last executing test programs:

2m51.785399804s ago: executing program 4 (id=440):
r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0))
ioprio_set$pid(0x2, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0)
sendfile(r4, r4, 0x0, 0x40008)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000000)={0x48})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x4, 0xfffffffd, 0x34324258, 0x4, 0xfffffffb, 0x4, 0x6, 0x4, 0x0, 0x4, 0x1, 0x7}})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x2, 0xab, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x31d, 0x8000000000000001})

2m49.780400177s ago: executing program 4 (id=446):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4})
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x55, 0xaa, &(0x7f0000000040)="0750e05aaf19b2e1ee05c85cfd423a3a8f6aa5ff7af1f535cda8f3f45d0ae308dd4be7ecd1c7e4f03f9e90854a7d304e7cc3bf85e1dbc7605eae7d6db9484b73919658163cc02f3c71911e0d04ce0ef86d92372be4", &(0x7f0000000300)=""/170, 0x10001, 0x0, 0x1000, 0x54, &(0x7f00000003c0)="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", &(0x7f0000000180)="2c48f6fe2b923b2abf9c4fe9b6ad899847d1a8dbe41f43da45bf32be847550f745833f4baef3dec029ca3b50a4440771291d078210b684b0d3c4231a59fdbbd4f2ea87186867a5d674d5d54a3c8188f3982b2544", 0x0, 0x0, 0x7f}, 0x50)
r2 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001400)={'caif0\x00', 0x0})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x40, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
lseek(r3, 0x5, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce)
r4 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
ioctl$sock_inet_SIOCGIFBRDADDR(r2, 0x8919, &(0x7f0000000000)={'team_slave_1\x00', {0x2, 0x0, @multicast1}})
r5 = socket(0x10, 0x3, 0x0)
write(r5, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14)
recvmmsg(r5, &(0x7f0000005c80), 0x1b, 0x10122, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/raw\x00')
ioctl$VIDIOC_SUBDEV_G_EDID(r6, 0xc0285628, &(0x7f00000000c0)={0x0, 0x3b56, 0x1, '\x00', &(0x7f0000000080)=0x5})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m47.915840569s ago: executing program 4 (id=450):
r0 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2)
prctl$PR_GET_TSC(0x43, &(0x7f0000000040))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0))
ioprio_set$pid(0x2, 0x0, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0)
sendfile(r4, r4, 0x0, 0x40008)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48})
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x4, 0xfffffffd, 0x34324258, 0x4, 0xfffffffb, 0x4, 0x6, 0x4, 0x0, 0x4, 0x1, 0x7}})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x2, 0xab, {<r6=>0xffffffffffffffff}, {0xffffffffffffffff}, 0x31d, 0x8000000000000001})
syz_open_procfs(r6, &(0x7f0000000000)='net/ip6_tables_targets\x00')

2m41.083254444s ago: executing program 0 (id=468):
syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x6, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="df86912f218b0b8fa83de8a329f488c00a7831d45145bfc12324c2744b7010757213ebfa30ecd53e3297ce247eab6149aaa6b3547612464155fd255bcba023af7c0d76f0b6045fc848f3c51ec411579686b156aea1966787d31ebd49fdea289ec0f98159450534273dd23bc0f1e4faab12e5874a4dc5e3dc12f4c6d9abd981f5bcd5c7db6e10e86900000000d1e3c22ed18fd74157976891a53b7b99650cdac883e2e8e6f92044d27e6e20d4b96745e8c0962cc369d548b32d62ae39463340c3591024"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
get_robust_list(0x0, &(0x7f0000001480)=0x0, &(0x7f00000014c0))
signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)

2m40.729240699s ago: executing program 4 (id=471):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0xfc, r0, 0x701, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xc}, @NL80211_ATTR_VENDOR_DATA={0xd5, 0xc5, "b1fd32e4a9eb2d2a1a2190d52d4a73a80109e5102b9934d754af1ca7626ffc552df93d970c60152d893c40e4a11d46a682aadedcd9811074123d0dd23e7abfd06c76f65ad7d9208302aa290265d38c62bd52b99c04d9ee0d9823b5bd957cfefd3d8d5face2287f4ab65ddfdc13e1714cc5f1da8317ab4c69444a00c7c8a7ab0edcf9a1091442fa5a54cd371ad5d4179001c97f44f3e4eb44febeaf0702d65fcdfb7ba40d581503e0887ff5e27d8957c934476900176fbc227cb0f45d2f4d8e4e42075053d7888710b2739b43d2d4b23878"}]}, 0xfc}}, 0x0)

2m40.059800204s ago: executing program 4 (id=472):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r2 = syz_io_uring_setup(0x499, &(0x7f0000000200)={0x0, 0x63e0, 0x2, 0x0, 0x294}, &(0x7f0000000340), &(0x7f0000000380))
io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000001}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)

2m40.043297911s ago: executing program 0 (id=474):
socket$packet(0x11, 0x3, 0x300)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$mixer(0xffffff9c, &(0x7f0000000000), 0x200, 0x0)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e)
r1 = socket$nl_route(0x10, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000063110c0000000000850002020100850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRESDEC=0x0, @ANYRESHEX], &(0x7f00000000c0)='GPL\x00', 0x0, 0xffc, &(0x7f0000001400)=""/4092, 0x0, 0x44, '\x00', 0x0, @fallback=0x35}, 0x94)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="34000000100001f8ffffff000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r6, @ANYBLOB="08001b"], 0x34}}, 0x4004010)
munlockall()
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="34000000100001080000000004000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00'], 0x34}}, 0x0)
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
rseq(&(0x7f0000000040), 0x20, 0x1, 0x300)
r7 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x15, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'vcan0\x00'}}, 0x1e)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x202002, 0x0)

2m38.72393077s ago: executing program 0 (id=477):
io_setup(0x3f, &(0x7f0000000140)=<r0=>0x0)
r1 = timerfd_create(0x0, 0x80800)
io_submit(r0, 0x1, &(0x7f0000000500)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000380)="682962ab7bb63432", 0x8, 0x0, 0x0, 0x2}])
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x200000000001, 0x840)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x1})
r5 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x143a02)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r4, <r6=>0x0})
ioctl$DRM_IOCTL_MODE_DIRTYFB(r2, 0xc01864b1, &(0x7f00000002c0)={r6, 0x2, 0x9, 0x1, &(0x7f00000000c0)=[{0xa, 0x5a, 0x7, 0xffce}]})

2m38.683218686s ago: executing program 4 (id=479):
socket$kcm(0x2, 0x5, 0x84)
syz_open_dev$sg(0x0, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x20040004)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0xc3fd, 0x10000, 0x0, 0x6})
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x4080002, 0x18b400)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x530, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff})
ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000200)=@req3={0x1000, 0x3a, 0x1000, 0xa48b, 0x770, 0x4, 0xffffff89}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x4)
write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x2183, 0x0)
fadvise64(r4, 0x3, 0x100, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r5, 0x0, 0x2, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet6_udplite(0xa, 0x2, 0x88)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x0, 0x100000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f00000001c0)=@x86={0x9, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x7, 0xff, 0x8, 0x1, 0x3, 0x0, 0x4, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3})
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xa3bfad767b126e2c)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r9, 0xc0bc5351, &(0x7f0000000040)={0xf, 0x2, 'client1\x00', 0x4, "70067ad327c699d3", "78a45e16571ec69bc5afc81e679e50b0d40d6a65820e48ce9b168132d17e5813", 0xffffff2a, 0x7fff})
r10 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r10, 0x0, 0x0)

2m38.304621526s ago: executing program 0 (id=482):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000200)=0x4, 0x4)
r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x20)
ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000100)=0x1)
write$dsp(r2, &(0x7f0000000140)="755a5398d512d39077459e67ee110daaf0413bc745ef85b89f2141d513969bd8", 0xffaa)
r3 = socket(0x10, 0x803, 0x6)
r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000480)={0xfffffd59, 0xc, 0x4})
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x123481, 0x16)
write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './file0'}, 0xb)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000400)={0x90002020})
sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x20, &(0x7f0000000040)=ANY=[@ANYBLOB="1800faffff11adbe0000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018220000", @ANYRES32, @ANYBLOB="000000000800000018140000", @ANYRES32, @ANYBLOB="000000000000000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7020000000000008500000086000000851000000000000000f2fcff0800000018120000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095000000000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x774, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0xa, 0x3}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xe, 0x8, 0x280000}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000200)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000240)=[{0x4, 0x4, 0x2, 0xb}, {0x1, 0x4, 0x4, 0xa}, {0x1, 0x5, 0x2}, {0x0, 0x1, 0x1, 0xa}, {0x2, 0x1, 0xf, 0xb}, {0x0, 0x4, 0xe, 0x8}, {0x0, 0x4, 0x4, 0x3}, {0x4, 0x1, 0x8}, {0x5, 0x1, 0x0, 0x5}]}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='f2fs_shrink_extent_tree\x00', r6, 0x0, 0x4}, 0x18)

2m34.701962507s ago: executing program 0 (id=491):
r0 = socket$unix(0x1, 0x2, 0x0)
r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000200)=0x10)
unshare(0x28000600)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000000000000850000000f000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='ext4_writepages\x00', r2}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={r3, 0xfffffc7d, &(0x7f0000000380)}, 0x10)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

2m34.509918079s ago: executing program 0 (id=493):
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f0000000880)=0x9, 0x0, 0x4)
syz_io_uring_setup(0x5a20, &(0x7f0000000400)={0x0, 0x6c99, 0x100, 0x7, 0x288}, &(0x7f0000000340)=<r0=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000140))
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_io_uring_setup(0x49a, &(0x7f0000000240)={0x0, 0x79af, 0x3180, 0x8000, 0x194}, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x3, 0x400000000001, 0x9, 0x0, 0xf, 0x80000002, 0x2}, 0x0, 0x0)
r2 = syz_open_dev$usbfs(0x0, 0x76, 0x160341)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

2m23.269912134s ago: executing program 32 (id=479):
socket$kcm(0x2, 0x5, 0x84)
syz_open_dev$sg(0x0, 0x0, 0x0)
r0 = syz_open_dev$loop(&(0x7f00000000c0), 0x1054c3b7, 0x40801)
sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x20040004)
ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000140)={'\x00', 0xfff8, 0xc3fd, 0x10000, 0x0, 0x6})
ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x4080002, 0x18b400)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x530, 0xc, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff})
ioctl$SG_BLKTRACETEARDOWN(r1, 0x1276, 0x0)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000200)=@req3={0x1000, 0x3a, 0x1000, 0xa48b, 0x770, 0x4, 0xffffff89}, 0x1c)
r3 = socket$netlink(0x10, 0x3, 0x4)
write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)
r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000045c0), 0x2183, 0x0)
fadvise64(r4, 0x3, 0x100, 0x0)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_int(r5, 0x0, 0x2, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet6_udplite(0xa, 0x2, 0x88)
utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x0, 0x100000, 0x1000, &(0x7f0000ffc000/0x1000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4040aea0, &(0x7f00000001c0)=@x86={0x9, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x7, 0xff, 0x8, 0x1, 0x3, 0x0, 0x4, 0x5, 0x4, 0x72, 0x7, 0xfa, '\x00', 0x3})
r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0xa3bfad767b126e2c)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r9, 0xc0bc5351, &(0x7f0000000040)={0xf, 0x2, 'client1\x00', 0x4, "70067ad327c699d3", "78a45e16571ec69bc5afc81e679e50b0d40d6a65820e48ce9b168132d17e5813", 0xffffff2a, 0x7fff})
r10 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r10, 0x0, 0x0)

2m18.720456726s ago: executing program 33 (id=493):
syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x100, &(0x7f0000000880)=0x9, 0x0, 0x4)
syz_io_uring_setup(0x5a20, &(0x7f0000000400)={0x0, 0x6c99, 0x100, 0x7, 0x288}, &(0x7f0000000340)=<r0=>0x0, &(0x7f0000000040))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000140))
openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20100, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
syz_io_uring_setup(0x49a, &(0x7f0000000240)={0x0, 0x79af, 0x3180, 0x8000, 0x194}, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x3, 0x400000000001, 0x9, 0x0, 0xf, 0x80000002, 0x2}, 0x0, 0x0)
r2 = syz_open_dev$usbfs(0x0, 0x76, 0x160341)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect)

1m13.263756535s ago: executing program 1 (id=691):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_open_dev$vim2m(0x0, 0x800, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
clock_nanosleep(0xb, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
syz_open_procfs(r0, &(0x7f0000000340)='net/vlan/config\x00')
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000005", @ANYRES16=r4, @ANYBLOB="04002bbd7000fcdbdf2502000000140002006272696467655f736c6176655f300000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r5, 0x7a6, &(0x7f0000000040)={0xb89b, 0x3, 0x2, 0x2, 0x0, 0x2})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r5, 0x7a5, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c000280080004"], 0x4c}}, 0x0)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb00148008000d"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r5, 0x7b1, &(0x7f0000000140)={&(0x7f0000000780)=[0x447, 0x89b1, 0x9, 0x9, 0x7, 0x7, 0x5, 0x4, 0x990, 0x1000, 0x3, 0x8000, 0x7, 0x1, 0x0, 0x1, 0x46f4, 0x5, 0x5, 0x4, 0x5, 0x4b, 0x1, 0x1, 0xa6ff, 0xffffffff, 0x1ff, 0xcdf9, 0x9, 0x7, 0x2, 0x3, 0x1, 0x1, 0x3, 0x1000, 0xfffffffc, 0x7, 0xc96, 0xb92, 0x3, 0x9, 0x9, 0x5, 0x9, 0x2, 0x9, 0x9, 0x2, 0xcab, 0x7, 0xfffff111, 0x7, 0x9, 0x3ff, 0x2, 0x8001, 0x7, 0x8, 0x7, 0xb32, 0x3, 0x5, 0x0, 0x58b7, 0x2, 0x5, 0xe4, 0x5, 0x10000, 0x8, 0xfffffffc, 0x6, 0xbc4, 0x9, 0x2, 0x8000, 0x101, 0x8, 0xb714, 0x6, 0x8, 0x101, 0x92a, 0x4, 0x0, 0xfff, 0x32b, 0x3, 0x9, 0x8, 0x0, 0x0, 0x0, 0x7fffffff, 0x8, 0x5, 0x4, 0x3, 0x7, 0x401, 0x4, 0x6, 0x8, 0x4, 0x38, 0x0, 0x4, 0xac0, 0xd3, 0x200000ff, 0x0, 0xfff, 0x0, 0x2, 0x4f, 0x3, 0x3, 0x1, 0xffffffff, 0x6, 0x4, 0x755, 0x3, 0x40, 0x65f5, 0xfffff801, 0x4, 0x0, 0x3, 0x8, 0xd86, 0xffffffff, 0x7fffffff, 0xff, 0x0, 0x8, 0x3, 0x3, 0x8, 0x8, 0x8, 0x3d, 0x8, 0xf, 0x6, 0x7, 0xa1, 0x5, 0x5ef5, 0x5f0, 0x7, 0x6, 0x0, 0xe, 0x63, 0x0, 0x1, 0xa7, 0x3, 0x40, 0x80, 0x3, 0x1, 0xffff0001, 0x40800000, 0x95, 0x8000, 0x0, 0x4c0, 0x5, 0xdfd, 0x8, 0x5, 0x9, 0x51eb, 0x9, 0x7, 0x1e38, 0x8, 0xffff047c, 0xd, 0x0, 0x2, 0x7b, 0x800, 0xffff, 0x5, 0xfffffffe, 0x2, 0x9, 0x3d, 0x4, 0x8, 0xd, 0x7fffffff, 0x4, 0xffff, 0x22, 0x6, 0x8001, 0x6, 0x5, 0x7, 0x7, 0x400, 0x6, 0x5, 0x401, 0x8, 0x9, 0x7, 0x7, 0x9, 0x1, 0x8, 0x66, 0x9, 0x4c3, 0x1, 0x2, 0x6, 0x5, 0x5, 0x0, 0x5, 0xffffffff, 0x174, 0x8e, 0x9, 0x9, 0x9fe3, 0xbc99, 0xcd3, 0xd700, 0x401, 0x7, 0x4, 0x9, 0xa, 0x101, 0x800, 0xfffffffc, 0x4f49, 0x2, 0x1, 0x6, 0x1, 0xb, 0x4, 0x5, 0x1000, 0x7, 0x400, 0x6, 0x100, 0x3ff, 0x0, 0x6, 0xffffffe6, 0x3, 0x10000, 0x383, 0x40, 0x9, 0x6, 0x101, 0x9, 0x7, 0x80f, 0x340000, 0x8c6, 0x62, 0x0, 0x3, 0x5, 0x2, 0x9, 0x9, 0xfffffffc, 0x7fff, 0x0, 0x7, 0x5, 0xff, 0x4, 0x5, 0x2b, 0xb32d, 0xfffffdab, 0x8, 0x9, 0x80000000, 0xf, 0x0, 0x8, 0x8, 0x1, 0xe3, 0xbcf6, 0x7, 0x8b9, 0x6b6, 0x4, 0x5, 0x3, 0x6, 0x1, 0x4, 0x401, 0xa40, 0xb, 0xfffffc01, 0x9, 0x2, 0x80, 0x9, 0x5, 0x4, 0x3ff, 0x7fffffff, 0x4, 0x6, 0x9, 0xc58, 0xc, 0x3, 0x10000, 0x4, 0x2, 0x7, 0x2, 0x6, 0xffff, 0x7, 0x5, 0xd, 0x5, 0x379, 0x6e9f, 0xe0fa, 0x1000, 0x7, 0x5, 0x0, 0x4, 0x0, 0x7, 0xffffffff, 0x4, 0x5, 0x3, 0xfffff100, 0x7, 0x80000000, 0x491, 0x40, 0xd, 0x4, 0x101, 0x1, 0x613d, 0x40, 0xd, 0x1, 0x3ff, 0x0, 0xc, 0xfffffffc, 0x4, 0x198, 0x61, 0x1, 0x5, 0x0, 0x9, 0xf911, 0xb, 0xffffffff, 0x6, 0x5, 0x8, 0x3, 0x4, 0xffffffb5, 0x91c9, 0x4, 0x1, 0x200, 0xff, 0x1, 0x7, 0x3ff, 0xcb2a, 0x8001, 0x1003, 0x700000, 0x3, 0x8, 0x9, 0x7fffffff, 0x7d17, 0x400, 0x9, 0xfffffffa, 0x8, 0x9, 0x8, 0x5, 0x2, 0x5, 0x4, 0x595, 0x0, 0x9, 0x6, 0xfffffffd, 0x6, 0x5, 0x8, 0xc1d, 0x3, 0x3000, 0x7, 0xffffffff, 0x1, 0x30000000, 0xfffffff3, 0x7, 0x800, 0x10000, 0xfffffffd, 0xfffff816, 0x401, 0x7, 0x3, 0x388, 0x2, 0x7, 0xca1b, 0xf, 0x0, 0x7, 0x4, 0x8, 0x7, 0x80000000, 0x1, 0x3, 0x9, 0x9, 0x9, 0x747, 0xffffff61, 0x101, 0x8, 0x3, 0x2, 0x8, 0x1, 0xffffff11, 0x2, 0x1, 0x6, 0x9, 0x7fb, 0x2, 0x9, 0x4, 0x2, 0x8, 0x4, 0x2a8c, 0x3, 0x525d, 0x8, 0x4, 0x9, 0x2, 0xa, 0x2, 0x2, 0x15c, 0x1, 0xe34b, 0x7, 0x3, 0x150, 0x6, 0x101, 0x4, 0x0, 0x2c, 0xb, 0x4, 0x8, 0xfff, 0x56a, 0x4, 0xffffffff, 0xa4, 0x80000001, 0x20000008, 0x4, 0x676d, 0x81, 0x7, 0x4, 0x1, 0x3, 0x1, 0xed90, 0x0, 0x7, 0x100, 0x1, 0x4, 0xb, 0xf2, 0x0, 0x7, 0x80, 0xfffffff1, 0xfffff65b, 0x40, 0x400, 0x81, 0x5, 0x8000000, 0x3ff, 0x3ff, 0xe1, 0x7009, 0xfff, 0x0, 0xf0cf, 0xf8ab, 0x8, 0xb, 0x9, 0xfffffb54, 0x8, 0x8, 0x80000001, 0xfff, 0x7, 0x2, 0x7fffffff, 0xffffffff, 0x8, 0xfffffada, 0x40, 0x7d0, 0x5, 0x7, 0x7ff, 0x7ff, 0x5b5, 0x8, 0x1, 0x10000, 0x9, 0x3, 0x5, 0xfffffff8, 0x5, 0x3, 0x2, 0x3, 0x7, 0x5f3, 0x404, 0x1c00, 0x1, 0xfffffffb, 0x80200000, 0x9, 0x80, 0x3, 0x910, 0x8ec, 0x8, 0xf7b, 0x5, 0x79, 0x1, 0x7ff, 0x9, 0x8008, 0x9, 0x401, 0x2, 0x7f, 0x2, 0x80000001, 0x1, 0x6, 0xd47, 0xca, 0x2, 0x100, 0x9, 0x0, 0x9, 0x5c1fc33e, 0x4, 0x0, 0xe, 0x8, 0x80000001, 0x2a1, 0x0, 0x106, 0xfffffff9, 0x4, 0x6, 0x3, 0x0, 0x20003200, 0x5, 0x892, 0x80000001, 0x4, 0x4, 0x40, 0xffffffff, 0x9, 0x887, 0xffffffff, 0x3, 0x1, 0x8, 0x18b348da, 0x1, 0x8, 0x9, 0x1, 0x2, 0x9, 0x5f05d22c, 0x9, 0x0, 0x2, 0x6, 0x8fe, 0x7ff, 0x7, 0x843f, 0x2, 0x7, 0xd575, 0x6, 0x8, 0x4, 0x6, 0x81, 0x7, 0x50000000, 0x6, 0x15, 0x8, 0xffd, 0x6, 0x10000, 0x3, 0x6, 0x749f4463, 0x4, 0x7c20c2c4, 0x2, 0x5, 0x4, 0xfffffffc, 0x5, 0x8, 0x2, 0x8, 0x7, 0x9, 0x8, 0x1, 0x8, 0x9, 0xfff, 0x1000, 0x8, 0x401, 0x1ecd, 0x4, 0x2, 0x3, 0x7b, 0x1, 0x4, 0x200, 0xff, 0x0, 0x3, 0x5, 0xa314, 0x3, 0x10001, 0x9, 0x3, 0x6, 0x7, 0x0, 0xbfb, 0x10000, 0x6, 0x6, 0x1ff, 0x3, 0x7, 0x0, 0x4, 0xff, 0x3, 0x80000000, 0x7, 0xff, 0xbe, 0x4, 0xfffffffe, 0xfffffffc, 0x9, 0x34, 0x3ff, 0x8, 0x5, 0x8, 0x3, 0x10000, 0x0, 0x4, 0x3, 0x9, 0x7, 0x46, 0x9, 0xffff, 0x81, 0x7, 0x4, 0x0, 0x73d, 0xd485, 0xff, 0x9, 0x97, 0x9, 0x6, 0x2, 0xdcc, 0x5e9a, 0xffff, 0x2, 0x9, 0xfffffffd, 0x7, 0xf, 0xfff, 0x4, 0x8, 0x4, 0x3cb, 0x4, 0x418, 0x10000, 0x7, 0x3, 0xa, 0x3b, 0x6, 0x47a, 0x1, 0x7fffffff, 0x7, 0x40, 0x6, 0x81, 0x7, 0x1ff, 0x8, 0x10, 0x9, 0x1, 0x9c, 0xf, 0x6, 0x5, 0x3, 0x3, 0x6, 0x8, 0x7fff, 0x4, 0x8, 0x1, 0xffff7fff, 0x1, 0x3, 0x38, 0xb2, 0x8, 0x2, 0x7, 0x2, 0x5, 0x166, 0x3, 0xe14a, 0x7, 0x4, 0x8, 0x7, 0x9, 0x9, 0x6, 0x8, 0x2, 0xb6, 0x53c, 0x5, 0x5, 0xfffffff9, 0x3, 0x5, 0x8, 0x5, 0x1, 0x6, 0xffffff7f, 0x80000001, 0x5, 0x9, 0x2, 0x0, 0x9, 0x5, 0x4, 0xe4, 0x1, 0x0, 0x5, 0x0, 0xe7d7, 0x7f, 0x101, 0x10000, 0x5, 0xffffffff, 0x9, 0x8, 0xe44e, 0x2, 0x80000000, 0x4, 0x2, 0x1c0460d3, 0xfffffffe, 0x800, 0x8001, 0x1, 0x2, 0x9, 0x3, 0xa190, 0x81, 0x2, 0x8, 0x0, 0x86, 0x7, 0xb90, 0xcf, 0xf8e4, 0x0, 0xd, 0x7, 0x100, 0x8000, 0x478, 0x6, 0x1, 0xb57, 0x5, 0x7, 0x9655, 0x2, 0x0, 0xfffff5d7, 0x3, 0x9, 0x7, 0x6, 0x9, 0xe, 0x4, 0x7, 0x8000, 0x3, 0x2, 0x6, 0x6, 0xae86, 0x4, 0x7, 0x401, 0x8, 0xffffffff, 0x60b, 0x3, 0x2, 0xb, 0x1, 0x2aa, 0xffffbeff, 0x18, 0x2, 0x100, 0x7, 0xfffffffa, 0x6, 0x1, 0x4, 0x0, 0x3, 0x9, 0x401, 0x8, 0xffffffe0, 0x7fffffff, 0x0, 0x100, 0x8, 0x101, 0x10001, 0xfffffffc, 0x8, 0x7, 0x10001, 0x5a1, 0x4, 0x1, 0x4, 0x8, 0x7f, 0x3, 0x7, 0x7, 0xc8, 0xfff, 0x149, 0x0, 0x0, 0x717e17b5, 0x2, 0x5da47ea8, 0x4, 0x400, 0x6, 0x7, 0x25, 0xd, 0x788f, 0x6, 0x7f, 0x71, 0x1, 0x0, 0x6cc7, 0x6, 0x5, 0x9, 0xfffffa99, 0x1000, 0xffffffff, 0xb4, 0x9900000, 0xd, 0xfffffffb, 0x7, 0xc, 0xf55, 0x6d14e279, 0x6, 0x200005, 0x1, 0x3, 0x152358f9, 0x6, 0xf43, 0x81, 0x9da1, 0x0, 0x6, 0x7f, 0x8, 0x6, 0xa1f, 0x80000001, 0xfffffff7, 0x4, 0xf77f, 0x5, 0x3, 0xc2a, 0xffffffff, 0x6, 0x80c, 0x2, 0x13c, 0xae, 0x2, 0x3, 0xfffffff8, 0x7, 0x3, 0xffffffff, 0x7, 0x8, 0x6, 0x1b04e], 0x2, 0x400, 0x8}) (fail_nth: 1)
r7 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r7, 0x0, 0xf, &(0x7f0000000000)=0x2, 0x4)
socket$netlink(0x10, 0x3, 0x0)

1m12.003730022s ago: executing program 1 (id=693):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000500190001000000000e000000001c140e00fe00fe0100000000"], 0x1c}}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000000)
r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="06", 0x1}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559", 0xc1}], 0x2)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
getsockopt$ARPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x63, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000140)=0x1e)
setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, 0x0, 0x0)
close(r3)
ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000))
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$x25(r4, &(0x7f0000000040), 0x12)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00')
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r7 = dup3(r6, r5, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r8, 0x80009)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000640)={@ptr={0x70742a85, 0x0, &(0x7f0000000540)=""/218, 0xda, 0x1, 0x2f}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x3c}}, &(0x7f00000001c0)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

1m9.803852246s ago: executing program 1 (id=695):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, './file0\x00'}})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r7, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000f9ff9302"])
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000edff"], 0x48)
sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a32000000000000000000000010803c3268d361effa0752e923031f01d07c4b3f9cb6"], 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00', @ANYRES16=r3, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0x4, 0x4, 0x1000ff, 0x4}, 0x50)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r8, 0x0, 0xb9b}, 0x18)
r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'hsr0\x00', <r12=>0x0})
sendmsg$nl_route(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x58, &(0x7f0000000100)}, 0x9)
r13 = accept$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10)
getsockopt$inet_mreqsrc(r13, 0x0, 0x27, &(0x7f0000000080)={@empty, @remote, @private}, &(0x7f00000000c0)=0xc)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000a00)={{{@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4f24, 0x5, 0x4e1f, 0x1, 0xa, 0x80, 0xa0, 0x2f}, {0x8136, 0x2, 0x3, 0x5, 0x6, 0x9, 0x2, 0x8}, {0x8, 0x9, 0x4, 0x9}, 0xd1c, 0x6e6bba, 0x1, 0x0, 0x3, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d3, 0x33}, 0xa, @in=@remote, 0x3507, 0x4, 0x3, 0x76, 0x9, 0xfffffffd, 0xd}}, 0xe8)

1m3.887494094s ago: executing program 1 (id=703):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x7}, {&(0x7f0000000200)=""/126, 0x7e}, {&(0x7f0000000a00)=""/261, 0x105}, {&(0x7f0000000900)=""/227, 0xe3}, {&(0x7f0000000800)=""/232, 0xe8}], 0x5, 0x0, 0x0, 0xfff0}, 0x0)

1m3.465826883s ago: executing program 1 (id=706):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=<r2=>0x0, &(0x7f00000002c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r4, 0x80, &(0x7f00000000c0)=@hci={0x1f, 0xffffffffffffffff, 0x3}, 0x0, 0x0, 0x1})
ioctl$TIOCGPTPEER(r1, 0x5441, 0x8000000000000000)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000040c007241500000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
io_uring_enter(r1, 0x47bc, 0xf5, 0x0, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x2d}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x7, 0x5, 0x77}, {@broadcast, 0x4e23, 0x0, 0xcd, 0x9, 0x3}}, 0x44)

1m0.583772491s ago: executing program 1 (id=712):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
dup(0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xc, &(0x7f0000000140)={0x24, 0x6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[])
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410072786500140033006c6f000000000000000000000000000029ad42c3d3d7be17577b10e40e87ccec1bdb37e925d822d8b68a44ab336f3ee8e4fd1fa41d449e77fd765bd65dab51f008787ce7b583f7cb8440de33103436b37963455b0a09cf4c1d1ef931bf9e65f33d493370e5e5da9a88e77c2872f0e8139950e6abb5cf555f9d9ab1f261ad4696254fb0958788cd764caa08b34223e0f3714f3935d98a036a5d9be01a46"], 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, <r7=>r5})
poll(&(0x7f0000000080)=[{r7, 0x113}], 0x1, 0x9)
recvmmsg(r0, &(0x7f0000000080), 0x5e2, 0x2001, 0x0)

53.067481137s ago: executing program 5 (id=731):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x6a, 0x5, 0x0, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x7, 0x1000000, 0x0})

52.564808018s ago: executing program 5 (id=733):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x10, 0x6169, 0x9, 0xd3, 0x0, 0xffffeffa, 0x7, 0x2ac8}}}}]}, 0x58}}, 0x44080)
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0x9, 0xa}, {0x1, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000)

52.140505877s ago: executing program 5 (id=736):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1000002, 0x810, 0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000000, 0x10, 0xffffffffffffffff, 0x10000000)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x40, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ptrace$ARCH_GET_UNTAG_MASK(0x1e, 0x0, 0x0, 0x4001)
shmctl$SHM_LOCK(0x0, 0xb)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}}, &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18)
r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r6=>r5}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'})
getpgid(0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x0)

47.151254377s ago: executing program 5 (id=748):
syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2)
getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x6, 0x0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85000000750000000400000007000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
get_robust_list(0x0, &(0x7f0000001480)=0x0, &(0x7f00000014c0))
signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)

45.677849509s ago: executing program 5 (id=750):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0)
mount(&(0x7f0000000280)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file3\x00', &(0x7f0000000000)='erofs\x00', 0x0, &(0x7f0000000380)='acl')

44.654659979s ago: executing program 34 (id=712):
r0 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x3d10, 0x4)
sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
dup(0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xc, &(0x7f0000000140)={0x24, 0x6}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[])
sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410072786500140033006c6f000000000000000000000000000029ad42c3d3d7be17577b10e40e87ccec1bdb37e925d822d8b68a44ab336f3ee8e4fd1fa41d449e77fd765bd65dab51f008787ce7b583f7cb8440de33103436b37963455b0a09cf4c1d1ef931bf9e65f33d493370e5e5da9a88e77c2872f0e8139950e6abb5cf555f9d9ab1f261ad4696254fb0958788cd764caa08b34223e0f3714f3935d98a036a5d9be01a46"], 0x38}, 0x1, 0x0, 0x0, 0x55}, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x4, <r7=>r5})
poll(&(0x7f0000000080)=[{r7, 0x113}], 0x1, 0x9)
recvmmsg(r0, &(0x7f0000000080), 0x5e2, 0x2001, 0x0)

43.830949035s ago: executing program 5 (id=756):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x1f, 0x0, 0x2d)
sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8)
r2 = getpid()
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, 0x0, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x325900, 0x0)
sendmmsg$unix(r4, &(0x7f00000009c0)=[{{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000500)="4894c9c6176d66f1c03604e7de5053de1aeed34262407e4c86e51a9d4213f4f6edc8bd8f58b4f568ab6e1d3c3f21109d4e2bf954bdd29a129452bfafed597a8d5cdd0a4d8ddd6fb08e1cbfeb53efc38118e61d7a3bbbd1b16724b210d1b4446e74bcf5bc531a796577b7b2a0b9a0eaf22078b315c2da13674c370e619906bac2c3474911d08ed2a9e79699", 0x8b}, {&(0x7f0000000700)="84ed3acc12659fc24f94217eac463d97b4d1d74742e562c89e1616e9a12237571c7952921ee85ff3314f98196bd35060793c8284fce50fb5b755a1eba802ba653cdfb7f97c762ee0e45e302c43aac9107503c26fe5d0b3927f2d4f6e4adca3c3ecf29dd9df631215fcad693240aad8c11c96593d50e4f5602777b36f9b9070d52011db6f4d545edfbee67c4634b47c87aceab64a50f8b0c04b92605701a1ec600db26cfbb437c645097bc9e040eee0c76deb77b2f25dfdf34608af7649cad2c7f256711c727acd93c006077eb60c5fe1958898c7bb0d65d115eaa345fcc4ce1ffe13ed4adc8f1eeb7157cde026221edbf8", 0xf1}, {&(0x7f00000005c0)="9504eba44aa5eba00348e43ac8825e708203ec076aec12bfc0e09088521980e11b3b2347c312f2a391f47bf97855a89c5c9431b3c895402a602004990f0a7f67d4fecb26", 0x44}, {&(0x7f0000000800)="4f704a0b5b066442ce3c9ecf4cb50399794120306d6efe1b539d3ba8928a4ae8106bcd3a44e24ded3fb84ba5e57720c9088bfef9e035e7c9b93f2efbc20e988f9fc82288f5114d094e3809ce0b7229c942af4a91e4154a915f00931ffe1fc96a306cf0f3a387c200d5539d0531083306fe6f8e8918", 0x75}], 0x4, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {r2}}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58, 0x4000004}}], 0x1, 0x8000)
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f00000011c0)={{}, "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"})
ioctl$TCSETA(0xffffffffffffffff, 0x5406, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x8040600)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
r7 = fanotify_init(0x200, 0x0)
fanotify_mark(r7, 0x39, 0x1a, r6, 0x0)
r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000380), 0x0, 0x1})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="f80000002d0600000074de3c004b44d855772eb208c13c9ca3be3164aa658ae03f89907ad1d8000000000000000000", @ANYRES16=r0], 0xf8}], 0x1, 0x0, 0x0, 0x2000000}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)

8.211958692s ago: executing program 3 (id=848):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x7, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x1000000000000, 0x0, 0x20008080}, 0x8040) (fail_nth: 4)

7.638684737s ago: executing program 3 (id=850):
pipe2(&(0x7f0000001180), 0x4000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x200}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r1 = accept(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000011c40)=[{{0x0, 0x0, &(0x7f00000070c0)=[{&(0x7f0000005f40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xde3ebb5)
sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000004e425fa7acb645f68a6de0f0073a5866e119f60aa90704b058ef1e1f1e37a64f48ade816af47ab64f4e2763054358c74f548b2ad21c707b679812447584f70d42091b4d6c8d2d9f35e87dd00000000000000ff675bf22e1b61f400"/105, @ANYRES16=0x0, @ANYBLOB="00000000000000000000440000000c009900000000000000000004002380"], 0x24}}, 0x8040)
sendmmsg$alg(r1, &(0x7f0000000680)=[{0x0, 0x0, 0x0}], 0x1, 0x0)

7.360322161s ago: executing program 3 (id=853):
writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x4, 0x8, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x18)
read$usbfs(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r5, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036887fbd52a5e1fcea0727799ee9e5e9baae5f8277a4"], 0x38}}, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newlink={0x54, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, r6, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4622}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1ff}]}}}, @IFLA_IFALIASn={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan0\x00'})

5.339212976s ago: executing program 3 (id=855):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0)
write$fb(r0, &(0x7f0000000040)="d6c9be611d391f24c07a75f33f430ebbf8f541c724a8f88ced8b51be482493a01bbb5ac4ec877b50c8b15b251ac3c27162013b22a9166e74a4b528846f9b614e8e22f8d9", 0x44)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0xa4500, 0x0)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, <r2=>r1, {0x1}}, './file0\x00'})
read$FUSE(r2, &(0x7f0000000180)={0x2020}, 0x2020)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002200), 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x4c, r4, 0xc20, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan0\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x20008010)
fanotify_init(0x8, 0x800)
r5 = socket(0x2, 0x6, 0x401)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000002340)={'vxcan1\x00', <r6=>0x0})
bind$can_j1939(r2, &(0x7f0000002380)={0x1d, r6, 0x1, {0x1, 0xe, 0x4}}, 0x18)
sendmsg$kcm(r2, &(0x7f0000003f40)={&(0x7f00000023c0)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x10000}, 0x80, &(0x7f0000003980)=[{&(0x7f0000002440)="8ff7bfaf7d06fa77bb2abcc9725f2b46c9e2bcd98afe8a843279a4887d0ab885c3ff17fae535d879c565ffa4", 0x2c}, {&(0x7f0000002480)="211256be8627e0aacc937d0528cd3366fb33649053b3a544ac64beaed95deb0624a6b2c5644436965a66f7fd7ad0611e5e110e40a4531c1c2ae75956989254bad96249e8664fe473f5f60b929d2e1a722200ecea724f67eab5100a9f822e6eac6215d5946c1fc157a28f16c4cbf4763e08b0a9e7b346d62d0dd5b91d8620908f7b4e6a850916d66a44eec102965a10cc47e36686a8803433e9e9e526d6829fdc5faecbda3c9817174bd54f54cce43a4d91465d4a519d4fcdb9df8ad9286039fbfa82568facee9eabb64de1b793b3f32908bb17a0d2a8721f16a39912724ee55567a4489d512a65197087d3b6551776a6dca00c026af04bb475cdfc21c55d74297cc9cb65543c891c520d7a82cc96df56e2e51f29894a29a6eb00fa451172befeb8ac7159aec3349273477d0eae6ff86d7bc4f85d3915f7ec098663191a05a48994eaed9389d6e6f1181dd33c00b483d123717573a3ef3cbdf650d30f9d41db07f502ea6301a538f930bcf477a575f00ced3d82b4a2a9391b851cd5ab407c7758ea7feab78128053a66979e9d60617ac2a912ebf58f59397190d78ddd166bb922d35489125ca19392b92ae01120100b5fe8d65f255acdc064f4a7f69471c98140dd84e9c4a86282da82d199352a40320ea53ab5a4a7b415534d9423c2526cbb9380d46ba2933e6db30cb08c90608f656f8da2c5255aa489b3ed748c05957d8df940b48fa716150014d0da51a7323de85b1dbde8960b25e62eeaa386b9e6698a574cd4d04b3927b00888c5b53b7d6ef2eb8daf6c21d6b5beab4e9e0446810e9a3f375e81d1e8379f7c1f822bec9725bd294c9302e879bfae5fb67d1d783ee47ca4e37a2ffc9a849a08507455fcdcd0a7d63b5a933d16a6eae55eee6aced4907b14b3a003e6f9d84094817c1a4f7ca19bd569f8c08f0b9d453021c0ed3730b51c5324f3fb514473cd2f679c6a2b0b31dedb22c03efb62c48b49a2c4c963408ebd6e74bd6bcc451b2462f40a6cc289e80789f1876c9c0a7e9090af3bee1f55bacfad5d0fc0bfbb7d1f5a420f96b91c62390277e65a1422c771569df1d76313006bc51d597d02be72bcd5893dc858eacfcb1f3f9efee14466e2baf35bb379086b38e2de744d9485aad09c7bcc5b196cda9293136374a3f3ac47c7ac22d7288963c3598fd54dbe4b3ccf2f332154595df7b477df4360ebc133ec15491ba3f0490b4e39f217f9562402dc016c3100e90e1d3a5f8a02a3b946c32b85084bba666f9bcf6083adb342014b385e2ddbfd193dccfdf6d9abfe3dfcf1c5491ae5963455202b2fc0578c4a65f18e5d4df5fdeeebb38640c59a669f418031c37f3bab076ce739d4de0d2340a19abebc05973b6ed8309aababf7710d757e36a97fc9b5ac3f0040f209dc3fedc510b9f7284ed94f81d07c79c048044f18f5efaf31cfecad25d6840c5600f9b7b5b65a2b807e03f7731e60539b7c7ed7cf7ed7b07c7fd13a226c10a8a32962a643c640648c8c90ddb93a7add1d9318f5499afd1e309e8ead85276d13677e0607e16160537839b338b8efd351fc55fba863d5efbda3bf26ead6ebf0f52c6eea7700c247bdef9bc2d62d32676cf7dbae047c0b31c6a5f2eae753997587335b4ddde0f7ccb34bbe8738d561865c10efce8af8c0f686fc31227e27d80c35555a7de7759c6de4cc45d12d59124977c3c33f0509145045da6b6d3cd268586abaf4960023db898238d53888d814bd742e714b3ae68c801cab70650ffe53454e4bafde6be6b612b8269919314edad6aaeac96b4a8b0a40dbb7168509059e24a16cbb9a48c3e624574b9cfbf8df04b1a7cc95fb5b7c4100fcef4ae14385318dd5110648c3f2f4e1cbbae8425a2229f501300fc66c25d357f0a07aace69889e8d7ecde53d47369f43f2dc758ab10be2ae5fac29329cf53b7fd454f9cc63824b4f0ab7a58b91a1fab79fa6c1811baa20b30932a4f2fdde27c3b19a314ca41661545e0456f33ae4da7ac93000c57c1e62d88eba8fe418928bf78d623e6119b99bb16325dae1ac6c7ef2aa7518a7f76dc4fec78b5453e1a61b2b6ff70361b39a84c3c8fbc196408e515bd76db547c5a0dc8e36d5dadddc34f6191cef23ba723a7744122e2b44c851feaadf7a989a2dcfc4a1ef94aecdb5cabff2d9dbdce6f52790997017613d13b19678ed0b40471bc8cdee93bd25bdbc9f4a9a492f7a367df18d890b4f0d69df63afd05932ab8ba7420dc39cd8313be42299e60957095815b621bffde6ffd8b7cdfcb7f3e7aca2eb71402a81ff12d6cc96218260f19757e8195cb81e5f37949df297e377c484610e599784f6d2a512738f2cf27f9cca63a7dca4aae5af6d193f61d4708c7a980ce05bb4433d9f93ab9ceac6bd84b22ad927e2ef99407f1b0e0a2e97b37b1895b9f006febb76c2d0511f0b68592e9ce3c616b66d27b5b632c4600621fa151c246644da01444173dc0966f39acbaaf61c2a716cf95fb3ebb3b8ed59003ad50552a1108a9038431f06cac0c7ca6e6de1927b17ae8319f7976316178c990cc736feb27819bf1cc5a407c1ce68c5f42f93df0d7da15f698ded2d37eb75377e279cb7f7c7c9d8d0601ff2bbd297656a976f83ab70db96e28e8abeef97455e2c4f9afa2e35b310d06c84aba8895bdba8295c483cfccdbb56e64ba3af052eeb963c30a125482333c9717e14ef58bdf266d825e8bcb41726e8956b6ee441c19be89103b27c86473cc7bbe2062f7674d0ee88374901857ed9331112ccdad23c3ec989fa4cebd50a913f3569b1a7f335ae7c0864e5094c3b4609631c4e720309b2f7ffe01e0f603769766a6ab920a297c9d3844668d88cb63e6f48987716fe317e63fbbbcb8838d435780a33dfdc4b69409d9d03766c6aac4c036e2df0b3374fba64e3869999e8ecad5aa55bfb54cc32a80903caa8b24d0ced8808874a58501fc49d51d4eba4ae5a2f864f68bb097ce19e545d4b573a223f0deafe8b64cb1dc13234e52ff9b16b458d86772d4874aa574837f82c81ef45d65c90e7ddc1bf6a2fc4b8a379935405cabc4f141bf9604e5fc924c5a6772f26c5ac3f188ed7e442f89e5b9983a18ffec1dac3b0d6a75316dba7a53faa6bd822b8072abebbbabdfd732cc4c624ea3472d5a96b3233e9996103beafbb2152250521c2af9e7d0e5faa9b1926408cc5e352d3b04cec183ec1f1200c2284ba43c5dc14e25f15c773e8828718565e2c53492431096bfeec4413f1b4fef3262694e37b287d85f72531da0ae32cbbb632bd66736957b2c63e7f1fbe9f98d901d74cb05056146300d8205b6afe2ccd152820ed9c5e413efbe490a14beaeb6f936e0f6d01a7a9e3620311a8527d1c6359affc67c4c27750fa05562582d83fa01687ab115ffe6f851dea436ff143640f6ef6defa0904e32234ffaf80282013f44c8277110555243a2c4143e4e575cde0b18dae3ee8ffa61c5f0b3aaa7bb86325bb2d2f226b95a4594e7fb64ea864f7f74039c8919b438863bf5a544409d91b56111e61e7023e2c8fb6d5d2fec84ca9fad06c569a5838fb441db36c670d9cf1f14c294989fa89cc55b84afc70839d08ad364736da0d18dcae411bf6fa6d5365908da72de8c80d641a7ecbb71640307e88fd630279fe0c67b2ffa8dd351fa96f25209b3c0991c962cadf04b07229619788c91fd6bcf7b9cc8ecdb9f8c2e334c1b1038e00ada3cacd99c772fb9ee2ba5ed72b5ee64841472fb42741df6d11a30aa976c01c671400c5d57efab88d654d4d1336b011840e0d4904e1194f0f92a94c67ca07a91c06f68cfbb97f47ffafecbd75d93837256b34db73a2e74ab0d673ca1b3c18b7c07df6ea94a7b3c6487bbded5845b4de9a77e91c2b8696f460a5e09cf013c2291e77e7d470417109ce73de81cecfb46267a1be8d409bb036114e81716fa1479b7d6ff47803c2f597af6fabf89b84fda9485bc54d7d2c6fae035c2b324847921f598204338b5a0bd9f46d9a183bc567dba0ce6178964e68652829fed039aa4f9807abb0bbf62ffdf877d038cfafb1e67e9edd52164ed30dc6b1a225941c431ce5b2c1ea18e25641928b49fb8b2fdd66c734eead26bc760b86fd43d1bd74fdb0326160becd16e9691bda503e6eb0dc24368fc06bb38c13fe0a772cfe264efa736061da126049ed0164a9fdcf66519ffaf5357a482588d04a2093da8b4c40d3d89538cd15184d76b49fad2de2e713bb28707c92e557d499fde95920ab5e03dfe0d63e88d77e3a15ca06f5a409e00bf6e2cc32136b1a196fe10121ee87d2de5146c577ccd5e8b981efa51b971c7222fd4f76846d0610d71f0d901367c2c1a3b8a41014ddf02e9bfcd2ae4678542282821033aaad1a77e2d5be4fe3cd88e0394a275edddefaf13f7c21672d64c3f9a09600e9e04096f4d9a98c550614d23a0bd90b70691899a7ce99cf8e5a5eaac2da6379e6e2cbae885a0e5d3c0feeaf9c18d70b5f9f3252b7a5882d21d72dc25aaae8002a207dc861bccfb6ae3b83bf638f4c182dd84923269290d46023e8b486ef6ed120682ba6a13df3e5c457decf7079ef90a8990037d1fcfbdbd9035e396277afca10d67fecc94f8f5621a150388c5de3d78f848d58bac6df528b4ea66dce84b3f174d44bd1ec5f4354c9a99ee061ba03a00ec3389056c388b7d0b10eabfdac06886c30aca8499b90dc907b9f5127ae3ba51fe47b57aab89ae5561bc1452b1768973e980dea1ba532e143443705543644bb2eab92818ab953ef7cb3c25f47bfedbc9ef09c5c3b8cffa232a5bed6339ae8317e59e4c8aac7cf413bb4a20d6dbef98243cc3e6616c42e37d2da8580f31a6c72d368f70f29d255e841a9aa06db5180a2ac1df0baf9061ded454bd5fdfc04fa7017c5e129ce91bac82e7e64536f2565caa70b2a5f71f990678612597cd0d9fc4483e2424498f77f96610e5359ff4dd0b6c5974626f4580882d92cd50bae6027d22b81954d03a2a8ab3071efbef968821a575ff040e4dec4d9c9a84cccbcb90824634ef6ac1bc950b7fec768f541f1b508d5890b6e19371da95bbb4c5afcd184abb13955c4e5b0503079ce5e8674e2d6bc21a2d9d33c44b6743e76b72f48fb083ed5c77f7c24316f39d6e75e17014b2900ed3206ac9afa9a65115b4b952d98f6b3245bc68505bd7c94cdc9b2310920ea6eb5eb6ff5afb9c56f64938773b12653199711cc5cf203a6dc8e4b3ea803752a902d70836ee20f80a5cc1f229a301588df808b08e1ea6537751aba0fcfae9205e460686cd603781e1fde43409e6f4820e633bfa4c22e0bc92eb1d4bd2c473453e3375f80caae9744bba64fadef62c649204607ea0ddc7c752a59f6ef2fb696605202995a0709c36946d6b431433e4570bfe2a07316d375a3350db26cc3bc2b9a388c9ee597da1faf150fcd86d96f21925da1e5c0ed5b1502f6aca9e4aed29c9ba58231162f04751671d1ca06eae468ba6640aefb94aa0b9731c2e4e485b40cec7d1311995bdb678638d365d7bfd114eb27c425d26d7013b27b1620073941341152f3c0f40010a68a0d106d2ae9ef44d5fa5331330aae3a9f1b8b25d8a28b29cd91a1950be7f224f4ea20b55082de5820494bc0020e1845ff0d698e6e6a4a2dc217c01cd7347eda176a1ac990336a96c3743e4521079dd2b959d47050ae4d68ca64b26225bb964c43abf93765a036b3b7275c2e5ebaad047f965540468940f378f54e46b2e303ea69ca762ff4eb34a1068827e3c318a8b49b97c54b07a068a40027cb1cfff51073dd3947672f3dadb8601e2aced38e8f59a", 0x1000}, {&(0x7f0000003480)="32776274fd867e4e80cb5356397dc1381b5931efa7ec727177e29d1bd2046f3b178f053667301b630efd0636ee560ea0fa1a14ebc2", 0x35}, {&(0x7f00000034c0)="9bdb5252c2f74f03c6b19b1862dc0a0df83fb948dcd0e26528af41ac5dfd29c5995e9c060d703db6ee39fccb600f79d2d046f4f54bedd82325521ad9368936911112019616ecbd17edc61ce07591d7b526c9d08b2ab1058a5239c0340e0f6738691ecf1fb7ee533dd0a996444f5795fae4ac0b163321ded6bf411d4a07261768ecf17cf4d18d1f727ef79256153d4a7df8d40ca3daa4ba587da869ed9c2f9704738ad483b5f748475ef937d3a8576e084c9c680b6c469db05e976e8899a33d76", 0xc0}, {&(0x7f0000003580)="0e9929f0e04837671f19b977dbb997215d4054c5fd1429a3c70602e6fdee5e931ba8de1d302b16c298f5c7160712e77fd3af3f6fb2504b735d42665a23957c3561693f31346d36dccd8f4bddea1a197c4c4412f428715ca3b53e3dfa671bcef00977469b81b015d90a67b5203b2789a5ed6d2b8ddd259c808771c41a698b1ae6ae69671b276c8192e8a007ba4f27cec979f9a3231a93ebd86b92f2d335dbfdca0bb2dc1406fee64c014a3e4c77786b2838bf88f426eb6e9ee3a4f48aa92b8f90b407ebd43c60e8f3b924224068266b14cb437498747babdc145aa9f94a9dda", 0xdf}, {&(0x7f0000003680)="b03ca13e224a460f18316578bb7876fa57a4e14b94a2a30bec3cc018c67994a00a8ea3bb426dfb2fe4c960d2b756a44859bc663a4ca2a2918e7b5cc663676956a6a9ca65a938db575be6522b1f9c3ab84f401d7ede61d300774652399c73c88c2c94202d56d5b35fbe172a22e7837234fdb5a428471162cf71f7cb22030f16ad4748279fd4d0a13bbc8b7b326f242987387fb7", 0x93}, {&(0x7f0000003740)="81f7d92698", 0x5}, {&(0x7f0000003780)="77f1dd67a56c2bd3e7b88d2829679250d40578081641806c54fd9cc8562a79218b7148a7e9cc2f033a479dffcc749446a6dc95413cb63f93a9fe7303e5d5157136a8fd3fe260e839fef21ec75bef2084dba2e00ffa8e7bc129425ab4527a27022ab8008b863b988b51a6325f20136e65831d993a8fdbff56595576509b8347da30644e95748be1d9f2fba0e6206d24dcadb67fe04de4d88d7422474cb5514eac283168cc", 0xa4}, {&(0x7f0000003840)="a2b8dfdc0b7431d307420d11fe2772cf97d40aee5f59dd00a3523200979f17b5b1092a6e7f93eea2a8e00f2adcf2b79cdf6e579d35161c02f51c9b24ddfedb8f672b1c464cb1634460506b73445d51439cd7a321b97ad9c68acd08a569aace9d7afa490de139809c9754b76190b7f0df88154e13b1bda59cf3b91336ac764c1d4dfb9fdb86e270a6c6669e667019456fe4417742041b9b649ebded7817f2528f4afa5e1fae2a6e7b03df6236da657fe06fabc20d885375d6ceee43bd077c7b21636130fdaadb2144a1fbcedb1b", 0xcd}, {&(0x7f0000003940)="031e4479673a1ede79185f319f39752700a097", 0x13}], 0xa, &(0x7f0000003a40)=[{0x40, 0x117, 0x5, "c47ee7864a11affed9e4998bbb4036d892b19762af73216619ef9ccadd47e63ae2fd61d926a94e89409a"}, {0x50, 0x3a, 0x0, "54d71555769ea9d6e2e334ba59bcf5662f9859683649ea9dcd983525970f5321fd07ce73a73e76588b184a7e31f8ba98a31214cbadb6f6143daa078a"}, {0x58, 0x116, 0x5, "1d49c2e7882f707a718f5f1bd5f46524804b82bd0ec593e7d4663ed3a4290f27b7c9dbd5be5e801c6d97a6a9e57fbd73aee68d10ed161120fe03bd378abf8e26f66d2f"}, {0x108, 0x119, 0x7fff, "f5bcc9db479052c82839ea36efe5c6abd3664cd349fce87661fdf953d45542d0124375c4e74e754e4abc4346dbcf648556aea16e557809d1ff139a86c3df77e22997f83bd5691c28b79caee1393134da7bc4a9854abcf701d50c4bb42a9a2391d2f0285018df728c882fc1f93a17b40d5d332dd98e3ca0166b1d3dd8d71fef86dbed3f4b6ec50dac545ddc879cbc3615ecc8caebb271c299b9569fd74f557a9bd9a64293eae5ed3611d4c60cd4e61b0dbbc8f53bb0799e5e29e292e451e53dc83243b4e8d99c3a399ae8f1224ebd7dd4744f5c3e3a59ee34ea84097c5ad69a46ab4c94c7b765258a9c63b9480aed45cf28e7f2"}, {0xc8, 0x0, 0x1, "7e97fd158d97cb5f17fd8e4e52594eb6be38688767ab564c81cc261868163beaa8dc8cd880bf0a13c21f6749e4163c84dbc37b1ba96e78b48e0a5733b7c68cc15fe1406e2173cec593c0e5c204301fc2c5f53ee257455f725ebab6d9c8ebc42401571000231d38cc25006b205932d2b627d56f3b1f5fad0c47c22ce291d00197fb171991cd6d8fd3664fb63d41ad0d0b07de839f893f3462c02e988a8b94dba8ee379b951aae77840b218a0374311c0612f8b56f6938a384"}, {0x70, 0x0, 0x7, "5e26b600057b33856d8f454c66366af9a75bdc720926971c93f6f72f0117897cb6f3c6be111df5735ff1fe870b81114acd7ed9bc03d8ad1235961d443406cc5dd59bfcc63d259c4b68737c203fb69d180dfd58aae08d46a02cff"}, {0xf8, 0x116, 0x0, "f6d80a9091baff3c7d79be4d059c003788e5e9817ee76651ade32ec043398f585506c57b216953b5ca4af8eaa1ce9417e0fdb76718f604d8b5d78eb40832d7140e3bb9ee0c7e0101d6fb14e71dbbd4896a0b1621e8e181572b268b7c183f4e63d472f395377b2d4d144873cb7b9ee77b0ffe29df58873d554894cee65666c821376f382a4bc1412842bce11f6c7510de58fdcec7198cd8807dd131ad1c46415a60f49c69ecb1501a59e336870f6c84ea2ede0a702583fb628a3e0e89e92d37cab155955d2a3f4a550b89b445b2cbe08f88fdcf6635f9ab5526e2d066c5695780fe97c293ff6ca8"}, {0xd0, 0x10b, 0x9, "79d516e9c79d5fb224088256d6309c5ec867e3db669ab1b50cfc8f120142fb443512637fc5a58446fad494e74b474dcc509c4ea60883c90af6ed1b061262764a99e519050f1e956e48e1f5002e666076f7fb46b66b50528f7410f63b6fdd2e609007e00775953deb7ed8a0c09d7ade9d2d2b7d6bcdf7bedb07e90697c2adc717627d4bc8ee42ba0e7429b3399c12b641a3be0fa25cb75c170d890dc9adab2793952aee0313ad064c4414f2208f9349ab7dfd3ae773beab36a4a7a0"}], 0x4f0}, 0x4008000)
read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020)
syz_usb_connect$printer(0x3, 0x36, &(0x7f0000005fc0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x26, 0xc0, 0xbc, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x3, 0x8, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ff, 0x9, 0x2, 0x4}}, [{{0x9, 0x5, 0x82, 0x2, 0x20, 0x3, 0x1, 0x9c}}]}}}]}}]}}, &(0x7f0000006280)={0xa, &(0x7f0000006000)={0xa, 0x6, 0x310, 0x3, 0x2f, 0x6, 0x8, 0xff}, 0x2b, &(0x7f0000006040)={0x5, 0xf, 0x2b, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x88, 0x2, 0x5, 0x9, 0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x7, 0x1, 0x4, 0x7, 0x8, [0xffc000]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x2, 0x40, 0x8, 0x2f}]}, 0x5, [{0x12, &(0x7f0000006080)=@string={0x12, 0x3, "379e7961593cee4579cb969a252176ee"}}, {0x2f, &(0x7f00000060c0)=@string={0x2f, 0x3, "748648ebbb789d3d7873f8f194a4da659ccfef28de17e2df192cc4ecabd255e25b38e5422aa7998de7f8cc1889"}}, {0x10, &(0x7f0000006100)=@string={0x10, 0x3, "98ab055f762402aaa55d1a113a4b"}}, {0x4, &(0x7f0000006140)=@lang_id={0x4, 0x3, 0x407}}, {0xf9, &(0x7f0000006180)=@string={0xf9, 0x3, "16fdfa8e58530f3a2428a0257d843a7e63684851e79fde6b00d37394d6be0a0a6a4106e3e80d623f8db756f8aa89cea50ec8941970fece162ae1e282548eb7c523f5370e55a0738edf30e446fcf01b3e06e29c091acfa05e3f8bf70d8a3fb329850ea15261d454b1e89b289c8f25ce3fa29d659bb3f6e4add2b11255e6fd5ef8e82e2beaaf3ec14256f9c5e2449bfd021ccf224b6a2c8bac02420102da01ecce27d3b62a803f0ab31326a6f1bbc8b8828dffb6dcdfa505dc8733da0ac3d95a1300b7988cd1f716e30048d386274b4121a419283a0454a0e39c2f2a5bf6d139bb58355750531c43aca4ed614b402dd0347208efa9a66a3c"}}]})
r7 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$sock_TIOCOUTQ(r7, 0x5411, &(0x7f0000006300))
r8 = syz_open_dev$admmidi(&(0x7f0000006340), 0x4, 0x440c0)
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xe)
fcntl$setsig(r1, 0xa, 0x10)
io_uring_enter(r2, 0x7d74, 0xc26, 0x0, &(0x7f0000006380)={[0x7]}, 0x8)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r5, &(0x7f00000064c0)={&(0x7f00000063c0)={0x10, 0x0, 0x0, 0x200200}, 0xc, &(0x7f0000006480)={&(0x7f0000006400)={0x70, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x4001014)
bind$ax25(r2, &(0x7f0000006500)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6}, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default]}, 0x48)
close_range(r8, r1, 0x0)
memfd_create(&(0x7f0000006580)='vxcan1\x00', 0x2)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000006600)={'wpan0\x00', <r9=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000066c0)={&(0x7f00000065c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000006680)={&(0x7f0000006640)={0x1c, r4, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x200000c0)
r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000006700)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000006740))

4.715829696s ago: executing program 2 (id=858):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000)
clock_gettime(0x0, &(0x7f0000000080))
close(0xffffffffffffffff)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
fsetxattr$smack_xattr_label(r0, &(0x7f0000000340)='security.SMACK64\x00', &(0x7f0000000380)={'eth\x00'}, 0x5, 0x0)

3.233765583s ago: executing program 3 (id=863):
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
io_setup(0x6, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040))
r2 = syz_io_uring_setup(0x23c, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x39c, 0x0, r1}, &(0x7f0000000500)=<r3=>0x0, &(0x7f00000001c0)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1})
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, 0x0, 0x1)
fchdir(r0)
io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0)
r5 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)
write$RDMA_USER_CM_CMD_GET_EVENT(r5, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfb, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3b}, @in6=@local, 0x3, 0xfffd, 0x2, 0xc9c, 0xa, 0x60, 0x30}, {0x80000, 0x8, 0x7, 0x3, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0x20ffffffff, 0x3, 0x0, 0x105}, 0x0, 0x0, 0x1, 0x0, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaa4aaaaaaaaaaaaaaaa0086dd61bc574000002efffe80000000000600000000000000003dfc00"/54], 0x0)

3.149244135s ago: executing program 6 (id=864):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x80000)
getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f00000000c0)=""/42, &(0x7f0000000180)=0x2a)
mount$9p_fd(0x0, 0x0, 0x0, 0x420, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fanotify_init(0x4c, 0x80010000)

2.9143078s ago: executing program 2 (id=865):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_opts(r2, 0x29, 0x40, &(0x7f0000000380)=@dstopts={0x0, 0x5, '\x00', [@calipso={0x7, 0x8}, @ra, @generic={0xe5, 0x19, "e106493a747a9bab4d6534312b05e1604b5fac1f86a69c023f"}]}, 0x38)

2.170858144s ago: executing program 6 (id=866):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x80000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg$unix(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
sendmsg$inet(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x74, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x44}, [@nested={0x60, 0xe, 0x0, 0x1, [@nested={0x5c, 0x151, 0x0, 0x1, [@typed={0xc, 0x120, 0x0, 0x0, @u64}, @generic="1a68a05c264ea8272f8444b4f5333a24baa53ca02def59ea2d799f9d6db9aa3515d38a4b83dd7e7f5908765e13a0a65d550611bcfeab70872d85263378facc05aa37a4b461a2eff140", @generic="d59383"]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_flowlabel\x00')
read$FUSE(r4, &(0x7f0000006440)={0x2020}, 0x27)
preadv(r4, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/133, 0x85}], 0x1, 0x114a, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x1, &(0x7f00000005c0), 0x4)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x115, 0x115, 0x8, [@struct={0xb, 0x1, 0x0, 0x4, 0x0, 0x1, [{0x0, 0x3, 0x9}]}, @datasec={0xf, 0x2, 0x0, 0xf, 0x1, [{0x2, 0x1, 0xd}, {0x2, 0x3, 0x10}], 't'}, @enum64={0x10, 0x5, 0x0, 0x13, 0x1, 0x3, [{0x8, 0xdfad, 0x9}, {0x9, 0x7, 0x401}, {0x3, 0x9, 0x1}, {0xe, 0xae, 0xd3}, {0x2, 0x3, 0x6249}]}, @func={0x1, 0x0, 0x0, 0xc, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x5}}, @union={0xc, 0x3, 0x0, 0x5, 0x0, 0x8, [{0x4, 0x1, 0x2}, {0xe, 0x2, 0x5}, {0xa, 0x0, 0xa07}]}, @struct={0xa, 0x2, 0x0, 0x4, 0x1, 0x2, [{0x0, 0x3, 0xfffffffc}, {0xc, 0x2, 0x7fffffff}]}, @volatile={0x7, 0x0, 0x0, 0x9, 0x4}, @const={0x1, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x2e, 0x30, 0x2e, 0x2e, 0x5f, 0x30]}}, &(0x7f0000000080)=""/44, 0x138, 0x2c, 0x1, 0x29, 0x10000, @value=r4}, 0x28)
flistxattr(0xffffffffffffffff, 0x0, 0x0)

2.003805387s ago: executing program 2 (id=867):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='tlb_flush\x00', 0xffffffffffffffff, 0x0, 0x401}, 0x18)
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
ioctl$SIOCAX25GETINFOOLD(r0, 0x89e3, &(0x7f0000000180))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x35}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x10, 0x1}, 0x94)

1.860741407s ago: executing program 3 (id=868):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="792e8863", @ANYRES64=r0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="0800050002000000"], 0x24}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003b1000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f64a78800000066ba2100b067ee66ba2000b000ee6d6c2f800000c00f3266bac0000f30f5b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x8, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x100)
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000040))
bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12"], 0x48)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x9, 0x7, 0x1, 0x81, 0x2, 0x1, 0x1, 0x6, 0x5, 0x0, 0xe, 0x9, 0xa, 0x5, 0xd, 0x5}})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x7, 0x0, 0xf1, 0x0, 0x8000000000000, 0x5, 0x0, 0x9, 0x0, 0x0, 0x8001, 0xbd9], 0x1, 0x3c4210})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000084}, 0x4040010)

1.777857318s ago: executing program 6 (id=869):
socket$nl_route(0x10, 0x3, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x102a, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10)
sendmmsg(r5, &(0x7f0000000180), 0x4000190, 0x0)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r8 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xe2a01)
r9 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000140)={0x10000042}, 0x10)
r10 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000000)={0x2042, 0x4, 0x1}, 0x10)
r11 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r11, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x10000000}}, 0x10)
ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "05000010", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", '\x00', "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]})
ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000d40)={0x10000000000000, 0x60b, 0x3, 0xfffffff9, 0x0, 0x7, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x2, 0x4, 0xbd, 0x5, 0x1})
close_range(r7, 0xffffffffffffffff, 0x0)

1.727902659s ago: executing program 2 (id=870):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23)

1.217940643s ago: executing program 6 (id=871):
r0 = socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x8000000}, 0x50)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)

1.185160875s ago: executing program 2 (id=872):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00')
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'geneve0\x00', <r3=>0x0})
sendto$packet(r2, &(0x7f0000000180)="0b031200e0ff640002004754", 0xc, 0x0, &(0x7f0000000140)={0x11, 0x88a8, r3}, 0x14)
getsockopt$inet_mreqn(r1, 0x0, 0x23, 0x0, &(0x7f0000000380))
getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000540)={@local, @multicast2}, &(0x7f0000000580)=0xc)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', <r5=>0x0})
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value=0x18000000}, 0x50)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000004c0)={'vcan0\x00'})
sendmsg$nl_route_sched_retired(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40000)
socket$nl_route(0x10, 0x3, 0x0)
sendto$inet(r1, &(0x7f0000000000)="12f160494f1d60b7c9db2c64ea9f3aba9938b3eada9d0d044db729fe344173324d4873dd312ee3d0c3f496e5c0edf956ba04f9865fcb69fe0693ae7ee5f48452", 0x40, 0x8000, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-', 0x1}], 0x2)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4800000010003b0c00"/20, @ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0)

451.415048ms ago: executing program 6 (id=873):
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="6e725f696e6f6465733d786f74612c63727071756f74612c687567653d77697468696e0900697a652c687567653d616c7761796e6453732c736d61636b6673666c6f6f723d7b502dac8a43745d2c3a27252c00"])
fcntl$notify(r0, 0x402, 0x8000001c)
r1 = syz_open_procfs(0x0, &(0x7f0000000bc0)='environ\x00')
preadv(r1, &(0x7f0000000380)=[{0x0, 0x63}, {&(0x7f0000000040)=""/99, 0x63}], 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x9)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r2, &(0x7f0000000480)='./file1\x00', 0x2000, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
unlink(&(0x7f0000000280)='./file1\x00')

332.217275ms ago: executing program 2 (id=874):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00'}, 0x10)
renameat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x208, 0x1ffe0000000}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
syslog(0x2, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000540)={0x6, 0x17, '\x00', [@calipso={0x7, 0x18, {0x0, 0x4, 0x2, 0x4, [0x80000000, 0x1]}}, @generic={0x0, 0x89, "794947bb1d1e002af093a288d6991f1578dc49ddba9efd510ca30ea86b9fd3931ef250e26b7f7ebd35045d26cea76b738e14bf318b488a0dc09804694bf7912012170ff196d546e5710f7c750c90df8ab29432cdaa9711cf95d5c874cecac90ba5402806d33cc1c595cb22be38e962c07bdf0436eb394686359f505c01994255c9ae6f7a1d63a66444"}, @ra={0x5, 0x2, 0x1}, @hao={0xc9, 0x10, @local}]}, 0xc8)
rt_sigaction(0x40, 0x0, 0x0, 0x8, &(0x7f0000001540))
syz_open_dev$tty20(0xc, 0x4, 0x0)
mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='xfs\x00', 0x808c, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_RATE_DEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB=';\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01000000000000000000540000000800030000000000"], 0x1c}}, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r4}, 0x0, &(0x7f00000002c0)}, 0x20)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
syz_emit_ethernet(0xd0, &(0x7f0000000640)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0xc2, 0x0, 0x0, 0x40, 0x2f, 0x0, @empty, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x22eb, 0x68, 0x0, [], "221daeedf76c276f8a32d6977e28a03dc1f537090113fd8b616acecfeba171619166f03582b6587d823debab2000d82aeaf4737d16e1349e12cd9c2f436ee40a49070dfbce6d3672756279c1c85dd056a1800afcacb03d54363615e168212f1a8abf18c8efd8b988"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x2, {0x0, 0x4}}}}}}}}, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="bfc628bd7000ffdbdf251a00000005009200800000000700210062620008100022"], 0x34}, 0x1, 0x0, 0x0, 0x20044044}, 0x800)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

0s ago: executing program 6 (id=875):
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000300), 0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], &(0x7f0000000f40)=""/4089, 0x4c, 0xff9, 0x1, 0xffffffff}, 0x28)
socket$tipc(0x1e, 0x5, 0x0)
epoll_create1(0x0)
socket$netlink(0x10, 0x3, 0x12)
socket$inet6(0xa, 0x1000080002, 0x100000000000088)
socket$inet6(0xa, 0x802, 0x88)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x40000000015, 0x5, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000f00fc00000018000180140002006e657464657673696d300000000000000800060000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20088010)

kernel console output (not intermixed with test programs):

llowed: 32
[  116.372554][ T1207] usb 1-1: config 45 has an invalid descriptor of length 161, skipping remainder of the config
[  116.386881][ T1207] usb 1-1: config 45 has 0 interfaces, different from the descriptor's value: 229
[  116.396643][ T5870] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  116.409377][ T1207] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  116.413713][ T5926] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  116.418505][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.418527][ T1207] usb 1-1: Product: syz
[  116.418541][ T1207] usb 1-1: Manufacturer: syz
[  116.418555][ T1207] usb 1-1: SerialNumber: syz
[  116.534022][ T5870] usb 4-1: device descriptor read/64, error -71
[  116.624097][ T5926] usb 2-1: Using ep0 maxpacket: 16
[  116.637761][ T1207] usb 1-1: USB disconnect, device number 7
[  116.643065][ T5926] usb 2-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice= 0.03
[  116.664137][ T5870] usb usb4-port1: attempt power cycle
[  116.706729][ T6419] 9pnet_fd: Insufficient options for proto=fd
[  116.712896][ T5926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  116.730207][ T5926] usb 2-1: SerialNumber: syz
[  116.764705][ T5926] usb 2-1: config 0 descriptor??
[  116.947270][ T6425] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  117.013404][ T5870] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  117.054135][ T5870] usb 4-1: device descriptor read/8, error -71
[  117.069675][ T6405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.090539][ T6405] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.159562][ T5926] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  117.178075][ T5926] usb 2-1: Detected SIO
[  117.200405][ T5926] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  117.249718][ T5926] usb 2-1: USB disconnect, device number 4
[  117.310808][ T5926] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  117.323527][ T5870] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  117.364126][ T5870] usb 4-1: device descriptor read/8, error -71
[  117.368506][ T5926] ftdi_sio 2-1:0.0: device disconnected
[  117.485270][ T5870] usb usb4-port1: unable to enumerate USB device
[  117.665234][ T6451] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  117.705506][ T6452] CIFS mount error: No usable UNC path provided in device string!
[  117.705506][ T6452] 
[  117.740616][ T6451] CIFS mount error: No usable UNC path provided in device string!
[  117.740616][ T6451] 
[  117.759999][ T6452] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  117.769308][ T6451] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  118.271780][ T6465] tmpfs: Bad value for 'size'
[  119.666718][ T6469] ceph: No mds server is up or the cluster is laggy
[  119.676324][   T48] libceph: connect (1)[c::]:6789 error -101
[  119.682780][   T48] libceph: mon0 (1)[c::]:6789 connect error
[  119.828518][ T6488] FAULT_INJECTION: forcing a failure.
[  119.828518][ T6488] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  119.907228][ T5870] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  119.920721][ T6488] CPU: 1 UID: 0 PID: 6488 Comm: syz.4.147 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  119.920745][ T6488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  119.920755][ T6488] Call Trace:
[  119.920762][ T6488]  <TASK>
[  119.920768][ T6488]  dump_stack_lvl+0x189/0x250
[  119.920796][ T6488]  ? __pfx____ratelimit+0x10/0x10
[  119.920817][ T6488]  ? __pfx_dump_stack_lvl+0x10/0x10
[  119.920839][ T6488]  ? __pfx__printk+0x10/0x10
[  119.920868][ T6488]  should_fail_ex+0x414/0x560
[  119.920890][ T6488]  _copy_to_user+0x31/0xb0
[  119.920908][ T6488]  simple_read_from_buffer+0xe1/0x170
[  119.920934][ T6488]  proc_fail_nth_read+0x1df/0x250
[  119.920958][ T6488]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  119.920982][ T6488]  ? rw_verify_area+0x258/0x650
[  119.920999][ T6488]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  119.921022][ T6488]  vfs_read+0x1fd/0x980
[  119.921053][ T6488]  ? __pfx___mutex_lock+0x10/0x10
[  119.921077][ T6488]  ? __pfx_vfs_read+0x10/0x10
[  119.921096][ T6488]  ? __fget_files+0x2a/0x420
[  119.921118][ T6488]  ? __fget_files+0x3a0/0x420
[  119.921138][ T6488]  ? __fget_files+0x2a/0x420
[  119.921167][ T6488]  ksys_read+0x145/0x250
[  119.921184][ T6488]  ? __fget_files+0x3a0/0x420
[  119.921205][ T6488]  ? __pfx_ksys_read+0x10/0x10
[  119.921229][ T6488]  ? do_syscall_64+0xbe/0x3b0
[  119.921256][ T6488]  do_syscall_64+0xfa/0x3b0
[  119.921276][ T6488]  ? lockdep_hardirqs_on+0x9c/0x150
[  119.921296][ T6488]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.921313][ T6488]  ? clear_bhb_loop+0x60/0xb0
[  119.921334][ T6488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.921350][ T6488] RIP: 0033:0x7f7d5818d33c
[  119.921366][ T6488] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  119.921378][ T6488] RSP: 002b:00007f7d5905c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  119.921396][ T6488] RAX: ffffffffffffffda RBX: 00007f7d583b6080 RCX: 00007f7d5818d33c
[  119.921407][ T6488] RDX: 000000000000000f RSI: 00007f7d5905c0a0 RDI: 0000000000000003
[  119.921418][ T6488] RBP: 00007f7d5905c090 R08: 0000000000000000 R09: 0000000000000000
[  119.921428][ T6488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  119.921438][ T6488] R13: 0000000000000001 R14: 00007f7d583b6080 R15: 00007ffce9092ae8
[  119.921466][ T6488]  </TASK>
[  120.333438][ T5870] usb 3-1: Using ep0 maxpacket: 16
[  120.350644][ T5870] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  120.360053][ T5870] usb 3-1: config 0 has no interface number 0
[  120.390780][ T5870] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  120.584434][ T5870] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  120.597444][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  120.605938][ T5870] usb 3-1: Product: syz
[  120.610162][ T5870] usb 3-1: SerialNumber: syz
[  120.619448][ T6496] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.634337][ T5870] usb 3-1: config 0 descriptor??
[  120.656941][ T5870] usbhid 3-1:0.8: couldn't find an input interrupt endpoint
[  121.018053][ T6518] loop8: detected capacity change from 0 to 1
[  121.079198][ T6518] Dev loop8: unable to read RDB block 1
[  121.119992][ T6518]  loop8: unable to read partition table
[  121.147434][ T6518] loop8: partition table beyond EOD, truncated
[  121.163779][ T6518] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  121.204704][ T6513] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check.
[  121.235664][   T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  121.355474][ T5870] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  121.463505][ T1207] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  121.542449][ T5870] usb 5-1: config 0 has an invalid interface number: 179 but max is 0
[  121.571044][ T5870] usb 5-1: config 0 has no interface number 0
[  121.596252][ T5870] usb 5-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08
[  121.623352][ T5870] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.672264][ T5870] usb 5-1: Product: syz
[  121.679808][ T5870] usb 5-1: Manufacturer: syz
[  121.687889][ T5870] usb 5-1: SerialNumber: syz
[  121.709334][ T5870] usb 5-1: config 0 descriptor??
[  122.013592][ T6536] tipc: Started in network mode
[  122.018591][ T6536] tipc: Node identity ac14140f, cluster identity 4711
[  122.025945][ T6536] tipc: New replicast peer: 255.255.255.255
[  122.033458][ T6536] tipc: Enabled bearer <udp:syz2>, priority 10
[  122.075039][ T6537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.158'.
[  122.084118][ T6537] tipc: Disabling bearer <udp:syz2>
[  122.726868][ T5870] usb-storage 5-1:0.179: USB Mass Storage device detected
[  122.749875][ T5870] usb-storage 5-1:0.179: device ignored
[  123.038801][ T6542] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  123.085899][ T6542] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  123.543777][ T5870] usb 5-1: USB disconnect, device number 5
[  124.046237][ T1207] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  124.242453][ T1207] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  124.383973][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  124.395103][ T1207] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  124.409038][ T1207] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  124.422347][ T1207] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  124.431454][ T1207] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.530071][ T1207] usb 1-1: config 0 descriptor??
[  124.686490][ T6569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.703185][ T6569] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  125.001393][ T1207] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  125.043133][ T1207] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  125.232886][ T1207] usb 1-1: USB disconnect, device number 8
[  125.467554][ T6575] fido_id[6575]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  126.012628][ T6586] netlink: 'syz.1.169': attribute type 10 has an invalid length.
[  126.027897][ T6586] batman_adv: batadv0: Adding interface: wlan0
[  126.034345][ T6586] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.060091][ T6586] batman_adv: batadv0: Interface activated: wlan0
[  126.736484][ T6594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.786393][ T6594] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.814767][ T6598] 9pnet_fd: Insufficient options for proto=fd
[  126.983487][   T48] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  127.275377][   T48] usb 2-1: Using ep0 maxpacket: 8
[  127.839973][   T48] usb 2-1: config 162 has an invalid interface number: 84 but max is 2
[  127.869778][   T48] usb 2-1: config 162 has an invalid interface number: 3 but max is 2
[  127.919137][   T48] usb 2-1: config 162 has no interface number 0
[  128.039172][   T48] usb 2-1: config 162 has no interface number 1
[  128.089038][   T48] usb 2-1: config 162 interface 84 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  128.158870][   T48] usb 2-1: config 162 interface 2 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  128.229181][   T48] usb 2-1: config 162 interface 2 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  128.286309][ T6619] netlink: 'syz.2.178': attribute type 6 has an invalid length.
[  128.323442][   T48] usb 2-1: config 162 interface 2 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[  128.348100][   T48] usb 2-1: config 162 interface 2 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[  128.385881][   T48] usb 2-1: config 162 interface 2 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  128.473546][   T48] usb 2-1: config 162 interface 84 has no altsetting 0
[  128.480468][   T48] usb 2-1: config 162 interface 2 has no altsetting 0
[  128.548915][   T48] usb 2-1: config 162 interface 3 has no altsetting 0
[  128.598239][   T48] usb 2-1: New USB device found, idVendor=0e8d, idProduct=763f, bcdDevice=9b.23
[  128.662586][   T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.815860][   T48] usb 2-1: Product: syz
[  128.837587][   T48] usb 2-1: Manufacturer: syz
[  128.885416][ T6624] 9pnet_fd: Insufficient options for proto=fd
[  128.910070][   T48] usb 2-1: SerialNumber: syz
[  129.401138][ T5825] Bluetooth: hci5: Opcode 0x0c03 failed: -71
[  130.000615][ T5870] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  130.187510][ T5870] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.268779][ T5870] usb 4-1: config 0 has no interfaces?
[  130.274193][   T48] usb 2-1: USB disconnect, device number 5
[  130.312182][ T6629] syz.2.180 (6629) used greatest stack depth: 15960 bytes left
[  130.356180][ T5870] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  130.411384][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.478130][ T5870] usb 4-1: Product: syz
[  130.482349][ T5870] usb 4-1: Manufacturer: syz
[  130.536532][ T5870] usb 4-1: SerialNumber: syz
[  130.542870][ T5825] Bluetooth: hci0: Malformed LE Event: 0x0d
[  130.563661][ T6649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.584366][ T6649] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.587772][ T5870] usb 4-1: config 0 descriptor??
[  130.919392][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'.
[  130.945695][ T6657] netlink: 28 bytes leftover after parsing attributes in process `syz.4.188'.
[  130.951246][ T6656] netlink: 4 bytes leftover after parsing attributes in process `syz.0.189'.
[  130.981216][ T6656] netlink: 'syz.0.189': attribute type 7 has an invalid length.
[  131.285598][ T6667] loop8: detected capacity change from 0 to 7
[  131.307542][ T6667] Dev loop8: unable to read RDB block 7
[  131.323036][ T6667]  loop8: unable to read partition table
[  131.346350][ T6667] loop8: partition table beyond EOD, truncated
[  131.487633][ T6667] loop_reread_partitions: partition scan of loop8 (�被x�^>��� ) failed (rc=-5)
[  131.686378][ T6671] netlink: 8 bytes leftover after parsing attributes in process `syz.0.191'.
[  131.901768][ T6667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.190'.
[  132.019583][ T6667] bond_slave_0: entered promiscuous mode
[  132.025483][ T6667] bond_slave_1: entered promiscuous mode
[  132.066393][ T6679] netlink: 24 bytes leftover after parsing attributes in process `syz.1.193'.
[  132.107476][ T6667] macsec1: entered promiscuous mode
[  132.113604][ T6667] bond0: entered promiscuous mode
[  132.185844][ T6682] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  132.723946][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  132.730288][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  133.305487][ T6691] DRBG: could not allocate digest TFM handle: hmac(sha512)
[  133.914908][ T5926] usb 4-1: USB disconnect, device number 12
[  134.134299][ T5950] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  134.313799][ T5950] usb 1-1: Using ep0 maxpacket: 32
[  134.470835][ T5950] usb 1-1: config 0 has an invalid descriptor of length 117, skipping remainder of the config
[  134.514685][ T5950] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  134.550486][ T5950] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  134.604547][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.630317][ T5950] usb 1-1: Product: syz
[  134.647881][ T5950] usb 1-1: Manufacturer: syz
[  134.652632][ T5950] usb 1-1: SerialNumber: syz
[  134.680133][ T5950] usb 1-1: config 0 descriptor??
[  134.723375][   T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  135.419707][   T10] usb 4-1: Using ep0 maxpacket: 16
[  135.455631][   T10] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  135.528863][   T10] usb 4-1: config 0 has no interface number 0
[  135.542595][   T10] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  135.554471][   T10] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  135.564312][   T10] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  135.572503][   T10] usb 4-1: Product: syz
[  135.577645][   T10] usb 4-1: SerialNumber: syz
[  135.636635][   T10] usb 4-1: config 0 descriptor??
[  135.655931][   T10] usbhid 4-1:0.8: couldn't find an input interrupt endpoint
[  135.681590][ T6739] netlink: 'syz.1.205': attribute type 3 has an invalid length.
[  136.261415][ T1207] usb 4-1: USB disconnect, device number 13
[  136.410494][ T6744] netlink: 24 bytes leftover after parsing attributes in process `syz.1.206'.
[  136.454423][   T10] usb 1-1: USB disconnect, device number 9
[  138.122136][ T6762] netlink: 276 bytes leftover after parsing attributes in process `syz.3.212'.
[  138.228681][ T6767] netlink: 24 bytes leftover after parsing attributes in process `syz.4.214'.
[  140.239730][ T6787] sp0: Synchronizing with TNC
[  140.273025][ T6786] [U] �
[  140.587972][ T5877] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  140.843471][ T5877] usb 5-1: Using ep0 maxpacket: 16
[  141.492729][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  141.503715][ T5877] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.518476][ T5877] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  141.531353][ T5877] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  141.542372][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.556072][ T5877] usb 5-1: config 0 descriptor??
[  141.820457][ T6809] netlink: 'syz.0.227': attribute type 13 has an invalid length.
[  142.048043][ T5877] microsoft 0003:045E:07DA.0002: item fetching failed at offset 28/34
[  142.058552][ T5877] microsoft 0003:045E:07DA.0002: parse failed
[  142.065595][ T5877] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22
[  142.314105][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  143.124405][ T5877] usb 5-1: USB disconnect, device number 6
[  143.261294][ T1207] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  143.525880][ T1207] usb 1-1: config 0 has an invalid interface number: 139 but max is 0
[  143.539726][ T1207] usb 1-1: config 0 has no interface number 0
[  144.071334][ T1207] usb 1-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  144.301826][ T6830] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  144.474835][ T1207] usb 1-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D
[  144.692318][ T1207] usb 1-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64
[  144.723328][ T1207] usb 1-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  144.771657][ T1207] usb 1-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6
[  144.810682][ T1207] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.869341][ T1207] usb 1-1: Product: syz
[  144.869408][ T1207] usb 1-1: Manufacturer: syz
[  144.869423][ T1207] usb 1-1: SerialNumber: syz
[  144.876221][ T1207] usb 1-1: config 0 descriptor??
[  144.886173][ T1207] usb 1-1: can't set config #0, error -71
[  144.917196][ T1207] usb 1-1: USB disconnect, device number 10
[  146.054662][ T6844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.066271][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.4.239'.
[  146.126599][ T6844] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.541913][ T6860] syz.3.238: attempt to access beyond end of device
[  146.541913][ T6860] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0
[  147.493786][ T6872] netlink: 'syz.0.241': attribute type 16 has an invalid length.
[  147.501987][ T6872] netlink: 'syz.0.241': attribute type 17 has an invalid length.
[  147.604318][ T6872] netlink: 'syz.0.241': attribute type 27 has an invalid length.
[  147.704036][ T1207] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  148.159016][ T6879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.203784][ T6879] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.243857][ T1207] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  149.704536][ T6904] =======================================================
[  149.704536][ T6904] WARNING: The mand mount option has been deprecated and
[  149.704536][ T6904]          and is ignored by this kernel. Remove the mand
[  149.704536][ T6904]          option from the mount to silence this warning.
[  149.704536][ T6904] =======================================================
[  149.864633][ T6909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.896370][ T6911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  149.917634][ T6909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.029472][ T6911] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  151.270916][ T6933] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  151.306320][ T6933] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  152.284123][ T6938] netlink: 40 bytes leftover after parsing attributes in process `syz.1.260'.
[  153.496096][ T6954] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  153.595841][ T6954] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  154.578703][ T6977] batadv0: entered promiscuous mode
[  154.590047][ T6977] batadv0: left promiscuous mode
[  158.586568][ T7003] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  158.649119][ T7007] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  158.731904][ T7011] netlink: 32 bytes leftover after parsing attributes in process `syz.3.280'.
[  159.249130][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'.
[  159.444432][ T5950] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  160.291910][ T5950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.314616][ T5950] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  160.338786][ T5950] usb 4-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00
[  160.356536][ T5950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.419385][ T5950] usb 4-1: config 0 descriptor??
[  160.466289][ T7041] 9pnet_fd: Insufficient options for proto=fd
[  160.516160][ T1207] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  160.690472][ T1207] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  160.690601][ T1207] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  160.690639][ T1207] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  160.690660][ T1207] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.697447][ T1207] usb 2-1: config 0 descriptor??
[  160.743593][   T48] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  160.771514][ T1207] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  160.849643][ T5950] ortek 0003:1223:3F07.0003: unknown main item tag 0x6
[  160.879258][ T5950] ortek 0003:1223:3F07.0003: bogus close delimiter
[  160.908827][ T5950] ortek 0003:1223:3F07.0003: item 0 0 2 10 parsing failed
[  160.933725][   T48] usb 1-1: device descriptor read/64, error -71
[  160.960719][ T5950] ortek 0003:1223:3F07.0003: probe with driver ortek failed with error -22
[  161.103640][ T5950] usb 4-1: USB disconnect, device number 14
[  161.203603][   T48] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  161.353593][   T48] usb 1-1: device descriptor read/64, error -71
[  161.396381][ T7057] netlink: 132 bytes leftover after parsing attributes in process `syz.3.295'.
[  161.469541][   T48] usb usb1-port1: attempt power cycle
[  161.833380][   T48] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  161.857648][   T48] usb 1-1: device descriptor read/8, error -71
[  162.103390][   T48] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  162.136109][   T48] usb 1-1: device descriptor read/8, error -71
[  162.254198][   T48] usb usb1-port1: unable to enumerate USB device
[  162.913913][ T7076] FAULT_INJECTION: forcing a failure.
[  162.913913][ T7076] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  162.927077][ T7076] CPU: 1 UID: 0 PID: 7076 Comm: syz.3.300 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  162.927099][ T7076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  162.927110][ T7076] Call Trace:
[  162.927118][ T7076]  <TASK>
[  162.927126][ T7076]  dump_stack_lvl+0x189/0x250
[  162.927155][ T7076]  ? __pfx____ratelimit+0x10/0x10
[  162.927178][ T7076]  ? __pfx_dump_stack_lvl+0x10/0x10
[  162.927201][ T7076]  ? __pfx__printk+0x10/0x10
[  162.927232][ T7076]  should_fail_ex+0x414/0x560
[  162.927258][ T7076]  _copy_to_user+0x31/0xb0
[  162.927277][ T7076]  simple_read_from_buffer+0xe1/0x170
[  162.927303][ T7076]  proc_fail_nth_read+0x1df/0x250
[  162.927330][ T7076]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  162.927355][ T7076]  ? rw_verify_area+0x258/0x650
[  162.927373][ T7076]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  162.927396][ T7076]  vfs_read+0x1fd/0x980
[  162.927421][ T7076]  ? __pfx___mutex_lock+0x10/0x10
[  162.927444][ T7076]  ? __pfx_vfs_read+0x10/0x10
[  162.927465][ T7076]  ? __fget_files+0x2a/0x420
[  162.927490][ T7076]  ? __fget_files+0x3a0/0x420
[  162.927510][ T7076]  ? __fget_files+0x2a/0x420
[  162.927540][ T7076]  ksys_read+0x145/0x250
[  162.927556][ T7076]  ? __pfx_n_tty_ioctl+0x10/0x10
[  162.927579][ T7076]  ? __pfx_ksys_read+0x10/0x10
[  162.927603][ T7076]  ? do_syscall_64+0xbe/0x3b0
[  162.927630][ T7076]  do_syscall_64+0xfa/0x3b0
[  162.927651][ T7076]  ? lockdep_hardirqs_on+0x9c/0x150
[  162.927673][ T7076]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.927690][ T7076]  ? clear_bhb_loop+0x60/0xb0
[  162.927711][ T7076]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  162.927727][ T7076] RIP: 0033:0x7fc95078d33c
[  162.927748][ T7076] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  162.927762][ T7076] RSP: 002b:00007fc95150e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  162.927781][ T7076] RAX: ffffffffffffffda RBX: 00007fc9509b6160 RCX: 00007fc95078d33c
[  162.927794][ T7076] RDX: 000000000000000f RSI: 00007fc95150e0a0 RDI: 0000000000000008
[  162.927805][ T7076] RBP: 00007fc95150e090 R08: 0000000000000000 R09: 0000000000000000
[  162.927816][ T7076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  162.927826][ T7076] R13: 0000000000000000 R14: 00007fc9509b6160 R15: 00007ffcbd35b6a8
[  162.927855][ T7076]  </TASK>
[  163.158386][    C1] vkms_vblank_simulate: vblank timer overrun
[  164.153475][   T48] usb 2-1: USB disconnect, device number 6
[  164.260216][ T7081] 9pnet_fd: Insufficient options for proto=fd
[  165.328057][   T30] audit: type=1326 audit(1751017932.080:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7078 comm="syz.3.301" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc95078e929 code=0x0
[  165.379844][ T7088] dummy0 speed is unknown, defaulting to 1000
[  165.386374][ T7088] dummy0 speed is unknown, defaulting to 1000
[  165.395212][ T7088] dummy0 speed is unknown, defaulting to 1000
[  165.406956][ T7088] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  165.423824][ T7088] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  165.472345][ T7088] dummy0 speed is unknown, defaulting to 1000
[  165.480571][ T7088] dummy0 speed is unknown, defaulting to 1000
[  165.488608][ T7088] dummy0 speed is unknown, defaulting to 1000
[  165.496534][ T7088] dummy0 speed is unknown, defaulting to 1000
[  165.504489][ T7088] dummy0 speed is unknown, defaulting to 1000
[  167.384343][ T7113] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  167.403161][ T7113] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  168.925395][ T7123] 9pnet_fd: Insufficient options for proto=fd
[  169.034083][ T5891] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  169.064337][ T7130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.377362][ T7130] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.422936][ T7131] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  169.585244][ T7131] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  169.637652][ T5891] usb 4-1: config 0 has an invalid interface number: 120 but max is 0
[  169.646845][ T5891] usb 4-1: config 0 has no interface number 0
[  169.652959][ T5891] usb 4-1: config 0 interface 120 has no altsetting 0
[  169.690063][ T5891] usb 4-1: New USB device found, idVendor=13d8, idProduct=0010, bcdDevice=8f.72
[  169.706899][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.733350][ T5891] usb 4-1: Product: syz
[  169.747515][ T5891] usb 4-1: Manufacturer: syz
[  169.756356][ T5891] usb 4-1: SerialNumber: syz
[  169.810664][ T5891] usb 4-1: config 0 descriptor??
[  172.316093][ T7160] binder: 7159:7160 ioctl c080aebe 200000001c80 returned -22
[  172.360709][ T5891] comedi comedi0: could not switch to alternate setting 1
[  172.383623][ T5891] usbduxfast 4-1:0.120: driver 'usbduxfast' failed to auto-configure device.
[  172.437466][ T5891] usb 4-1: USB disconnect, device number 15
[  172.478317][ T7163] 9pnet_fd: Insufficient options for proto=fd
[  174.383956][ T5870] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  174.496273][ T7188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.750559][ T7188] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.771870][ T7185] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  174.772633][ T5870] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  174.785643][ T7188] netlink: 36 bytes leftover after parsing attributes in process `syz.2.334'.
[  174.812408][ T7188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'.
[  174.861616][ T5870] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  174.879605][ T5870] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  174.922405][ T5870] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.966338][ T7177] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  174.995181][ T5870] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  175.121490][ T7196] loop2: detected capacity change from 0 to 7
[  175.138384][ T7196] Dev loop2: unable to read RDB block 7
[  175.144866][ T7196]  loop2: unable to read partition table
[  175.189857][   T48] usb 5-1: USB disconnect, device number 7
[  175.210902][ T7196] loop2: partition table beyond EOD, truncated
[  175.248084][ T7196] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  175.564160][ T7202] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  175.909423][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.339'.
[  176.774428][ T7224] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  176.835267][ T7224] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  176.926566][ T7226] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  176.948254][ T7226] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  177.768382][ T7233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.812355][ T7233] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.874853][ T7239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.349'.
[  177.986264][ T7244] FAULT_INJECTION: forcing a failure.
[  177.986264][ T7244] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  178.006212][ T5870] dummy0 speed is unknown, defaulting to 1000
[  178.022128][ T5870] syz2: Port: 1 Link DOWN
[  178.033257][ T7244] CPU: 0 UID: 0 PID: 7244 Comm: syz.1.352 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  178.033285][ T7244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  178.033295][ T7244] Call Trace:
[  178.033302][ T7244]  <TASK>
[  178.033309][ T7244]  dump_stack_lvl+0x189/0x250
[  178.033337][ T7244]  ? __pfx____ratelimit+0x10/0x10
[  178.033360][ T7244]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.033382][ T7244]  ? __pfx__printk+0x10/0x10
[  178.033400][ T7244]  ? __might_fault+0xb0/0x130
[  178.033430][ T7244]  should_fail_ex+0x414/0x560
[  178.033454][ T7244]  _copy_from_user+0x2d/0xb0
[  178.033471][ T7244]  ___sys_sendmsg+0x158/0x2a0
[  178.033493][ T7244]  ? __pfx____sys_sendmsg+0x10/0x10
[  178.033544][ T7244]  ? __fget_files+0x2a/0x420
[  178.033564][ T7244]  ? __fget_files+0x3a0/0x420
[  178.033592][ T7244]  __x64_sys_sendmsg+0x19b/0x260
[  178.033621][ T7244]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  178.033647][ T7244]  ? __pfx_ksys_write+0x10/0x10
[  178.033659][ T7244]  ? rcu_is_watching+0x15/0xb0
[  178.033683][ T7244]  ? do_syscall_64+0xbe/0x3b0
[  178.033704][ T7244]  do_syscall_64+0xfa/0x3b0
[  178.033722][ T7244]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.033741][ T7244]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.033753][ T7244]  ? clear_bhb_loop+0x60/0xb0
[  178.033772][ T7244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.033786][ T7244] RIP: 0033:0x7ff45178e929
[  178.033799][ T7244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  178.033810][ T7244] RSP: 002b:00007ff4525e8038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  178.033825][ T7244] RAX: ffffffffffffffda RBX: 00007ff4519b5fa0 RCX: 00007ff45178e929
[  178.033834][ T7244] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004
[  178.033842][ T7244] RBP: 00007ff4525e8090 R08: 0000000000000000 R09: 0000000000000000
[  178.033850][ T7244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  178.033858][ T7244] R13: 0000000000000000 R14: 00007ff4519b5fa0 R15: 00007ffe89371b48
[  178.033879][ T7244]  </TASK>
[  178.240529][    C0] vkms_vblank_simulate: vblank timer overrun
[  178.462871][ T7257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.355'.
[  178.583506][ T5950] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  178.724912][ T7266] netlink: 100 bytes leftover after parsing attributes in process `syz.0.358'.
[  179.412404][ T7281] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  179.466705][ T7281] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  180.745062][ T7303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.753621][ T7305] netlink: 'syz.3.371': attribute type 21 has an invalid length.
[  180.763558][ T7303] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.796883][ T7305] netlink: 128 bytes leftover after parsing attributes in process `syz.3.371'.
[  180.832335][ T7306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.368'.
[  180.863548][ T7305] netlink: 'syz.3.371': attribute type 6 has an invalid length.
[  181.070273][ T7305] netlink: 3 bytes leftover after parsing attributes in process `syz.3.371'.
[  181.880944][ T7320] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.889895][ T7320] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.011627][    T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  182.161209][    T9] usb 5-1: device descriptor read/64, error -71
[  182.603458][    T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  182.910832][    T9] usb 5-1: device descriptor read/64, error -71
[  183.264226][    T9] usb usb5-port1: attempt power cycle
[  183.633577][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  183.663674][ T5870] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  183.672557][    T9] usb 5-1: device descriptor read/8, error -71
[  183.943418][ T5870] usb 4-1: Using ep0 maxpacket: 16
[  183.950432][ T5870] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  183.958875][ T5870] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config
[  183.969967][ T5870] usb 4-1: config 0 has no interface number 0
[  183.978387][ T5870] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  184.496492][    T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  184.508753][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.521368][ T5870] usb 4-1: Product: syz
[  184.525813][ T5870] usb 4-1: Manufacturer: syz
[  184.530619][ T5870] usb 4-1: SerialNumber: syz
[  184.535900][    T9] usb 5-1: device descriptor read/8, error -71
[  184.549982][ T5870] usb 4-1: config 0 descriptor??
[  184.568778][ T5870] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[  184.585054][ T5870] usb 4-1: No valid video chain found.
[  184.700115][    T9] usb usb5-port1: unable to enumerate USB device
[  185.336607][   T48] usb 4-1: USB disconnect, device number 16
[  185.519516][ T7364] loop8: detected capacity change from 0 to 1
[  185.583559][ T5870] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  185.618794][ T5819] Dev loop8: unable to read RDB block 1
[  185.718347][ T7390] netlink: 'syz.2.388': attribute type 1 has an invalid length.
[  185.751931][ T5819]  loop8: unable to read partition table
[  185.949201][ T5819] loop8: partition table beyond EOD, truncated
[  186.018728][ T7364] Dev loop8: unable to read RDB block 1
[  186.024482][ T5870] usb 2-1: Using ep0 maxpacket: 16
[  186.068883][ T5870] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[  186.141145][ T5870] usb 2-1: config 0 has no interface number 0
[  186.144499][ T7364]  loop8: unable to read partition table
[  186.183511][ T5870] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  186.197305][ T7364] loop8: partition table beyond EOD, truncated
[  186.221405][ T5870] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  186.238172][ T7364] loop_reread_partitions: partition scan of loop8 (�被x�^>�~) failed (rc=-5)
[  186.270766][ T7395] 8021q: adding VLAN 0 to HW filter on device bond2
[  186.275542][ T5870] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  186.338540][ T5870] usb 2-1: Product: syz
[  186.371363][ T5870] usb 2-1: SerialNumber: syz
[  186.415139][ T7395] bond1: (slave bond2): making interface the new active one
[  186.535229][ T7395] bond1: (slave bond2): Enslaving as an active interface with an up link
[  187.622653][ T5870] usb 2-1: config 0 descriptor??
[  187.654472][ T5870] usbhid 2-1:0.8: couldn't find an input interrupt endpoint
[  188.827076][   T30] audit: type=1326 audit(1751017955.570:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7431 comm="syz.1.397" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff45178e929 code=0x0
[  189.281764][ T7443] netlink: 612 bytes leftover after parsing attributes in process `syz.4.400'.
[  189.322311][ T7443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.400'.
[  191.986732][ T7468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.051745][ T7468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.267013][ T7470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.275897][ T7470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  192.309384][ T7470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  192.322584][ T7470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.701296][ T7490] netlink: 378 bytes leftover after parsing attributes in process `syz.2.413'.
[  194.162527][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  194.168960][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  195.453913][ T7507] tmpfs: Bad value for 'mpol'
[  196.315754][ T7495] Bluetooth: hci2: command 0x0406 tx timeout
[  196.322970][ T7495] Bluetooth: hci4: command 0x0406 tx timeout
[  196.400822][ T5824] Bluetooth: hci1: command 0x0406 tx timeout
[  196.407937][ T5824] Bluetooth: hci0: command 0x0406 tx timeout
[  196.850630][ T7512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.906795][ T7512] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.711164][ T5950] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  197.873384][ T5950] usb 5-1: Using ep0 maxpacket: 16
[  197.891461][ T5950] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  197.920381][ T5950] usb 5-1: config 0 has no interface number 0
[  197.920433][ T5950] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  197.922561][ T5950] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  197.922587][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  197.922605][ T5950] usb 5-1: Product: syz
[  197.922618][ T5950] usb 5-1: SerialNumber: syz
[  197.931593][ T5950] usb 5-1: config 0 descriptor??
[  197.945470][ T5950] usbhid 5-1:0.8: couldn't find an input interrupt endpoint
[  198.943920][ T7541] netlink: 76 bytes leftover after parsing attributes in process `syz.3.429'.
[  199.280932][ T7550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  199.289758][ T7550] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.084700][ T7560] netlink: 172 bytes leftover after parsing attributes in process `syz.1.435'.
[  200.093885][ T7560] openvswitch: netlink: Message has 7 unknown bytes.
[  200.320278][ T7563] netlink: 'syz.4.434': attribute type 10 has an invalid length.
[  200.338609][ T7563] batman_adv: batadv0: Adding interface: wlan0
[  200.346191][ T7563] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.353947][ T7564] slcan: can't register candev
[  200.377041][ T7563] batman_adv: batadv0: Interface activated: wlan0
[  200.524288][ T7564] Falling back ldisc for ptm0.
[  202.179814][ T7584] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  202.225196][ T7584] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  203.291140][ T7589] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  203.335543][ T7589] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  203.441458][ T7587] netlink: 100 bytes leftover after parsing attributes in process `syz.1.442'.
[  203.504228][ T7594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.705482][ T7594] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.129267][ T7602] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  205.089134][ T7608] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  205.131629][ T7608] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  206.934861][ T7624] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  206.954230][ T7621] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  206.966045][ T7621] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  207.837113][ T7648] trusted_key: syz.2.457 sent an empty control message without MSG_MORE.
[  207.952382][ T7649] netlink: 'syz.0.459': attribute type 1 has an invalid length.
[  208.094895][ T7646] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  208.895341][ T7661] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  208.924823][ T7661] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  209.756883][ T7665] netlink: 12 bytes leftover after parsing attributes in process `syz.3.462'.
[  211.387758][ T7671] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  212.056904][ T7673] 9pnet: Unknown protocol version 9p20\++}
[  212.364649][ T7679] ��: renamed from team_slave_1 (while UP)
[  212.416580][ T5878] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  213.203013][ T5878] usb 4-1: unable to read config index 0 descriptor/start: -61
[  213.223470][ T5878] usb 4-1: can't read configurations, error -61
[  213.381370][ T7694] kvm: kvm [7693]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xdf4008c43ca39fc7
[  213.413429][ T5878] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  213.546420][ T7704] binder_alloc: 7702: binder_alloc_buf size 12312 failed, no address space
[  213.566975][ T7704] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280)
[  213.937672][ T7707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.474'.
[  214.493356][ T5878] usb 4-1: unable to read config index 0 descriptor/start: -61
[  214.519452][ T5878] usb 4-1: can't read configurations, error -61
[  214.529704][ T5877] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  214.538390][ T5878] usb usb4-port1: attempt power cycle
[  214.805530][ T7713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'.
[  214.834226][ T7713] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'.
[  215.309510][   T48] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  215.615129][ T5878] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  215.743596][ T5878] usb 4-1: Using ep0 maxpacket: 16
[  215.762282][ T5878] usb 4-1: unable to get BOS descriptor or descriptor too short
[  215.774307][ T5878] usb 4-1: config 8 has an invalid interface number: 245 but max is 0
[  215.794659][ T5878] usb 4-1: config 8 has no interface number 0
[  216.365835][ T7732] netlink: 2 bytes leftover after parsing attributes in process `syz.0.482'.
[  216.389655][ T5878] usb 4-1: config 8 interface 245 has no altsetting 0
[  216.405511][ T5878] usb 4-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=d8.77
[  216.419326][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.429289][ T5878] usb 4-1: Product: syz
[  216.433640][ T5878] usb 4-1: Manufacturer: syz
[  216.438315][ T5878] usb 4-1: SerialNumber: syz
[  216.876018][ T5878] cypress_m8 4-1:8.245: DeLorme Earthmate USB converter detected
[  216.977808][ T5878] earthmate ttyUSB0: required endpoint is missing
[  217.131448][ T5878] usb 4-1: USB disconnect, device number 19
[  217.153968][ T5878] cypress_m8 4-1:8.245: device disconnected
[  217.887247][ T7755] xt_CT: You must specify a L4 protocol and not use inversions on it
[  219.755595][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[  219.820090][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.3.488'.
[  220.463090][ T7773] 9pnet: Could not find request transport: fd0x0000000000000003
[  220.643469][ T1207] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  220.735301][ T7785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  220.763809][ T7785] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  220.820819][ T1207] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.851988][ T1207] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  220.872721][ T1207] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.899537][ T1207] usb 4-1: config 0 descriptor??
[  221.136987][ T1207] usbhid 4-1:0.0: can't add hid device: -71
[  221.157833][ T1207] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  221.188489][ T1207] usb 4-1: USB disconnect, device number 20
[  221.893367][ T7794] evm: overlay not supported
[  222.893450][ T5870] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  222.954739][ T7808] netlink: 44 bytes leftover after parsing attributes in process `syz.1.506'.
[  223.343432][ T5870] usb 4-1: Using ep0 maxpacket: 16
[  223.350734][ T5870] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.369755][ T5870] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  223.390754][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0
[  223.404487][ T5870] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00
[  223.414580][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.430116][ T5870] usb 4-1: config 0 descriptor??
[  223.942669][ T5870] apple 0003:05AC:0247.0004: fixing up Magic Keyboard JIS report descriptor
[  223.982830][ T5870] apple 0003:05AC:0247.0004: unexpected long global item
[  224.025514][ T5870] apple 0003:05AC:0247.0004: parse failed
[  224.033180][ T5870] apple 0003:05AC:0247.0004: probe with driver apple failed with error -22
[  224.848831][ T7817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  224.871265][ T7817] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.922657][ T5891] usb 4-1: USB disconnect, device number 21
[  225.188457][ T7819] netlink: 36 bytes leftover after parsing attributes in process `syz.1.509'.
[  225.651822][ T7832] netlink: 'syz.1.510': attribute type 10 has an invalid length.
[  226.188368][    C1] Unknown status report in ack skb
[  227.514479][ T7846] netfs: Couldn't get user pages (rc=-14)
[  227.885531][ T7847] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd3": -EINTR
[  229.025258][ T7863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.043640][ T7863] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.078137][ T7864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.157259][ T7864] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.259184][ T7865] delete_channel: no stack
[  229.780960][ T7873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.815124][ T7873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  229.831681][ T7873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  229.855559][ T7873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  230.330884][ T1207] usb 5-1: USB disconnect, device number 13
[  230.581632][ T7880] A link change request failed with some changes committed already. Interface veth0_to_hsr may have been left with an inconsistent configuration, please check.
[  231.013527][ T1207] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  231.034246][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  231.043215][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  231.051844][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  231.063023][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  231.072133][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  231.213431][ T1207] usb 4-1: Using ep0 maxpacket: 32
[  231.239794][ T1207] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  231.248935][ T1207] usb 4-1: config 0 has no interface number 0
[  231.268003][ T1207] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  231.314705][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.353266][ T7889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.523'.
[  231.563915][ T7895] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  231.600340][ T7895] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  231.919031][ T1207] usb 4-1: Product: syz
[  231.923249][ T1207] usb 4-1: Manufacturer: syz
[  231.927930][ T1207] usb 4-1: SerialNumber: syz
[  231.939867][ T1207] usb 4-1: config 0 descriptor??
[  231.947854][ T1207] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  232.170741][ T1207] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  232.209995][ T1207] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  232.218173][ T7897] input: syz0 as /devices/virtual/input/input6
[  232.358153][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 7
[  232.569242][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  232.580562][ T1207] usb 4-1: USB disconnect, device number 22
[  232.645448][ T1207] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  232.720248][ T1207] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  232.904471][ T1207] quatech2 4-1:0.51: device disconnected
[  233.032217][ T7888] chnl_net:caif_netlink_parms(): no params data found
[  233.116800][ T5825] Bluetooth: hci5: command tx timeout
[  234.609357][ T7918] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  234.993998][ T7888] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.001169][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state
[  235.048593][ T5825] Bluetooth: unknown link type 13
[  235.054895][ T5825] Bluetooth: hci2: connection err: -111
[  235.063053][ T7888] bridge_slave_0: entered allmulticast mode
[  235.102345][ T7888] bridge_slave_0: entered promiscuous mode
[  235.167247][ T7888] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.193503][ T5825] Bluetooth: hci5: command tx timeout
[  235.213481][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.247590][ T7888] bridge_slave_1: entered allmulticast mode
[  235.284681][ T7888] bridge_slave_1: entered promiscuous mode
[  235.291225][ T5891] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  235.453514][ T5891] usb 4-1: Using ep0 maxpacket: 32
[  235.478766][ T5891] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  235.520309][ T5891] usb 4-1: config 0 has no interface number 0
[  235.538469][ T5891] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  235.571268][ T5891] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.626834][ T5891] usb 4-1: Product: syz
[  235.631036][ T5891] usb 4-1: Manufacturer: syz
[  235.652162][ T5891] usb 4-1: SerialNumber: syz
[  235.676959][ T5891] usb 4-1: config 0 descriptor??
[  235.701042][ T5891] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  235.716364][ T7888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  236.022134][ T7888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  236.257581][ T5891] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  236.272994][ T5821] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  236.290174][ T5821] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  236.298392][ T5821] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  236.306934][ T5821] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  236.314755][ T5821] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  236.348416][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  236.366414][ T5891] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  236.405931][ T5891] usb 4-1: USB disconnect, device number 23
[  236.440693][ T5891] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  236.458623][ T7888] team0: Port device team_slave_0 added
[  236.488367][ T5891] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  236.506609][ T5891] quatech2 4-1:0.51: device disconnected
[  236.522581][ T7888] team0: Port device team_slave_1 added
[  236.920971][ T7888] batman_adv: batadv0: Adding interface: batadv_slave_0
[  236.945614][ T7888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.073422][ T7888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  237.141845][ T7946] FAULT_INJECTION: forcing a failure.
[  237.141845][ T7946] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  237.191360][ T7946] CPU: 1 UID: 0 PID: 7946 Comm: syz.3.541 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  237.191386][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  237.191396][ T7946] Call Trace:
[  237.191403][ T7946]  <TASK>
[  237.191410][ T7946]  dump_stack_lvl+0x189/0x250
[  237.191450][ T7946]  ? __pfx____ratelimit+0x10/0x10
[  237.191473][ T7946]  ? __pfx_dump_stack_lvl+0x10/0x10
[  237.191494][ T7946]  ? __pfx__printk+0x10/0x10
[  237.191520][ T7946]  should_fail_ex+0x414/0x560
[  237.191544][ T7946]  _copy_to_user+0x31/0xb0
[  237.191561][ T7946]  bpf_test_finish+0x56f/0x700
[  237.191586][ T7946]  ? __pfx_bpf_test_finish+0x10/0x10
[  237.191605][ T7946]  ? bpf_test_timer_leave+0x10b/0x150
[  237.191626][ T7946]  bpf_prog_test_run_flow_dissector+0x44e/0x5c0
[  237.191658][ T7946]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[  237.191679][ T7946]  ? __fget_files+0x2a/0x420
[  237.191704][ T7946]  ? __fget_files+0x2a/0x420
[  237.191729][ T7946]  ? __pfx_bpf_prog_test_run_flow_dissector+0x10/0x10
[  237.191749][ T7946]  bpf_prog_test_run+0x2c7/0x340
[  237.191773][ T7946]  __sys_bpf+0x4a4/0x860
[  237.191794][ T7946]  ? __pfx___sys_bpf+0x10/0x10
[  237.191827][ T7946]  ? ksys_write+0x22a/0x250
[  237.191847][ T7946]  ? __pfx_ksys_write+0x10/0x10
[  237.191862][ T7946]  ? rcu_is_watching+0x15/0xb0
[  237.191892][ T7946]  __x64_sys_bpf+0x7c/0x90
[  237.191912][ T7946]  do_syscall_64+0xfa/0x3b0
[  237.191933][ T7946]  ? lockdep_hardirqs_on+0x9c/0x150
[  237.191955][ T7946]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.191972][ T7946]  ? clear_bhb_loop+0x60/0xb0
[  237.191992][ T7946]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.192009][ T7946] RIP: 0033:0x7fc95078e929
[  237.192031][ T7946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  237.192045][ T7946] RSP: 002b:00007fc951550038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  237.192063][ T7946] RAX: ffffffffffffffda RBX: 00007fc9509b5fa0 RCX: 00007fc95078e929
[  237.192074][ T7946] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a
[  237.192085][ T7946] RBP: 00007fc951550090 R08: 0000000000000000 R09: 0000000000000000
[  237.192096][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  237.192106][ T7946] R13: 0000000000000000 R14: 00007fc9509b5fa0 R15: 00007ffcbd35b6a8
[  237.192134][ T7946]  </TASK>
[  237.196814][ T7888] batman_adv: batadv0: Adding interface: batadv_slave_1
[  237.283365][ T5825] Bluetooth: hci5: command tx timeout
[  237.484657][ T7888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  237.512639][ T7888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  238.069452][ T7951] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  238.087918][ T7944] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  238.513140][ T5825] Bluetooth: hci1: command tx timeout
[  238.871236][ T7888] hsr_slave_0: entered promiscuous mode
[  238.878769][ T7888] hsr_slave_1: entered promiscuous mode
[  238.888099][ T7888] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  238.895723][ T7888] Cannot create hsr debugfs directory
[  239.421104][ T7969] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  239.422778][   T48] IPVS: starting estimator thread 0...
[  239.518550][ T5825] Bluetooth: hci5: command tx timeout
[  239.545441][ T7981] IPVS: using max 27 ests per chain, 64800 per kthread
[  240.021824][ T7888] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  240.990221][ T5821] Bluetooth: hci1: command tx timeout
[  241.632177][ T6003] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.346710][ T7888] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  242.372862][ T8007] ubi31: attaching mtd0
[  242.379669][ T8007] ubi31: scanning is finished
[  242.384461][ T8007] ubi31: empty MTD device detected
[  242.468082][ T7888] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  242.978843][ T7935] chnl_net:caif_netlink_parms(): no params data found
[  243.063374][ T5825] Bluetooth: hci1: command tx timeout
[  243.304622][ T8007] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  243.312261][ T8007] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  243.319668][ T8007] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  243.326796][ T8007] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  243.334355][ T8007] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  243.341206][ T8007] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  243.349319][ T8007] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1708702654
[  243.361397][ T8007] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  243.372375][ T8019] ubi31: background thread "ubi_bgt31d" started, PID 8019
[  243.471817][ T6003] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.526439][ T7888] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  243.701638][ T6003] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.993101][ T8031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  244.580687][ T8031] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  244.791983][ T6003] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.035165][ T7935] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.043962][ T7935] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.051952][ T7935] bridge_slave_0: entered allmulticast mode
[  245.061031][ T7935] bridge_slave_0: entered promiscuous mode
[  245.179231][ T5825] Bluetooth: hci1: command tx timeout
[  245.609312][ T7935] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.631570][ T7935] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.642125][ T7935] bridge_slave_1: entered allmulticast mode
[  245.652652][ T7935] bridge_slave_1: entered promiscuous mode
[  245.918302][ T7935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  245.945882][ T7935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  245.984575][ T8045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.562'.
[  246.152838][ T8045] bridge0: port 3(vlan2) entered blocking state
[  246.164117][ T8045] bridge0: port 3(vlan2) entered disabled state
[  246.170659][ T8045] vlan2: entered allmulticast mode
[  246.211151][ T8045] dummy0: entered allmulticast mode
[  246.218824][ T8045] vlan2: entered promiscuous mode
[  246.226008][ T8045] dummy0: entered promiscuous mode
[  246.417082][ T7935] team0: Port device team_slave_0 added
[  246.451464][ T6003] bridge_slave_1: left allmulticast mode
[  246.457383][ T6003] bridge_slave_1: left promiscuous mode
[  246.550037][ T6003] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.589172][ T6003] bridge_slave_0: left allmulticast mode
[  246.599131][ T6003] bridge_slave_0: left promiscuous mode
[  246.613617][ T6003] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.244207][ T8064] netlink: 376 bytes leftover after parsing attributes in process `syz.3.567'.
[  248.255024][ T8064] netlink: 104 bytes leftover after parsing attributes in process `syz.3.567'.
[  249.006937][ T8070] CIFS mount error: No usable UNC path provided in device string!
[  249.006937][ T8070] 
[  249.017660][ T8070] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  249.648315][ T6003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  249.679098][ T6003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  249.738315][ T6003] bond0 (unregistering): Released all slaves
[  249.856326][ T7935] team0: Port device team_slave_1 added
[  250.261082][ T8075] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  250.399029][ T8054] netlink: 60 bytes leftover after parsing attributes in process `syz.1.564'.
[  250.531598][ T8073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.540277][ T8073] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  250.741965][ T8082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  250.795019][ T8082] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  251.024760][ T7935] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.055412][ T7935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.173355][ T7935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  251.249188][ T7935] batman_adv: batadv0: Adding interface: batadv_slave_1
[  251.276442][    T9] libceph: connect (1)[c::]:6789 error -101
[  251.296587][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  251.418116][ T7935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.706113][    T9] libceph: connect (1)[c::]:6789 error -101
[  251.712102][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  251.856385][ T7935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.926914][ T6003] batman_adv: batadv0: Interface deactivated: wlan0
[  251.970727][ T6003] batman_adv: batadv0: Removing interface: wlan0
[  252.036840][ T8093] ceph: No mds server is up or the cluster is laggy
[  252.693657][ T8113] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  253.260102][ T7935] hsr_slave_0: entered promiscuous mode
[  253.308916][ T7935] hsr_slave_1: entered promiscuous mode
[  253.352641][ T7935] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  253.403513][ T7935] Cannot create hsr debugfs directory
[  253.477451][ T7888] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.758919][ T7888] 8021q: adding VLAN 0 to HW filter on device team0
[  253.857110][ T6003] hsr_slave_0: left promiscuous mode
[  253.901417][ T6003] hsr_slave_1: left promiscuous mode
[  253.908216][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  253.951720][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_0
[  254.073831][    T9] IPVS: starting estimator thread 0...
[  254.144421][ T6003] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.157558][ T8132] NILFS (nullb0): couldn't find nilfs on the device
[  254.165762][ T6003] batman_adv: batadv0: Removing interface: batadv_slave_1
[  254.613546][ T8130] IPVS: using max 32 ests per chain, 76800 per kthread
[  254.621838][ T6003] veth1_macvtap: left promiscuous mode
[  254.642217][ T6003] veth0_macvtap: left promiscuous mode
[  254.667145][ T6003] veth1_vlan: left promiscuous mode
[  254.676979][ T6003] veth0_vlan: left promiscuous mode
[  255.343018][ T8144] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  255.600825][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  255.607546][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  256.653900][ T8151] syz.2.587: attempt to access beyond end of device
[  256.653900][ T8151] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0
[  256.784087][ T8140] mmap: syz.3.585 (8140) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  257.493074][ T6003] team0 (unregistering): Port device team_slave_1 removed
[  257.591119][ T6003] team0 (unregistering): Port device team_slave_0 removed
[  258.684897][ T5988] bridge0: port 1(bridge_slave_0) entered blocking state
[  258.692089][ T5988] bridge0: port 1(bridge_slave_0) entered forwarding state
[  258.800967][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state
[  258.808183][ T5988] bridge0: port 2(bridge_slave_1) entered forwarding state
[  259.844781][ T7888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  260.254964][ T8195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.311118][ T8195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.380280][ T8195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  260.511450][ T8195] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  260.526563][ T8203] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.596'.
[  260.544675][ T7935] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  260.619580][ T7935] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  260.690970][ T7935] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  260.755038][ T7935] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  260.961463][ T7888] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.341993][ T7935] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.566020][ T7935] 8021q: adding VLAN 0 to HW filter on device team0
[  261.649275][ T6003] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.656479][ T6003] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.766907][ T6003] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.774131][ T6003] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.351831][ T7888] veth0_vlan: entered promiscuous mode
[  262.436192][ T7888] veth1_vlan: entered promiscuous mode
[  262.660920][ T7888] veth0_macvtap: entered promiscuous mode
[  262.850775][ T8234] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  263.278293][ T7888] veth1_macvtap: entered promiscuous mode
[  263.766037][ T8247] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  263.820784][ T8247] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  264.295791][ T7888] batman_adv: batadv0: Interface activated: batadv_slave_0
[  264.313921][ T8246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  264.322515][ T8246] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.944271][ T7888] batman_adv: batadv0: Interface activated: batadv_slave_1
[  265.122029][ T7888] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  265.337752][ T7888] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  265.366012][ T7888] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  265.412468][ T7888] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  265.686069][ T7935] 8021q: adding VLAN 0 to HW filter on device batadv0
[  265.902580][ T5996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.974166][ T5996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.172573][ T5989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.222472][ T5989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.526309][ T8273] fuse: Bad value for 'fd'
[  266.542660][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'.
[  266.693162][ T8273] team0: Port device team_slave_1 removed
[  268.111364][ T8286] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  268.991559][ T7935] veth0_vlan: entered promiscuous mode
[  269.081521][ T7935] veth1_vlan: entered promiscuous mode
[  269.366353][ T7935] veth0_macvtap: entered promiscuous mode
[  270.201788][ T8301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  270.243900][ T8301] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  270.266521][ T7935] veth1_macvtap: entered promiscuous mode
[  270.379229][ T7935] batman_adv: batadv0: Interface activated: batadv_slave_0
[  270.423077][ T7935] batman_adv: batadv0: Interface activated: batadv_slave_1
[  270.425163][   T30] audit: type=1326 audit(1751018037.160:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8306 comm="syz.5.610" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdb8318e929 code=0x0
[  270.440051][ T7935] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  270.450961][    C0] vkms_vblank_simulate: vblank timer overrun
[  270.582869][ T7935] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  270.719024][ T7935] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  270.816153][ T7935] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  271.244406][ T8320] fuseblk: Bad value for 'user_id'
[  271.249597][ T8320] fuseblk: Bad value for 'user_id'
[  272.212551][ T5996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.212570][ T5996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.481144][ T8331] netlink: 'syz.2.616': attribute type 1 has an invalid length.
[  272.555602][ T8332] xt_l2tp: missing protocol rule (udp|l2tpip)
[  272.976434][ T5996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  273.073122][ T5996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  273.271856][ T8329] netlink: 48 bytes leftover after parsing attributes in process `syz.2.616'.
[  273.320119][ T8343] use of bytesused == 0 is deprecated and will be removed in the future,
[  273.375335][ T8343] use the actual size instead.
[  274.944489][ T8367] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  274.974039][ T8367] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  276.093975][ T5891] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  276.150103][    C0] raw-gadget.4 gadget.6: ignoring, device is not running
[  276.341197][ T5821] Bluetooth: hci1: command 0x0405 tx timeout
[  276.923706][ T5891] usb 7-1: device descriptor read/64, error -32
[  277.173419][ T5891] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  277.513786][ T5891] usb 7-1: device descriptor read/64, error -71
[  277.625545][ T5891] usb usb7-port1: attempt power cycle
[  278.343386][ T5891] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  278.457519][ T8406] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  278.568523][ T8407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  278.583762][ T8390] netlink: 'syz.2.627': attribute type 1 has an invalid length.
[  278.591432][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.627'.
[  278.626254][ T5891] usb 7-1: device descriptor read/8, error -71
[  278.941393][ T8407] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.437665][ T5877] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  279.579589][ T8421] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  279.593424][ T8421] Error validating options; rc = [-22]
[  280.164123][ T5877] usb 4-1: unable to read config index 0 descriptor/start: -61
[  280.171741][ T5877] usb 4-1: can't read configurations, error -61
[  280.595607][ T5877] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  280.840409][ T8436] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  280.868900][ T8436] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  281.473108][ T5877] usb 4-1: device descriptor read/all, error -71
[  281.513948][ T5877] usb usb4-port1: attempt power cycle
[  282.037846][ T8446] netlink: 'syz.6.637': attribute type 10 has an invalid length.
[  282.442344][ T8446] batman_adv: batadv0: Adding interface: wlan0
[  282.449923][ T8446] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  282.526134][ T8446] batman_adv: batadv0: Interface activated: wlan0
[  283.593148][ T8465] deleting an unspecified loop device is not supported.
[  284.306152][ T8471] 8021q: adding VLAN 0 to HW filter on device bond0
[  284.495914][ T8471] bond0: (slave rose0): Enslaving as an active interface with an up link
[  285.931777][ T8491] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  285.942170][ T8491] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  286.923546][ T5877] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  287.144220][ T5877] usb 4-1: Using ep0 maxpacket: 32
[  287.255980][ T5877] usb 4-1: config 0 has an invalid interface number: 65 but max is 0
[  287.274584][ T5877] usb 4-1: config 0 has no interface number 0
[  287.280971][ T5877] usb 4-1: config 0 interface 65 has no altsetting 0
[  287.293793][   T30] audit: type=1804 audit(1751018054.040:5): pid=8503 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.652" name="/newroot/141/file0" dev="tmpfs" ino=775 res=1 errno=0
[  287.329382][ T5877] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0620, bcdDevice=54.27
[  287.653418][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.661577][ T5877] usb 4-1: Product: syz
[  287.665932][ T5877] usb 4-1: Manufacturer: syz
[  287.671658][ T5877] usb 4-1: SerialNumber: syz
[  287.746954][ T5877] usb 4-1: config 0 descriptor??
[  288.041303][ T5877] qmi_wwan 4-1:0.65: probe with driver qmi_wwan failed with error -22
[  288.157514][ T5877] usb 4-1: USB disconnect, device number 27
[  290.400464][ T8546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.661'.
[  290.438039][ T8546] netlink: 28 bytes leftover after parsing attributes in process `syz.2.661'.
[  290.448296][ T8548] netlink: 24 bytes leftover after parsing attributes in process `syz.1.662'.
[  291.162893][ T8553] netlink: 'syz.3.663': attribute type 11 has an invalid length.
[  291.193461][ T5891] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  291.511721][ T8564] netlink: 'syz.1.666': attribute type 1 has an invalid length.
[  291.519918][ T8564] netlink: 600 bytes leftover after parsing attributes in process `syz.1.666'.
[  291.835381][ T5891] usb 4-1: Using ep0 maxpacket: 32
[  291.844831][ T5891] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  291.879444][ T5891] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.898218][ T5891] usb 4-1: config 0 descriptor??
[  291.913177][ T5891] gspca_main: xirlink-cit-2.14.0 probing 0545:8080
[  291.957025][ T5891] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7
[  292.370632][ T5891] usb 4-1: USB disconnect, device number 28
[  294.166087][ T8588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  294.320252][ T8588] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  294.536132][ T8596] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  294.566656][ T8596] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  295.143399][ T5878] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  296.009478][ T5878] usb 6-1: device descriptor read/64, error -71
[  296.076241][ T8610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.676'.
[  296.270246][ T8618] 9pnet_fd: Insufficient options for proto=fd
[  296.279126][ T5878] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  296.383444][ T8620] netlink: 20 bytes leftover after parsing attributes in process `syz.6.678'.
[  296.448528][ T5878] usb 6-1: device descriptor read/64, error -71
[  296.606649][ T5878] usb usb6-port1: attempt power cycle
[  297.428142][ T5878] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  297.695726][ T5878] usb 6-1: device descriptor read/8, error -71
[  299.324655][ T8658] delete_channel: no stack
[  299.523773][ T5878] usb 6-1: new full-speed USB device number 5 using dummy_hcd
[  299.544613][ T8662] veth1_to_bond: entered allmulticast mode
[  299.574517][ T8662] veth1_to_bond: entered promiscuous mode
[  299.595322][ T5878] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  299.643648][ T5878] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  299.705399][ T5878] usb 6-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00
[  299.733715][ T5153] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  299.741571][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  299.805633][ T5878] usb 6-1: config 0 descriptor??
[  299.814048][ T8651] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22
[  299.945478][ T5153] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  299.983397][ T5153] usb 7-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00
[  299.993762][ T8654] delete_channel: no stack
[  300.012941][ T5153] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.077231][ T5153] usb 7-1: config 0 descriptor??
[  300.698044][ T8683] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  300.709641][ T8683] FAULT_INJECTION: forcing a failure.
[  300.709641][ T8683] name failslab, interval 1, probability 0, space 0, times 0
[  300.722537][ T8683] CPU: 0 UID: 0 PID: 8683 Comm: syz.1.691 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  300.722561][ T8683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  300.722571][ T8683] Call Trace:
[  300.722580][ T8683]  <TASK>
[  300.722587][ T8683]  dump_stack_lvl+0x189/0x250
[  300.722616][ T8683]  ? __pfx____ratelimit+0x10/0x10
[  300.722641][ T8683]  ? __pfx_dump_stack_lvl+0x10/0x10
[  300.722664][ T8683]  ? __pfx__printk+0x10/0x10
[  300.722688][ T8683]  ? __pfx___might_resched+0x10/0x10
[  300.722711][ T8683]  ? fs_reclaim_acquire+0x7d/0x100
[  300.722739][ T8683]  should_fail_ex+0x414/0x560
[  300.722764][ T8683]  should_failslab+0xa8/0x100
[  300.722787][ T8683]  __kmalloc_noprof+0xcb/0x4f0
[  300.722804][ T8683]  ? kfree+0x4d/0x440
[  300.722820][ T8683]  ? tomoyo_realpath_from_path+0xe3/0x5d0
[  300.722848][ T8683]  tomoyo_realpath_from_path+0xe3/0x5d0
[  300.722874][ T8683]  ? tomoyo_domain+0xda/0x130
[  300.722903][ T8683]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  300.722923][ T8683]  tomoyo_path_number_perm+0x1e8/0x5a0
[  300.722947][ T8683]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  300.722967][ T8683]  ? lockdep_hardirqs_on+0x9c/0x150
[  300.722995][ T8683]  ? rcu_is_watching+0x15/0xb0
[  300.723026][ T8683]  ? __lock_acquire+0xab9/0xd20
[  300.723068][ T8683]  ? __fget_files+0x2a/0x420
[  300.723092][ T8683]  ? __fget_files+0x2a/0x420
[  300.723111][ T8683]  ? __fget_files+0x3a0/0x420
[  300.723131][ T8683]  ? __fget_files+0x2a/0x420
[  300.723156][ T8683]  security_file_ioctl+0xcb/0x2d0
[  300.723180][ T8683]  __se_sys_ioctl+0x47/0x170
[  300.723201][ T8683]  do_syscall_64+0xfa/0x3b0
[  300.723231][ T8683]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.723248][ T8683]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  300.723264][ T8683]  ? clear_bhb_loop+0x60/0xb0
[  300.723287][ T8683]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  300.723304][ T8683] RIP: 0033:0x7ff45178e929
[  300.723319][ T8683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  300.723335][ T8683] RSP: 002b:00007ff4525a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  300.723354][ T8683] RAX: ffffffffffffffda RBX: 00007ff4519b6160 RCX: 00007ff45178e929
[  300.723368][ T8683] RDX: 0000200000000140 RSI: 00000000000007b1 RDI: 0000000000000007
[  300.723379][ T8683] RBP: 00007ff4525a6090 R08: 0000000000000000 R09: 0000000000000000
[  300.723390][ T8683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  300.723400][ T8683] R13: 0000000000000000 R14: 00007ff4519b6160 R15: 00007ffe89371b48
[  300.723430][ T8683]  </TASK>
[  300.979609][ T8683] ERROR: Out of memory at tomoyo_realpath_from_path.
[  301.891851][ T8696] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  302.732323][ T8681] syz.6.688: attempt to access beyond end of device
[  302.732323][ T8681] nbd6: rw=0, sector=0, nr_sectors = 1 limit=0
[  302.747409][ T8681] (syz.6.688,8681,0):ocfs2_get_sector:1714 ERROR: status = -5
[  302.755366][ T8681] (syz.6.688,8681,0):ocfs2_sb_probe:753 ERROR: status = -5
[  302.762901][ T8681] (syz.6.688,8681,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  302.771658][ T8681] (syz.6.688,8681,0):ocfs2_fill_super:1177 ERROR: status = -5
[  302.822549][ T8700] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd3": -EINTR
[  303.347999][ T8690] binder: BINDER_SET_CONTEXT_MGR already set
[  303.365364][ T8690] binder: 8689:8690 ioctl 4018620d 200000000040 returned -16
[  303.553496][ T5153] usbhid 7-1:0.0: can't add hid device: -71
[  303.559562][ T5153] usbhid 7-1:0.0: probe with driver usbhid failed with error -71
[  303.650480][ T5153] usb 7-1: USB disconnect, device number 6
[  304.604153][ T8716] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  304.614689][ T8716] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  306.093375][ T5870] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  306.283738][ T5870] usb 7-1: Using ep0 maxpacket: 32
[  306.311195][ T5870] usb 7-1: config 0 has an invalid interface number: 114 but max is 0
[  306.342551][ T5870] usb 7-1: config 0 has no interface number 0
[  306.349186][ T5870] usb 7-1: config 0 interface 114 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  306.380176][ T5870] usb 7-1: New USB device found, idVendor=05ac, idProduct=9218, bcdDevice=aa.8b
[  306.413637][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.454971][ T5870] usb 7-1: Product: syz
[  306.459187][ T5870] usb 7-1: Manufacturer: syz
[  306.476096][ T5870] usb 7-1: SerialNumber: syz
[  306.491438][ T5870] usb 7-1: config 0 descriptor??
[  306.675676][ T5870] appledisplay 7-1:0.114: Could not find int-in endpoint
[  306.694960][ T5870] usbhid 7-1:0.114: couldn't find an input interrupt endpoint
[  307.332683][ T8728] netlink: 36 bytes leftover after parsing attributes in process `syz.6.698'.
[  309.250843][ T5153] usb 6-1: USB disconnect, device number 5
[  309.284404][ T8669] veth1_to_bond: left promiscuous mode
[  309.321287][ T8669] veth1_to_bond: left allmulticast mode
[  309.563456][    T9] usb 7-1: USB disconnect, device number 7
[  309.657653][ T8733] netlink: 20 bytes leftover after parsing attributes in process `syz.3.700'.
[  310.163720][ T8752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  310.271393][ T8752] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  310.387472][ T8757] tipc: Started in network mode
[  310.392360][ T8757] tipc: Node identity 4, cluster identity 4711
[  310.398922][ T8757] tipc: Node number set to 4
[  310.467421][ T5153] IPVS: starting estimator thread 0...
[  310.563466][ T8760] IPVS: using max 52 ests per chain, 124800 per kthread
[  311.137884][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.5.708'.
[  311.784362][ T8769] libceph: resolve '�@��e2��OAq���cz' (ret=-3): failed
[  313.425313][ T8789] ALSA: seq fatal error: cannot create timer (-22)
[  314.926529][ T8818] lo speed is unknown, defaulting to 1000
[  315.866177][ T8818] lo speed is unknown, defaulting to 1000
[  315.872850][ T8818] lo speed is unknown, defaulting to 1000
[  317.044056][ T1299] ieee802154 phy0 wpan0: encryption failed: -22
[  317.553707][ T1299] ieee802154 phy1 wpan1: encryption failed: -22
[  318.249398][ T8853] netlink: 'syz.5.726': attribute type 4 has an invalid length.
[  318.667951][ T8862] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  320.156431][ T8872] tty tty32: ldisc open failed (-12), clearing slot 31
[  320.734815][ T8878] binder: 8877:8878 ioctl c0306201 200000000040 returned -22
[  320.933637][ T5153] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  321.123407][ T5153] usb 4-1: Using ep0 maxpacket: 32
[  321.151957][ T5153] usb 4-1: config 8 has an invalid interface number: 226 but max is 2
[  321.233366][ T5153] usb 4-1: config 8 has an invalid interface number: 217 but max is 2
[  321.242041][ T5153] usb 4-1: config 8 has an invalid interface number: 134 but max is 2
[  321.301425][ T5153] usb 4-1: config 8 has an invalid interface number: 237 but max is 2
[  321.361491][ T5153] usb 4-1: config 8 has 4 interfaces, different from the descriptor's value: 3
[  321.414058][ T5153] usb 4-1: config 8 has no interface number 0
[  321.420274][ T5153] usb 4-1: config 8 has no interface number 1
[  321.598416][ T5153] usb 4-1: config 8 has no interface number 2
[  321.628986][ T8818] infiniband syz0: set active
[  321.633981][ T5153] usb 4-1: config 8 has no interface number 3
[  321.634059][ T5153] usb 4-1: config 8 interface 226 altsetting 6 bulk endpoint 0x9 has invalid maxpacket 1023
[  321.649857][ T5891] lo speed is unknown, defaulting to 1000
[  322.313921][ T8818] infiniband syz0: added lo
[  322.341515][ T8818] syz0: rxe_create_cq: returned err = -12
[  322.390833][ T5153] usb 4-1: config 8 interface 226 altsetting 6 endpoint 0xD has invalid maxpacket 1023, setting to 64
[  322.431322][ T8818] infiniband syz0: Couldn't create ib_mad CQ
[  322.460242][ T5153] usb 4-1: config 8 interface 226 altsetting 6 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  322.486941][ T8818] infiniband syz0: Couldn't open port 1
[  322.547868][ T8902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'.
[  322.673676][ T5153] usb 4-1: config 8 interface 217 altsetting 24 has a duplicate endpoint with address 0x2, skipping
[  323.325911][ T5153] usb 4-1: config 8 interface 217 altsetting 24 has an invalid descriptor for endpoint zero, skipping
[  323.380942][ T5153] usb 4-1: config 8 interface 217 altsetting 24 has a duplicate endpoint with address 0xD, skipping
[  323.469294][ T5153] usb 4-1: config 8 interface 217 altsetting 24 has a duplicate endpoint with address 0x9, skipping
[  323.481187][ T5153] usb 4-1: config 8 interface 217 altsetting 24 has a duplicate endpoint with address 0x1, skipping
[  323.496034][ T5153] usb 4-1: config 8 interface 217 altsetting 24 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  323.508123][ T5153] usb 4-1: config 8 interface 217 altsetting 24 endpoint 0x8E has an invalid bInterval 182, changing to 7
[  323.520262][ T5153] usb 4-1: config 8 interface 217 altsetting 24 endpoint 0x8E has invalid maxpacket 18029, setting to 1024
[  323.572390][ T5153] usb 4-1: config 8 interface 217 altsetting 24 has 11 endpoint descriptors, different from the interface descriptor's value: 10
[  323.633552][ T5153] usb 4-1: config 8 interface 134 altsetting 3 has a duplicate endpoint with address 0x7, skipping
[  323.640777][ T8818] RDS/IB: syz0: added
[  323.689652][ T5153] usb 4-1: config 8 interface 134 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[  323.698182][ T8818] smc: adding ib device syz0 with port count 1
[  323.916699][ T8818] smc:    ib device syz0 port 1 has pnetid 
[  323.924889][ T5891] lo speed is unknown, defaulting to 1000
[  323.982314][ T5153] usb 4-1: config 8 interface 134 altsetting 3 has a duplicate endpoint with address 0x4, skipping
[  323.999392][ T8818] lo speed is unknown, defaulting to 1000
[  324.405408][ T5153] usb 4-1: too many endpoints for config 8 interface 237 altsetting 225: 93, using maximum allowed: 30
[  324.416884][ T5153] usb 4-1: config 8 interface 237 altsetting 225 has 0 endpoint descriptors, different from the interface descriptor's value: 93
[  324.421087][ T5825] Bluetooth: hci3: command 0x0406 tx timeout
[  324.591879][ T5153] usb 4-1: config 8 interface 226 has no altsetting 0
[  324.630108][ T5153] usb 4-1: config 8 interface 217 has no altsetting 0
[  324.646295][ T5153] usb 4-1: config 8 interface 134 has no altsetting 0
[  324.653202][ T5153] usb 4-1: config 8 interface 237 has no altsetting 0
[  324.679627][ T5153] usb 4-1: string descriptor 0 read error: -71
[  324.714418][ T5153] usb 4-1: New USB device found, idVendor=eb1a, idProduct=a313, bcdDevice=7e.1d
[  324.758350][ T5153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.839731][ T5153] usb 4-1: can't set config #8, error -71
[  324.885473][ T5153] usb 4-1: USB disconnect, device number 29
[  325.544264][ T8937] syz.2.744: attempt to access beyond end of device
[  325.544264][ T8937] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0
[  328.197803][ T8818] lo speed is unknown, defaulting to 1000
[  329.133600][   T10] usb 2-1: USB disconnect, device number 7
[  329.924603][ T5989] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.355955][ T5989] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.444039][ T8818] lo speed is unknown, defaulting to 1000
[  330.563053][ T5825] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  330.574572][ T5825] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  330.582335][ T5825] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  330.591921][ T5825] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  330.601369][ T5825] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  330.715620][ T5989] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.881614][ T8996] netlink: 24 bytes leftover after parsing attributes in process `syz.2.758'.
[  331.206705][ T5989] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  331.406013][ T9005] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  331.457578][ T9005] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  332.408357][ T9011] netlink: 'syz.6.759': attribute type 10 has an invalid length.
[  332.618142][ T9011] team0: Port device wlan1 added
[  332.629022][ T8990] lo speed is unknown, defaulting to 1000
[  332.713747][ T5825] Bluetooth: hci5: command tx timeout
[  333.932542][ T5989] bridge_slave_1: left allmulticast mode
[  333.970415][ T5989] bridge_slave_1: left promiscuous mode
[  333.998113][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.113321][ T5989] bridge_slave_0: left allmulticast mode
[  334.119011][ T5989] bridge_slave_0: left promiscuous mode
[  334.145314][   T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  334.161755][   T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  334.170733][   T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  334.179466][   T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  334.188295][   T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  334.221870][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.794755][ T5825] Bluetooth: hci5: command 0x041b tx timeout
[  335.723644][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  335.739085][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  335.749534][ T5989] bond0 (unregistering): Released all slaves
[  335.818984][ T8818] lo speed is unknown, defaulting to 1000
[  336.317289][ T5821] Bluetooth: hci6: command tx timeout
[  336.880120][ T5821] Bluetooth: hci5: command 0x041b tx timeout
[  337.383839][ T5950] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  337.573562][ T5950] usb 7-1: Using ep0 maxpacket: 32
[  337.600653][ T5950] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  337.647817][ T5950] usb 7-1: config 0 has no interface number 0
[  337.695454][ T5950] usb 7-1: config 0 interface 184 has no altsetting 0
[  337.738709][ T5950] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  337.762265][ T9032] lo speed is unknown, defaulting to 1000
[  337.796282][ T5950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  337.845939][ T5950] usb 7-1: Product: syz
[  337.878865][ T5950] usb 7-1: Manufacturer: syz
[  337.910788][ T5950] usb 7-1: SerialNumber: syz
[  337.957943][ T5950] usb 7-1: config 0 descriptor??
[  338.028222][ T5950] smsc75xx v1.0.0
[  338.245395][ T8990] chnl_net:caif_netlink_parms(): no params data found
[  338.394327][ T5821] Bluetooth: hci6: command tx timeout
[  338.614320][ T5950] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  338.665396][ T5950] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  338.681660][ T5950] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[  338.917899][ T5950] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61
[  338.918996][ T9060] netlink: 20 bytes leftover after parsing attributes in process `syz.6.769'.
[  338.928645][ T5950] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  338.946972][ T5950] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61
[  338.956878][ T5821] Bluetooth: hci5: command 0x041b tx timeout
[  338.976780][ T5950] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -61
[  339.369156][ T9098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.378386][ T8818] lo speed is unknown, defaulting to 1000
[  339.385323][ T9098] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.416854][ T9095] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  339.430315][ T9095] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  339.470874][ T8990] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.478756][ T5950] usb 7-1: USB disconnect, device number 8
[  339.487633][ T8990] bridge0: port 1(bridge_slave_0) entered disabled state
[  339.505184][ T8990] bridge_slave_0: entered allmulticast mode
[  339.521451][ T8990] bridge_slave_0: entered promiscuous mode
[  339.540928][ T8990] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.549085][ T8990] bridge0: port 2(bridge_slave_1) entered disabled state
[  339.556819][ T8990] bridge_slave_1: entered allmulticast mode
[  339.694166][ T8990] bridge_slave_1: entered promiscuous mode
[  340.493908][ T5821] Bluetooth: hci6: command tx timeout
[  340.603418][ T8990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  340.747331][ T8990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  340.985153][ T9118] netlink: 48 bytes leftover after parsing attributes in process `syz.3.780'.
[  341.023491][ T9118] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  341.031050][ T9118] IPv6: NLM_F_CREATE should be set when creating new route
[  341.079430][ T5821] Bluetooth: hci5: command 0x041b tx timeout
[  341.189405][ T8990] team0: Port device team_slave_0 added
[  341.665393][ T8818] lo speed is unknown, defaulting to 1000
[  341.783205][ T8990] team0: Port device team_slave_1 added
[  342.181578][ T8990] batman_adv: batadv0: Adding interface: batadv_slave_0
[  342.203644][ T8990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.291939][ T8990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  342.553801][ T5821] Bluetooth: hci6: command tx timeout
[  342.681381][ T8990] batman_adv: batadv0: Adding interface: batadv_slave_1
[  342.840610][ T9144] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  342.906964][ T8990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.968220][ T9142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  342.976918][ T9142] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  343.039012][ T8990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  345.083423][   T48] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  345.394990][   T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  345.453916][   T48] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  345.525247][ T8990] hsr_slave_0: entered promiscuous mode
[  345.554529][   T48] usb 7-1: New USB device found, idVendor=07c0, idProduct=1524, bcdDevice= 0.00
[  345.572459][ T8990] hsr_slave_1: entered promiscuous mode
[  345.583546][ T8990] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  345.608452][ T8990] Cannot create hsr debugfs directory
[  345.608927][   T48] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  345.624372][ T9032] chnl_net:caif_netlink_parms(): no params data found
[  345.674477][   T48] usb 7-1: config 0 descriptor??
[  345.761614][ T5989] hsr_slave_0: left promiscuous mode
[  345.786290][ T5989] hsr_slave_1: left promiscuous mode
[  345.808407][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  345.835810][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0
[  345.848525][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  345.858324][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1
[  345.894734][ T9183] netlink: 'syz.2.794': attribute type 3 has an invalid length.
[  345.897005][ T5989] veth1_macvtap: left promiscuous mode
[  345.939230][ T5989] veth0_macvtap: left promiscuous mode
[  345.956822][ T5989] veth1_vlan: left promiscuous mode
[  345.973516][ T5989] veth0_vlan: left promiscuous mode
[  346.000644][   T48] usb 7-1: USB disconnect, device number 9
[  346.659150][ T7717] syz.4.479: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  346.680552][ T7717] CPU: 0 UID: 0 PID: 7717 Comm: syz.4.479 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  346.680577][ T7717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  346.680597][ T7717] Call Trace:
[  346.680604][ T7717]  <TASK>
[  346.680611][ T7717]  dump_stack_lvl+0x189/0x250
[  346.680642][ T7717]  ? __pfx_dump_stack_lvl+0x10/0x10
[  346.680666][ T7717]  ? __pfx__printk+0x10/0x10
[  346.680685][ T7717]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  346.680721][ T7717]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  346.680750][ T7717]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  346.680778][ T7717]  warn_alloc+0x214/0x310
[  346.680808][ T7717]  ? __pfx_warn_alloc+0x10/0x10
[  346.680839][ T7717]  ? __get_vm_area_node+0x28f/0x300
[  346.680861][ T7717]  ? relay_open_buf+0x217/0xd40
[  346.680883][ T7717]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  346.680933][ T7717]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  346.680958][ T7717]  ? rcu_is_watching+0x15/0xb0
[  346.680983][ T7717]  ? relay_open_buf+0x217/0xd40
[  346.681000][ T7717]  ? relay_open_buf+0x217/0xd40
[  346.681013][ T7717]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  346.681035][ T7717]  ? relay_open_buf+0x217/0xd40
[  346.681050][ T7717]  ? trace_kmalloc+0x1f/0xd0
[  346.681068][ T7717]  ? relay_open_buf+0x17c/0xd40
[  346.681090][ T7717]  relay_open_buf+0x217/0xd40
[  346.681119][ T7717]  relay_open+0x427/0x920
[  346.681142][ T7717]  do_blk_trace_setup+0x591/0x9d0
[  346.681175][ T7717]  blk_trace_setup+0x116/0x1f0
[  346.681203][ T7717]  ? __pfx_blk_trace_setup+0x10/0x10
[  346.681236][ T7717]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  346.681265][ T7717]  blk_trace_ioctl+0x181/0x430
[  346.681289][ T7717]  ? __pfx_blk_trace_ioctl+0x10/0x10
[  346.681312][ T7717]  ? smk_access+0x14c/0x4e0
[  346.681344][ T7717]  ? smk_tskacc+0x2fc/0x370
[  346.681373][ T7717]  ? __pfx_smack_file_ioctl+0x10/0x10
[  346.681400][ T7717]  blkdev_ioctl+0x416/0x6d0
[  346.681426][ T7717]  ? __pfx_blkdev_ioctl+0x10/0x10
[  346.681445][ T7717]  ? __fget_files+0x2a/0x420
[  346.681470][ T7717]  ? bpf_lsm_file_ioctl+0x9/0x20
[  346.681493][ T7717]  ? __pfx_blkdev_ioctl+0x10/0x10
[  346.681516][ T7717]  __se_sys_ioctl+0xf9/0x170
[  346.681538][ T7717]  do_syscall_64+0xfa/0x3b0
[  346.681561][ T7717]  ? lockdep_hardirqs_on+0x9c/0x150
[  346.681585][ T7717]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.681603][ T7717]  ? clear_bhb_loop+0x60/0xb0
[  346.681625][ T7717]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  346.681642][ T7717] RIP: 0033:0x7f7d5818e929
[  346.681664][ T7717] Code: Unable to access opcode bytes at 0x7f7d5818e8ff.
[  346.681673][ T7717] RSP: 002b:00007f7d5907d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  346.681692][ T7717] RAX: ffffffffffffffda RBX: 00007f7d583b5fa0 RCX: 00007f7d5818e929
[  346.681706][ T7717] RDX: 0000200000000140 RSI: 00000000c0481273 RDI: 0000000000000004
[  346.681726][ T7717] RBP: 00007f7d58210b39 R08: 0000000000000000 R09: 0000000000000000
[  346.681738][ T7717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  346.681748][ T7717] R13: 0000000000000000 R14: 00007f7d583b5fa0 R15: 00007ffce9092ae8
[  346.681779][ T7717]  </TASK>
[  346.681953][ T7717] Mem-Info:
[  346.991862][ T7717] active_anon:3157 inactive_anon:2158 isolated_anon:0
[  346.991862][ T7717]  active_file:2441 inactive_file:11634 isolated_file:0
[  346.991862][ T7717]  unevictable:768 dirty:169 writeback:0
[  346.991862][ T7717]  slab_reclaimable:5988 slab_unreclaimable:106865
[  346.991862][ T7717]  mapped:34145 shmem:3513 pagetables:3239
[  346.991862][ T7717]  sec_pagetables:0 bounce:0
[  346.991862][ T7717]  kernel_misc_reclaimable:0
[  346.991862][ T7717]  free:415648 free_pcp:34408 free_cma:0
[  347.037228][    C0] vkms_vblank_simulate: vblank timer overrun
[  347.055552][ T7717] Node 0 active_anon:28kB inactive_anon:480kB active_file:172kB inactive_file:280kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:92624kB dirty:20kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13068kB pagetables:7588kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB
[  347.088264][    C0] vkms_vblank_simulate: vblank timer overrun
[  347.096275][ T7717] Node 1 active_anon:12600kB inactive_anon:8152kB active_file:9592kB inactive_file:46256kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:43956kB dirty:656kB writeback:0kB shmem:12512kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:848kB pagetables:5368kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  347.129468][    C0] vkms_vblank_simulate: vblank timer overrun
[  347.148455][ T7717] Node 0 DMA free:10240kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:28kB local_pcp:24kB free_cma:0kB
[  347.201178][ T7717] lowmem_reserve[]: 0 2501 2503 2503 2503
[  347.218717][ T7717] Node 0 DMA32 free:62872kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:4096KB free_highatomic:176KB active_anon:24kB inactive_anon:480kB active_file:172kB inactive_file:280kB unevictable:1536kB writepending:20kB present:3129332kB managed:2561464kB mlocked:0kB bounce:0kB free_pcp:18852kB local_pcp:17812kB free_cma:0kB
[  347.250686][    C0] vkms_vblank_simulate: vblank timer overrun
[  347.258425][ T7717] lowmem_reserve[]: 0 0 1 1 1
[  347.268375][ T7717] Node 0 Normal free:24kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  347.297043][    C0] vkms_vblank_simulate: vblank timer overrun
[  347.304615][ T7717] lowmem_reserve[]: 0 0 0 0 0
[  347.309369][ T7717] Node 1 Normal free:1589456kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12600kB inactive_anon:8152kB active_file:9592kB inactive_file:46256kB unevictable:1536kB writepending:656kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:119856kB local_pcp:71460kB free_cma:0kB
[  347.341902][    C0] vkms_vblank_simulate: vblank timer overrun
[  347.348588][ T7717] lowmem_reserve[]: 0 0 0 0 0
[  347.353582][ T7717] Node 0 DMA: 2*4kB (UM) 1*8kB (M) 3*16kB (UME) 2*32kB (UM) 2*64kB (ME) 2*128kB (ME) 2*256kB (ME) 2*512kB (ME) 2*1024kB (ME) 3*2048kB (ME) 0*4096kB = 10240kB
[  347.381224][ T5989] team0 (unregistering): Port device team_slave_1 removed
[  347.399256][ T7717] Node 0 DMA32: 32*4kB (E) 80*8kB (E) 97*16kB (MEH) 73*32kB (UMEH) 138*64kB (UMEH) 97*128kB (UME) 47*256kB (UM) 17*512kB (UM) 6*1024kB (U) 1*2048kB (U) 0*4096kB = 54832kB
[  347.434223][ T7717] Node 0 Normal: 2*4kB (U) 2*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB
[  347.447028][ T7717] Node 1 Normal: 28*4kB (ME) 8*8kB (UM) 10*16kB (UME) 6*32kB (M) 5*64kB (ME) 13*128kB 
[  347.454060][ T5989] team0 (unregistering): Port device team_slave_0 removed
[  347.471304][ T7717] (UME) 3*256kB (M) 2*512kB (UE) 2*1024kB (UE) 1*2048kB (M) 386*4096kB (M) = 1589456kB
[  347.496028][ T7717] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  347.505718][ T7717] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  347.515353][ T7717] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  347.524948][ T7717] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  347.539067][ T7717] 21655 total pagecache pages
[  347.544599][ T7717] 1218 pages in swap cache
[  347.549323][ T7717] Free swap  = 97228kB
[  347.554799][ T7717] Total swap = 124996kB
[  347.561534][ T7717] 2097051 pages RAM
[  347.568802][ T7717] 0 pages HighMem/MovableOnly
[  347.579246][ T7717] 424578 pages reserved
[  347.583647][ T7717] 0 pages cma reserved
[  348.373997][ T9183] netlink: 60 bytes leftover after parsing attributes in process `syz.2.794'.
[  348.403442][ T9183] netlink: 60 bytes leftover after parsing attributes in process `syz.2.794'.
[  348.426126][ T9203] netlink: 24 bytes leftover after parsing attributes in process `syz.3.801'.
[  348.440299][ T9203] netlink: 48 bytes leftover after parsing attributes in process `syz.3.801'.
[  349.244035][ T9032] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.254251][ T9032] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.327049][ T9032] bridge_slave_0: entered allmulticast mode
[  349.391103][ T9032] bridge_slave_0: entered promiscuous mode
[  349.501963][ T9032] bridge0: port 2(bridge_slave_1) entered blocking state
[  349.530254][ T9032] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.568749][ T9032] bridge_slave_1: entered allmulticast mode
[  349.618969][ T9032] bridge_slave_1: entered promiscuous mode
[  349.730890][ T9232] netlink: 24 bytes leftover after parsing attributes in process `syz.2.807'.
[  349.739883][ T9232] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  349.925997][ T5950] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  350.037665][ T9032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  350.103661][ T5950] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  350.137882][ T5950] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  350.159683][ T5950] usb 7-1: New USB device found, idVendor=07c0, idProduct=1524, bcdDevice= 0.00
[  350.179000][ T5950] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.220147][ T5950] usb 7-1: config 0 descriptor??
[  350.225439][ T9032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  350.357685][ T9032] team0: Port device team_slave_0 added
[  350.400305][ T9032] team0: Port device team_slave_1 added
[  350.690909][   T48] usb 7-1: USB disconnect, device number 10
[  351.104335][ T5989] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.388922][ T5153] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  351.531180][ T9032] batman_adv: batadv0: Adding interface: batadv_slave_0
[  351.555734][ T9032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.582370][    C0] vkms_vblank_simulate: vblank timer overrun
[  351.640393][ T5153] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  351.722406][ T5153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.756701][ T9032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  351.779032][ T5153] usb 4-1: config 0 descriptor??
[  351.812340][ T5153] cp210x 4-1:0.0: cp210x converter detected
[  351.875815][ T9032] batman_adv: batadv0: Adding interface: batadv_slave_1
[  351.913202][ T9032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  352.022360][ T9032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  352.441879][ T5153] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  352.470091][ T5153] usb 4-1: cp210x converter now attached to ttyUSB0
[  352.660514][ T5989] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.850439][ T5891] usb 4-1: USB disconnect, device number 30
[  352.871372][ T5891] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  352.890238][ T5989] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  352.981847][ T5891] cp210x 4-1:0.0: device disconnected
[  353.001516][ T9280] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  353.106280][ T8990] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  353.144265][ T8990] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  353.245124][ T5989] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  353.510057][ T9032] hsr_slave_0: entered promiscuous mode
[  353.969477][ T9032] hsr_slave_1: entered promiscuous mode
[  354.013461][ T5153] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  354.026063][ T9032] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  354.033905][ T9032] Cannot create hsr debugfs directory
[  354.040029][ T8990] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  354.073236][ T8990] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  354.869287][ T5153] usb 7-1: unable to read config index 0 descriptor/start: -61
[  354.960168][ T9292] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  355.006315][ T5153] usb 7-1: can't read configurations, error -61
[  355.773404][ T5153] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  356.455606][ T9316] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  356.506633][ T9316] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  357.461694][ T9326] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  357.490769][ T9326] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  358.456415][ T5989] bridge_slave_1: left allmulticast mode
[  358.462120][ T5989] bridge_slave_1: left promiscuous mode
[  358.533741][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state
[  358.562131][ T9336] kvm: user requested TSC rate below hardware speed
[  358.629956][ T5989] bridge_slave_0: left allmulticast mode
[  358.644198][ T5989] bridge_slave_0: left promiscuous mode
[  358.677467][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.072916][   T30] audit: type=1326 audit(1751018125.820:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9347 comm="syz.3.833" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc95078e929 code=0x0
[  359.406643][ T9354] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  359.450433][ T9354] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  360.158538][ T9357] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd
[  360.195834][ T5891] kernel write not supported for file task/605/attr/keycreate (pid: 5891 comm: kworker/0:4)
[  360.513586][ T9360] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  360.543557][ T9360] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  362.594646][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  362.643678][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  362.719659][ T9383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.212138][ T5989] bond0 (unregistering): Released all slaves
[  363.255040][ T9383] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.995057][ T9371] syz.3.838 (9371): drop_caches: 1
[  364.086713][ T5989] batman_adv: batadv0: Interface deactivated: wlan0
[  364.148281][ T5989] batman_adv: batadv0: Removing interface: wlan0
[  364.698314][ T8990] 8021q: adding VLAN 0 to HW filter on device bond0
[  364.774841][ T8990] 8021q: adding VLAN 0 to HW filter on device team0
[  364.811095][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.818274][ T5998] bridge0: port 1(bridge_slave_0) entered forwarding state
[  364.868929][ T5988] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.876119][ T5988] bridge0: port 2(bridge_slave_1) entered forwarding state
[  365.188607][ T5989] hsr_slave_0: left promiscuous mode
[  365.201217][ T5989] hsr_slave_1: left promiscuous mode
[  365.214908][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  365.230915][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0
[  365.314862][ T9406] FAULT_INJECTION: forcing a failure.
[  365.314862][ T9406] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  365.351308][ T9406] CPU: 0 UID: 0 PID: 9406 Comm: syz.3.848 Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  365.351333][ T9406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  365.351349][ T9406] Call Trace:
[  365.351359][ T9406]  <TASK>
[  365.351367][ T9406]  dump_stack_lvl+0x189/0x250
[  365.351394][ T9406]  ? __pfx____ratelimit+0x10/0x10
[  365.351418][ T9406]  ? __pfx_dump_stack_lvl+0x10/0x10
[  365.351441][ T9406]  ? __pfx__printk+0x10/0x10
[  365.351458][ T9406]  ? __might_fault+0xb0/0x130
[  365.351486][ T9406]  should_fail_ex+0x414/0x560
[  365.351508][ T9406]  _copy_from_iter+0x1db/0x16f0
[  365.351541][ T9406]  ? rcu_is_watching+0x15/0xb0
[  365.351564][ T9406]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  365.351586][ T9406]  ? __pfx__copy_from_iter+0x10/0x10
[  365.351609][ T9406]  ? __build_skb_around+0x257/0x3e0
[  365.351630][ T9406]  ? netlink_sendmsg+0x642/0xb30
[  365.351648][ T9406]  ? skb_put+0x11b/0x210
[  365.351669][ T9406]  netlink_sendmsg+0x6b2/0xb30
[  365.351696][ T9406]  ? __pfx_netlink_sendmsg+0x10/0x10
[  365.351722][ T9406]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  365.351741][ T9406]  ? __pfx_netlink_sendmsg+0x10/0x10
[  365.351760][ T9406]  __sock_sendmsg+0x219/0x270
[  365.351787][ T9406]  ____sys_sendmsg+0x505/0x830
[  365.351810][ T9406]  ? __pfx_____sys_sendmsg+0x10/0x10
[  365.351838][ T9406]  ? import_iovec+0x74/0xa0
[  365.351855][ T9406]  ___sys_sendmsg+0x21f/0x2a0
[  365.351875][ T9406]  ? __pfx____sys_sendmsg+0x10/0x10
[  365.351919][ T9406]  ? __fget_files+0x2a/0x420
[  365.351939][ T9406]  ? __fget_files+0x3a0/0x420
[  365.351969][ T9406]  __x64_sys_sendmsg+0x19b/0x260
[  365.351992][ T9406]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  365.352020][ T9406]  ? __pfx_ksys_write+0x10/0x10
[  365.352035][ T9406]  ? rcu_is_watching+0x15/0xb0
[  365.352061][ T9406]  ? do_syscall_64+0xbe/0x3b0
[  365.352095][ T9406]  do_syscall_64+0xfa/0x3b0
[  365.352116][ T9406]  ? lockdep_hardirqs_on+0x9c/0x150
[  365.352137][ T9406]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.352154][ T9406]  ? clear_bhb_loop+0x60/0xb0
[  365.352174][ T9406]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.352190][ T9406] RIP: 0033:0x7fc95078e929
[  365.352206][ T9406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  365.352221][ T9406] RSP: 002b:00007fc951550038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  365.352240][ T9406] RAX: ffffffffffffffda RBX: 00007fc9509b5fa0 RCX: 00007fc95078e929
[  365.352253][ T9406] RDX: 0000000000008040 RSI: 00002000000001c0 RDI: 0000000000000003
[  365.352264][ T9406] RBP: 00007fc951550090 R08: 0000000000000000 R09: 0000000000000000
[  365.352275][ T9406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  365.352285][ T9406] R13: 0000000000000000 R14: 00007fc9509b5fa0 R15: 00007ffcbd35b6a8
[  365.352313][ T9406]  </TASK>
[  365.630837][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  365.639169][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1
[  365.750720][ T5989] veth1_macvtap: left promiscuous mode
[  365.818890][ T5989] veth0_macvtap: left promiscuous mode
[  365.891497][ T5989] veth1_vlan: left promiscuous mode
[  365.933756][ T5989] veth0_vlan: left promiscuous mode
[  366.222922][ T9422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.852'.
[  366.243533][ T9422] netlink: 24 bytes leftover after parsing attributes in process `syz.2.852'.
[  366.288374][ T9422] netlink: 'syz.2.852': attribute type 1 has an invalid length.
[  366.988026][ T5989] team0 (unregistering): Port device team_slave_0 removed
[  367.539635][ T5998] smc: removing ib device syz0
[  367.791029][ T9421] vcan0: entered promiscuous mode
[  367.812077][ T9421] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  367.860016][   T48] lo speed is unknown, defaulting to 1000
[  367.865970][   T48] syz0: Port: 1 Link DOWN
[  368.106268][ T9032] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  368.334322][ T9032] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  368.377014][ T9032] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  368.456392][ T9438] veth0_vlan: mtu greater than device maximum
[  368.472116][ T5950] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  368.485882][ T9032] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  368.656933][ T5950] usb 4-1: Using ep0 maxpacket: 16
[  368.713764][ T5950] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 1023
[  368.794828][ T5950] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 32
[  368.829121][ T5950] usb 4-1: config 1 interface 0 has no altsetting 0
[  368.871505][ T5950] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  368.943367][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.951392][ T5950] usb 4-1: Product: ꮘ弅⑶ꨂ嶥ᄚ䬺
[  368.980556][ T8990] 8021q: adding VLAN 0 to HW filter on device batadv0
[  368.983360][ T5950] usb 4-1: Manufacturer: 虴碻㶝獸꒔旚쾜⣯៞Ⱉ튫㡛䋥Ꜫ趙ᣌ
[  369.059053][ T5950] usb 4-1: SerialNumber: Ї
[  369.176085][ T9032] 8021q: adding VLAN 0 to HW filter on device bond0
[  369.207717][ T9431] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  369.246807][ T9431] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  369.281913][ T9032] 8021q: adding VLAN 0 to HW filter on device team0
[  369.523711][ T9462] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 9462 comm: syz.6.860)
[  369.536547][   T30] audit: type=1800 audit(1751018136.290:7): pid=9462 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.6.860" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=23533 res=0 errno=0
[  369.606739][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state
[  369.614060][ T5993] bridge0: port 1(bridge_slave_0) entered forwarding state
[  369.698399][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state
[  369.705613][ T5993] bridge0: port 2(bridge_slave_1) entered forwarding state
[  369.723142][ T5950] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 7 proto 3 vid 0x0525 pid 0xA4A8
[  369.828086][ T5950] usb 4-1: USB disconnect, device number 31
[  369.969701][ T5950] usblp0: removed
[  371.380994][ T8990] veth0_vlan: entered promiscuous mode
[  371.400879][ T8990] veth1_vlan: entered promiscuous mode
[  371.561559][ T9032] 8021q: adding VLAN 0 to HW filter on device batadv0
[  371.618804][ T8990] veth0_macvtap: entered promiscuous mode
[  371.655973][ T8990] veth1_macvtap: entered promiscuous mode
[  371.732424][ T8990] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.081335][ T8990] batman_adv: batadv0: Interface activated: batadv_slave_1
[  372.232741][ T8990] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  372.290666][ T8990] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  372.356736][ T8990] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  372.377866][ T8990] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  372.729412][ T9524] syz.2.872 (9524): /proc/9519/oom_adj is deprecated, please use /proc/9519/oom_score_adj instead.
[  373.363602][   T31] INFO: task syz.4.479:7721 blocked for more than 143 seconds.
[  373.396171][   T31]       Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0
[  373.442952][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  373.452465][   T31] task:syz.4.479       state:D stack:27304 pid:7721  tgid:7716  ppid:5817   task_flags:0x400040 flags:0x00004004
[  373.518076][   T31] Call Trace:
[  373.548457][   T31]  <TASK>
[  373.551471][   T31]  __schedule+0x16a2/0x4cb0
[  373.729703][   T31]  ? schedule+0x165/0x360
[  373.798892][   T31]  ? __pfx___schedule+0x10/0x10
[  373.882135][   T31]  ? schedule+0x91/0x360
[  373.947538][   T31]  schedule+0x165/0x360
[  374.003954][   T31]  schedule_preempt_disabled+0x13/0x30
[  374.011544][   T31]  __mutex_lock+0x724/0xe80
[  374.032014][ T9538] syz.2.874: attempt to access beyond end of device
[  374.032014][ T9538] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0
[  374.058426][   T31]  ? __mutex_lock+0x51b/0xe80
[  374.063150][   T31]  ? blk_trace_ioctl+0x1b9/0x430
[  374.081030][   T31]  ? __pfx___mutex_lock+0x10/0x10
[  374.415253][ T5990] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  374.423133][ T5990] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  374.534229][   T31]  blk_trace_ioctl+0x1b9/0x430
[  374.565767][   T31]  ? __pfx_blk_trace_ioctl+0x10/0x10
[  374.573725][   T31]  ? rcu_is_watching+0x15/0xb0
[  374.578544][   T31]  ? trace_sched_exit_tp+0x38/0x120
[  374.598307][   T31]  ? __schedule+0x16c0/0x4cb0
[  374.603528][   T31]  ? preempt_schedule_irq+0xb5/0x150
[  374.608859][   T31]  blkdev_common_ioctl+0xdce/0x2450
[  374.649090][   T31]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  374.655650][   T31]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  374.661415][   T31]  ? __pfx_blkdev_common_ioctl+0x10/0x10
[  374.670769][   T31]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  374.677704][   T31]  ? rcu_is_watching+0x15/0xb0
[  374.682574][   T31]  ? trace_irq_disable+0x37/0x110
[  374.692182][   T31]  ? preempt_schedule_irq+0xde/0x150
[  374.698733][   T31]  ? __pfx_preempt_schedule_irq+0x10/0x10
[  374.708629][   T31]  ? irqentry_exit+0x74/0x90
[  374.716684][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  374.722031][   T31]  ? __pfx_blkdev_ioctl+0x10/0x10
[  374.737922][   T31]  blkdev_ioctl+0x4ef/0x6d0
[  374.744529][   T31]  ? __pfx_blkdev_ioctl+0x10/0x10
[  374.749640][   T31]  ? __fget_files+0x2a/0x420
[  374.758838][   T31]  ? bpf_lsm_file_ioctl+0x9/0x20
[  374.764846][   T31]  ? __pfx_blkdev_ioctl+0x10/0x10
[  374.769966][   T31]  __se_sys_ioctl+0xf9/0x170
[  374.778636][   T31]  do_syscall_64+0xfa/0x3b0
[  374.784209][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  374.789537][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.802182][   T31]  ? clear_bhb_loop+0x60/0xb0
[  374.807260][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  374.813717][   T31] RIP: 0033:0x7f7d5818e929
[  374.818247][   T31] RSP: 002b:00007f7d5905c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  374.827189][   T31] RAX: ffffffffffffffda RBX: 00007f7d583b6080 RCX: 00007f7d5818e929
[  374.839350][   T31] RDX: 0000000000000000 RSI: 0000000000001276 RDI: 0000000000000004
[  374.851749][   T31] RBP: 00007f7d58210b39 R08: 0000000000000000 R09: 0000000000000000
[  374.861088][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  374.874535][   T31] R13: 0000000000000001 R14: 00007f7d583b6080 R15: 00007ffce9092ae8
[  374.882771][   T31]  </TASK>
[  374.889091][   T31] 
[  374.889091][   T31] Showing all locks held in the system:
[  374.995276][   T31] 1 lock held by pool_workqueue_/3:
[  374.999349][ T8990] ieee80211 phy21: Selected rate control algorithm 'minstrel_ht'
[  375.000580][   T31]  #0: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  375.000667][   T31] 1 lock held by khungtaskd/31:
[  375.000679][   T31]  #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  375.000764][   T31] 1 lock held by dhcpcd/5485:
[  375.000776][   T31]  #0: ffffffff8f4fdc48 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0
[  375.000831][   T31] 2 locks held by getty/5587:
[  375.000843][   T31]  #0: ffff8880355ca0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  375.000900][   T31]  #1: ffffc90002fee2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  375.000957][   T31] 3 locks held by kworker/1:5/5878:
[  375.000969][   T31]  #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  375.001025][   T31]  #1: ffffc9000453fbc0 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  375.001080][   T31]  #2: ffff888172666240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x26b/0x3180
[  375.001137][   T31] 3 locks held by kworker/u8:17/5989:
[  375.001148][   T31]  #0: ffff88801b2fb948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  375.001203][   T31]  #1: ffffc90003b2fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  375.001258][   T31]  #2: ffffffff8f4f1050 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[  375.001309][   T31] 3 locks held by kworker/u8:26/5998:
[  375.001321][   T31] 3 locks held by kworker/u8:30/6002:
[  375.001333][   T31]  #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  375.001388][   T31]  #1: ffffc90003067bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  375.001443][   T31]  #2: ffffffff8f4fdc48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[  375.001496][   T31] 3 locks held by kworker/u8:32/6004:
[  375.001508][   T31]  #0: ffff88814c723948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  375.001568][   T31]  #1: ffffc90003047bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  375.001624][   T31]  #2: ffffffff8f4fdc48 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0
[  375.001677][   T31] 3 locks held by syz.4.479/7717:
[  375.001689][   T31] 1 lock held by syz.4.479/7721:
[  375.001700][   T31]  #0: ffff888024ec2678 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0x1b9/0x430
[  375.001757][   T31] 5 locks held by syz-executor/8990:
[  375.001769][   T31] 1 lock held by syz-executor/9032:
[  375.001786][   T31] 
[  375.001792][   T31] =============================================
[  375.001792][   T31] 
[  375.001813][   T31] NMI backtrace for cpu 1
[  375.001825][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  375.001846][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  375.001856][   T31] Call Trace:
[  375.001864][   T31]  <TASK>
[  375.001871][   T31]  dump_stack_lvl+0x189/0x250
[  375.001894][   T31]  ? __wake_up_klogd+0xd9/0x110
[  375.001914][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  375.001937][   T31]  ? __pfx__printk+0x10/0x10
[  375.001966][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[  375.001990][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  375.002007][   T31]  ? _printk+0xcf/0x120
[  375.002028][   T31]  ? __pfx__printk+0x10/0x10
[  375.002047][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  375.002070][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  375.002093][   T31]  watchdog+0xfee/0x1030
[  375.002115][   T31]  ? watchdog+0x1de/0x1030
[  375.002142][   T31]  kthread+0x70e/0x8a0
[  375.002163][   T31]  ? __pfx_watchdog+0x10/0x10
[  375.002182][   T31]  ? __pfx_kthread+0x10/0x10
[  375.002202][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  375.002222][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  375.002242][   T31]  ? __pfx_kthread+0x10/0x10
[  375.002261][   T31]  ret_from_fork+0x3fc/0x770
[  375.002284][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  375.002311][   T31]  ? __switch_to_asm+0x39/0x70
[  375.002325][   T31]  ? __switch_to_asm+0x33/0x70
[  375.002340][   T31]  ? __pfx_kthread+0x10/0x10
[  375.002359][   T31]  ret_from_fork_asm+0x1a/0x30
[  375.002390][   T31]  </TASK>
[  375.002397][   T31] Sending NMI from CPU 1 to CPUs 0:
[  375.002421][    C0] NMI backtrace for cpu 0
[  375.002432][    C0] CPU: 0 UID: 0 PID: 8990 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  375.002450][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  375.002459][    C0] RIP: 0010:__lock_acquire+0x606/0xd20
[  375.002479][    C0] Code: d3 e8 01 0e 00 0f 84 1a 05 00 00 83 7c 24 0c 00 0f 84 a9 00 00 00 41 8b 46 20 66 85 c0 0f 88 8d 00 00 00 65 8b 0d 76 e2 fb 10 <a9> 00 00 03 00 74 38 85 c9 74 1d 48 8b 3c 24 4c 89 f6 ba 01 00 00
[  375.002492][    C0] RSP: 0018:ffffc900000079b0 EFLAGS: 00000006
[  375.002505][    C0] RAX: 00000000000c2000 RBX: 0000000000000002 RCX: 0000000000000000
[  375.002515][    C0] RDX: 0000000000000002 RSI: 0000000000002000 RDI: ffff88802da93c00
[  375.002525][    C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff84c09baa
[  375.002535][    C0] R10: dffffc0000000000 R11: fffffbfff1f3fc3f R12: 0000000000000003
[  375.002545][    C0] R13: 0000000000000002 R14: ffff88802da94768 R15: 0000000000000003
[  375.002553][    C0] FS:  0000555563e6b500(0000) GS:ffff888125c83000(0000) knlGS:0000000000000000
[  375.002566][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  375.002577][    C0] CR2: 00007f66b357e2d8 CR3: 000000008ff90000 CR4: 00000000003526f0
[  375.002590][    C0] Call Trace:
[  375.002596][    C0]  <IRQ>
[  375.002604][    C0]  ? debug_object_deactivate+0x9a/0x250
[  375.002620][    C0]  lock_acquire+0x120/0x360
[  375.002636][    C0]  ? debug_object_deactivate+0x9a/0x250
[  375.002654][    C0]  ? rcu_core+0xc34/0x1710
[  375.002672][    C0]  _raw_spin_lock_irqsave+0xa7/0xf0
[  375.002688][    C0]  ? debug_object_deactivate+0x9a/0x250
[  375.002702][    C0]  ? __pfx__raw_spin_lock_irqsave+0x10/0x10
[  375.002718][    C0]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  375.002735][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  375.002755][    C0]  debug_object_deactivate+0x9a/0x250
[  375.002772][    C0]  ? rcu_core+0xc34/0x1710
[  375.002788][    C0]  rcu_core+0xc2d/0x1710
[  375.002816][    C0]  ? __pfx_rcu_core+0x10/0x10
[  375.002834][    C0]  ? kvm_sched_clock_read+0x11/0x20
[  375.002851][    C0]  ? sched_clock_cpu+0x74/0x430
[  375.002868][    C0]  ? ktime_get+0x3e/0x1f0
[  375.002882][    C0]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  375.002896][    C0]  ? __pfx_sched_clock_cpu+0x10/0x10
[  375.002913][    C0]  ? __pfx___local_bh_disable_ip+0x10/0x10
[  375.002937][    C0]  handle_softirqs+0x286/0x870
[  375.002956][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  375.002976][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  375.002995][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  375.003011][    C0]  __irq_exit_rcu+0xca/0x1f0
[  375.003028][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  375.003049][    C0]  irq_exit_rcu+0x9/0x30
[  375.003065][    C0]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  375.003082][    C0]  </IRQ>
[  375.003088][    C0]  <TASK>
[  375.003093][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  375.003108][    C0] RIP: 0010:vprintk_emit+0x58f/0x7a0
[  375.003128][    C0] Code: 85 32 01 00 00 e8 e1 63 1f 00 41 89 df 4d 85 f6 48 8b 1c 24 75 07 e8 d0 63 1f 00 eb 06 e8 c9 63 1f 00 fb 48 c7 c7 e0 30 13 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 36
[  375.003140][    C0] RSP: 0018:ffffc9000c5bec20 EFLAGS: 00000293
[  375.003152][    C0] RAX: ffffffff81a0e9a7 RBX: ffffffff81a0e864 RCX: ffff88802da93c00
[  375.003163][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8e1330e0
[  375.003173][    C0] RBP: ffffc9000c5bed30 R08: ffffffff8f9fe1f7 R09: 1ffffffff1f3fc3e
[  375.003184][    C0] R10: dffffc0000000000 R11: fffffbfff1f3fc3f R12: dffffc0000000000
[  375.003195][    C0] R13: 1ffff920018b7d88 R14: 0000000000000200 R15: 000000000000003e
[  375.003207][    C0]  ? vprintk_emit+0x444/0x7a0
[  375.003225][    C0]  ? vprintk_emit+0x587/0x7a0
[  375.003246][    C0]  ? vprintk_emit+0x444/0x7a0
[  375.003265][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[  375.003289][    C0]  ? __pfx_snprintf+0x10/0x10
[  375.003305][    C0]  ? stack_trace_save+0x9c/0xe0
[  375.003323][    C0]  dev_vprintk_emit+0x337/0x3f0
[  375.003345][    C0]  ? __pfx_dev_vprintk_emit+0x10/0x10
[  375.003366][    C0]  ? __kasan_kmalloc+0x93/0xb0
[  375.003385][    C0]  ? netlink_rcv_skb+0x205/0x470
[  375.003400][    C0]  ? genl_rcv+0x28/0x40
[  375.003417][    C0]  ? netlink_unicast+0x758/0x8d0
[  375.003437][    C0]  ? netlink_sendmsg+0x805/0xb30
[  375.003454][    C0]  dev_printk_emit+0xe0/0x130
[  375.003477][    C0]  ? __pfx_dev_printk_emit+0x10/0x10
[  375.003498][    C0]  ? __dev_printk+0x131/0x190
[  375.003515][    C0]  _dev_printk+0x113/0x160
[  375.003537][    C0]  ? __pfx__dev_printk+0x10/0x10
[  375.003558][    C0]  ? minstrel_ht_alloc+0x6dd/0x7e0
[  375.003575][    C0]  ieee80211_init_rate_ctrl_alg+0x56d/0x5f0
[  375.003593][    C0]  ieee80211_register_hw+0x2ee9/0x4120
[  375.003616][    C0]  ? ieee80211_register_hw+0x1451/0x4120
[  375.003635][    C0]  ? __pfx_ieee80211_register_hw+0x10/0x10
[  375.003653][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  375.003673][    C0]  ? __hrtimer_setup+0x187/0x210
[  375.003690][    C0]  ? __pfx_mac80211_hwsim_beacon+0x10/0x10
[  375.003707][    C0]  mac80211_hwsim_new_radio+0x2f0e/0x5340
[  375.003732][    C0]  ? __sys_sendto+0x3bd/0x520
[  375.003751][    C0]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[  375.003769][    C0]  ? __nla_validate_parse+0x2400/0x2d40
[  375.003787][    C0]  ? __sock_sendmsg+0x219/0x270
[  375.003809][    C0]  ? __sys_sendto+0x3bd/0x520
[  375.003827][    C0]  hwsim_new_radio_nl+0xea4/0x1b10
[  375.003847][    C0]  ? __pfx___nla_validate_parse+0x10/0x10
[  375.003870][    C0]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  375.003894][    C0]  ? __nla_parse+0x40/0x60
[  375.003912][    C0]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  375.003934][    C0]  genl_family_rcv_msg_doit+0x215/0x300
[  375.003955][    C0]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  375.003978][    C0]  ? bpf_lsm_capable+0x9/0x20
[  375.003996][    C0]  ? security_capable+0x7e/0x2e0
[  375.004017][    C0]  genl_rcv_msg+0x60e/0x790
[  375.004037][    C0]  ? __pfx_genl_rcv_msg+0x10/0x10
[  375.004053][    C0]  ? ref_tracker_free+0x63a/0x7d0
[  375.004069][    C0]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[  375.004088][    C0]  ? __pfx_ref_tracker_free+0x10/0x10
[  375.004108][    C0]  netlink_rcv_skb+0x205/0x470
[  375.004123][    C0]  ? __pfx_genl_rcv_msg+0x10/0x10
[  375.004140][    C0]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  375.004161][    C0]  ? down_read+0x1ad/0x2e0
[  375.004175][    C0]  genl_rcv+0x28/0x40
[  375.004190][    C0]  netlink_unicast+0x758/0x8d0
[  375.004213][    C0]  netlink_sendmsg+0x805/0xb30
[  375.004232][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  375.004250][    C0]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  375.004266][    C0]  ? __pfx_netlink_sendmsg+0x10/0x10
[  375.004281][    C0]  __sock_sendmsg+0x219/0x270
[  375.004300][    C0]  __sys_sendto+0x3bd/0x520
[  375.004315][    C0]  ? __pfx___sys_sendto+0x10/0x10
[  375.004335][    C0]  ? fput_close_sync+0x119/0x200
[  375.004358][    C0]  ? __pfx_fput_close_sync+0x10/0x10
[  375.004381][    C0]  __x64_sys_sendto+0xde/0x100
[  375.004396][    C0]  do_syscall_64+0xfa/0x3b0
[  375.004414][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  375.004431][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.004445][    C0]  ? clear_bhb_loop+0x60/0xb0
[  375.004461][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  375.004475][    C0] RIP: 0033:0x7faed8f907bc
[  375.004487][    C0] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b
[  375.004499][    C0] RSP: 002b:00007ffdaebd3fc0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  375.004514][    C0] RAX: ffffffffffffffda RBX: 00007faed9ce4620 RCX: 00007faed8f907bc
[  375.004525][    C0] RDX: 0000000000000024 RSI: 00007faed9ce4670 RDI: 0000000000000003
[  375.004535][    C0] RBP: 0000000000000000 R08: 00007ffdaebd4014 R09: 000000000000000c
[  375.004544][    C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  375.004554][    C0] R13: 0000000000000000 R14: 00007faed9ce4670 R15: 0000000000000000
[  375.004570][    C0]  </TASK>
[  375.018463][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[  375.018483][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00116-ge34a79b96ab9 #0 PREEMPT(full) 
[  375.018505][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  375.018516][   T31] Call Trace:
[  375.018523][   T31]  <TASK>
[  375.018531][   T31]  dump_stack_lvl+0x99/0x250
[  375.018563][   T31]  ? __asan_memcpy+0x40/0x70
[  375.018581][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[  375.018605][   T31]  ? __pfx__printk+0x10/0x10
[  375.018634][   T31]  panic+0x2db/0x790
[  375.018661][   T31]  ? __pfx_panic+0x10/0x10
[  375.018683][   T31]  ? nmi_backtrace_stall_check+0x433/0x440
[  375.018710][   T31]  ? preempt_schedule_thunk+0x16/0x30
[  375.018730][   T31]  ? nmi_trigger_cpumask_backtrace+0x2b6/0x300
[  375.018758][   T31]  watchdog+0x102d/0x1030
[  375.018781][   T31]  ? watchdog+0x1de/0x1030
[  375.018808][   T31]  kthread+0x70e/0x8a0
[  375.018830][   T31]  ? __pfx_watchdog+0x10/0x10
[  375.018849][   T31]  ? __pfx_kthread+0x10/0x10
[  375.018868][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[  375.018890][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[  375.018910][   T31]  ? __pfx_kthread+0x10/0x10
[  375.018929][   T31]  ret_from_fork+0x3fc/0x770
[  375.018953][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[  375.018980][   T31]  ? __switch_to_asm+0x39/0x70
[  375.018995][   T31]  ? __switch_to_asm+0x33/0x70
[  375.019011][   T31]  ? __pfx_kthread+0x10/0x10
[  375.019029][   T31]  ret_from_fork_asm+0x1a/0x30
[  375.019060][   T31]  </TASK>
[  375.023642][   T31] Kernel Offset: disabled