last executing test programs: 24m37.677877543s ago: executing program 32 (id=26): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) writev(r0, 0x0, 0x0) 23m53.542305712s ago: executing program 33 (id=133): bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="01001e4002007697aa0000a02236e4fdd61e0f00002e5f6314ab70a8105bdc870fc5525bb5aa264ae5e122b761d2784db5d51b06863e53c497185b5658c65212ca"], 0x48) 4m50.315737565s ago: executing program 0 (id=3656): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) 4m34.775229618s ago: executing program 34 (id=3656): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffc4c, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) 3m11.397540328s ago: executing program 7 (id=3874): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_open_procfs(0x0, 0x0) r2 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 2', 0x1b) socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x19, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) recvmmsg(r3, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='[\x00', 0x0) memfd_create(0x0, 0x3) r4 = memfd_secret(0x80000) fcntl$setlease(r4, 0x400, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 3m6.846692268s ago: executing program 7 (id=3881): r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sendfile(r3, r3, 0x0, 0x200000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r4, 0x0, {0x0, 0xff, 0x1}}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="fda6d9e382f94c4d86", 0x9}], 0x1}, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000001, 0x200, 0x6, 0x2, 0x32cf, 0xfff, 0x10001}, {0x80000001, 0xf132, 0x4, 0x1, 0x15, 0x7fffffff, 0x6}]}) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x74, r6, {0xfff3}, {0xffe0}, {0x2, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 3m2.22915446s ago: executing program 7 (id=3889): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$ax25(0x3, 0x2, 0x7) 3m1.159611667s ago: executing program 7 (id=3891): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_open_procfs(0x0, 0x0) r2 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 2', 0x1b) socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x19, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) recvmmsg(r3, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='[\x00', 0x0) memfd_create(0x0, 0x3) r4 = memfd_secret(0x80000) fcntl$setlease(r4, 0x400, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 2m56.079162726s ago: executing program 4 (id=3898): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000100)=[0x81]) semtimedop(0x0, &(0x7f0000000000)=[{}, {0x0, 0x8000, 0x1000}], 0x2, 0x0) semop(0x0, &(0x7f00000003c0)=[{0x0, 0x7fff, 0x1000}, {0x3, 0x0, 0x1000}], 0x2) semctl$IPC_RMID(0x0, 0x0, 0x10) 2m54.823151116s ago: executing program 4 (id=3901): r0 = syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x103}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x6, 0x0, @fd_index=0x3}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000540)=[{&(0x7f0000000700)=""/4109, 0x100d}, {&(0x7f0000000380)=""/73, 0x49}], 0x2) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$key(0xf, 0x3, 0x2) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000480)={0x4, {{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x6}}, {{0xa, 0x4e21, 0xffff8000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}}}, 0x104) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ppoll(&(0x7f0000000000)=[{r0, 0x6490}, {r0, 0xa512}, {r0, 0x5}, {0xffffffffffffffff, 0x8000}, {r0, 0x51c5b47dd0432654}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x2}], 0x7, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)={[0x5]}, 0x8) shutdown(0xffffffffffffffff, 0x0) 2m54.776157386s ago: executing program 7 (id=3902): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r3}, './file0\x00'}) 2m53.767668532s ago: executing program 7 (id=3903): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, 0x0, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) accept4(r3, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xd, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000040)="440f20c03509000000440f22c0410f01c8450f01c566baf80cb827099d8aef66bafc0cec66baf80cb838229a8eef66bafc0cb808000000ef673eec2642d30248b84d9af29b560a9d140f23c00f21f83501000b000f23f80f300f01c5", 0x5c}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2m51.470178298s ago: executing program 4 (id=3909): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000380)={0x4c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd292}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x240000c4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') writev(r0, 0x0, 0x0) 2m51.107041954s ago: executing program 4 (id=3912): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_open_procfs(0x0, 0x0) r2 = openat$6lowpan_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r2, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 2', 0x1b) socket$inet_dccp(0x2, 0x6, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x19, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet(r3, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)='/', 0x1}], 0x1}, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) recvmmsg(r3, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='[\x00', 0x0) memfd_create(0x0, 0x3) r4 = memfd_secret(0x80000) fcntl$setlease(r4, 0x400, 0x0) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 2m47.734258316s ago: executing program 3 (id=3917): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x84515000) 2m46.478024896s ago: executing program 3 (id=3919): r0 = syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x103}, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x6, 0x0, @fd_index=0x3}) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x2a002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000540)=[{&(0x7f0000000700)=""/4109, 0x100d}, {&(0x7f0000000380)=""/73, 0x49}], 0x2) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$key(0xf, 0x3, 0x2) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2c, &(0x7f0000000480)={0x4, {{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x6}}, {{0xa, 0x4e21, 0xffff8000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}}}, 0x104) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ppoll(&(0x7f0000000000)=[{r0, 0x6490}, {r0, 0xa512}, {r0, 0x5}, {0xffffffffffffffff, 0x8000}, {r0, 0x51c5b47dd0432654}, {0xffffffffffffffff, 0x2}, {0xffffffffffffffff, 0x2}], 0x7, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)={[0x5]}, 0x8) shutdown(0xffffffffffffffff, 0x0) 2m46.075003422s ago: executing program 4 (id=3920): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2m44.94401318s ago: executing program 4 (id=3921): r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sendfile(r3, r3, 0x0, 0x200000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x1}}, 0x18) connect$can_j1939(r0, &(0x7f0000000140), 0x18) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="fda6d9e382f94c4d86", 0x9}], 0x1}, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000001, 0x200, 0x6, 0x2, 0x32cf, 0xfff, 0x10001}, {0x80000001, 0xf132, 0x4, 0x1, 0x15, 0x7fffffff, 0x6}]}) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x74, r5, {0xfff3}, {0xffe0}, {0x2, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2m44.040900484s ago: executing program 3 (id=3925): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$ax25_int(r3, 0x101, 0xa, &(0x7f00000003c0)=0x5, 0x4) 2m43.0230463s ago: executing program 3 (id=3926): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@const={0xf, 0x0, 0x0, 0xa, 0x1}, @fwd={0x5}, @volatile={0x4, 0x0, 0x0, 0x9, 0x2}, @struct={0xe, 0x1, 0x0, 0x4, 0x0, 0x40000000, [{0x4, 0x2, 0x1}]}]}}, 0x0, 0x56, 0x0, 0x1, 0xe0000000, 0x0, @void, @value}, 0x28) syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000074020440fd07010099482102030109021b00ca000000010904"], 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) 2m41.234860987s ago: executing program 3 (id=3931): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2m40.096684735s ago: executing program 3 (id=3933): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000380)={0x4c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd292}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x240000c4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') writev(r0, 0x0, 0x0) 2m37.903499129s ago: executing program 35 (id=3903): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, 0x0, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) accept4(r3, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000fff07006706000020000000170200000ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffad35010000000000840400000000000014000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56b8c2b84a800ea6553f304000000815dcf00c3eebc52267b042d19"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={r4, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xd, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000040)="440f20c03509000000440f22c0410f01c8450f01c566baf80cb827099d8aef66bafc0cec66baf80cb838229a8eef66bafc0cb808000000ef673eec2642d30248b84d9af29b560a9d140f23c00f21f83501000b000f23f80f300f01c5", 0x5c}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 2m36.767035327s ago: executing program 6 (id=3940): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x2000, @fd_index=0x4, 0xb, 0x20000003, 0x8020, 0xa, 0x1, {0x2}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x6, @local, 0xfffd, 0x0, 'lblc\x00'}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, 0x0, 0x0, 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) fanotify_init(0x40, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, 0x0, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1000}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r7, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r7, 0x7, &(0x7f0000000340)={0x0, 0x0, 0x10080004b, 0x80000000}) fcntl$lock(r7, 0x25, &(0x7f0000000180)={0x0, 0x1, 0x4, 0x100000000000}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010001000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="850b01001c000000140003006d6163736563300000000000000000000a000100aaaaaaaaaaaa0000"], 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) 2m35.775850223s ago: executing program 6 (id=3941): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x2, [], [0x2b8]}) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r2, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000280)="111ec20239e272abb2cedf053d666ab41bdf031bdcaca63b9856f15d16d909ca3d83d93e22b370e9df36dc459b", 0x2d}], 0x2, 0x4000001, 0x0) sendfile(r1, r2, 0x0, 0x8000fb00) 2m34.841258407s ago: executing program 6 (id=3943): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r4}, './file0\x00'}) 2m33.739879555s ago: executing program 6 (id=3944): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) userfaultfd(0x801) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) 2m32.483084594s ago: executing program 6 (id=3946): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 2m31.4648433s ago: executing program 6 (id=3947): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2ee2, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xa, &(0x7f00000003c0)=0x5, 0x4) 2m29.687113358s ago: executing program 36 (id=3921): r0 = socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) sendfile(r3, r3, 0x0, 0x200000) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0xff, 0x1}}, 0x18) connect$can_j1939(r0, &(0x7f0000000140), 0x18) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="fda6d9e382f94c4d86", 0x9}], 0x1}, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x2, 0x0, [{0x80000001, 0x200, 0x6, 0x2, 0x32cf, 0xfff, 0x10001}, {0x80000001, 0xf132, 0x4, 0x1, 0x15, 0x7fffffff, 0x6}]}) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0xd27, 0x10, 0x0, {0x0, 0x0, 0x74, r5, {0xfff3}, {0xffe0}, {0x2, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2m24.674025765s ago: executing program 37 (id=3933): sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000380)={0x4c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xd292}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x240000c4) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') writev(r0, 0x0, 0x0) 2m16.101301409s ago: executing program 38 (id=3947): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2ee2, &(0x7f00000002c0), 0x13f, 0x3}}, 0x20) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0xa, &(0x7f00000003c0)=0x5, 0x4) 49.020170466s ago: executing program 8 (id=4123): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="440000001300a7ccc7480e1c5d9435f1070c0000", @ANYRES8, @ANYBLOB="00000000100000001c001a800800", @ANYRES8=r3, @ANYBLOB="9c7cec25094ae63e85e769f24e58fc98e9c5ab6d2e67df1a11c716fc29151cf6e4ec2a5bee82373403f6e8"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000001300)={'mangle\x00'}, 0x0) eventfd(0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20) r5 = dup2(r2, r2) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) 44.195138261s ago: executing program 8 (id=4132): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000180)=@rose={'rose', 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f00000004c0), 0x1, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4004879}, 0x20004000) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000480)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0xfff, 0x1}}, 0x20) sched_setscheduler(0x0, 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000040)={0x2, 0x2}) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r2, &(0x7f00000005c0), 0x10) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) sendmsg$can_raw(r2, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000480)={&(0x7f0000000140)=@can={{0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, "5b7ba3698f28aaf0"}, 0x10}}, 0x0) recvmmsg(r2, &(0x7f0000003980)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x40000000, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_audit(0x10, 0x3, 0x9) 42.474596108s ago: executing program 8 (id=4133): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@const={0xf, 0x0, 0x0, 0xa, 0x1}, @fwd={0x5}, @volatile={0x4, 0x0, 0x0, 0x9, 0x2}, @struct={0xe, 0x1, 0x0, 0x4, 0x0, 0x40000000, [{0x4, 0x2, 0x1}]}]}}, 0x0, 0x56, 0x0, 0x1, 0xe0000000, 0x0, @void, @value}, 0x28) syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000074020440fd07010099482102030109021b00ca000000010904"], 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000480)={0xa, 0x0, 0x3c000, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x5}, 0x1c) r2 = dup2(r1, r1) sendmmsg$unix(r2, &(0x7f0000008380), 0x400000000000174, 0x4008890) 39.383489896s ago: executing program 8 (id=4137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 38.215006865s ago: executing program 5 (id=4139): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = syz_io_uring_setup(0xed1, &(0x7f0000000400)={0x0, 0x586d, 0x10300, 0xfffffffe, 0x103}, &(0x7f00000005c0)=0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x6, 0x0, @fd_index=0x3}) r3 = openat$audio(0xffffffffffffff9c, 0x0, 0x2a002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x2) readv(r3, &(0x7f0000000540)=[{&(0x7f0000000700)=""/4109, 0x100d}, {&(0x7f0000000380)=""/73, 0x49}], 0x2) ioctl$SNDCTL_DSP_NONBLOCK(r3, 0x500e, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socket$key(0xf, 0x3, 0x2) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003f000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000480)={0x4, {{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x6}}, {{0xa, 0x4e21, 0xffff8000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x80000000}}}, 0x104) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) ppoll(&(0x7f0000000000)=[{r1, 0x6490}, {r1, 0xa512}, {r1, 0x5}, {r0, 0x8000}, {r1, 0x51c5b47dd0432654}, {r0, 0x2}, {r0, 0x2}], 0x7, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000000080)={[0x5]}, 0x8) shutdown(r0, 0x0) 37.385093468s ago: executing program 8 (id=4140): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r4}, './file0\x00'}) 36.332409534s ago: executing program 8 (id=4144): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) 32.922474917s ago: executing program 5 (id=4149): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x3, 0x40000006, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000, 0xfd5], [0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf152, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 32.617571312s ago: executing program 5 (id=4151): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d0", 0x59}], 0x1}, 0x200048c1) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x40002002) 30.558874494s ago: executing program 5 (id=4154): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0502103, &(0x7f0000000500)={0x0, 0x4000000}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000005c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x442, 0x58ad, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, 0x0, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) bind$inet6(r5, &(0x7f00000004c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x34325258, 0x0, [0x2], [0x800], [0x0, 0x0, 0x0, 0x3]}) r6 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r6, 0xb101, 0x0) connect$pppoe(r6, &(0x7f00000000c0)={0x18, 0x0, {0x2, @broadcast, 'veth1_virt_wifi\x00'}}, 0x1e) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) r7 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) sendmmsg$inet(r8, &(0x7f0000002000)=[{{&(0x7f0000000300)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f00000004c0)='o\b', 0x2}], 0x1}}], 0x1, 0x2400c040) r9 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r10 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r10, r7, r9}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) close(0x4) 29.559919319s ago: executing program 5 (id=4155): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r4}, './file0\x00'}) 28.89898761s ago: executing program 1 (id=4157): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c008500"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f00000001c0)=0x4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) dup3(r2, r0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_getaffinity(r1, 0x8, &(0x7f0000000100)) 27.702876598s ago: executing program 5 (id=4159): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) 27.62440455s ago: executing program 1 (id=4160): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001740)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x3, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="38020000000000002900000036000000004300000000000004013f040100c910ff010000000000000000000000000001c910fc0000000000000000000000000000000001000740000000000e07010101000000010000000200000000000000000000000000000001000000010000002000000000000000ffffffff00000000ffffffffffffff7f06aeb07c1c192077cc9e7c45705803ad5588ca8b194d23f748fe792cfa3d32221f25d73b8ffe64a4ddda6efcfb7483b588194d29c7a04395d8500965a9a1d07879040c44db1d5d6f618d2ab920f0bf168ddc9acc6a51edd1230760d4ae8bf30f5f82a78e8114849ee8e37364560400000035bfa8197ef2ba99103ee5f5aae28ec5c8e2675db11530f5c466d55f2244d479dc653c854406155eada3eaeb90d39149b8d13bab75a9bd1452c8c76284b9ddfbeff41344e64f1771d78a706e1c5a6d63f1c954e24a1e73f75c26e9f09ec9b606cc3470f11c4842db651926bd2263a4a0a8fe80de8b2f9cb176e51819d5f4d10a5d1f0488d5e46953fbfd750f6137fbebe89a8d462158a87f9622355104b4f68d7a6d3ad85c373ea52a25afad37ffb743a5c361158087904b09fcc806d032bac00ee0e0251fc032446e45a3e12417ff4703526ffc45f71567857777927903799e0ba453334186009d22e38099c67b5350c7e82136bba947a18fb61d36fcba1f9efe3d79485d06252702833dc8ee417f40bb9064878fb89dd75a49135e5df148c4ad1e1d5626b44c8112d822f4c9a05e693fd5ae5595627f8684016b37a2bf6d0040030000000000002900000037000000006500000000000000fb1a63687c244e6df3aecb13d6eb957495b669cc032f6d0a11a5e16eed9937b046c9dc1a61dcf9754b767df4735c3f8c37b4d5cd15a99c5a19cc62c921ad4e90d6e3695ec1891223a53600d5031b5735acafb556e22279975f958ad437c76573e544506e58455772eb11493af933099a5dc7e9e0c8b907e68e23e59d7b94bc774309e2047132758b60955301f277a9032b0bc47e660b243e9e2126733f13ab99055a0999068ada35a38d105a5efe6c7115774effe28695ecae3944413b7764eefde26ed571d857b2cb2dd1b2a4a84c1fec0799cf90f57f7a6d35e2b60cd425b9372ae4a27f453e5d7da2eacd3b98cdb10cec9152d5829c2511eb0f9600a0cd280f3d08849b6cd43d25e3dcd62f7c7dee6123a2682daf4aa9a856b31e9204c5c2b80b84dbeec05d93a64a550f1ebc326488cd620c6fe1aa266a0ce5b24be03b5037786e037cc85ed61f362e081fb694e12e54fcb9eb0f86d6d91fd159023a073278f84d6ada8f9aa25ec223d268f3291b25392c941740932bd1a82f40a8fc586db23d2f6240ce883e3c1dc1e0d07fc3aa73a9ac82a1538d129c9e66cb6a8100abe95bc4064581e8c01ce65ba3ea751db5d8c0a1173fe62b2fd2d415042a97ade4d274a466b6d997eed6bf5d7a305ead804c36b9e1c314b26676ed83412417610d3cf4d07e5b24cf3de9c790ae93850e0f8bba047b710cf340c78a80cef5f6665a647681ff5f7b6ecce8ab65e26406b6a6e0e72ff8501c545bffc00f034dc3a5b251390ae68bb61d936dc9a24e6f66c72e7911c51c716dfd4304566fb32e6c2745d232f990d0bbe0ddf9dc58398dda292c07b16da766a37c60bd9993b4f21e641036a8afa2ccdb47d7990d5a007faccb2f86664179f2e229723bce870aec3f7f4e529c92add713590ce6c0ea1a0499fb76d32636cfd18b6b39fb48f1a6d46f6ae8f45c47ee8260f9531070d170ab92739be0bdf5b76f8a9b93a5e550dfecab79d2e46085a67024b6be883c79ade2873458fda5a7f4eb62b05634356ee3b45723f4cff19c654ad441ff5b8792df7f18d841c351e195151b1b3532e742a6525c86efdb29653f35ce8e0a41c8c6d39f39531e13aeb1172893eeedd83b6afb939f8e6abc5482696aa48918000000000000002900000037"], 0x590}}], 0x1, 0x28048825) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000600)="1ed000ad8460ba3f887dc5377aecebc9fb74193fb5c14b9d27db96c44e03a5a9623f83814cfbe19fbb780aca5a", 0x2d}], 0x1}}], 0x1, 0x80) 27.151145827s ago: executing program 1 (id=4163): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008103e00f80ecdb4cb9f207c804a00f00000088080ffb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="440000001300a7ccc7480e1c5d9435f1070c0000", @ANYRES8, @ANYBLOB="00000000100000001c001a800800", @ANYRES8=r3, @ANYBLOB="9c7cec25094ae63e85e769f24e58fc98e9c5ab6d2e67df1a11c716fc29151cf6e4ec2a5bee82373403f6e8"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @loopback, 0x5}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000001300)={'mangle\x00'}, 0x0) eventfd(0x9) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@private0, 0x8000000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x2, 0x0, 0x1}, 0x20) r5 = dup2(r2, r2) sendmmsg$unix(r5, &(0x7f0000008380), 0x400000000000174, 0x4008890) 24.247205082s ago: executing program 1 (id=4169): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) io_uring_setup(0x4fd3, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f0000000080)=@fd={0x0, 0x1, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2e1379f1"}}) sched_setaffinity(r0, 0x8, &(0x7f00000007c0)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmat(r4, &(0x7f00003e8000/0x1000)=nil, 0x4000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_open_dev$loop(0x0, 0x1, 0x400) 22.893656063s ago: executing program 1 (id=4170): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r4}, './file0\x00'}) 21.885727899s ago: executing program 1 (id=4171): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c008500"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f00000001c0)=0x4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) dup3(r2, r0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_getaffinity(r1, 0x8, &(0x7f0000000100)) 21.881804399s ago: executing program 2 (id=4172): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006241a0000000c241b4800050000050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000000c0)={0x40, 0x16, 0x6, "d30abd294510"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 20.867409775s ago: executing program 39 (id=4144): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) 19.138221612s ago: executing program 2 (id=4177): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) syz_emit_ethernet(0x1c, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r3, r2) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, 0x0, 0x4004) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001e00431b000000000000000007"], 0x2c}}, 0x0) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000280)=""/126, 0x7e}], 0x1) listen(r0, 0x8) r6 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r6, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000000)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x2, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x3}, 0x8) 17.99261454s ago: executing program 2 (id=4179): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="24000000320001002abd7000fedbdb2504000000080004"], 0x24}, 0x1, 0x0, 0x0, 0x4040050}, 0x4800) 17.831083792s ago: executing program 2 (id=4180): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000002a00)="6c56a07fdaa372c7a7d264ee3c46af2116af8a67403ff4aca2cf49bbddc2084b15f128404eb717bbe83df9be35072757cf37020e179a3ae66c698a525c511a0502e59f2eef91497734dd1ad06c4fcb943a80b182cc9d7a61b2cd0cfe2a347c963d7ef5c5aff82a1d1f19", 0x6a}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="3800000000000000000000000700000001940401008323f1ac1414bbe0000002e00000010a010102ffffffff00000000ac1414aa7f00000114000000000000000000000002000000ff7f0000000000006c0000000000000000000000070000009404000044240b83e000000200000003ac1414aa0000"], 0xd8}}], 0x2, 0x0) 17.719574604s ago: executing program 2 (id=4181): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r3}, './file0\x00'}) 16.619833261s ago: executing program 2 (id=4183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) newfstatat(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x1000) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd25, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x20004804) 13.917302154s ago: executing program 9 (id=4187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) 13.765906666s ago: executing program 9 (id=4188): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="120100003f7a7e40720c12009622010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000180)={0x0, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 12.530961995s ago: executing program 40 (id=4159): r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000240), 0x4) 11.918222445s ago: executing program 9 (id=4190): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000002a00)="6c56a07fdaa372c7a7d264ee3c46af2116af8a67403ff4aca2cf49bbddc2084b15f128404eb717bbe83df9be35072757cf37020e179a3ae66c698a525c511a0502e59f2eef91497734dd1ad06c4fcb943a80b182cc9d7a61b2cd0cfe2a347c963d7ef5c5aff82a1d1f19", 0x6a}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="3800000000000000000000000700000001940401008323f1ac1414bbe0000002e00000010a010102ffffffff00000000ac1414aa7f00000114000000000000000000000002000000ff7f0000000000006c0000000000000000000000070000009404000044240b83e000000200000003ac1414aa0000"], 0xd8}}], 0x2, 0x0) 11.842150216s ago: executing program 9 (id=4191): add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed}, 0x8) listen(r2, 0x0) accept4(r2, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x3, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYRES32=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r5, 0x0, 0x0}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x81, 0x9, &(0x7f0000000180)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x1000002, 0x0) dup(r6) r7 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x200, 0x4, 0xe5}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x3516, 0x0, 0x0, 0x0, 0x0) 10.9132792s ago: executing program 9 (id=4192): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r3}, './file0\x00'}) 9.936162505s ago: executing program 9 (id=4193): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RWRITE(r1, &(0x7f0000000040)={0xb}, 0x11000) read(r0, &(0x7f0000032440)=""/102364, 0x18fdc) 6.520826099s ago: executing program 41 (id=4171): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c008500"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TFD_IOC_SET_TICKS(r2, 0x40085400, &(0x7f00000001c0)=0x4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) dup3(r2, r0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_getaffinity(r1, 0x8, &(0x7f0000000100)) 3.578703484s ago: executing program 0 (id=4173): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x8, 0xe74, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffc], [0x0, 0x0, 0x0, 0xb16, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x5], [0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x100e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbcd5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0x0, 0x0, 0xc63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdec, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x80000003, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x3, 0x40000006, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80000, 0xfd5], [0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf152, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 3.402987997s ago: executing program 0 (id=4195): open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, &(0x7f0000000300)={0x2020}, 0x2020) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002380)) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0xa, 0x4, 0x0, 0x4, {}, {0x0, 0x0, 0x2, 0x1, 0x0, 0x1, "1700"}, 0x0, 0x2, {}, 0x3}) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000500)={0x0, 0x1, 0x6}) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) 2.332999624s ago: executing program 0 (id=4196): mkdir(&(0x7f0000000240)='./file0\x00', 0x104) r0 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, 0x0, 0x0, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INFO(r5, 0x0, 0x80, &(0x7f00000002c0)={'filter\x00', 0x88, 0x0, 0x0, [0x5, 0xfffffbfe, 0xffff0000, 0xae, 0x401, 0x8]}, 0x0) shutdown(r5, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) sched_getattr(0x0, &(0x7f0000000480)={0x38}, 0x38, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, 0x0, &(0x7f0000000080)=0xfffffffffffffebe) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, 0x0) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0xa, 0xf, 0xd, 0x0, 0xb021, 0x0}) 1.098991763s ago: executing program 0 (id=4197): socket$key(0xf, 0x3, 0x2) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r4) syz_io_uring_submit(r2, r3, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 1.063740654s ago: executing program 42 (id=4183): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='wg0\x00', 0x4) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) newfstatat(0xffffffffffffff9c, 0xffffffffffffffff, 0x0, 0x1000) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x24, r1, 0x1, 0x70bd25, 0x0, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}}, 0x20004804) 0s ago: executing program 0 (id=4199): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000002a00)="6c56a07fdaa372c7a7d264ee3c46af2116af8a67403ff4aca2cf49bbddc2084b15f128404eb717bbe83df9be35072757cf37020e179a3ae66c698a525c511a0502e59f2eef91497734dd1ad06c4fcb943a80b182cc9d7a61b2cd0cfe2a347c963d7ef5c5aff82a1d1f19", 0x6a}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="3800000000000000000000000700000001940401008323f1ac1414bbe0000002e00000010a010102ffffffff00000000ac1414aa7f00000114000000000000000000000002000000ff7f0000000000006c0000000000000000000000070000009404000044240b83e000000200000003ac1414aa0000"], 0xd8}}], 0x2, 0x0) kernel console output (not intermixed with test programs): 12][T20930] nbd9: unable to read partition table [ 1467.778297][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554441, location=33554441 [ 1467.831681][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554185, location=33554185 [ 1467.845422][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554440, location=33554440 [ 1467.857927][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554184, location=33554184 [ 1467.869975][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554439, location=33554439 [ 1467.881099][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554183, location=33554183 [ 1467.892106][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554291, location=33554291 [ 1468.026083][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554035, location=33554035 [ 1468.160842][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554289, location=33554289 [ 1468.413729][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554033, location=33554033 [ 1468.544959][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1468.646630][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1468.656671][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531851, location=27531851 [ 1468.667785][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531595, location=27531595 [ 1468.701975][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531850, location=27531850 [ 1468.721526][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531594, location=27531594 [ 1468.784450][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531596, location=27531596 [ 1468.815043][T21272] netlink: 'syz.5.4031': attribute type 39 has an invalid length. [ 1468.823228][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531849, location=27531849 [ 1468.864584][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531593, location=27531593 [ 1468.912952][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531701, location=27531701 [ 1468.961683][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531445, location=27531445 [ 1468.993158][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531699, location=27531699 [ 1469.022106][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531443, location=27531443 [ 1469.047722][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1469.089639][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1469.125806][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1469.196462][ T4495] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1469.218884][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1469.252959][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16777220, location=16777220 [ 1469.273135][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16776964, location=16776964 [ 1469.293439][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16777219, location=16777219 [ 1469.332772][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16776963, location=16776963 [ 1469.372503][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16777218, location=16777218 [ 1469.384244][ T4495] usb 2-1: device descriptor read/64, error -71 [ 1469.429158][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16776962, location=16776962 [ 1469.472258][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16777070, location=16777070 [ 1469.515644][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16776814, location=16776814 [ 1469.539646][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16777068, location=16777068 [ 1469.554181][ T4408] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1469.579052][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16776812, location=16776812 [ 1469.602087][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1469.664286][ T4495] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1469.677187][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1469.704332][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765925, location=13765925 [ 1469.772893][ T4408] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1469.836725][ T4408] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1469.857016][ T4495] usb 2-1: device descriptor read/64, error -71 [ 1470.001210][ T4408] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1470.011582][ T4408] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.021059][ T4408] usb 9-1: Product: syz [ 1470.028038][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765669, location=13765669 [ 1470.044256][ T4408] usb 9-1: Manufacturer: syz [ 1470.054231][ T4408] usb 9-1: SerialNumber: syz [ 1470.064600][ T4495] usb usb2-port1: attempt power cycle [ 1470.269447][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765924, location=13765924 [ 1470.291803][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765668, location=13765668 [ 1470.375168][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765670, location=13765670 [ 1470.405433][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765923, location=13765923 [ 1470.432018][T21292] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1470.554322][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765667, location=13765667 [ 1470.584221][ T4495] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1470.629474][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765775, location=13765775 [ 1470.651027][ T4495] usb 2-1: device descriptor read/8, error -71 [ 1470.743752][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765519, location=13765519 [ 1470.885691][ T4408] cdc_mbim 9-1:1.0: failed GET_NTB_PARAMETERS [ 1470.902753][ T4408] cdc_mbim 9-1:1.0: bind() failure [ 1470.908951][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765773, location=13765773 [ 1470.933260][ T4408] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 1470.940576][ T4495] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1470.960465][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765517, location=13765517 [ 1470.984171][ T4408] cdc_ncm 9-1:1.1: bind() failure [ 1470.997866][ T4495] usb 2-1: device descriptor read/8, error -71 [ 1471.064465][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1471.078955][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1471.104963][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1471.123705][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1471.138991][ T4495] usb usb2-port1: unable to enumerate USB device [ 1471.165709][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388609, location=8388609 [ 1471.305197][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388353, location=8388353 [ 1471.500864][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388608, location=8388608 [ 1471.558452][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388352, location=8388352 [ 1471.704245][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388607, location=8388607 [ 1472.400128][ T93] blk_print_req_error: 152 callbacks suppressed [ 1472.400150][ T93] I/O error, dev nbd9, sector 67106808 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1472.444190][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388351, location=8388351 [ 1472.464689][ T52] I/O error, dev nbd9, sector 67107672 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1472.474534][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388459, location=8388459 [ 1472.582534][ T93] I/O error, dev nbd9, sector 67105624 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1472.593840][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388203, location=8388203 [ 1472.603948][T15217] usb 9-1: USB disconnect, device number 2 [ 1472.605064][ T93] I/O error, dev nbd9, sector 67107656 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1472.621947][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388457, location=8388457 [ 1472.702675][ T52] I/O error, dev nbd9, sector 67105608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1472.717858][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388201, location=8388201 [ 1472.774653][ T93] I/O error, dev nbd9, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1472.804905][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1472.814966][ T93] I/O error, dev nbd9, sector 2496 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1472.825098][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1472.836167][ T93] I/O error, dev nbd9, sector 67108872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1472.927931][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882965, location=6882965 [ 1473.044407][ T93] I/O error, dev nbd9, sector 67106376 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1473.054377][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882709, location=6882709 [ 1473.088975][T21329] netlink: 'syz.5.4042': attribute type 4 has an invalid length. [ 1473.145737][ T52] I/O error, dev nbd9, sector 67108864 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1473.454441][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882964, location=6882964 [ 1473.465619][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882708, location=6882708 [ 1473.476735][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882710, location=6882710 [ 1473.494650][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882963, location=6882963 [ 1473.534464][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882707, location=6882707 [ 1473.634691][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882815, location=6882815 [ 1473.685104][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882559, location=6882559 [ 1473.734578][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882813, location=6882813 [ 1473.795126][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882557, location=6882557 [ 1473.832024][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1473.894415][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1473.941961][T21259] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1473.978038][T21259] UDF-fs: warning (device nbd9): udf_fill_super: No partition found (1) [ 1477.544468][ T4408] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1477.740467][ T4408] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1477.770022][T21385] netlink: 'syz.1.4051': attribute type 39 has an invalid length. [ 1477.795156][ T4408] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1477.834206][T20864] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1477.865875][ T4408] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1477.928352][ T4408] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1478.000209][ T4408] usb 6-1: Product: syz [ 1478.004333][T20864] usb 3-1: device descriptor read/64, error -71 [ 1478.033422][ T4408] usb 6-1: Manufacturer: syz [ 1478.065139][ T4408] usb 6-1: SerialNumber: syz [ 1478.284142][T20864] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1478.312378][T21393] nbd8: detected capacity change from 0 to 67108884 [ 1478.335751][T21372] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1478.393040][ T93] block nbd8: Send control failed (result -89) [ 1478.399381][ T93] block nbd8: Request send failed, requeueing [ 1478.406036][ T4261] block nbd8: Receive control failed (result -32) [ 1478.406285][ T93] block nbd8: Dead connection, failed to find a fallback [ 1478.419683][ T93] block nbd8: shutting down sockets [ 1478.425155][ T93] blk_print_req_error: 11 callbacks suppressed [ 1478.425166][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1478.440693][ T93] buffer_io_error: 90 callbacks suppressed [ 1478.440705][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1478.459391][ T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1478.469072][T20864] usb 3-1: device descriptor read/64, error -71 [ 1478.475580][ T52] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1478.488035][ T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1478.497320][ T52] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1478.505439][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1478.514891][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1478.524967][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1478.544229][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1478.553022][ T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1478.562199][ T52] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1478.574569][ T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1478.583754][ T52] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1478.592209][ T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1478.601470][ T52] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1478.609831][T20930] ldm_validate_partition_table(): Disk read failed. [ 1478.624574][T20864] usb usb3-port1: attempt power cycle [ 1478.647311][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1478.658957][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1478.682472][ T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1478.691770][ T52] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1478.710390][T20930] Dev nbd8: unable to read RDB block 0 [ 1478.775152][T20930] nbd8: unable to read partition table [ 1478.815599][T21389] ldm_validate_partition_table(): Disk read failed. [ 1478.855419][T21389] Dev nbd8: unable to read RDB block 0 [ 1478.861523][ T4408] cdc_mbim 6-1:1.0: failed GET_NTB_PARAMETERS [ 1478.873223][ T4408] cdc_mbim 6-1:1.0: bind() failure [ 1478.908101][ T4408] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1478.925664][ T4408] cdc_ncm 6-1:1.1: bind() failure [ 1479.044157][T20864] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1479.068057][T21389] nbd8: unable to read partition table [ 1479.092550][T20930] ldm_validate_partition_table(): Disk read failed. [ 1479.103794][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1479.122635][T20864] usb 3-1: device descriptor read/8, error -71 [ 1479.124019][T20930] Dev nbd8: unable to read RDB block 0 [ 1479.144506][T20930] nbd8: unable to read partition table [ 1479.150628][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554441, location=33554441 [ 1479.176709][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554185, location=33554185 [ 1479.196812][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554440, location=33554440 [ 1479.211217][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554184, location=33554184 [ 1479.230940][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554439, location=33554439 [ 1479.248108][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554183, location=33554183 [ 1479.260362][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554291, location=33554291 [ 1479.282593][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554035, location=33554035 [ 1479.303607][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554289, location=33554289 [ 1479.325476][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554033, location=33554033 [ 1479.342767][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1479.353156][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1479.370241][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531851, location=27531851 [ 1479.381376][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531595, location=27531595 [ 1479.411100][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531850, location=27531850 [ 1479.429324][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531594, location=27531594 [ 1479.441506][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531596, location=27531596 [ 1479.444176][T20864] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1479.459518][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531849, location=27531849 [ 1479.459815][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531593, location=27531593 [ 1479.511536][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531701, location=27531701 [ 1479.549372][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531445, location=27531445 [ 1479.577005][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531699, location=27531699 [ 1479.605651][T20864] usb 3-1: device descriptor read/8, error -71 [ 1479.606519][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531443, location=27531443 [ 1479.645801][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1479.668006][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1479.694641][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1479.719395][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1479.734637][T20864] usb usb3-port1: unable to enumerate USB device [ 1479.745139][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777220, location=16777220 [ 1479.769498][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776964, location=16776964 [ 1479.792889][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777219, location=16777219 [ 1479.821570][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776963, location=16776963 [ 1479.853883][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777218, location=16777218 [ 1479.879146][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776962, location=16776962 [ 1479.904436][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777070, location=16777070 [ 1479.946819][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776814, location=16776814 [ 1479.997350][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777068, location=16777068 [ 1480.050101][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776812, location=16776812 [ 1480.092747][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1480.122248][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1480.142560][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765925, location=13765925 [ 1480.295322][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765669, location=13765669 [ 1480.326691][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765924, location=13765924 [ 1481.026665][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765668, location=13765668 [ 1481.146488][T18754] usb 6-1: USB disconnect, device number 23 [ 1481.180479][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765670, location=13765670 [ 1481.239743][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765923, location=13765923 [ 1481.299693][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765667, location=13765667 [ 1481.365323][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765775, location=13765775 [ 1481.445800][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765519, location=13765519 [ 1481.477203][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765773, location=13765773 [ 1481.515640][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765517, location=13765517 [ 1481.664612][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1481.710308][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1481.986598][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1482.098394][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1482.199735][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388609, location=8388609 [ 1482.308701][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388353, location=8388353 [ 1482.564486][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388608, location=8388608 [ 1482.582572][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388352, location=8388352 [ 1482.627859][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388607, location=8388607 [ 1482.680281][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388351, location=8388351 [ 1482.746519][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388459, location=8388459 [ 1482.792071][T21443] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4062'. [ 1482.811703][T21443] device bond_slave_0 entered promiscuous mode [ 1482.818034][T21443] device bond_slave_1 entered promiscuous mode [ 1482.834658][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388203, location=8388203 [ 1482.874488][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388457, location=8388457 [ 1482.906193][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388201, location=8388201 [ 1482.944693][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1482.975900][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1483.018960][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882965, location=6882965 [ 1483.054343][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882709, location=6882709 [ 1483.085252][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882964, location=6882964 [ 1483.305555][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882708, location=6882708 [ 1483.359708][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882710, location=6882710 [ 1483.474909][ T93] blk_print_req_error: 142 callbacks suppressed [ 1483.474931][ T93] I/O error, dev nbd8, sector 67108856 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1483.492274][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882963, location=6882963 [ 1483.537377][ T52] I/O error, dev nbd8, sector 67106360 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1483.551104][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882707, location=6882707 [ 1483.663244][ T93] I/O error, dev nbd8, sector 67107392 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1483.673251][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882815, location=6882815 [ 1483.684472][ T93] I/O error, dev nbd8, sector 67104896 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1483.695249][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882559, location=6882559 [ 1483.708312][ T93] I/O error, dev nbd8, sector 67107376 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1483.718291][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882813, location=6882813 [ 1483.730808][ T93] I/O error, dev nbd8, sector 67104880 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1483.743870][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882557, location=6882557 [ 1483.749452][ T52] I/O error, dev nbd8, sector 4992 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1483.749675][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1483.749997][ T52] I/O error, dev nbd8, sector 2496 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1483.750137][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1483.750477][ T52] I/O error, dev nbd8, sector 4992 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1483.750607][T21389] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1483.750649][T21389] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 1484.436910][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.443383][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.314361][T18754] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1485.518586][T18754] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1485.545426][T18754] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1485.591501][T18754] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1485.622189][T18754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.638189][T21482] netlink: 'syz.8.4072': attribute type 39 has an invalid length. [ 1485.651428][T18754] usb 3-1: Product: syz [ 1485.658148][T18754] usb 3-1: Manufacturer: syz [ 1485.675901][T18754] usb 3-1: SerialNumber: syz [ 1485.909751][T21469] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1486.353898][T18754] cdc_mbim 3-1:1.0: failed GET_NTB_PARAMETERS [ 1486.353942][T18754] cdc_mbim 3-1:1.0: bind() failure [ 1486.357626][T18754] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1486.357654][T18754] cdc_ncm 3-1:1.1: bind() failure [ 1488.327757][T16404] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1488.475465][T18754] usb 3-1: USB disconnect, device number 6 [ 1489.095027][T18754] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1489.471236][T16404] usb 10-1: no configurations [ 1489.476407][T16404] usb 10-1: can't read configurations, error -22 [ 1489.744203][T16404] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1489.766467][T18754] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1489.797376][T18754] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1489.886828][T21533] nbd8: detected capacity change from 0 to 67108884 [ 1489.921358][T18754] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1489.937919][ T93] block nbd8: Send control failed (result -89) [ 1489.944217][ T93] block nbd8: Request send failed, requeueing [ 1489.950463][ T4261] block nbd8: Receive control failed (result -32) [ 1489.950576][ T93] block nbd8: Dead connection, failed to find a fallback [ 1489.966175][ T93] block nbd8: shutting down sockets [ 1489.971454][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1489.980805][T16404] usb 10-1: no configurations [ 1489.985619][ T93] buffer_io_error: 66 callbacks suppressed [ 1489.985631][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1489.999405][T16404] usb 10-1: can't read configurations, error -22 [ 1489.999551][ T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1490.007038][T16404] usb usb10-port1: attempt power cycle [ 1490.015039][ T52] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1490.020590][T18754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.028573][ T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1490.037449][T18754] usb 3-1: Product: syz [ 1490.046146][ T52] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1490.050257][T18754] usb 3-1: Manufacturer: syz [ 1490.058208][ T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1490.063364][T18754] usb 3-1: SerialNumber: syz [ 1490.072180][ T52] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1490.105698][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1490.115476][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1490.123920][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1490.133519][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1490.142650][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1490.151847][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1490.160192][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1490.170175][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1490.178641][T20930] ldm_validate_partition_table(): Disk read failed. [ 1490.189031][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1490.198732][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1490.212740][ T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1490.222149][ T52] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1490.241295][T20930] Dev nbd8: unable to read RDB block 0 [ 1490.278512][T20930] nbd8: unable to read partition table [ 1490.318056][T21533] ldm_validate_partition_table(): Disk read failed. [ 1490.335917][T21533] Dev nbd8: unable to read RDB block 0 [ 1490.411430][T21533] nbd8: unable to read partition table [ 1490.455261][T20930] ldm_validate_partition_table(): Disk read failed. [ 1490.472192][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1490.494723][T20930] Dev nbd8: unable to read RDB block 0 [ 1490.526311][T20930] nbd8: unable to read partition table [ 1490.600550][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554441, location=33554441 [ 1490.667621][T16404] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1490.694792][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554185, location=33554185 [ 1490.854432][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554440, location=33554440 [ 1490.901706][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554184, location=33554184 [ 1490.957325][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554439, location=33554439 [ 1491.021480][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554183, location=33554183 [ 1491.614659][T21546] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4081'. [ 1491.623707][T21546] tipc: Started in network mode [ 1491.628668][T21546] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 1491.636054][T21546] tipc: Enabled bearer , priority 10 [ 1491.806449][T21546] tipc: Resetting bearer [ 1492.519716][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554291, location=33554291 [ 1492.617381][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554035, location=33554035 [ 1492.642640][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554289, location=33554289 [ 1492.653437][ T4407] tipc: Node number set to 10005162 [ 1492.662029][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554033, location=33554033 [ 1492.673881][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1492.684331][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1492.694541][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531851, location=27531851 [ 1492.707614][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531595, location=27531595 [ 1492.721092][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531850, location=27531850 [ 1492.732377][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531594, location=27531594 [ 1492.743569][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531596, location=27531596 [ 1492.759592][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531849, location=27531849 [ 1492.774605][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531593, location=27531593 [ 1492.795064][T21546] tipc: Disabling bearer [ 1492.816305][T21550] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4085'. [ 1492.854598][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531701, location=27531701 [ 1492.865783][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531445, location=27531445 [ 1492.876920][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531699, location=27531699 [ 1492.897527][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531443, location=27531443 [ 1492.950319][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1492.998123][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1493.009296][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1493.024679][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1493.035408][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777220, location=16777220 [ 1493.046498][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776964, location=16776964 [ 1493.057807][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777219, location=16777219 [ 1493.069046][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776963, location=16776963 [ 1493.085500][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777218, location=16777218 [ 1493.132030][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776962, location=16776962 [ 1493.154912][ T4261] Bluetooth: hci3: command 0x0405 tx timeout [ 1493.161227][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777070, location=16777070 [ 1493.204832][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776814, location=16776814 [ 1493.244549][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777068, location=16777068 [ 1493.314840][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776812, location=16776812 [ 1493.406507][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1493.492551][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1493.613849][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765925, location=13765925 [ 1493.625413][T18754] usb 3-1: skipping empty audio interface (v1) [ 1493.641420][T18754] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1493.654681][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765669, location=13765669 [ 1493.684884][T18754] usb 3-1: USB disconnect, device number 7 [ 1493.701450][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765924, location=13765924 [ 1493.807548][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765668, location=13765668 [ 1493.823347][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765670, location=13765670 [ 1493.940292][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765923, location=13765923 [ 1494.054378][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765667, location=13765667 [ 1494.370393][T20930] udevd[20930]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1494.914930][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765775, location=13765775 [ 1495.046205][ T93] blk_print_req_error: 111 callbacks suppressed [ 1495.046225][ T93] I/O error, dev nbd8, sector 67106892 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1495.063652][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765519, location=13765519 [ 1495.104150][ T52] I/O error, dev nbd8, sector 67108132 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1495.114098][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765773, location=13765773 [ 1495.155123][ T93] I/O error, dev nbd8, sector 67106884 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1495.190616][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765517, location=13765517 [ 1495.246274][ T4261] Bluetooth: hci3: command 0x0405 tx timeout [ 1495.256519][ T93] I/O error, dev nbd8, sector 2496 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1495.267226][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1495.315328][ T93] I/O error, dev nbd8, sector 1248 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1495.325290][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1495.364238][ T52] I/O error, dev nbd8, sector 2496 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1495.375485][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1495.416467][ T93] I/O error, dev nbd8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1495.437139][ T93] I/O error, dev nbd8, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1495.446885][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1495.475349][ T52] I/O error, dev nbd8, sector 67108872 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1495.494622][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388609, location=8388609 [ 1495.554639][ T52] I/O error, dev nbd8, sector 67106824 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1495.564732][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388353, location=8388353 [ 1495.594194][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388608, location=8388608 [ 1495.642406][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388352, location=8388352 [ 1495.687385][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388607, location=8388607 [ 1495.733282][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388351, location=8388351 [ 1495.803403][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388459, location=8388459 [ 1495.803505][T21581] netlink: 'syz.2.4088': attribute type 39 has an invalid length. [ 1495.854167][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388203, location=8388203 [ 1495.899414][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388457, location=8388457 [ 1495.961051][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388201, location=8388201 [ 1496.025236][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1496.104302][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1496.174384][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882965, location=6882965 [ 1496.218651][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882709, location=6882709 [ 1496.274319][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882964, location=6882964 [ 1496.385492][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882708, location=6882708 [ 1496.401930][T16404] usb 10-1: device descriptor read/8, error -71 [ 1497.419665][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882710, location=6882710 [ 1497.805831][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882963, location=6882963 [ 1497.881389][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882707, location=6882707 [ 1498.088278][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882815, location=6882815 [ 1498.120964][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882559, location=6882559 [ 1498.244212][T16404] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1498.943766][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882813, location=6882813 [ 1498.967065][T16404] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1498.978553][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882557, location=6882557 [ 1499.009837][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1499.040270][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1499.044127][T16404] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1499.081392][T21533] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1499.118935][T16404] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1499.144265][T21533] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 1499.251179][T16404] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.297305][T16404] usb 10-1: Product: syz [ 1499.325708][T16404] usb 10-1: Manufacturer: syz [ 1499.377125][T16404] usb 10-1: SerialNumber: syz [ 1499.764926][T21595] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1500.744968][T21611] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4094'. [ 1500.935936][T21611] device vlan0 entered promiscuous mode [ 1500.941737][T21611] device bond0 entered promiscuous mode [ 1501.006801][T21611] device bond_slave_0 entered promiscuous mode [ 1501.028225][T21611] device bond_slave_1 entered promiscuous mode [ 1501.064867][T16404] cdc_mbim 10-1:1.0: bind() failure [ 1501.081839][T16404] cdc_ncm: probe of 10-1:1.1 failed with error -71 [ 1501.133687][T16404] cdc_mbim: probe of 10-1:1.1 failed with error -71 [ 1501.237287][T16404] usbtest: probe of 10-1:1.1 failed with error -71 [ 1501.442264][T16404] usb 10-1: USB disconnect, device number 8 [ 1501.722009][T21611] device bond0 left promiscuous mode [ 1501.729344][T21611] device bond_slave_0 left promiscuous mode [ 1502.238050][T21611] device bond_slave_1 left promiscuous mode [ 1504.157451][ T27] audit: type=1326 audit(1743309710.320:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21639 comm="syz.1.4102" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f128738d169 code=0x0 [ 1504.196603][T21638] netlink: 'syz.5.4101': attribute type 1 has an invalid length. [ 1504.214315][T21638] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4101'. [ 1504.426209][T21644] nbd8: detected capacity change from 0 to 67108884 [ 1504.434517][ T93] block nbd8: Send control failed (result -89) [ 1504.440734][ T93] block nbd8: Request send failed, requeueing [ 1504.447774][ T4261] block nbd8: Receive control failed (result -32) [ 1504.447802][ T93] block nbd8: Dead connection, failed to find a fallback [ 1504.461737][ T93] block nbd8: shutting down sockets [ 1504.467636][ T93] blk_print_req_error: 24 callbacks suppressed [ 1504.467654][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1504.486800][ T93] buffer_io_error: 60 callbacks suppressed [ 1504.486817][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1504.501445][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1504.510599][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1504.519207][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1504.528339][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1504.537843][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1504.547009][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1504.556937][ T52] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1504.566242][ T52] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1504.574240][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1504.584214][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1504.592223][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1504.601478][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1504.609765][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1504.619004][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1504.627008][T20930] ldm_validate_partition_table(): Disk read failed. [ 1504.633869][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1504.643068][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1504.651848][ T93] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1504.661018][ T93] Buffer I/O error on dev nbd8, logical block 0, async page read [ 1504.689282][T20930] Dev nbd8: unable to read RDB block 0 [ 1504.747636][T20930] nbd8: unable to read partition table [ 1504.838613][T21651] ldm_validate_partition_table(): Disk read failed. [ 1504.871200][T21651] Dev nbd8: unable to read RDB block 0 [ 1504.901769][T21651] nbd8: unable to read partition table [ 1504.930146][T20930] ldm_validate_partition_table(): Disk read failed. [ 1504.945606][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1504.960559][T20930] Dev nbd8: unable to read RDB block 0 [ 1504.990716][T20930] nbd8: unable to read partition table [ 1504.999054][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554441, location=33554441 [ 1505.041639][T21655] netlink: 'syz.2.4104': attribute type 39 has an invalid length. [ 1505.075104][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554185, location=33554185 [ 1505.204792][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554440, location=33554440 [ 1505.264770][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554184, location=33554184 [ 1505.314895][ T4261] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1505.324381][ T4261] Bluetooth: hci4: Injecting HCI hardware error event [ 1505.334454][ T4268] Bluetooth: hci4: hardware error 0x00 [ 1505.373390][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554439, location=33554439 [ 1505.384761][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554183, location=33554183 [ 1505.400417][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554291, location=33554291 [ 1505.411827][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554035, location=33554035 [ 1505.424273][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554289, location=33554289 [ 1505.435018][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=33554033, location=33554033 [ 1505.454541][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1505.467573][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1505.485129][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531851, location=27531851 [ 1505.561594][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531595, location=27531595 [ 1505.605188][T21664] netlink: 830 bytes leftover after parsing attributes in process `syz.9.4105'. [ 1505.621625][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531850, location=27531850 [ 1505.654325][T21664] device bond_slave_0 entered promiscuous mode [ 1505.660589][T21664] device bond_slave_1 entered promiscuous mode [ 1505.692699][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531594, location=27531594 [ 1505.733907][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531596, location=27531596 [ 1505.755333][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531849, location=27531849 [ 1505.787960][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531593, location=27531593 [ 1505.850451][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531701, location=27531701 [ 1505.911128][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531445, location=27531445 [ 1505.970011][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531699, location=27531699 [ 1506.013477][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=27531443, location=27531443 [ 1506.068390][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1506.129682][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1506.259677][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1506.315092][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1506.415157][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777220, location=16777220 [ 1506.487939][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776964, location=16776964 [ 1506.605430][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777219, location=16777219 [ 1506.729826][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776963, location=16776963 [ 1506.843998][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777218, location=16777218 [ 1506.873427][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776962, location=16776962 [ 1507.324467][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777070, location=16777070 [ 1507.398753][ T4268] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1507.418279][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776814, location=16776814 [ 1507.445318][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16777068, location=16777068 [ 1507.479342][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=16776812, location=16776812 [ 1507.497692][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1507.539116][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1507.606581][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765925, location=13765925 [ 1507.692002][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765669, location=13765669 [ 1507.733650][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765924, location=13765924 [ 1507.801643][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765668, location=13765668 [ 1507.954387][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765670, location=13765670 [ 1507.984465][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765923, location=13765923 [ 1508.030579][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765667, location=13765667 [ 1508.082338][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765775, location=13765775 [ 1508.122276][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765519, location=13765519 [ 1508.174123][ T4407] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 1508.185026][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765773, location=13765773 [ 1508.234373][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=13765517, location=13765517 [ 1508.328799][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1508.376024][ T4407] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1508.487860][ T4407] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1508.504317][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1508.755217][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1509.328085][ T4407] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1509.338243][ T4407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1509.346488][ T4407] usb 3-1: Product: syz [ 1509.350856][ T4407] usb 3-1: Manufacturer: syz [ 1509.357058][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1509.375344][ T4407] usb 3-1: SerialNumber: syz [ 1509.404916][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388609, location=8388609 [ 1509.514662][ T93] blk_print_req_error: 126 callbacks suppressed [ 1509.514680][ T93] I/O error, dev nbd8, sector 67106824 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1509.531140][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388353, location=8388353 [ 1509.564758][ T52] I/O error, dev nbd8, sector 67108864 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1509.574961][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388608, location=8388608 [ 1509.601414][T21703] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4112'. [ 1509.624439][ T52] I/O error, dev nbd8, sector 67106816 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1509.634830][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388352, location=8388352 [ 1509.648702][ T52] I/O error, dev nbd8, sector 67108856 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1509.664285][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388607, location=8388607 [ 1509.664735][T21689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1509.675039][ T52] I/O error, dev nbd8, sector 67106808 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1509.694205][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388351, location=8388351 [ 1509.824500][ T52] I/O error, dev nbd8, sector 67107672 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1509.834806][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388459, location=8388459 [ 1509.855932][ T52] I/O error, dev nbd8, sector 67105624 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1509.870656][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388203, location=8388203 [ 1509.901459][ T52] I/O error, dev nbd8, sector 67107656 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1509.912684][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388457, location=8388457 [ 1509.924138][ T52] I/O error, dev nbd8, sector 67105608 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1509.934158][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=8388201, location=8388201 [ 1509.944833][ T52] I/O error, dev nbd8, sector 4096 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1509.954429][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1509.974400][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1509.984300][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882965, location=6882965 [ 1509.995013][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882709, location=6882709 [ 1510.006093][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882964, location=6882964 [ 1510.016715][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882708, location=6882708 [ 1510.028024][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882710, location=6882710 [ 1510.044371][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882963, location=6882963 [ 1510.055107][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882707, location=6882707 [ 1510.065739][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882815, location=6882815 [ 1510.092145][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882559, location=6882559 [ 1510.141395][T21707] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4114'. [ 1510.284595][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882813, location=6882813 [ 1510.353248][T21707] device vlan2 entered promiscuous mode [ 1510.365678][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=6882557, location=6882557 [ 1511.146201][T21689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1511.686495][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1511.732733][ T4407] cdc_mbim 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1511.739541][ T4407] cdc_mbim 3-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1511.747976][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=256, location=256 [ 1511.748157][ T4407] cdc_mbim 3-1:1.0: setting rx_max = 2048 [ 1511.799924][T21651] UDF-fs: error (device nbd8): udf_read_tagged: read failed, block=512, location=512 [ 1511.810017][T21651] UDF-fs: warning (device nbd8): udf_fill_super: No partition found (1) [ 1512.075043][ T4407] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 1512.115880][ T4407] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 1512.182554][ T4407] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 42:42:42:42:42:42 [ 1512.257927][ T4407] usb 3-1: USB disconnect, device number 8 [ 1512.271342][ T27] audit: type=1326 audit(1743309718.430:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21725 comm="syz.5.4116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46d3b8d169 code=0x0 [ 1512.280688][ T4407] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 1512.644390][ T4495] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1512.858078][ T4495] usb 9-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 1512.894152][ T4495] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1512.915070][ T4495] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 1512.949437][ T4495] usb 9-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1512.959677][ T4495] usb 9-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1512.977780][ T4495] usb 9-1: Product: syz [ 1512.982607][ T4495] usb 9-1: Manufacturer: syz [ 1512.995106][ T4495] usb 9-1: SerialNumber: syz [ 1513.047356][ T4495] usb 9-1: config 0 descriptor?? [ 1513.526795][ T4495] snd-usb-audio: probe of 9-1:0.0 failed with error -2 [ 1513.544342][ T4495] usb 9-1: USB disconnect, device number 3 [ 1513.775015][T20930] udevd[20930]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1514.058946][T21753] netlink: 'syz.1.4119': attribute type 39 has an invalid length. [ 1515.068236][T21756] netlink: 830 bytes leftover after parsing attributes in process `syz.8.4123'. [ 1515.089907][T21756] device bond_slave_0 entered promiscuous mode [ 1515.096300][T21756] device bond_slave_1 entered promiscuous mode [ 1515.524326][ T4410] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1516.498850][T21773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4126'. [ 1516.526217][T21773] device vlan0 entered promiscuous mode [ 1516.538898][ T4410] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1516.561794][T21773] device bond0 entered promiscuous mode [ 1516.578222][ T4410] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1516.588974][T21773] device bond_slave_0 entered promiscuous mode [ 1516.604642][T21773] device bond_slave_1 entered promiscuous mode [ 1516.611178][ T4410] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1516.634889][ T4410] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1516.658559][T21763] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1516.681958][T21773] device bond0 left promiscuous mode [ 1516.692433][T21773] device bond_slave_0 left promiscuous mode [ 1516.725875][T21773] device bond_slave_1 left promiscuous mode [ 1517.158979][ T4410] usb 6-1: USB disconnect, device number 24 [ 1517.390466][T21786] nbd9: detected capacity change from 0 to 67108884 [ 1517.419981][ T93] block nbd9: Send control failed (result -89) [ 1517.426301][ T93] block nbd9: Request send failed, requeueing [ 1517.432547][ T4268] block nbd9: Receive control failed (result -32) [ 1517.432609][ T93] block nbd9: Dead connection, failed to find a fallback [ 1517.446393][ T93] block nbd9: shutting down sockets [ 1517.454189][ T93] blk_print_req_error: 15 callbacks suppressed [ 1517.454209][ T93] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1517.469620][ T93] buffer_io_error: 66 callbacks suppressed [ 1517.469636][ T93] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1517.484252][ T52] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1517.493433][ T52] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1517.501843][ T52] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1517.511169][ T52] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1517.519124][ T52] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1517.528302][ T52] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1517.536395][ T93] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1517.545611][ T93] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1517.567445][ T93] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1517.576616][ T93] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1517.585525][ T93] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1517.594669][ T93] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1517.605006][ T52] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1517.614688][ T52] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1517.622519][T21778] ldm_validate_partition_table(): Disk read failed. [ 1517.653585][ T52] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1517.662849][ T52] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1517.672249][ T52] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1517.681706][ T52] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1517.715172][T21778] Dev nbd9: unable to read RDB block 0 [ 1517.725901][T21778] nbd9: unable to read partition table [ 1517.736009][T21789] ldm_validate_partition_table(): Disk read failed. [ 1517.745089][T21789] Dev nbd9: unable to read RDB block 0 [ 1517.752165][T21789] nbd9: unable to read partition table [ 1517.759193][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1517.762052][T21778] ldm_validate_partition_table(): Disk read failed. [ 1517.769207][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554441, location=33554441 [ 1517.787188][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554185, location=33554185 [ 1517.798035][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554440, location=33554440 [ 1517.810441][T21778] Dev nbd9: unable to read RDB block 0 [ 1517.817268][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554184, location=33554184 [ 1517.830386][T21778] nbd9: unable to read partition table [ 1517.842368][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554439, location=33554439 [ 1517.918582][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554183, location=33554183 [ 1518.021276][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554291, location=33554291 [ 1518.089625][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554035, location=33554035 [ 1518.137765][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554289, location=33554289 [ 1518.251168][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554033, location=33554033 [ 1518.304262][T17715] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1518.335073][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1518.379144][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1518.525740][T17715] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1518.544112][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531851, location=27531851 [ 1518.580867][T17715] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1518.653000][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531595, location=27531595 [ 1518.669128][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531850, location=27531850 [ 1518.680565][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531594, location=27531594 [ 1518.691764][T17715] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1518.701174][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531596, location=27531596 [ 1518.734296][T17715] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.742356][T17715] usb 6-1: Product: syz [ 1518.836012][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531849, location=27531849 [ 1518.965300][T17715] usb 6-1: Manufacturer: syz [ 1519.066658][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531593, location=27531593 [ 1519.126059][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531701, location=27531701 [ 1519.141326][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531445, location=27531445 [ 1519.158537][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531699, location=27531699 [ 1519.171479][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531443, location=27531443 [ 1519.184467][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1519.195448][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1519.206412][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1519.240378][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1519.252160][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16777220, location=16777220 [ 1519.264378][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16776964, location=16776964 [ 1519.281241][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16777219, location=16777219 [ 1519.293743][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16776963, location=16776963 [ 1519.305518][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16777218, location=16777218 [ 1519.318099][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16776962, location=16776962 [ 1519.333113][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16777070, location=16777070 [ 1519.345952][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16776814, location=16776814 [ 1519.362062][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16777068, location=16777068 [ 1519.374746][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16776812, location=16776812 [ 1519.387864][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1519.407036][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1519.418013][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765925, location=13765925 [ 1519.431222][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765669, location=13765669 [ 1519.443019][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765924, location=13765924 [ 1519.546324][T17715] usb 6-1: SerialNumber: syz [ 1519.576800][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765668, location=13765668 [ 1519.664445][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765670, location=13765670 [ 1519.689931][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765923, location=13765923 [ 1519.731275][T21802] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1519.755293][T21802] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1519.769797][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765667, location=13765667 [ 1519.830066][T21802] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1519.842787][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765775, location=13765775 [ 1519.868567][T21802] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1519.891401][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765519, location=13765519 [ 1519.911717][T21801] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1519.933399][T21802] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1519.955682][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765773, location=13765773 [ 1519.971721][T21802] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1520.000749][T21802] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1520.007215][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765517, location=13765517 [ 1520.007455][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1520.047800][T21802] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1520.078120][T21802] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1520.108702][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1520.169512][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1520.210040][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1520.250762][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388609, location=8388609 [ 1520.300903][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388353, location=8388353 [ 1520.360782][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388608, location=8388608 [ 1520.462939][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388352, location=8388352 [ 1520.544483][T21801] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1520.603906][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388607, location=8388607 [ 1520.691751][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388351, location=8388351 [ 1520.727799][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388459, location=8388459 [ 1520.765086][T17715] cdc_mbim 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1520.771666][T17715] cdc_mbim 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1520.800293][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388203, location=8388203 [ 1520.834763][T17715] cdc_mbim 6-1:1.0: setting rx_max = 2048 [ 1520.848695][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388457, location=8388457 [ 1520.884517][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388201, location=8388201 [ 1520.895434][T20865] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1520.918890][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1520.958327][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1520.969394][T17715] cdc_mbim 6-1:1.0: setting tx_max = 184 [ 1520.984503][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882965, location=6882965 [ 1520.995968][T17715] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device [ 1521.052264][T17715] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 42:42:42:42:42:42 [ 1521.095643][T20865] usb 9-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 1521.114654][T20865] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.154152][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882709, location=6882709 [ 1521.179524][T17715] usb 6-1: USB disconnect, device number 25 [ 1521.203899][T17715] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM [ 1521.213679][T20865] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 1521.240478][T20865] usb 9-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1521.266635][T20865] usb 9-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1521.274082][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882964, location=6882964 [ 1521.304266][T20865] usb 9-1: Product: syz [ 1521.314417][T20865] usb 9-1: Manufacturer: syz [ 1521.324533][T20865] usb 9-1: SerialNumber: syz [ 1521.324575][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882708, location=6882708 [ 1521.358314][T20865] usb 9-1: config 0 descriptor?? [ 1521.381791][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882710, location=6882710 [ 1521.448101][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882963, location=6882963 [ 1521.488757][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882707, location=6882707 [ 1521.588270][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882815, location=6882815 [ 1521.636112][ T4268] Bluetooth: hci0: command 0x0c1a tx timeout [ 1521.664747][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882559, location=6882559 [ 1521.884509][ T4268] Bluetooth: hci2: command 0x0c1a tx timeout [ 1522.036298][ T4268] Bluetooth: hci3: command 0x0c1a tx timeout [ 1522.134721][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882813, location=6882813 [ 1522.178462][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882557, location=6882557 [ 1522.225610][T20865] snd-usb-audio: probe of 9-1:0.0 failed with error -2 [ 1522.237740][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1522.261137][T21778] udevd[21778]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1522.274359][T20865] usb 9-1: USB disconnect, device number 4 [ 1522.327801][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1522.376397][T21789] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1522.419025][T21789] UDF-fs: warning (device nbd9): udf_fill_super: No partition found (1) [ 1523.714207][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 1524.014192][ T4261] Bluetooth: hci2: command 0x0406 tx timeout [ 1524.114593][ T4261] Bluetooth: hci3: command 0x0406 tx timeout [ 1525.986874][T21869] netlink: 'syz.5.4139': attribute type 39 has an invalid length. [ 1526.515850][T21872] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4142'. [ 1529.290306][T21893] nbd2: detected capacity change from 0 to 67108884 [ 1529.305664][ T93] block nbd2: Send control failed (result -89) [ 1529.311897][ T93] block nbd2: Request send failed, requeueing [ 1529.318730][ T4261] block nbd2: Receive control failed (result -32) [ 1529.318832][ T93] block nbd2: Dead connection, failed to find a fallback [ 1529.318854][ T93] block nbd2: shutting down sockets [ 1529.318867][ T93] blk_print_req_error: 174 callbacks suppressed [ 1529.318878][ T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1530.039121][ T93] buffer_io_error: 90 callbacks suppressed [ 1530.039150][ T93] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1530.056022][ T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1530.065158][ T93] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1530.111924][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1530.121204][ T52] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1530.129248][T21902] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4150'. [ 1530.142018][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1530.145435][T21902] device vlan2 entered promiscuous mode [ 1530.151170][ T52] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1530.157524][T21902] device bond0 entered promiscuous mode [ 1530.170564][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1530.180859][ T52] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1530.189064][ T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1530.198216][ T93] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1530.222749][T21902] device bond0 left promiscuous mode [ 1530.241228][ T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1530.250396][ T93] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1530.258937][ T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1530.268202][ T93] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1530.282493][T21893] ldm_validate_partition_table(): Disk read failed. [ 1530.292809][ T93] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1530.302001][ T93] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1530.321371][ T52] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1530.330757][ T52] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1530.343934][T21893] Dev nbd2: unable to read RDB block 0 [ 1530.415963][T21893] nbd2: unable to read partition table [ 1530.425368][T21778] ldm_validate_partition_table(): Disk read failed. [ 1530.445424][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1530.468143][T21778] Dev nbd2: unable to read RDB block 0 [ 1530.482697][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554441, location=33554441 [ 1530.504779][T21778] nbd2: unable to read partition table [ 1530.518779][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554185, location=33554185 [ 1530.534612][T21778] ldm_validate_partition_table(): Disk read failed. [ 1530.560987][T21778] Dev nbd2: unable to read RDB block 0 [ 1530.568834][T21778] nbd2: unable to read partition table [ 1530.582003][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554440, location=33554440 [ 1530.609513][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554184, location=33554184 [ 1530.674727][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554439, location=33554439 [ 1530.687546][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554183, location=33554183 [ 1530.699881][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554291, location=33554291 [ 1530.727566][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554035, location=33554035 [ 1530.754380][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554289, location=33554289 [ 1530.799414][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=33554033, location=33554033 [ 1530.837745][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1530.850205][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1530.868662][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=27531851, location=27531851 [ 1530.970002][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=27531595, location=27531595 [ 1531.003980][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=27531850, location=27531850 [ 1531.073725][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=27531594, location=27531594 [ 1531.154299][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=27531596, location=27531596 [ 1531.189205][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=27531849, location=27531849 [ 1531.292369][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=27531593, location=27531593 [ 1531.384585][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=27531701, location=27531701 [ 1531.432973][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=27531445, location=27531445 [ 1531.473604][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=27531699, location=27531699 [ 1531.516179][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=27531443, location=27531443 [ 1531.546676][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1531.601986][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1531.636475][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1531.684416][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1531.725615][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777220, location=16777220 [ 1531.766958][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776964, location=16776964 [ 1531.809118][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777219, location=16777219 [ 1531.830122][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776963, location=16776963 [ 1531.912759][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777218, location=16777218 [ 1531.977449][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776962, location=16776962 [ 1532.050514][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777070, location=16777070 [ 1532.108459][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776814, location=16776814 [ 1532.151059][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16777068, location=16777068 [ 1532.185937][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=16776812, location=16776812 [ 1532.216331][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1532.246396][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1532.271713][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=13765925, location=13765925 [ 1532.334305][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=13765669, location=13765669 [ 1532.402777][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=13765924, location=13765924 [ 1532.463065][ T27] audit: type=1326 audit(1743309738.620:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21928 comm="syz.5.4154" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f46d3b8d169 code=0x0 [ 1532.495436][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=13765668, location=13765668 [ 1532.520300][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=13765670, location=13765670 [ 1532.547662][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=13765923, location=13765923 [ 1532.574442][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=13765667, location=13765667 [ 1532.607166][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=13765775, location=13765775 [ 1532.648363][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=13765519, location=13765519 [ 1532.674668][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=13765773, location=13765773 [ 1532.704119][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=13765517, location=13765517 [ 1532.751352][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1532.765909][T21924] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1532.784554][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1532.794878][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1532.814581][T21924] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1532.824467][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1532.846622][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388609, location=8388609 [ 1532.876963][T21924] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1532.888356][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388353, location=8388353 [ 1532.921852][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388608, location=8388608 [ 1532.932432][T21924] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1532.963622][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388352, location=8388352 [ 1533.014604][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388607, location=8388607 [ 1533.057482][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388351, location=8388351 [ 1533.074589][T21924] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1533.084699][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388459, location=8388459 [ 1533.097214][T21924] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1533.114451][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388203, location=8388203 [ 1533.138870][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388457, location=8388457 [ 1533.170609][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=8388201, location=8388201 [ 1533.176475][T21924] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1533.211463][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1533.219072][T21924] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1533.241964][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1533.252568][T21924] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1533.278415][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=6882965, location=6882965 [ 1533.333555][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=6882709, location=6882709 [ 1533.380690][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=6882964, location=6882964 [ 1533.419535][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=6882708, location=6882708 [ 1533.471964][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=6882710, location=6882710 [ 1533.517143][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=6882963, location=6882963 [ 1533.688052][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=6882707, location=6882707 [ 1533.723659][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=6882815, location=6882815 [ 1533.737482][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=6882559, location=6882559 [ 1533.772889][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=6882813, location=6882813 [ 1533.798025][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=6882557, location=6882557 [ 1533.835001][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1533.860509][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1533.946588][T21893] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1534.015104][T21893] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1535.184108][ T4261] Bluetooth: hci0: command 0x0c1a tx timeout [ 1535.254871][ T4268] Bluetooth: hci2: command 0x0c1a tx timeout [ 1535.260957][ T4268] Bluetooth: hci3: command 0x0c1a tx timeout [ 1535.455945][T21963] input: syz0 as /devices/virtual/input/input70 [ 1536.106891][T21973] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4163'. [ 1537.003519][ T27] audit: type=1326 audit(1743309743.160:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21984 comm="syz.9.4165" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba0a98d169 code=0x0 [ 1537.234421][ T4268] Bluetooth: hci0: command 0x0406 tx timeout [ 1537.412931][ T4261] Bluetooth: hci2: command 0x0406 tx timeout [ 1537.419628][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 1538.993611][T22007] nbd9: detected capacity change from 0 to 67108884 [ 1539.208661][ T27] audit: type=1800 audit(1743309745.370:268): pid=22016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4169" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1540.053669][ T4261] Bluetooth: hci2: command 0x0406 tx timeout [ 1540.099892][ T52] block nbd9: Send control failed (result -89) [ 1540.106365][ T52] block nbd9: Request send failed, requeueing [ 1540.113012][ T52] block nbd9: Dead connection, failed to find a fallback [ 1540.120284][ T52] block nbd9: shutting down sockets [ 1540.125614][ T52] blk_print_req_error: 199 callbacks suppressed [ 1540.125631][ T52] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1540.141275][ T52] buffer_io_error: 114 callbacks suppressed [ 1540.141291][ T52] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1540.276353][ T52] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1540.285728][ T52] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1540.297465][ T52] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1540.306698][ T52] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1540.315647][ T52] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1540.324913][ T52] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1540.333293][ T52] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1540.343391][T22004] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1540.346214][ T52] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1540.358530][ T52] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1540.367713][ T52] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1540.380335][ T93] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1540.389549][ T93] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1540.398322][ T93] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1540.407459][ T93] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1540.415333][T22012] ldm_validate_partition_table(): Disk read failed. [ 1540.443667][T22004] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1540.454304][ T93] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1540.463439][ T93] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1540.472339][ T93] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1540.481527][ T93] Buffer I/O error on dev nbd9, logical block 0, async page read [ 1540.494255][T22012] Dev nbd9: unable to read RDB block 0 [ 1540.500914][T22004] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 1540.509611][T22012] nbd9: unable to read partition table [ 1540.528632][T21778] ldm_validate_partition_table(): Disk read failed. [ 1540.538974][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1540.549246][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554441, location=33554441 [ 1540.556308][T21778] Dev nbd9: unable to read RDB block 0 [ 1540.561010][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554185, location=33554185 [ 1540.579405][T21778] nbd9: unable to read partition table [ 1540.580671][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554440, location=33554440 [ 1540.600533][T22004] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1540.604494][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554184, location=33554184 [ 1540.617516][T22004] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1540.633164][T21778] ldm_validate_partition_table(): Disk read failed. [ 1540.641924][T21778] Dev nbd9: unable to read RDB block 0 [ 1540.649744][T21778] nbd9: unable to read partition table [ 1540.656071][T22004] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 1540.669140][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554439, location=33554439 [ 1540.671664][T22004] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1540.686714][T22004] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1540.694869][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554183, location=33554183 [ 1540.706188][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554291, location=33554291 [ 1540.717958][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554035, location=33554035 [ 1540.733068][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554289, location=33554289 [ 1540.744651][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=33554033, location=33554033 [ 1540.758106][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1540.769632][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1540.784341][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531851, location=27531851 [ 1540.784427][T22004] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 1540.802534][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531595, location=27531595 [ 1540.818353][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531850, location=27531850 [ 1540.830403][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531594, location=27531594 [ 1540.841522][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531596, location=27531596 [ 1540.853767][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531849, location=27531849 [ 1540.872032][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531593, location=27531593 [ 1540.890987][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531701, location=27531701 [ 1540.902730][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531445, location=27531445 [ 1540.914470][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531699, location=27531699 [ 1540.931137][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=27531443, location=27531443 [ 1541.036935][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1541.064543][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1541.082244][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1541.106454][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1541.132603][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16777220, location=16777220 [ 1541.159377][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16776964, location=16776964 [ 1541.177412][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16777219, location=16777219 [ 1541.192109][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16776963, location=16776963 [ 1541.210024][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16777218, location=16777218 [ 1541.221338][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16776962, location=16776962 [ 1541.244547][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16777070, location=16777070 [ 1541.274394][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16776814, location=16776814 [ 1541.299144][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16777068, location=16777068 [ 1541.310478][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=16776812, location=16776812 [ 1541.321735][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1541.332146][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1541.343188][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765925, location=13765925 [ 1541.361237][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765669, location=13765669 [ 1541.373034][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765924, location=13765924 [ 1541.384338][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765668, location=13765668 [ 1541.395003][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765670, location=13765670 [ 1541.406064][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765923, location=13765923 [ 1541.417080][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765667, location=13765667 [ 1541.428271][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765775, location=13765775 [ 1541.439377][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765519, location=13765519 [ 1541.450971][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765773, location=13765773 [ 1541.461978][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=13765517, location=13765517 [ 1541.473066][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1541.477985][T18754] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 1541.483408][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1541.517559][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1541.529441][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1541.539481][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388609, location=8388609 [ 1541.551588][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388353, location=8388353 [ 1541.563629][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388608, location=8388608 [ 1541.574549][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388352, location=8388352 [ 1541.585248][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388607, location=8388607 [ 1541.595979][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388351, location=8388351 [ 1541.607702][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388459, location=8388459 [ 1541.618524][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388203, location=8388203 [ 1541.629459][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388457, location=8388457 [ 1541.640074][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=8388201, location=8388201 [ 1541.652111][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1541.662508][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1541.673861][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882965, location=6882965 [ 1541.691452][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882709, location=6882709 [ 1541.703184][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882964, location=6882964 [ 1541.716054][T18754] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1541.728159][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882708, location=6882708 [ 1541.734080][T18754] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1541.756189][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882710, location=6882710 [ 1541.763034][T18754] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1541.771832][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882963, location=6882963 [ 1541.787902][T18754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1541.793500][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882707, location=6882707 [ 1541.805463][T18754] usb 3-1: Product: syz [ 1541.813722][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882815, location=6882815 [ 1541.816346][T18754] usb 3-1: Manufacturer: syz [ 1541.832608][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882559, location=6882559 [ 1541.842280][T18754] usb 3-1: SerialNumber: syz [ 1541.855346][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882813, location=6882813 [ 1541.872007][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=6882557, location=6882557 [ 1541.889749][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1541.900691][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=256, location=256 [ 1541.917503][T22012] UDF-fs: error (device nbd9): udf_read_tagged: read failed, block=512, location=512 [ 1541.930597][T22012] UDF-fs: warning (device nbd9): udf_fill_super: No partition found (1) [ 1542.077926][T22035] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1542.114229][ T4268] Bluetooth: hci0: command 0x0c1a tx timeout [ 1542.674389][ T4268] Bluetooth: hci3: command 0x0c1a tx timeout [ 1542.680589][ T4268] Bluetooth: hci2: command 0x0c1a tx timeout [ 1542.706521][T22035] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1542.997161][T18754] cdc_mbim 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1543.011811][T18754] cdc_mbim 3-1:1.0: setting tx_max = 184 [ 1543.168932][T18754] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 1543.333048][T18754] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 42:42:42:42:42:42 [ 1543.412615][T17915] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1543.424244][T17915] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1543.433550][T17915] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1543.444506][T17915] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1543.452208][T17915] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1543.459906][T17915] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1543.479358][T18754] usb 3-1: USB disconnect, device number 9 [ 1543.535187][T18754] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 1544.554555][ T27] audit: type=1326 audit(1743309750.710:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22090 comm="syz.9.4178" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fba0a98d169 code=0x0 [ 1544.594803][T22083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4177'. [ 1544.645820][T22085] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4177'. [ 1544.754314][ T4268] Bluetooth: hci2: command 0x0406 tx timeout [ 1544.760403][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 1544.831327][ T9] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.033875][T22099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4179'. [ 1545.066696][ T9] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.216358][ T9] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.378872][ T9] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1545.428279][T22064] chnl_net:caif_netlink_parms(): no params data found [ 1545.538218][ T4268] Bluetooth: hci0: command 0x0409 tx timeout [ 1545.721165][T22064] bridge0: port 1(bridge_slave_0) entered blocking state [ 1545.745632][T22064] bridge0: port 1(bridge_slave_0) entered disabled state [ 1545.771035][T22064] device bridge_slave_0 entered promiscuous mode [ 1545.851786][T22064] bridge0: port 2(bridge_slave_1) entered blocking state [ 1545.869438][T22064] bridge0: port 2(bridge_slave_1) entered disabled state [ 1545.888359][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.895215][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1545.913683][T22064] device bridge_slave_1 entered promiscuous mode [ 1546.806800][T22064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1547.130400][T22064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1548.491399][ T4268] Bluetooth: hci0: command 0x041b tx timeout [ 1548.630847][T22064] team0: Port device team_slave_0 added [ 1548.674812][T22064] team0: Port device team_slave_1 added [ 1548.749949][T22064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1548.759083][T22064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1548.787862][T22064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1548.801478][T22064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1548.810704][T22064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1548.854426][T22064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1548.990231][T22064] device hsr_slave_0 entered promiscuous mode [ 1549.005258][T22064] device hsr_slave_1 entered promiscuous mode [ 1549.024246][T22064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1549.031868][T22064] Cannot create hsr debugfs directory [ 1549.504978][T15217] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1549.719927][T15217] usb 10-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1549.756557][T15217] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1549.768285][T15217] usb 10-1: Product: syz [ 1549.773809][T15217] usb 10-1: Manufacturer: syz [ 1549.784275][T15217] usb 10-1: SerialNumber: syz [ 1549.798892][T15217] usb 10-1: config 0 descriptor?? [ 1550.022426][T15217] peak_usb 10-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 1550.237826][T15217] peak_usb 10-1:0.0 can0: sending command failure: -22 [ 1550.245819][T15217] peak_usb 10-1:0.0 can0: sending command failure: -22 [ 1550.253776][T15217] peak_usb 10-1:0.0 can0: sending command failure: -22 [ 1550.375830][ T9] device hsr_slave_0 left promiscuous mode [ 1550.382436][ T9] device hsr_slave_1 left promiscuous mode [ 1550.385060][T15217] peak_usb: probe of 10-1:0.0 failed with error -22 [ 1550.396268][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1550.403726][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1550.424930][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1550.454872][T15217] usb 10-1: USB disconnect, device number 9 [ 1550.464598][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1550.513141][ T9] device bridge_slave_1 left promiscuous mode [ 1550.514407][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 1550.531855][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1550.585044][ T9] device bridge_slave_0 left promiscuous mode [ 1550.591318][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1550.753525][ T9] device veth1_macvtap left promiscuous mode [ 1550.772326][ T9] device veth0_macvtap left promiscuous mode [ 1550.792405][ T9] device veth1_vlan left promiscuous mode [ 1550.807023][ T9] device veth0_vlan left promiscuous mode [ 1551.028039][ T4268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1551.040730][ T4268] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1551.049163][ T4268] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1551.060028][ T4261] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1551.075338][ T4261] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1551.082671][ T4261] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1552.609892][ T4261] Bluetooth: hci0: command 0x0419 tx timeout [ 1553.074613][ T4261] Bluetooth: hci3: command 0x0406 tx timeout [ 1553.164266][ T4261] Bluetooth: hci5: command 0x0409 tx timeout [ 1553.203115][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1553.298812][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1553.416131][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1553.488133][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1554.281005][ T9] bond0 (unregistering): Released all slaves [ 1554.737422][T22064] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1554.760288][T22064] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1554.772696][T22064] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1554.793341][T22064] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1554.946843][T22190] chnl_net:caif_netlink_parms(): no params data found [ 1554.976200][T22064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1555.001973][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1555.014898][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1555.058769][T22064] 8021q: adding VLAN 0 to HW filter on device team0 [ 1555.108409][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1555.128568][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1555.137341][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 1555.144525][ T4317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1555.152721][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1555.175609][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1555.194655][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1555.203403][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state [ 1555.210677][ T4317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1555.234246][ T4261] Bluetooth: hci5: command 0x041b tx timeout [ 1555.244637][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1555.277492][T17916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1555.291406][T22190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1555.301994][T22190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1555.318484][T22190] device bridge_slave_0 entered promiscuous mode [ 1555.350909][T17916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1555.374276][T17916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1555.391216][T17916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1555.403089][T17916] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1555.412263][T17916] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1555.434211][T22190] bridge0: port 2(bridge_slave_1) entered blocking state [ 1555.441357][T22190] bridge0: port 2(bridge_slave_1) entered disabled state [ 1555.459348][T22190] device bridge_slave_1 entered promiscuous mode [ 1555.476055][T22064] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1555.496188][T22064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1555.516962][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1555.533681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1555.545381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1555.556634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1555.565933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1555.615332][T22190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1555.639241][T22190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1555.728313][T22190] team0: Port device team_slave_0 added [ 1555.747208][T22190] team0: Port device team_slave_1 added [ 1555.807951][T22190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1555.824357][T22190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1555.891251][T22190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1555.913839][T22190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1555.921323][T22190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1555.947960][T22190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1556.020516][T22190] device hsr_slave_0 entered promiscuous mode [ 1556.049941][T22190] device hsr_slave_1 entered promiscuous mode [ 1556.064439][T22190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1556.075428][T22190] Cannot create hsr debugfs directory [ 1556.245490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1556.253084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1556.281507][T22064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1556.403365][T17916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1556.445115][T17916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1556.611551][T17916] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1556.641359][T17916] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1556.695459][T22064] device veth0_vlan entered promiscuous mode [ 1556.716983][T17916] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1556.755572][T17916] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1556.768375][T22064] device veth1_vlan entered promiscuous mode [ 1557.180256][ T7457] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1557.228361][ T7457] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1557.255994][T17915] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1557.260628][ T7457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1557.277238][T17915] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1557.283056][ T7457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1557.293271][T17915] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1557.303758][T17915] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1557.312778][T17915] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1557.319771][ T4268] Bluetooth: hci5: command 0x040f tx timeout [ 1557.329902][T17915] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1557.497620][T22064] device veth0_macvtap entered promiscuous mode [ 1557.621183][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1557.651280][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1557.841761][T22064] device veth1_macvtap entered promiscuous mode [ 1557.916957][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.154732][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.176070][T22064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1558.195831][T22064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1558.214730][T22064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1558.232520][T22064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1558.252979][T22064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1558.263900][T22064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1558.283791][T22064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1558.302729][T22064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1558.315343][T22064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1558.331025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1558.342074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1558.396655][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1558.423509][T22064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1558.454103][T22064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1558.473658][T22064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1558.492196][T22064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1558.502488][T22064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1558.524330][T22064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1558.534290][T22064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1558.545092][T22064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1558.578444][T22064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1558.591467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1558.610452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1558.632726][T22064] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.650722][T22064] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.661174][T22064] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.679887][T22064] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1558.931227][T22190] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1558.993116][T22190] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1559.037237][T17916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.046110][T17916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.063546][ T7457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1559.119700][T22190] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1559.145361][T22190] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1559.225823][T22280] chnl_net:caif_netlink_parms(): no params data found [ 1559.248057][ T7457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1559.268310][ T7457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1559.319513][T17916] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1559.408197][T17915] Bluetooth: hci1: command 0x0409 tx timeout [ 1559.416037][T17915] Bluetooth: hci5: command 0x0419 tx timeout [ 1559.479265][T22328] input: syz0 as /devices/virtual/input/input71 [ 1559.692172][T22280] bridge0: port 1(bridge_slave_0) entered blocking state [ 1559.704433][T22280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1559.726474][T22280] device bridge_slave_0 entered promiscuous mode [ 1559.740549][T22280] bridge0: port 2(bridge_slave_1) entered blocking state [ 1559.748347][T22280] bridge0: port 2(bridge_slave_1) entered disabled state [ 1559.757104][T22280] device bridge_slave_1 entered promiscuous mode [ 1560.314793][T22280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1560.349714][T22280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1560.406324][T22190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1560.460478][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1560.485250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1560.529853][T22190] 8021q: adding VLAN 0 to HW filter on device team0 [ 1560.549334][T22280] team0: Port device team_slave_0 added [ 1560.590148][T21323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1560.635140][T21323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1560.643784][T21323] bridge0: port 1(bridge_slave_0) entered blocking state [ 1560.650989][T21323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1560.662421][T22280] team0: Port device team_slave_1 added [ 1560.677182][T21323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1560.695159][T21323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1560.714521][T21323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1560.729023][T21323] bridge0: port 2(bridge_slave_1) entered blocking state [ 1560.736266][T21323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1561.476744][T17915] Bluetooth: hci1: command 0x041b tx timeout [ 1561.686236][T17945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1561.820726][T22280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1561.864152][T22280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1561.985278][T22280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1562.972254][T18158] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1562.995235][T18158] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1563.026480][T20886] ================================================================== [ 1563.034601][T20886] BUG: KASAN: use-after-free in hci_conn_hash_flush+0x1d4/0x2a0 [ 1563.038753][T18158] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1563.042276][T20886] Write of size 8 at addr ffff88805535aab0 by task syz-executor/20886 [ 1563.058259][T20886] [ 1563.060601][T20886] CPU: 1 PID: 20886 Comm: syz-executor Not tainted 6.1.132-syzkaller #0 [ 1563.068955][T20886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1563.079065][T20886] Call Trace: [ 1563.082417][T20886] [ 1563.085370][T20886] dump_stack_lvl+0x1e3/0x2cb [ 1563.090085][T20886] ? nf_tcp_handle_invalid+0x647/0x647 [ 1563.095756][T20886] ? panic+0x764/0x764 [ 1563.099853][T20886] ? _printk+0xd1/0x111 [ 1563.104043][T20886] ? __virt_addr_valid+0x17f/0x530 [ 1563.109193][T20886] ? __virt_addr_valid+0x17f/0x530 [ 1563.114349][T20886] print_report+0x15f/0x4f0 [ 1563.118887][T20886] ? __virt_addr_valid+0x17f/0x530 [ 1563.124033][T20886] ? __virt_addr_valid+0x17f/0x530 [ 1563.129177][T20886] ? __virt_addr_valid+0x45b/0x530 [ 1563.134332][T20886] ? __phys_addr+0xb6/0x170 [ 1563.138880][T20886] ? hci_conn_hash_flush+0x1d4/0x2a0 [ 1563.144176][T20886] kasan_report+0x136/0x160 [ 1563.148703][T20886] ? hci_conn_hash_flush+0x1d4/0x2a0 [ 1563.154016][T20886] hci_conn_hash_flush+0x1d4/0x2a0 [ 1563.159162][T20886] hci_dev_close_sync+0x9a9/0xfc0 [ 1563.164209][T20886] hci_unregister_dev+0x207/0x500 [ 1563.169251][T20886] vhci_release+0x7f/0xd0 [ 1563.173593][T20886] ? vhci_open+0x360/0x360 [ 1563.178024][T20886] __fput+0x3f6/0x8d0 [ 1563.182029][T20886] task_work_run+0x246/0x300 [ 1563.186635][T20886] ? kasan_quarantine_put+0xd4/0x220 [ 1563.191934][T20886] ? task_work_cancel+0x2e0/0x2e0 [ 1563.196969][T20886] ? kmem_cache_free+0x292/0x510 [ 1563.201916][T20886] ? do_exit+0xa69/0x26a0 [ 1563.206256][T20886] do_exit+0xa6e/0x26a0 [ 1563.210429][T20886] ? put_task_struct+0x80/0x80 [ 1563.215205][T20886] ? get_signal+0x1352/0x17a0 [ 1563.219895][T20886] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1563.225890][T20886] ? print_irqtrace_events+0x210/0x210 [ 1563.231359][T20886] ? _raw_spin_lock_irq+0xdb/0x110 [ 1563.236496][T20886] do_group_exit+0x202/0x2b0 [ 1563.241131][T20886] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1563.246398][T20886] ? lockdep_hardirqs_on+0x94/0x130 [ 1563.251614][T20886] get_signal+0x16cb/0x17a0 [ 1563.256145][T20886] ? ptrace_notify+0x370/0x370 [ 1563.260948][T20886] ? print_irqtrace_events+0x210/0x210 [ 1563.266436][T20886] arch_do_signal_or_restart+0xb0/0x1a10 [ 1563.272082][T20886] ? kmem_cache_free+0x292/0x510 [ 1563.277028][T20886] ? do_sys_openat2+0x1f9/0x4f0 [ 1563.281904][T20886] ? do_sys_openat2+0x1f9/0x4f0 [ 1563.286755][T20886] ? path_umount+0x1e8/0xef0 [ 1563.291356][T20886] ? get_sigframe_size+0x10/0x10 [ 1563.296313][T20886] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1563.302328][T20886] ? __x64_sys_openat+0x243/0x290 [ 1563.307370][T20886] ? exit_to_user_mode_loop+0x39/0x100 [ 1563.312842][T20886] exit_to_user_mode_loop+0x6a/0x100 [ 1563.318152][T20886] exit_to_user_mode_prepare+0xb1/0x140 [ 1563.323707][T20886] syscall_exit_to_user_mode+0x60/0x270 [ 1563.329469][T20886] do_syscall_64+0x47/0xb0 [ 1563.333887][T20886] ? clear_bhb_loop+0x45/0xa0 [ 1563.338575][T20886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1563.344475][T20886] RIP: 0033:0x7f15a878ca61 [ 1563.348892][T20886] Code: Unable to access opcode bytes at 0x7f15a878ca37. [ 1563.355924][T20886] RSP: 002b:00007ffdb61c6610 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 1563.364428][T20886] RAX: fffffffffffffffc RBX: 00007f15a880e08c RCX: 00007f15a878ca61 [ 1563.372503][T20886] RDX: 0000000000090800 RSI: 00007ffdb61c7820 RDI: 00000000ffffff9c [ 1563.380474][T20886] RBP: 00007ffdb61c7820 R08: 0000000000000000 R09: 0000000000000000 [ 1563.388451][T20886] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffdb61c7820 [ 1563.396424][T20886] R13: 00007f15a880e08c R14: 0000000000179571 R15: 00007ffdb61c99e0 [ 1563.404402][T20886] [ 1563.407421][T20886] [ 1563.409767][T20886] Allocated by task 21552: [ 1563.414174][T20886] kasan_set_track+0x4b/0x70 [ 1563.418767][T20886] __kasan_kmalloc+0x97/0xb0 [ 1563.423359][T20886] hci_conn_add+0xb7/0x1390 [ 1563.427870][T20886] hci_connect_sco+0x86/0x330 [ 1563.432544][T20886] sco_sock_connect+0x2c3/0x960 [ 1563.437411][T20886] __sys_connect+0x2c9/0x300 [ 1563.442002][T20886] __x64_sys_connect+0x76/0x80 [ 1563.446763][T20886] do_syscall_64+0x3b/0xb0 [ 1563.451179][T20886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1563.457083][T20886] [ 1563.459491][T20886] Freed by task 20886: [ 1563.463548][T20886] kasan_set_track+0x4b/0x70 [ 1563.468141][T20886] kasan_save_free_info+0x27/0x40 [ 1563.473170][T20886] ____kasan_slab_free+0xd6/0x120 [ 1563.478194][T20886] __kmem_cache_free+0x25c/0x3c0 [ 1563.483138][T20886] device_release+0x91/0x1c0 [ 1563.487732][T20886] kobject_put+0x224/0x460 [ 1563.492158][T20886] hci_conn_cleanup+0x5a0/0x740 [ 1563.497015][T20886] hci_conn_del+0x417/0x6c0 [ 1563.501527][T20886] hci_conn_hash_flush+0x205/0x2a0 [ 1563.506640][T20886] hci_dev_close_sync+0x9a9/0xfc0 [ 1563.511670][T20886] hci_unregister_dev+0x207/0x500 [ 1563.516700][T20886] vhci_release+0x7f/0xd0 [ 1563.521038][T20886] __fput+0x3f6/0x8d0 [ 1563.525033][T20886] task_work_run+0x246/0x300 [ 1563.529634][T20886] do_exit+0xa6e/0x26a0 [ 1563.533795][T20886] do_group_exit+0x202/0x2b0 [ 1563.538392][T20886] get_signal+0x16cb/0x17a0 [ 1563.542905][T20886] arch_do_signal_or_restart+0xb0/0x1a10 [ 1563.548544][T20886] exit_to_user_mode_loop+0x6a/0x100 [ 1563.553826][T20886] exit_to_user_mode_prepare+0xb1/0x140 [ 1563.559371][T20886] syscall_exit_to_user_mode+0x60/0x270 [ 1563.564923][T20886] do_syscall_64+0x47/0xb0 [ 1563.569336][T20886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1563.575231][T20886] [ 1563.577551][T20886] The buggy address belongs to the object at ffff88805535a000 [ 1563.577551][T20886] which belongs to the cache kmalloc-4k of size 4096 [ 1563.591600][T20886] The buggy address is located 2736 bytes inside of [ 1563.591600][T20886] 4096-byte region [ffff88805535a000, ffff88805535b000) [ 1563.605049][T20886] [ 1563.607372][T20886] The buggy address belongs to the physical page: [ 1563.613783][T20886] page:ffffea000154d600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55358 [ 1563.623932][T20886] head:ffffea000154d600 order:3 compound_mapcount:0 compound_pincount:0 [ 1563.632267][T20886] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 1563.640346][T20886] raw: 00fff00000010200 ffffea000139d600 dead000000000002 ffff888017c42140 [ 1563.648935][T20886] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 1563.657513][T20886] page dumped because: kasan: bad access detected [ 1563.663935][T20886] page_owner tracks the page as allocated [ 1563.669644][T20886] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7457, tgid 7457 (kworker/u4:13), ts 274385233953, free_ts 274194251347 [ 1563.692099][T20886] post_alloc_hook+0x18d/0x1b0 [ 1563.696886][T20886] get_page_from_freelist+0x3731/0x38d0 [ 1563.702463][T20886] __alloc_pages+0x28d/0x770 [ 1563.707073][T20886] alloc_slab_page+0x6a/0x150 [ 1563.711771][T20886] new_slab+0x84/0x2d0 [ 1563.715849][T20886] ___slab_alloc+0xc20/0x1270 [ 1563.720532][T20886] __kmem_cache_alloc_node+0x19f/0x260 [ 1563.726016][T20886] __kmalloc_node_track_caller+0xa0/0x220 [ 1563.731803][T20886] __alloc_skb+0x12a/0x2c0 [ 1563.736234][T20886] nsim_dev_trap_report_work+0x24c/0xab0 [ 1563.741876][T20886] process_one_work+0x917/0x1260 [ 1563.746822][T20886] worker_thread+0xa47/0x1200 [ 1563.751507][T20886] kthread+0x28d/0x320 [ 1563.755596][T20886] ret_from_fork+0x1f/0x30 [ 1563.760026][T20886] page last free stack trace: [ 1563.764702][T20886] free_unref_page_prepare+0x12a6/0x15b0 [ 1563.770351][T20886] free_unref_page+0x33/0x3e0 [ 1563.775062][T20886] qlist_free_all+0x76/0xe0 [ 1563.779575][T20886] kasan_quarantine_reduce+0x156/0x170 [ 1563.785043][T20886] __kasan_slab_alloc+0x1f/0x70 [ 1563.789955][T20886] slab_post_alloc_hook+0x52/0x3a0 [ 1563.795079][T20886] kmem_cache_alloc_node+0x136/0x310 [ 1563.800369][T20886] __alloc_skb+0xd3/0x2c0 [ 1563.804700][T20886] alloc_skb_with_frags+0xa4/0x740 [ 1563.809829][T20886] sock_alloc_send_pskb+0x915/0xa50 [ 1563.815035][T20886] __ip6_append_data+0x2f7a/0x4520 [ 1563.820324][T20886] ip6_append_data+0x1d6/0x400 [ 1563.825110][T20886] l2tp_ip6_sendmsg+0x16dc/0x1f60 [ 1563.830138][T20886] ____sys_sendmsg+0x5d3/0x9a0 [ 1563.834906][T20886] __sys_sendmmsg+0x3ab/0x730 [ 1563.839585][T20886] __x64_sys_sendmmsg+0x9c/0xb0 [ 1563.844440][T20886] [ 1563.846760][T20886] Memory state around the buggy address: [ 1563.852385][T20886] ffff88805535a980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1563.860442][T20886] ffff88805535aa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1563.868531][T20886] >ffff88805535aa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1563.876588][T20886] ^ [ 1563.882232][T20886] ffff88805535ab00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1563.890314][T20886] ffff88805535ab80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1563.898380][T20886] ================================================================== [ 1563.914621][T22280] batman_adv: batadv0: Adding interface: batadv_slave_1 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1563.921620][T22280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1563.948283][ T4261] Bluetooth: hci1: command 0x040f tx timeout [ 1563.994164][T20886] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1564.001420][T20886] CPU: 0 PID: 20886 Comm: syz-executor Not tainted 6.1.132-syzkaller #0 [ 1564.009779][T20886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1564.019865][T20886] Call Trace: [ 1564.023164][T20886] [ 1564.026111][T20886] dump_stack_lvl+0x1e3/0x2cb [ 1564.030991][T20886] ? nf_tcp_handle_invalid+0x647/0x647 [ 1564.036474][T20886] ? panic+0x764/0x764 [ 1564.040569][T20886] ? preempt_schedule_common+0xa6/0xd0 [ 1564.046067][T20886] ? vscnprintf+0x59/0x80 [ 1564.050441][T20886] panic+0x318/0x764 [ 1564.054371][T20886] ? check_panic_on_warn+0x1d/0xa0 [ 1564.059511][T20886] ? memcpy_page_flushcache+0xfc/0xfc [ 1564.064911][T20886] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 1564.070916][T20886] ? _raw_spin_unlock+0x40/0x40 [ 1564.075796][T20886] check_panic_on_warn+0x7e/0xa0 [ 1564.080767][T20886] ? hci_conn_hash_flush+0x1d4/0x2a0 [ 1564.086078][T20886] end_report+0x66/0x110 [ 1564.090345][T20886] kasan_report+0x143/0x160 [ 1564.094882][T20886] ? hci_conn_hash_flush+0x1d4/0x2a0 [ 1564.100190][T20886] hci_conn_hash_flush+0x1d4/0x2a0 [ 1564.105327][T20886] hci_dev_close_sync+0x9a9/0xfc0 [ 1564.110386][T20886] hci_unregister_dev+0x207/0x500 [ 1564.115471][T20886] vhci_release+0x7f/0xd0 [ 1564.119831][T20886] ? vhci_open+0x360/0x360 [ 1564.124279][T20886] __fput+0x3f6/0x8d0 [ 1564.128294][T20886] task_work_run+0x246/0x300 [ 1564.132913][T20886] ? kasan_quarantine_put+0xd4/0x220 [ 1564.138230][T20886] ? task_work_cancel+0x2e0/0x2e0 [ 1564.143369][T20886] ? kmem_cache_free+0x292/0x510 [ 1564.148332][T20886] ? do_exit+0xa69/0x26a0 [ 1564.152692][T20886] do_exit+0xa6e/0x26a0 [ 1564.156902][T20886] ? put_task_struct+0x80/0x80 [ 1564.161706][T20886] ? get_signal+0x1352/0x17a0 [ 1564.166439][T20886] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1564.172453][T20886] ? print_irqtrace_events+0x210/0x210 [ 1564.177945][T20886] ? _raw_spin_lock_irq+0xdb/0x110 [ 1564.183077][T20886] do_group_exit+0x202/0x2b0 [ 1564.187683][T20886] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1564.192930][T20886] ? lockdep_hardirqs_on+0x94/0x130 [ 1564.198152][T20886] get_signal+0x16cb/0x17a0 [ 1564.202699][T20886] ? ptrace_notify+0x370/0x370 [ 1564.207494][T20886] ? print_irqtrace_events+0x210/0x210 [ 1564.212972][T20886] arch_do_signal_or_restart+0xb0/0x1a10 [ 1564.218619][T20886] ? kmem_cache_free+0x292/0x510 [ 1564.223567][T20886] ? do_sys_openat2+0x1f9/0x4f0 [ 1564.228422][T20886] ? do_sys_openat2+0x1f9/0x4f0 [ 1564.233275][T20886] ? path_umount+0x1e8/0xef0 [ 1564.237873][T20886] ? get_sigframe_size+0x10/0x10 [ 1564.242818][T20886] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1564.248811][T20886] ? __x64_sys_openat+0x243/0x290 [ 1564.253841][T20886] ? exit_to_user_mode_loop+0x39/0x100 [ 1564.259309][T20886] exit_to_user_mode_loop+0x6a/0x100 [ 1564.264605][T20886] exit_to_user_mode_prepare+0xb1/0x140 [ 1564.270160][T20886] syscall_exit_to_user_mode+0x60/0x270 [ 1564.275805][T20886] do_syscall_64+0x47/0xb0 [ 1564.280223][T20886] ? clear_bhb_loop+0x45/0xa0 [ 1564.284909][T20886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1564.290811][T20886] RIP: 0033:0x7f15a878ca61 [ 1564.295314][T20886] Code: Unable to access opcode bytes at 0x7f15a878ca37. [ 1564.302328][T20886] RSP: 002b:00007ffdb61c6610 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 1564.310746][T20886] RAX: fffffffffffffffc RBX: 00007f15a880e08c RCX: 00007f15a878ca61 [ 1564.318725][T20886] RDX: 0000000000090800 RSI: 00007ffdb61c7820 RDI: 00000000ffffff9c [ 1564.326703][T20886] RBP: 00007ffdb61c7820 R08: 0000000000000000 R09: 0000000000000000 [ 1564.334679][T20886] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffdb61c7820 [ 1564.342652][T20886] R13: 00007f15a880e08c R14: 0000000000179571 R15: 00007ffdb61c99e0 [ 1564.350633][T20886] [ 1564.353941][T20886] Kernel Offset: disabled [ 1564.358267][T20886] Rebooting in 86400 seconds..