last executing test programs: 7.973167348s ago: executing program 3 (id=7711): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) io_uring_setup(0x22, &(0x7f0000000040)={0x0, 0x1445e, 0x1d410, 0x0, 0x12e}) 7.971552972s ago: executing program 4 (id=7712): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r2 = socket$kcm(0x2, 0x6, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="04000000ffffffffffffaaaaaaaaaaaa8100000086dd60b79a5600442900fe8000000000000000000000000000aaff45"], 0x82) 7.739773856s ago: executing program 3 (id=7714): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x4, 0x2000, 0x2000, &(0x7f0000012000/0x2000)=nil}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fsetxattr$trusted_overlay_origin(r2, &(0x7f00000001c0), 0x0, 0x0, 0x1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a94000000060a0b04000000000000000002000000680004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000003c000180090001007866726d000000002c000280080004400000000408000240000000020800014000000005050003000100000005000300000000000900010073797a30000000000900020073797a32"], 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 7.403516277s ago: executing program 3 (id=7719): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fd\x00') lseek(r0, 0x1, 0x1) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000000)={0x0, 0x31}, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f0000001480)={0x1c, &(0x7f0000000fc0)={0x20, 0x15}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000440)={0x40, 0xf}, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xe00) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0x639) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000002c0)={0x14, &(0x7f0000000100)={0x40, 0x5, 0x83, {0x83, 0x21, "ea14a6dd33a613a34aa68f35b12a5b7dce21bc320b3ae4b71cfb5adb52d4ce3a97ea32da8cb1d04f51a9e7a627ac9fafbbc98285f25f8ab25a290240641610193d04bf12cd7c5a8171c4dbfcbbf9e6a900574305a4f932264aaaf6cd4c97c5992bd443d93b13d7aa2fd05f71908e596c93c4cae7471bcb2d1e245368638ed1575a"}}, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000480)={0x1c, &(0x7f0000000300)={0x40, 0x5, 0x2f, "116522234c9bfe756e55d4543b5209cbda62f6ccaa7bb827c20c0438e47d79add124272b4341c13ced793fff54932c"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x6}}) readv(r2, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/3, 0x3}], 0x1) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x101002, 0x0) write$sequencer(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="8103"], 0x8) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000001080)={0x34, &(0x7f0000000dc0)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, &(0x7f0000000540)={0x14, &(0x7f00000004c0)={0x20, 0x24, 0x2, {0x2, 0x10}}, &(0x7f0000000500)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40a}}}, &(0x7f0000000800)={0x34, &(0x7f0000000580)={0x0, 0xd, 0x57, "a0be21e9fde22d725d1ccd7d95d4237419619be6ca1b5138d8db98b5c7cb4984dbfafbb017c56b54d2c527572e4aa501f7b9ac5f92b997823ab3d3586a9e8c412a37c9d21924f1dbdbdedf0b71b908b4120ad738644a36"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000740)={0x20, 0x0, 0x2d, {0x2b, "4516e86c64ac3d31a4cb7d2ac571ce4e6490d951f7937b3017a3006dbdd99fc9af51193cdc2cf63fa851c9"}}, &(0x7f0000000780)={0x20, 0x1, 0x1, 0xf9}, &(0x7f00000007c0)={0x20, 0x0, 0x1}}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000000)=r0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000880)={0x3, &(0x7f0000000840)=[{0x7, 0x2, 0x6, 0x8}, {0x8, 0xf8, 0x9, 0x4}, {0x4, 0x6, 0x8}]}) getdents64(r0, 0xffffffffffffffff, 0x43) 7.291141065s ago: executing program 4 (id=7720): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000140)={"13c122206cfe26280b140039249fc74d", 0x0, 0x0, {0x17, 0x3}, {0x8e38, 0x8}, 0xf6a, [0x81, 0x800, 0x0, 0x7, 0x6, 0x5, 0x4, 0x6, 0x6, 0x3, 0x0, 0x7fff, 0x4, 0xfffffffffffffffd, 0x2, 0x168c]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f00000007c0)={{r0}, r1, 0x1c, @inherit={0x60, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000300000000000000ff030000000000007fffffffffffffff0e000000000000000d000000000000000900000000000000a3000000000000000d00000000000000fffffeffffffffff07000000000000000500000000000000b7a2bc9168188f96d50933285ca7e0951c94f862cd6d1e4d8481c8c7acf9b2bf961403c5a4ead179923ccd1c506b67b05e943a1cf7c5b7392cbc608565b6559f527989f34fe704a859d9dc621f872c71fcedd02ea9d2294f8625a6d50f6e1164720da83bf4d0dc1078f36dccbfff5a4015b0184b6ab42a4172"]}, @name="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"}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f0000000740)=[{{&(0x7f0000000440)=@ax25={{0x3, @bcast}, [@default, @netrom, @netrom, @netrom, @bcast, @null, @bcast, @rose]}, 0x80, &(0x7f0000000700)}, 0x7}], 0x1, 0x40010000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0xc2c8a1d03ef8fb66) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e3002, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x0) move_pages(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="44000000020605000000000000000000000000000c000300686173683a697000050004000000ddff0800020073797a310000000005000500020000000500010b06000000"], 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000009060108000000000073797a310000000005000100070000002800ff070c00018008000140e00000b718000280eccdc82b716ba87c14000240fc020000000000000000000000000001"], 0x50}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_SAVE(r7, 0x0, 0x8000) r8 = socket(0x10, 0x3, 0x1) sendto$inet6(r8, &(0x7f0000000140)="7800000018002507b9409b14ffff00000204be04020506050e020409430009003f000c00100000000d0085a168d0bf46d32345653600648d0a00120002000a0000005ade4a460c89b6ec0cff3959547f509058ba86c902000000004a3200040016000500020000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r8, 0x541b, &(0x7f0000000100)) dup(r4) 7.146398976s ago: executing program 1 (id=7722): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) epoll_create1(0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5000000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="00000001000000000500210008b30000140003007465616d30000000000000000000000014002b80080003"], 0x50}, 0x1, 0x0, 0x0, 0x400c8a1}, 0x0) 5.310564651s ago: executing program 2 (id=7729): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a0122c909a69cc7bf5ea82350f703040400000000000000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000e0800034000000000080004400000002205000200070000002c0001800c0001006269747769736500384b99a75e57c6fd285b961c00028008000340000000020800014000000014080002400000001c0900010073797a3000000000140000001100010000000000000000000700000abf021b"], 0x100}, 0x1, 0x0, 0x0, 0x8}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYRES8=r0], 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f0000000980)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x30, 0xb, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x14}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0xa8, 0x9, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1c}, @NFTA_SET_USERDATA={0x8a, 0xd, 0x1, 0x0, "954a84c21008356b57936007fa8205117750f94c2d231f2b46b3959b0b436a5cd525303840a1047061a8b9c5a37deb60b0d3f98f1bffc498d946ee6311f862fd51068b5c05f6e289149504c35843a5a6a90139ee6acaa59fea6d8fa0c02f5eade6f31d8084e50d2486eca375ad345cb23de15db8708345fffa995b190e29b925794e81a29fec"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa0}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @bitwise={{0xc}, @void}}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x93f7ef1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x22c}, 0x1, 0x0, 0x0, 0x800}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x0, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x200100, 0x0) ioctl$SNAPSHOT_FREE_SWAP_PAGES(r7, 0x3309) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) io_setup(0x1, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) getrandom(&(0x7f0000000040)=""/293, 0xfffffffffffffe2a, 0x2) ioctl$KVM_SET_VAPIC_ADDR(r11, 0x4008ae93, &(0x7f0000000180)=0x1000) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r11, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x3}) ioctl$KVM_RUN(r11, 0xae80, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r8, @ANYRES16=r5, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r8, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000aac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) 5.247798356s ago: executing program 1 (id=7730): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x13) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) r5 = socket(0x25, 0x5, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x5e, &(0x7f0000000600), 0x0, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x63, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x20, 0x18, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000800000000000008733107318110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70a0000000000007b8af8ff00000000bfa20000000000000702000001ffffffb703000008000000b7040000020000008500000082000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0xd, &(0x7f00000002c0)=""/13, 0x41100, 0x3, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x8, 0x7, 0x3}, 0x10, r7, 0xffffffffffffffff, 0x3, &(0x7f0000000880)=[r6, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000008c0)=[{0x3, 0x2, 0x3, 0x7}, {0x1, 0x2, 0x3, 0xc}, {0x4, 0x2, 0x2, 0xb}], 0x10, 0x2}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=r7, 0x4) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003040)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r12 = accept4(r0, 0x0, 0x0, 0x800) r13 = syz_io_uring_setup(0xb59, &(0x7f0000000640)={0x0, 0x489f, 0x0, 0xfffffffc, 0x166}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r14, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r14, r15, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r13, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) 4.803992593s ago: executing program 0 (id=7733): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x6, 0x0, 0x0) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="03", 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x3, 0x0, 0x3f8, 0x4000, 0x32}, 0x9c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) 4.754122124s ago: executing program 0 (id=7734): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001800110101000000000000000a0080000002ff08002000000600150006000000080017000800000071000880d063f7e2763df6ac43cef0a6b5ddd60c11b5e32abb33e79b133d34cb14d64760ec98d41396b821f9112febb53d30fc82a3"], 0xa0}, 0x1, 0x0, 0x0, 0x4805}, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x1, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f0000000440)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0x78, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}}, {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x4, "7580485a402bf08bb0a89c3f0b3c3ab25eba4a04c60808bf3507b6eb705f3c02", "e0d6370ae4bef1c38d2d97385a7d432a", {"5afb05b0120ec4dd832c0cf27c7c4c03", "b8e4daaa6228da2e49b8081579ab3712"}}}}}, 0x86) 4.512330359s ago: executing program 0 (id=7735): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='attr/fscreate\x00') pwritev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)='s', 0x1}], 0x1, 0x8000, 0x1000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000003240)) sendmmsg$inet6(r0, &(0x7f0000003600)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x401, @mcast1, 0x10001}, 0x1c, &(0x7f0000001700)=[{&(0x7f00000002c0)="ca54b2eeafc19e2879508eb3cda6d7b45716f0d6c1", 0x15}, {&(0x7f0000000400)="5466dbc35ceb2521ebda2b843e929b2be2d390e7b67eb20ea20e86ef8614277ddee948f999cd13dea544ca939b4f22f52543be62c29c93973676707b89fcbf45cae652ad236e73329263fa8c2984273063dcc173909b2e2aeb89ad2b3fe6e3509525a13770c384aafa7407595fd57f677937053912", 0x75}, {&(0x7f0000000480)="ffdc04cbcdc5b112efe5bdb9cb0c33877f4fd35bef7352c951bce3a81d7563eac7448e2d4e5260e2f5df87314da0a9e1b20a0b3249a24d9933c87b3aa62a3f39d0bd5c9e3e9d1e5a9e979cf9e45dd1dc4b28c30125b23af9e0a5cdae73f09c99e8374c889d3d960880b8c8eb0dbfe93e616bc552251d07b328144a24a639efbba574f6cc7095306c2a103f6aa9044ff8585afeba95439d8ed84ee0e3b7921b0c2217cd7b3b86da3bdc6cb075c6226808e4e22729867e648d5124b101df50133bb53d60f0249428fc0786739b25f145443bff971f6a549015fb65a2b6eef759f63965e3e04adf9ba66f79b90e6b3cd9a05cfc127fd6fbcf267aac67b2c05c038a6ab71a707ab7660c945e5ac7b0c507ab6c5bbbdcd9fe0028fc4d0367ccf1026ca653424b1c7ba470fde16570d34a790c0efa7867dfcc6534cb51a6cdef927d936c8db8f8be45ff800d3f8282bcc94eae393b2993ae47f3d997231865d59473d61f46b5fb43816a24182bc71e2f129e9d944a5db9c5c841a6526b12fb63cab6b65628ce4b379238666561a6586e2296100b98819632945581c034fca4369aa6e536be5a24353bf24d5b1e441da4f41d4e3dff7b29cb5ae22a3f390e63770d848f25028a6de12b824ddd927c1df6bd65de90682c10b2c3bda14c963a4042fca59c5b2cd558c252cae57cd729ffa2141845d165ea2272e60a7d7aff61708d1d4a7caee2eb9994fd79ae10c3a5017fd43aa8cf354ab5c09cad8b5053c11d64445c3d21ddd645d89943cb0e4ffb27d63f2394cfa1e06bd044ab074cbf55f50b02756596bb26b74dc31cfa5a6d891691743c780873e717ce3dad79b7137995b820834d8b3d07f659605ae3be55dce371091cf326f3a2a46f954abce0fbd3e59393fd65e22277ac0b25ab3686da9c5f9c0dab69c1625a18ed842b6c2ee09c4c82ae5b66cd6737bf3450eef3185c2ee0010776f20dfabf80d66f35d2f229ccb80e408d068589881867626363e208241c23614ce5fbeb55b08be8dfaa6228b72356e5790b5286359ca6e22fe7b28c00e34492f5fdf759e66a9c60e0a3335cbbe091bd203a5c9fe025a94c21e7ea2b752793f5262e5fd50c7117f88acad2c2c48551930ff0e62f256f4ae898b512c3efe60ea989983cb9fd419969ae3f31b106ea1e2f365cf9b2812a4b6beb1a8006cdc032e5a2d161a83bfdb21de997a6c11f497294ffa72f22e461cf344a42d712da2a5ac0ccf0a84719e1f45a885730c2bda8d47375c346683ebf1f1305479e466ba72f0ca00c605a8a5778705977882ca78cf119a018f7795a195eed0438acb1625915d15d95a2f6fbe507282a861631c1037575de9639c2f6020141934dfeba47fccbacdd2150e2434de1a809b5cef40488e7da17a20eca378d42c44f440c08812646ecf584a4d41d6730fb64ef1cae31367deb772cbc527e1ba68fad3cc1777a5fd5af0b5d3ad8c8ac808b766020f98eed3517844c31e943ed9d9946685d4edfba42b771a0581240d8320789e54b4c0331e3b446e4c41211bf94644e2a165ab0a8fe377508c1e3d5f31055e9661ae2775add7c6251b34d41cffb2bcbf95a4cc29e1ead3ccedc7ad8a4fe7cbf9a95992f3e6eb7fdedcd7f8df27a382597a62ce993e8f808446426d40f04ca1b5107f33c77aaa47236c78712d71a956ab3e4114339012e92a88cde9129560b67bc4b25461b79991ee9d2aaed5445620be8dbf314330c91680489db6765974cfd7449d29fda8fc912c044c78e4e728cdf908f6b54a0969243d90469e225116d307e25a85404d4a253c2ebdb9352b71fef7c4c4a8e333ef3dd84267bd2558bdb61a0658e30889f62b591e6c2f1300fe3ee59694515b24e81fd8037879aced67d44a8911472359fbbc2c4268dafe6ba62ef3b724c2f48c4d9b23d3daa7dae1f75078286d13b41661e72d2a7a2097e40323cd391900a0a5003abc126bfbf59c786f69dbb1fd213322d9d22fe02e9228c9731d25e847f3ee8f8503aa6cbc1275b28775648ad1608c31f5402f7e5501f7aefe59c58d5b36e5c4d76d4df0385c5f5042c1175035bb5cd00d5c2cb7040605da14d3fcf2650a1db468ac730eb8be2aecdb93cab989ce9a78255ae6cc89b86789c949cbab47acfe72fd5731ace1e07bfcc0467bc37f846ba36ab3a525f82411216a6dd3088016ad53237f6b9e6c19b7ae1a505ae0e4e04a81c8a17471c7dd4971f28605aac8afb357d840574290fd2d81899bd4d6dcefc8c66240b4a6e14dd9326c151b1133bb822953f679843f4e0e21e510beaa383ad333b056e8fbcc6233dccb1c8fa013110f0717cadaa704e8909b7925dcc207d3f22d54fddab6aad5df30eee53ec9bda14cba3cef5353fda1c29167d7d1e61b663f32edc144cb88a558baa538eb1f8551440382716e6ccd861756355ff7ecf2f91ebbe9e292121d280f0c0fe875e37a279630acfb23ca3153fdd1d3be3d8fe64bf59d9335847bdde051ad3646068942b84e1afc7b9d441d79f5193ee9b8ff62c24735a669dfb2ca5399c2a80e8790070f9744cdf3719e488d84c79d3f10377a37b04f41b09a0a63b06fd85ca80f9c2415b95102013f3ae81152095937132f98719c4483dc8cd0378825fb7a82828a20d648fcf3f29742d93264bc3a4e7f90517105a75572b422c95ac00d19b9e5679d6c1a111c02cea621152fe9f6d16562a8ad073a603636f9ba05d6cf810fba2e2d2cbc11f558764453983da38b680685fd07ad08d68f482e425957e1952efc94ea97a3ca56c19bfc967a9cb922cda60ec3abb33b20acfb8ef4b1893b137e78f88da80959680c4e9e17a9a06e75ebaa6304bd4a7002dcdb426c5a2d60eef9968573d4cb7a913da2308e5392e9229ad0d7e9deea436b2be9e2560518e372f477042658871ea2e45a080f19b3ec93cf5ecd4b63efa4a0eaba85a44e6799ab8a21753187fc18ebc4cf52b88e9d4b7c1751995ace9ddeabf8ddb8e35fab1b4314e26adc86f4999bc5896ec0a384e631f656020e8c79b3a0a9288f66ea63cf1a0d46ffb70ed42916b111203c8108ea5d749aca57d7fdd2b2807486736a8712600c7c3e025bf4ef7ac778d7f6e787605b55e6970de5e32e52a9ff67822cca99c896793a317f20f10f5003877c408b3d0253d934cfcddb64114fcd686eca4767c5a26db91fd2b2daf5fb53f077955d0260f03070dc7fc55e5742b2f963e6ea8f53b4b558045167875f5620c8f42efb9538c0dfb1ebb307b93be6093ad5e70e48120daa66393dd27cc4c988b7787d5b5e437ad16a0d450470f1350667300e25b3d509a2d8e4e1948c9fc4a4ebe9a2103b57d91a07c127259f5e6040ad331a3bc3918290a441a8e98a5a493ceb22e878ea050c04552d13cc9b036b7843c26a762cf4c9865d11a5d137a72247611cfbb200fe3a34b137674e25d9b0bb74d0ac6955826d10cee01138ffe3e1bb6ca7c563d059832c04afaea088bbf797a0502ce301e2edd0076d46e2e710f9fcd8a9e6e904e83826dabb47268673c382dce23c4da4f6f7cb6690e9dee766eff5ee7d8eb44e493b151656270d13112cf50e064e64de022b1e5dad9891baa6cd871681a19a75f75a4aa26fb16a4e06a78473224c1090c43555ca499f7d6e7ad7d29fa572a02115b80c7e01fc690319b0587d7901a87eccbc736f02069e7c8d4fd31e10d07cabaf7f7ca7863f5197696b17114607030f24fe5e8dec9c91b6cd0090cef0d5f35e6e626a8a733bec44a6342b92f04bdbebde8c103aadb4326f7f6d73876d764719fc4386c1b0f14a722261a7fbbf74956d9b2fbf6649237039ea990374036de7e57cd4066b9d7defe4e8b1aaaebc52e0b6e54bedf88ba4484c4e45666853e51324f848ffee83e6fa8390498953c30db5f3023f27dde98f604d3784e3bf6deb16ab1991b2133e8ebc8167eb666948f4a1244ab56927625b0687da89f4fbf59daec033e8b21c4390b6e464a62519335c4b530c70948c2190a2699e1a2f00c3bd8922e49d6a258814f39ebe38303169fcea75d383711c50c4d76f0e6db0c012c604197f0d3d4feec764e5bf304937050b6fc05054d78108fdc6b0fd8a340b4041ac4bc004a04a40e445cd9cc63b76b5ff1e155c18c8a3b855a8a11e3efba4005b9a1f56bfe62d7fa235239485c4a385933a1c139f1c7ba3557dda46c75d819dcfafed46a537809d6ec2de9a2b36369e3f3179681d88480477083a2e25accd87353cf5c2f9911b1c583f5bb7c69938c2ca1207ee7ea60184552ea1b5e7aa965f851eb43d46f05f4537a549fdf309c46bc74099182a60a224778e907323581e3ebcd50aa776ba18d612d3c28f722a5518d89f91ae03f02f532687d7ee518ecf002c51339b334b4fc35817162d20f7113d1152701aaff40b0f570c6a7ea426adb01e4b23a0f899c7335de7e88c037bb71e77a406448d6adad870820ba33646dae89f71572a9af73732634bcd58820d664750d2608125def9e9ce42b0a57f65e0e9662033cd5896da902158c26176ac64a5b8da56dbca1ef8340e1eb27377a3e573f23ed99b9046a2bb04ecd7455de8a39890ded4eba533141d2f258fdf3afa270c818dafebd297fb73f0cbbe7e59c8ad0953110b71d3243ecf4eb7beb92b4df6bf19d40e4b654066f2ced741035dd35a1ae4e2a9d3ecbd3982c5619fe2f1771d3243acbd7d1e95fe10145c77521dc214612f73ca46957f45bd1e5f2207e5da8e3a3bfd97eaadf274065dba181167b541dcb61f6362b31134df23955eab10d054fc53cc7c11dcb33289cbe86445e50d7fa2613285d91a100c1239e5c26270ff6144cd37d7fef699ae6b8f64f6b1d85f8a2723f27dc7cf1718d7e4cce9e78782c113d073b6fdeb5b571edd6cf0f8d5a0cfedd3dc03b73e74e79f678057202236cf3aa9d249640909fdcf98f3ddf2bcaea8e0d3c28f2e63214fa071c5ea61896928e544ecaed98bef73f852fcb2561aa1b0262aa6e9c8b47650512ca1e9ed79fdd908936267cb6800a3d104725c448dcec399e935f79d67e0f3bc70a91e1860ef6129cad2295f0b6d4a9845940bcb1938154c73cd04caf566aa75285e8aacfedb49499e2536b3d7b09b9dfc6a06e8911ead484c33dc1680af76d9250f6fffcbfe14c6eb7a4caa5312566c847d9351a4d54c1c4cfce4a6727ee7ba185c5b979df34c2c876bea0c9322e61ef60c65349cc61849e45ee5ebef15fcd4e367435830975fa688678db1130eda70fefafa0ade98bfd266509e66f1e65abe1b47dba51f8360ee28f77d0c4105b84577500c5aabd94536deb016d6ced3e27e51a4971439879748623afd2a25aa63a2ec3f2e6c6eefb079c7a56dc4a885c9324b13a221cbfb9b16566e64425f8f0671a9ef135099ee9381e2fa3e31ea5034a1ffc6f5c3e86342c5c8c2c197e40a9c08a957fe7bf1048802089fbdce822f7a79cdd57336c54044a6da13b8d762f0eaab40d6dcd465abe49c5aa99719d8068fea45bb13322697ddb72c4a7f4166f7a245a06612cdc32618f9a9954e39679ca52bde145094d8c2079fb8fa69f33c709f0c068fae6959a2647ba041a28f7bd8e0047e18044b1f1b0044377c4983de631c4a9f0b78ab0d727415c5ebca40c247ee0e065d960aeb2395139ed2626b2a347026a68f9dc0a29f35c210aed0971c4d27e22b49b28d5a1d2e026ea6bf0d607d4f71d348567f63c3becb3aeff2bc414e72487fc626a5ef3ff380fd8ea349100f94a69f4c0c87d29bd96ef26a15a2b7372e7df2010f359759294d542c5e474be82fcda5cdb9b2728", 0x1000}, {&(0x7f0000001480)="857e134b923bb0dce83c977d519e9cceea77949be0617dd76703b8de875767f4db3dc6d4db342074d2ab456d23ea4880ec2650f1a7be7845ca1ff9100fa21b6ed23e7e7225aa422eece7e73bd345fd3dbd2e45996a234eabfd9ef79ccee0e7b6ccdc56f69e6e5b75a9", 0x69}, {&(0x7f0000001500)="492fbf290e6f57a300776dc7e84f0a569bc634c781392da33454c3149ff0b44a922496f8002962d5328b4627b99af4ae0274fd2008378e4ea01ee8872f2173bc3febbcd3e0abb63ba026c1dfe807e5f53725702615492ae236d4232d916909716b37a3722c89115bb2bbf613379c0f54eaf1259d19be5953f7acdbfee7ae12c0b4379f2667f6666b86f7ca5ce0e6bbb0eec8ff7fd6af32d2b2e5671624ce1e34a09d9b651858216df1cd6974cfce038578593b1725c7c21cf874862e118a1f779739bccddb1f62bfc5424fbe6508b4e3575c0878", 0xd4}, {&(0x7f0000001600)="f5f4f2dd74b5265d80453bffa79becbcbf1be635d8add4a6f784536587389a17679112bf2c03310a4ba0184e89f15a528604482369e2775a249393f469c3800dd80bfe1cc9", 0x45}, {&(0x7f0000001680)="74d37639f96f764f9c1e59afca76cccde6ab22bf2f4ce3bfdb9f8548286cc2e880ce7b6f8dc6a76b555891df518216b70ee286a6c0ed08a374caa06da35f2db8d7a53b68e8ebad861114fa7e13e51b1ae198ac93022ed09636da929b5bed984ac18d3b2b13c34071fc9af91644f8c4b93bb4", 0x72}], 0x7}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x100, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000001780)="4a65431c3554165566d6392df784b16913015a59c31642dd7aefd90848352e28e26e354bd631ac226fcf58622975eb324b3e08430377f1cc3a4f504d869688a58426ae374ffacbc31d154452f8962021", 0x50}, {&(0x7f0000001800)="35f7c90ee92630bb1092a3080d29c6b82f2dba24bcf61427e47e0fdb13e0901372b5968344e6e8732c8116efe50c37ede8744760889bb15d08a02ba85f7d5e927d2afeee3146c7645fb761b6313c6a1d9e09c4b40688644dea003da2b0b43045aba4ec386856f36a84549eda03ea211851bb65d80f1e049965ac052fa4942c91a6c9c121ba55f6e2464d368b5c334a518e111a828146656b80f92770e43955caac0851ffe40286defef281f3f5043315a9bc0ec9d79305a5fc309213ff7cd3779fcef04b298d03e58e18e8aa4e", 0xcd}, {&(0x7f0000001900)="ad506ff141c529029abc80d4548fd8d4a1d1cdfc0902558a0950f2756b09fb70daf6e8de07f1086e85ee2332eebddc481b291d634092ec18cacb51d1384717c1e92d6b4f3dfbb14f32a7cc60d5e8492977f5700ae322ffc90b3b", 0x5a}, {&(0x7f0000001980)="37b0d50967a774f8fa0c46f371bd169780f8f4ac045b7c39356f58548cf39130981775fa0e3dbd1b3478d1af00d0af3f2397bca3a251e71de9ffbe717e93310b73353d1db7a30801e17265de58cad8d3736070b5", 0x54}, {&(0x7f0000001a00)="a285ead17f10cec55ef177ec6c454e0a4a2718de", 0x14}, {&(0x7f0000001a40)="a61922dbb5a7e7a2f9d3035c1c796380ce31d142f93e76a8bfa3442f3fb5a32eeadce0b2ba26beb78cddbcae1f8695dd25162e4d6aad79618ca717254ea71c5413bd12c24256474a86353989e23e4fcdd97f670040ffdfd7e77a010b11e78d20e16056d181a981a0eb7aa47ccdc9f47b747c5301f97d704072ca16cb190f4f7cbae439a17084ff7049ca2dd5ba9868d5f443431e9400a9a29279b27b61f281260d639240f3d8805874af474b5acc89f9629bbe2f3043a6d01e9a4e7ac251eaad15e12f654c6cc31c27", 0xc9}, {&(0x7f0000001b40)="88635308ddd906dbc7ea5ec70edd3211e43c815aa7129c86a7f2b43ae7eeea549ee6f547b0e40b6149e5fcd09caf54e3f271abb92e42bd84f5176a347f51118b7796c5cbfae2834079be6b9ba9823851471db60530836116ed9d2aaf101596afb393547e32d4fdf903758c96c7aae15614cc8cc482b942bff3336f9b1be29dfa6c9bdda7b0460863515471cacccc9ba50adb66bfb112d531ac4850dfbce900e00903688115e6946c7b3eb84b777e7f4978fd5c087af14fcba0c76ebc69ffcdfb5932f8f9ca3cb6934ec1f4f1b20ff32f6f76183d2a841c18bf66cda5ab94cf3d85b2e4f792165e021beac15f6065b8", 0xef}], 0x7, &(0x7f0000001cc0)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x0, 0xe, 0x1, 0x1d, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x42}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}}}], 0x88}}, {{&(0x7f0000001d80)={0xa, 0x4e20, 0x10001, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf4}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000001dc0)="50b3c9e23b7766740b1e7a40e41b1053b99381f6c2c5b1e710a3b89f34a44033b0f287fb8d0b5e", 0x27}, {&(0x7f0000001e00)="356eae728aa0384d95b2d5249b512373312e2b39817ae543fa7c5d816483c1d322bd0b38f76b9ed029b81e6d5b34f18255ce7022f1108201183f95ac32535df6984f9339f54428342d9fd00eda811ea83eb9791a28fb6381251ba276860bb6dcfff9ea960c7a26ec99d56ebe43f2bc91845c179f3eb41fad9fe02412d2c658e9e7dfac9c8aacda04e28680c5c364383b217184bb9ad3d4267ca07794095da01efd68744eeb21", 0xa6}, {&(0x7f0000001ec0)="50348a0624f620e3b730fc5fece25cac3eed9e4624fb401fb54a10660fd97b2d55fdd20a05a69d5f0c44b41e5e13584de1fe222c7a1d192ba6a041207b0c9ba351468e7f434e11fa412b42e31e31eba46533432058f9ad2a5f92e9df28229b4626e282530e105d077e53ab4326508d30882481dec993e0f82646966e01cbf6ce7212234d5f6644139b7c77d4a1edd62171d5d4728bb85299426b9bd1022519b0ccd3ea2a65275bf09bc41fcfbcef098a416c5cd25c3b616831ede9b544dd017b91b6801d3652be40504d5b60d847c191a3b1d57ef50592c330a5687efa9e208da9e48d93e8acec55621d64e7022b594d5b83dccd3d5588", 0xf7}], 0x3, &(0x7f0000002000)}}, {{&(0x7f0000002040)={0xa, 0x4e23, 0xcf4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000002200)=[{&(0x7f0000002080)="0a81b19931f1d295d83a59423aa00b70c6759131fd9ded8ef2261ea4aa66a5bf2e0e99c0926fa0df12d615097b2178547a9ea236c58276425d0871414dfe85ab8d4e0ee6c1854adcce37bb1eba6d2d12120a1dcb8e36858e323fed5e15cb94244cf9703a680789bdc890ed14762a9abebeb595d90aea7998597ee085f7b78ccb8d346fcde43787bc832f70f2cee7acce82f4ad153dd831167c0b5dc99e0e4ec008", 0xa1}, {&(0x7f0000002140)="606607aef5d06c90936a6f639b87d87ed9131b03de09747c4c8945c7ffa8707aaf110c096f785a603353977900fbb760235517e0f0df453be99c13a8103759f91d695e5eece6934280dd61eedb85f8bcc54c587b44b099509ce336e3668ac9a626260a3f84c12e6f51425cb2c1b82192be44c399edc12239eed72ab84aca5717b1c36151c62e478f2866017894558b3a372678fe7f30d47e7ec90c99310296f26b50889b387eec2872495d728deafa4dd460cb6ed80e577168cbd43c", 0xbc}], 0x2, &(0x7f0000002240)=[@hopopts_2292={{0x60, 0x29, 0x36, {0x3c, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @calipso={0x7, 0x30, {0x2, 0xa, 0x3, 0x81, [0xfff, 0x9, 0x5, 0xffffffff, 0x30e6]}}, @jumbo={0xc2, 0x4, 0x200}, @jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0x2}]}}}, @rthdrdstopts={{0x130, 0x29, 0x37, {0x3b, 0x22, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x5, 0x2f, "91564a91fc617a6a231c0ff9c35de7b4d5c9e14f848498c1c2129dccce259a9e19ac83340e807c074ccfe100096bd0"}, @generic={0xfc, 0xbb, "994e4ec52f6993a5ccdd018973456a8ecd03f1ea9ef8440e2a281b6d57fba5ff4416845f15b9c05750e246ca764bd7ac46da17855753be2de3a418b29b8e909fa64e3509c81bde054b3677610ca7b44c98d6e320a8e709aaca02b9feb9b718b8454bb78f476feb68f43f842c3ea7f5a4a932519112743c9bb27dbf3611b6ee33b15374496047891801d165d9c1d96a46daf1ea36b52c0cc5b56c901e6997dac7c457acc52136e527f90b609a5a4a042517714f153eb1cbdade0ee9"}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}], 0x190}}, {{&(0x7f0000002400)={0xa, 0x4e22, 0x3, @empty, 0x9}, 0x1c, &(0x7f0000002500)=[{&(0x7f0000002440)="8eeb1b23a2ad19d74007c832b4e084789da88f4c2fe95c6524fd8764156ef04fc973d91cd622016c28318c06dee22f9ecd2e2da45cdb9c8e49499842803d73e3c043b69ba2cb7e640414779e77b8b2ad33c15307426a208d2bc88b8b1601216afbce643d9d361cfaec7d853990b6e62909ba8a44f33cad6522f8fd31268004dfca703493a9df", 0x86}], 0x1, &(0x7f0000002540)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x0, 0x6, 0x0, 0x3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @mcast2]}}}], 0x48}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000025c0)="b561f9e39db062", 0x7}, {&(0x7f0000002600)="8c0b9dff39d7e977af706800c1c63ec74c5ffb6ff1331345b1801e0f7fa87311f45835fa26b8dc346ee3b8e112eeb7671681b22a4b0983301e0edbf191a4a544b5d2082d496e7aed1dc39ef70888b2f07eac8bf99ec67b25706e594f61318b65f4f8a2d570b6f638230239994c", 0x6d}, {&(0x7f0000002680)="ca1f26aa88a54bd89a4032b842c5d908132ab804453d6a085599b50c080ffdc083efedd8fe09b36cb5527a00d1ca7418807df25002fdc6d7893b4487d847d1dbff8b7678a00933145a6d160a8c3a93e826d703b057b586ccd4fec01f79cfd5988ccd668117f4f0fcee1cc47948edf598500000dac9c33bb3fed2d0c292fb738e67df478d48ae87be7e51c3932869102b7ebd31ff8a11ae039703abb88e670c53e5ed1744b4866fc05acf194f0a6c9041804a18b387aa785ffc40c78efae89cb2962197ddf0", 0xc5}, {&(0x7f0000002780)="8600f52c1daea134274c9269197f", 0xe}, {&(0x7f00000027c0)="686f237ba9a576aa8f94e1978f496bd85479cb04cd3d1f819d1522d4668bd3d2368f8f35892b96c68e52ecd996cd68883840eb64262b9caf942aa4f9e8246011c2e7e326e1345ad8b53f23a3529f9af2945726f59f35c22be324f86db801fe15c919008fbde697bb2e96c9900ac6f88c6ac0bc2480d61d0ae9e8dc9d9e91982ac95d66d30014b0bf48d970d989418cabb62e5feda8fc7af4676af5cb608c327c2b8fa839", 0xa4}, {&(0x7f0000002880)="3b1c7e65dfde3ad92ab7857ef5534e7ad1d2ffd5b9103912d47f732e8ff7ce4dc9b5d92bec0797e7944de9d5c249f25046219b7d66ac83a1e7dbd4f81a7ba123ea606fdcaa2324ec1a05126bb1a709b183d891991dd3312e7ac7693259a414abca98460470cee1b4ba4218d1e498173281478fceb88007f8db41543b914394897f7c0c0755e7ab3c54f1460f38a89a20", 0x90}, {&(0x7f0000002940)="79a5b6ca3c4b401a52da1b8e421d62bf76ad7d18426fedb47887cc25ea2de0e388911e40bc5e918b5faea890b46eb6ddc3bfe9de726c6f197a321a22da905e0406808642e9fbc6030c09b246a13d30937081e9772cd85c819f2bad0928db774c1fae4391962560c3376fea688069e24068fe7ecd4184f62b6173ada4250d2e6c8162a6b6c4146e3e", 0x88}], 0x7, &(0x7f0000002a80)=[@hopopts={{0x28, 0x29, 0x36, {0x67, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x400}, @pad1, @ra={0x5, 0x2, 0x6}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3ff}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x8, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x88}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}], 0xc8}}, {{&(0x7f0000002b80)={0xa, 0x4e21, 0x54e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f0000002e40)=[{&(0x7f0000002bc0)="915fa7218415d3983093b1ce46a87d1b7f40f7d55b304187d8784407c5503c416d37007b50b58fb0cbd8f56854bdaade112f222d42cf79c1c17a18db8a1810d75d902cecc8115284d9b1294bbcb0a9fcfe4e035eb1e869e24bdd9c4eeecb223bb16733354ef63668d58c59a64989eec040a8806008e1de1a9af0714ddd842b7d87b9d7a5ad93648ddaad21007de20b9df7bb1e5a456053a3f8fd8b289f422ed52b62de9ce53936ee24e73f70854f5ddd525e007dd49f3cfe3d3eba22fe7f2215b45a0ba212d5e689a26e13fd88259c4d548da78a9f4f0ea3501a17d9bf01da4469bdf8b59f074390a01fea81b76630f36cea886a", 0xf4}, {&(0x7f0000002cc0)="422685d8ad0667c5a13bbdf02a42331ebb16f2f0d7ca283d9cedabda48456f764374dbb7d6ba61ad8f8730e80187df09d320f64c76363f18a674c7dc15271a4ed5b43ca6d61d0fff", 0x48}, {&(0x7f0000002d40)="c83a5fc417088f7afb1fd366596512eed3c175478e5e8b2f98d48710a1ef0c37f69e7ea1e4f25bf094678a3a0b3c8e8c83c1786c58f5df820a71e8b876a239c874a64a35c2c1a22c0eb1093c16b7dc366168591b4a41509a960073ea52241829d54134d5be57aa7883ce129a0832e23515253e236aca5fa6d1b69c5eabdf7d7d0b0aa6af17891deb824cb924dfe64d244573227bb726f2a0ece03f0d1cc8aec83b4cafad7e7b24b3c1cd9ed47019a32f852702a5508e307f0c0f163752baf3d50d685ede67ae7307f7ac18edbc3204e155d1a960e1c16e8848994887d491b8d2bbee3a6a5ab17c13c08ef9794c7534ee551e7318aa", 0xf5}], 0x3}}, {{&(0x7f0000002e80)={0xa, 0x4e23, 0x9e, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40}, 0x1c, &(0x7f0000003180)=[{&(0x7f0000002ec0)="e4a33c829c5bebc4ba1058d749dfbff23dfddf7d052c2130030c52cfc028bc6aa0f859b8c77c79748f07d377071c24cdd4eb5e2e939787d25bf5b776c4f7843bba0898ca191373470922297a", 0x4c}, {&(0x7f0000002f40)="f279e553b01ce650731c87872a9eb8093547c7729934d6ba99156a641b748b3f57b84c1a", 0x24}, {&(0x7f0000002f80)="ec87fddd14ec84c9b2798f3960d0e4a1679f24c9f207860992d414a16ac3", 0x1e}, {&(0x7f0000002fc0)="83cd2280ac02507678b0dc6010cda99b7b81cb", 0x13}, {&(0x7f0000003000)="9475766fef915e7315a418f453e2089bdca5ed2e2af62b3b03718d108368a78fea83308286d1bfe5d5291f605c5a3e480dabcc93ed8090d4be", 0x39}, {&(0x7f0000003040)="a3f426b7a94b8f97ea534556a9e95dc17ae947f1d23d6c7e7862e01476b1b85b1428e8553c75943cbb6d64bf38", 0x2d}, {&(0x7f0000003080)="0255c74d8c549aaa13b8402a95b45218059331d99349b3b7162e98d06ef04050a42feec6ddd16174ab096d2d57487d9a96557c8dcd87ff36dadcfe247e26611acb9871090a2b538b4e6d64520cf28769bb06280f9014fac9ae52aca47064461dd7e2d1736a6ac2612935d3b62d57b4fba4284aae466bdf8741429ce79b7e9d008d230e51c85a2c6b1414541570c43d590f57566b5afbeffb7eeffb19ff8bd1", 0x9f}, {&(0x7f0000003140)="8dca03f41b47268cef0a", 0xa}], 0x8, &(0x7f0000003280)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x31}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @hoplimit={{0x14, 0x29, 0x34, 0xb00e}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x11, 0xb, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x1, 0x7, [0x5, 0x4, 0x5, 0x1, 0x8, 0xfffffffffffffff9, 0x3, 0x3]}}, @pad1, @pad1, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0xc8}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f00000033c0)="0171fd4dc004ad839cbceefadee328c131644fcdd5da30196ba2735c78590f43e07173a2e251c8fc69516acb7290733cf694bb8ac650ccfbb4f3236719291de4f34ef04feaed98383faec058c96b3dffb3a9b31aec42328226e71f0c5cb05ae388bf2a07cfad75bad412bec4303b66e3e0c4e03af50e749042b66e1723", 0x7d}, {&(0x7f0000003480)}, {&(0x7f0000003580)="1b4465abd634298299c5c7b224cb0d6c32643b0fc10282d3ddf5481ff504dadb3b814e2b8c616b32c469542337602be88b58886dfa8a", 0x36}], 0x3}}], 0x9, 0x40400c0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x10001, 0x72100f4f, 0x6, 0xffff, 0x7, 0xfffffffa, 0x0, 0x0, 0x2, 0x7}}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x70, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x28, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x4004814) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f00000038c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)={0x2c, r7, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004000) 4.147915856s ago: executing program 1 (id=7736): r0 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) syz_clone(0x93f0b91, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup(r3) socket$nl_audit(0x10, 0x3, 0x9) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x13c}, 0x1, 0x0, 0x0, 0x20000011}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) sendfile(r4, r4, 0x0, 0xffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[{0x10, 0x10e, 0xe}, {0x18, 0x110, 0xe, "ff"}], 0x28}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2a, &(0x7f0000000000)=0x3, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000240)=@ethtool_flash={0x33, 0x4000c142, './file0\x00'}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socket$key(0xf, 0x3, 0x2) r5 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) sendto$inet(r6, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000008c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d48001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008000001800b6fcf1a22796e736574000008000340000001"], 0xd4}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r7, 0x1, 0x53, &(0x7f00000001c0)={0x7, 0x7, 0x3}, &(0x7f0000000200)=0x28) 4.145165236s ago: executing program 3 (id=7737): r0 = fsopen(&(0x7f0000000140)='vfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='iocharset\xdc\x88\t@\xbd#\x17*\x81^\xcdi/\x11T\x8c\xd3\x80\xcc7\xadX\x9b\xa7b\xc8\xeew+q\xe2#~\x96|-\xca\xa2\xeb\x9f\x9e\x9bo6h\xba\x03N|\x1f\xa1\xe3\x19FSU\x80\xf8m\xe8\xc5+;\x92S\x1a*K\x88`4f\xa5-\xe8@\xebY8\xf7\xe1\x7f\xe6\xcb\x05\xf8\x91\x02]\t\xaf\xffy\xc2\x14\x04{UY\x8c\xde\x03\x97\xc2\x96\xf1\xb3\xb5\xd6gU\x81\xcb4\xf1\xeb\xbe\x9f\x12\x8d\x83\x1d\xfe\x0e^8\xab\tW-W\xd0\xe2\xa1\xf6\xc6\x13\xa5\x9c\x12\xe5\xff\xf0\x8b\xa2)}\xe2\x96\x96\x00\x85\x8c\xc5\x88b\xd0\x88jP\xcc0\x9a\x89\xc4r&\xb5\x8e\x05\x8dD\xb1\x15\xb1\xe0\xf7\a\xba\x1d\xbd\xa3\xfbF`\x9f\xfe\xae\xb9>\xaf\xc4=\x16\xb3T\xcb4*B\x1b\x88gPO\x8db\xce\x00\x00 o\xf9\xb9*{,\xb4g4quz\x9c^\xdc\xa88\xab\x0e\xddv\xba\xcaa\xde\xc4\xa4\xc0|\v\x90\x97\xb1\xbba-\xaa+\\\x84vg\xb6\xa3\xe7L\x98Zh\xb4;\xfbY\xab|\xef\x1f\xebgC\x9b>\x9bPg\xd9\x17U\x99\a\x00\x00\x00\x00\x00\x00\x00\x9fD\xa7\x1a,\x04%\xc76\xd7[\xb6Y\x85\xab\r\x8e\x92\vi\xb9\xc5\x8bD\x9c\xab|\xac\xa8-g\xd7Rf\xc7\x97\xab\x82\xe0\v\xe6\xae\xb5\xc8g-z\xea\xa8\xa2(\xb2\x85\xf4\x85\xa8Hw%Z\x8c2-\x1f\x83\xe5\x879?\xc1i\xd8\xf1i\x11\xd0', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f000001"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)='%pB \x00'}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r1, &(0x7f00000003c0)="b87e88d3ee", 0x0}, 0x20) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='ioc\xb7#rset', &(0x7f0000000000)='\nr\x00\x00\xf6\x1d\x00\x00', 0x0) 4.144629971s ago: executing program 4 (id=7738): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d40)={0xf0, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x9}, @WGDEVICE_A_PEERS={0xc0, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9959076f17a3df260c32673333152e018f4fbe8eca2b76a7ccc30541f025a77c"}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x70, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "c68ebdaf5cacea5b9f5e5aed94bc332c6a7c6afbe73b047d1bdd6766aa445ca7"}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) 4.099721328s ago: executing program 0 (id=7739): socket$inet6(0xa, 0x3, 0x88) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x71b2, 0x3180, 0x8000, 0x1d8, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0x1a, r4, 0xc, &(0x7f0000000000)) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0x62c, 0x4c4, 0x48, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff020000000000000000000000000001"], 0x0) 3.772657078s ago: executing program 3 (id=7740): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000200)=0x4, 0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000940), 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000200), 0x48000, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc500000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000002400038020000080080003400000000214000b8010000180090001006c617374000000001400000011000100000000000300000a"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) close(0x3) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xdddd1000, 0x1000, 0xe, 0xf0, 0x0, 0xfd, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x10}, {0x2, 0x2000, 0xb, 0x9, 0x8, 0x2, 0x9, 0xa, 0x5, 0xf, 0x3, 0xc7}, {0xd000, 0xe6e50002, 0xb, 0x0, 0x2, 0x7, 0x4, 0x0, 0x2c, 0x0, 0x6, 0xe}, {0x8000000, 0x80a0000, 0x8, 0xfc, 0x40, 0x4f, 0x2, 0xd, 0x6, 0x3}, {0x2, 0x0, 0x9, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0x44, 0xe, 0x4b}, {0x2, 0xd000, 0x0, 0x7, 0x4, 0x6c, 0x1, 0x8, 0x4, 0x8d, 0x1}, {0x6000, 0x1000, 0x4, 0x9d, 0x3, 0xfe, 0x0, 0xb, 0x5, 0x7, 0x0, 0xf8}, {0x25000, 0x8000000, 0xd, 0x17, 0x3, 0x2, 0xff, 0x0, 0x14, 0x6, 0x2, 0x7}, {0xeeee8000, 0x5}, {0x2, 0x9}, 0x40010002, 0x0, 0xf000, 0x300, 0x5, 0x2000, 0x54000, [0xffffffffffffff47, 0x401, 0x8, 0x6]}) r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r5) close_range(r1, 0xffffffffffffffff, 0x0) 3.639415688s ago: executing program 4 (id=7741): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r1, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x9) pipe2$watch_queue(&(0x7f0000000480), 0x80) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000140)={0x4000000}) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f0000000000)={0x4000000, 0xd, 0x1}) pread64(r4, &(0x7f0000000180)=""/244, 0x20, 0x100000000) r5 = fsmount(r3, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000040)={[{0x2b, 'cpuset'}]}, 0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_clone(0x8a140600, &(0x7f00000001c0)="07b5e42d30226aba87697ce3ff665d7cb4bdf0381b74230609ad5a0c5b8a9d5c2f3277994317083b76b0aedef0afef4267cf265f61c257cdf6b2b4f80e41dc603103f166f30d40ea85dfe1e8e66067ed6f2943db878e74532cf26a3f8ca5", 0x5e, &(0x7f0000000240), &(0x7f0000000340), &(0x7f0000000380)="646a21c1314836dab1375dc5370b85967842427f74c7fdda0fb7ef9233f6099289037fa8ede14a0147999b5b523275ef4abe7ff27941f54759b8ecf4d9f02b8e7d4d9dfadc80893ce8f09ba0bcc31b1ba7191c0c1c71e4bb4b162e670308b4d33e0f02aa5e24636f9c2d0db8a006018c1225f05d35d6e969f5fabf0a8c6ba2ea8675fa596d5d008285bc2bc52fea5fdafb52bfa310ecb3056c7f32881c0305e3ea74da8d0922") sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c01000010000100000000000000000a0a01dc60ec0301000000000000000000000100ac143fbb0000000000000000000000000000030000000000000000bab1f5730b96d037119894419708a73c613ca4e5e41a14286e703acfc749e84e84679f882e789743d018afc009ca41e9b049bb7bd3f9b7e509419ba4237291247237a3970acba977c5a05d8beac0345043ef1bbfaf4d1f6bdb96f70dff0aeebc44f79da3d1af5345a9b6d50fad7fe8de77e67929285a176072a7a5f1f9ddcdf73e8d53cedee97a65a7c96ff1c44259ae982b9d0db24182", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/344], 0x19c}}, 0x0) syz_open_dev$dmmidi(&(0x7f0000000300), 0x6, 0x70202) socket$nl_route(0x10, 0x3, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x80802, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 3.271434724s ago: executing program 0 (id=7742): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x1f00, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) sendmmsg$inet6(r0, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ce", 0x1}], 0x1}}], 0x1, 0x20040001) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x2, 0x2d, 0x0, 0x0) syz_usb_control_io$sierra_net(r2, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}]}, 0xa4}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0xa4, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}]}]}]}, 0xa4}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.155224717s ago: executing program 2 (id=7743): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x8, @scatter={0xfe, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f00000001c0)=""/4103, 0x0, 0x10, 0x0, 0x0}) 1.687937104s ago: executing program 2 (id=7744): syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) 1.557613267s ago: executing program 1 (id=7745): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000003d00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) sched_setattr(r3, &(0x7f0000000280)={0x38, 0x5, 0x0, 0x8001, 0x0, 0xffffffffffffff10, 0x0, 0xfffffe0000000001, 0xffff, 0xffffffff}, 0x0) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) socket(0x2, 0x80805, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x0, 0x260, 0x260, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x5a}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0x2, [0x1a, 0x36, 0x1d, 0x1c, 0x23, 0x1e, 0x2c, 0x7, 0x1e, 0x7, 0x2d, 0x37, 0x30, 0x9, 0x3b, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r5 = socket$inet6(0xa, 0x3, 0x3c) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000002730f08f905ffffedbc010203010902120001000100000904"], 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0xfffffffffffffe90, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) (async) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) (async) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 1.458013437s ago: executing program 2 (id=7746): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) keyctl$invalidate(0x15, r2) keyctl$KEYCTL_MOVE(0x1e, r1, r1, r0, 0x0) munmap(&(0x7f0000c00000/0x400000)=nil, 0x400000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x9, 0x5}, &(0x7f0000000000)=0x90) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000100)={0x42}, 0x10) bind$tipc(r8, 0x0, 0x0) bind$rds(r7, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x22) sendmsg$rds(r7, &(0x7f0000000180)={&(0x7f0000000340)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@rdma_args={0x48, 0x114, 0x1, {{0x9, 0xb2}, {0x0}, &(0x7f0000000940)=[{&(0x7f0000000600)=""/194, 0xc2}, {&(0x7f0000000500)=""/53, 0x35}, {&(0x7f0000000a40)=""/179, 0xb3}], 0x3, 0x6, 0xe}}], 0x48}, 0x0) r11 = socket$rds(0x15, 0x5, 0x0) bind$rds(r11, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r12, 0x8cee000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 1.17991011s ago: executing program 1 (id=7747): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r5, 0xf501, 0x0) close(r5) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00') preadv(r8, &(0x7f0000000100)=[{&(0x7f0000000000)=""/250, 0xfa}], 0x1, 0x185, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r8, 0x58, &(0x7f0000000080)}, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) r10 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x0, r10) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r9, {0x0, 0xc}, {0x3, 0xb}, {0xa, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x82, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x1, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffc, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008000) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x2d}, @empty}}}], 0x20}}], 0x1, 0x8000004) 1.176338677s ago: executing program 4 (id=7748): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) listxattr(0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x14, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x7, 0x7}]}, 0x10) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) syz_usb_connect(0x0, 0x36, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x800000000000000) 815.151986ms ago: executing program 2 (id=7749): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='attr/fscreate\x00') pwritev(r0, &(0x7f00000003c0)=[{&(0x7f00000002c0)='s', 0x1}], 0x1, 0x8000, 0x1000) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000003240)) sendmmsg$inet6(r0, &(0x7f0000003600)=[{{&(0x7f0000000200)={0xa, 0x4e24, 0x401, @mcast1, 0x10001}, 0x1c, &(0x7f0000001700)=[{&(0x7f00000002c0)="ca54b2eeafc19e2879508eb3cda6d7b45716f0d6c1", 0x15}, {&(0x7f0000000400)="5466dbc35ceb2521ebda2b843e929b2be2d390e7b67eb20ea20e86ef8614277ddee948f999cd13dea544ca939b4f22f52543be62c29c93973676707b89fcbf45cae652ad236e73329263fa8c2984273063dcc173909b2e2aeb89ad2b3fe6e3509525a13770c384aafa7407595fd57f677937053912", 0x75}, {&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="857e134b923bb0dce83c977d519e9cceea77949be0617dd76703b8de875767f4db3dc6d4db342074d2ab456d23ea4880ec2650f1a7be7845ca1ff9100fa21b6ed23e7e7225aa422eece7e73bd345fd3dbd2e45996a234eabfd9ef79ccee0e7b6ccdc56f69e6e5b75a9", 0x69}, {&(0x7f0000001500)="492fbf290e6f57a300776dc7e84f0a569bc634c781392da33454c3149ff0b44a922496f8002962d5328b4627b99af4ae0274fd2008378e4ea01ee8872f2173bc3febbcd3e0abb63ba026c1dfe807e5f53725702615492ae236d4232d916909716b37a3722c89115bb2bbf613379c0f54eaf1259d19be5953f7acdbfee7ae12c0b4379f2667f6666b86f7ca5ce0e6bbb0eec8ff7fd6af32d2b2e5671624ce1e34a09d9b651858216df1cd6974cfce038578593b1725c7c21cf874862e118a1f779739bccddb1f62bfc5424fbe6508b4e3575c0878", 0xd4}, {&(0x7f0000001600)="f5f4f2dd74b5265d80453bffa79becbcbf1be635d8add4a6f784536587389a17679112bf2c03310a4ba0184e89f15a528604482369e2775a249393f469c3800dd80bfe1cc9", 0x45}, {&(0x7f0000001680)="74d37639f96f764f9c1e59afca76cccde6ab22bf2f4ce3bfdb9f8548286cc2e880ce7b6f8dc6a76b555891df518216b70ee286a6c0ed08a374caa06da35f2db8d7a53b68e8ebad861114fa7e13e51b1ae198ac93022ed09636da929b5bed984ac18d3b2b13c34071fc9af91644f8c4b93bb4", 0x72}], 0x7}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x100, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000001c40)=[{&(0x7f0000001780)="4a65431c3554165566d6392df784b16913015a59c31642dd7aefd90848352e28e26e354bd631ac226fcf58622975eb324b3e08430377f1cc3a4f504d869688a58426ae374ffacbc31d154452f8962021", 0x50}, {&(0x7f0000001800)="35f7c90ee92630bb1092a3080d29c6b82f2dba24bcf61427e47e0fdb13e0901372b5968344e6e8732c8116efe50c37ede8744760889bb15d08a02ba85f7d5e927d2afeee3146c7645fb761b6313c6a1d9e09c4b40688644dea003da2b0b43045aba4ec386856f36a84549eda03ea211851bb65d80f1e049965ac052fa4942c91a6c9c121ba55f6e2464d368b5c334a518e111a828146656b80f92770e43955caac0851ffe40286defef281f3f5043315a9bc0ec9d79305a5fc309213ff7cd3779fcef04b298d03e58e18e8aa4e", 0xcd}, {&(0x7f0000001900)="ad506ff141c529029abc80d4548fd8d4a1d1cdfc0902558a0950f2756b09fb70daf6e8de07f1086e85ee2332eebddc481b291d634092ec18cacb51d1384717c1e92d6b4f3dfbb14f32a7cc60d5e8492977f5700ae322ffc90b3b", 0x5a}, {&(0x7f0000001980)="37b0d50967a774f8fa0c46f371bd169780f8f4ac045b7c39356f58548cf39130981775fa0e3dbd1b3478d1af00d0af3f2397bca3a251e71de9ffbe717e93310b73353d1db7a30801e17265de58cad8d3736070b5", 0x54}, {&(0x7f0000001a00)="a285ead17f10cec55ef177ec6c454e0a4a2718de", 0x14}, {&(0x7f0000001a40)="a61922dbb5a7e7a2f9d3035c1c796380ce31d142f93e76a8bfa3442f3fb5a32eeadce0b2ba26beb78cddbcae1f8695dd25162e4d6aad79618ca717254ea71c5413bd12c24256474a86353989e23e4fcdd97f670040ffdfd7e77a010b11e78d20e16056d181a981a0eb7aa47ccdc9f47b747c5301f97d704072ca16cb190f4f7cbae439a17084ff7049ca2dd5ba9868d5f443431e9400a9a29279b27b61f281260d639240f3d8805874af474b5acc89f9629bbe2f3043a6d01e9a4e7ac251eaad15e12f654c6cc31c27", 0xc9}, {&(0x7f0000001b40)="88635308ddd906dbc7ea5ec70edd3211e43c815aa7129c86a7f2b43ae7eeea549ee6f547b0e40b6149e5fcd09caf54e3f271abb92e42bd84f5176a347f51118b7796c5cbfae2834079be6b9ba9823851471db60530836116ed9d2aaf101596afb393547e32d4fdf903758c96c7aae15614cc8cc482b942bff3336f9b1be29dfa6c9bdda7b0460863515471cacccc9ba50adb66bfb112d531ac4850dfbce900e00903688115e6946c7b3eb84b777e7f4978fd5c087af14fcba0c76ebc69ffcdfb5932f8f9ca3cb6934ec1f4f1b20ff32f6f76183d2a841c18bf66cda5ab94cf3d85b2e4f792165e021beac15f6065b8", 0xef}], 0x7, &(0x7f0000001cc0)=[@rthdr_2292={{0x88, 0x29, 0x39, {0x0, 0xe, 0x1, 0x1d, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x42}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @local]}}}], 0x88}}, {{&(0x7f0000001d80)={0xa, 0x4e20, 0x10001, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf4}, 0x1c, &(0x7f0000001fc0)=[{&(0x7f0000001dc0)="50b3c9e23b7766740b1e7a40e41b1053b99381f6c2c5b1e710a3b89f34a44033b0f287fb8d0b5e", 0x27}, {&(0x7f0000001e00)="356eae728aa0384d95b2d5249b512373312e2b39817ae543fa7c5d816483c1d322bd0b38f76b9ed029b81e6d5b34f18255ce7022f1108201183f95ac32535df6984f9339f54428342d9fd00eda811ea83eb9791a28fb6381251ba276860bb6dcfff9ea960c7a26ec99d56ebe43f2bc91845c179f3eb41fad9fe02412d2c658e9e7dfac9c8aacda04e28680c5c364383b217184bb9ad3d4267ca07794095da01efd68744eeb21", 0xa6}, {&(0x7f0000001ec0)="50348a0624f620e3b730fc5fece25cac3eed9e4624fb401fb54a10660fd97b2d55fdd20a05a69d5f0c44b41e5e13584de1fe222c7a1d192ba6a041207b0c9ba351468e7f434e11fa412b42e31e31eba46533432058f9ad2a5f92e9df28229b4626e282530e105d077e53ab4326508d30882481dec993e0f82646966e01cbf6ce7212234d5f6644139b7c77d4a1edd62171d5d4728bb85299426b9bd1022519b0ccd3ea2a65275bf09bc41fcfbcef098a416c5cd25c3b616831ede9b544dd017b91b6801d3652be40504d5b60d847c191a3b1d57ef50592c330a5687efa9e208da9e48d93e8acec55621d64e7022b594d5b83dccd3d5588", 0xf7}], 0x3, &(0x7f0000002000)}}, {{&(0x7f0000002040)={0xa, 0x4e23, 0xcf4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4}, 0x1c, &(0x7f0000002200)=[{&(0x7f0000002080)="0a81b19931f1d295d83a59423aa00b70c6759131fd9ded8ef2261ea4aa66a5bf2e0e99c0926fa0df12d615097b2178547a9ea236c58276425d0871414dfe85ab8d4e0ee6c1854adcce37bb1eba6d2d12120a1dcb8e36858e323fed5e15cb94244cf9703a680789bdc890ed14762a9abebeb595d90aea7998597ee085f7b78ccb8d346fcde43787bc832f70f2cee7acce82f4ad153dd831167c0b5dc99e0e4ec008", 0xa1}, {&(0x7f0000002140)="606607aef5d06c90936a6f639b87d87ed9131b03de09747c4c8945c7ffa8707aaf110c096f785a603353977900fbb760235517e0f0df453be99c13a8103759f91d695e5eece6934280dd61eedb85f8bcc54c587b44b099509ce336e3668ac9a626260a3f84c12e6f51425cb2c1b82192be44c399edc12239eed72ab84aca5717b1c36151c62e478f2866017894558b3a372678fe7f30d47e7ec90c99310296f26b50889b387eec2872495d728deafa4dd460cb6ed80e577168cbd43c", 0xbc}], 0x2, &(0x7f0000002240)=[@hopopts_2292={{0x60, 0x29, 0x36, {0x3c, 0x8, '\x00', [@enc_lim={0x4, 0x1, 0x7f}, @calipso={0x7, 0x30, {0x2, 0xa, 0x3, 0x81, [0xfff, 0x9, 0x5, 0xffffffff, 0x30e6]}}, @jumbo={0xc2, 0x4, 0x200}, @jumbo={0xc2, 0x4, 0x4}, @ra={0x5, 0x2, 0x2}]}}}, @rthdrdstopts={{0x130, 0x29, 0x37, {0x3b, 0x22, '\x00', [@pad1, @padn={0x1, 0x1, [0x0]}, @generic={0x5, 0x2f, "91564a91fc617a6a231c0ff9c35de7b4d5c9e14f848498c1c2129dccce259a9e19ac83340e807c074ccfe100096bd0"}, @generic={0xfc, 0xbb, "994e4ec52f6993a5ccdd018973456a8ecd03f1ea9ef8440e2a281b6d57fba5ff4416845f15b9c05750e246ca764bd7ac46da17855753be2de3a418b29b8e909fa64e3509c81bde054b3677610ca7b44c98d6e320a8e709aaca02b9feb9b718b8454bb78f476feb68f43f842c3ea7f5a4a932519112743c9bb27dbf3611b6ee33b15374496047891801d165d9c1d96a46daf1ea36b52c0cc5b56c901e6997dac7c457acc52136e527f90b609a5a4a042517714f153eb1cbdade0ee9"}, @pad1, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}], 0x190}}, {{&(0x7f0000002400)={0xa, 0x4e22, 0x3, @empty, 0x9}, 0x1c, &(0x7f0000002500)=[{&(0x7f0000002440)="8eeb1b23a2ad19d74007c832b4e084789da88f4c2fe95c6524fd8764156ef04fc973d91cd622016c28318c06dee22f9ecd2e2da45cdb9c8e49499842803d73e3c043b69ba2cb7e640414779e77b8b2ad33c15307426a208d2bc88b8b1601216afbce643d9d361cfaec7d853990b6e62909ba8a44f33cad6522f8fd31268004dfca703493a9df", 0x86}], 0x1, &(0x7f0000002540)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x0, 0x6, 0x0, 0x3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @mcast2]}}}], 0x48}}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f00000025c0)="b561f9e39db062", 0x7}, {&(0x7f0000002600)="8c0b9dff39d7e977af706800c1c63ec74c5ffb6ff1331345b1801e0f7fa87311f45835fa26b8dc346ee3b8e112eeb7671681b22a4b0983301e0edbf191a4a544b5d2082d496e7aed1dc39ef70888b2f07eac8bf99ec67b25706e594f61318b65f4f8a2d570b6f638230239994c", 0x6d}, {&(0x7f0000002680)="ca1f26aa88a54bd89a4032b842c5d908132ab804453d6a085599b50c080ffdc083efedd8fe09b36cb5527a00d1ca7418807df25002fdc6d7893b4487d847d1dbff8b7678a00933145a6d160a8c3a93e826d703b057b586ccd4fec01f79cfd5988ccd668117f4f0fcee1cc47948edf598500000dac9c33bb3fed2d0c292fb738e67df478d48ae87be7e51c3932869102b7ebd31ff8a11ae039703abb88e670c53e5ed1744b4866fc05acf194f0a6c9041804a18b387aa785ffc40c78efae89cb2962197ddf0", 0xc5}, {&(0x7f0000002780)="8600f52c1daea134274c9269197f", 0xe}, {&(0x7f00000027c0)="686f237ba9a576aa8f94e1978f496bd85479cb04cd3d1f819d1522d4668bd3d2368f8f35892b96c68e52ecd996cd68883840eb64262b9caf942aa4f9e8246011c2e7e326e1345ad8b53f23a3529f9af2945726f59f35c22be324f86db801fe15c919008fbde697bb2e96c9900ac6f88c6ac0bc2480d61d0ae9e8dc9d9e91982ac95d66d30014b0bf48d970d989418cabb62e5feda8fc7af4676af5cb608c327c2b8fa839", 0xa4}, {&(0x7f0000002880)="3b1c7e65dfde3ad92ab7857ef5534e7ad1d2ffd5b9103912d47f732e8ff7ce4dc9b5d92bec0797e7944de9d5c249f25046219b7d66ac83a1e7dbd4f81a7ba123ea606fdcaa2324ec1a05126bb1a709b183d891991dd3312e7ac7693259a414abca98460470cee1b4ba4218d1e498173281478fceb88007f8db41543b914394897f7c0c0755e7ab3c54f1460f38a89a20", 0x90}, {&(0x7f0000002940)="79a5b6ca3c4b401a52da1b8e421d62bf76ad7d18426fedb47887cc25ea2de0e388911e40bc5e918b5faea890b46eb6ddc3bfe9de726c6f197a321a22da905e0406808642e9fbc6030c09b246a13d30937081e9772cd85c819f2bad0928db774c1fae4391962560c3376fea688069e24068fe7ecd4184f62b6173ada4250d2e6c8162a6b6c4146e3e", 0x88}], 0x7, &(0x7f0000002a80)=[@hopopts={{0x28, 0x29, 0x36, {0x67, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x400}, @pad1, @ra={0x5, 0x2, 0x6}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x3ff}}, @hopopts_2292={{0x30, 0x29, 0x36, {0x8, 0x2, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private2}}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x88}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7}}], 0xc8}}, {{&(0x7f0000002b80)={0xa, 0x4e21, 0x54e, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, 0x1c, &(0x7f0000002e40)=[{&(0x7f0000002bc0)="915fa7218415d3983093b1ce46a87d1b7f40f7d55b304187d8784407c5503c416d37007b50b58fb0cbd8f56854bdaade112f222d42cf79c1c17a18db8a1810d75d902cecc8115284d9b1294bbcb0a9fcfe4e035eb1e869e24bdd9c4eeecb223bb16733354ef63668d58c59a64989eec040a8806008e1de1a9af0714ddd842b7d87b9d7a5ad93648ddaad21007de20b9df7bb1e5a456053a3f8fd8b289f422ed52b62de9ce53936ee24e73f70854f5ddd525e007dd49f3cfe3d3eba22fe7f2215b45a0ba212d5e689a26e13fd88259c4d548da78a9f4f0ea3501a17d9bf01da4469bdf8b59f074390a01fea81b76630f36cea886a", 0xf4}, {&(0x7f0000002cc0)="422685d8ad0667c5a13bbdf02a42331ebb16f2f0d7ca283d9cedabda48456f764374dbb7d6ba61ad8f8730e80187df09d320f64c76363f18a674c7dc15271a4ed5b43ca6d61d0fff", 0x48}, {&(0x7f0000002d40)="c83a5fc417088f7afb1fd366596512eed3c175478e5e8b2f98d48710a1ef0c37f69e7ea1e4f25bf094678a3a0b3c8e8c83c1786c58f5df820a71e8b876a239c874a64a35c2c1a22c0eb1093c16b7dc366168591b4a41509a960073ea52241829d54134d5be57aa7883ce129a0832e23515253e236aca5fa6d1b69c5eabdf7d7d0b0aa6af17891deb824cb924dfe64d244573227bb726f2a0ece03f0d1cc8aec83b4cafad7e7b24b3c1cd9ed47019a32f852702a5508e307f0c0f163752baf3d50d685ede67ae7307f7ac18edbc3204e155d1a960e1c16e8848994887d491b8d2bbee3a6a5ab17c13c08ef9794c7534ee551e7318aa", 0xf5}], 0x3}}, {{&(0x7f0000002e80)={0xa, 0x4e23, 0x9e, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40}, 0x1c, &(0x7f0000003180)=[{&(0x7f0000002ec0)="e4a33c829c5bebc4ba1058d749dfbff23dfddf7d052c2130030c52cfc028bc6aa0f859b8c77c79748f07d377071c24cdd4eb5e2e939787d25bf5b776c4f7843bba0898ca191373470922297a", 0x4c}, {&(0x7f0000002f40)="f279e553b01ce650731c87872a9eb8093547c7729934d6ba99156a641b748b3f57b84c1a", 0x24}, {&(0x7f0000002f80)="ec87fddd14ec84c9b2798f3960d0e4a1679f24c9f207860992d414a16ac3", 0x1e}, {&(0x7f0000002fc0)="83cd2280ac02507678b0dc6010cda99b7b81cb", 0x13}, {&(0x7f0000003000)="9475766fef915e7315a418f453e2089bdca5ed2e2af62b3b03718d108368a78fea83308286d1bfe5d5291f605c5a3e480dabcc93ed8090d4be", 0x39}, {&(0x7f0000003040)="a3f426b7a94b8f97ea534556a9e95dc17ae947f1d23d6c7e7862e01476b1b85b1428e8553c75943cbb6d64bf38", 0x2d}, {&(0x7f0000003080)="0255c74d8c549aaa13b8402a95b45218059331d99349b3b7162e98d06ef04050a42feec6ddd16174ab096d2d57487d9a96557c8dcd87ff36dadcfe247e26611acb9871090a2b538b4e6d64520cf28769bb06280f9014fac9ae52aca47064461dd7e2d1736a6ac2612935d3b62d57b4fba4284aae466bdf8741429ce79b7e9d008d230e51c85a2c6b1414541570c43d590f57566b5afbeffb7eeffb19ff8bd1", 0x9f}, {&(0x7f0000003140)="8dca03f41b47268cef0a", 0xa}], 0x8, &(0x7f0000003280)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x31}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @hoplimit={{0x14, 0x29, 0x34, 0xb00e}}, @dstopts_2292={{0x70, 0x29, 0x4, {0x11, 0xb, '\x00', [@calipso={0x7, 0x48, {0x1, 0x10, 0x1, 0x7, [0x5, 0x4, 0x5, 0x1, 0x8, 0xfffffffffffffff9, 0x3, 0x3]}}, @pad1, @pad1, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}], 0xc8}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f00000033c0)="0171fd4dc004ad839cbceefadee328c131644fcdd5da30196ba2735c78590f43e07173a2e251c8fc69516acb7290733cf694bb8ac650ccfbb4f3236719291de4f34ef04feaed98383faec058c96b3dffb3a9b31aec42328226e71f0c5cb05ae388bf2a07cfad75bad412bec4303b66e3e0c4e03af50e749042b66e1723", 0x7d}, {&(0x7f0000003480)}, {&(0x7f0000003580)="1b4465abd634298299c5c7b224cb0d6c32643b0fc10282d3ddf5481ff504dadb3b814e2b8c616b32c469542337602be88b58886dfa8a", 0x36}], 0x3}}], 0x9, 0x40400c0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x10001, 0x72100f4f, 0x6, 0xffff, 0x7, 0xfffffffa, 0x0, 0x0, 0x2, 0x7}}, 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x70, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x44, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}, {0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x28, r7, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x4004814) sendmsg$NL80211_CMD_DEL_PMK(r5, &(0x7f00000038c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003880)={&(0x7f0000003840)={0x2c, r7, 0x20, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4800}, 0x20004000) 814.473782ms ago: executing program 0 (id=7750): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002280)=ANY=[@ANYBLOB="400000001200050100000000fedbdf2505001900ff00000028001a"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x20040810) ioctl$SNDCTL_TMR_STOP(0xffffffffffffffff, 0x5403) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0xff, 0x3}, {}, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@remote, 0x0, 0x1, 0x0, 0xb7, 0xffffffff}}, 0xe8) socket$igmp(0x2, 0x3, 0x2) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000000, 0x10012, r5, 0x0) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000000c0)={0x1, 0x4, 0xa, 0x7, @vifc_lcl_addr=@loopback, @empty}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 400.541483ms ago: executing program 1 (id=7751): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xff, 0x0, 0x0, 0x20, 0x572, 0xcb01, 0x1bc4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x24, 0x0, 0x2, 0x60, 0x78, 0x55, 0x0, [], [{{0x9, 0x5, 0x7, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x84, 0x2, 0x200}}]}}]}}]}}, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) syz_io_uring_setup(0x3b9e, &(0x7f0000000500)={0x0, 0xe8fa, 0x0, 0x2, 0x29, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0)) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)=0x9) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) writev(r1, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='0', 0x1}, {0x0, 0x2}], 0x2) ptrace(0x10, r0) syz_open_procfs(r0, &(0x7f0000000140)='net/ip6_tables_targets\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000000000040027bdfca24f97df810000007f0697c275191564ed27bd623173b717f92dd2000100000043310bacbd6a1c054d866673fef684c99f794cf8bc66d1f6528bc81c5485778b41f780f617628cf26de562c128a8fafb6958f2b04abfd242e7d6e74eb613768340931b611aa8afcb14400c35d95f8debd9d87cf9d43c7e479302044cc6"], 0x24}}, 0x24000840) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) timer_create(0x3, &(0x7f0000000480)={0x0, 0x12, 0x4, @thr={&(0x7f00000003c0)="398fb63d217412e160e78f56efa884672a01d1e65d547392f331807d0dfcf3f3d1ba3656965cad174ae7d5b76e102df9da47cfb1d6cd26d11ad5d94e6cd4a1ebb538a2cbbb9b782c1b8239990945f5a1948a422f85cc1f58f57066acaec68ef834190daae92b6b5c7379535890a2032afe448d0d5dcdf2134c3f25787cf7565c4eba05385a2cf0e62ed5c4eb3e8a4914c01f0a6f1d815d", &(0x7f0000000280)="7d62fee6908222ba991c"}}, &(0x7f00000004c0)) r9 = syz_open_dev$video(&(0x7f0000000040), 0x6, 0x400) ioctl$VIDIOC_CREATE_BUFS(r9, 0xc100565c, &(0x7f0000000180)={0x3, 0x6, 0x0, {0x6, @pix={0xc, 0x0, 0x4c314356, 0x5, 0x1, 0xe, 0x1, 0x10001, 0x0, 0x6, 0x0, 0x3}}}) 74.383255ms ago: executing program 3 (id=7752): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/handlers\x00', 0x0, 0x0) close(r0) syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) statx(r0, 0x0, 0x1000, 0xcf3433d97aab2983, 0x0) modify_ldt$write(0x1, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) 72.853574ms ago: executing program 2 (id=7753): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x3}}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_pts(0xffffffffffffffff, 0x80) ioctl$TIOCL_SETVESABLANK(r4, 0x541c, &(0x7f00000000c0)) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x40, 0xfe}, {0x20, 0xf2, 0x0, 0xffff7010}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) writev(r2, &(0x7f0000000500)=[{&(0x7f0000000080)="0ccc3611", 0x4}], 0x1) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000100)={0x3, 0x6}) 0s ago: executing program 4 (id=7754): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x4}]}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x3c91, &(0x7f0000000900)={0x0, 0x1246, 0x0, 0x1, 0x60}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000540)='0', 0x1}], 0x1) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'lo\x00'}) socket$packet(0x11, 0x3, 0x300) write$tcp_mem(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x20, 0x7418, 0x20, 0x6e}, 0x48) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x3ec0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) fchdir(0xffffffffffffffff) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(0xffffffffffffffff, 0x4010ae74, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.437734][T10985] usb 5-1: Product: syz [ 1198.446192][T10985] usb 5-1: Manufacturer: syz [ 1198.459917][T10985] usb 5-1: SerialNumber: syz [ 1198.478407][T10985] usb 5-1: config 0 descriptor?? [ 1198.705473][T10985] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1199.042121][T26975] netlink: 'syz.0.7268': attribute type 3 has an invalid length. [ 1199.051338][T26975] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7268'. [ 1199.110950][T10985] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1199.188821][T26979] netlink: 19 bytes leftover after parsing attributes in process `syz.0.7270'. [ 1199.394125][T26986] fuse: Bad value for 'fd' [ 1199.497966][T10985] usb 5-1: USB disconnect, device number 124 [ 1199.663212][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1199.679657][ T5205] Dev loop4: unable to read RDB block 0 [ 1199.698206][ T5205] loop4: unable to read partition table [ 1199.711609][ T5205] loop4: partition table beyond EOD, truncated [ 1199.839471][T26994] FAULT_INJECTION: forcing a failure. [ 1199.839471][T26994] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.878725][T26994] CPU: 0 UID: 0 PID: 26994 Comm: syz.4.7275 Tainted: G L syzkaller #0 PREEMPT(full) [ 1199.878755][T26994] Tainted: [L]=SOFTLOCKUP [ 1199.878762][T26994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1199.878774][T26994] Call Trace: [ 1199.878781][T26994] [ 1199.878789][T26994] dump_stack_lvl+0x189/0x250 [ 1199.878813][T26994] ? __pfx____ratelimit+0x10/0x10 [ 1199.878833][T26994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1199.878851][T26994] ? __pfx__printk+0x10/0x10 [ 1199.878877][T26994] ? __pfx___might_resched+0x10/0x10 [ 1199.878894][T26994] ? fs_reclaim_acquire+0x7d/0x100 [ 1199.878915][T26994] should_fail_ex+0x414/0x560 [ 1199.878937][T26994] should_failslab+0xa8/0x100 [ 1199.878958][T26994] __kvmalloc_node_noprof+0x175/0x920 [ 1199.878976][T26994] ? do_ip6t_set_ctl+0x88a/0xce0 [ 1199.878993][T26994] ? __x64_sys_setsockopt+0x13f/0x1b0 [ 1199.879014][T26994] ? translate_table+0x19b/0x2040 [ 1199.879036][T26994] translate_table+0x19b/0x2040 [ 1199.879073][T26994] ? __pfx_translate_table+0x10/0x10 [ 1199.879092][T26994] ? __might_fault+0xb0/0x130 [ 1199.879142][T26994] ? _copy_from_user+0x94/0xb0 [ 1199.879169][T26994] do_ip6t_set_ctl+0x970/0xce0 [ 1199.879190][T26994] ? rcu_is_watching+0x15/0xb0 [ 1199.879211][T26994] ? trace_contention_end+0x39/0x100 [ 1199.879232][T26994] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1199.879270][T26994] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1199.879301][T26994] ? __pfx_aa_sk_perm+0x10/0x10 [ 1199.879329][T26994] nf_setsockopt+0x26f/0x290 [ 1199.879352][T26994] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1199.879374][T26994] do_sock_setsockopt+0x17c/0x1b0 [ 1199.879400][T26994] __x64_sys_setsockopt+0x13f/0x1b0 [ 1199.879429][T26994] do_syscall_64+0xfa/0xf80 [ 1199.879451][T26994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.879468][T26994] ? clear_bhb_loop+0x60/0xb0 [ 1199.879489][T26994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.879506][T26994] RIP: 0033:0x7f833a78f749 [ 1199.879522][T26994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1199.879538][T26994] RSP: 002b:00007f833b604038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1199.879559][T26994] RAX: ffffffffffffffda RBX: 00007f833a9e5fa0 RCX: 00007f833a78f749 [ 1199.879573][T26994] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 1199.879583][T26994] RBP: 00007f833b604090 R08: 00000000000007c8 R09: 0000000000000000 [ 1199.879595][T26994] R10: 0000200000000d00 R11: 0000000000000246 R12: 0000000000000001 [ 1199.879606][T26994] R13: 00007f833a9e6038 R14: 00007f833a9e5fa0 R15: 00007f833ab0fa28 [ 1199.879637][T26994] [ 1200.265709][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1200.318058][T27000] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7276'. [ 1200.330005][ T5205] Dev loop4: unable to read RDB block 0 [ 1200.336430][ T5205] loop4: unable to read partition table [ 1200.390149][ T5205] loop4: partition table beyond EOD, truncated [ 1200.749812][T27006] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7279'. [ 1200.915910][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1200.939902][ T5205] Dev loop4: unable to read RDB block 0 [ 1200.977660][ T5205] loop4: unable to read partition table [ 1200.996973][ T5205] loop4: partition table beyond EOD, truncated [ 1201.124549][T27016] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7282'. [ 1201.487974][T10985] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 1201.657628][T10985] usb 2-1: Using ep0 maxpacket: 16 [ 1201.665196][T10985] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 1201.689823][T10985] usb 2-1: config 0 has no interface number 0 [ 1201.696378][T10985] usb 2-1: config 0 interface 48 has no altsetting 0 [ 1201.747185][T10985] usb 2-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 1201.778100][ T5927] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1201.796073][T10985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.834175][T10985] usb 2-1: Product: syz [ 1201.844346][T10985] usb 2-1: Manufacturer: syz [ 1201.857962][T10985] usb 2-1: SerialNumber: syz [ 1201.878765][T10985] usb 2-1: config 0 descriptor?? [ 1201.947818][ T5927] usb 4-1: Using ep0 maxpacket: 16 [ 1201.958780][ T5927] usb 4-1: config index 0 descriptor too short (expected 31380, got 124) [ 1201.992965][ T5927] usb 4-1: config 154 has too many interfaces: 77, using maximum allowed: 32 [ 1202.015421][ T5927] usb 4-1: config 154 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.061032][ T5927] usb 4-1: config 154 has 1 interface, different from the descriptor's value: 77 [ 1202.086249][ T5927] usb 4-1: too many endpoints for config 154 interface 0 altsetting 0: 32, using maximum allowed: 30 [ 1202.092508][T27016] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.113802][ T5927] usb 4-1: config 154 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 1202.116987][T27016] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.164307][ T5927] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1202.227976][T27031] geneve2: entered promiscuous mode [ 1202.233312][T27031] geneve2: entered allmulticast mode [ 1202.269838][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.287353][ T5927] usb 4-1: Product: syz [ 1202.305849][ T5927] usb 4-1: Manufacturer: syz [ 1202.369183][ T5927] usb 4-1: SerialNumber: syz [ 1202.554897][ T5205] buffer_io_error: 96 callbacks suppressed [ 1202.554916][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1202.589634][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1202.615786][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1202.640222][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1202.659707][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1202.688655][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1202.713352][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1202.741516][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1202.761834][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1202.784109][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1202.799083][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1202.812671][ T5205] Dev loop4: unable to read RDB block 0 [ 1202.823071][ T5205] loop4: unable to read partition table [ 1202.919904][ T5205] loop4: partition table beyond EOD, truncated [ 1203.093982][T27035] netlink: 19 bytes leftover after parsing attributes in process `syz.4.7288'. [ 1204.044645][ T6212] usb 2-1: USB disconnect, device number 125 [ 1204.070763][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1204.099440][ T5205] Dev loop4: unable to read RDB block 0 [ 1204.123074][ T5205] loop4: unable to read partition table [ 1204.159617][ T5205] loop4: partition table beyond EOD, truncated [ 1204.388591][ T6207] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1204.413211][T27043] openvswitch: netlink: Flow actions attr not present in new flow. [ 1204.550172][ T5927] usb 4-1: USB disconnect, device number 7 [ 1204.627464][ T6207] usb 5-1: Using ep0 maxpacket: 16 [ 1204.638442][ T6207] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1204.652261][T27045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7291'. [ 1204.661471][ T6207] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.670475][T27045] netlink: zone id is out of range [ 1204.675829][ T6207] usb 5-1: Product: syz [ 1204.681545][T27045] netlink: zone id is out of range [ 1204.687025][ T6207] usb 5-1: Manufacturer: syz [ 1204.687806][ T6212] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 1204.692398][T27045] netlink: zone id is out of range [ 1204.706144][ T6207] usb 5-1: SerialNumber: syz [ 1204.713368][ T6207] usb 5-1: config 0 descriptor?? [ 1204.721920][T27045] netlink: zone id is out of range [ 1204.736361][T27045] netlink: zone id is out of range [ 1204.746894][T27045] netlink: zone id is out of range [ 1204.753479][T27045] netlink: zone id is out of range [ 1204.759362][T27045] netlink: zone id is out of range [ 1204.765394][T27045] netlink: zone id is out of range [ 1204.855043][ T6212] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1204.873805][ T6212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.925390][ T6212] usb 2-1: Product: syz [ 1204.945314][ T6212] usb 2-1: Manufacturer: syz [ 1204.970382][ T6212] usb 2-1: SerialNumber: syz [ 1205.200256][ T6207] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1205.214268][ T6207] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1205.228782][ T6207] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 1205.249457][ T6207] usb 5-1: media controller created [ 1205.352688][ T6207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1205.451903][ T6207] zl10353_read_register: readreg error (reg=127, ret==0) [ 1205.465560][ T6207] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 1205.493852][ T6207] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 1205.528283][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1205.532854][ T6207] usb 5-1: USB disconnect, device number 125 [ 1205.697915][ T6207] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 1206.054360][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1206.098674][ T5205] Dev loop4: unable to read RDB block 0 [ 1206.120836][ T5205] loop4: unable to read partition table [ 1206.142607][ T5205] loop4: partition table beyond EOD, truncated [ 1206.470105][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1206.498900][ T5205] Dev loop4: unable to read RDB block 0 [ 1206.505068][ T5205] loop4: unable to read partition table [ 1206.514123][ T5205] loop4: partition table beyond EOD, truncated [ 1207.058513][T27078] kvm: kvm [27077]: vcpu128, guest rIP: 0xfff0 Unhandled RDMSR(0x40000076) [ 1207.073476][T27078] netlink: 'syz.3.7301': attribute type 3 has an invalid length. [ 1207.082701][T27078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7301'. [ 1207.255295][ T6212] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 1207.290528][ T6212] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1207.314051][ T6212] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1207.356185][ T6212] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 1207.417535][ T6212] usb 2-1: USB disconnect, device number 126 [ 1207.727485][ T6207] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1207.891922][ T6212] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1207.919424][ T6207] usb 4-1: Using ep0 maxpacket: 16 [ 1207.935517][ T6207] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1207.965843][ T6207] usb 4-1: config 13 has an invalid interface number: 50 but max is 0 [ 1207.985573][ T6207] usb 4-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1208.017328][ T6207] usb 4-1: config 13 has no interface number 0 [ 1208.037388][ T6207] usb 4-1: config 13 interface 50 altsetting 167 bulk endpoint 0x88 has invalid maxpacket 16 [ 1208.048362][ T5205] buffer_io_error: 86 callbacks suppressed [ 1208.048381][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1208.073035][ T6212] usb 2-1: Using ep0 maxpacket: 8 [ 1208.080896][ T6207] usb 4-1: config 13 interface 50 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1208.102580][ T6212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.128893][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1208.146804][ T6207] usb 4-1: config 13 interface 50 has no altsetting 0 [ 1208.157231][ T6207] usb 4-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1208.168850][ T6207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.177081][ T6207] usb 4-1: Product: syz [ 1208.187296][ T6207] usb 4-1: Manufacturer: syz [ 1208.197622][ T6212] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 1208.211567][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1208.226375][ T6212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1208.238497][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1208.248421][ T6212] usb 2-1: config 0 descriptor?? [ 1208.299696][ T6207] usb 4-1: SerialNumber: syz [ 1208.306350][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1208.316673][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1208.326751][T27087] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1208.334369][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1208.343208][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1208.350838][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1208.360386][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1208.371120][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1208.380501][ T5205] Dev loop4: unable to read RDB block 0 [ 1208.386604][ T5205] loop4: unable to read partition table [ 1208.423534][ T5205] loop4: partition table beyond EOD, truncated [ 1208.435252][T27097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7308'. [ 1208.801659][ T6212] wacom 0003:056A:0084.003F: unknown main item tag 0x0 [ 1208.811968][ T6212] wacom 0003:056A:0084.003F: unknown main item tag 0x0 [ 1208.841867][ T6212] wacom 0003:056A:0084.003F: hidraw0: USB HID v0.00 Device [HID 056a:0084] on usb-dummy_hcd.1-1/input0 [ 1208.882475][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1208.911831][ T5205] Dev loop4: unable to read RDB block 0 [ 1208.928994][ T5205] loop4: unable to read partition table [ 1208.945652][ T5205] loop4: partition table beyond EOD, truncated [ 1208.992313][T27081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1209.031755][T27081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.036578][T27102] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7309'. [ 1209.140615][T27102] nvme_fabrics: unknown parameter or missing value '6' in ctrl creation request [ 1209.523536][ T6212] usb 2-1: USB disconnect, device number 127 [ 1210.234132][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1210.242677][ T5205] Dev loop4: unable to read RDB block 0 [ 1210.289067][ T5205] loop4: unable to read partition table [ 1210.312143][ T5205] loop4: partition table beyond EOD, truncated [ 1210.455764][ T6207] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1210.495246][ T6207] usb 4-1: MIDIStreaming interface descriptor not found [ 1210.498624][T27117] net_ratelimit: 4 callbacks suppressed [ 1210.498643][T27117] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 1210.653489][ T6207] usb 4-1: USB disconnect, device number 8 [ 1210.749452][T19977] udevd[19977]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1210.960966][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1210.999794][T27132] FAULT_INJECTION: forcing a failure. [ 1210.999794][T27132] name failslab, interval 1, probability 0, space 0, times 0 [ 1211.018178][ T5205] Dev loop4: unable to read RDB block 0 [ 1211.024137][ T5205] loop4: unable to read partition table [ 1211.030897][ T6212] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1211.047923][T27132] CPU: 0 UID: 0 PID: 27132 Comm: syz.4.7320 Tainted: G L syzkaller #0 PREEMPT(full) [ 1211.047952][T27132] Tainted: [L]=SOFTLOCKUP [ 1211.047958][T27132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1211.047985][T27132] Call Trace: [ 1211.048002][T27132] [ 1211.048010][T27132] dump_stack_lvl+0x189/0x250 [ 1211.048035][T27132] ? __pfx____ratelimit+0x10/0x10 [ 1211.048054][T27132] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1211.048071][T27132] ? __pfx__printk+0x10/0x10 [ 1211.048094][T27132] ? __pfx___might_resched+0x10/0x10 [ 1211.048113][T27132] ? fs_reclaim_acquire+0x7d/0x100 [ 1211.048133][T27132] should_fail_ex+0x414/0x560 [ 1211.048157][T27132] should_failslab+0xa8/0x100 [ 1211.048178][T27132] __kvmalloc_node_noprof+0x175/0x920 [ 1211.048199][T27132] ? __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 1211.048224][T27132] __nf_hook_entries_try_shrink+0x31b/0x6f0 [ 1211.048255][T27132] __nf_unregister_net_hook+0x4cc/0x6f0 [ 1211.048284][T27132] nf_unregister_net_hooks+0xcb/0x140 [ 1211.048302][T27132] ? __pfx_nft_flow_offload_destroy+0x10/0x10 [ 1211.048325][T27132] nf_ct_netns_put+0x3b9/0x520 [ 1211.048345][T27132] ? __pfx_nft_flow_offload_destroy+0x10/0x10 [ 1211.048366][T27132] nf_tables_rule_destroy+0x11c/0x1c0 [ 1211.048395][T27132] nf_tables_newrule+0x24b3/0x28a0 [ 1211.048433][T27132] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1211.048455][T27132] ? nfnl_pernet+0x23/0x240 [ 1211.048495][T27132] ? __nla_parse+0x40/0x60 [ 1211.048520][T27132] nfnetlink_rcv+0x11d9/0x2590 [ 1211.048579][T27132] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1211.048619][T27132] ? ref_tracker_free+0x63a/0x7d0 [ 1211.048666][T27132] ? __netlink_deliver_tap+0x807/0x850 [ 1211.048690][T27132] ? netlink_deliver_tap+0x2e/0x1b0 [ 1211.048732][T27132] netlink_unicast+0x82f/0x9e0 [ 1211.048764][T27132] ? __pfx_netlink_unicast+0x10/0x10 [ 1211.048788][T27132] ? netlink_sendmsg+0x642/0xb30 [ 1211.048802][T27132] ? skb_put+0x11b/0x210 [ 1211.048828][T27132] netlink_sendmsg+0x805/0xb30 [ 1211.048855][T27132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1211.048875][T27132] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1211.048901][T27132] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1211.048925][T27132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1211.048943][T27132] __sock_sendmsg+0x21c/0x270 [ 1211.048966][T27132] ____sys_sendmsg+0x505/0x820 [ 1211.049000][T27132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1211.049027][T27132] ? import_iovec+0x74/0xa0 [ 1211.049052][T27132] ___sys_sendmsg+0x21f/0x2a0 [ 1211.049075][T27132] ? __pfx____sys_sendmsg+0x10/0x10 [ 1211.049103][T27132] ? rcu_read_lock_any_held+0xb3/0x120 [ 1211.049148][T27132] ? __fget_files+0x2a/0x420 [ 1211.049166][T27132] ? __fget_files+0x3a0/0x420 [ 1211.049194][T27132] __x64_sys_sendmsg+0x19b/0x260 [ 1211.049220][T27132] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1211.049249][T27132] ? __pfx_ksys_write+0x10/0x10 [ 1211.049266][T27132] ? do_syscall_64+0xbe/0xf80 [ 1211.049287][T27132] do_syscall_64+0xfa/0xf80 [ 1211.049306][T27132] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.049322][T27132] ? clear_bhb_loop+0x60/0xb0 [ 1211.049342][T27132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1211.049357][T27132] RIP: 0033:0x7f833a78f749 [ 1211.049373][T27132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1211.049386][T27132] RSP: 002b:00007f833b604038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1211.049404][T27132] RAX: ffffffffffffffda RBX: 00007f833a9e5fa0 RCX: 00007f833a78f749 [ 1211.049416][T27132] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 1211.049427][T27132] RBP: 00007f833b604090 R08: 0000000000000000 R09: 0000000000000000 [ 1211.049438][T27132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1211.049449][T27132] R13: 00007f833a9e6038 R14: 00007f833a9e5fa0 R15: 00007f833ab0fa28 [ 1211.049479][T27132] [ 1211.082568][ T5205] loop4: partition table beyond EOD, [ 1211.157377][ T6207] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1211.249810][ T6212] usb 2-1: Using ep0 maxpacket: 8 [ 1211.325873][ T5205] truncated [ 1211.350303][T27136] vlan0: entered promiscuous mode [ 1211.417529][ T6207] usb 4-1: device descriptor read/64, error -71 [ 1211.433827][ T6212] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1211.433875][ T6212] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1211.550871][ T6212] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1211.560210][ T6212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1211.568507][ T6212] usb 2-1: Product: syz [ 1211.572786][ T6212] usb 2-1: Manufacturer: syz [ 1211.577923][ T6212] usb 2-1: SerialNumber: syz [ 1211.585366][ T6212] usb 2-1: config 0 descriptor?? [ 1211.594344][ T6212] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 1211.605636][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1211.617811][ T6212] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5 [ 1211.626901][ T6212] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1211.635703][ T5205] Dev loop4: unable to read RDB block 0 [ 1211.643032][ T5205] loop4: unable to read partition table [ 1211.656809][ T5205] loop4: partition table beyond EOD, truncated [ 1211.766646][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1211.776070][ T5205] Dev loop4: unable to read RDB block 0 [ 1211.782659][ T5205] loop4: unable to read partition table [ 1211.787535][ T6207] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1211.789569][ T5205] loop4: partition table beyond EOD, truncated [ 1211.913608][T27127] netlink: 'syz.1.7317': attribute type 3 has an invalid length. [ 1211.922725][T27127] netlink: 666 bytes leftover after parsing attributes in process `syz.1.7317'. [ 1211.937945][ T6207] usb 4-1: device descriptor read/64, error -71 [ 1212.040890][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1212.057796][ T6207] usb usb4-port1: attempt power cycle [ 1212.077772][ T5205] Dev loop4: unable to read RDB block 0 [ 1212.084223][ T5205] loop4: unable to read partition table [ 1212.092883][ T5205] loop4: partition table beyond EOD, truncated [ 1212.165570][T27135] vlan0: left promiscuous mode [ 1212.216581][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1212.253615][ T5205] Dev loop4: unable to read RDB block 0 [ 1212.272397][ T5205] loop4: unable to read partition table [ 1212.284989][T27143] netlink: 'syz.2.7319': attribute type 1 has an invalid length. [ 1212.289755][ T5205] loop4: partition table beyond EOD, truncated [ 1212.417520][ T6207] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1212.450129][ T6207] usb 4-1: device descriptor read/8, error -71 [ 1212.697569][ T6207] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1212.799843][ T6207] usb 4-1: device descriptor read/8, error -71 [ 1212.918319][ T6207] usb usb4-port1: unable to enumerate USB device [ 1213.165458][T27158] netlink: 104 bytes leftover after parsing attributes in process `syz.2.7327'. [ 1213.610106][ T5205] buffer_io_error: 182 callbacks suppressed [ 1213.610122][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1213.660577][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1213.691139][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1213.716977][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1213.738441][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1213.871857][ T6212] usb 2-1: USB disconnect, device number 2 [ 1213.886350][T27160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7328'. [ 1213.921309][T27162] netlink: 108 bytes leftover after parsing attributes in process `syz.3.7329'. [ 1213.959836][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1214.017827][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1214.034454][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1214.058327][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1214.074030][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1214.094315][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1214.127534][ T5205] Dev loop4: unable to read RDB block 0 [ 1214.146226][ T5205] loop4: unable to read partition table [ 1214.161547][ T5205] loop4: partition table beyond EOD, truncated [ 1214.240815][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1214.248823][ T5205] Dev loop4: unable to read RDB block 0 [ 1214.254837][ T5205] loop4: unable to read partition table [ 1214.261236][ T5205] loop4: partition table beyond EOD, truncated [ 1214.409676][T27176] FAULT_INJECTION: forcing a failure. [ 1214.409676][T27176] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.460104][T27176] CPU: 0 UID: 0 PID: 27176 Comm: syz.3.7335 Tainted: G L syzkaller #0 PREEMPT(full) [ 1214.460135][T27176] Tainted: [L]=SOFTLOCKUP [ 1214.460143][T27176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1214.460153][T27176] Call Trace: [ 1214.460161][T27176] [ 1214.460169][T27176] dump_stack_lvl+0x189/0x250 [ 1214.460195][T27176] ? __pfx____ratelimit+0x10/0x10 [ 1214.460218][T27176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1214.460238][T27176] ? __pfx__printk+0x10/0x10 [ 1214.460269][T27176] ? __pfx___might_resched+0x10/0x10 [ 1214.460294][T27176] should_fail_ex+0x414/0x560 [ 1214.460320][T27176] should_failslab+0xa8/0x100 [ 1214.460343][T27176] __kmalloc_cache_noprof+0x84/0x700 [ 1214.460368][T27176] ? __asan_memset+0x22/0x50 [ 1214.460391][T27176] ? alloc_netdev_mqs+0xb97/0x11b0 [ 1214.460409][T27176] ? __xdp_rxq_info_reg+0x171/0x280 [ 1214.460437][T27176] alloc_netdev_mqs+0xb97/0x11b0 [ 1214.460464][T27176] rtnl_create_link+0x31f/0xcf0 [ 1214.460491][T27176] rtnl_newlink_create+0x25c/0xb00 [ 1214.460536][T27176] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1214.460565][T27176] ? __pfx___mutex_lock+0x10/0x10 [ 1214.460598][T27176] ? ns_capable+0x8a/0xf0 [ 1214.460620][T27176] rtnl_newlink+0x16e7/0x1c90 [ 1214.460661][T27176] ? __pfx_rtnl_newlink+0x10/0x10 [ 1214.460681][T27176] ? do_syscall_64+0xfa/0xf80 [ 1214.460699][T27176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.460752][T27176] ? kasan_quarantine_put+0xdd/0x220 [ 1214.460778][T27176] ? lockdep_hardirqs_on+0x98/0x140 [ 1214.460806][T27176] ? kmem_cache_free+0x197/0x620 [ 1214.460822][T27176] ? nlmon_xmit+0xb0/0x100 [ 1214.460854][T27176] ? __lock_acquire+0x6b6/0x2cf0 [ 1214.460876][T27176] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1214.460900][T27176] ? __dev_queue_xmit+0x289/0x3140 [ 1214.460918][T27176] ? __dev_queue_xmit+0x289/0x3140 [ 1214.460934][T27176] ? __dev_queue_xmit+0x289/0x3140 [ 1214.460980][T27176] ? __pfx_rtnl_newlink+0x10/0x10 [ 1214.461002][T27176] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1214.461027][T27176] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1214.461052][T27176] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1214.461072][T27176] ? ref_tracker_free+0x63a/0x7d0 [ 1214.461093][T27176] ? __asan_memcpy+0x40/0x70 [ 1214.461113][T27176] ? __pfx_ref_tracker_free+0x10/0x10 [ 1214.461137][T27176] netlink_rcv_skb+0x208/0x470 [ 1214.461162][T27176] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1214.461203][T27176] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1214.461234][T27176] ? netlink_deliver_tap+0x2e/0x1b0 [ 1214.461253][T27176] netlink_unicast+0x82f/0x9e0 [ 1214.461272][T27176] ? __pfx_netlink_unicast+0x10/0x10 [ 1214.461286][T27176] ? netlink_sendmsg+0x642/0xb30 [ 1214.461294][T27176] ? skb_put+0x11b/0x210 [ 1214.461310][T27176] netlink_sendmsg+0x805/0xb30 [ 1214.461325][T27176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1214.461336][T27176] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1214.461352][T27176] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1214.461367][T27176] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1214.461376][T27176] __sock_sendmsg+0x21c/0x270 [ 1214.461389][T27176] ____sys_sendmsg+0x505/0x820 [ 1214.461407][T27176] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1214.461426][T27176] ? import_iovec+0x74/0xa0 [ 1214.461442][T27176] ___sys_sendmsg+0x21f/0x2a0 [ 1214.461457][T27176] ? __pfx____sys_sendmsg+0x10/0x10 [ 1214.461474][T27176] ? rcu_read_lock_any_held+0xb3/0x120 [ 1214.461509][T27176] ? __fget_files+0x2a/0x420 [ 1214.461521][T27176] ? __fget_files+0x3a0/0x420 [ 1214.461538][T27176] __x64_sys_sendmsg+0x19b/0x260 [ 1214.461553][T27176] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1214.461572][T27176] ? __pfx_ksys_write+0x10/0x10 [ 1214.461584][T27176] ? do_syscall_64+0xbe/0xf80 [ 1214.461598][T27176] do_syscall_64+0xfa/0xf80 [ 1214.461611][T27176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.461620][T27176] ? clear_bhb_loop+0x60/0xb0 [ 1214.461632][T27176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.461642][T27176] RIP: 0033:0x7f85d8f8f749 [ 1214.461653][T27176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1214.461661][T27176] RSP: 002b:00007f85d9dfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1214.461673][T27176] RAX: ffffffffffffffda RBX: 00007f85d91e5fa0 RCX: 00007f85d8f8f749 [ 1214.461680][T27176] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1214.461687][T27176] RBP: 00007f85d9dfc090 R08: 0000000000000000 R09: 0000000000000000 [ 1214.461693][T27176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1214.461699][T27176] R13: 00007f85d91e6038 R14: 00007f85d91e5fa0 R15: 00007f85d930fa28 [ 1214.461716][T27176] [ 1215.527147][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1215.535176][ T5205] Dev loop4: unable to read RDB block 0 [ 1215.547914][ T5205] loop4: unable to read partition table [ 1215.567764][ T5205] loop4: partition table beyond EOD, truncated [ 1215.646203][T27181] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7339'. [ 1216.328577][ T6207] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1216.375137][T27209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7346'. [ 1216.599212][ T6207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.646416][ T6207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.665163][ T6207] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1216.698727][ T6207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.710040][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1216.725579][ T5205] Dev loop4: unable to read RDB block 0 [ 1216.808694][ T5205] loop4: unable to read partition table [ 1216.862752][ T5205] loop4: partition table beyond EOD, truncated [ 1216.883956][ T6207] usb 4-1: config 0 descriptor?? [ 1216.889447][T27217] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1216.889800][T27217] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1217.126559][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1217.201782][ T5205] Dev loop4: unable to read RDB block 0 [ 1217.261487][ T5205] loop4: unable to read partition table [ 1217.270006][ T5205] loop4: partition table beyond EOD, truncated [ 1217.493679][ T6207] hid-steam 0003:28DE:1142.0040: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1217.567386][ T6207] hid-steam 0003:28DE:1142.0040: Steam wireless receiver connected [ 1217.598965][ T6207] hid-steam 0003:28DE:1142.0041: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 1217.774736][T27228] usb usb9: usbfs: process 27228 (syz.1.7351) did not claim interface 0 before use [ 1217.982982][T27230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7345'. [ 1218.017175][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1218.049808][ T5205] Dev loop4: unable to read RDB block 0 [ 1218.055715][ T5205] loop4: unable to read partition table [ 1218.104298][ T5205] loop4: partition table beyond EOD, truncated [ 1218.593341][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1218.600412][ T5205] Dev loop4: unable to read RDB block 0 [ 1218.606665][ T5205] loop4: unable to read partition table [ 1218.615926][ T5205] loop4: partition table beyond EOD, truncated [ 1218.762049][ T6207] usb 4-1: reset high-speed USB device number 13 using dummy_hcd [ 1218.776128][T27130] buffer_io_error: 148 callbacks suppressed [ 1218.776147][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1218.834692][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1218.850303][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1219.670235][T27255] FAULT_INJECTION: forcing a failure. [ 1219.670235][T27255] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.683132][T27255] CPU: 0 UID: 0 PID: 27255 Comm: syz.4.7359 Tainted: G L syzkaller #0 PREEMPT(full) [ 1219.683151][T27255] Tainted: [L]=SOFTLOCKUP [ 1219.683155][T27255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1219.683162][T27255] Call Trace: [ 1219.683169][T27255] [ 1219.683175][T27255] dump_stack_lvl+0x189/0x250 [ 1219.683192][T27255] ? __pfx____ratelimit+0x10/0x10 [ 1219.683205][T27255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1219.683217][T27255] ? __pfx__printk+0x10/0x10 [ 1219.683233][T27255] ? __rt6_find_exception_rcu+0x127/0x4c0 [ 1219.683248][T27255] should_fail_ex+0x414/0x560 [ 1219.683262][T27255] should_failslab+0xa8/0x100 [ 1219.683275][T27255] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1219.683286][T27255] kmem_cache_alloc_noprof+0x88/0x710 [ 1219.683315][T27255] ? ip6_pol_route+0x162/0x1180 [ 1219.683328][T27255] ? dst_alloc+0x105/0x170 [ 1219.683339][T27255] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1219.683350][T27255] dst_alloc+0x105/0x170 [ 1219.683363][T27255] ip6_pol_route+0xa21/0x1180 [ 1219.683375][T27255] ? ip6_pol_route+0x162/0x1180 [ 1219.683389][T27255] ? __pfx_ip6_pol_route+0x10/0x10 [ 1219.683406][T27255] ? fib_rules_lookup+0x96/0xe90 [ 1219.683423][T27255] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1219.683435][T27255] fib6_rule_action+0x206/0x7d0 [ 1219.683450][T27255] ? __pfx_fib6_rule_action+0x10/0x10 [ 1219.683464][T27255] fib_rules_lookup+0x767/0xe90 [ 1219.683483][T27255] ? fib_rules_lookup+0x96/0xe90 [ 1219.683498][T27255] ? __pfx_fib_rules_lookup+0x10/0x10 [ 1219.683512][T27255] ? l3mdev_update_flow+0x29/0x640 [ 1219.683526][T27255] ? l3mdev_update_flow+0x4d1/0x640 [ 1219.683540][T27255] fib6_rule_lookup+0x18e/0x6f0 [ 1219.683554][T27255] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1219.683567][T27255] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1219.683583][T27255] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 1219.683603][T27255] ip6_route_output_flags+0x364/0x5d0 [ 1219.683616][T27255] ? ip6_route_output_flags+0x2e/0x5d0 [ 1219.683630][T27255] ip6_dst_lookup_tail+0x1ae/0x1510 [ 1219.683660][T27255] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 1219.683681][T27255] ? crng_fast_key_erasure+0x181/0x240 [ 1219.683718][T27255] ip6_dst_lookup_flow+0x47/0xe0 [ 1219.683741][T27255] ? sctp_v6_get_dst+0x57e/0x1bc0 [ 1219.683754][T27255] sctp_v6_get_dst+0x7cc/0x1bc0 [ 1219.683763][T27255] ? crng_make_state+0x13a/0x700 [ 1219.683776][T27255] ? __pfx_crng_make_state+0x10/0x10 [ 1219.683794][T27255] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 1219.683803][T27255] ? __asan_memset+0x22/0x50 [ 1219.683821][T27255] ? lockdep_hardirqs_on+0x98/0x140 [ 1219.683840][T27255] ? dst_release+0x72/0x1b0 [ 1219.683851][T27255] sctp_transport_route+0x118/0x2f0 [ 1219.683870][T27255] sctp_assoc_add_peer+0x657/0x1390 [ 1219.683888][T27255] sctp_connect_new_asoc+0x30a/0x690 [ 1219.683903][T27255] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1219.683914][T27255] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1219.683929][T27255] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1219.683939][T27255] ? security_sctp_bind_connect+0x7e/0x2e0 [ 1219.683952][T27255] sctp_sendmsg+0x155c/0x2810 [ 1219.683970][T27255] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1219.683981][T27255] ? aa_sk_perm+0x15f/0x920 [ 1219.683995][T27255] ? aa_sk_perm+0x7ee/0x920 [ 1219.684010][T27255] ? __pfx_aa_sk_perm+0x10/0x10 [ 1219.684025][T27255] ? sock_rps_record_flow+0x19/0x410 [ 1219.684036][T27255] ? inet_sendmsg+0x2f4/0x370 [ 1219.684049][T27255] __sock_sendmsg+0x19c/0x270 [ 1219.684070][T27255] ____sys_sendmsg+0x52d/0x820 [ 1219.684088][T27255] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1219.684106][T27255] ? import_iovec+0x74/0xa0 [ 1219.684122][T27255] ___sys_sendmsg+0x21f/0x2a0 [ 1219.684137][T27255] ? __pfx____sys_sendmsg+0x10/0x10 [ 1219.684171][T27255] ? __fget_files+0x2a/0x420 [ 1219.684182][T27255] ? __fget_files+0x3a0/0x420 [ 1219.684199][T27255] __sys_sendmmsg+0x227/0x430 [ 1219.684216][T27255] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1219.684235][T27255] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1219.684258][T27255] ? ksys_write+0x22a/0x250 [ 1219.684269][T27255] ? __pfx_ksys_write+0x10/0x10 [ 1219.684281][T27255] __x64_sys_sendmmsg+0xa0/0xc0 [ 1219.684300][T27255] do_syscall_64+0xfa/0xf80 [ 1219.684313][T27255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.684322][T27255] ? clear_bhb_loop+0x60/0xb0 [ 1219.684334][T27255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.684344][T27255] RIP: 0033:0x7f833a78f749 [ 1219.684355][T27255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1219.684363][T27255] RSP: 002b:00007f833b604038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1219.684375][T27255] RAX: ffffffffffffffda RBX: 00007f833a9e5fa0 RCX: 00007f833a78f749 [ 1219.684382][T27255] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 1219.684388][T27255] RBP: 00007f833b604090 R08: 0000000000000000 R09: 0000000000000000 [ 1219.684394][T27255] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000002 [ 1219.684400][T27255] R13: 00007f833a9e6038 R14: 00007f833a9e5fa0 R15: 00007f833ab0fa28 [ 1219.684417][T27255] [ 1220.208208][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1220.258170][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1220.464077][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1220.494477][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1220.537053][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1220.596892][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1220.677472][ T6212] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1220.699099][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1220.845486][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1220.858364][ T6212] usb 2-1: Using ep0 maxpacket: 8 [ 1220.875557][ T5205] Dev loop4: unable to read RDB block 0 [ 1220.883334][ T6212] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1220.901438][ T6212] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.910488][ T5205] loop4: unable to read partition table [ 1220.926049][ T5205] loop4: partition table beyond EOD, truncated [ 1220.932715][ T6212] usb 2-1: Product: syz [ 1220.942529][ T6212] usb 2-1: Manufacturer: syz [ 1220.967026][ T6212] usb 2-1: SerialNumber: syz [ 1220.992778][ T6212] usb 2-1: config 0 descriptor?? [ 1221.269835][ T6212] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1221.289339][T24345] usb 4-1: USB disconnect, device number 13 [ 1221.319509][T24345] hid-steam 0003:28DE:1142.0040: Steam wireless receiver disconnected [ 1221.516660][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1221.565227][ T5205] Dev loop4: unable to read RDB block 0 [ 1221.585118][ T5205] loop4: unable to read partition table [ 1221.618044][ T5205] loop4: partition table beyond EOD, truncated [ 1221.786733][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1221.838326][ T5205] Dev loop4: unable to read RDB block 0 [ 1221.844269][ T5205] loop4: unable to read partition table [ 1221.909334][ T5205] loop4: partition table beyond EOD, truncated [ 1222.152883][ T6212] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1222.170246][ T6212] usb 2-1: USB disconnect, device number 3 [ 1222.808430][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1222.850731][ T5205] Dev loop4: unable to read RDB block 0 [ 1222.862811][ T5205] loop4: unable to read partition table [ 1222.878011][ T5205] loop4: partition table beyond EOD, truncated [ 1223.069624][ T5927] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1223.321106][ T5927] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1223.347647][ T5927] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.361692][ T5927] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1223.368326][ T5923] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 1223.383149][ T5927] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.409187][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1223.460553][ T5205] Dev loop4: unable to read RDB block 0 [ 1223.488172][ T5205] loop4: unable to read partition table [ 1223.494385][ T5205] loop4: partition table beyond EOD, truncated [ 1223.517406][ T5927] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1223.548121][ T5923] usb 2-1: no configurations [ 1223.553077][ T5923] usb 2-1: can't read configurations, error -22 [ 1223.559362][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1223.559385][ T5927] usb 4-1: Product: syz [ 1223.559398][ T5927] usb 4-1: Manufacturer: syz [ 1223.709038][ T5927] cdc_wdm 4-1:1.0: skipping garbage [ 1223.716971][ T5927] cdc_wdm 4-1:1.0: skipping garbage [ 1223.717544][ T5923] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 1223.742283][ T5927] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1223.898943][ T5923] usb 2-1: no configurations [ 1223.903847][ T5923] usb 2-1: can't read configurations, error -22 [ 1223.911912][ T5923] usb usb2-port1: attempt power cycle [ 1223.963692][ T6212] usb 4-1: USB disconnect, device number 14 [ 1224.307677][ T5923] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 1224.330883][ T5923] usb 2-1: no configurations [ 1224.335570][ T5923] usb 2-1: can't read configurations, error -22 [ 1224.453459][ T5205] buffer_io_error: 120 callbacks suppressed [ 1224.453477][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1224.469505][ T5923] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 1224.804062][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1224.813171][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1224.822132][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1224.832032][ T5923] usb 2-1: no configurations [ 1224.836857][ T5923] usb 2-1: can't read configurations, error -22 [ 1224.844366][ T5923] usb usb2-port1: unable to enumerate USB device [ 1224.880861][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1224.897097][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1224.905549][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1224.923810][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1224.944145][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1224.953006][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1224.962613][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1224.971763][ T5205] Dev loop4: unable to read RDB block 0 [ 1224.978554][ T5205] loop4: unable to read partition table [ 1224.984727][ T5205] loop4: partition table beyond EOD, truncated [ 1225.201277][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1225.214567][ T5205] Dev loop4: unable to read RDB block 0 [ 1225.221300][ T5205] loop4: unable to read partition table [ 1225.229074][ T5205] loop4: partition table beyond EOD, truncated [ 1225.431594][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1225.449251][ T5205] Dev loop4: unable to read RDB block 0 [ 1225.461036][ T5205] loop4: unable to read partition table [ 1225.475289][ T5205] loop4: partition table beyond EOD, truncated [ 1225.523751][T27319] netlink: 'syz.4.7379': attribute type 1 has an invalid length. [ 1225.644316][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1225.669482][ T5205] Dev loop4: unable to read RDB block 0 [ 1225.685317][ T5205] loop4: unable to read partition table [ 1225.702926][ T5205] loop4: partition table beyond EOD, truncated [ 1226.303179][T27337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7385'. [ 1226.860174][T27346] netlink: 176 bytes leftover after parsing attributes in process `syz.0.7390'. [ 1226.928461][T27347] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7389'. [ 1226.998731][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1227.024989][ T5205] Dev loop4: unable to read RDB block 0 [ 1227.067906][ T5205] loop4: unable to read partition table [ 1227.093318][ T5205] loop4: partition table beyond EOD, truncated [ 1227.225646][T27356] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1227.483100][T27361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7394'. [ 1227.726815][T27363] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7394'. [ 1227.788512][ T5923] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1227.841387][T27367] binder_alloc: 27366: pid 27366 spamming oneway? 1 buffers allocated for a total size of 4096 [ 1227.968327][T27369] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1228.059209][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1228.066614][ T5205] Dev loop4: unable to read RDB block 0 [ 1228.088097][ T5205] loop4: unable to read partition table [ 1228.094113][ T5205] loop4: partition table beyond EOD, truncated [ 1228.327723][ T5927] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1228.502353][ T5927] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1228.525739][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.543769][ T5927] usb 4-1: Product: syz [ 1228.549474][ T5927] usb 4-1: Manufacturer: syz [ 1228.561417][ T5927] usb 4-1: SerialNumber: syz [ 1229.009543][ T5927] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1229.028383][T27398] input: syz1 as /devices/virtual/input/input61 [ 1229.050204][ T5927] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1229.388075][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1229.405849][ T5205] Dev loop4: unable to read RDB block 0 [ 1229.412014][ T30] audit: type=1326 audit(1765023583.487:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27407 comm="syz.1.7404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa30118f749 code=0x0 [ 1229.439884][ T5205] loop4: unable to read partition table [ 1229.446421][ T5205] loop4: partition table beyond EOD, truncated [ 1229.492481][T20985] buffer_io_error: 148 callbacks suppressed [ 1229.492499][T20985] Buffer I/O error on dev loop4, logical block 0, async page read [ 1229.524646][T20985] Buffer I/O error on dev loop4, logical block 0, async page read [ 1229.548442][T20985] Buffer I/O error on dev loop4, logical block 0, async page read [ 1229.551985][T27414] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7405'. [ 1229.564207][T20985] Buffer I/O error on dev loop4, logical block 0, async page read [ 1229.586996][T20985] Buffer I/O error on dev loop4, logical block 0, async page read [ 1229.608645][T20985] Buffer I/O error on dev loop4, logical block 0, async page read [ 1229.628408][T20985] Buffer I/O error on dev loop4, logical block 0, async page read [ 1229.647358][T20985] Buffer I/O error on dev loop4, logical block 0, async page read [ 1229.656335][T20985] Buffer I/O error on dev loop4, logical block 0, async page read [ 1229.679006][T20985] Buffer I/O error on dev loop4, logical block 0, async page read [ 1229.922974][T27375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1229.954485][T27420] kAFS: unable to lookup cell '(,' [ 1230.008782][T27375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1230.119956][T27422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1230.409020][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1230.432835][T27375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1230.442496][ T5205] Dev loop4: unable to read RDB block 0 [ 1230.449866][T27432] Failed to get privilege flags for destination (handle=0x0:0x0) [ 1230.475369][T27375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1230.482609][ T5205] loop4: unable to read partition table [ 1230.514528][ T5205] loop4: partition table beyond EOD, truncated [ 1230.515829][ T5927] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1230.547758][ T5927] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1230.563315][ T5927] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1230.597128][ T5927] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1230.610046][ T5927] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1230.640391][ T5927] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1230.714957][ T5927] usb 4-1: USB disconnect, device number 15 [ 1230.787550][ T5923] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1230.956153][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 1230.965678][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.976816][ T5923] usb 5-1: New USB device found, idVendor=11c0, idProduct=5506, bcdDevice= 0.00 [ 1231.006847][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1231.031115][ T5923] usb 5-1: config 0 descriptor?? [ 1231.466421][ T5923] betop 0003:11C0:5506.0042: hidraw0: USB HID vff.fb Device [HID 11c0:5506] on usb-dummy_hcd.4-1/input0 [ 1231.503453][ T5923] betop 0003:11C0:5506.0042: no inputs found [ 1231.577936][ T5927] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1231.661944][ T5923] usb 5-1: USB disconnect, device number 127 [ 1231.742709][ T5927] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1231.774270][ T5927] usb 4-1: config 0 has no interface number 0 [ 1231.795123][ T5927] usb 4-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= e.96 [ 1231.820930][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.837907][ T5927] usb 4-1: Product: syz [ 1231.849377][ T5927] usb 4-1: Manufacturer: syz [ 1231.866769][ T5927] usb 4-1: SerialNumber: syz [ 1231.869210][ T30] audit: type=1326 audit(1765023585.937:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27452 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30118f749 code=0x7ffc0000 [ 1231.897175][ T5927] usb 4-1: config 0 descriptor?? [ 1231.902624][T27456] netdevsim netdevsim1: Direct firmware load for 1. failed with error -2 [ 1231.931888][T27456] netdevsim netdevsim1: Falling back to sysfs fallback for: 1. [ 1231.940435][ T30] audit: type=1326 audit(1765023585.967:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27452 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30118f749 code=0x7ffc0000 [ 1231.973994][ T30] audit: type=1326 audit(1765023585.967:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27452 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7fa30118f749 code=0x7ffc0000 [ 1232.008547][ T30] audit: type=1326 audit(1765023585.967:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27452 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30118f749 code=0x7ffc0000 [ 1232.014182][ T5927] cx231xx 4-1:0.1: New device syz syz @ 12 Mbps (2013:0259) with 1 interfaces [ 1232.046475][ T30] audit: type=1326 audit(1765023585.967:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27452 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30118f749 code=0x7ffc0000 [ 1232.076114][ T30] audit: type=1326 audit(1765023585.987:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27452 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7fa30118f749 code=0x7ffc0000 [ 1232.100551][ T5927] cx231xx 4-1:0.1: Not found matching IAD interface [ 1232.111724][ T30] audit: type=1326 audit(1765023585.987:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27452 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30118f749 code=0x7ffc0000 [ 1232.155692][ T5923] usb 4-1: USB disconnect, device number 16 [ 1232.173244][ T30] audit: type=1326 audit(1765023585.987:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27452 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa30118f749 code=0x7ffc0000 [ 1232.200832][ T30] audit: type=1326 audit(1765023586.117:1737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27452 comm="syz.1.7418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fa30118f749 code=0x7ffc0000 [ 1232.278505][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1232.286202][ T5205] Dev loop4: unable to read RDB block 0 [ 1232.295847][ T5205] loop4: unable to read partition table [ 1232.303764][ T5205] loop4: partition table beyond EOD, truncated [ 1232.398075][T27464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7421'. [ 1232.483031][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1232.509064][ T5205] Dev loop4: unable to read RDB block 0 [ 1232.528139][ T5205] loop4: unable to read partition table [ 1232.554250][ T5205] loop4: partition table beyond EOD, truncated [ 1233.590373][T27474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7423'. [ 1233.626160][T27477] syzkaller1: entered promiscuous mode [ 1233.632808][T27477] syzkaller1: entered allmulticast mode [ 1233.953603][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1233.982053][ T5205] Dev loop4: unable to read RDB block 0 [ 1234.001323][ T5205] loop4: unable to read partition table [ 1234.007208][ T5205] loop4: partition table beyond EOD, truncated [ 1234.027454][ T5927] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1234.110694][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1234.123737][T27490] netlink: 'syz.0.7430': attribute type 30 has an invalid length. [ 1234.131900][T27489] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7429'. [ 1234.132304][ T5205] Dev loop4: unable to read RDB block 0 [ 1234.148020][T27490] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7430'. [ 1234.160028][ T5205] loop4: unable to read partition table [ 1234.165971][ T5205] loop4: partition table beyond EOD, truncated [ 1234.199329][ T5927] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.220183][ T5927] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1234.248659][ T5927] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1234.266033][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1234.276479][ T5927] usb 4-1: SerialNumber: syz [ 1234.361287][T27496] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7432'. [ 1234.417466][T24345] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1234.494791][T27500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1234.536515][T27500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1234.555677][ T5205] buffer_io_error: 120 callbacks suppressed [ 1234.555694][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1234.599432][T24345] usb 2-1: Using ep0 maxpacket: 16 [ 1234.610389][ T5927] usb 4-1: 0:2 : does not exist [ 1234.617170][T24345] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1234.629982][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1234.642226][T24345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1234.663678][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1234.673676][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1234.686790][ T5927] usb 4-1: USB disconnect, device number 17 [ 1234.695616][T24345] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1234.709491][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1234.719625][T24345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1234.730862][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1234.741125][T24345] usb 2-1: Product: syz [ 1234.745335][T24345] usb 2-1: Manufacturer: syz [ 1234.753050][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1234.761078][T24345] usb 2-1: SerialNumber: syz [ 1234.768505][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1234.782878][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1234.793713][T24345] usb 2-1: config 0 descriptor?? [ 1234.799868][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1234.811132][T24345] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1234.821894][T24345] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1234.829360][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1234.837745][ T5205] Dev loop4: unable to read RDB block 0 [ 1234.843890][ T5205] loop4: unable to read partition table [ 1234.860627][ T5205] loop4: partition table beyond EOD, truncated [ 1234.966492][T27130] udevd[27130]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1235.435358][T24345] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1235.442127][T24345] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1235.607656][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1235.775615][T27514] syzkaller1: entered promiscuous mode [ 1235.782043][T27514] syzkaller1: entered allmulticast mode [ 1236.217944][T24345] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 1236.258474][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1236.258492][ T30] audit: type=1326 audit(1765023590.337:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27517 comm="syz.3.7438" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f85d8f8f749 code=0x0 [ 1236.259471][T24345] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1236.298286][T24345] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1236.308582][T24345] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1236.316718][T24345] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1236.325390][T24345] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1236.403992][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1236.412829][ T5205] Dev loop4: unable to read RDB block 0 [ 1236.420200][ T5205] loop4: unable to read partition table [ 1236.428982][ T5205] loop4: partition table beyond EOD, truncated [ 1236.544439][T24345] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 1236.551222][T24345] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 1236.578471][T24345] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 1236.598924][T24345] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 1236.606973][T24345] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 1236.637183][T24345] usb 2-1: USB disconnect, device number 9 [ 1236.769829][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1236.795049][ T5205] Dev loop4: unable to read RDB block 0 [ 1236.811397][ T5205] loop4: unable to read partition table [ 1236.823448][ T5205] loop4: partition table beyond EOD, truncated [ 1236.851831][T27526] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7441'. [ 1237.734253][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1237.759735][ T5205] Dev loop4: unable to read RDB block 0 [ 1237.791614][ T5205] loop4: unable to read partition table [ 1237.810706][ T5205] loop4: partition table beyond EOD, truncated [ 1238.149337][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1238.174281][ T5205] Dev loop4: unable to read RDB block 0 [ 1238.194759][ T5205] loop4: unable to read partition table [ 1238.215140][ T5205] loop4: partition table beyond EOD, truncated [ 1238.567709][ T5923] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1238.600802][T27567] netlink: 'syz.3.7457': attribute type 4 has an invalid length. [ 1238.759405][ T5923] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.792851][ T5923] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1238.816068][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.827434][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.838306][ T5923] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1238.877751][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.909944][ T5923] usb 5-1: config 0 descriptor?? [ 1239.332832][T27581] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1239.519690][T27584] pim6reg: entered allmulticast mode [ 1239.549016][ T5923] Bluetooth: Can't get version to change to load ram patch err [ 1239.576559][ T5923] Bluetooth: Loading sysconfig file failed [ 1239.590722][ T5923] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 1239.598322][T27581] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7461'. [ 1239.619886][ T5923] usb 5-1: USB disconnect, device number 2 [ 1239.818655][ T6212] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1240.016908][ T6212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1240.071886][ T6212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59136, setting to 1024 [ 1240.132295][ T6212] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1240.164364][ T5205] buffer_io_error: 110 callbacks suppressed [ 1240.164388][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1240.184028][ T6212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.207009][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1240.209819][ T6212] usb 2-1: config 0 descriptor?? [ 1240.232363][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1240.258668][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1240.302652][T27585] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1240.315389][T27595] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7465'. [ 1240.320702][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1240.353491][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1240.372060][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1240.391192][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1240.406097][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1240.424757][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1240.457743][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1240.482951][ T5205] Dev loop4: unable to read RDB block 0 [ 1240.489715][ T5205] loop4: unable to read partition table [ 1240.495821][ T5205] loop4: partition table beyond EOD, truncated [ 1240.764063][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1240.785703][ T6212] sony 0003:054C:024B.0043: unexpected long global item [ 1240.789041][ T5205] Dev loop4: unable to read RDB block 0 [ 1240.810339][ T6212] sony 0003:054C:024B.0043: parse failed [ 1240.820257][ T5205] loop4: unable to read partition table [ 1240.837811][ T6212] sony 0003:054C:024B.0043: probe with driver sony failed with error -22 [ 1240.840699][ T5205] loop4: partition table beyond EOD, truncated [ 1241.029723][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1241.085339][ T5205] Dev loop4: unable to read RDB block 0 [ 1241.087099][T27606] kernel read not supported for file /cpu.stat (pid: 27606 comm: syz.4.7468) [ 1241.185062][ T5205] loop4: unable to read partition table [ 1241.204752][ T30] audit: type=1800 audit(1765023595.277:1746): pid=27606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7468" name="cpu.stat" dev="mqueue" ino=124367 res=0 errno=0 [ 1241.232737][ T5205] loop4: partition table beyond EOD, truncated [ 1241.415912][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1241.443383][ T5205] Dev loop4: unable to read RDB block 0 [ 1241.480580][ T5205] loop4: unable to read partition table [ 1241.501540][ T5205] loop4: partition table beyond EOD, truncated [ 1241.954261][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1241.964209][ T5205] Dev loop4: unable to read RDB block 0 [ 1241.979865][ T5205] loop4: unable to read partition table [ 1241.993762][ T5205] loop4: partition table beyond EOD, truncated [ 1242.138767][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1242.159426][ T5205] Dev loop4: unable to read RDB block 0 [ 1242.178227][ T5205] loop4: unable to read partition table [ 1242.196130][ T5205] loop4: partition table beyond EOD, truncated [ 1242.425523][T24345] usb 2-1: USB disconnect, device number 10 [ 1242.461026][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1242.469310][ T5205] Dev loop4: unable to read RDB block 0 [ 1242.477147][ T5205] loop4: unable to read partition table [ 1242.483244][ T5205] loop4: partition table beyond EOD, truncated [ 1242.888064][ T6212] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1243.058296][ T6212] usb 5-1: Using ep0 maxpacket: 8 [ 1243.081382][ T6212] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1243.123748][ T6212] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 1243.156339][ T6212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.198730][ T6212] usb 5-1: config 0 descriptor?? [ 1243.566957][T27655] bridge1: entered promiscuous mode [ 1243.624061][ T6212] corsair 0003:1B1C:1B09.0044: unbalanced delimiter at end of report description [ 1243.654295][ T6212] corsair 0003:1B1C:1B09.0044: parse failed [ 1243.664058][ T6212] corsair 0003:1B1C:1B09.0044: probe with driver corsair failed with error -22 [ 1243.824309][T10985] usb 5-1: USB disconnect, device number 3 [ 1244.421613][T27665] openvswitch: netlink: Tunnel attr 140 out of range max 16 [ 1244.444815][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1244.637742][ T5205] Dev loop4: unable to read RDB block 0 [ 1244.665874][ T5205] loop4: unable to read partition table [ 1244.686090][ T5205] loop4: partition table beyond EOD, truncated [ 1244.726971][T27670] [U]  [ 1244.730254][T27670] [U] K{ [ 1244.733364][T27670] [U] T 1ŠFFˊ`GJǘGO/MC [ 1244.742277][T27670] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1244.763396][T27670] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1244.812558][T27670] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1244.857751][T10985] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1245.020407][T27670] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1245.052880][T10985] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 1245.067752][T10985] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.147396][T10985] usb 4-1: config 0 has no interface number 0 [ 1245.181453][T10985] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1245.211433][T10985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.228182][T27670] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1245.255590][T27670] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1245.262001][T10985] usb 4-1: Product: syz [ 1245.307807][T10985] usb 4-1: Manufacturer: syz [ 1245.314426][T27670] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 1245.547581][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1245.571844][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1245.582479][T10985] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 1245.605179][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1245.614309][T27670] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1245.623340][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1245.630688][T10985] uvcvideo 4-1:0.105: No valid video chain found. [ 1245.631935][T27670] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1245.674362][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1245.684339][T27670] [U] 22Ʃ۩X?0;3U [ 1245.689894][T27670] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1245.726229][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1245.736944][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1245.745496][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1245.754366][T27670] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1245.764187][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1245.776678][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1245.785434][T27670] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1245.795824][ T5205] Dev loop4: unable to read RDB block 0 [ 1245.802185][ T5205] loop4: unable to read partition table [ 1245.808826][T27670] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1245.820192][ T5205] loop4: partition table beyond EOD, truncated [ 1245.827532][T27670] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1245.867751][T10985] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1245.874846][T27670] [U] EC [ 1245.895304][T27670] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1245.916782][T27670] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1246.082653][T10985] usb 2-1: Using ep0 maxpacket: 16 [ 1246.094179][T10985] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.135971][T10985] usb 2-1: config 1 interface 0 altsetting 247 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1246.151497][T10985] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1246.161954][T10985] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1246.193055][T10985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.201829][T10985] usb 2-1: Product: syz [ 1246.553858][T27694] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1246.625179][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1246.642212][T27692] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1246.661838][T10985] usb 2-1: Manufacturer: syz [ 1246.677865][T10985] usb 2-1: SerialNumber: syz [ 1246.682952][ T5205] Dev loop4: unable to read RDB block 0 [ 1246.693285][ T5205] loop4: unable to read partition table [ 1246.708866][ T5205] loop4: partition table beyond EOD, truncated [ 1247.184979][T10985] usb 2-1: bad CDC descriptors [ 1247.206069][T10985] usb 2-1: USB disconnect, device number 11 [ 1247.355168][T27669] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7489'. [ 1247.404100][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1247.437472][ T5205] Dev loop4: unable to read RDB block 0 [ 1247.453718][ T5205] loop4: unable to read partition table [ 1247.453954][ T5205] loop4: partition table beyond EOD, truncated [ 1247.579818][T10985] usb 4-1: USB disconnect, device number 18 [ 1247.608411][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1247.623897][ T5205] Dev loop4: unable to read RDB block 0 [ 1247.640199][ T5205] loop4: unable to read partition table [ 1247.655789][ T5205] loop4: partition table beyond EOD, truncated [ 1248.038350][T27724] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1248.539199][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1248.553177][ T5205] Dev loop4: unable to read RDB block 0 [ 1248.565904][ T5205] loop4: unable to read partition table [ 1248.580832][ T5205] loop4: partition table beyond EOD, truncated [ 1249.203482][T27733] !: renamed from dummy0 (while UP) [ 1249.517403][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1249.532209][ T5205] Dev loop4: unable to read RDB block 0 [ 1249.541545][ T5205] loop4: unable to read partition table [ 1249.556212][ T5205] loop4: partition table beyond EOD, truncated [ 1249.760412][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1249.781563][ T5205] Dev loop4: unable to read RDB block 0 [ 1249.795039][ T5205] loop4: unable to read partition table [ 1249.807611][ T5205] loop4: partition table beyond EOD, truncated [ 1249.905856][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1249.919353][ T5205] Dev loop4: unable to read RDB block 0 [ 1249.934322][ T5205] loop4: unable to read partition table [ 1249.948715][ T5205] loop4: partition table beyond EOD, truncated [ 1250.051889][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1250.066895][ T5205] Dev loop4: unable to read RDB block 0 [ 1250.082318][ T5205] loop4: unable to read partition table [ 1250.095911][ T5205] loop4: partition table beyond EOD, truncated [ 1250.165739][T27750] netlink: 'syz.3.7514': attribute type 1 has an invalid length. [ 1250.273864][T27750] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1250.349786][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1250.357050][ T5205] Dev loop4: unable to read RDB block 0 [ 1250.363241][ T5205] loop4: unable to read partition table [ 1250.371328][ T5205] loop4: partition table beyond EOD, truncated [ 1251.415700][ T5205] buffer_io_error: 230 callbacks suppressed [ 1251.415719][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1251.431374][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1251.441818][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1251.517669][T24345] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1251.531629][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1251.544146][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1251.572800][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1251.659444][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1251.686760][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1251.687375][T24345] usb 2-1: Using ep0 maxpacket: 32 [ 1251.700511][T24345] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1251.709923][T24345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.720958][T24345] usb 2-1: config 0 descriptor?? [ 1251.740514][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1251.778540][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1251.822951][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1252.055444][ T5205] Dev loop4: unable to read RDB block 0 [ 1252.067156][T27769] usb usb8: usbfs: process 27769 (syz.1.7519) did not claim interface 0 before use [ 1252.080495][ T5205] loop4: unable to read partition table [ 1252.095551][ T5205] loop4: partition table beyond EOD, truncated [ 1252.118865][T24345] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1252.161438][T24345] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1252.173644][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1252.198544][ T5205] Dev loop4: unable to read RDB block 0 [ 1252.204438][ T5205] loop4: unable to read partition table [ 1252.212212][T24345] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1252.237774][ T5205] loop4: partition table beyond EOD, truncated [ 1252.245279][T27788] netlink: 'syz.4.7525': attribute type 4 has an invalid length. [ 1252.342061][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1252.419855][ T5205] Dev loop4: unable to read RDB block 0 [ 1252.425774][ T5205] loop4: unable to read partition table [ 1252.574262][ T5205] loop4: partition table beyond EOD, truncated [ 1252.669330][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1252.676329][ T5205] Dev loop4: unable to read RDB block 0 [ 1252.787137][ T5205] loop4: unable to read partition table [ 1252.816217][T27800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7531'. [ 1252.877103][ T5205] loop4: partition table beyond EOD, truncated [ 1253.379906][ T6212] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 1253.548788][ T6212] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 1253.565935][ T6212] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 1253.577009][ T6212] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1253.589724][ T6212] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1253.601882][ T6212] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x5D, changing to 0xD [ 1253.615686][ T6212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 10 [ 1253.628273][ T6212] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1253.642388][ T6212] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1253.660742][ T6212] usb 4-1: string descriptor 0 read error: -22 [ 1253.667697][ T6212] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1253.676762][ T6212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.697443][ T6212] usb 4-1: config 0 descriptor?? [ 1253.706665][ T6212] hub 4-1:0.0: bad descriptor, ignoring hub [ 1253.720880][ T6212] hub 4-1:0.0: probe with driver hub failed with error -5 [ 1253.972880][T27806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1254.002301][T27806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1254.148078][ T6212] usb 4-1: USB disconnect, device number 19 [ 1254.339600][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1254.356251][ T5205] Dev loop4: unable to read RDB block 0 [ 1254.381668][ T5205] loop4: unable to read partition table [ 1254.401252][ T5205] loop4: partition table beyond EOD, truncated [ 1255.048024][T27840] netlink: 'syz.1.7543': attribute type 5 has an invalid length. [ 1255.077878][T27842] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7543'. [ 1255.455480][T27850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7545'. [ 1255.719313][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1255.736506][ T5205] Dev loop4: unable to read RDB block 0 [ 1255.746984][ T5205] loop4: unable to read partition table [ 1255.763613][ T5205] loop4: partition table beyond EOD, truncated [ 1255.955766][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1255.976156][ T5205] Dev loop4: unable to read RDB block 0 [ 1256.033956][ T5205] loop4: unable to read partition table [ 1256.050736][ T5205] loop4: partition table beyond EOD, truncated [ 1256.093953][T27867] lo: left allmulticast mode [ 1256.117487][T27867] tunl0: left allmulticast mode [ 1256.139526][T27867] gre0: left allmulticast mode [ 1256.184486][T27867] gretap0: left allmulticast mode [ 1256.252614][T27869] vim2m vim2m.0: vidioc_s_fmt queue busy [ 1256.411879][T27867] erspan0: left allmulticast mode [ 1256.441274][T27867] ip_vti0: left allmulticast mode [ 1256.505733][T27867] ip6_vti0: left allmulticast mode [ 1256.521116][T27867] sit0: left allmulticast mode [ 1256.534717][T27867] ip6tnl0: left allmulticast mode [ 1256.544833][T27867] syz_tun: left allmulticast mode [ 1256.553000][T27867] ip6gretap0: left allmulticast mode [ 1256.562173][T27867] bridge0: left allmulticast mode [ 1256.569069][T27867] vcan0: left allmulticast mode [ 1256.579098][T27867] .`: left promiscuous mode [ 1256.583876][T27867] bond_slave_0: left promiscuous mode [ 1256.589859][T27867] bond_slave_1: left promiscuous mode [ 1256.597828][T27867] 8021q: adding VLAN 0 to HW filter on device .` [ 1256.613810][T27867] 8021q: adding VLAN 0 to HW filter on device team0 [ 1256.634715][T27867] dummy0: left allmulticast mode [ 1256.640503][T27867] batman_adv: batadv0: Interface activated: dummy0 [ 1256.663905][T27867] batadv0: mtu less than device minimum [ 1257.090723][T27867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1257.102561][T27867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1257.113946][T27867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1257.125365][T27867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1257.136558][T27867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1257.148157][T27867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1257.159376][T27867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1257.170586][T27867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1257.181760][T27867] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1257.678853][T27867] nlmon0: left allmulticast mode [ 1257.690485][T27867] caif0: left allmulticast mode [ 1258.307986][ T5205] buffer_io_error: 158 callbacks suppressed [ 1258.308004][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1258.362845][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1258.388232][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1258.398858][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1258.412057][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1258.433043][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1258.450878][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1258.496036][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1258.505058][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1258.516746][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1258.542442][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1258.551414][ T5205] Dev loop4: unable to read RDB block 0 [ 1258.570193][ T5205] loop4: unable to read partition table [ 1258.576414][ T5205] loop4: partition table beyond EOD, truncated [ 1258.587936][ T6212] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1258.786304][ T6212] usb 5-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 1258.801509][ T6212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.872341][ T6212] usb 5-1: config 0 descriptor?? [ 1258.915457][ T6212] usb 5-1: selecting invalid altsetting 1 [ 1258.937396][ T6212] flexcop_usb: set interface failed. [ 1258.970324][ T6212] b2c2_flexcop_usb 5-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 1259.648664][ T5923] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1259.807896][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 1259.815458][ T5923] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1259.826146][ T5923] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.839601][ T5923] usb 4-1: config 0 descriptor?? [ 1260.058334][T27911] usb usb8: usbfs: process 27911 (syz.3.7562) did not claim interface 0 before use [ 1260.075884][ T5923] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1261.378150][ T6212] usb 5-1: USB disconnect, device number 4 [ 1261.406189][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1261.431201][ T5205] Dev loop4: unable to read RDB block 0 [ 1261.447020][ T5205] loop4: unable to read partition table [ 1261.454910][ T5205] loop4: partition table beyond EOD, truncated [ 1262.394394][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1262.425381][ T5205] Dev loop4: unable to read RDB block 0 [ 1262.442690][ T5205] loop4: unable to read partition table [ 1262.453887][ T5205] loop4: partition table beyond EOD, truncated [ 1262.525314][T27935] [U]  [ 1262.529278][T27935] [U] K{ [ 1262.532521][T27935] [U] T 1ŠFFˊ`GJǘGO/MC [ 1262.638984][T27935] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 1262.659160][T27935] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 1262.711463][T27935] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 1262.806301][T27947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7574'. [ 1262.818762][T27935] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 1262.908728][T27935] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 1262.947632][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1262.965074][ T5205] Dev loop4: unable to read RDB block 0 [ 1262.980823][T27935] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 1263.044644][ T5205] loop4: unable to read partition table [ 1263.076305][ T5205] loop4: partition table beyond EOD, truncated [ 1263.098327][T27935] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 1263.371429][T27130] buffer_io_error: 77 callbacks suppressed [ 1263.371448][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1263.430171][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1263.445784][T27935] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 1263.459245][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1263.499735][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1263.508217][T27935] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 1263.508337][T27935] [U] 22Ʃ۩X?0;3U [ 1263.513157][T27935] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 1263.548200][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1263.579869][T27935] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 1263.598993][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1263.626991][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1263.646276][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1263.652293][T27935] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 1263.664035][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1263.712122][T27935] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 1263.742651][T27935] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 1263.789311][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1263.809365][T27935] [U] EC [ 1263.825149][T27935] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 1263.825388][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1263.866605][T27959] syzkaller0: entered promiscuous mode [ 1263.873243][T27959] syzkaller0: entered allmulticast mode [ 1263.880237][T27935] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 1263.900352][ T5205] Dev loop4: unable to read RDB block 0 [ 1263.925001][ T5205] loop4: unable to read partition table [ 1263.946892][ T5205] loop4: partition table beyond EOD, truncated [ 1264.119212][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1264.179205][ T5205] Dev loop4: unable to read RDB block 0 [ 1264.203636][ T5205] loop4: unable to read partition table [ 1264.224372][ T5205] loop4: partition table beyond EOD, truncated [ 1264.476721][T27964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7582'. [ 1264.533087][T27964] net_ratelimit: 12 callbacks suppressed [ 1264.533101][T27964] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1264.670429][T27966] pim6reg: entered allmulticast mode [ 1264.942258][T27972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7585'. [ 1264.991051][T27974] netlink: 76 bytes leftover after parsing attributes in process `syz.0.7584'. [ 1265.120160][T27982] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7587'. [ 1265.268321][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1265.275574][ T5205] Dev loop4: unable to read RDB block 0 [ 1265.343284][ T5205] loop4: unable to read partition table [ 1265.378312][ T5205] loop4: partition table beyond EOD, truncated [ 1265.598775][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1265.618155][ T5205] Dev loop4: unable to read RDB block 0 [ 1265.624256][ T5205] loop4: unable to read partition table [ 1265.636973][ T5205] loop4: partition table beyond EOD, truncated [ 1266.742590][T28008] FAULT_INJECTION: forcing a failure. [ 1266.742590][T28008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1266.802318][T28008] CPU: 0 UID: 0 PID: 28008 Comm: syz.3.7597 Tainted: G L syzkaller #0 PREEMPT(full) [ 1266.802340][T28008] Tainted: [L]=SOFTLOCKUP [ 1266.802344][T28008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1266.802352][T28008] Call Trace: [ 1266.802360][T28008] [ 1266.802367][T28008] dump_stack_lvl+0x189/0x250 [ 1266.802389][T28008] ? __pfx____ratelimit+0x10/0x10 [ 1266.802404][T28008] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1266.802418][T28008] ? __pfx__printk+0x10/0x10 [ 1266.802451][T28008] ? __might_fault+0xb0/0x130 [ 1266.802483][T28008] should_fail_ex+0x414/0x560 [ 1266.802505][T28008] _copy_from_user+0x2d/0xb0 [ 1266.802525][T28008] ___sys_sendmsg+0x158/0x2a0 [ 1266.802548][T28008] ? __pfx____sys_sendmsg+0x10/0x10 [ 1266.802585][T28008] ? rcu_read_lock_any_held+0xb3/0x120 [ 1266.802634][T28008] ? __fget_files+0x2a/0x420 [ 1266.802655][T28008] ? __fget_files+0x3a0/0x420 [ 1266.802684][T28008] __x64_sys_sendmsg+0x19b/0x260 [ 1266.802711][T28008] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1266.802867][T28008] ? __pfx_ksys_write+0x10/0x10 [ 1266.802903][T28008] ? do_syscall_64+0xbe/0xf80 [ 1266.802955][T28008] do_syscall_64+0xfa/0xf80 [ 1266.802978][T28008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.802996][T28008] ? clear_bhb_loop+0x60/0xb0 [ 1266.803017][T28008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.803035][T28008] RIP: 0033:0x7f85d8f8f749 [ 1266.803052][T28008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1266.803068][T28008] RSP: 002b:00007f85d9dfc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1266.803088][T28008] RAX: ffffffffffffffda RBX: 00007f85d91e5fa0 RCX: 00007f85d8f8f749 [ 1266.803101][T28008] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 0000000000000003 [ 1266.803113][T28008] RBP: 00007f85d9dfc090 R08: 0000000000000000 R09: 0000000000000000 [ 1266.803124][T28008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1266.803135][T28008] R13: 00007f85d91e6038 R14: 00007f85d91e5fa0 R15: 00007f85d930fa28 [ 1266.803166][T28008] [ 1267.633362][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1267.661073][ T5205] Dev loop4: unable to read RDB block 0 [ 1267.676775][ T5205] loop4: unable to read partition table [ 1267.692977][ T5205] loop4: partition table beyond EOD, truncated [ 1267.905990][T28022] bond7: option tlb_dynamic_lb: invalid value (5) [ 1267.916722][T28022] bond7 (unregistering): Released all slaves [ 1268.329878][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1268.342806][ T5205] Dev loop4: unable to read RDB block 0 [ 1268.355261][ T5205] loop4: unable to read partition table [ 1268.371778][ T5205] loop4: partition table beyond EOD, truncated [ 1268.414931][T27130] buffer_io_error: 133 callbacks suppressed [ 1268.414949][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1268.452914][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1268.485302][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1268.503643][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1268.526273][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1268.548253][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1268.569456][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1268.595543][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1268.623685][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1268.652011][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1268.693857][ T30] audit: type=1326 audit(1765023622.767:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28037 comm="syz.0.7608" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd60358f749 code=0x0 [ 1268.802848][T28040] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 1268.809970][T28040] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1268.824604][T28040] vhci_hcd vhci_hcd.0: Device attached [ 1268.909404][T28041] vhci_hcd: connection closed [ 1268.909567][T25575] vhci_hcd: stop threads [ 1268.919897][T25575] vhci_hcd: release socket [ 1268.924597][T25575] vhci_hcd: disconnect device [ 1269.247984][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1269.256208][ T5205] Dev loop4: unable to read RDB block 0 [ 1269.262959][ T5205] loop4: unable to read partition table [ 1269.269470][ T5205] loop4: partition table beyond EOD, truncated [ 1269.350053][ T30] audit: type=1326 audit(1765023623.427:1748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28045 comm="syz.4.7610" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f833a78f749 code=0x0 [ 1269.463235][T28048] program syz.4.7610 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1269.595306][ T6207] hid-generic 0000:0000:0000.0045: unknown main item tag 0x0 [ 1269.618161][ T6207] hid-generic 0000:0000:0000.0045: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1270.221098][ T30] audit: type=1326 audit(1765023624.297:1749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.0.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60358f749 code=0x7ffc0000 [ 1270.272617][ T30] audit: type=1326 audit(1765023624.317:1750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.0.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fd60358f749 code=0x7ffc0000 [ 1270.346630][ T30] audit: type=1326 audit(1765023624.317:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.0.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60358f749 code=0x7ffc0000 [ 1270.462440][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1270.476614][ T5205] Dev loop4: unable to read RDB block 0 [ 1270.508049][ T5205] loop4: unable to read partition table [ 1270.522065][ T5205] loop4: partition table beyond EOD, truncated [ 1270.564482][ T30] audit: type=1326 audit(1765023624.317:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.0.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7fd60358f749 code=0x7ffc0000 [ 1270.632235][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1270.640310][ T30] audit: type=1326 audit(1765023624.317:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.0.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60358f749 code=0x7ffc0000 [ 1270.667875][ T5205] Dev loop4: unable to read RDB block 0 [ 1270.683816][ T5205] loop4: unable to read partition table [ 1270.706028][ T5205] loop4: partition table beyond EOD, truncated [ 1270.729955][ T30] audit: type=1326 audit(1765023624.317:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.0.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd60358f749 code=0x7ffc0000 [ 1270.792351][ T30] audit: type=1326 audit(1765023624.317:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.0.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd60358f749 code=0x7ffc0000 [ 1270.857836][ T30] audit: type=1326 audit(1765023624.327:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28053 comm="syz.0.7612" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fd60358f749 code=0x7ffc0000 [ 1270.972017][T28067] FAULT_INJECTION: forcing a failure. [ 1270.972017][T28067] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1271.053328][T28067] CPU: 0 UID: 0 PID: 28067 Comm: syz.4.7614 Tainted: G L syzkaller #0 PREEMPT(full) [ 1271.053356][T28067] Tainted: [L]=SOFTLOCKUP [ 1271.053361][T28067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1271.053370][T28067] Call Trace: [ 1271.053377][T28067] [ 1271.053385][T28067] dump_stack_lvl+0x189/0x250 [ 1271.053411][T28067] ? __pfx____ratelimit+0x10/0x10 [ 1271.053430][T28067] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1271.053448][T28067] ? __pfx__printk+0x10/0x10 [ 1271.053470][T28067] ? get_sigframe+0x596/0x7d0 [ 1271.053497][T28067] should_fail_ex+0x414/0x560 [ 1271.053521][T28067] _copy_to_user+0x31/0xb0 [ 1271.053552][T28067] copy_siginfo_to_user+0x22/0xc0 [ 1271.053575][T28067] x64_setup_rt_frame+0x776/0xd40 [ 1271.053619][T28067] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1271.053650][T28067] arch_do_signal_or_restart+0x3d1/0x7a0 [ 1271.053673][T28067] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1271.053706][T28067] ? exit_to_user_mode_loop+0x55/0x4f0 [ 1271.053726][T28067] exit_to_user_mode_loop+0x87/0x4f0 [ 1271.053740][T28067] ? rcu_is_watching+0x15/0xb0 [ 1271.053762][T28067] do_syscall_64+0x2e3/0xf80 [ 1271.053798][T28067] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.053814][T28067] ? clear_bhb_loop+0x60/0xb0 [ 1271.053833][T28067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.053847][T28067] RIP: 0033:0x7f833a78e1ff [ 1271.053861][T28067] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1271.053875][T28067] RSP: 002b:00007f833b604030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1271.053894][T28067] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 00007f833a78e1ff [ 1271.053905][T28067] RDX: 0000000000000001 RSI: 00007f833b604090 RDI: 0000000000000003 [ 1271.053914][T28067] RBP: 00007f833b604090 R08: 0000000000000000 R09: 00007f833b603df7 [ 1271.053925][T28067] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 1271.053935][T28067] R13: 00007f833a9e6038 R14: 00007f833a9e5fa0 R15: 00007f833ab0fa28 [ 1271.053961][T28067] [ 1271.270901][T28071] usb usb8: usbfs: process 28071 (syz.1.7604) did not claim interface 0 before use [ 1271.393719][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1271.401037][ T5205] Dev loop4: unable to read RDB block 0 [ 1271.407068][ T5205] loop4: unable to read partition table [ 1271.417596][ T5205] loop4: partition table beyond EOD, truncated [ 1271.561777][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1271.573175][ T5205] Dev loop4: unable to read RDB block 0 [ 1271.583912][ T5205] loop4: unable to read partition table [ 1271.593968][ T5205] loop4: partition table beyond EOD, truncated [ 1272.612593][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1272.694394][ T5205] Dev loop4: unable to read RDB block 0 [ 1272.708320][ T5205] loop4: unable to read partition table [ 1272.726017][ T5205] loop4: partition table beyond EOD, truncated [ 1272.920043][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1272.950758][ T5205] Dev loop4: unable to read RDB block 0 [ 1272.972793][ T5205] loop4: unable to read partition table [ 1272.991856][ T5205] loop4: partition table beyond EOD, truncated [ 1273.567143][T28116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7632'. [ 1274.045807][T28126] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1274.175613][ T5205] buffer_io_error: 168 callbacks suppressed [ 1274.175632][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1274.192238][T28126] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 1274.200643][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1274.211705][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1274.232149][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1274.253351][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1274.274162][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1274.323932][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1274.376333][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1274.398348][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1274.425907][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1274.451367][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1274.472830][ T5205] Dev loop4: unable to read RDB block 0 [ 1274.495125][ T5205] loop4: unable to read partition table [ 1274.513470][ T5205] loop4: partition table beyond EOD, truncated [ 1274.620656][T28141] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 1275.656042][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 1275.656058][ T30] audit: type=1326 audit(1765023629.727:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28162 comm="syz.0.7640" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd60358f749 code=0x0 [ 1275.710265][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1275.720497][ T5205] Dev loop4: unable to read RDB block 0 [ 1275.726487][ T5205] loop4: unable to read partition table [ 1275.746755][T28163] binder: 28162:28163 ioctl c0306201 200000000100 returned -14 [ 1275.777812][ T5205] loop4: partition table beyond EOD, truncated [ 1276.355124][T28178] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 1276.361804][T28178] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1276.527122][T28178] vhci_hcd vhci_hcd.0: Device attached [ 1276.571797][T28183] netlink: 'syz.0.7644': attribute type 5 has an invalid length. [ 1276.651241][T28183] netlink: 'syz.0.7644': attribute type 3 has an invalid length. [ 1276.682851][T28183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7644'. [ 1276.838085][T28179] vhci_hcd: connection closed [ 1276.839821][ T3443] vhci_hcd: stop threads [ 1276.895318][ T3443] vhci_hcd: release socket [ 1276.920927][ T3443] vhci_hcd: disconnect device [ 1277.050500][ T6212] usb 38-1: enqueue for inactive port 0 [ 1277.539269][ T6212] usb usb38-port1: attempt power cycle [ 1277.731890][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1277.755031][ T5205] Dev loop4: unable to read RDB block 0 [ 1277.775459][ T5205] loop4: unable to read partition table [ 1277.794189][ T5205] loop4: partition table beyond EOD, truncated [ 1278.100553][ T6212] usb usb38-port1: unable to enumerate USB device [ 1278.311653][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1278.348564][ T5205] Dev loop4: unable to read RDB block 0 [ 1278.359355][ T5205] loop4: unable to read partition table [ 1278.360529][T28201] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 28201 comm: syz.4.7651) [ 1278.379106][ T5205] loop4: partition table beyond EOD, truncated [ 1278.432799][ T30] audit: type=1800 audit(1765023632.507:1763): pid=28201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7651" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=128546 res=0 errno=0 [ 1278.773191][T28213] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 1279.246989][ T5205] buffer_io_error: 86 callbacks suppressed [ 1279.247009][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1279.277734][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1279.286010][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1279.298266][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1279.306576][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1279.335985][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1279.347541][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1279.367139][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1279.487403][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1279.500664][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1279.521073][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1279.547699][ T5205] Dev loop4: unable to read RDB block 0 [ 1279.566190][ T5205] loop4: unable to read partition table [ 1279.582965][ T5205] loop4: partition table beyond EOD, truncated [ 1279.981245][T28235] netlink: 'syz.4.7660': attribute type 11 has an invalid length. [ 1280.003683][T28235] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.7660'. [ 1280.106738][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1280.128370][ T5205] Dev loop4: unable to read RDB block 0 [ 1280.140717][ T5205] loop4: unable to read partition table [ 1280.155327][ T5205] loop4: partition table beyond EOD, truncated [ 1281.080966][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1281.098963][ T5205] Dev loop4: unable to read RDB block 0 [ 1281.115427][ T5205] loop4: unable to read partition table [ 1281.156117][ T5205] loop4: partition table beyond EOD, truncated [ 1281.577627][ T5927] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 1281.728949][ T5927] usb 5-1: config 0 has an invalid interface number: 235 but max is 0 [ 1281.745040][ T5927] usb 5-1: config 0 has no interface number 0 [ 1281.757548][ T5927] usb 5-1: config 0 interface 235 has no altsetting 0 [ 1281.779109][ T5927] usb 5-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 1281.795710][ T5927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.813163][ T5927] usb 5-1: Product: syz [ 1281.822065][ T5927] usb 5-1: Manufacturer: syz [ 1281.837357][ T5927] usb 5-1: SerialNumber: syz [ 1281.849104][ T5927] usb 5-1: config 0 descriptor?? [ 1281.873084][ T5927] keyspan 5-1:0.235: Keyspan 1 port adapter converter detected [ 1281.890596][ T5927] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 87 [ 1281.896564][T28268] netlink: 'syz.3.7669': attribute type 33 has an invalid length. [ 1281.907504][ T5927] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 7 [ 1281.909088][ T5927] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 81 [ 1281.930859][T28268] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7669'. [ 1281.952542][ T5927] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 1 [ 1281.970959][ T5927] keyspan 5-1:0.235: found no endpoint descriptor for endpoint 85 [ 1281.989115][ T5927] usb 5-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1282.016951][T28268] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7669'. [ 1282.109514][ T5927] usb 5-1: USB disconnect, device number 5 [ 1282.126327][ T5927] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1282.155047][ T5927] keyspan 5-1:0.235: device disconnected [ 1282.483553][T28275] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7672'. [ 1282.710544][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1282.731908][ T5205] Dev loop4: unable to read RDB block 0 [ 1282.749219][ T5205] loop4: unable to read partition table [ 1282.757952][ T5205] loop4: partition table beyond EOD, truncated [ 1282.971864][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1282.988213][ T5205] Dev loop4: unable to read RDB block 0 [ 1283.083885][ T5205] loop4: unable to read partition table [ 1283.093933][ T5205] loop4: partition table beyond EOD, truncated [ 1283.866891][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1283.895472][ T5205] Dev loop4: unable to read RDB block 0 [ 1283.915602][ T5205] loop4: unable to read partition table [ 1283.919140][T28293] fuse: Bad value for 'fd' [ 1283.937766][ T5205] loop4: partition table beyond EOD, truncated [ 1284.164997][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1284.173002][ T5205] Dev loop4: unable to read RDB block 0 [ 1284.180863][ T5205] loop4: unable to read partition table [ 1284.191040][ T5205] loop4: partition table beyond EOD, truncated [ 1284.527935][ T6212] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1284.688057][ T6212] usb 5-1: Using ep0 maxpacket: 32 [ 1284.703067][ T6212] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 1284.713580][ T6212] usb 5-1: config 0 has no interface number 0 [ 1284.720574][ T6212] usb 5-1: config 0 interface 184 has no altsetting 0 [ 1284.734192][ T6212] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1284.744505][ T6212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.753335][ T6212] usb 5-1: Product: syz [ 1284.763734][ T6212] usb 5-1: Manufacturer: syz [ 1284.769549][ T6212] usb 5-1: SerialNumber: syz [ 1284.781312][ T6212] usb 5-1: config 0 descriptor?? [ 1284.795412][ T6212] smsc75xx v1.0.0 [ 1284.999840][ T6212] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1285.043361][ T6212] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1285.055096][ T6212] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1285.084423][ T6212] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -32 [ 1285.313564][T28316] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7685'. [ 1285.354018][T28305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.371186][T28305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1285.477020][ T6212] usb 5-1: USB disconnect, device number 6 [ 1285.518584][ T5205] buffer_io_error: 168 callbacks suppressed [ 1285.518603][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1285.563847][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1285.593621][T28321] syz_tun: entered allmulticast mode [ 1285.595048][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1285.624466][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1285.641687][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1285.651899][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1285.680635][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1285.690230][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1285.734636][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1285.746667][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1285.756224][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1285.902541][ T5205] Dev loop4: unable to read RDB block 0 [ 1285.927795][ T5205] loop4: unable to read partition table [ 1285.933869][ T5205] loop4: partition table beyond EOD, truncated [ 1286.149681][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1286.167094][ T5205] Dev loop4: unable to read RDB block 0 [ 1286.184248][ T5205] loop4: unable to read partition table [ 1286.227104][ T5205] loop4: partition table beyond EOD, truncated [ 1287.068488][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1287.093949][ T5205] Dev loop4: unable to read RDB block 0 [ 1287.118330][ T5205] loop4: unable to read partition table [ 1287.134878][ T5205] loop4: partition table beyond EOD, truncated [ 1287.331501][T28354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7696'. [ 1287.562219][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1287.581166][ T5205] Dev loop4: unable to read RDB block 0 [ 1287.648554][ T5205] loop4: unable to read partition table [ 1287.654834][ T5205] loop4: partition table beyond EOD, truncated [ 1288.397145][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1288.493838][ T5205] Dev loop4: unable to read RDB block 0 [ 1288.599995][T28321] syz_tun: left allmulticast mode [ 1288.638704][ T5205] loop4: unable to read partition table [ 1288.644853][ T5205] loop4: partition table beyond EOD, truncated [ 1288.861731][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1288.889719][ T5205] Dev loop4: unable to read RDB block 0 [ 1288.914403][ T5205] loop4: unable to read partition table [ 1288.927487][ T5205] loop4: partition table beyond EOD, truncated [ 1289.198223][ T6212] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1289.358253][ T6212] usb 5-1: Using ep0 maxpacket: 16 [ 1289.722564][ T30] audit: type=1326 audit(1765023643.797:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28390 comm="syz.0.7706" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fd6035865e7 code=0x0 [ 1289.892170][ T6212] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1289.954864][ T6212] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1289.987131][ T6212] usb 5-1: can't read configurations, error -71 [ 1290.025926][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1290.050135][ T5205] Dev loop4: unable to read RDB block 0 [ 1290.060417][ T5205] loop4: unable to read partition table [ 1290.081271][ T5205] loop4: partition table beyond EOD, truncated [ 1290.114374][T28396] input: syz0 as /devices/virtual/input/input63 [ 1290.324544][T28400] netlink: 616 bytes leftover after parsing attributes in process `syz.1.7710'. [ 1290.359604][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1290.384412][ T5205] Dev loop4: unable to read RDB block 0 [ 1290.424700][ T5205] loop4: unable to read partition table [ 1290.451789][ T5205] loop4: partition table beyond EOD, truncated [ 1290.535028][T27130] buffer_io_error: 172 callbacks suppressed [ 1290.535046][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1290.611548][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1290.637048][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1290.686622][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1290.728337][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1290.736867][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1290.809104][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1290.839785][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1290.885602][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1290.920034][T27130] Buffer I/O error on dev loop4, logical block 0, async page read [ 1291.017358][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1291.025708][ T5205] Dev loop4: unable to read RDB block 0 [ 1291.057030][ T5205] loop4: unable to read partition table [ 1291.087571][ T5205] loop4: partition table beyond EOD, truncated [ 1291.223482][T28432] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7720'. [ 1292.211158][T28445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7723'. [ 1292.433379][T28445] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1292.765707][T28455] netlink: 'syz.0.7726': attribute type 3 has an invalid length. [ 1292.801878][T28455] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7726'. [ 1292.822141][T28440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7722'. [ 1293.029305][T28462] x_tables: duplicate underflow at hook 2 [ 1293.121505][T28464] netlink: 120 bytes leftover after parsing attributes in process `syz.2.7729'. [ 1293.656195][T28478] IPv6: Can't replace route, no match found [ 1293.684188][T28478] syzkaller1: entered promiscuous mode [ 1293.690258][T28478] syzkaller1: entered allmulticast mode [ 1293.936000][T28481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7735'. [ 1294.199217][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1294.228818][ T5205] Dev loop4: unable to read RDB block 0 [ 1294.234719][ T5205] loop4: unable to read partition table [ 1294.262590][ T5205] loop4: partition table beyond EOD, truncated [ 1294.762000][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1294.773775][ T5205] Dev loop4: unable to read RDB block 0 [ 1294.789726][ T5205] loop4: unable to read partition table [ 1294.912791][ T5205] loop4: partition table beyond EOD, truncated [ 1295.127629][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1295.565072][T28513] netlink: 172 bytes leftover after parsing attributes in process `syz.4.7741'. [ 1295.786685][T28505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.794214][T28505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.620395][T28505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1296.700527][T28505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1297.205138][ T5205] buffer_io_error: 72 callbacks suppressed [ 1297.205161][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1297.261144][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1297.306126][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1297.358320][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1297.367050][T20823] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.419920][T20823] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.430267][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1297.478380][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1297.515815][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1297.524880][T28548] syzkaller0: entered promiscuous mode [ 1297.551470][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1297.560369][T28548] syzkaller0: entered allmulticast mode [ 1297.578673][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1297.596523][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1297.615265][T20823] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.630288][ T5205] Buffer I/O error on dev loop4, logical block 0, async page read [ 1297.661830][ T5205] Dev loop4: unable to read RDB block 0 [ 1297.682268][ T5205] loop4: unable to read partition table [ 1297.694086][ T5205] loop4: partition table beyond EOD, truncated [ 1297.730082][T20823] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.343976][ T5205] ldm_validate_partition_table(): Disk read failed. [ 1298.377191][ T5205] Dev loop4: unable to read RDB block 0 [ 1298.403093][ T5205] loop4: unable to read partition table [ 1298.433487][ T5205] loop4: partition table beyond EOD, truncated [ 1298.489063][T28574] ------------[ cut here ]------------ [ 1298.495016][T28574] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1187/0x1310, CPU#0: syz.2.7753/28574 [ 1298.507584][T28574] Modules linked in: [ 1298.512048][T28574] CPU: 0 UID: 0 PID: 28574 Comm: syz.2.7753 Tainted: G L syzkaller #0 PREEMPT(full) [ 1298.523147][T28574] Tainted: [L]=SOFTLOCKUP [ 1298.528148][T28574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1298.538415][T28574] RIP: 0010:__kvm_gpc_refresh+0x1187/0x1310 [ 1298.545107][T28574] Code: c6 05 e4 37 2b 0e 01 48 c7 c7 ff e9 76 8d be 35 04 00 00 48 c7 c2 a0 f1 61 8b e8 e4 70 5e 00 e9 fe f1 ff ff e8 ca 51 81 00 90 <0f> 0b 90 bb ea ff ff ff e9 7e fe ff ff e8 b7 51 81 00 90 0f 0b 90 [ 1298.565162][T28574] RSP: 0018:ffffc9000420f5e0 EFLAGS: 00010287 [ 1298.571574][T28574] RAX: ffffffff81400dd6 RBX: ffff888000000000 RCX: 0000000000080000 [ 1298.580117][T28574] RDX: ffffc9000daca000 RSI: 0000000000000395 RDI: 0000000000000396 [ 1298.588663][T28574] RBP: ffffc9000420f770 R08: ffffffff8f814677 R09: 1ffffffff1f028ce [ 1298.596902][T28574] R10: dffffc0000000000 R11: fffffbfff1f028cf R12: ffff8880541a1290 [ 1298.605149][T28574] R13: dffffc0000000000 R14: ffff888000000000 R15: ffffffffffffff01 [ 1298.613425][T28574] FS: 00007fbddea526c0(0000) GS:ffff888126087000(0000) knlGS:0000000000000000 [ 1298.622666][T28574] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1298.629349][T28574] CR2: 000000110c34e466 CR3: 0000000029e94000 CR4: 00000000003526f0 [ 1298.637461][T28574] DR0: 0000000000000008 DR1: 0000000000000002 DR2: 0000000000000404 [ 1298.645553][T28574] DR3: ffffffffefffff14 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1298.653801][T28574] Call Trace: [ 1298.657103][T28574] [ 1298.660152][T28574] ? _raw_read_unlock_irqrestore+0x85/0x110 [ 1298.666260][T28574] ? kvm_gpc_refresh+0x31/0x140 [ 1298.671315][T28574] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 1298.676813][T28574] ? kvm_xen_set_evtchn+0x138/0x230 [ 1298.682278][T28574] kvm_gpc_refresh+0xe1/0x140 [ 1298.686959][T28574] ? kvm_xen_set_evtchn+0x138/0x230 [ 1298.692573][T28574] kvm_xen_set_evtchn+0x164/0x230 [ 1298.697788][T28574] ? __pfx_evtchn_set_fn+0x10/0x10 [ 1298.702938][T28574] kvm_set_irq+0x260/0x4e0 [ 1298.707433][T28574] ? __pfx_kvm_set_irq+0x10/0x10 [ 1298.712798][T28574] ? __pfx_evtchn_set_fn+0x10/0x10 [ 1298.717989][T28574] kvm_vm_ioctl_irq_line+0x8c/0x130 [ 1298.723205][T28574] kvm_vm_ioctl+0x88d/0xc60 [ 1298.728306][T28574] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1298.733429][T28574] ? kasan_quarantine_put+0xdd/0x220 [ 1298.739254][T28574] ? lockdep_hardirqs_on+0x98/0x140 [ 1298.744574][T28574] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1298.750608][T28574] ? do_vfs_ioctl+0xbe8/0x1430 [ 1298.755508][T28574] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1298.761285][T28574] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1298.766345][T28574] ? __pfx_vfs_writev+0x10/0x10 [ 1298.771274][T28574] ? do_futex+0x395/0x420 [ 1298.775618][T28574] ? __fget_files+0x2a/0x420 [ 1298.780496][T28574] ? __fget_files+0x3a0/0x420 [ 1298.785520][T28574] ? __fget_files+0x2a/0x420 [ 1298.790315][T28574] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1298.795262][T28574] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1298.800448][T28574] __se_sys_ioctl+0xfc/0x170 [ 1298.805182][T28574] do_syscall_64+0xfa/0xf80 [ 1298.810117][T28574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.816204][T28574] ? clear_bhb_loop+0x60/0xb0 [ 1298.820986][T28574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.827076][T28574] RIP: 0033:0x7fbdddb8f749 [ 1298.831910][T28574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1298.852350][T28574] RSP: 002b:00007fbddea52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1298.861508][T28574] RAX: ffffffffffffffda RBX: 00007fbdddde5fa0 RCX: 00007fbdddb8f749 [ 1298.869562][T28574] RDX: 0000200000000100 RSI: 00000000c008ae67 RDI: 0000000000000004 [ 1298.877780][T28574] RBP: 00007fbdddc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1298.885802][T28574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1298.894602][T28574] R13: 00007fbdddde6038 R14: 00007fbdddde5fa0 R15: 00007fbdddf0fa28 [ 1298.903068][T28574] [ 1298.906094][T28574] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1298.913462][T28574] CPU: 0 UID: 0 PID: 28574 Comm: syz.2.7753 Tainted: G L syzkaller #0 PREEMPT(full) [ 1298.924582][T28574] Tainted: [L]=SOFTLOCKUP [ 1298.928898][T28574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1298.939115][T28574] Call Trace: [ 1298.942385][T28574] [ 1298.945304][T28574] dump_stack_lvl+0x99/0x250 [ 1298.949974][T28574] ? __asan_memcpy+0x40/0x70 [ 1298.954735][T28574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1298.959929][T28574] ? __pfx__printk+0x10/0x10 [ 1298.964518][T28574] vpanic+0x237/0x6d0 [ 1298.968493][T28574] ? __pfx_vpanic+0x10/0x10 [ 1298.972993][T28574] ? is_bpf_text_address+0x292/0x2b0 [ 1298.978364][T28574] ? is_bpf_text_address+0x26/0x2b0 [ 1298.983566][T28574] panic+0xb9/0xc0 [ 1298.987285][T28574] ? __pfx_panic+0x10/0x10 [ 1298.991743][T28574] __warn+0x317/0x4b0 [ 1298.995741][T28574] ? __kvm_gpc_refresh+0x1187/0x1310 [ 1299.001035][T28574] ? __kvm_gpc_refresh+0x1187/0x1310 [ 1299.006758][T28574] __report_bug+0x288/0x500 [ 1299.011268][T28574] ? check_noncircular+0xda/0x150 [ 1299.016311][T28574] ? __kvm_gpc_refresh+0x1187/0x1310 [ 1299.021606][T28574] ? __pfx___report_bug+0x10/0x10 [ 1299.026647][T28574] ? check_path+0x21/0x40 [ 1299.030986][T28574] ? __kvm_gpc_refresh+0x1187/0x1310 [ 1299.036281][T28574] report_bug+0x16a/0x220 [ 1299.040614][T28574] ? __kvm_gpc_refresh+0x1187/0x1310 [ 1299.046092][T28574] ? __kvm_gpc_refresh+0x1189/0x1310 [ 1299.051520][T28574] handle_bug+0x98/0x200 [ 1299.056054][T28574] exc_invalid_op+0x1a/0x50 [ 1299.060568][T28574] asm_exc_invalid_op+0x1a/0x20 [ 1299.065812][T28574] RIP: 0010:__kvm_gpc_refresh+0x1187/0x1310 [ 1299.071985][T28574] Code: c6 05 e4 37 2b 0e 01 48 c7 c7 ff e9 76 8d be 35 04 00 00 48 c7 c2 a0 f1 61 8b e8 e4 70 5e 00 e9 fe f1 ff ff e8 ca 51 81 00 90 <0f> 0b 90 bb ea ff ff ff e9 7e fe ff ff e8 b7 51 81 00 90 0f 0b 90 [ 1299.092045][T28574] RSP: 0018:ffffc9000420f5e0 EFLAGS: 00010287 [ 1299.098269][T28574] RAX: ffffffff81400dd6 RBX: ffff888000000000 RCX: 0000000000080000 [ 1299.106429][T28574] RDX: ffffc9000daca000 RSI: 0000000000000395 RDI: 0000000000000396 [ 1299.114679][T28574] RBP: ffffc9000420f770 R08: ffffffff8f814677 R09: 1ffffffff1f028ce [ 1299.122780][T28574] R10: dffffc0000000000 R11: fffffbfff1f028cf R12: ffff8880541a1290 [ 1299.131040][T28574] R13: dffffc0000000000 R14: ffff888000000000 R15: ffffffffffffff01 [ 1299.139086][T28574] ? __kvm_gpc_refresh+0x1186/0x1310 [ 1299.144587][T28574] ? _raw_read_unlock_irqrestore+0x85/0x110 [ 1299.150585][T28574] ? kvm_gpc_refresh+0x31/0x140 [ 1299.155546][T28574] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 1299.161232][T28574] ? kvm_xen_set_evtchn+0x138/0x230 [ 1299.166457][T28574] kvm_gpc_refresh+0xe1/0x140 [ 1299.171376][T28574] ? kvm_xen_set_evtchn+0x138/0x230 [ 1299.176717][T28574] kvm_xen_set_evtchn+0x164/0x230 [ 1299.181866][T28574] ? __pfx_evtchn_set_fn+0x10/0x10 [ 1299.187018][T28574] kvm_set_irq+0x260/0x4e0 [ 1299.191527][T28574] ? __pfx_kvm_set_irq+0x10/0x10 [ 1299.196584][T28574] ? __pfx_evtchn_set_fn+0x10/0x10 [ 1299.201743][T28574] kvm_vm_ioctl_irq_line+0x8c/0x130 [ 1299.206966][T28574] kvm_vm_ioctl+0x88d/0xc60 [ 1299.211488][T28574] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1299.216543][T28574] ? kasan_quarantine_put+0xdd/0x220 [ 1299.222003][T28574] ? lockdep_hardirqs_on+0x98/0x140 [ 1299.227308][T28574] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1299.233044][T28574] ? do_vfs_ioctl+0xbe8/0x1430 [ 1299.237848][T28574] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1299.243513][T28574] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1299.248585][T28574] ? __pfx_vfs_writev+0x10/0x10 [ 1299.253457][T28574] ? do_futex+0x395/0x420 [ 1299.257825][T28574] ? __fget_files+0x2a/0x420 [ 1299.262445][T28574] ? __fget_files+0x3a0/0x420 [ 1299.267237][T28574] ? __fget_files+0x2a/0x420 [ 1299.271880][T28574] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1299.277019][T28574] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1299.282153][T28574] __se_sys_ioctl+0xfc/0x170 [ 1299.287016][T28574] do_syscall_64+0xfa/0xf80 [ 1299.291525][T28574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.297773][T28574] ? clear_bhb_loop+0x60/0xb0 [ 1299.302481][T28574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.308472][T28574] RIP: 0033:0x7fbdddb8f749 [ 1299.312899][T28574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1299.332601][T28574] RSP: 002b:00007fbddea52038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1299.341118][T28574] RAX: ffffffffffffffda RBX: 00007fbdddde5fa0 RCX: 00007fbdddb8f749 [ 1299.349193][T28574] RDX: 0000200000000100 RSI: 00000000c008ae67 RDI: 0000000000000004 [ 1299.357182][T28574] RBP: 00007fbdddc13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1299.365158][T28574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1299.373223][T28574] R13: 00007fbdddde6038 R14: 00007fbdddde5fa0 R15: 00007fbdddf0fa28 [ 1299.381580][T28574] [ 1299.385108][T28574] Kernel Offset: disabled [ 1299.389621][T28574] Rebooting in 86400 seconds..