 606.812192][T10217] total_pgpgin 170747 [ 606.827280][T10217] total_pgpgout 170615 [ 606.841241][T10217] total_pgfault 224634 [ 606.846700][ T6500] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.859531][T10217] total_pgmajfault 699 [ 606.869432][T10217] total_inactive_anon 8192 [ 606.882123][ T6500] bond0 (unregistering): Released all slaves [ 606.888383][T10217] total_active_anon 0 [ 606.895349][T10217] total_inactive_file 0 [ 606.909717][T10217] total_active_file 0 [ 606.924032][T10217] total_unevictable 532480 [ 606.938973][T10217] anon_cost 0 [ 606.955654][T10217] file_cost 0 [ 606.962595][T10112] hsr_slave_0: entered promiscuous mode [ 606.964635][T10217] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null) [ 606.994055][T10112] hsr_slave_1: entered promiscuous mode [ 607.002078][T10217] ,cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.975,pid=10217,uid=0 [ 607.063085][T10112] debugfs: 'hsr0' already exists in 'hsr' [ 607.074817][T10217] Memory cgroup out of memory: Killed process 10217 (syz.0.975) total-vm:106532kB, anon-rss:1144kB, file-rss:27236kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 607.096035][T10112] Cannot create hsr debugfs directory [ 607.314016][T10229] tipc: Enabling of bearer rejected, failed to enable media [ 607.349777][T10238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.976'. [ 609.143163][T10272] overlayfs: missing 'workdir' [ 609.687725][ T6500] hsr_slave_0: left promiscuous mode [ 609.727681][ T6500] hsr_slave_1: left promiscuous mode [ 609.787329][ T6500] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 609.819090][ T6500] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 610.063799][T10285] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 610.310190][ T6500] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 610.318430][ T6500] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 610.482092][ T6500] veth1_macvtap: left promiscuous mode [ 610.519203][ T6500] veth0_macvtap: left promiscuous mode [ 610.525836][ T7965] IPVS: starting estimator thread 0... [ 610.534605][T10291] vivid-007: disconnect [ 610.549180][ T6500] veth1_vlan: left promiscuous mode [ 610.567035][ T6500] veth0_vlan: left promiscuous mode [ 610.640598][T10292] IPVS: using max 50 ests per chain, 120000 per kthread [ 611.368741][T10295] (syz.0.988,10295,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 611.427564][T10276] vivid-007: reconnect [ 611.864079][T10307] netlink: 36 bytes leftover after parsing attributes in process `syz.0.990'. [ 613.625397][T10320] loop6: detected capacity change from 0 to 524287487 [ 613.642987][T10320] buffer_io_error: 22 callbacks suppressed [ 613.642999][T10320] Buffer I/O error on dev loop6, logical block 0, async page read [ 613.676801][T10320] Buffer I/O error on dev loop6, logical block 0, async page read [ 613.721255][T10320] Buffer I/O error on dev loop6, logical block 0, async page read [ 613.756599][T10320] Buffer I/O error on dev loop6, logical block 0, async page read [ 613.775522][T10320] Buffer I/O error on dev loop6, logical block 0, async page read [ 613.798803][T10320] Buffer I/O error on dev loop6, logical block 0, async page read [ 613.849416][T10320] Buffer I/O error on dev loop6, logical block 0, async page read [ 613.879257][T10320] Buffer I/O error on dev loop6, logical block 0, async page read [ 613.903376][T10320] ldm_validate_partition_table(): Disk read failed. [ 613.926474][T10320] Buffer I/O error on dev loop6, logical block 0, async page read [ 613.944694][T10320] Buffer I/O error on dev loop6, logical block 0, async page read [ 613.971939][T10320] Dev loop6: unable to read RDB block 0 [ 613.986858][T10320] loop6: unable to read partition table [ 613.994623][T10320] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 614.014108][ T6500] team0 (unregistering): Port device team_slave_1 removed [ 614.084123][ T6500] team0 (unregistering): Port device team_slave_0 removed [ 616.716229][T10337] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 618.908569][T10112] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 619.017614][T10112] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 619.605856][T10112] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 619.719829][T10360] could not allocate digest TFM handle crct10dif-arm64-ce [ 620.191629][T10112] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 620.282780][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1001'. [ 620.811628][T10112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.020962][T10112] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.126655][T10393] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1006'. [ 621.184103][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.191374][ T5996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.508354][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.515496][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.754532][T10401] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 623.059105][T10420] loop2: detected capacity change from 0 to 128 [ 623.238053][ T30] audit: type=1800 audit(1764022388.956:14): pid=10420 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1008" name="bus" dev="loop2" ino=1048631 res=0 errno=0 [ 623.664785][T10428] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 623.816767][T10427] syz.2.1008: attempt to access beyond end of device [ 623.816767][T10427] loop2: rw=0, sector=121, nr_sectors = 920 limit=128 [ 624.422281][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.437822][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.529794][T10112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.141539][T10112] veth0_vlan: entered promiscuous mode [ 625.175769][T10112] veth1_vlan: entered promiscuous mode [ 625.413892][T10112] veth0_macvtap: entered promiscuous mode [ 625.571306][T10112] veth1_macvtap: entered promiscuous mode [ 625.635029][T10112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.688506][T10112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.729689][ T5996] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.752097][ T5996] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.782371][ T5996] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.893954][ T5996] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.244345][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 626.357429][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.964061][ T6787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.070705][ T6787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.561258][T10459] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 628.673167][T10465] (syz.3.1013,10465,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 629.029624][T10468] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 629.719276][T10477] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1018'. [ 630.246244][ T30] audit: type=1107 audit(1764022395.966:15): pid=10478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 631.606029][ T7965] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 631.808402][ T7965] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 117, changing to 10 [ 631.842543][ T7965] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26268, setting to 1024 [ 631.878831][ T7965] usb 8-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 631.929263][ T7965] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.962327][ T7965] usb 8-1: Product: syz [ 631.971310][ T7965] usb 8-1: Manufacturer: syz [ 631.975914][ T7965] usb 8-1: SerialNumber: syz [ 632.001598][ T7965] usb 8-1: config 0 descriptor?? [ 632.010446][T10501] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 632.045709][ T7965] uvcvideo 8-1:0.0: Found UVC 0.00 device syz (18ec:3288) [ 632.062906][ T7965] uvcvideo 8-1:0.0: No valid video chain found. [ 633.998976][T10519] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 635.766141][ T7965] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 635.965250][ T7965] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 635.998593][ T7965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.036394][ T7965] usb 1-1: Product: syz [ 636.059879][ T7965] usb 1-1: Manufacturer: syz [ 636.087267][ T7965] usb 1-1: SerialNumber: syz [ 636.141009][ T7965] usb 1-1: config 0 descriptor?? [ 636.169323][ T7965] hub 1-1:0.0: bad descriptor, ignoring hub [ 636.195865][ T7965] hub 1-1:0.0: probe with driver hub failed with error -5 [ 636.624632][T10536] syz.6.1027 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=1000 [ 636.796429][T10536] CPU: 0 UID: 0 PID: 10536 Comm: syz.6.1027 Not tainted syzkaller #0 PREEMPT(full) [ 636.796446][T10536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 636.796453][T10536] Call Trace: [ 636.796459][T10536] [ 636.796464][T10536] dump_stack_lvl+0x189/0x250 [ 636.796486][T10536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 636.796500][T10536] ? __pfx__printk+0x10/0x10 [ 636.796519][T10536] dump_header+0xd4/0x4c0 [ 636.796533][T10536] oom_kill_process+0x263/0x800 [ 636.796551][T10536] out_of_memory+0xf0c/0x12b0 [ 636.796569][T10536] ? __pfx_out_of_memory+0x10/0x10 [ 636.796587][T10536] mem_cgroup_out_of_memory+0x145/0x240 [ 636.796602][T10536] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 636.796623][T10536] ? _raw_spin_unlock+0x28/0x50 [ 636.796637][T10536] ? memcg1_oom_prepare+0x37f/0x450 [ 636.796651][T10536] try_charge_memcg+0xdf0/0x1280 [ 636.796672][T10536] ? __pfx_try_charge_memcg+0x10/0x10 [ 636.796687][T10536] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 636.796700][T10536] ? get_mem_cgroup_from_objcg+0x1b0/0x1d0 [ 636.796710][T10536] ? get_mem_cgroup_from_objcg+0x1a/0x1d0 [ 636.796722][T10536] __memcg_kmem_charge_page+0xe1/0x240 [ 636.796735][T10536] __alloc_frozen_pages_noprof+0x1b5/0x370 [ 636.796751][T10536] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 636.796769][T10536] ? policy_nodemask+0x27c/0x720 [ 636.796787][T10536] alloc_pages_mpol+0x232/0x4a0 [ 636.796803][T10536] alloc_pages_noprof+0xa9/0x190 [ 636.796817][T10536] get_free_pages_noprof+0xf/0x80 [ 636.796830][T10536] __kvm_mmu_topup_memory_cache+0x24f/0x610 [ 636.796851][T10536] mmu_topup_memory_caches+0xd6/0x170 [ 636.796867][T10536] kvm_mmu_load+0x9d/0x2300 [ 636.796876][T10536] ? kvm_msr_allowed+0x9a/0x490 [ 636.796885][T10536] ? kvm_msr_allowed+0x3f4/0x490 [ 636.796894][T10536] ? kvm_msr_allowed+0x9a/0x490 [ 636.796904][T10536] ? kvm_msr_allowed+0x9a/0x490 [ 636.796917][T10536] ? kvm_apic_has_interrupt+0x744/0x770 [ 636.796927][T10536] ? kvm_deliver_exception_payload+0xcf/0x1f0 [ 636.796949][T10536] vcpu_run+0x54ff/0x77f0 [ 636.797019][T10536] ? __pfx_vcpu_run+0x10/0x10 [ 636.797036][T10536] ? kvm_arch_vcpu_ioctl_run+0x283/0x1cd0 [ 636.797052][T10536] ? rcu_is_watching+0x15/0xb0 [ 636.797064][T10536] kvm_arch_vcpu_ioctl_run+0x1143/0x1cd0 [ 636.797080][T10536] ? __mutex_trylock_common+0x153/0x260 [ 636.797097][T10536] ? kvm_arch_vcpu_ioctl_run+0x283/0x1cd0 [ 636.797113][T10536] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 636.797129][T10536] ? rcu_is_watching+0x15/0xb0 [ 636.797138][T10536] ? trace_contention_end+0x39/0x120 [ 636.797147][T10536] ? look_up_lock_class+0x74/0x170 [ 636.797159][T10536] ? register_lock_class+0x51/0x320 [ 636.797175][T10536] ? __lock_acquire+0xab9/0xd20 [ 636.797203][T10536] kvm_vcpu_ioctl+0x99a/0xed0 [ 636.797217][T10536] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 636.797240][T10536] ? __fget_files+0x2a/0x420 [ 636.797256][T10536] ? __fget_files+0x3a0/0x420 [ 636.797269][T10536] ? __fget_files+0x2a/0x420 [ 636.797283][T10536] ? bpf_lsm_file_ioctl+0x9/0x20 [ 636.797297][T10536] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 636.797308][T10536] __se_sys_ioctl+0xfc/0x170 [ 636.797321][T10536] do_syscall_64+0xfa/0xfa0 [ 636.797333][T10536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.797342][T10536] ? clear_bhb_loop+0x60/0xb0 [ 636.797354][T10536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.797373][T10536] RIP: 0033:0x7f3fa518f749 [ 636.797384][T10536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.797392][T10536] RSP: 002b:00007f3fa5f52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 636.797404][T10536] RAX: ffffffffffffffda RBX: 00007f3fa53e5fa0 RCX: 00007f3fa518f749 [ 636.797411][T10536] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 636.797417][T10536] RBP: 00007f3fa5213f91 R08: 0000000000000000 R09: 0000000000000000 [ 636.797424][T10536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.797430][T10536] R13: 00007f3fa53e6038 R14: 00007f3fa53e5fa0 R15: 00007ffdd53fb6a8 [ 636.797447][T10536] [ 636.797473][T10536] memory: usage 307200kB, limit 307200kB, failcnt 10729 [ 637.378410][ T7965] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 637.593853][ T7965] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 637.618234][ T7965] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 637.772072][ T7965] usb 1-1: media controller created [ 637.784496][ T7965] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 637.893595][ T7965] DVB: Unable to find symbol dib7000p_attach() [ 637.909444][ T7965] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 637.976379][T10536] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0 [ 638.007825][T10536] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 638.015158][T10536] Memory cgroup stats for /syz6: [ 638.015289][T10536] cache 0 [ 638.023659][ T7965] rc_core: IR keymap rc-dib0700-rc5 not found [ 638.029886][ T7965] Registered IR keymap rc-empty [ 638.034889][ T7965] dvb-usb: could not initialize remote control. [ 638.051559][ T7965] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 638.067658][T10536] rss 0 [ 638.070436][T10536] rss_huge 0 [ 638.111035][T10536] shmem 0 [ 638.114700][T10536] mapped_file 0 [ 638.133124][T10536] dirty 0 [ 638.182569][T10536] writeback 0 [ 638.219913][T10536] workingset_refault_anon 3034 [ 638.247766][T10536] workingset_refault_file 0 [ 638.258003][T10536] swap 172032 [ 638.266442][T10536] swapcached 36864 [ 638.282134][T10536] pgpgin 133534 [ 638.290190][T10536] pgpgout 133525 [ 638.299467][T10536] pgfault 163196 [ 638.363423][T10536] pgmajfault 1113 [ 638.379217][T10536] inactive_anon 36864 [ 638.393184][T10536] active_anon 0 [ 638.428631][T10536] inactive_file 0 [ 638.449324][T10536] active_file 0 [ 638.477452][T10536] unevictable 0 [ 638.485731][T10536] hierarchical_memory_limit 314572800 [ 638.500591][T10536] hierarchical_memsw_limit 9223372036854771712 [ 638.515723][T10536] total_cache 0 [ 638.525426][T10536] total_rss 0 [ 638.536234][T10536] total_rss_huge 0 [ 638.545145][T10536] total_shmem 0 [ 638.658415][T10536] total_mapped_file 0 [ 638.767991][T10536] total_dirty 0 [ 638.956443][T10536] total_writeback 0 [ 638.964772][T10536] total_workingset_refault_anon 3034 [ 638.980863][T10536] total_workingset_refault_file 0 [ 639.007758][T10536] total_swap 172032 [ 639.017116][T10536] total_swapcached 36864 [ 639.030746][T10536] total_pgpgin 133534 [ 639.048847][T10536] total_pgpgout 133525 [ 639.058794][T10536] total_pgfault 163196 [ 639.078775][T10536] total_pgmajfault 1113 [ 639.092066][T10536] total_inactive_anon 36864 [ 639.102812][T10536] total_active_anon 0 [ 639.109192][T10536] total_inactive_file 0 [ 639.113534][T10536] total_active_file 0 [ 639.120452][T10536] total_unevictable 0 [ 639.138684][T10536] anon_cost 0 [ 639.157870][T10536] file_cost 0 [ 639.164681][T10536] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1027,pid=10533,uid=0 [ 639.203966][T10536] Memory cgroup out of memory: Killed process 10533 (syz.6.1027) total-vm:104080kB, anon-rss:1268kB, file-rss:23268kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 639.622159][ T24] usb 8-1: USB disconnect, device number 2 [ 639.916855][T10583] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1032'. [ 640.116244][T10578] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1030'. [ 640.671096][T10590] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 641.335729][T10575] could not allocate digest TFM handle crct10dif-arm64-ce [ 643.179363][ T7965] usb 1-1: USB disconnect, device number 7 [ 643.305801][ T7965] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 643.857212][T10621] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 649.180604][T10657] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 649.671939][T10664] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1046'. [ 649.799831][ T5896] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 651.184038][ T5896] usb 8-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 651.272389][ T5896] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.350084][ T5896] usb 8-1: Product: syz [ 651.384424][ T5896] usb 8-1: Manufacturer: syz [ 651.405049][ T5896] usb 8-1: SerialNumber: syz [ 651.675124][ T5896] usb 8-1: config 0 descriptor?? [ 652.463315][ T5896] hub 8-1:0.0: bad descriptor, ignoring hub [ 652.521181][ T5896] hub 8-1:0.0: probe with driver hub failed with error -5 [ 652.916007][T10679] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 652.928432][ T5896] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 653.225314][ T5896] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 653.236918][ T5896] dib0700: firmware download failed at 7 with -22 [ 653.436513][ T5896] usb 8-1: USB disconnect, device number 3 [ 654.818496][T10691] xt_hashlimit: max too large, truncated to 1048576 [ 655.587121][T10697] tipc: Started in network mode [ 655.599240][T10697] tipc: Node identity ae295f375311, cluster identity 4711 [ 656.026310][T10697] tipc: Enabled bearer , priority 0 [ 656.063853][T10702] syzkaller0: entered promiscuous mode [ 656.086093][T10702] syzkaller0: entered allmulticast mode [ 656.187254][T10697] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1053'. [ 656.221010][T10697] tipc: Resetting bearer [ 656.284377][T10696] tipc: Resetting bearer [ 656.308893][T10696] tipc: Disabling bearer [ 657.796631][T10716] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 658.786718][T10727] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1061'. [ 659.208965][T10732] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 661.836090][ T5930] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 661.990098][ T5930] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 662.000640][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.047210][ T5930] usb 3-1: Product: syz [ 662.083638][ T5930] usb 3-1: Manufacturer: syz [ 662.118864][ T5930] usb 3-1: SerialNumber: syz [ 662.167464][ T5930] usb 3-1: config 0 descriptor?? [ 662.201784][ T5930] hub 3-1:0.0: bad descriptor, ignoring hub [ 662.220469][ T5930] hub 3-1:0.0: probe with driver hub failed with error -5 [ 662.356173][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1068'. [ 664.453468][ T5930] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 664.631381][ T5930] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 664.676538][ T5930] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 665.330872][ T5930] usb 3-1: media controller created [ 665.348516][ T5930] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 665.601909][T10768] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 666.253195][ T5930] DVB: Unable to find symbol dib7000p_attach() [ 666.269884][ T5930] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 666.420315][T10781] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 667.736420][ T5930] rc_core: IR keymap rc-dib0700-rc5 not found [ 667.747807][ T5930] Registered IR keymap rc-empty [ 667.779165][ T5930] dvb-usb: could not initialize remote control. [ 667.805795][ T5930] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 668.091525][ T5930] usb 3-1: USB disconnect, device number 17 [ 669.085587][ T5930] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 671.342073][T10808] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1081'. [ 672.520737][ T5974] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 672.786382][ T5974] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 674.771910][ T5974] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 675.786156][ T5974] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 676.911411][ T5974] usb 4-1: string descriptor 0 read error: -71 [ 677.025100][ T5974] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 677.325865][ T5974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.329776][ T1325] Bluetooth: (null): Invalid header checksum [ 677.849424][ T5974] usb 4-1: config 0 descriptor?? [ 677.946511][ T5974] usb 4-1: can't set config #0, error -71 [ 677.957816][ T5974] usb 4-1: USB disconnect, device number 10 [ 678.290984][T10834] loop6: detected capacity change from 0 to 524287487 [ 678.368681][T10834] buffer_io_error: 7 callbacks suppressed [ 678.368699][T10834] Buffer I/O error on dev loop6, logical block 0, async page read [ 678.436374][T10834] Buffer I/O error on dev loop6, logical block 0, async page read [ 678.456334][T10834] Buffer I/O error on dev loop6, logical block 0, async page read [ 678.628584][T10834] Buffer I/O error on dev loop6, logical block 0, async page read [ 678.706236][T10834] Buffer I/O error on dev loop6, logical block 0, async page read [ 678.714425][T10834] Buffer I/O error on dev loop6, logical block 0, async page read [ 678.738734][T10834] Buffer I/O error on dev loop6, logical block 0, async page read [ 678.907158][T10834] Buffer I/O error on dev loop6, logical block 0, async page read [ 678.918548][T10834] ldm_validate_partition_table(): Disk read failed. [ 678.966742][T10834] Buffer I/O error on dev loop6, logical block 0, async page read [ 678.982959][T10834] Buffer I/O error on dev loop6, logical block 0, async page read [ 679.022678][T10834] Dev loop6: unable to read RDB block 0 [ 679.032396][T10834] loop6: unable to read partition table [ 679.063690][T10834] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 679.109804][ T5195] ldm_validate_partition_table(): Disk read failed. [ 679.118632][ T5195] Dev loop6: unable to read RDB block 0 [ 679.125181][ T5195] loop6: unable to read partition table [ 681.960626][ T7876] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 682.054344][ T7496] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 682.094939][ T7496] CPU: 0 UID: 0 PID: 7496 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 682.094962][ T7496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 682.094972][ T7496] Call Trace: [ 682.094979][ T7496] [ 682.094988][ T7496] dump_stack_lvl+0x189/0x250 [ 682.095018][ T7496] ? __pfx_dump_stack_lvl+0x10/0x10 [ 682.095040][ T7496] ? __pfx__printk+0x10/0x10 [ 682.095069][ T7496] dump_header+0xd4/0x4c0 [ 682.095092][ T7496] oom_kill_process+0x263/0x800 [ 682.095116][ T7496] out_of_memory+0xf0c/0x12b0 [ 682.095150][ T7496] ? __pfx_out_of_memory+0x10/0x10 [ 682.095179][ T7496] mem_cgroup_out_of_memory+0x145/0x240 [ 682.095205][ T7496] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 682.095240][ T7496] ? _raw_spin_unlock+0x28/0x50 [ 682.095264][ T7496] ? memcg1_oom_prepare+0x37f/0x450 [ 682.095286][ T7496] try_charge_memcg+0xdf0/0x1280 [ 682.095325][ T7496] ? __pfx_try_charge_memcg+0x10/0x10 [ 682.095366][ T7496] charge_memcg+0x9f/0x180 [ 682.095387][ T7496] ? mem_cgroup_swapin_charge_folio+0x33/0x390 [ 682.095407][ T7496] mem_cgroup_swapin_charge_folio+0x262/0x390 [ 682.095432][ T7496] __read_swap_cache_async+0x212/0x480 [ 682.095458][ T7496] swap_cluster_readahead+0x336/0x630 [ 682.095483][ T7496] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 682.095515][ T7496] ? get_vma_policy+0x27c/0x3c0 [ 682.095540][ T7496] swapin_readahead+0x189/0xc60 [ 682.095576][ T7496] ? __pfx_swapin_readahead+0x10/0x10 [ 682.095595][ T7496] ? swap_table_get+0x1e/0x260 [ 682.095619][ T7496] ? swap_table_get+0x1e/0x260 [ 682.095639][ T7496] ? swap_table_get+0x1e/0x260 [ 682.095663][ T7496] ? swap_table_get+0x216/0x260 [ 682.095692][ T7496] ? swap_cache_get_folio+0x51c/0x530 [ 682.095724][ T7496] do_swap_page+0x8ee/0x5d70 [ 682.095755][ T7496] ? __lock_acquire+0xab9/0xd20 [ 682.095786][ T7496] ? do_swap_page+0x17f/0x5d70 [ 682.095808][ T7496] ? __pfx_do_swap_page+0x10/0x10 [ 682.095831][ T7496] ? __pfx_default_wake_function+0x10/0x10 [ 682.095853][ T7496] ? ___pte_offset_map+0x1ae/0x240 [ 682.095874][ T7496] ? pte_offset_map_rw_nolock+0xea/0x160 [ 682.095896][ T7496] handle_mm_fault+0x127a/0x32c0 [ 682.095936][ T7496] ? handle_mm_fault+0xdb/0x32c0 [ 682.095965][ T7496] ? __pfx_handle_mm_fault+0x10/0x10 [ 682.095981][ T7496] ? lock_vma_under_rcu+0x42c/0x4a0 [ 682.096019][ T7496] ? do_user_addr_fault+0x1a8/0x1380 [ 682.096045][ T7496] do_user_addr_fault+0xa7c/0x1380 [ 682.096074][ T7496] ? rcu_is_watching+0x15/0xb0 [ 682.096091][ T7496] ? trace_page_fault_user+0x84/0x1e0 [ 682.096114][ T7496] exc_page_fault+0x82/0x100 [ 682.096135][ T7496] asm_exc_page_fault+0x26/0x30 [ 682.096152][ T7496] RIP: 0033:0x7f3fa51c2008 [ 682.096169][ T7496] Code: 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 44 89 c7 <48> 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 c3 0f 1f [ 682.096183][ T7496] RSP: 002b:00007ffdd53fb9c0 EFLAGS: 00010293 [ 682.096200][ T7496] RAX: 0000000000000000 RBX: 000000000000023a RCX: 00007f3fa51c2005 [ 682.096212][ T7496] RDX: 00007ffdd53fba00 RSI: 0000000000000000 RDI: 0000000000000000 [ 682.096223][ T7496] RBP: 00007ffdd53fba6c R08: 0000000000000000 R09: 0000000000000000 [ 682.096234][ T7496] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 682.096245][ T7496] R13: 00000000000927c0 R14: 00000000000a5e54 R15: 00007ffdd53fbac0 [ 682.096276][ T7496] [ 682.808804][ T7876] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 682.816170][ T7496] memory: usage 307200kB, limit 307200kB, failcnt 11957 [ 682.836085][ T7876] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 682.866103][ T7496] memory+swap: usage 307960kB, limit 9007199254740988kB, failcnt 0 [ 682.876556][ T7876] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 682.926046][ T7496] kmem: usage 307128kB, limit 9007199254740988kB, failcnt 0 [ 682.933391][ T7496] Memory cgroup stats for /syz6: [ 682.933519][ T7496] cache 0 [ 682.945730][ T7496] rss 4096 [ 682.946017][ T7876] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 682.966167][ T7496] rss_huge 0 [ 682.968245][ T7876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.979258][ T7496] shmem 0 [ 682.982221][ T7496] mapped_file 208896 [ 683.134009][ T7496] dirty 0 [ 683.142479][ T7876] usb 8-1: Product: syz [ 683.178251][ T7496] writeback 0 [ 683.181649][ T7496] workingset_refault_anon 3336 [ 683.191684][ T7876] usb 8-1: Manufacturer: syz [ 683.237835][ T49] Bluetooth: (null): Invalid header checksum [ 683.246445][ T7876] usb 8-1: SerialNumber: syz [ 683.294574][ T7496] workingset_refault_file 0 [ 683.688106][ T7496] swap 794624 [ 683.688282][ T36] Bluetooth: (null): Invalid header checksum [ 683.691431][ T7496] swapcached 61440 [ 683.691441][ T7496] pgpgin 144351 [ 683.691448][ T7496] pgpgout 144335 [ 683.691455][ T7496] pgfault 177069 [ 683.691462][ T7496] pgmajfault 1359 [ 683.691468][ T7496] inactive_anon 0 [ 683.691476][ T7496] active_anon 57344 [ 683.691483][ T7496] inactive_file 0 [ 683.727031][ T7496] active_file 0 [ 683.730498][ T7496] unevictable 0 [ 683.733973][ T7496] hierarchical_memory_limit 314572800 [ 683.741150][ T7496] hierarchical_memsw_limit 9223372036854771712 [ 683.745604][ T7876] usb 8-1: config 0 descriptor?? [ 683.767532][ T7496] total_cache 0 [ 683.767605][ T36] Bluetooth: (null): Invalid header checksum [ 683.771014][ T7496] total_rss 4096 [ 683.771023][ T7496] total_rss_huge 0 [ 683.771032][ T7496] total_shmem 0 [ 683.771039][ T7496] total_mapped_file 208896 [ 683.796343][ T7496] total_dirty 0 [ 683.799832][ T7496] total_writeback 0 [ 683.803638][ T7496] total_workingset_refault_anon 3336 [ 683.808974][ T7496] total_workingset_refault_file 0 [ 683.813995][ T7496] total_swap 794624 [ 683.817883][ T7496] total_swapcached 61440 [ 683.830050][T10869] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 683.860488][T10869] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 683.875686][ T36] Bluetooth: (null): Invalid header checksum [ 683.887349][ T36] Bluetooth: (null): Invalid header checksum [ 683.903147][ T7876] usb 8-1: ucan: probing device on interface #0 [ 684.076923][T10878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1099'. [ 684.159376][ T7496] total_pgpgin 144351 [ 684.245807][ T7496] total_pgpgout 144335 [ 684.278396][ T7496] total_pgfault 177069 [ 684.290614][ T7876] usb 8-1: ucan: failed to retrieve device info [ 684.314405][ T7876] usb 8-1: ucan: probe failed; try to update the device firmware [ 684.380681][ T7496] total_pgmajfault 1359 [ 684.479522][ T7496] total_inactive_anon 0 [ 684.620601][ T7876] usb 8-1: USB disconnect, device number 4 [ 684.668029][ T7496] total_active_anon 57344 [ 684.673966][ T7496] total_inactive_file 0 [ 684.722706][ T7496] total_active_file 0 [ 684.796839][ T7496] total_unevictable 0 [ 684.807517][ T7496] anon_cost 0 [ 684.851111][ T7496] file_cost 0 [ 684.973344][ T7496] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1089,pid=10844,uid=0 [ 686.152043][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.167781][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.614637][ T7496] Memory cgroup out of memory: Killed process 10844 (syz.6.1089) total-vm:106736kB, anon-rss:1144kB, file-rss:27108kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 747.358761][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.365364][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 794.005898][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 794.012856][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1208/1:b..l P10889 P10848/1:b..l [ 794.022930][ C1] rcu: (detected by 1, t=10502 jiffies, g=44157, q=114 ncpus=2) [ 794.030645][ C1] task:syz.6.1089 state:R running task stack:19640 pid:10848 tgid:10844 ppid:7496 task_flags:0x400840 flags:0x00080002 [ 794.044903][ C1] Call Trace: [ 794.048179][ C1] [ 794.051097][ C1] __schedule+0x14bc/0x5030 [ 794.055595][ C1] ? folio_batch_move_lru+0x39b/0x420 [ 794.060953][ C1] ? __pfx___schedule+0x10/0x10 [ 794.065783][ C1] ? blk_mq_flush_plug_list+0x41f/0x550 [ 794.071481][ C1] ? mem_cgroup_get_nr_swap_pages+0x32/0x110 [ 794.077444][ C1] ? get_swappiness+0x358/0x3c0 [ 794.082275][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 794.087542][ C1] preempt_schedule_irq+0xb5/0x150 [ 794.092632][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 794.098339][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 794.104129][ C1] irqentry_exit+0x5d8/0x660 [ 794.108703][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 794.114724][ C1] RIP: 0010:lock_acquire+0x16c/0x350 [ 794.119997][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 54 ec d7 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 794.139601][ C1] RSP: 0018:ffffc90003406880 EFLAGS: 00000206 [ 794.145697][ C1] RAX: 438459c9ce637800 RBX: 0000000000000000 RCX: 438459c9ce637800 [ 794.153652][ C1] RDX: 0000000000000000 RSI: ffffffff8d977664 RDI: ffffffff8bbf7760 [ 794.161609][ C1] RBP: ffffffff82043cb0 R08: 0000000000000000 R09: ffffffff82043cb0 [ 794.169778][ C1] R10: dffffc0000000000 R11: fffffbfff1efbe6f R12: 0000000000000002 [ 794.177752][ C1] R13: ffffffff8df3d700 R14: 0000000000000000 R15: 0000000000000246 [ 794.185712][ C1] ? do_shrink_slab+0x890/0x1120 [ 794.190639][ C1] ? do_shrink_slab+0x890/0x1120 [ 794.195574][ C1] do_shrink_slab+0x8b1/0x1120 [ 794.200319][ C1] ? do_shrink_slab+0x890/0x1120 [ 794.205237][ C1] ? do_shrink_slab+0x890/0x1120 [ 794.210161][ C1] ? shrink_slab+0x1e8/0x10d0 [ 794.214835][ C1] shrink_slab+0x7ef/0x10d0 [ 794.219329][ C1] ? shrink_slab+0x1e8/0x10d0 [ 794.223995][ C1] ? __pfx_shrink_slab+0x10/0x10 [ 794.228942][ C1] ? mem_cgroup_iter+0x3e7/0x460 [ 794.233867][ C1] ? page_counter_calculate_protection+0x188/0x470 [ 794.240346][ C1] ? mem_cgroup_iter+0x3b/0x460 [ 794.245177][ C1] shrink_node+0xb03/0x35b0 [ 794.249687][ C1] ? __pfx_shrink_node+0x10/0x10 [ 794.254609][ C1] ? __pfx_queue_work_on+0x10/0x10 [ 794.259706][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 794.264885][ C1] ? _raw_spin_unlock+0x28/0x50 [ 794.269729][ C1] ? vmpressure_prio+0xe8/0x150 [ 794.274564][ C1] do_try_to_free_pages+0x668/0x1960 [ 794.279842][ C1] ? __pfx_do_try_to_free_pages+0x10/0x10 [ 794.285545][ C1] try_to_free_mem_cgroup_pages+0x2ea/0x7d0 [ 794.291422][ C1] ? __pfx_try_to_free_mem_cgroup_pages+0x10/0x10 [ 794.297834][ C1] ? cgroup_file_notify+0x110/0x190 [ 794.303036][ C1] try_charge_memcg+0xa39/0x1280 [ 794.307972][ C1] ? __pfx_try_charge_memcg+0x10/0x10 [ 794.313341][ C1] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 794.318785][ C1] ? get_mem_cgroup_from_mm+0x38/0x2a0 [ 794.324223][ C1] charge_memcg+0x9f/0x180 [ 794.328635][ C1] __mem_cgroup_charge+0x25/0x80 [ 794.333581][ C1] folio_prealloc+0x51/0x180 [ 794.338160][ C1] do_wp_page+0x1231/0x5800 [ 794.342659][ C1] ? __pfx_do_wp_page+0x10/0x10 [ 794.347484][ C1] ? do_raw_spin_lock+0x121/0x290 [ 794.352497][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 794.357865][ C1] handle_mm_fault+0x14c8/0x32c0 [ 794.362914][ C1] ? handle_mm_fault+0xdb/0x32c0 [ 794.367847][ C1] ? __pfx_handle_mm_fault+0x10/0x10 [ 794.373128][ C1] ? lock_mm_and_find_vma+0x9c/0x300 [ 794.378410][ C1] do_user_addr_fault+0x764/0x1380 [ 794.383525][ C1] exc_page_fault+0x82/0x100 [ 794.388107][ C1] asm_exc_page_fault+0x26/0x30 [ 794.392934][ C1] RIP: 0010:__put_user_nocheck_4+0x3/0x10 [ 794.398638][ C1] Code: d9 0f 01 cb 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb <89> 01 31 c9 0f 01 ca e9 01 83 03 00 90 90 90 90 90 90 90 90 90 90 [ 794.418228][ C1] RSP: 0018:ffffc900034078b8 EFLAGS: 00050202 [ 794.424283][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00002000000e5030 [ 794.432248][ C1] RDX: ffff88802df88000 RSI: 0000000000000002 RDI: 00000000ffffffff [ 794.440206][ C1] RBP: ffffc90003407a30 R08: ffffc90003407667 R09: 1ffff92000680ecc [ 794.448160][ C1] R10: dffffc0000000000 R11: fffff52000680ecd R12: 0000000000000002 [ 794.456117][ C1] R13: 00002000000e5000 R14: 0000000000000000 R15: dffffc0000000000 [ 794.464088][ C1] ____sys_recvmsg+0x2f5/0x4c0 [ 794.468885][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 794.474168][ C1] ? import_iovec+0x74/0xa0 [ 794.478659][ C1] ___sys_recvmsg+0x1b5/0x510 [ 794.483317][ C1] ? rcu_is_watching+0x15/0xb0 [ 794.488061][ C1] ? __pfx____sys_recvmsg+0x10/0x10 [ 794.493254][ C1] ? __might_fault+0xb0/0x130 [ 794.497912][ C1] do_recvmmsg+0x307/0x770 [ 794.502313][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 794.507242][ C1] __x64_sys_recvmmsg+0x190/0x240 [ 794.512244][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 794.517769][ C1] ? do_syscall_64+0xbe/0xfa0 [ 794.522424][ C1] do_syscall_64+0xfa/0xfa0 [ 794.526919][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.532974][ C1] ? clear_bhb_loop+0x60/0xb0 [ 794.537652][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.543532][ C1] RIP: 0033:0x7f3fa518f749 [ 794.547925][ C1] RSP: 002b:00007f3fa33f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 794.556316][ C1] RAX: ffffffffffffffda RBX: 00007f3fa53e6090 RCX: 00007f3fa518f749 [ 794.564381][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 794.572339][ C1] RBP: 00007f3fa5213f91 R08: 0000000000000000 R09: 0000000000000000 [ 794.580461][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 794.588408][ C1] R13: 00007f3fa53e6128 R14: 00007f3fa53e6090 R15: 00007ffdd53fb6a8 [ 794.596371][ C1] [ 794.599372][ C1] task:syz.7.1102 state:R running task stack:25192 pid:10889 tgid:10888 ppid:10112 task_flags:0x400140 flags:0x00080000 [ 794.612823][ C1] Call Trace: [ 794.616090][ C1] [ 794.618917][ C1] sched_show_task+0x49d/0x630 [ 794.623668][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 794.628937][ C1] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 794.634117][ C1] ? wq_watchdog_touch+0xef/0x180 [ 794.639212][ C1] print_other_cpu_stall+0xf7a/0x1340 [ 794.644578][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 794.650377][ C1] rcu_sched_clock_irq+0xa47/0x11b0 [ 794.655558][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 794.661171][ C1] ? rcu_is_watching+0x15/0xb0 [ 794.665920][ C1] update_process_times+0x23c/0x2f0 [ 794.671106][ C1] tick_nohz_handler+0x3e9/0x710 [ 794.676025][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 794.681205][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 794.686668][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 794.692122][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 794.697561][ C1] __hrtimer_run_queues+0x4d0/0xc70 [ 794.702738][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 794.708704][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 794.714398][ C1] ? read_tsc+0x9/0x20 [ 794.718451][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 794.723380][ C1] __sysvec_apic_timer_interrupt+0x102/0x410 [ 794.729345][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 794.734958][ C1] [ 794.737877][ C1] [ 794.740804][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 794.746765][ C1] RIP: 0010:kasan_check_range+0x6b/0x2c0 [ 794.752382][ C1] Code: 00 ff f3 0f 1e fa 4c 39 cf 0f 82 58 02 00 00 49 89 ff 49 c1 ef 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 ff c8 4d 89 c1 <49> c1 e9 03 48 bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d [ 794.772063][ C1] RSP: 0018:ffffc900033878c8 EFLAGS: 00000282 [ 794.778114][ C1] RAX: ffffffff897b0401 RBX: ffffc90003387a08 RCX: ffffffff897b04ec [ 794.786065][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88801c730000 [ 794.794019][ C1] RBP: 000000007fffffff R08: ffff88801c730007 R09: ffff88801c730007 [ 794.801990][ C1] R10: dffffc0000000000 R11: ffffed10038e6000 R12: 00000000190d92d0 [ 794.809954][ C1] R13: dffffc0000000000 R14: 1ffff92000670f41 R15: 1ffff110038e6000 [ 794.817917][ C1] ? bpf_test_timer_enter+0x1f1/0x260 [ 794.823274][ C1] ? bpf_test_timer_continue+0x6c/0x320 [ 794.828808][ C1] bpf_test_timer_continue+0x6c/0x320 [ 794.834177][ C1] ? bpf_test_run+0x192/0x7a0 [ 794.838839][ C1] bpf_test_run+0x397/0x7a0 [ 794.843336][ C1] ? __pfx_bpf_test_run+0x10/0x10 [ 794.848380][ C1] ? slab_build_skb+0x27c/0x3f0 [ 794.853219][ C1] ? convert___skb_to_skb+0x3d/0x5b0 [ 794.858509][ C1] bpf_prog_test_run_skb+0xda9/0x1d70 [ 794.863871][ C1] ? __fget_files+0x3a0/0x420 [ 794.868530][ C1] ? __fget_files+0x2a/0x420 [ 794.873102][ C1] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 794.878888][ C1] bpf_prog_test_run+0x2c7/0x340 [ 794.883809][ C1] __sys_bpf+0x562/0x860 [ 794.888029][ C1] ? __pfx___sys_bpf+0x10/0x10 [ 794.892779][ C1] ? rcu_is_watching+0x15/0xb0 [ 794.897522][ C1] __x64_sys_bpf+0x7c/0x90 [ 794.901941][ C1] do_syscall_64+0xfa/0xfa0 [ 794.906421][ C1] ? rcu_is_watching+0x15/0xb0 [ 794.911159][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.917201][ C1] ? clear_bhb_loop+0x60/0xb0 [ 794.921857][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.927746][ C1] RIP: 0033:0x7fa2f638f749 [ 794.932145][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 794.951733][ C1] RSP: 002b:00007fa2f714c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 794.960153][ C1] RAX: ffffffffffffffda RBX: 00007fa2f65e5fa0 RCX: 00007fa2f638f749 [ 794.968104][ C1] RDX: 000000000000009f RSI: 0000200000000900 RDI: 000000000000000a [ 794.976056][ C1] RBP: 00007fa2f6413f91 R08: 0000000000000000 R09: 0000000000000000 [ 794.984007][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.991963][ C1] R13: 00007fa2f65e6038 R14: 00007fa2f65e5fa0 R15: 00007ffed93a5048 [ 794.999930][ C1] [ 795.002934][ C1] task:kworker/1:2 state:R running task stack:24296 pid:1208 tgid:1208 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 795.016586][ C1] Workqueue: events cleanup_vm_area_work [ 795.022207][ C1] Call Trace: [ 795.025465][ C1] [ 795.028384][ C1] __schedule+0x14bc/0x5030 [ 795.032881][ C1] ? unwind_next_frame+0xa5/0x2390 [ 795.037981][ C1] ? __pfx___schedule+0x10/0x10 [ 795.042831][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 795.048100][ C1] preempt_schedule_irq+0xb5/0x150 [ 795.053209][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 795.059066][ C1] ? __lock_acquire+0xab9/0xd20 [ 795.063939][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 795.069743][ C1] irqentry_exit+0x5d8/0x660 [ 795.074322][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 795.080285][ C1] RIP: 0010:lock_acquire+0xb0/0x350 [ 795.085474][ C1] Code: b5 90 df 0d 00 0f 84 fa 00 00 00 65 8b 05 b8 32 d8 10 85 c0 0f 85 eb 00 00 00 65 48 8b 04 25 08 80 76 92 83 b8 2c 0b 00 00 00 <0f> 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 4c 89 [ 795.105072][ C1] RSP: 0018:ffffc9000453f878 EFLAGS: 00000246 [ 795.111137][ C1] RAX: ffff888026c31e80 RBX: 0000000000000000 RCX: 1067a23da75fe700 [ 795.119103][ C1] RDX: 0000000000000000 RSI: ffffffff8231ad35 RDI: 1ffffffff1be7ae0 [ 795.127059][ C1] RBP: ffffffff8231ad19 R08: 0000000000000000 R09: 0000000000000000 [ 795.135028][ C1] R10: dffffc0000000000 R11: ffffed102808e139 R12: 0000000000000002 [ 795.143005][ C1] R13: ffffffff8df3d700 R14: 0000000000000000 R15: 0000000000000000 [ 795.150985][ C1] ? percpu_ref_put+0x19/0x180 [ 795.155761][ C1] ? percpu_ref_put+0x35/0x180 [ 795.160513][ C1] ? lock_acquire+0x84/0x350 [ 795.165087][ C1] ? refill_stock+0xed/0x870 [ 795.169673][ C1] ? refill_stock+0xed/0x870 [ 795.174262][ C1] ? percpu_ref_put+0x19/0x180 [ 795.179018][ C1] percpu_ref_put+0x35/0x180 [ 795.183603][ C1] ? percpu_ref_put+0x19/0x180 [ 795.188388][ C1] __memcg_kmem_uncharge_page+0xea/0x170 [ 795.194030][ C1] __free_frozen_pages+0x17b/0xd30 [ 795.199151][ C1] vfree+0x25a/0x400 [ 795.203043][ C1] cleanup_vm_area_work+0xa2/0x100 [ 795.208144][ C1] ? process_one_work+0x868/0x15e0 [ 795.213245][ C1] process_one_work+0x93a/0x15e0 [ 795.218170][ C1] ? __lock_acquire+0xab9/0xd20 [ 795.223027][ C1] ? __pfx_process_one_work+0x10/0x10 [ 795.228390][ C1] ? assign_work+0x3a1/0x410 [ 795.232970][ C1] worker_thread+0x9f5/0xee0 [ 795.237579][ C1] kthread+0x711/0x8a0 [ 795.241647][ C1] ? __pfx_worker_thread+0x10/0x10 [ 795.246863][ C1] ? __pfx_kthread+0x10/0x10 [ 795.251447][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 795.256680][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 795.262293][ C1] ? __pfx_kthread+0x10/0x10 [ 795.266872][ C1] ret_from_fork+0x599/0xb30 [ 795.271466][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 795.276562][ C1] ? __switch_to_asm+0x39/0x70 [ 795.281301][ C1] ? __switch_to_asm+0x33/0x70 [ 795.286042][ C1] ? __pfx_kthread+0x10/0x10 [ 795.290614][ C1] ret_from_fork_asm+0x1a/0x30 [ 795.295366][ C1] [ 795.298366][ C1] rcu: rcu_preempt kthread starved for 2313 jiffies! g44157 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 795.309449][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 795.319397][ C1] rcu: RCU grace-period kthread stack dump: [ 795.325293][ C1] task:rcu_preempt state:R running task stack:27144 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 795.338742][ C1] Call Trace: [ 795.342026][ C1] [ 795.344971][ C1] __schedule+0x14bc/0x5030 [ 795.349491][ C1] ? __lock_acquire+0xab9/0xd20 [ 795.354345][ C1] ? __pfx___schedule+0x10/0x10 [ 795.359192][ C1] ? schedule+0x91/0x360 [ 795.363423][ C1] schedule+0x165/0x360 [ 795.367561][ C1] schedule_timeout+0x12b/0x270 [ 795.372399][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 795.377759][ C1] ? __pfx_process_timeout+0x10/0x10 [ 795.383033][ C1] ? prepare_to_swait_event+0x341/0x380 [ 795.388563][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 795.393405][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 795.399542][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 795.404810][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 795.410007][ C1] ? finish_swait+0xcd/0x1f0 [ 795.414605][ C1] rcu_gp_kthread+0x99/0x390 [ 795.419179][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 795.424359][ C1] ? __kthread_parkme+0x7b/0x200 [ 795.429282][ C1] ? __kthread_parkme+0x1a1/0x200 [ 795.434297][ C1] kthread+0x711/0x8a0 [ 795.438357][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 795.443639][ C1] ? __pfx_kthread+0x10/0x10 [ 795.448224][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 795.453417][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 795.458611][ C1] ? __pfx_kthread+0x10/0x10 [ 795.463194][ C1] ret_from_fork+0x599/0xb30 [ 795.467774][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 795.472883][ C1] ? __switch_to_asm+0x39/0x70 [ 795.477627][ C1] ? __switch_to_asm+0x33/0x70 [ 795.482376][ C1] ? __pfx_kthread+0x10/0x10 [ 795.486948][ C1] ret_from_fork_asm+0x1a/0x30 [ 795.491713][ C1] [ 795.494710][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 795.501109][ C1] Sending NMI from CPU 1 to CPUs 0: [ 795.506311][ C0] NMI backtrace for cpu 0 [ 795.506324][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 795.506341][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 795.506350][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 795.506370][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 40 0c 00 f3 0f 1e fa fb f4 c8 f2 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 795.506382][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 795.506397][ C0] RAX: 0b1634dd2488af00 RBX: ffffffff8197a977 RCX: 0b1634dd2488af00 [ 795.506409][ C0] RDX: 0000000000000001 RSI: ffffffff8d790e8f RDI: ffffffff8bbf7760 [ 795.506420][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b86336db R09: 1ffff110170c66db [ 795.506431][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f7df370 [ 795.506442][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a60 [ 795.506452][ C0] FS: 0000000000000000(0000) GS:ffff888125eb8000(0000) knlGS:0000000000000000 [ 795.506465][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 795.506475][ C0] CR2: 00007fd6cb723944 CR3: 0000000027710000 CR4: 00000000003526f0 [ 795.506489][ C0] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000404 [ 795.506499][ C0] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 795.506509][ C0] Call Trace: [ 795.506517][ C0] [ 795.506528][ C0] default_idle+0x13/0x20 [ 795.506545][ C0] default_idle_call+0x73/0xb0 [ 795.506564][ C0] do_idle+0x1e7/0x510 [ 795.506582][ C0] ? irqentry_exit+0x5ba/0x660 [ 795.506599][ C0] ? __pfx_do_idle+0x10/0x10 [ 795.506624][ C0] cpu_startup_entry+0x44/0x60 [ 795.506643][ C0] rest_init+0x2de/0x300 [ 795.506661][ C0] start_kernel+0x3a7/0x410 [ 795.506678][ C0] x86_64_start_reservations+0x24/0x30 [ 795.506697][ C0] x86_64_start_kernel+0x143/0x1c0 [ 795.506715][ C0] common_startup_64+0x13e/0x147 [ 795.506737][ C0]