last executing test programs: 3m5.202300836s ago: executing program 2 (id=507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2a4ec000) r1 = socket$inet(0x2, 0x1, 0x100) sendto$inet(r1, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="6880a642beaf34317f0dd3122a90ad0d2b2f7c3cb03f070a8a8fe6725f50d52a8ae5edd6e2cde283c0937ea0baed7180bdc7fb97f8b44431a15b4c27f0a09bceb75c85f32bb18f452202e0a2b097a15a17", 0x51}], 0x1, 0x0, 0x1b}, 0x40014) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000240), 0x36, 0xcc800) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001540)=ANY=[@ANYBLOB="5c0000000206010200000000000000000c0000090c0007800800ff01000000000000010006000000050005000a00000005000400000000000900020073797a310000000200000000686173683a69702c706f72742c6e657400000000"], 0x5c}}, 0x0) 3m4.606436852s ago: executing program 2 (id=509): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000003e0007010000000000000000047c0000040012801400018008000300", @ANYRES32=0xee00, @ANYBLOB="0100006cc48ae5650a49936513f7dc98147a5bb90ecd0500297097e2855e86da0aaf7b8afed75bc2c1e1cce07b6f95eafd3c50c1cdaab129ffeeb891b56e5a0c25fef7573696c25862e50c9d596a52b22f0efb"], 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x6c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa}, {}, {0xffe0, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x6c}}, 0x24000000) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000580)={0x7, @raw_data="f2a6b25ccc5c686ebfa68436d95b68b0324cad8acac69f976c4cad54a1dbeeb32f76cb5a150e2d235f73fbd8fd87edcfb2d1cc97d289f31dfdf8a51ec79147843a784a9ab14cbd2c1eb579d96d2dabc2d412581368fc29720a25a7d928cd376a13b4e21567fd71d63222217520f771d400210c1cc3808da61fe2226dc33f8ac625350178b6c0e11db909a24b05fe6354e03df22b056ae377cf689c411ef23dff57ce7724393f06931ba16263fd9054fd63df7fb5e12e63d3768819799ab574e78ae0750e3a82a1bc"}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000f0000001c0007800c000400402d002d00002d400c0003"], 0x30}}, 0x20088004) sendmsg$NL80211_CMD_TDLS_MGMT(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x38, r1, 0x1, 0x70bd2c, 0x6, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2a}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0x8}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x4}, @NL80211_ATTR_IE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x24044000) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000007cc38af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e00000095"], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) 3m4.366449928s ago: executing program 2 (id=510): r0 = socket$inet6(0xa, 0x3, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0x1000) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) io_setup(0x0, &(0x7f0000000200)=0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r1, 0xc02054a5, &(0x7f0000000340)={0x3c, r2, 'id0\x00'}) io_submit(r4, 0x2, &(0x7f0000000480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x6, r2, 0x0, 0x0, 0x8f}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0xe6, r0, &(0x7f0000000240)="e5730f319a57c2d5988ebb7733f5c4c68125895c99c22e8f301ef3528899c8b70bb2765b5e8a7c20493f78785f9d783399705b9321f3185e", 0x38, 0x10000, 0x0, 0x3, r5}]) syz_clone3(&(0x7f00000003c0)={0x101040000, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe4000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xfffffffffffffef1, {0xf000}}, "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", "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"}) ioctl$KVM_GET_NESTED_STATE(r6, 0xc080aebe, &(0x7f00000083c0)={{0x0, 0x0, 0x80}}) syz_emit_ethernet(0x83, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff662eb716601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d1398cb86c82ddb40845f876e422ac47c8f5d3ab6533dcc738674cab98958cc0eec21cd762eeb455ab46c7ad5549954cc77decd218e9dddfa71079fe5d0f0c65b6500b15c80a32bbfaa"], 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x63c}, 0x1, 0x0, 0x0, 0x40800}, 0x4080015) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r8 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket(0xa, 0x3, 0x3a) syz_init_net_socket$ax25(0x3, 0x2, 0xc4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x480) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) 3m2.65044279s ago: executing program 2 (id=513): r0 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xd) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x2125099, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x4, 0x84) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000240)=0x4) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x300, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x17f}], 0x3}, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r5 = syz_io_uring_setup(0xbda, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r5, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r5, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3m1.597355038s ago: executing program 2 (id=517): prctl$PR_SET_MM(0x23, 0xe000000, &(0x7f0000170000/0x3000)=nil) 2m59.974430427s ago: executing program 2 (id=522): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x400, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000380), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x4c, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000021401002abd7000fedbdf2509000200"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) syz_usb_connect(0x3, 0x36, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) 2m59.017913225s ago: executing program 32 (id=522): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x400, 0x0) getpeername$unix(0xffffffffffffffff, &(0x7f0000000380), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x44, 0x30, 0x1, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x4c, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0xd4, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './file0'}}], [], 0x2c}) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000021401002abd7000fedbdf2509000200"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) syz_usb_connect(0x3, 0x36, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) 2m43.396103891s ago: executing program 4 (id=561): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f00000010c0)={0x8, {"eddd025b60fdc30a063f172d718c2bd6b3645eadae0f767eb61f2421975b0064d30faba72ba63ab33c4ee2a6cb2f0cb187830255738dd670e8e178672a7473488a157b83ca0ed9657299e98243c15b6b8e08f34570dda445b526949a9b3aebdb97dda475e54a098f1ae57c4774c8ef81d36c77d309e0c817fba3415591dd26a637e43bec5f0fb193d8671889d89ac77bd90ee5efac63bf9eafc61f393e33aaa503760afad0e395042048defbc27ecc254790f419072feb3d5fb4815364072248a42bb88952f316952ea727ae850143819fb80a77407a2309c90ee7894bee7c5862bf14672cc9036bf0ccba7769b5d57b757b550180000000000000a7f0840d7040084b449eb5445ea40b3b9811a66d5228839907fba91ba8a5ca95b4600fcd98f93af794a412e97404d6f40a61e802f6112ff259a29ca8fb98ffce8fd12509883e812e7edb4a643fe4aac56bb01f69823bd6f4ebd618d81cb3d463eea2c9bae30b888a824043a71d5f3319b146848d63a5415f5ed47b33cafa473cc2c91c425a2d24bf5d8e627e6fc63f58a7b08180ce16e5aa7015478cfbebba3045ec5dd620f69659f3fe11af23b095b43ced6a48afaf3d9a78762d40ada3b1fead7884620e213f28a9a2e6bcda0b88347c8eb3f6be8be3fc2d507eaae0430ccd836d4790038d25d65091e6e7ee9bec612b4a5d90e9e878c9c57fd1aa28ee9fab64d2d3bec12ae68a974c0f64365548a5db8a1d8fc9e32b38df32e826a3d2a88ae824a5faa87d7a25373728da5322ebc73db3d9ac8c64db9c90b18d67b7770966a3b8a1079f5b83f21482ff8b1cc1c699a0a5a135b6fe2791abb556603e3255e89922de5bca02d57ace9f6d486a363891b6c15e3c0000000047e9617351e98a040f2e7019ddee08f2d6cdc9de2f7a32ea65d266513fa7821c24c90ae39268757eefacfe94d53c740747c86429eadbead0a3576549442f4f77d846df8d54b37fc280bd5b9320f872756706357b9813318a6bfeb77d4ddec55ab5592da2c6d05b3c021182485b96a634013c5ad5ba55f07d07211c0db03ccb5981f5955df2e86cd0f62f6ba66fe4abf695ebc6629e42f6ce96a132883f148eeeacdff13b1cbfa73cbc70b8c5b677682d7c60d1a1311b1222aef1edb4e231c869a18f9ae8eeba4eb4cba8a4a56703cd90710b2208bce8e9a18aaf4e7c47474c08ff85c307d660607bddfe49ac714e0fcdfefedddafa452dfe0341c8a8f07e62e4486699a740feda4b7b2bc635308eb6990f3dfa9065aa8b26ad0ac66fe86dbf2dfb5f0c4b0cad557d4fa4b61116aa57a285a705e1d87d3f8d560b5fd3f8c5df3dc22bd4edb36c1c2e78c0b69863f576d3053ceb21ecb287faf64bb7a3cfe3c28eb7c2335a3af5a29308dac5f7d6f48f46da8370124c37e5a3c9fdfd3d78a082030b2233f02fae54012d2ad2b1c1ec2a35a130a5d3f76b5f9a10a4d31ca41c5c2f58a40c058a48e5dd8a71adbabcbca341e46a6ad538491025e79db3c59350b229ae433537e54b62968ff582f041080719fb88778884da1c79ff28398d8edfcd931043b64bf75b944e735d6d0fa62ed1e3550fe9fa5c1f063b06fb8e13909c87efffe72481ada2d01522a93c70266aa3991c7141ecca2bc618fe54d7529a0c2a46469ca4b2086e112fdf4e1266ca6b5fd4b0fbea280dd246f622f0da6d0f3e3b0357dc0744132e66d8b035662ad5cd3faedd2f743e24ecfed2efd6fd3aed1402bdbc66af3c0b77b7962966649591d7d5985c81a063d46ddf07656f2b049f5811b310e567027bc1b6d44fc892d37aeda8cacc704c1dcc1a7ef759937416e01163027b81befa86772ddf576c37f3151792c4358d1fa418bcd250dc41effa988116589b110d31a59486123769e50f5b3985b4660919f08dd5c96ab8ab03322d0c61890f90e56970f0aa13a96bcfa97139d5627ed6a5558dee292bf0a6e5ad23341c7dc3464a05b9045cc3abbfc0448bf9ca044fd188569cc0c57e07105d1fa1efd44529b6592fa718e092c1a3fa3e56689c9c5168a5619bf2109bde2dca59ad16735e597402c1896d4e24f56c9d4bbc1f0b3a0135b7028a402c6a1a78de57a838b1871477d7b43dff3779fdb50b2ec9a3ae11fab7f715e7979e64a0f0d54d025105d1f768cdad112aeb2eac1c8042aff6fb975a16c64080ba4e0de0af9b8a975a2b6af6a05dff8ae848f6b80f2bd80c56e4683e67a3aaad0e72242b0f0f07d7d7a64a8669e75a99ba4fdb2ba239c5ef28c8f1dc0b2459698b374f1035a75eafde3d90d69afa489ee2d7f7958a5cc51e574203bab464ddd4d08abbb77c8874c6ce692d078bdc309d73ccb49c9d60a269c77601e82e1c824fca2a43605f8453943d23794785096da2ff56547389009e27a908cfcea03ede09c392e0bafa30891e23fbacdf08b49cbd2f4083f94c3c71877ffac86d426e5fe08fa9541f837f2de8440e0b2226b664a45a564f1357e804c24cd2cef95564a1e0041736ced508a63af4e9f4ae9f690084f8c67db3b3569fb86225b6cce291da8057200d1f86899081ebfa5274625ada6ee793fe4246d97157d608099a6adf81eb88bb37cdb64a18ed0e13a0cfeea3af2164a59b8a90a4a1dfad6f03cc27ccbcc879c2b54a57a6d81e01dbd9d7440e9f1a1f608617a308214b58a9090022b7c6631cda308a0aa13dd68159bd8578afeb5402b0e227ef709d8c58929fba262ff4ec70c3a8f68b98f92380201112f560c216d5dc61ad466ee08c1af18982617597436c6a0e0077bb2dab8932175fb30aafceb4d63b4b8aa4a1c2f3867a83855d418ae75b3029dff960a5a4fcbe0fb84828633d535413e0c70a26b2485dddaa7c52256ad85d5f71778af39692fb8553850bbac096d8d9c9145e0ed7903b5d530005f29493a5aa7e0c04b62cc07f2bcfa31a48ce7c167abdd145af8c25fb882b64e41a9b51ae77209d82a9095e1d80711e1c802302b92ad8e413bc9b200e57c6038a46bfc9468b5fdda7f3e57e676c99d4dde6b3a86ed2cb9a55cf199835ef9d858f5a692c4036b32ea07c76c29faa5e2241afab129340b6e2ad94baea982429225cfac726dbf137f6477432a31808a281c9af3c4bef4a2f508721ec71fc1c374fca4d4e25ed9754a41ebfcaaac7637caa13791a64ff995d3cd984ed8cecccc491de80596f8db8d3fe6a6f2b208d065fb6fbb5569bf7cd8a8162271ca5e5ed2b3b98f28d81b3b498345c48492c8fe2e6181f527bbe4ce6600f9e33fb65609bc4318ecf4ca151d3095232820a84704311f0bd3532178cf1e6ef9483b1f52ec2992e84aaf1239c99faeab989bd9848223e90093e71eb650660255fce7bd85872e413fe219859d18ef67f1f07a590ceadc1c687820c3c7cf9e2ff9609199c4b49fd74553507c1c7f45b5b1b40c96c0c984977f476ed686f8710248677847f5c0989df0eca6be3df498acfcfbca85bb986c8d844c19f62b06b95d8d6f4e4367040d45e494271f29546f1086f88fdc549402bd669e9aed5fe000000ef7668d3abeadb430d30534aef0a3a9a125bdeaa11647bafe6e1303b967d29718ac301cadbb43654a36b78ff91836584a5e3472db8db4ded526ecfef2efa2279c17639d3aef1587d5b8bbc8abec3a28dba276613c514a50fe243a588ecdb77ab1525088507f5a0537ba59062416beb479538806f04e70bc192c1fd46377c6105116cd21b75f29f91b67317ce4bd67dea18f560765dabf8f0cebfb770339aa2558df698e1ee22adc7b81b16b2e7fb06e7b5c2ca98c71aec18bc23b11d3b84c6a10aa866c5f438fc2d928fc89ce0902492cd79d6a1ffce27a66031cc24d1b82e9e8b6bdcb6b37f89531e048ae5ee10483dccbb734ba20a15b145fdeadfc461e146d8882133b4e6c6ba30d316ee0bf0bf40f26639077d090d1df3b943e78ba5ece82fcd4576cf3a87d7a9ad080b2cce7371e5bd671ad37e35ff03dfb6684ac0d4eda69154444aef2a173ba093bc87839e41388b2101f72a9b6cf675efbb231b007c11a7b452df89a584f459b23340c0dae21a4146968b66ac9b08d2408830ccec4e6fb1dd665c3023a3b32042b1facfb0bd4d5b9861fe5b0abee3313264b5abe61b1e145bc11121dc87bf1a6008433dedd4d7977b082400136bfceb33a2a3ceea9a6b67b8f85b604970c3ad474db7356f802bc840afe833c9056c037b2ea240b5846149682e14e4e126c7f88b9eb2c7384da631fbab63754611d52b4107dfd10fdf46e557be95a07e6ae64cbeb2d420bcfd87a2f52ecbfe5eba301e3c86761c1545b876e5951106e91be75e9d22301674bca4d729fffd9812cb984910b976c2a74966caf3d75ba7dc7f4275d24caf3bc94376a3579e8575c69401ea75d14e27f98eb7a05eccebd36ea89c4ac0dec65eb613d7f052c6b75b398c65249449b0693164a51c0c224ac1bb4f0781d2d10b96519131b6df9541aa1e7511820f71ab1d497234862f475356d9664a9fbbf0285738a143842820d5b795dcca64a24de4bae802fae01d82fec5548e108c4e750e8f1580d2ebd6bde06622db32c1f47eca183a81ecfde3b6a187c47f7984d2c6051f2ace7ac2bfc5da0cd4b0e57e69bf39551cc5443e12e9ce113cff2cecdd2802e5b9c5a1107e1ed982b93b8e986afa379ac1c6a5ee67e966c72bf149f9ba1c169bafe3d58e18e56438ad4a4db4826edb5eb4ff27808ddd7f87eb31cf232effc9bfff7305d91696e17058217d2d5596ae9082a1cc98d60b854b2ff76718d981c20d68ecf4f1a8dcd5f9f06162df324b84b246e5e11d6722003f32e3396e30c11724db17210c37dfa080c1be2fbeea1c92e084f72386fb29856bc25a16a53f97f44a5e81fd55872772eebdd0db3a5bdf0c28d34a48f8d707a97a3b89367c98e30dbe9c02444177a8fbaa605c6051157e41fade8432af5233ee030ad6fb7572ee4e7bd687dd855fe112ac46a7b1abe88771eb3b49e3d583efe7b79394ca4687acfc262af45dbf4736e9e17d39ea5f8e81f6ed7f242c5a09da7f22f37ce9d5e6222fa71aed8ee69e501d30cd98f5c5275d5dcc1f112c3dbd2cca465f7442d952353613ac5b30222cf153c598c15c102b0dd0d99e45595d98ab365fda3f6e3bdf29b66a8d0a43c1c6a109e3056015a49e4f9ed7522163da86b9e2bf14d7c0ff026261f96feabc0b1c64ba130acb2c4927a783bed9f4e1d38f0a1351000334010b99585c24fb9a7a24809e4bffc3448c778dbeeed816225b2173fae0975e1b9c19213dc33bab3a9bbe8f62e306a1aecac5484d3f23421f5064c16aa4fa67de32222115928c0f3b114593dd0c791c590be61e0b97ed0b0e0dcdb238eb1290466d9c10dfaa8c7fcd0bf659897d945df86d936c67e42924d47a4245fb3d6f8ec538d59c100c6e52100317ea41a1fd253ddd54b13b6a2807ea729d3fd7e1b0461cc78b2c7c889b9ad3ec0398399ff645f3ab988b8a52d9f09a430cfa0390c4c5ad3a392ef28a9f4056d77b712df09b69d7d93617c4783133f9abab2d6935d54f59d0c1b5ea4dba28af7bbfeaf29009618c436ddec116f8966b4ae89ceca545daef5a48f1668231731af7abc502df9f7d308998b92adbfdf0937186a9cbcd4267dc1d0e399b27dacc07ca37f76ceb42f13e4de89dd484a91dc8a2bebece95c6400fde8bdc6d2857454f562f04422b632925c84fb501998ab096363acafea06790c298a76267ca63d81763343fa1fbbbeecba24ca939b3f4d577a5129fd3c407cada9151a12b04e76d664b232cf05c9ad000", 0x1000}}, 0x1006) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000495"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) setfsgid(0xee00) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/26) pipe2$9p(&(0x7f0000000100), 0x80400) socket$xdp(0x2c, 0x3, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, &(0x7f0000000480)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r8, 0x84, 0x1b, &(0x7f0000000380)={r9}, &(0x7f0000000140)=0x8) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000000)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000008c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000004}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xf4, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fcffffffffffffff2000b8785d960000000000000000000000000f00000000000100000000000000000000000000000200", "2809e897bdb2128bfc82525edd665240f45f819e01982861ac0000000000000000001100", "90be8b1c551265406c7f306003d8a0f4bd00", [0x20, 0xfffffffffffffffc]}}) 2m38.40210043s ago: executing program 4 (id=570): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000600)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x418, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x1, 0xa, 0x8, 0x7fff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000280)=[{0x1, 0x2, 0x3, 0xa}, {0x0, 0x3, 0x409, 0x4}], 0x10, 0x3, @void, @value}, 0x94) futex(0x0, 0x88, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = inotify_init1(0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x7) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000019580)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) write$sysctl(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r4, &(0x7f0000019680)=""/102384, 0x18ff0) syslog(0x4, &(0x7f0000000b00)=""/4096, 0x1000) keyctl$set_reqkey_keyring(0xe, 0x5) request_key(&(0x7f00000000c0)='logon\x00', 0x0, &(0x7f0000000140)='![\'[\'^-.-]{$5#\x00', 0x0) getpid() getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, 0x0, &(0x7f0000000000)) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r5 = dup2(r1, r4) getsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, &(0x7f0000000180), &(0x7f0000000200)=0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'sed\x00', 0x2d, 0x40085, 0x13}, 0x2c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 2m35.252125075s ago: executing program 4 (id=573): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = socket(0xa, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000140)={r3}, &(0x7f0000000240)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = getpgrp(0xffffffffffffffff) migrate_pages(r4, 0x1, &(0x7f0000000040)=0x2, &(0x7f00000000c0)=0x5) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$loop(&(0x7f0000000100), 0x82, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r6, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="02000000e0a72c0200000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000061aa0000000000000000000000000000000000000000000000000002356a210000000000000000000000000000efffff0023000000000000000000000000000000000000000000000082a16c69484c00"/180], 0x110) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/freeze_filesystems', 0xa0042, 0x20) write$tcp_mem(r7, &(0x7f00000003c0)={0x1800000000000000, 0x2d, 0xc, 0x3a, 0x2, 0x2c}, 0x48) 2m34.22613153s ago: executing program 4 (id=576): r0 = epoll_create1(0x80000) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000005c0)={0x4}) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000000)={0x0, 0xa, 0x0, 0x0, 0x10}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x113}], 0x1}, 0x9fc) bind$can_j1939(r3, &(0x7f0000000100)={0x1d, r4, 0x3, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) sendmmsg(r3, &(0x7f0000000040)=[{{&(0x7f0000000140)=@can={0x1d, r4}, 0x80, 0x0}}], 0x1, 0x2004c801) 2m33.13052497s ago: executing program 4 (id=577): socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000000000207d1e5a2d00000000000109022400010000000009040000010300000009210000000122080009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_FLAGS={0x8, 0x8, 0x780}]}, 0x34}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000400)="0b0012002e0064000200475400f6a13bb1000000086086ddd9d3c97252709803deeadd19e6a9c61c0b4c1d7bbe88f588ea2f986d1e1ec7b4d14bc37b995822d420e2501ac93967b34a11e05177923f64f76aed0c6c6c570d074db93d8b39de5058bd493b3b86d246205286a8f38dfe6c9b40", 0x72, 0x0, &(0x7f0000000140)={0x11, 0xf8, r5, 0x1, 0xfe, 0x6, @remote}, 0x14) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) (async) r6 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) close(0x4) (async) close(0x4) syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x3, 0x10, 0x8, [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x7, {{0x5}, {0x5, 0x24, 0x0, 0x49}, {0xd, 0x24, 0xf, 0x1, 0x81, 0x1, 0xc1f7, 0x3}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x5, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x6, 0x8b}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) preadv(r6, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/41, 0x29}], 0x1, 0xfffffff5, 0x6) 2m27.223574501s ago: executing program 4 (id=584): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="6b95d7082534", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x68, 0x0, 0x1, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x4, 0x4, 0x68, 0x2, 0x9, 0x4, 0x81, @remote, @rand_addr=0x64010101}}}}}}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@int={0x4, 0x0, 0x0, 0x1, 0x0, 0x65, 0x0, 0x23}, @func={0xb, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000140)=""/124, 0x37, 0x7c, 0x0, 0x1, 0x10000, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@generic={0x9, 0x4, 0x2, 0x4ee, 0x800}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = gettid() tkill(r4, 0x8) syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/cgroup\x00') 2m11.51354137s ago: executing program 33 (id=584): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @random="6b95d7082534", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x1, 0x31, 0x30, 0x68, 0x0, 0x1, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0xb, 0x1, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x4, 0x4, 0x68, 0x2, 0x9, 0x4, 0x81, @remote, @rand_addr=0x64010101}}}}}}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@int={0x4, 0x0, 0x0, 0x1, 0x0, 0x65, 0x0, 0x23}, @func={0xb, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000140)=""/124, 0x37, 0x7c, 0x0, 0x1, 0x10000, @value}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@generic={0x9, 0x4, 0x2, 0x4ee, 0x800}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xc}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x9e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) r2 = creat(&(0x7f0000000340)='./file0\x00', 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) r4 = gettid() tkill(r4, 0x8) syz_open_procfs$namespace(r4, &(0x7f0000000000)='ns/cgroup\x00') 19.7835456s ago: executing program 6 (id=862): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sendmsg$nl_route_sched(r4, 0x0, 0x4091) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x50, 0x2c, 0xd2b, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x81, 0x0, 0xffff}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x50}}, 0x400c084) 17.309949345s ago: executing program 3 (id=867): r0 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000300)={0xf0effd, 0x5}) prctl$PR_MCE_KILL(0x23, 0x2, 0x7fffffffeffe) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x10000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10) keyctl$update(0x2, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0x3, 0x9}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008046, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x24004004, 0x0, 0x0) mount$bpf(0x0, &(0x7f00000022c0)='./cgroup\x00', &(0x7f0000000580), 0x4000, &(0x7f0000000680)=ANY=[@ANYBLOB='smackfs']) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x8, &(0x7f0000000080)=0x4, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = epoll_create1(0x0) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000040)={0xb0000000}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) socket$kcm(0x10, 0x5, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) landlock_restrict_self(r2, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002000010300000000000000000200"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x0) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r3) write$smackfs_cipso(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB='@ 00000000000000000000000000 '], 0x20) 16.996254613s ago: executing program 6 (id=869): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000008b2c6d01daa817e407258eb425c1b90281a17a1b6a4e985da93d6c0481634b46f6da7c7fe1e31036417391820debded1f1766ee96f9a2c24af691bb884ba345e195acbd349d1ba06d6b39ee9fd269e876aa4a03210433087af1eb8da510373f18a8487fce2d7aed48942d5dfa30d797873ff2fc1e9b33a31213739dc60f480b59e22087524d97cd30ff3b38ba91e2b62c140"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x6) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) mkdir(&(0x7f0000000000)='./file\x00', 0x0) mkdir(&(0x7f00000000c0)='./file/file0\x00', 0x4a) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000300)='./file0\x00', 0x141800, 0x43) r1 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0x84c0, 0x0, 0xffffffff, 0x121}, &(0x7f0000000100)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x9048}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = socket$qrtr(0x2a, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg$qrtr(r4, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x120}, 0x38, 0x40000040) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 15.539417428s ago: executing program 3 (id=872): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, 0x0, 0x624100, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x7, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) 15.245047447s ago: executing program 0 (id=873): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000e00)={'vxcan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2, 0x0, {}, 0x1fb}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x1) write$binfmt_aout(r6, &(0x7f0000000600)=ANY=[], 0xff2e) 14.404036745s ago: executing program 3 (id=874): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000002680)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x00\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\x80\xae\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x00\x00\x00\x00\x00\x00\x00\x00\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bY\x8f}Co\x13z5)\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceQ\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0', 0x4) syz_io_uring_setup(0x34b9, &(0x7f00000004c0)={0x0, 0x0, 0x1, 0x1}, 0x0, &(0x7f0000000180)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42801, 0x0) writev(r2, &(0x7f0000000240)=[{&(0x7f00000000c0)="e479", 0x2}, {&(0x7f0000000000)="ea87f2", 0x3}], 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$rose(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='lp\x00', 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x86000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r6, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x1000, 0xa, 0x2, 0xa, 0x0, [{0x8, 0x1, 0xa, '\x00', 0x3}, {0x4, 0x2, 0x8, '\x00', 0xff}, {0x4, 0xff, 0x81, '\x00', 0x3}, {0x3, 0xbb, 0x9, '\x00', 0x8}, {0x1, 0x8, 0x1}, {0x92, 0x7, 0x0, '\x00', 0x1}, {0x5, 0x1, 0x40, '\x00', 0x1}, {0x8, 0x7f, 0xf}, {0x7, 0x8, 0x1}, {0x9, 0x1, 0xf3, '\x00', 0x8}, {0xc0, 0x39, 0x7, '\x00', 0x41}, {0x9, 0x2, 0x1, '\x00', 0x8}, {0x28, 0x3, 0x3, '\x00', 0x5}, {0x1, 0x3, 0xba}, {0x7, 0xfb, 0x8, '\x00', 0x6}, {0x7, 0x3, 0x1, '\x00', 0x3}, {0x3, 0x7, 0xf5, '\x00', 0x3}, {0x30, 0x6, 0x1, '\x00', 0x3}, {0xff, 0x2, 0x9, '\x00', 0xa}, {0x9, 0x1, 0x4, '\x00', 0x10}, {0x5a, 0x0, 0x3}, {0x8, 0xa0, 0x3, '\x00', 0xe}, {0x3, 0x9, 0x9, '\x00', 0x5}, {0x7f, 0xb3, 0x5, '\x00', 0x90}]}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000066000/0x2000)=nil, 0x2000, 0x3000000, 0x11, r1, 0x0) r8 = epoll_create(0xd6c8) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000080)) 11.780386063s ago: executing program 3 (id=879): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x90) rt_sigpending(0x0, 0x1000000) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) accept$inet6(r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x7}, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r5 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$read(0xb, r5, &(0x7f0000000240)=""/112, 0x349b7f55) r6 = fsopen(&(0x7f0000000300)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 11.242672061s ago: executing program 0 (id=880): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 9.594604495s ago: executing program 1 (id=884): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone3(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) flistxattr(0xffffffffffffffff, &(0x7f0000000300)=""/154, 0x9a) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}, 0x1, 0x0, 0x0, 0x2000082e}, 0x0) 8.584062782s ago: executing program 5 (id=885): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2, 0x0, 0x4}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x5, {0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xfffe}}}, 0x3a) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x1, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) 8.537778505s ago: executing program 0 (id=886): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_hsr\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = semget(0x2, 0x4, 0x200) semop(r1, &(0x7f0000000040)=[{0x0, 0x7fff, 0x1800}, {0x0, 0x8001}], 0x2) r2 = fsopen(&(0x7f00000000c0)='binder\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$setsig(0x4203, r3, 0x6, &(0x7f0000002340)={0x16, 0x2, 0x7f}) semop(r1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x486}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={r5, 0x0, 0x0}, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, 0x0, 0x0, 0x0) 7.573023516s ago: executing program 1 (id=887): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone3(&(0x7f0000000380)={0x1b012a500, 0x0, &(0x7f0000000140), &(0x7f0000000180), {0x1e}, &(0x7f00000001c0)=""/68, 0x44, &(0x7f0000000280)=""/161, 0x0}, 0x58) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) flistxattr(r4, &(0x7f0000000300)=""/154, 0x9a) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0xfffe, @multicast2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x19d1, 0xfffffffffffffffc, 0x0, 0x0) 7.221531276s ago: executing program 5 (id=888): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r0 = socket$pppoe(0x18, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b, 0x0, 0xee01}, {0x0, 0x0, 0x804, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3, 0x0, 0xb7, 0xffffffff, 0x1ff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x6, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x2, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x44, 0x0, 0x7, 0x8001, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x1, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x10, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0xfffffffa, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x3, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0xfffffffb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x9, 0x7fff, 0x6, 0x5, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000003, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x40000009, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xc, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7fff, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x240, 0x80, 0x4, 0x4, 0x2950bfaf, 0x1000, 0xa6, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x1, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x3, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce9, 0x1ff, 0x2, 0x57, 0x400005, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x100007, 0xaf, 0x5, 0x6, 0x226, 0x5, 0xd3a, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0xf4000000, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gre0\x00', 0x0}) 6.902614854s ago: executing program 3 (id=889): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = memfd_create(&(0x7f0000002680)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x00\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\xe3l\x87\\\x15Hd~\x80\xae\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x00\x00\x00\x00\x00\x00\x00\x00\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bI\xd8\x1c\xe8\x9bY\x8f}Co\x13z5)\xd9\x89\xda\xa7Wd\xa4Eu\x8csm\xa1.\xd1\xb2I\x1a\x0e\b$\x16\xb2\xfdA\x98\x16\xca\x83y\xf9\x1a\xe7\x06h\av\xa8\xd8\xceQ\xc0\xe6v\xb5\xf5\x9d\xbe\xa58\xb42\xd8V$\xe6\xc8\x1c\xaf\x8e\xa1\xefa\xb1/\xee1=\xbfM\xeaw\f\xa2\x87\x1c(\x1a-\xeb\xfbV\xeb4\xd4C]\xc7{t\xf9\xd5`IZ\x03H\xd9\x86\xe12N\x1f\xd8{\xf5z@\xe0', 0x4) syz_io_uring_setup(0x34b9, &(0x7f00000004c0)={0x0, 0x0, 0x1, 0x1}, 0x0, &(0x7f0000000180)) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000002c0), 0x42801, 0x0) writev(r2, &(0x7f0000000240)=[{&(0x7f00000000c0)="e479", 0x2}, {&(0x7f0000000000)="ea87f2", 0x3}], 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$rose(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='lp\x00', 0x3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x86000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_IRQCHIP(r6, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @ioapic={0x1000, 0xa, 0x2, 0xa, 0x0, [{0x8, 0x1, 0xa, '\x00', 0x3}, {0x4, 0x2, 0x8, '\x00', 0xff}, {0x4, 0xff, 0x81, '\x00', 0x3}, {0x3, 0xbb, 0x9, '\x00', 0x8}, {0x1, 0x8, 0x1}, {0x92, 0x7, 0x0, '\x00', 0x1}, {0x5, 0x1, 0x40, '\x00', 0x1}, {0x8, 0x7f, 0xf}, {0x7, 0x8, 0x1}, {0x9, 0x1, 0xf3, '\x00', 0x8}, {0xc0, 0x39, 0x7, '\x00', 0x41}, {0x9, 0x2, 0x1, '\x00', 0x8}, {0x28, 0x3, 0x3, '\x00', 0x5}, {0x1, 0x3, 0xba}, {0x7, 0xfb, 0x8, '\x00', 0x6}, {0x7, 0x3, 0x1, '\x00', 0x3}, {0x3, 0x7, 0xf5, '\x00', 0x3}, {0x30, 0x6, 0x1, '\x00', 0x3}, {0xff, 0x2, 0x9, '\x00', 0xa}, {0x9, 0x1, 0x4, '\x00', 0x10}, {0x5a, 0x0, 0x3}, {0x8, 0xa0, 0x3, '\x00', 0xe}, {0x3, 0x9, 0x9, '\x00', 0x5}, {0x7f, 0xb3, 0x5, '\x00', 0x90}]}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap(&(0x7f0000066000/0x2000)=nil, 0x2000, 0x3000000, 0x11, r1, 0x0) r8 = epoll_create(0xd6c8) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r0, &(0x7f0000000080)) 5.47053652s ago: executing program 1 (id=890): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x13) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000e00)={'vxcan1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r4, 0x0, {0x0, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r2, 0x0, {}, 0x1fb}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x48080}, 0x40010) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$int_in(r6, 0x5452, &(0x7f0000000000)=0x1) write$binfmt_aout(r6, &(0x7f0000000600)=ANY=[], 0xff2e) 5.160525669s ago: executing program 5 (id=891): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f00000001c0)="f30fbd34c62e7934da26f20f2dbb09000000360f780865360f01d1c4e34121d01c66b8f9008ee0b961080000b895fa0000ba000000000f30"}], 0x1, 0xa, &(0x7f0000000000)=[@dstype0={0x6, 0xe}], 0x10000000000002d0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xa, 0x7, 0x6, 0x8c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)='%pS \x00'}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r7}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_enter(r1, 0x73cc, 0x0, 0x36, 0x0, 0x0) 5.155696732s ago: executing program 6 (id=892): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa0e9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000300), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="080100", @ANYRES16=r2, @ANYBLOB="0100000000000000000001000000080001000000000014000480050603000000000005000300000000000800020001000000d00008800c00078f25000600000000002900078008000500000000000800060000000000080005000000000008000600000000003c0007800c00058008"], 0x108}}, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r3, &(0x7f0000000340)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture\' 8'], 0x86) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000001c0)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000080)='h', 0x1, r0}, 0x68) dup3(r4, r3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r5 = socket(0xb, 0x3, 0x3a) preadv(0xffffffffffffffff, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x4bd, 0x8) syz_emit_ethernet(0x86, &(0x7f00000003c0)={@multicast, @dev, @val={@val={0x88a8, 0x7, 0x1, 0x3}, {0x8100, 0x4, 0x1, 0x3}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "5e15b1", 0x48, 0x3a, 0x0, @dev, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "f96959", 0x0, 0x88, 0x0, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@routing, @hopopts={0x2c, 0x0, '\x00', [@pad1]}]}}}}}}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x17, 0x5, 0x2, 0x0, 0x8, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = socket(0x840000000002, 0x3, 0x100) connect$inet(r6, &(0x7f0000000380)={0x2, 0xe28, @empty}, 0x10) sendmmsg$inet(r6, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001600)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r7, 0x27, 0x14, 0x0, &(0x7f0000000000)="f8ad1dcc02cb29dcc80032008100", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000180), 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000e80)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000006000000020000000200000f0300000003000000010000000300000000000000000000000000000044942d000000000000000200000000000000000100000f010000000000000000000000000000008400005f5f"], &(0x7f00000014c0)=""/2, 0x6a, 0x2, 0x1, 0x0, 0x0, @void, @value}, 0x28) epoll_create1(0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f00000000c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/75, 0x0}) 5.103081714s ago: executing program 0 (id=893): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000001c0)={0x40, 0x0}, 0x8) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x500, 0x0) readv(r3, &(0x7f0000000080)=[{&(0x7f0000000580)=""/260, 0x104}], 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001240)={0x2020000, 0x2, 0x0, 0x0, 0xc, "001bf1000000000000002000"}) r4 = syz_open_pts(r3, 0x101) r5 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000001200)={0x20000001}) write$sndseq(0xffffffffffffffff, &(0x7f0000000480)=[{0xd2, 0x8, 0x3, 0x7, @tick=0x8, {0x3}, {0x1, 0x5}, @control={0x4e, 0x84, 0x1}}], 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000200)=@bpf_lsm={0x12, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="c20a00000000000069113a0000000000180000000000000000000000000000009520f89bfe4cdd79ff"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0xf, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x21, &(0x7f0000000040)=0x9eb9, 0x4) bind$inet6(r6, &(0x7f0000000540)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) ioctl$TIOCEXCL(r7, 0x540c) r8 = openat(r7, &(0x7f00000002c0)='./file0\x00', 0x4a4142, 0x9) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0x10000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB="2c726f6f746d6f64653d30303030303030303030303230303030303c717365725f69643dc9a132820917d0", @ANYRESOCT=r9, @ANYBLOB=',groid=', @ANYRESHEX=0x0]) read$FUSE(r9, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r9, &(0x7f0000000040)={0x50, 0x0, r10, {0x7, 0x1f, 0x0, 0xc92480, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50) syz_fuse_handle_req(r9, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r9, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0x50, 0xfffffffffffffff5, 0x1, {0x7, 0x29, 0x1, 0x800, 0xbe2, 0x200, 0xffff, 0x12800, 0x0, 0x0, 0x1, 0x7f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) close_range(r11, 0xffffffffffffffff, 0x2) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r12, 0x3b72, 0x0) 4.184372505s ago: executing program 3 (id=894): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00"/40], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x300048c1) prlimit64(0x0, 0x8, &(0x7f0000000140)={0x7f, 0xfffffffffffffffa}, 0x0) (async) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000040)={0xfdfdffff, 0x3, 0x1, 0x4, 0x1a, "518aba4d000000000000000000000000002000"}) (async) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa41d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828eea399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f0e817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) (async) r5 = gettid() sched_setscheduler(r5, 0x1, &(0x7f0000000080)=0x7) (async) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) (async) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000100)=r9, 0x4) (async) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) (async) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x9, 0x4) (async, rerun: 64) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r10, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) 4.122279321s ago: executing program 5 (id=895): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) epoll_create1(0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) pipe(&(0x7f0000000000)) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x17, 0x18, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@p, {}, {0x5}, {0x7, 0x0, 0x9}, {}, {}, {0x15}}, @ldst={0x1, 0x0, 0x3}], {{}, {0x5}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.121821369s ago: executing program 1 (id=896): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000005c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.96179682s ago: executing program 6 (id=897): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r4 = dup3(0xffffffffffffffff, r2, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @local}, 0xc) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000004c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) pread64(r1, 0x0, 0x0, 0x4000c2a) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@private2}}, {{@in6}, 0x0, @in=@initdev}}, &(0x7f0000000100)=0xe8) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/rcu_expedited', 0x0, 0x0) cachestat(r6, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000500)=@multiplanar_overlay={0xb, 0x3, 0x4, 0x10000, 0x2, {0x77359400}, {0x1, 0x8, 0x4, 0x5, 0x6, 0x5, "cc74137e"}, 0xe34066b8, 0x3, {&(0x7f00000002c0)=[{0x0, 0x44c52898, {}, 0x2}, {0xfff, 0x3, {}, 0xffffffff}]}, 0x2, 0x0, r0}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="48020000", @ANYBLOB="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", @ANYRES32=r8], 0x248}}, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$bt_hci(r9, 0x11e, 0x1, 0x0, &(0x7f0000000740)) 3.103572796s ago: executing program 5 (id=898): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffe, 0x0, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @dev}, 0x2, 0x0, 0x4}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x5, {0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xfffe}}}, 0x3a) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x1, 0x0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) 2.495448057s ago: executing program 0 (id=899): socket$inet_sctp(0x2, 0x1, 0x84) getpgrp(0xffffffffffffffff) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b"], 0x13c}}, 0x20040880) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TTY_SET(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x18, 0x3f9, 0x400, 0x70bd2d, 0x25dfdbfb, {0x1, 0x1}}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$AUDIT_USER(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f00000005c0)={0x84, 0x3ed, 0x800, 0x70bd2b, 0x25dfdbfc, "b72d74538d1163801ef4c1a4b12ac10489cf516db77ed5d809760e917c59de26d94aa606492a7225c28fb2009c3a0b818374298b901ccf91e49790cf31de6da4e4161b2f1a6ea3a355eea8a1dcfdc26179dc2881ad2e139b7205a5ae195b5d106e86b3f0a87fa076c9a6d46299bcd828f98fbe89", ["", ""]}, 0x84}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) sendmmsg(r1, &(0x7f0000000480)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x4000000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000290000000b"], 0x18}}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x25dfdbfb, {0x60, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x14}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0xb, 0x2}}}}]}, 0x40}}, 0x0) r5 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0x82002) r6 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0x707b, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f00000000c0), 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r5, 0x0, 0x0}) io_uring_enter(r6, 0x3516, 0x0, 0x4, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x80006f, 0x81501) 2.494584095s ago: executing program 1 (id=900): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ad73364256408b0011", 0x9) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x24044084}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001080)={0xaa, 0x14}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x205e, &(0x7f0000000480)={0x0, 0x6a9b, 0x8, 0xfffffffd, 0x1ff}, &(0x7f00000012c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5, 0x0, 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000104030000000000000000000500080308000540000000070800054b8000000008000340000000060600064000030000050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cb00f631f27b59014ec44307"], 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x800) recvmmsg$unix(r6, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/68, 0x44}], 0x2}}, {{&(0x7f0000001300), 0x6e, &(0x7f00000015c0)=[{&(0x7f00000013c0)=""/38, 0x26}, {&(0x7f0000001440)=""/66, 0x42}, {&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)}}], 0x2, 0x34000, 0x0) 2.284998126s ago: executing program 6 (id=901): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket$pppoe(0x18, 0x1, 0x0) accept4(r1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$inet(r5, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast1, 0x4e21, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b, 0x0, 0xee01}, {0x0, 0x0, 0x804, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x3, 0x0, 0xb7, 0xffffffff, 0x1ff}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x6, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x2, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x44, 0x0, 0x7, 0x8001, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x1, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x10, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0xfffffffa, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x3, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0xfffffffb, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x9, 0x7fff, 0x6, 0x5, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000003, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x40000009, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0xc, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x7fff, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x240, 0x80, 0x4, 0x4, 0x2950bfaf, 0x1000, 0xa6, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x1, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x3, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce9, 0x1ff, 0x2, 0x57, 0x400005, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x100007, 0xaf, 0x5, 0x6, 0x226, 0x5, 0xd3a, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0xf4000000, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000001c0)={'gre0\x00', 0x0}) 1.596032561s ago: executing program 5 (id=902): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x90) rt_sigpending(0x0, 0x1000000) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) accept$inet6(r3, 0x0, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r4, @void, @void, @value}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r6 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r6, &(0x7f0000000240)=""/112, 0x349b7f55) r7 = fsopen(&(0x7f0000000300)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 640.37896ms ago: executing program 6 (id=903): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000018000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x11, 0x7, 0x200, 0x7ff, 0x2260, 0x1, 0x73d, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) pwrite64(r0, &(0x7f0000000380)="6f0232ef877584c41e0d86f7725ab85e97ae3689303f48bd0a06ff7b242b557b2c5b8a4dc585b18c6d4af408451060ce48e77c289057fe01c26d8b3f3773566eb226458052556b319c07cbac9114ee50e23cdc671479750d49d12449d6fa7e8542e96fbb564aff8b963373", 0x6b, 0xfffffffffffeffff) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x19, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000f000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000000500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000c62d008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000100095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x29, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd24, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, 0x0, &(0x7f0000000500)) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00'}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r10, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r9, r10, &(0x7f00000001c0), 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 585.227309ms ago: executing program 1 (id=904): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) bind$can_j1939(r4, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) sendmsg$nl_route_sched(r4, 0x0, 0x4091) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@newtfilter={0x50, 0x2c, 0xd2b, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x81, 0x0, 0xffff}}}]}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x50}}, 0x400c084) 0s ago: executing program 0 (id=905): syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000080)="ad73364256408b001102", 0xa) prctl$PR_SET_KEEPCAPS(0x8, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x24044084}, 0x4000010) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001080)={0xaa, 0x14}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0xa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0x205e, &(0x7f0000000480)={0x0, 0x6a9b, 0x8, 0xfffffffd, 0x1ff}, &(0x7f00000012c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x0, &(0x7f0000001400)=[r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x5, 0x0, 0x1}) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000104030000000000000000000500080308000540000000070800054b8000000008000340000000060600064000030000050001"], 0x5c}, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) ioctl$SG_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cb00f631f27b59014ec44307"], 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x800) recvmmsg$unix(r6, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/68, 0x44}], 0x2}}, {{&(0x7f0000001300), 0x6e, &(0x7f00000015c0)=[{&(0x7f00000013c0)=""/38, 0x26}, {&(0x7f0000001440)=""/66, 0x42}, {&(0x7f0000001740)=""/208, 0xd0}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x4, &(0x7f0000001600)}}], 0x2, 0x34000, 0x0) kernel console output (not intermixed with test programs): 07/2025 [ 143.411978][ T6461] Call Trace: [ 143.411987][ T6461] [ 143.411996][ T6461] dump_stack_lvl+0x189/0x250 [ 143.412035][ T6461] ? __pfx____ratelimit+0x10/0x10 [ 143.412067][ T6461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 143.412097][ T6461] ? __pfx__printk+0x10/0x10 [ 143.412125][ T6461] ? __pfx___might_resched+0x10/0x10 [ 143.412160][ T6461] should_fail_ex+0x414/0x560 [ 143.412192][ T6461] ? traverse+0xd9/0x570 [ 143.412211][ T6461] should_failslab+0xa8/0x100 [ 143.412240][ T6461] __kvmalloc_node_noprof+0x161/0x5f0 [ 143.412267][ T6461] ? traverse+0xd9/0x570 [ 143.412294][ T6461] traverse+0xd9/0x570 [ 143.412322][ T6461] ? __lock_acquire+0xab9/0xd20 [ 143.412354][ T6461] seq_read_iter+0xcfe/0xe10 [ 143.412387][ T6461] ? __asan_memset+0x22/0x50 [ 143.412415][ T6461] seq_read+0x2e2/0x3d0 [ 143.412434][ T6461] ? __lock_acquire+0xab9/0xd20 [ 143.412470][ T6461] ? __pfx_seq_read+0x10/0x10 [ 143.412498][ T6461] ? __import_iovec+0x5d4/0x7f0 [ 143.412529][ T6461] ? __pfx_seq_read+0x10/0x10 [ 143.412547][ T6461] proc_reg_read+0x1e6/0x2e0 [ 143.412579][ T6461] vfs_readv+0x5aa/0x850 [ 143.412609][ T6461] ? __pfx_proc_reg_read+0x10/0x10 [ 143.412632][ T6461] ? __pfx_vfs_readv+0x10/0x10 [ 143.412696][ T6461] ? __fget_files+0x2a/0x420 [ 143.412730][ T6461] ? __fget_files+0x3a0/0x420 [ 143.412757][ T6461] ? __fget_files+0x2a/0x420 [ 143.412796][ T6461] __x64_sys_preadv+0x197/0x2a0 [ 143.412827][ T6461] ? __pfx___x64_sys_preadv+0x10/0x10 [ 143.412854][ T6461] ? rcu_is_watching+0x15/0xb0 [ 143.412887][ T6461] ? trace_sys_enter+0x25/0x120 [ 143.412921][ T6461] do_syscall_64+0xfa/0x3b0 [ 143.412952][ T6461] ? lockdep_hardirqs_on+0x9c/0x150 [ 143.412984][ T6461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.413006][ T6461] ? clear_bhb_loop+0x60/0xb0 [ 143.413033][ T6461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.413054][ T6461] RIP: 0033:0x7f8e8158e929 [ 143.413074][ T6461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.413091][ T6461] RSP: 002b:00007f8e7f3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 143.413114][ T6461] RAX: ffffffffffffffda RBX: 00007f8e817b5fa0 RCX: 00007f8e8158e929 [ 143.413130][ T6461] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000004 [ 143.413143][ T6461] RBP: 00007f8e7f3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 143.413157][ T6461] R10: 0000000000000033 R11: 0000000000000246 R12: 0000000000000001 [ 143.413169][ T6461] R13: 0000000000000000 R14: 00007f8e817b5fa0 R15: 00007ffe6dec0bb8 [ 143.413204][ T6461] [ 144.834107][ T6480] netlink: 79 bytes leftover after parsing attributes in process `syz.1.140'. [ 145.301811][ T977] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 145.484692][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 145.505018][ T977] usb 5-1: too many configurations: 36, using maximum allowed: 8 [ 145.537812][ T977] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 145.556185][ T977] usb 5-1: can't read configurations, error -61 [ 145.721749][ T977] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 145.943372][ T977] usb 5-1: Using ep0 maxpacket: 8 [ 145.984972][ T977] usb 5-1: too many configurations: 36, using maximum allowed: 8 [ 146.081112][ T977] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 146.203732][ T977] usb 5-1: can't read configurations, error -61 [ 146.309024][ T977] usb usb5-port1: attempt power cycle [ 146.927988][ T977] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 147.175971][ T977] usb 5-1: device descriptor read/8, error -71 [ 147.346041][ T6501] Process accounting resumed [ 147.935198][ T6509] syz.1.151 (6509) used greatest stack depth: 16536 bytes left [ 147.961840][ T977] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 148.021040][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 148.054833][ T977] usb 5-1: unable to get BOS descriptor or descriptor too short [ 148.085201][ T977] usb 5-1: config 2 has an invalid descriptor of length 236, skipping remainder of the config [ 148.126417][ T977] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 148.167061][ T977] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=68.f3 [ 148.181353][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.195784][ T977] usb 5-1: Product: ῌ斢䂞诜稺䔛琑륣甦∵㡆짪뮖ᧂꍓ껌嘞ៗᒩ㥃ᾬ뱲⣎ᡅ灮谘䠠킫痝㴾绗⣡垸呃ꤌ㭸糛쬅ⁱ별侚芊␭鐪㔃꺙챱樯踒쵻짓ᚅꆖ腤䚍䲝㘁矮౷큾꛻놮༰䃯轟␎豘䶎汑렇빏ṹшꪐ喾♿髾ザ튫돔㟰ⅉ㶺⹭ [ 148.377407][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 148.421561][ T6517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.155'. [ 148.503469][ T977] usb 5-1: SerialNumber: syz [ 148.551796][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 148.579468][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.610901][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.651445][ T9] usb 1-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 148.682121][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.722691][ T9] usb 1-1: config 0 descriptor?? [ 149.710976][ T9] gt683r_led 0003:1770:FF00.0001: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.0-1/input0 [ 149.723608][ T6511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.724149][ T6511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.947837][ T6511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.182829][ T6511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.312117][ T6511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.371238][ T6511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.402319][ T9] usb 1-1: USB disconnect, device number 4 [ 150.432144][ T5986] gt683r_led 0003:1770:FF00.0001: failed to send set report request: -19 [ 150.536910][ T6528] fido_id[6528]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 150.798496][ T977] usb 5-1: USB disconnect, device number 11 [ 153.103431][ T6561] trusted_key: encrypted_key: insufficient parameters specified [ 154.579223][ T5913] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 154.732127][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 154.753442][ T5913] usb 5-1: unable to get BOS descriptor or descriptor too short [ 154.801003][ T5913] usb 5-1: config 2 has an invalid descriptor of length 236, skipping remainder of the config [ 154.851895][ T5913] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 154.928288][ T5913] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=68.f3 [ 155.091780][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.146598][ T5913] usb 5-1: Product: ῌ斢䂞诜稺䔛琑륣甦∵㡆짪뮖ᧂꍓ껌嘞ៗᒩ㥃ᾬ뱲⣎ᡅ灮谘䠠킫痝㴾绗⣡垸呃ꤌ㭸糛쬅ⁱ별侚芊␭鐪㔃꺙챱樯踒쵻짓ᚅꆖ腤䚍䲝㘁矮౷큾꛻놮༰䃯轟␎豘䶎汑렇빏ṹшꪐ喾♿髾ザ튫돔㟰ⅉ㶺⹭ [ 155.264810][ T5913] usb 5-1: SerialNumber: syz [ 157.558554][ T5913] usb 5-1: USB disconnect, device number 12 [ 157.846515][ T6599] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 158.117443][ T6599] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 159.041761][ T977] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 159.181779][ T977] usb 2-1: device descriptor read/64, error -71 [ 160.281786][ T977] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 161.297408][ T6628] netlink: 28 bytes leftover after parsing attributes in process `syz.2.186'. [ 161.912236][ T977] usb 2-1: device descriptor read/64, error -71 [ 162.032086][ T977] usb usb2-port1: attempt power cycle [ 162.258664][ T5986] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 163.048345][ T6648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 163.057872][ T6648] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 163.074440][ T6648] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.084149][ T6648] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.275558][ T5986] usb 1-1: Using ep0 maxpacket: 16 [ 163.535709][ T5986] usb 1-1: unable to get BOS descriptor or descriptor too short [ 163.557583][ T5986] usb 1-1: config 2 has an invalid descriptor of length 236, skipping remainder of the config [ 163.586659][ T5986] usb 1-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 163.645728][ T5986] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=68.f3 [ 163.666803][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.692421][ T5986] usb 1-1: Product: ῌ斢䂞诜稺䔛琑륣甦∵㡆짪뮖ᧂꍓ껌嘞ៗᒩ㥃ᾬ뱲⣎ᡅ灮谘䠠킫痝㴾绗⣡垸呃ꤌ㭸糛쬅ⁱ별侚芊␭鐪㔃꺙챱樯踒쵻짓ᚅꆖ腤䚍䲝㘁矮౷큾꛻놮༰䃯轟␎豘䶎汑렇빏ṹшꪐ喾♿髾ザ튫돔㟰ⅉ㶺⹭ [ 163.746635][ T6652] netlink: 'syz.4.192': attribute type 21 has an invalid length. [ 163.755635][ T6652] netlink: 132 bytes leftover after parsing attributes in process `syz.4.192'. [ 163.795915][ T5986] usb 1-1: SerialNumber: syz [ 163.956757][ T6655] netlink: 'syz.1.193': attribute type 1 has an invalid length. [ 165.008586][ T6655] 8021q: adding VLAN 0 to HW filter on device bond1 [ 165.297650][ T6668] netlink: 140 bytes leftover after parsing attributes in process `syz.2.195'. [ 165.372176][ T6668] netlink: 16 bytes leftover after parsing attributes in process `syz.2.195'. [ 165.389353][ T6670] gtp0: entered promiscuous mode [ 165.499870][ T6668] netlink: 5 bytes leftover after parsing attributes in process `syz.2.195'. [ 166.114188][ T5986] usb 1-1: USB disconnect, device number 5 [ 167.764091][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 167.788306][ T6706] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 167.906548][ T6709] netlink: 96 bytes leftover after parsing attributes in process `syz.1.207'. [ 168.130024][ T6713] netlink: 140 bytes leftover after parsing attributes in process `syz.3.208'. [ 168.174386][ T6713] netlink: 16 bytes leftover after parsing attributes in process `syz.3.208'. [ 168.245030][ T6713] netlink: 5 bytes leftover after parsing attributes in process `syz.3.208'. [ 168.370844][ T6717] tty tty2: ldisc open failed (-12), clearing slot 1 [ 168.551723][ T5897] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 169.161749][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 169.186646][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 169.342538][ T5897] usb 2-1: config 2 has an invalid descriptor of length 236, skipping remainder of the config [ 169.366583][ T5897] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 169.399185][ T5897] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=68.f3 [ 169.417591][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.530670][ T5897] usb 2-1: Product: ῌ斢䂞诜稺䔛琑륣甦∵㡆짪뮖ᧂꍓ껌嘞ៗᒩ㥃ᾬ뱲⣎ᡅ灮谘䠠킫痝㴾绗⣡垸呃ꤌ㭸糛쬅ⁱ별侚芊␭鐪㔃꺙챱樯踒쵻짓ᚅꆖ腤䚍䲝㘁矮౷큾꛻놮༰䃯轟␎豘䶎汑렇빏ṹшꪐ喾♿髾ザ튫돔㟰ⅉ㶺⹭ [ 169.559892][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.626526][ T5897] usb 2-1: SerialNumber: syz [ 171.867767][ T6763] sg_write: data in/out 2387/42 bytes for SCSI command 0x0-- guessing data in; [ 171.867767][ T6763] program syz.0.219 not setting count and/or reply_len properly [ 172.186888][ T5897] usb 2-1: USB disconnect, device number 12 [ 172.588738][ T6768] overlayfs: missing 'lowerdir' [ 173.278591][ T6773] netlink: 140 bytes leftover after parsing attributes in process `syz.0.222'. [ 173.321287][ T6773] netlink: 16 bytes leftover after parsing attributes in process `syz.0.222'. [ 173.356339][ T6773] netlink: 5 bytes leftover after parsing attributes in process `syz.0.222'. [ 175.233075][ T6793] netlink: 32 bytes leftover after parsing attributes in process `syz.3.229'. [ 175.559559][ T6804] virtio-fs: tag not found [ 177.612496][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.235'. [ 177.958910][ T6827] netlink: 140 bytes leftover after parsing attributes in process `syz.3.240'. [ 177.994347][ T6827] netlink: 16 bytes leftover after parsing attributes in process `syz.3.240'. [ 178.009772][ T6827] netlink: 5 bytes leftover after parsing attributes in process `syz.3.240'. [ 179.074885][ T6841] all (unregistering): Released all slaves [ 179.152260][ T6849] gfs2: gfs2 mount does not exist [ 179.176934][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.247'. [ 179.223681][ T5939] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 179.581774][ T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 179.898307][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 180.011945][ T9] usb 3-1: config 1 has an invalid descriptor of length 171, skipping remainder of the config [ 180.151871][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 180.192723][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.01 [ 180.231982][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.241281][ T9] usb 3-1: Product: ࡃ [ 180.268421][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 180.277807][ T5939] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1 [ 180.291710][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 180.301426][ T5939] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 180.315243][ T9] usb 3-1: Manufacturer: ⇀篮칾쭊￤⚪﬏㾡ꫲ髱뺄닅靽㍢ش餇⯛࠻ˆ神㩰쓥뻓鹡怣웪뿩㚧桇䨌谲툎黁£퐘冋붜腿䱬阇澈⧕羪㟠 [ 180.334977][ T5939] usb 2-1: New USB device found, idVendor=0586, idProduct=1500, bcdDevice=2e.97 [ 180.358427][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.385514][ T5939] usb 2-1: Product: syz [ 180.389763][ T5939] usb 2-1: Manufacturer: syz [ 180.391489][ T9] usb 3-1: SerialNumber: ᐉ [ 180.423589][ T5939] usb 2-1: SerialNumber: syz [ 180.433181][ T5939] usb 2-1: config 0 descriptor?? [ 180.441875][ T6845] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 180.452164][ T5939] omninet 2-1:0.0: ZyXEL - omni.net usb converter detected [ 180.466732][ T5939] usb 2-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 181.200338][ T5897] usb 2-1: USB disconnect, device number 13 [ 181.250072][ T5897] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 181.288384][ T9] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 181.301435][ T5897] omninet 2-1:0.0: device disconnected [ 181.378539][ T9] usb 3-1: USB disconnect, device number 5 [ 181.586215][ T6874] netlink: 140 bytes leftover after parsing attributes in process `syz.3.255'. [ 181.601898][ T6874] netlink: 16 bytes leftover after parsing attributes in process `syz.3.255'. [ 181.641747][ T6874] netlink: 5 bytes leftover after parsing attributes in process `syz.3.255'. [ 182.899145][ T6891] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 185.946111][ T5939] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 186.063959][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 186.667653][ T9] usb 1-1: device descriptor read/64, error -71 [ 186.842993][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 186.852222][ T5939] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 186.884795][ T5939] usb 4-1: config 0 has no interface number 0 [ 186.925485][ T5939] usb 4-1: config 0 interface 184 has no altsetting 0 [ 186.946048][ T5939] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 186.957107][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.965772][ T5939] usb 4-1: Product: syz [ 186.970910][ T5939] usb 4-1: Manufacturer: syz [ 186.979531][ T5939] usb 4-1: SerialNumber: syz [ 187.025435][ T5939] usb 4-1: config 0 descriptor?? [ 187.034208][ T5939] smsc75xx v1.0.0 [ 187.038778][ T5939] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 187.067672][ T5939] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22 [ 188.267846][ T5939] usb 4-1: USB disconnect, device number 9 [ 188.444881][ T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 189.371529][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 189.398918][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 189.446669][ T9] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 189.500227][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 254 [ 189.545845][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.563436][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.601529][ T9] usb 2-1: Product: syz [ 189.622064][ T9] usb 2-1: Manufacturer: syz [ 189.626728][ T9] usb 2-1: SerialNumber: syz [ 189.694276][ T9] usb 2-1: bad CDC descriptors [ 189.940706][ T5939] usb 2-1: USB disconnect, device number 14 [ 190.989917][ T6965] kvm: pic: non byte write [ 191.251785][ T5939] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 192.021744][ T5939] usb 1-1: Using ep0 maxpacket: 8 [ 192.047963][ T5939] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 192.061755][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.069826][ T5939] usb 1-1: Product: syz [ 192.076874][ T5939] usb 1-1: Manufacturer: syz [ 192.081550][ T5939] usb 1-1: SerialNumber: syz [ 192.117743][ T5939] usb 1-1: config 0 descriptor?? [ 192.134220][ T5939] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 192.164922][ T6973] Illegal XDP return value 3144751003 on prog (id 72) dev N/A, expect packet loss! [ 195.523459][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.812154][ T977] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 196.012927][ T5939] gspca_sonixj: reg_r err -110 [ 196.018773][ T5939] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 196.434433][ T9] usb 1-1: USB disconnect, device number 8 [ 196.795560][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 196.825531][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.931303][ T6986] netlink: 20 bytes leftover after parsing attributes in process `syz.4.284'. [ 197.601275][ T977] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 197.638574][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.672541][ T977] usb 4-1: config 0 descriptor?? [ 197.709860][ T977] usb 4-1: can't set config #0, error -71 [ 197.763533][ T977] usb 4-1: USB disconnect, device number 10 [ 198.260302][ T6998] process 'syz.1.288' launched './file0' with NULL argv: empty string added [ 200.191792][ T7015] nvme_fabrics: missing parameter 'transport=%s' [ 200.271906][ T5920] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 200.279981][ T7015] nvme_fabrics: missing parameter 'nqn=%s' [ 200.396933][ T7026] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 200.464340][ T5920] usb 5-1: config 0 has an invalid interface number: 25 but max is 0 [ 200.513316][ T5920] usb 5-1: config 0 has no interface number 0 [ 200.543636][ T5920] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 200.583838][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.611211][ T5920] usb 5-1: config 0 descriptor?? [ 200.637087][ T5920] cp210x 5-1:0.25: cp210x converter detected [ 201.061831][ T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 201.262950][ T7038] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 201.295824][ T5920] cp210x 5-1:0.25: failed to get vendor val 0x000e size 3: -71 [ 201.326261][ T5920] usb 5-1: cp210x converter now attached to ttyUSB0 [ 201.349684][ T5920] usb 5-1: USB disconnect, device number 13 [ 201.357059][ T7037] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 201.378341][ T5920] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 201.405453][ T9] usb 1-1: not running at top speed; connect to a high speed hub [ 201.407195][ T5920] cp210x 5-1:0.25: device disconnected [ 201.438381][ T9] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 201.470116][ T9] usb 1-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.496239][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 201.529031][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c26e, bcdDevice= 0.40 [ 201.551817][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.573183][ T9] usb 1-1: Product: syz [ 201.577936][ T9] usb 1-1: Manufacturer: Ђ [ 201.791677][ T9] usb 1-1: SerialNumber: syz [ 202.123101][ T7032] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 203.318454][ T7052] trusted_key: encrypted_key: key user:syz not found [ 203.975004][ T9] usbhid 1-1:1.0: can't add hid device: -71 [ 203.990042][ T9] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 204.154703][ T9] usb 1-1: USB disconnect, device number 9 [ 207.130645][ T977] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 207.334504][ T977] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.358960][ T977] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 207.388488][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.404539][ T7097] netlink: 96 bytes leftover after parsing attributes in process `syz.4.317'. [ 207.440120][ T977] usb 2-1: config 0 descriptor?? [ 207.457637][ T7096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 207.470095][ T977] pwc: Askey VC010 type 2 USB webcam detected. [ 207.860511][ T977] pwc: recv_control_msg error -32 req 02 val 2b00 [ 208.776176][ T977] pwc: recv_control_msg error -32 req 02 val 2700 [ 208.825595][ T977] pwc: recv_control_msg error -32 req 02 val 2c00 [ 209.062487][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.321'. [ 210.232307][ T7109] veth3: entered promiscuous mode [ 210.349205][ T977] pwc: recv_control_msg error -71 req 04 val 1000 [ 210.371373][ T977] pwc: recv_control_msg error -71 req 04 val 1300 [ 210.424492][ T977] pwc: recv_control_msg error -71 req 04 val 1400 [ 210.482130][ T977] pwc: recv_control_msg error -71 req 02 val 2000 [ 210.515768][ T977] pwc: recv_control_msg error -71 req 02 val 2100 [ 210.554107][ T977] pwc: recv_control_msg error -71 req 04 val 1500 [ 210.565632][ T977] pwc: recv_control_msg error -71 req 02 val 2500 [ 210.579039][ T977] pwc: recv_control_msg error -71 req 02 val 2400 [ 210.605964][ T977] pwc: recv_control_msg error -71 req 02 val 2600 [ 210.640725][ T977] pwc: recv_control_msg error -71 req 02 val 2900 [ 210.682674][ T7134] netlink: 72 bytes leftover after parsing attributes in process `syz.2.326'. [ 210.702410][ T7136] Bluetooth: MGMT ver 1.23 [ 210.711855][ T977] pwc: recv_control_msg error -71 req 02 val 2800 [ 210.745525][ T977] pwc: recv_control_msg error -71 req 04 val 1100 [ 210.778737][ T977] pwc: recv_control_msg error -71 req 04 val 1200 [ 210.839022][ T977] pwc: Registered as video103. [ 210.877954][ T977] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 210.980624][ T977] usb 2-1: USB disconnect, device number 15 [ 211.013532][ T7143] netlink: 36 bytes leftover after parsing attributes in process `syz.0.328'. [ 211.094170][ T7143] FAULT_INJECTION: forcing a failure. [ 211.094170][ T7143] name failslab, interval 1, probability 0, space 0, times 0 [ 211.166018][ T7144] trusted_key: encrypted_key: key user:syz not found [ 211.251906][ T7143] CPU: 0 UID: 0 PID: 7143 Comm: syz.0.328 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 211.251937][ T7143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.251954][ T7143] Call Trace: [ 211.251963][ T7143] [ 211.251973][ T7143] dump_stack_lvl+0x189/0x250 [ 211.252020][ T7143] ? __pfx____ratelimit+0x10/0x10 [ 211.252051][ T7143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.252080][ T7143] ? __pfx__printk+0x10/0x10 [ 211.252113][ T7143] ? __pfx___might_resched+0x10/0x10 [ 211.252142][ T7143] ? fs_reclaim_acquire+0x7d/0x100 [ 211.252177][ T7143] should_fail_ex+0x414/0x560 [ 211.252207][ T7143] ? alloc_netdev_mqs+0x8e5/0x11e0 [ 211.252236][ T7143] should_failslab+0xa8/0x100 [ 211.252265][ T7143] __kvmalloc_node_noprof+0x161/0x5f0 [ 211.252292][ T7143] ? alloc_netdev_mqs+0x8e5/0x11e0 [ 211.252328][ T7143] alloc_netdev_mqs+0x8e5/0x11e0 [ 211.252365][ T7143] rtnl_create_link+0x31f/0xd10 [ 211.252402][ T7143] rtnl_newlink_create+0x25c/0xb00 [ 211.252433][ T7143] ? __lock_acquire+0xab9/0xd20 [ 211.252466][ T7143] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 211.252488][ T7143] ? rtnl_newlink+0x8db/0x1c70 [ 211.252512][ T7143] ? __pfx___mutex_lock+0x10/0x10 [ 211.252565][ T7143] ? ns_capable+0x8a/0xf0 [ 211.252617][ T7143] rtnl_newlink+0x16d6/0x1c70 [ 211.252641][ T7143] ? netlink_sendmsg+0x805/0xb30 [ 211.252678][ T7143] ? __pfx_rtnl_newlink+0x10/0x10 [ 211.252727][ T7143] ? kasan_quarantine_put+0xdd/0x220 [ 211.252749][ T7143] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.252786][ T7143] ? nlmon_xmit+0xb0/0x100 [ 211.252813][ T7143] ? kmem_cache_free+0x18f/0x400 [ 211.252847][ T7143] ? __local_bh_enable_ip+0x12d/0x1c0 [ 211.252876][ T7143] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.252907][ T7143] ? __local_bh_enable_ip+0x12d/0x1c0 [ 211.252936][ T7143] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 211.252969][ T7143] ? __dev_queue_xmit+0x27e/0x3a70 [ 211.252998][ T7143] ? __dev_queue_xmit+0x27e/0x3a70 [ 211.253023][ T7143] ? __dev_queue_xmit+0x27e/0x3a70 [ 211.253051][ T7143] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 211.253086][ T7143] ? __lock_acquire+0xab9/0xd20 [ 211.253147][ T7143] ? __pfx_rtnl_newlink+0x10/0x10 [ 211.253169][ T7143] rtnetlink_rcv_msg+0x7cf/0xb70 [ 211.253194][ T7143] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 211.253213][ T7143] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 211.253232][ T7143] ? ref_tracker_free+0x63a/0x7d0 [ 211.253258][ T7143] ? __copy_skb_header+0xa7/0x550 [ 211.253305][ T7143] ? __pfx_ref_tracker_free+0x10/0x10 [ 211.253346][ T7143] ? __skb_clone+0x63/0x7a0 [ 211.253380][ T7143] netlink_rcv_skb+0x205/0x470 [ 211.253406][ T7143] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 211.253429][ T7143] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 211.253485][ T7143] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.253507][ T7143] ? netlink_deliver_tap+0x2e/0x1b0 [ 211.253529][ T7143] netlink_unicast+0x758/0x8d0 [ 211.253553][ T7143] netlink_sendmsg+0x805/0xb30 [ 211.253579][ T7143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.253603][ T7143] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 211.253622][ T7143] ? __pfx_netlink_sendmsg+0x10/0x10 [ 211.253640][ T7143] __sock_sendmsg+0x21c/0x270 [ 211.253667][ T7143] ____sys_sendmsg+0x505/0x830 [ 211.253691][ T7143] ? __pfx_____sys_sendmsg+0x10/0x10 [ 211.253718][ T7143] ? import_iovec+0x74/0xa0 [ 211.253735][ T7143] ___sys_sendmsg+0x21f/0x2a0 [ 211.253757][ T7143] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.253805][ T7143] ? __fget_files+0x2a/0x420 [ 211.253824][ T7143] ? __fget_files+0x3a0/0x420 [ 211.253855][ T7143] __x64_sys_sendmsg+0x19b/0x260 [ 211.253877][ T7143] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.253904][ T7143] ? __pfx_ksys_write+0x10/0x10 [ 211.253921][ T7143] ? rcu_is_watching+0x15/0xb0 [ 211.253948][ T7143] ? do_syscall_64+0xbe/0x3b0 [ 211.253975][ T7143] do_syscall_64+0xfa/0x3b0 [ 211.253997][ T7143] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.254019][ T7143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.254034][ T7143] ? clear_bhb_loop+0x60/0xb0 [ 211.254053][ T7143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.254068][ T7143] RIP: 0033:0x7f3b0938e929 [ 211.254090][ T7143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.254108][ T7143] RSP: 002b:00007f3b0a171038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.254127][ T7143] RAX: ffffffffffffffda RBX: 00007f3b095b5fa0 RCX: 00007f3b0938e929 [ 211.254139][ T7143] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 211.254148][ T7143] RBP: 00007f3b0a171090 R08: 0000000000000000 R09: 0000000000000000 [ 211.254157][ T7143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.254166][ T7143] R13: 0000000000000000 R14: 00007f3b095b5fa0 R15: 00007fffb627c818 [ 211.254197][ T7143] [ 212.277066][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 212.283416][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 212.290124][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 212.296711][ T5830] Bluetooth: hci2: command 0x0406 tx timeout [ 212.302758][ T5830] Bluetooth: hci4: command 0x0406 tx timeout [ 214.035687][ T5913] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 214.222209][ T5920] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 214.901088][ T5913] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 214.969507][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.002839][ T5913] usb 2-1: config 0 descriptor?? [ 215.025890][ T5913] cp210x 2-1:0.0: cp210x converter detected [ 215.041878][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 215.057966][ T5920] usb 5-1: config 0 has an invalid interface number: 235 but max is 0 [ 215.082992][ T5920] usb 5-1: config 0 has no interface number 0 [ 215.100393][ T5920] usb 5-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 215.128290][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.143251][ T5920] usb 5-1: Product: syz [ 215.147471][ T5920] usb 5-1: Manufacturer: syz [ 215.156200][ T5920] usb 5-1: SerialNumber: syz [ 215.190042][ T5920] usb 5-1: config 0 descriptor?? [ 215.239431][ T5913] usb 2-1: cp210x converter now attached to ttyUSB0 [ 215.272207][ T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 215.437564][ T5920] kaweth 5-1:0.235: Firmware present in device. [ 215.588850][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 215.595710][ T5920] kaweth 5-1:0.235: Error reading configuration (-71), no net device created [ 215.772705][ T7180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.784407][ T7180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.928670][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.260867][ T5920] kaweth 5-1:0.235: probe with driver kaweth failed with error -5 [ 216.274074][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.304079][ T5920] usb 5-1: USB disconnect, device number 14 [ 216.311002][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 216.340296][ T24] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 216.375090][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.388061][ T24] usb 4-1: config 0 descriptor?? [ 216.521246][ T7183] syzkaller0: entered promiscuous mode [ 216.601761][ T7183] syzkaller0: entered allmulticast mode [ 217.337718][ T24] microsoft 0003:045E:07DA.0002: unbalanced collection at end of report description [ 217.462929][ T5920] usb 2-1: USB disconnect, device number 16 [ 217.480515][ T5920] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 217.489254][ T24] microsoft 0003:045E:07DA.0002: parse failed [ 217.496644][ T24] microsoft 0003:045E:07DA.0002: probe with driver microsoft failed with error -22 [ 217.506727][ T5920] cp210x 2-1:0.0: device disconnected [ 217.673678][ T9] usb 4-1: USB disconnect, device number 11 [ 217.693606][ T7194] random: crng reseeded on system resumption [ 217.824592][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.340'. [ 222.077030][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 222.474520][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 222.488416][ T7227] can: request_module (can-proto-4) failed. [ 223.241739][ T5913] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 223.372980][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 223.414867][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.430583][ T9] usb 4-1: Product: syz [ 223.441146][ T9] usb 4-1: Manufacturer: syz [ 223.452889][ T9] usb 4-1: SerialNumber: syz [ 223.460430][ T9] usb 4-1: config 0 descriptor?? [ 223.527115][ T5913] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 223.806322][ T7243] Invalid source name [ 223.810449][ T7243] UBIFS error (pid: 7243): cannot open "./file0", error -22 [ 225.145579][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.252432][ T5913] usb 5-1: Product: syz [ 225.256749][ T5913] usb 5-1: Manufacturer: syz [ 225.261377][ T5913] usb 5-1: SerialNumber: syz [ 225.305064][ T7254] FAULT_INJECTION: forcing a failure. [ 225.305064][ T7254] name failslab, interval 1, probability 0, space 0, times 0 [ 225.325031][ T9] usb 4-1: USB disconnect, device number 12 [ 225.359385][ T5913] usb 5-1: config 0 descriptor?? [ 225.364992][ T7254] CPU: 1 UID: 0 PID: 7254 Comm: syz.0.358 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 225.365018][ T7254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 225.365031][ T7254] Call Trace: [ 225.365039][ T7254] [ 225.365048][ T7254] dump_stack_lvl+0x189/0x250 [ 225.365085][ T7254] ? __pfx____ratelimit+0x10/0x10 [ 225.365116][ T7254] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.365147][ T7254] ? __pfx__printk+0x10/0x10 [ 225.365175][ T7254] ? __pfx___might_resched+0x10/0x10 [ 225.365210][ T7254] should_fail_ex+0x414/0x560 [ 225.365241][ T7254] should_failslab+0xa8/0x100 [ 225.365271][ T7254] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 225.365297][ T7254] ? __alloc_skb+0x112/0x2d0 [ 225.365324][ T7254] __alloc_skb+0x112/0x2d0 [ 225.365350][ T7254] netlink_sendmsg+0x5c6/0xb30 [ 225.365386][ T7254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.365419][ T7254] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 225.365444][ T7254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 225.365469][ T7254] __sock_sendmsg+0x21c/0x270 [ 225.365506][ T7254] ____sys_sendmsg+0x505/0x830 [ 225.365538][ T7254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 225.365574][ T7254] ? import_iovec+0x74/0xa0 [ 225.365599][ T7254] ___sys_sendmsg+0x21f/0x2a0 [ 225.365628][ T7254] ? __pfx____sys_sendmsg+0x10/0x10 [ 225.365694][ T7254] ? __fget_files+0x2a/0x420 [ 225.365721][ T7254] ? __fget_files+0x3a0/0x420 [ 225.365761][ T7254] __x64_sys_sendmsg+0x19b/0x260 [ 225.365791][ T7254] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 225.365828][ T7254] ? __pfx_ksys_write+0x10/0x10 [ 225.365850][ T7254] ? rcu_is_watching+0x15/0xb0 [ 225.365886][ T7254] ? do_syscall_64+0xbe/0x3b0 [ 225.365923][ T7254] do_syscall_64+0xfa/0x3b0 [ 225.365953][ T7254] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.365996][ T7254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.366017][ T7254] ? clear_bhb_loop+0x60/0xb0 [ 225.366043][ T7254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.366063][ T7254] RIP: 0033:0x7f3b0938e929 [ 225.366081][ T7254] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.366099][ T7254] RSP: 002b:00007f3b0a171038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 225.366120][ T7254] RAX: ffffffffffffffda RBX: 00007f3b095b5fa0 RCX: 00007f3b0938e929 [ 225.366135][ T7254] RDX: 0000000000000010 RSI: 0000200000000240 RDI: 0000000000000004 [ 225.366149][ T7254] RBP: 00007f3b0a171090 R08: 0000000000000000 R09: 0000000000000000 [ 225.366161][ T7254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.366173][ T7254] R13: 0000000000000000 R14: 00007f3b095b5fa0 R15: 00007fffb627c818 [ 225.366205][ T7254] [ 225.671953][ T5913] usb 5-1: can't set config #0, error -71 [ 225.735658][ T5913] usb 5-1: USB disconnect, device number 15 [ 226.015327][ T7268] netlink: 40 bytes leftover after parsing attributes in process `syz.3.357'. [ 226.330973][ T5835] udevd[5835]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.344304][ T7275] netlink: 28 bytes leftover after parsing attributes in process `syz.3.363'. [ 227.594777][ T30] audit: type=1326 audit(1750119421.788:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7284 comm="syz.0.366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b0938e929 code=0x0 [ 227.655329][ T7289] netlink: 'syz.3.365': attribute type 287 has an invalid length. [ 229.328039][ T7307] overlayfs: failed to resolve './file1': -2 [ 229.491886][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 229.522014][ T5913] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 229.662098][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 229.679770][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 229.708959][ T24] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 229.728296][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.732188][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 229.753978][ T24] usb 2-1: Product: syz [ 229.765214][ T24] usb 2-1: Manufacturer: syz [ 229.769969][ T24] usb 2-1: SerialNumber: syz [ 229.778633][ T5913] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 229.801724][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.813593][ T5913] usb 1-1: config 0 descriptor?? [ 229.840349][ T24] usb 2-1: config 0 descriptor?? [ 229.890057][ T24] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 229.912634][ T24] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 230.088462][ T5913] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 230.115214][ T7312] IPv6: Can't replace route, no match found [ 230.492754][ T5913] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 230.543339][ T5913] asix 1-1:0.0: probe with driver asix failed with error -61 [ 231.243949][ T24] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 231.685789][ T24] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 231.727488][ T24] em28xx 2-1:0.0: board has no eeprom [ 231.893198][ T24] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 231.901108][ T24] em28xx 2-1:0.0: dvb set to bulk mode. [ 231.922105][ T5920] em28xx 2-1:0.0: Binding DVB extension [ 231.961434][ T24] usb 2-1: USB disconnect, device number 17 [ 232.019662][ T24] em28xx 2-1:0.0: Disconnecting em28xx [ 232.189893][ T5939] usb 1-1: USB disconnect, device number 10 [ 232.237839][ T5920] em28xx 2-1:0.0: Registering input extension [ 232.445451][ T24] em28xx 2-1:0.0: Closing input extension [ 233.251742][ T5913] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 233.365814][ T24] em28xx 2-1:0.0: Freeing device [ 233.448734][ T5913] usb 5-1: config 0 has an invalid interface number: 212 but max is 0 [ 233.461985][ T7348] overlayfs: failed to resolve './file1': -2 [ 233.495794][ T5913] usb 5-1: config 0 has no interface number 0 [ 233.516497][ T5913] usb 5-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=b1.88 [ 233.593263][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.709593][ T5913] usb 5-1: config 0 descriptor?? [ 233.736342][ T5913] quatech2 5-1:0.212: Quatech 2nd gen USB to Serial Driver converter detected [ 233.917169][ T7354] syz_tun: entered allmulticast mode [ 233.936491][ T5913] usb 5-1: qt2_attach - failed to power on unit: -71 [ 233.953307][ T5913] quatech2 5-1:0.212: probe with driver quatech2 failed with error -71 [ 233.974745][ T7353] syz_tun: left allmulticast mode [ 234.178325][ T5913] usb 5-1: USB disconnect, device number 16 [ 236.555343][ T30] audit: type=1326 audit(1750119430.748:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7373 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04a78e929 code=0x7fc00000 [ 236.718022][ T30] audit: type=1326 audit(1750119430.898:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7373 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fc04a78e929 code=0x7fc00000 [ 236.739198][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.749055][ T30] audit: type=1326 audit(1750119430.898:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7373 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04a78e929 code=0x7fc00000 [ 236.770312][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.850408][ T30] audit: type=1326 audit(1750119430.898:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7373 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04a78e929 code=0x7fc00000 [ 236.871702][ C0] vkms_vblank_simulate: vblank timer overrun [ 236.995970][ T7393] overlayfs: failed to resolve './file1': -2 [ 237.014672][ T7391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.391'. [ 237.088995][ T7391] netlink: 20 bytes leftover after parsing attributes in process `syz.0.391'. [ 237.285311][ T7399] binder: 7394:7399 ioctl c018620c 200000000380 returned -22 [ 238.009929][ T7395] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 238.722283][ T5939] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 238.962225][ T5939] usb 5-1: Using ep0 maxpacket: 16 [ 238.975109][ T5939] usb 5-1: unable to get BOS descriptor or descriptor too short [ 238.987898][ T5939] usb 5-1: config 2 has an invalid descriptor of length 236, skipping remainder of the config [ 239.042499][ T5939] usb 5-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 239.091218][ T5939] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=68.f3 [ 239.119584][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.168219][ T5939] usb 5-1: Product: ῌ斢䂞诜稺䔛琑륣甦∵㡆짪뮖ᧂꍓ껌嘞ៗᒩ㥃ᾬ뱲⣎ᡅ灮谘䠠킫痝㴾绗⣡垸呃ꤌ㭸糛쬅ⁱ별侚芊␭鐪㔃꺙챱樯踒쵻짓ᚅꆖ腤䚍䲝㘁矮౷큾꛻놮༰䃯轟␎豘䶎汑렇빏ṹшꪐ喾♿髾ザ튫돔㟰ⅉ㶺⹭ [ 239.216661][ T5939] usb 5-1: SerialNumber: syz [ 239.261941][ T5142] Bluetooth: hci0: command 0x0406 tx timeout [ 239.310142][ T7425] FAULT_INJECTION: forcing a failure. [ 239.310142][ T7425] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.329199][ T7425] CPU: 0 UID: 0 PID: 7425 Comm: syz.0.403 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 239.329227][ T7425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.329241][ T7425] Call Trace: [ 239.329249][ T7425] [ 239.329258][ T7425] dump_stack_lvl+0x189/0x250 [ 239.329295][ T7425] ? __pfx____ratelimit+0x10/0x10 [ 239.329327][ T7425] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.329360][ T7425] ? __pfx__printk+0x10/0x10 [ 239.329393][ T7425] ? __might_fault+0xb0/0x130 [ 239.329429][ T7425] should_fail_ex+0x414/0x560 [ 239.329454][ T7425] _copy_from_iter+0x1db/0x16f0 [ 239.329479][ T7425] ? rcu_is_watching+0x15/0xb0 [ 239.329509][ T7425] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 239.329537][ T7425] ? __pfx__copy_from_iter+0x10/0x10 [ 239.329567][ T7425] ? __build_skb_around+0x257/0x3e0 [ 239.329592][ T7425] ? netlink_sendmsg+0x642/0xb30 [ 239.329615][ T7425] ? skb_put+0x11b/0x210 [ 239.329635][ T7425] netlink_sendmsg+0x6b2/0xb30 [ 239.329668][ T7425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.329701][ T7425] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 239.329724][ T7425] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.329748][ T7425] __sock_sendmsg+0x21c/0x270 [ 239.329773][ T7425] ____sys_sendmsg+0x505/0x830 [ 239.329795][ T7425] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.329833][ T7425] ? import_iovec+0x74/0xa0 [ 239.329856][ T7425] ___sys_sendmsg+0x21f/0x2a0 [ 239.329883][ T7425] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.329931][ T7425] ? __fget_files+0x2a/0x420 [ 239.329951][ T7425] ? __fget_files+0x3a0/0x420 [ 239.329992][ T7425] __x64_sys_sendmsg+0x19b/0x260 [ 239.330019][ T7425] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 239.330063][ T7425] do_syscall_64+0xfa/0x3b0 [ 239.330086][ T7425] ? lockdep_hardirqs_on+0x9c/0x150 [ 239.330111][ T7425] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.330132][ T7425] ? clear_bhb_loop+0x60/0xb0 [ 239.330157][ T7425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.330176][ T7425] RIP: 0033:0x7f3b0938e929 [ 239.330193][ T7425] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.330208][ T7425] RSP: 002b:00007f3b0a150038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.330224][ T7425] RAX: ffffffffffffffda RBX: 00007f3b095b6080 RCX: 00007f3b0938e929 [ 239.330235][ T7425] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000006 [ 239.330244][ T7425] RBP: 00007f3b0a150090 R08: 0000000000000000 R09: 0000000000000000 [ 239.330253][ T7425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.330265][ T7425] R13: 0000000000000000 R14: 00007f3b095b6080 R15: 00007fffb627c818 [ 239.330298][ T7425] [ 239.593704][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.524001][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 240.693626][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 240.711157][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 240.723829][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 240.735989][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.802717][ T9] usb 4-1: Product: syz [ 240.841757][ T9] usb 4-1: Manufacturer: syz [ 240.860528][ T9] usb 4-1: SerialNumber: syz [ 240.894311][ T9] usb 4-1: config 0 descriptor?? [ 240.942774][ T9] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 240.988349][ T9] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 241.601847][ T5939] usb 5-1: USB disconnect, device number 17 [ 241.811898][ T7438] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 241.818622][ T7438] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 241.849838][ T7438] vhci_hcd vhci_hcd.0: Device attached [ 241.992959][ T5913] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 242.011953][ T5939] vhci_hcd: vhci_device speed not set [ 242.082236][ T5939] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 242.181749][ T5823] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 242.217260][ T5913] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.231950][ T5913] usb 3-1: config 0 has no interface number 0 [ 242.242732][ T5913] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 242.303054][ T9] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 242.311633][ T5913] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 242.340241][ T5913] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 242.350460][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.351829][ T5823] usb 5-1: Using ep0 maxpacket: 32 [ 242.362827][ T5913] usb 3-1: config 0 descriptor?? [ 242.369511][ T7436] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 242.386647][ T5823] usb 5-1: config 0 has no interfaces? [ 242.392979][ T5913] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 242.397375][ T5823] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 242.415208][ T9] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 242.434211][ T9] em28xx 4-1:0.0: board has no eeprom [ 242.439676][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.496513][ T5823] usb 5-1: config 0 descriptor?? [ 242.552011][ T9] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 242.574424][ T9] em28xx 4-1:0.0: dvb set to bulk mode. [ 242.583509][ T5913] em28xx 4-1:0.0: Binding DVB extension [ 242.611869][ T9] usb 4-1: USB disconnect, device number 13 [ 243.309336][ T5920] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 243.544658][ T7441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.407'. [ 243.561332][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 243.577279][ T7439] vhci_hcd: cannot find a urb of seqnum 32 max seqnum 1 [ 243.760820][ T7330] vhci_hcd: stop threads [ 243.772541][ T7450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.801498][ T7330] vhci_hcd: release socket [ 243.857970][ T7330] vhci_hcd: disconnect device [ 243.889938][ T7450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.039194][ T7450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.259245][ T7450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.103746][ T5913] em28xx 4-1:0.0: Registering input extension [ 246.131733][ T9] em28xx 4-1:0.0: Closing input extension [ 246.171410][ T5913] usb 3-1: USB disconnect, device number 6 [ 246.171460][ C1] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 246.306574][ T10] usb 5-1: USB disconnect, device number 18 [ 246.433022][ T9] em28xx 4-1:0.0: Freeing device [ 247.369770][ T5142] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 247.722485][ T5939] vhci_hcd: vhci_device speed not set [ 248.554496][ T7458] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 248.599678][ T10] IPVS: starting estimator thread 0... [ 248.708049][ T7476] IPVS: using max 29 ests per chain, 69600 per kthread [ 249.785647][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 250.081701][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 250.110946][ T10] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 250.151797][ T10] usb 1-1: config 0 has no interface number 0 [ 250.158142][ T10] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 250.213456][ T10] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 250.240022][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.031722][ T10] usb 1-1: Product: syz [ 251.035978][ T10] usb 1-1: Manufacturer: syz [ 251.040600][ T10] usb 1-1: SerialNumber: syz [ 251.222002][ T10] usb 1-1: config 0 descriptor?? [ 251.262273][ T10] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 251.296565][ T10] em28xx 1-1:0.132: Video interface 132 found: [ 251.861296][ T10] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 252.995153][ T10] em28xx 1-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 253.037691][ T10] em28xx 1-1:0.132: board has no eeprom [ 253.633406][ T10] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 253.648202][ T10] em28xx 1-1:0.132: analog set to bulk mode. [ 253.658293][ T9] em28xx 1-1:0.132: Registering V4L2 extension [ 253.697559][ T10] usb 1-1: USB disconnect, device number 11 [ 254.088811][ T10] em28xx 1-1:0.132: Disconnecting em28xx [ 254.266142][ T7535] FAULT_INJECTION: forcing a failure. [ 254.266142][ T7535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.336977][ T7535] CPU: 0 UID: 0 PID: 7535 Comm: syz.3.427 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 254.337007][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.337020][ T7535] Call Trace: [ 254.337028][ T7535] [ 254.337037][ T7535] dump_stack_lvl+0x189/0x250 [ 254.337073][ T7535] ? __pfx____ratelimit+0x10/0x10 [ 254.337105][ T7535] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.337136][ T7535] ? __pfx__printk+0x10/0x10 [ 254.337158][ T7535] ? __might_fault+0xb0/0x130 [ 254.337196][ T7535] should_fail_ex+0x414/0x560 [ 254.337228][ T7535] _copy_from_user+0x2d/0xb0 [ 254.337251][ T7535] kstrtouint_from_user+0xc4/0x170 [ 254.337283][ T7535] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 254.337331][ T7535] proc_fail_nth_write+0x88/0x240 [ 254.337363][ T7535] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 254.337401][ T7535] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 254.337433][ T7535] vfs_write+0x27e/0xa90 [ 254.337468][ T7535] ? __pfx_vfs_write+0x10/0x10 [ 254.337494][ T7535] ? __fget_files+0x2a/0x420 [ 254.337527][ T7535] ? __fget_files+0x3a0/0x420 [ 254.337554][ T7535] ? __fget_files+0x2a/0x420 [ 254.337593][ T7535] ksys_write+0x145/0x250 [ 254.337620][ T7535] ? __pfx_ksys_write+0x10/0x10 [ 254.337642][ T7535] ? rcu_is_watching+0x15/0xb0 [ 254.337686][ T7535] ? do_syscall_64+0xbe/0x3b0 [ 254.337723][ T7535] do_syscall_64+0xfa/0x3b0 [ 254.337754][ T7535] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.337784][ T7535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.337804][ T7535] ? clear_bhb_loop+0x60/0xb0 [ 254.337831][ T7535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.337851][ T7535] RIP: 0033:0x7fa0d378d3df [ 254.337870][ T7535] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 254.337888][ T7535] RSP: 002b:00007fa0d455d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 254.337910][ T7535] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa0d378d3df [ 254.337928][ T7535] RDX: 0000000000000001 RSI: 00007fa0d455d0a0 RDI: 0000000000000004 [ 254.337941][ T7535] RBP: 00007fa0d455d090 R08: 0000000000000000 R09: 0000000000000000 [ 254.337954][ T7535] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 254.337966][ T7535] R13: 0000000000000000 R14: 00007fa0d39b6080 R15: 00007ffe6feb35e8 [ 254.337999][ T7535] [ 254.964253][ T9] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 255.046121][ T9] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 255.069803][ T9] em28xx 1-1:0.132: No AC97 audio processor [ 255.114561][ T9] usb 1-1: Decoder not found [ 255.414509][ T9] em28xx 1-1:0.132: failed to create media graph [ 255.451649][ T9] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 255.692295][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.704895][ T9] em28xx 1-1:0.132: Remote control support is not available for this card. [ 255.721699][ T10] em28xx 1-1:0.132: Closing input extension [ 256.636473][ T10] em28xx 1-1:0.132: Freeing device [ 256.945205][ T10] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 257.332352][ T10] usb 1-1: device not accepting address 12, error -71 [ 259.745644][ T7621] netlink: 80 bytes leftover after parsing attributes in process `syz.0.445'. [ 259.821744][ T5823] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 260.010258][ T5823] usb 4-1: device descriptor read/64, error -71 [ 260.206342][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 260.333886][ T5823] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 260.421683][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 260.492109][ T10] usb 2-1: config 148 has an invalid interface number: 144 but max is 0 [ 260.522350][ T10] usb 2-1: config 148 has no interface number 0 [ 260.541924][ T5823] usb 4-1: device descriptor read/64, error -71 [ 260.560538][ T10] usb 2-1: config 148 interface 144 has no altsetting 0 [ 260.609044][ T10] usb 2-1: New USB device found, idVendor=03f0, idProduct=311d, bcdDevice=4a.a4 [ 260.652765][ T5823] usb usb4-port1: attempt power cycle [ 260.668652][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.691682][ T10] usb 2-1: Product: syz [ 260.728837][ T10] usb 2-1: Manufacturer: syz [ 260.761296][ T10] usb 2-1: SerialNumber: syz [ 260.884652][ T7642] trusted_key: encrypted_key: key user:syz not found [ 261.045632][ T5823] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 261.302385][ T5823] usb 4-1: device descriptor read/8, error -71 [ 261.516767][ T7625] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 261.542240][ T5823] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 261.722546][ T10] usb 2-1: USB disconnect, device number 19 [ 261.784510][ T5823] usb 4-1: device descriptor read/8, error -71 [ 262.475702][ T5823] usb usb4-port1: unable to enumerate USB device [ 263.992797][ T7671] batadv_slave_1: entered promiscuous mode [ 264.000164][ T7671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.454'. [ 265.279717][ T7683] rdma_op ffff888055e241f0 conn xmit_rdma 0000000000000000 [ 269.016362][ T7737] ======================================================= [ 269.016362][ T7737] WARNING: The mand mount option has been deprecated and [ 269.016362][ T7737] and is ignored by this kernel. Remove the mand [ 269.016362][ T7737] option from the mount to silence this warning. [ 269.016362][ T7737] ======================================================= [ 269.081320][ T7737] netlink: 28 bytes leftover after parsing attributes in process `syz.0.469'. [ 269.647865][ T5823] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 269.832394][ T7749] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.843399][ T5823] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 269.876098][ T5823] usb 1-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 270.021327][ T5823] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 270.652794][ T5939] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 271.011763][ T5939] usb 5-1: Using ep0 maxpacket: 16 [ 271.021975][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.046532][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.089893][ T7754] tipc: Started in network mode [ 271.097435][ T7754] tipc: Node identity ac1414aa, cluster identity 4711 [ 271.156610][ T7754] tipc: Enabled bearer , priority 10 [ 271.175101][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.283155][ T5939] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 271.370371][ T5939] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 271.394297][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.575280][ T5939] usb 5-1: config 0 descriptor?? [ 272.407382][ T5913] tipc: Node number set to 2886997162 [ 273.577269][ T5823] usb 1-1: USB disconnect, device number 14 [ 273.631790][ T7747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.640715][ T7747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.166913][ T7782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'. [ 274.223355][ T7782] IPVS: Error joining to the multicast group [ 274.245132][ T5939] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0003/input/input8 [ 274.335072][ T5939] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 274.787785][ T5939] usb 5-1: USB disconnect, device number 19 [ 275.539816][ T7789] fido_id[7789]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 275.641826][ T5920] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 276.201785][ T5920] usb 2-1: Invalid ep0 maxpacket: 64 [ 276.417244][ T5920] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 277.388350][ T5920] usb 2-1: Invalid ep0 maxpacket: 64 [ 277.402104][ T5920] usb usb2-port1: attempt power cycle [ 277.534540][ T5823] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 277.753662][ T5920] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 277.812895][ T5823] usb 5-1: Using ep0 maxpacket: 8 [ 277.833277][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 149, changing to 11 [ 277.904349][ T7817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.489'. [ 278.604154][ T5920] usb 2-1: device descriptor read/8, error -71 [ 278.614493][ T5823] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.636198][ T5823] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 278.670458][ T5823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.706504][ T5823] usb 5-1: config 0 descriptor?? [ 278.820461][ T30] audit: type=1326 audit(1750119473.008:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7822 comm="syz.1.491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c8d58e929 code=0x0 [ 279.477076][ T5823] usbhid 5-1:0.0: can't add hid device: -71 [ 279.501918][ T5823] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 279.515404][ T5823] usb 5-1: USB disconnect, device number 20 [ 283.791679][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 284.885363][ T10] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 285.131200][ T7882] syz.2.505 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 285.212491][ T7881] netlink: 28 bytes leftover after parsing attributes in process `syz.1.506'. [ 285.602282][ T7880] warning: `syz.2.505' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 285.704028][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.716231][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.844236][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 285.887849][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 285.897186][ T10] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 285.922367][ T10] usb 5-1: Manufacturer: syz [ 285.948910][ T10] usb 5-1: config 0 descriptor?? [ 286.225366][ T7887] netlink: 60 bytes leftover after parsing attributes in process `syz.2.507'. [ 286.405599][ T10] appleir 0003:05AC:8243.0004: unknown main item tag 0x0 [ 286.427114][ T10] appleir 0003:05AC:8243.0004: No inputs registered, leaving [ 286.456846][ T10] appleir 0003:05AC:8243.0004: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 286.553666][ T7896] openvswitch: netlink: Message has 8 unknown bytes. [ 287.330460][ T5823] usb 5-1: USB disconnect, device number 21 [ 289.304863][ T7921] netlink: 'syz.1.515': attribute type 1 has an invalid length. [ 289.330643][ T7921] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.515'. [ 290.960565][ T7932] geneve2: entered promiscuous mode [ 290.999039][ T7934] netlink: 'syz.0.519': attribute type 10 has an invalid length. [ 291.095223][ T7934] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 291.193097][ T7934] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 291.421739][ T30] audit: type=1326 audit(1750119485.588:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7926 comm="syz.4.518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc04a78e929 code=0x7fc00000 [ 291.706169][ T7940] trusted_key: encrypted_key: key user:syz not found [ 291.803854][ T7330] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.005562][ T7330] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.148945][ T7330] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.457810][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 293.547338][ T7959] overlayfs: overlapping lowerdir path [ 293.836273][ T7330] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.921629][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 294.031806][ T9] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 294.039960][ T9] usb 5-1: config 0 has no interface number 0 [ 294.098357][ T9] usb 5-1: config 0 interface 12 has no altsetting 0 [ 294.126616][ T9] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 294.156009][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.192098][ T9] usb 5-1: Product: syz [ 294.196307][ T9] usb 5-1: Manufacturer: syz [ 294.241575][ T9] usb 5-1: SerialNumber: syz [ 294.257542][ T9] usb 5-1: config 0 descriptor?? [ 294.547938][ T7330] bridge_slave_1: left allmulticast mode [ 294.559913][ T5827] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.571931][ T5827] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.577142][ T7330] bridge_slave_1: left promiscuous mode [ 294.620002][ T5827] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.622787][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.673949][ T5827] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 295.175369][ T7976] trusted_key: encrypted_key: key user:syz not found [ 295.246264][ T5827] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 295.569415][ T7952] Bluetooth: MGMT ver 1.23 [ 296.113456][ T7330] bridge_slave_0: left allmulticast mode [ 296.119228][ T7330] bridge_slave_0: left promiscuous mode [ 296.287392][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.385395][ T24] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 297.429621][ T5827] Bluetooth: hci0: command tx timeout [ 297.615846][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.686716][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.784461][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 297.858642][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.938163][ T24] usb 2-1: Product: syz [ 297.974831][ T24] usb 2-1: Manufacturer: syz [ 298.019910][ T24] usb 2-1: SerialNumber: syz [ 299.046101][ T7330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.058745][ T7330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.072053][ T7330] bond0 (unregistering): Released all slaves [ 299.118116][ T7990] !: renamed from dummy0 (while UP) [ 299.179767][ T9] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 299.221958][ T9] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 299.232215][ T24] usb 2-1: cannot find UAC_HEADER [ 299.255912][ T9] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 299.295103][ T9] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 299.304699][ T7330] tipc: Disabling bearer [ 299.316053][ T7330] tipc: Left network mode [ 299.373333][ T9] usb 5-1: USB disconnect, device number 22 [ 299.389767][ T24] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 299.446340][ T24] usb 2-1: USB disconnect, device number 24 [ 299.521971][ T5827] Bluetooth: hci0: command tx timeout [ 300.424177][ T7260] udevd[7260]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.812049][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 301.737776][ T5827] Bluetooth: hci0: command tx timeout [ 301.851634][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 301.872744][ T10] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 301.904289][ T10] usb 1-1: config 0 has no interface number 0 [ 301.910461][ T10] usb 1-1: config 0 interface 12 has no altsetting 0 [ 301.970824][ T10] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 301.994443][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.071587][ T10] usb 1-1: Product: syz [ 302.075910][ T10] usb 1-1: Manufacturer: syz [ 302.171748][ T10] usb 1-1: SerialNumber: syz [ 302.199357][ T8034] trusted_key: encrypted_key: key user:syz not found [ 302.207877][ T10] usb 1-1: config 0 descriptor?? [ 302.600985][ T8039] tipc: Started in network mode [ 302.611455][ T8039] tipc: Node identity e0000001, cluster identity 4711 [ 302.623136][ T8039] tipc: Enabling of bearer rejected, failed to enable media [ 302.640131][ T7330] hsr_slave_0: left promiscuous mode [ 302.650135][ T7330] hsr_slave_1: left promiscuous mode [ 302.659340][ T7330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.676354][ T7330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.693799][ T7330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.701485][ T7330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.735058][ T7330] veth1_macvtap: left promiscuous mode [ 302.741571][ T7330] veth0_macvtap: left promiscuous mode [ 302.748216][ T7330] veth1_vlan: left promiscuous mode [ 302.753786][ T7330] veth0_vlan: left promiscuous mode [ 303.271166][ T7330] team0 (unregistering): Port device team_slave_1 removed [ 303.311326][ T7330] team0 (unregistering): Port device team_slave_0 removed [ 303.828401][ T5827] Bluetooth: hci0: command tx timeout [ 303.849444][ T7969] chnl_net:caif_netlink_parms(): no params data found [ 303.920481][ T10] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 303.957251][ T10] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 303.976188][ T10] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 304.001843][ T10] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 304.028643][ T10] usb 1-1: USB disconnect, device number 15 [ 304.049498][ T8064] IPVS: length: 168 != 24 [ 304.084355][ T8064] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 304.588505][ T8073] FAULT_INJECTION: forcing a failure. [ 304.588505][ T8073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.601951][ T8073] CPU: 0 UID: 0 PID: 8073 Comm: syz.3.549 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 304.601979][ T8073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 304.602001][ T8073] Call Trace: [ 304.602013][ T8073] [ 304.602022][ T8073] dump_stack_lvl+0x189/0x250 [ 304.602057][ T8073] ? __pfx____ratelimit+0x10/0x10 [ 304.602088][ T8073] ? __pfx_dump_stack_lvl+0x10/0x10 [ 304.602117][ T8073] ? __pfx__printk+0x10/0x10 [ 304.602137][ T8073] ? __might_fault+0xb0/0x130 [ 304.602172][ T8073] should_fail_ex+0x414/0x560 [ 304.602202][ T8073] _copy_from_user+0x2d/0xb0 [ 304.602222][ T8073] ___sys_sendmsg+0x158/0x2a0 [ 304.602251][ T8073] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.602319][ T8073] ? __fget_files+0x2a/0x420 [ 304.602345][ T8073] ? __fget_files+0x3a0/0x420 [ 304.602382][ T8073] __x64_sys_sendmsg+0x19b/0x260 [ 304.602410][ T8073] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.602445][ T8073] ? __pfx_ksys_write+0x10/0x10 [ 304.602466][ T8073] ? rcu_is_watching+0x15/0xb0 [ 304.602500][ T8073] ? do_syscall_64+0xbe/0x3b0 [ 304.602534][ T8073] do_syscall_64+0xfa/0x3b0 [ 304.602566][ T8073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.602585][ T8073] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 304.602605][ T8073] ? clear_bhb_loop+0x60/0xb0 [ 304.602630][ T8073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.602649][ T8073] RIP: 0033:0x7fa0d378e929 [ 304.602666][ T8073] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.602684][ T8073] RSP: 002b:00007fa0d455d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.602705][ T8073] RAX: ffffffffffffffda RBX: 00007fa0d39b6080 RCX: 00007fa0d378e929 [ 304.602719][ T8073] RDX: 0000000000005014 RSI: 0000200000000200 RDI: 000000000000000b [ 304.602732][ T8073] RBP: 00007fa0d455d090 R08: 0000000000000000 R09: 0000000000000000 [ 304.602745][ T8073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.602756][ T8073] R13: 0000000000000000 R14: 00007fa0d39b6080 R15: 00007ffe6feb35e8 [ 304.602805][ T8073] [ 305.260502][ T8082] FAULT_INJECTION: forcing a failure. [ 305.260502][ T8082] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.279194][ T7969] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.279322][ T7969] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.279532][ T7969] bridge_slave_0: entered allmulticast mode [ 305.310810][ T7969] bridge_slave_0: entered promiscuous mode [ 305.318794][ T8082] CPU: 0 UID: 0 PID: 8082 Comm: syz.4.551 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 305.318824][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 305.318837][ T8082] Call Trace: [ 305.318846][ T8082] [ 305.318855][ T8082] dump_stack_lvl+0x189/0x250 [ 305.318894][ T8082] ? __pfx____ratelimit+0x10/0x10 [ 305.318928][ T8082] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.318960][ T8082] ? __pfx__printk+0x10/0x10 [ 305.318997][ T8082] should_fail_ex+0x414/0x560 [ 305.319030][ T8082] _copy_to_user+0x31/0xb0 [ 305.319056][ T8082] simple_read_from_buffer+0xe1/0x170 [ 305.319102][ T8082] proc_fail_nth_read+0x1df/0x250 [ 305.319136][ T8082] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.319170][ T8082] ? rw_verify_area+0x258/0x650 [ 305.319194][ T8082] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 305.319235][ T8082] vfs_read+0x200/0x980 [ 305.319266][ T8082] ? __pfx___mutex_lock+0x10/0x10 [ 305.319307][ T8082] ? __pfx_vfs_read+0x10/0x10 [ 305.319344][ T8082] ? __fget_files+0x2a/0x420 [ 305.319377][ T8082] ? __fget_files+0x3a0/0x420 [ 305.319403][ T8082] ? __fget_files+0x2a/0x420 [ 305.319439][ T8082] ksys_read+0x145/0x250 [ 305.319465][ T8082] ? __pfx_ksys_read+0x10/0x10 [ 305.319483][ T8082] ? rcu_is_watching+0x15/0xb0 [ 305.319515][ T8082] ? do_syscall_64+0xbe/0x3b0 [ 305.319547][ T8082] do_syscall_64+0xfa/0x3b0 [ 305.319575][ T8082] ? lockdep_hardirqs_on+0x9c/0x150 [ 305.319601][ T8082] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.319622][ T8082] ? clear_bhb_loop+0x60/0xb0 [ 305.319647][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.319667][ T8082] RIP: 0033:0x7fc04a78d33c [ 305.319686][ T8082] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 305.319703][ T8082] RSP: 002b:00007fc04b669030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 305.319735][ T8082] RAX: ffffffffffffffda RBX: 00007fc04a9b5fa0 RCX: 00007fc04a78d33c [ 305.319749][ T8082] RDX: 000000000000000f RSI: 00007fc04b6690a0 RDI: 0000000000000005 [ 305.319761][ T8082] RBP: 00007fc04b669090 R08: 0000000000000000 R09: 0000000000000000 [ 305.319772][ T8082] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000002 [ 305.319784][ T8082] R13: 0000000000000000 R14: 00007fc04a9b5fa0 R15: 00007ffd0e72cc48 [ 305.319813][ T8082] [ 305.591913][ T7969] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.599215][ T7969] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.606529][ T7969] bridge_slave_1: entered allmulticast mode [ 305.617066][ T7969] bridge_slave_1: entered promiscuous mode [ 306.624094][ T8094] trusted_key: encrypted_key: key user:syz not found [ 307.069005][ T7969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.195942][ T7969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.578107][ T8115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.558'. [ 309.591494][ T8115] netlink: 24 bytes leftover after parsing attributes in process `syz.1.558'. [ 309.636267][ T8138] loop9: detected capacity change from 0 to 8 [ 309.671388][ T8138] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 309.676939][ T8138] loop9: partition table partially beyond EOD, truncated [ 309.684252][ T8138] loop9: p1 size 81768186 extends beyond EOD, truncated [ 309.897775][ T7969] team0: Port device team_slave_0 added [ 309.981449][ T7969] team0: Port device team_slave_1 added [ 310.079379][ T8143] binder: 8142:8143 ioctl c0306201 200000002800 returned -14 [ 310.201288][ T7260] udevd[7260]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory [ 310.399573][ T7969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.425441][ T7969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.483746][ T7969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.521457][ T7969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.541924][ T7969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.607714][ T7969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.904156][ T7969] hsr_slave_0: entered promiscuous mode [ 310.940089][ T7969] hsr_slave_1: entered promiscuous mode [ 310.963324][ T7969] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.971202][ T7969] Cannot create hsr debugfs directory [ 311.087605][ T5823] IPVS: starting estimator thread 0... [ 311.098590][ T8154] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 311.223910][ T8157] IPVS: using max 29 ests per chain, 69600 per kthread [ 312.598328][ T7969] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 312.715923][ T7969] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 314.260194][ T8187] xt_CT: No such helper "pptp" [ 314.331103][ T7969] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 314.597788][ T7969] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 314.781738][ T10] IPVS: starting estimator thread 0... [ 314.881771][ T8193] IPVS: using max 25 ests per chain, 60000 per kthread [ 314.974206][ T8180] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 315.924529][ T5823] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 315.948907][ T7969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.082462][ T5823] usb 4-1: Using ep0 maxpacket: 16 [ 316.111455][ T5823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 316.503336][ T5823] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 316.507532][ T7969] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.533433][ T5823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.572241][ T5823] usb 4-1: Product: syz [ 316.576488][ T5823] usb 4-1: Manufacturer: syz [ 316.593323][ T5823] usb 4-1: SerialNumber: syz [ 316.630705][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.638859][ T5973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.639465][ T5823] usb 4-1: config 0 descriptor?? [ 316.690035][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.697306][ T5973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.722916][ T5823] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 316.749750][ T5823] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 316.938327][ T8221] trusted_key: encrypted_key: key user:syz not found [ 317.123330][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.732092][ T8225] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 318.062982][ T5823] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 318.518333][ T5823] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 318.695479][ T5823] em28xx 4-1:0.0: board has no eeprom [ 319.161378][ T8239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.182559][ T5823] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 319.293155][ T5823] em28xx 4-1:0.0: dvb set to bulk mode. [ 319.342068][ T977] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 319.401872][ T8239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.486873][ T24] em28xx 4-1:0.0: Binding DVB extension [ 319.828696][ T6004] wlan1: Trigger new scan to find an IBSS to join [ 319.844754][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 320.040728][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.386538][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.639097][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.867004][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.128345][ T977] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 321.214532][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.282922][ T24] em28xx 4-1:0.0: Registering input extension [ 321.322650][ T977] usb 5-1: config 0 descriptor?? [ 321.371017][ T10] usb 4-1: USB disconnect, device number 18 [ 321.398921][ T7969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.420373][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 321.447911][ T10] em28xx 4-1:0.0: Closing input extension [ 321.541465][ T8252] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 322.040644][ T977] usbhid 5-1:0.0: can't add hid device: -71 [ 322.084651][ T977] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 322.153688][ T10] em28xx 4-1:0.0: Freeing device [ 322.155499][ T977] usb 5-1: USB disconnect, device number 23 [ 323.396817][ T7330] wlan1: Trigger new scan to find an IBSS to join [ 324.055037][ T8272] netlink: 16 bytes leftover after parsing attributes in process `syz.1.582'. [ 325.210503][ T49] wlan1: Creating new IBSS network, BSSID 6a:5e:44:c4:c1:f2 [ 325.573240][ T7969] veth0_vlan: entered promiscuous mode [ 325.599269][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 325.647579][ T7969] veth1_vlan: entered promiscuous mode [ 325.766056][ T7969] veth0_macvtap: entered promiscuous mode [ 325.794845][ T7969] veth1_macvtap: entered promiscuous mode [ 325.901207][ T7969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.002242][ T7969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.079694][ T7969] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.119431][ T7969] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.128481][ T10] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 326.151779][ T7969] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.199887][ T7969] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.331713][ T10] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 326.351806][ T10] usb 1-1: config 0 has no interface number 0 [ 326.357993][ T10] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 326.428441][ T10] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice=d9.09 [ 326.457861][ T10] usb 1-1: New USB device strings: Mfr=75, Product=178, SerialNumber=0 [ 326.476101][ T10] usb 1-1: Product: syz [ 326.532469][ T10] usb 1-1: Manufacturer: syz [ 327.695421][ T6165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.728047][ T6165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.785473][ T10] usb 1-1: config 0 descriptor?? [ 327.811200][ T8304] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 328.969776][ T10] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [syz syz] on usb-dummy_hcd.0-1/input6 [ 329.009593][ T6165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.050357][ T6165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.102839][ T8328] netlink: 'syz.1.594': attribute type 64 has an invalid length. [ 329.141206][ T8328] netlink: 'syz.1.594': attribute type 10 has an invalid length. [ 329.181712][ T8328] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 329.873510][ T8338] vlan2: entered promiscuous mode [ 329.926660][ T8338] bond0: entered promiscuous mode [ 329.974858][ T8338] bond_slave_0: entered promiscuous mode [ 330.012345][ T8338] bond_slave_1: entered promiscuous mode [ 330.177289][ T8346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.597'. [ 330.295090][ T8349] sch_tbf: burst 511 is lower than device veth3 mtu (1514) ! [ 330.539868][ T5939] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 330.771949][ T8363] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 330.772117][ T5939] usb 6-1: Using ep0 maxpacket: 16 [ 330.857312][ T24] usb 1-1: USB disconnect, device number 16 [ 331.077981][ T5939] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.475220][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 331.636860][ T5939] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 331.691807][ T5939] usb 6-1: New USB device found, idVendor=046d, idProduct=c71e, bcdDevice= 0.00 [ 331.711366][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.761255][ T5939] usb 6-1: config 0 descriptor?? [ 332.666612][ T5939] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 332.998056][ T8389] netlink: 148 bytes leftover after parsing attributes in process `syz.3.606'. [ 333.078602][ T8389] netlink: 16 bytes leftover after parsing attributes in process `syz.3.606'. [ 333.101842][ T8389] netlink: 21 bytes leftover after parsing attributes in process `syz.3.606'. [ 333.851859][ T8385] nvme_fabrics: missing parameter 'transport=%s' [ 333.882091][ T9] usb 6-1: USB disconnect, device number 2 [ 333.897024][ T8385] nvme_fabrics: missing parameter 'nqn=%s' [ 334.913151][ T8408] syz.3.610 (8408): /proc/8406/oom_adj is deprecated, please use /proc/8406/oom_score_adj instead. [ 336.446796][ T7330] Bluetooth: hci5: Frame reassembly failed (-84) [ 336.463609][ T8416] Bluetooth: hci5: Frame reassembly failed (-90) [ 336.712407][ T5939] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 336.906075][ T5939] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 336.922523][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.931244][ T5939] usb 4-1: Product: syz [ 336.940442][ T5939] usb 4-1: Manufacturer: syz [ 336.946085][ T5939] usb 4-1: SerialNumber: syz [ 336.993215][ T5939] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 337.029663][ T24] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 337.403632][ T8424] pim6reg: entered allmulticast mode [ 337.564693][ C1] usb 4-1: ath9k_htc: invalid pkt_len (ff31) [ 337.578398][ T8437] io-wq is not configured for unbound workers [ 337.809747][ T8439] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 338.143106][ T24] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 338.186698][ T24] ath9k_htc: Failed to initialize the device [ 338.288644][ T24] usb 4-1: ath9k_htc: USB layer deinitialized [ 338.465063][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 338.650523][ T5986] usb 4-1: USB disconnect, device number 19 [ 339.852888][ T30] audit: type=1400 audit(1750119534.028:11): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=8456 comm="syz.5.619" dest=20002 netif=wpan0 [ 342.517393][ T8484] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 342.919359][ T5142] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 342.945328][ T5142] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.963682][ T5142] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 343.006712][ T5142] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 343.017990][ T5142] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 344.296662][ T24] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 344.305603][ T8507] netlink: 'syz.0.628': attribute type 21 has an invalid length. [ 344.329603][ T8507] netlink: 'syz.0.628': attribute type 1 has an invalid length. [ 344.524470][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.562000][ T8486] chnl_net:caif_netlink_parms(): no params data found [ 344.585227][ T24] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 344.633795][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.703473][ T24] usb 2-1: config 0 descriptor?? [ 345.108481][ T5827] Bluetooth: hci5: command tx timeout [ 345.227388][ T24] nintendo 0003:057E:200E.0006: hidraw0: USB HID v80.00 Device [HID 057e:200e] on usb-dummy_hcd.1-1/input0 [ 345.376084][ T8535] trusted_key: encrypted_key: key user:syz not found [ 345.396259][ T24] nintendo 0003:057E:200E.0006: Failed charging grip handshake [ 345.648949][ T24] nintendo 0003:057E:200E.0006: Failed to initialize controller; ret=-110 [ 345.861117][ T8538] binder: 8534:8538 ioctl 4018620d 0 returned -22 [ 345.866986][ T8486] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.876746][ T24] nintendo 0003:057E:200E.0006: probe - fail = -110 [ 345.888761][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.905029][ T24] nintendo 0003:057E:200E.0006: probe with driver nintendo failed with error -110 [ 346.051232][ T8486] bridge_slave_0: entered allmulticast mode [ 346.099923][ T8486] bridge_slave_0: entered promiscuous mode [ 346.195032][ T24] usb 2-1: USB disconnect, device number 25 [ 346.327204][ T8486] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.391352][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.641940][ T8486] bridge_slave_1: entered allmulticast mode [ 346.660278][ T8486] bridge_slave_1: entered promiscuous mode [ 347.428286][ T5827] Bluetooth: hci5: command tx timeout [ 348.490409][ T8569] syz.3.638: attempt to access beyond end of device [ 348.490409][ T8569] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 348.509528][ T8569] efs: cannot read volume header [ 348.559718][ T8486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.604811][ T8486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.757934][ T8574] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 348.986535][ T8486] team0: Port device team_slave_0 added [ 349.152943][ T5920] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 349.291898][ T8486] team0: Port device team_slave_1 added [ 349.426175][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 349.512058][ T5827] Bluetooth: hci5: command tx timeout [ 349.617527][ T5920] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 349.641675][ T5920] usb 1-1: config 0 has no interface number 0 [ 350.406313][ T5920] usb 1-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.421323][ T5920] usb 1-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.433070][ T5920] usb 1-1: config 0 interface 8 has no altsetting 0 [ 350.440050][ T5920] usb 1-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 350.449373][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.500830][ T5920] usb 1-1: config 0 descriptor?? [ 350.615244][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.667131][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.697649][ T8486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.736222][ T8486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.768521][ T8486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.799832][ T8486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.310449][ T5920] uclogic 0003:5543:0522.0007: item fetching failed at offset 2/5 [ 351.435143][ T5920] uclogic 0003:5543:0522.0007: parse failed [ 351.503234][ T5920] uclogic 0003:5543:0522.0007: probe with driver uclogic failed with error -22 [ 351.548520][ T5920] usb 1-1: USB disconnect, device number 17 [ 351.582245][ T5827] Bluetooth: hci5: command tx timeout [ 351.637586][ T8486] hsr_slave_0: entered promiscuous mode [ 351.873193][ T8486] hsr_slave_1: entered promiscuous mode [ 351.880832][ T8486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.895039][ T8486] Cannot create hsr debugfs directory [ 355.263381][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 356.022370][ T977] IPVS: starting estimator thread 0... [ 356.189971][ T5986] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 356.449801][ T8614] syz.1.647 (8614): drop_caches: 2 [ 356.455082][ T5986] usb 1-1: device descriptor read/64, error -71 [ 356.482451][ T8639] IPVS: using max 38 ests per chain, 91200 per kthread [ 357.281621][ T5986] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 357.489639][ T5986] usb 1-1: device descriptor read/64, error -71 [ 357.758570][ T5986] usb usb1-port1: attempt power cycle [ 358.100308][ T8486] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 358.185428][ T8486] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 358.232675][ T5986] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 358.247205][ T8486] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 358.285683][ T5986] usb 1-1: device descriptor read/8, error -71 [ 358.326014][ T8486] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 358.635157][ T5986] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 358.781724][ T5890] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 359.259710][ T5986] usb 1-1: device descriptor read/8, error -71 [ 359.301653][ T5890] usb 4-1: Using ep0 maxpacket: 16 [ 359.396642][ T5890] usb 4-1: config 0 interface 0 has no altsetting 0 [ 359.412485][ T5890] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 359.469063][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.478346][ T5986] usb usb1-port1: unable to enumerate USB device [ 359.512464][ T5890] usb 4-1: config 0 descriptor?? [ 360.100329][ T5890] hid (null): global environment stack overflow [ 360.129910][ T5890] hid (null): invalid report_size 18151 [ 360.275447][ T8689] syz.1.660: attempt to access beyond end of device [ 360.275447][ T8689] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0 [ 360.289210][ T8689] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 360.369067][ T8486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.405293][ T5890] usb 4-1: USB disconnect, device number 20 [ 360.466651][ T8486] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.541180][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.548406][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.745081][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.752333][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.640443][ T8707] netlink: 'syz.3.664': attribute type 10 has an invalid length. [ 362.815496][ T8707] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 362.901724][ T8707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 364.036885][ T8731] netlink: 12 bytes leftover after parsing attributes in process `syz.3.668'. [ 364.833978][ T8734] libceph: resolve '. [ 364.833978][ T8734] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 364.833978][ T8734] ' (ret=-3): failed [ 365.152914][ T8486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.024863][ T8750] syz.1.671: attempt to access beyond end of device [ 366.024863][ T8750] nbd1: rw=0, sector=2, nr_sectors = 1 limit=0 [ 366.038858][ T8750] hfs: can't find a HFS filesystem on dev nbd1 [ 367.140042][ T8758] Invalid source name [ 367.144153][ T8758] UBIFS error (pid: 8758): cannot open "./file0", error -22 [ 367.804028][ T8770] Invalid source name [ 367.815491][ T8770] UBIFS error (pid: 8770): cannot open "./file0", error -22 [ 368.952818][ T8779] trusted_key: encrypted_key: insufficient parameters specified [ 371.054899][ T8486] veth0_vlan: entered promiscuous mode [ 371.326335][ T8805] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 371.541343][ T8486] veth1_vlan: entered promiscuous mode [ 372.222658][ T8807] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 372.751218][ T8486] veth0_macvtap: entered promiscuous mode [ 372.798784][ T8486] veth1_macvtap: entered promiscuous mode [ 372.885794][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.969310][ T8486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.028037][ T8486] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.061557][ T8486] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.101760][ T8486] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.110652][ T8486] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.115654][ T8827] netlink: 'syz.5.685': attribute type 6 has an invalid length. [ 374.466897][ T8827] tipc: Started in network mode [ 374.530149][ T8827] tipc: Node identity 0.......@:, cluster identity 4711 [ 375.369293][ T8846] Invalid source name [ 375.373486][ T8846] UBIFS error (pid: 8846): cannot open "./file0", error -22 [ 376.238183][ T8852] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 376.748459][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.800458][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.850585][ T6165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.870215][ T6165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.314602][ T8863] batadv1: entered promiscuous mode [ 377.541645][ T5986] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 377.721584][ T5986] usb 1-1: device descriptor read/64, error -71 [ 377.963066][ T5986] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 378.115060][ T5986] usb 1-1: device descriptor read/64, error -71 [ 378.222943][ T5986] usb usb1-port1: attempt power cycle [ 379.083286][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.094530][ T5986] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 379.166494][ T5986] usb 1-1: device descriptor read/8, error -71 [ 379.451783][ T5986] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 379.495993][ T5986] usb 1-1: device descriptor read/8, error -71 [ 379.641841][ T5986] usb usb1-port1: unable to enumerate USB device [ 380.580079][ T8913] trusted_key: encrypted_key: key user:syz not found [ 382.541117][ T8932] (syz.0.706,8932,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 382.558013][ T8932] (syz.0.706,8932,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 383.399078][ T8931] trusted_key: encrypted_key: key user:syz not found [ 384.528176][ T6165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.603916][ T8942] netlink: 172 bytes leftover after parsing attributes in process `syz.0.708'. [ 384.680608][ T6165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.719497][ T8942] FAULT_INJECTION: forcing a failure. [ 384.719497][ T8942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 384.908013][ T8942] CPU: 0 UID: 0 PID: 8942 Comm: syz.0.708 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 384.908046][ T8942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 384.908060][ T8942] Call Trace: [ 384.908069][ T8942] [ 384.908079][ T8942] dump_stack_lvl+0x189/0x250 [ 384.908119][ T8942] ? __pfx____ratelimit+0x10/0x10 [ 384.908160][ T8942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 384.908192][ T8942] ? __pfx__printk+0x10/0x10 [ 384.908214][ T8942] ? __might_fault+0xb0/0x130 [ 384.908253][ T8942] should_fail_ex+0x414/0x560 [ 384.908286][ T8942] _copy_from_user+0x2d/0xb0 [ 384.908308][ T8942] drm_ioctl+0x58a/0xb10 [ 384.908334][ T8942] ? smk_tskacc+0x2fc/0x370 [ 384.908358][ T8942] ? __pfx_drm_prime_handle_to_fd_ioctl+0x10/0x10 [ 384.908400][ T8942] ? __pfx_drm_ioctl+0x10/0x10 [ 384.908442][ T8942] ? __fget_files+0x2a/0x420 [ 384.908475][ T8942] ? bpf_lsm_file_ioctl+0x9/0x20 [ 384.908505][ T8942] ? __pfx_drm_ioctl+0x10/0x10 [ 384.908531][ T8942] __se_sys_ioctl+0xfc/0x170 [ 384.908557][ T8942] do_syscall_64+0xfa/0x3b0 [ 384.908589][ T8942] ? lockdep_hardirqs_on+0x9c/0x150 [ 384.908620][ T8942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.908642][ T8942] ? clear_bhb_loop+0x60/0xb0 [ 384.908669][ T8942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.908690][ T8942] RIP: 0033:0x7f3b0938e929 [ 384.908710][ T8942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.908728][ T8942] RSP: 002b:00007f3b0a171038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.908752][ T8942] RAX: ffffffffffffffda RBX: 00007f3b095b5fa0 RCX: 00007f3b0938e929 [ 384.908768][ T8942] RDX: 0000200000000040 RSI: 00000000c00c642d RDI: 0000000000000008 [ 384.908783][ T8942] RBP: 00007f3b0a171090 R08: 0000000000000000 R09: 0000000000000000 [ 384.908796][ T8942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.908809][ T8942] R13: 0000000000000000 R14: 00007f3b095b5fa0 R15: 00007fffb627c818 [ 384.908842][ T8942] [ 385.034097][ T8920] syz.6.704 (8920): drop_caches: 2 [ 385.306887][ T8957] netlink: 172 bytes leftover after parsing attributes in process `syz.1.712'. [ 385.983822][ T8970] vxcan1: entered allmulticast mode [ 387.198785][ T8970] loop4: detected capacity change from 0 to 7 [ 387.248527][ T8970] Dev loop4: unable to read RDB block 7 [ 387.303718][ T8977] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 387.341750][ T8970] loop4: unable to read partition table [ 387.347677][ T8970] loop4: partition table beyond EOD, truncated [ 387.460709][ T8986] trusted_key: encrypted_key: key user:syz not found [ 387.541002][ T8970] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 387.923368][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 387.978548][ T8989] netlink: 172 bytes leftover after parsing attributes in process `syz.0.719'. [ 388.604831][ T5939] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 388.862504][ T5939] usb 2-1: Using ep0 maxpacket: 16 [ 388.939766][ T5939] usb 2-1: unable to get BOS descriptor or descriptor too short [ 388.970158][ T5920] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 389.076676][ T5939] usb 2-1: config 2 has an invalid descriptor of length 236, skipping remainder of the config [ 389.128457][ T5939] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 389.185865][ T5939] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=68.f3 [ 389.218305][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.244367][ T5939] usb 2-1: Product: ῌ斢䂞诜稺䔛琑륣甦∵㡆짪뮖ᧂꍓ껌嘞ៗᒩ㥃ᾬ뱲⣎ᡅ灮谘䠠킫痝㴾绗⣡垸呃ꤌ㭸糛쬅ⁱ별侚芊␭鐪㔃꺙챱樯踒쵻짓ᚅꆖ腤䚍䲝㘁矮౷큾꛻놮༰䃯轟␎豘䶎汑렇빏ṹшꪐ喾♿髾ザ튫돔㟰ⅉ㶺⹭ [ 389.273605][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.307720][ T5920] usb 1-1: Using ep0 maxpacket: 16 [ 389.323846][ T5920] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 389.351547][ T5920] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 389.391956][ T5939] usb 2-1: SerialNumber: syz [ 389.397647][ T5920] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 389.464476][ T5920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.488850][ T5920] usb 1-1: config 0 descriptor?? [ 391.837025][ T5939] usb 2-1: USB disconnect, device number 26 [ 392.573027][ T9] usb 1-1: USB disconnect, device number 26 [ 392.736391][ T9041] QAT: Device 7 not found [ 393.723449][ T9042] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.138506][ T9058] batadv1: entered promiscuous mode [ 394.146289][ T9058] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 394.322629][ T5939] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 394.922127][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 395.061382][ T5939] usb 4-1: config 0 has an invalid interface number: 22 but max is 0 [ 395.122728][ T5939] usb 4-1: config 0 has no interface number 0 [ 395.171676][ T5939] usb 4-1: config 0 interface 22 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 395.508210][ T5939] usb 4-1: New USB device found, idVendor=1608, idProduct=020c, bcdDevice=e7.2c [ 395.519625][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.550452][ T5939] usb 4-1: Product: syz [ 395.567248][ T5939] usb 4-1: Manufacturer: syz [ 395.611273][ T5939] usb 4-1: SerialNumber: syz [ 396.066456][ T5939] usb 4-1: config 0 descriptor?? [ 396.184892][ T9066] netlink: 'syz.6.736': attribute type 1 has an invalid length. [ 396.227053][ T5939] io_ti 4-1:0.22: required endpoints missing [ 396.348152][ T9066] netlink: 'syz.6.736': attribute type 4 has an invalid length. [ 396.432083][ T9066] netlink: 9462 bytes leftover after parsing attributes in process `syz.6.736'. [ 396.869452][ T9072] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.738'. [ 397.796481][ T9034] syz.5.728 (9034): drop_caches: 2 [ 398.985063][ T9091] xt_hashlimit: max too large, truncated to 1048576 [ 399.024659][ T9] IPVS: starting estimator thread 0... [ 399.110855][ T5920] usb 4-1: USB disconnect, device number 21 [ 399.196116][ T9092] IPVS: using max 26 ests per chain, 62400 per kthread [ 399.506073][ T9098] netlink: 148 bytes leftover after parsing attributes in process `syz.1.746'. [ 399.539567][ T9098] netlink: 16 bytes leftover after parsing attributes in process `syz.1.746'. [ 399.577156][ T9098] netlink: 5 bytes leftover after parsing attributes in process `syz.1.746'. [ 400.681769][ T9109] trusted_key: encrypted_key: key user:syz not found [ 402.672021][ T9127] trusted_key: encrypted_key: key user:syz not found [ 403.055263][ T9135] tipc: Started in network mode [ 403.069961][ T9135] tipc: Node identity ac1414aa, cluster identity 4711 [ 403.083331][ T9135] tipc: Enabled bearer , priority 10 [ 403.290185][ T9131] Invalid source name [ 403.294526][ T9131] UBIFS error (pid: 9131): cannot open "./file0", error -22 [ 403.415766][ T9139] Cannot find add_set index 1 as target [ 404.083363][ T5986] tipc: Node number set to 2886997162 [ 404.095404][ T9134] netlink: 16 bytes leftover after parsing attributes in process `syz.0.755'. [ 404.833158][ T9167] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 406.645104][ T9180] trusted_key: encrypted_key: key user:syz not found [ 408.683805][ T9190] Invalid source name [ 408.696109][ T9190] UBIFS error (pid: 9190): cannot open "./file0", error -22 [ 409.844807][ T9202] trusted_key: encrypted_key: key user:syz not found [ 410.804393][ T5913] IPVS: starting estimator thread 0... [ 410.848301][ T9208] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 411.261733][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 411.432358][ T9207] IPVS: using max 29 ests per chain, 69600 per kthread [ 411.470427][ T9215] Invalid source name [ 411.475018][ T9215] UBIFS error (pid: 9215): cannot open "./file0", error -22 [ 412.301585][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 412.779510][ T9230] Invalid source name [ 412.783700][ T9230] UBIFS error (pid: 9230): cannot open "./file0", error -22 [ 413.341557][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 414.381618][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 414.978671][ T9247] trusted_key: encrypted_key: key user:syz not found [ 415.422120][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 416.461640][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 417.501647][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 417.516516][ T9263] trusted_key: encrypted_key: key user:syz not found [ 418.476398][ T9268] Invalid source name [ 418.501746][ T9268] UBIFS error (pid: 9268): cannot open "./file0", error -22 [ 418.541652][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 418.572801][ T9254] syz.0.782 (9254): drop_caches: 2 [ 419.242999][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 419.581567][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 420.621543][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 421.229756][ T9293] trusted_key: encrypted_key: key user:syz not found [ 421.588885][ T5142] Bluetooth: hci0: command 0x0406 tx timeout [ 421.661628][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 422.701617][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 423.741549][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 424.020018][ T9281] syz.0.788 (9281): drop_caches: 2 [ 424.137112][ T9308] xt_cluster: you have exceeded the maximum number of cluster nodes (16128 > 32) [ 424.322019][ T9311] openvswitch: netlink: Duplicate or invalid key (type 0). [ 424.331511][ T9311] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 424.791623][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 425.831715][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 425.930937][ T9321] trusted_key: encrypted_key: key user:syz not found [ 426.401002][ T9324] random: crng reseeded on system resumption [ 426.861567][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 427.901547][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 428.483839][ T9339] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 428.941566][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 429.121630][ T5913] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 429.403187][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 429.695742][ T5913] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.744003][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 429.981525][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 430.292088][ T9351] trusted_key: encrypted_key: key user:syz not found [ 430.430615][ T5913] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 430.448045][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.571585][ T5913] usb 1-1: config 0 descriptor?? [ 430.682924][ T5913] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 430.913736][ T9357] Invalid source name [ 430.917766][ T9357] UBIFS error (pid: 9357): cannot open "./file0", error -22 [ 431.021748][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 431.440780][ T9370] nvme_fabrics: missing parameter 'transport=%s' [ 431.448996][ T9370] nvme_fabrics: missing parameter 'nqn=%s' [ 432.061519][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 432.592889][ T5823] usb 1-1: USB disconnect, device number 27 [ 433.101592][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 433.757165][ T9396] overlayfs: failed to resolve './file1': -2 [ 434.141543][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 434.262676][ T9398] trusted_key: encrypted_key: key user:syz not found [ 435.025065][ T9404] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 435.181677][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 435.953213][ T9410] trusted_key: encrypted_key: key user:syz not found [ 436.221582][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 437.261570][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 437.294229][ T9428] Invalid source name [ 437.298301][ T9428] UBIFS error (pid: 9428): cannot open "./file0", error -22 [ 437.314595][ T9427] trusted_key: encrypted_key: key user:syz not found [ 438.301523][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 438.421754][ T5823] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 438.661722][ T5823] usb 1-1: Using ep0 maxpacket: 16 [ 438.680129][ T5823] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.843433][ T5823] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 439.259596][ T9435] nvme_fabrics: missing parameter 'transport=%s' [ 439.295121][ T9435] nvme_fabrics: missing parameter 'nqn=%s' [ 439.326465][ T5823] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 439.341625][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 439.348745][ T5823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.389633][ T5823] usb 1-1: config 0 descriptor?? [ 439.408136][ T5823] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 439.993065][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.381586][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 441.127260][ T9471] FAULT_INJECTION: forcing a failure. [ 441.127260][ T9471] name failslab, interval 1, probability 0, space 0, times 0 [ 441.140170][ T9471] CPU: 0 UID: 0 PID: 9471 Comm: syz.6.836 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 441.140198][ T9471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 441.140216][ T9471] Call Trace: [ 441.140228][ T9471] [ 441.140237][ T9471] dump_stack_lvl+0x189/0x250 [ 441.140273][ T9471] ? irqentry_exit+0x74/0x90 [ 441.140307][ T9471] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.140359][ T9471] should_fail_ex+0x414/0x560 [ 441.140391][ T9471] should_failslab+0xa8/0x100 [ 441.140420][ T9471] kmem_cache_alloc_noprof+0x73/0x3c0 [ 441.140445][ T9471] ? skb_clone+0x212/0x3a0 [ 441.140479][ T9471] skb_clone+0x212/0x3a0 [ 441.140511][ T9471] __netlink_deliver_tap+0x404/0x850 [ 441.140549][ T9471] ? netlink_deliver_tap+0x2e/0x1b0 [ 441.140581][ T9471] netlink_deliver_tap+0x19c/0x1b0 [ 441.140607][ T9471] netlink_sendskb+0x68/0x140 [ 441.140631][ T9471] netlink_rcv_skb+0x28c/0x470 [ 441.140652][ T9471] ? rcu_is_watching+0x15/0xb0 [ 441.140683][ T9471] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 441.140708][ T9471] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 441.140747][ T9471] ? netlink_deliver_tap+0x2e/0x1b0 [ 441.140780][ T9471] netlink_unicast+0x758/0x8d0 [ 441.140814][ T9471] netlink_sendmsg+0x805/0xb30 [ 441.140849][ T9471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.140883][ T9471] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 441.140908][ T9471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.140935][ T9471] __sock_sendmsg+0x21c/0x270 [ 441.140981][ T9471] ____sys_sendmsg+0x505/0x830 [ 441.141012][ T9471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.141047][ T9471] ? import_iovec+0x74/0xa0 [ 441.141070][ T9471] ___sys_sendmsg+0x21f/0x2a0 [ 441.141097][ T9471] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.141119][ T9471] ? do_raw_spin_lock+0x121/0x290 [ 441.141186][ T9471] ? __x64_sys_sendmsg+0x180/0x260 [ 441.141216][ T9471] __x64_sys_sendmsg+0x19b/0x260 [ 441.141244][ T9471] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.141267][ T9471] ? irqentry_exit+0x74/0x90 [ 441.141314][ T9471] ? do_syscall_64+0xbe/0x3b0 [ 441.141349][ T9471] do_syscall_64+0xfa/0x3b0 [ 441.141380][ T9471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.141399][ T9471] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 441.141424][ T9471] ? clear_bhb_loop+0x60/0xb0 [ 441.141451][ T9471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.141470][ T9471] RIP: 0033:0x7f859a38e929 [ 441.141487][ T9471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.141504][ T9471] RSP: 002b:00007f859b26f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.141524][ T9471] RAX: ffffffffffffffda RBX: 00007f859a5b6160 RCX: 00007f859a38e929 [ 441.141538][ T9471] RDX: 0000000024004044 RSI: 0000200000000380 RDI: 0000000000000007 [ 441.141550][ T9471] RBP: 00007f859b26f090 R08: 0000000000000000 R09: 0000000000000000 [ 441.141569][ T9471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.141580][ T9471] R13: 0000000000000000 R14: 00007f859a5b6160 R15: 00007ffd92f472a8 [ 441.141611][ T9471] [ 441.439208][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 441.897821][ T5913] usb 1-1: USB disconnect, device number 28 [ 441.912465][ T9477] usb usb8: usbfs: process 9477 (syz.1.838) did not claim interface 0 before use [ 442.266125][ T9491] Invalid source name [ 442.270193][ T9491] UBIFS error (pid: 9491): cannot open "./file0", error -22 [ 442.461537][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 442.542725][ T5890] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 443.501542][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 443.627466][ T5890] usb 6-1: too many configurations: 245, using maximum allowed: 8 [ 443.908668][ T5890] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 444.011542][ T5890] usb 6-1: can't read configurations, error -61 [ 444.191241][ T5890] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 444.551557][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 444.731617][ T5890] usb 6-1: too many configurations: 245, using maximum allowed: 8 [ 444.764063][ T9501] nvme_fabrics: missing parameter 'transport=%s' [ 444.764186][ T5890] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 444.770558][ T9501] nvme_fabrics: missing parameter 'nqn=%s' [ 444.808023][ T5890] usb 6-1: can't read configurations, error -61 [ 444.821397][ T5890] usb usb6-port1: attempt power cycle [ 445.057045][ T9512] overlayfs: failed to resolve './file0': -2 [ 445.591659][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 446.621531][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 446.682244][ T9521] overlayfs: failed to resolve './file0': -2 [ 446.789303][ T9522] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 447.642958][ T9527] xt_cluster: you have exceeded the maximum number of cluster nodes (16128 > 32) [ 447.662634][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 448.372740][ T9532] openvswitch: netlink: Duplicate or invalid key (type 0). [ 448.382809][ T9532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 448.701828][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 448.766222][ T9528] syz.5.852 (9528): drop_caches: 2 [ 449.553219][ T9544] trusted_key: encrypted_key: key user:syz not found [ 449.752247][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 450.446103][ T9555] overlayfs: failed to resolve './file0': -2 [ 450.781523][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 451.101935][ T9548] trusted_key: encrypted_key: key user:syz not found [ 451.821572][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 451.993739][ T9564] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 452.093896][ T49] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 452.861662][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 453.235006][ T9570] xt_cluster: you have exceeded the maximum number of cluster nodes (16128 > 32) [ 453.421520][ T9572] openvswitch: netlink: Duplicate or invalid key (type 0). [ 453.429321][ T9572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 453.901526][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 453.992718][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.867'. [ 454.307911][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.868'. [ 454.941661][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 455.883012][ T9603] overlayfs: failed to resolve './file0': -2 [ 455.981713][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 457.021637][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 457.453019][ T9612] random: crng reseeded on system resumption [ 458.061521][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 458.315977][ T9619] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 459.101510][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 459.243623][ T9624] xt_cluster: you have exceeded the maximum number of cluster nodes (16128 > 32) [ 459.388095][ T9626] openvswitch: netlink: Duplicate or invalid key (type 0). [ 459.396344][ T9626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.892052][ T9627] trusted_key: encrypted_key: key user:syz not found [ 460.141639][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 460.636203][ T9637] trusted_key: encrypted_key: key user:syz not found [ 461.191499][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 461.752600][ T9647] Invalid source name [ 461.756725][ T9647] UBIFS error (pid: 9647): cannot open "./file0", error -22 [ 462.221510][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 463.261523][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 463.717249][ T9652] Invalid source name [ 463.721273][ T9652] UBIFS error (pid: 9652): cannot open "./file0", error -22 [ 464.311524][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 465.351530][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 465.429723][ T9669] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 465.852127][ T9666] random: crng reseeded on system resumption [ 466.381657][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 467.421510][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 467.661562][ T5142] Bluetooth: hci5: command 0x0406 tx timeout [ 468.153584][ T9699] tipc: Started in network mode [ 468.158851][ T9699] tipc: Node identity ac1414aa, cluster identity 4711 [ 468.179578][ T9699] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 468.191127][ T9699] tipc: Enabled bearer , priority 10 [ 468.312046][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 468.451683][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 468.461599][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 468.591642][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 468.640843][ T9700] Invalid source name [ 468.645252][ T9700] UBIFS error (pid: 9700): cannot open "./file0", error -22 [ 468.731593][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 468.871543][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 469.011534][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 469.151736][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 469.299972][ T5913] tipc: Node number set to 2886997162 [ 469.431542][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 469.501528][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 470.578952][ T9718] trusted_key: encrypted_key: key user:syz not found [ 471.518859][ T31] INFO: task syz.4.584:8282 blocked for more than 143 seconds. [ 472.162084][ T31] Not tainted 6.16.0-rc2-syzkaller #0 [ 472.168060][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 472.179713][ T31] task:syz.4.584 state:D stack:26848 pid:8282 tgid:8275 ppid:5824 task_flags:0x400640 flags:0x00004004 [ 472.192262][ T31] Call Trace: [ 472.196687][ T31] [ 472.207091][ T31] __schedule+0x16a2/0x4cb0 [ 472.217271][ T31] ? __schedule+0x16c0/0x4cb0 [ 472.227562][ T31] ? schedule+0x165/0x360 [ 472.235611][ T31] ? __lock_acquire+0xab9/0xd20 [ 472.240883][ T31] ? __pfx___schedule+0x10/0x10 [ 472.310693][ T31] ? schedule+0x91/0x360 [ 472.317697][ T31] schedule+0x165/0x360 [ 472.322248][ T31] schedule_timeout+0x9a/0x270 [ 472.332870][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 472.406200][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 472.533958][ T31] __wait_for_common+0x3da/0x710 [ 472.591093][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 472.684369][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 472.745156][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 472.829948][ T31] wait_for_completion_state+0x1c/0x40 [ 472.854312][ T31] do_coredump+0x831/0x3440 [ 472.870885][ T31] ? arch_stack_walk+0xfc/0x150 [ 472.876337][ T31] ? __pfx_do_coredump+0x10/0x10 [ 472.881350][ T31] ? stack_depot_save_flags+0x40/0x900 [ 472.887180][ T31] ? __kasan_slab_free+0x62/0x70 [ 472.892369][ T31] ? kmem_cache_free+0x18f/0x400 [ 472.898393][ T31] ? __dequeue_signal+0x487/0x5b0 [ 472.903806][ T31] ? dequeue_signal+0x140/0x370 [ 472.908777][ T31] ? __dequeue_signal+0x487/0x5b0 [ 472.914290][ T31] ? kmem_cache_free+0x18f/0x400 [ 472.919309][ T31] ? proc_coredump_connector+0x172/0x4b0 [ 472.925273][ T31] ? __pfx_proc_coredump_connector+0x10/0x10 [ 472.931374][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 472.936669][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.941969][ T31] get_signal+0x10d9/0x1310 [ 472.946555][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 472.952348][ T31] ? do_send_specific+0x37/0x2d0 [ 472.957326][ T31] ? do_send_specific+0x37/0x2d0 [ 472.962361][ T31] ? do_send_specific+0x2a0/0x2d0 [ 472.967422][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 472.973665][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 472.979177][ T31] exit_to_user_mode_loop+0x75/0x110 [ 472.984560][ T31] do_syscall_64+0x2bd/0x3b0 [ 472.989205][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.994687][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.001694][ T31] ? clear_bhb_loop+0x60/0xb0 [ 473.006445][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.012510][ T31] RIP: 0033:0x7fc04a78e929 [ 473.016966][ T31] RSP: 002b:00007fc04b648038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c8 [ 473.025524][ T31] RAX: 0000000000000000 RBX: 00007fc04a9b6080 RCX: 00007fc04a78e929 [ 473.036370][ T31] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000177 [ 473.044490][ T31] RBP: 00007fc04a810b39 R08: 0000000000000000 R09: 0000000000000000 [ 473.052680][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.060700][ T31] R13: 0000000000000000 R14: 00007fc04a9b6080 R15: 00007ffd0e72cc48 [ 473.069202][ T31] [ 473.073351][ T31] [ 473.073351][ T31] Showing all locks held in the system: [ 473.083578][ T31] 1 lock held by khungtaskd/31: [ 473.088482][ T31] #0: ffffffff8e13ed60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 473.102027][ T31] 3 locks held by kworker/u8:6/1342: [ 473.107386][ T31] 2 locks held by getty/5589: [ 473.112582][ T31] #0: ffff8880306f70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 473.125305][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 473.135683][ T31] 3 locks held by kworker/u8:15/7330: [ 473.141124][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 473.153094][ T31] #1: ffffc9000b1d7bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 473.164343][ T31] #2: ffffffff8f4fdec8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 473.173423][ T31] 2 locks held by syz.1.904/9721: [ 473.178559][ T31] #0: ffffffff8f4fdec8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 473.193800][ T31] #1: ffffffff8e144878 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 473.207913][ T31] 2 locks held by syz.0.905/9728: [ 473.213134][ T31] #0: ffff88807d25a6d0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 473.223548][ T31] #1: ffffffff8f4fdec8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 473.232700][ T31] [ 473.256791][ T31] ============================================= [ 473.256791][ T31] [ 473.269156][ T31] NMI backtrace for cpu 1 [ 473.269176][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 473.269201][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 473.269215][ T31] Call Trace: [ 473.269224][ T31] [ 473.269233][ T31] dump_stack_lvl+0x189/0x250 [ 473.269268][ T31] ? __wake_up_klogd+0xd9/0x110 [ 473.269295][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 473.269327][ T31] ? __pfx__printk+0x10/0x10 [ 473.269364][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 473.269409][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 473.269432][ T31] ? _printk+0xcf/0x120 [ 473.269458][ T31] ? __pfx__printk+0x10/0x10 [ 473.269481][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 473.269511][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 473.269541][ T31] watchdog+0xfee/0x1030 [ 473.269569][ T31] ? watchdog+0x1de/0x1030 [ 473.269604][ T31] kthread+0x70e/0x8a0 [ 473.269630][ T31] ? __pfx_watchdog+0x10/0x10 [ 473.269655][ T31] ? __pfx_kthread+0x10/0x10 [ 473.269678][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 473.269706][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.269735][ T31] ? __pfx_kthread+0x10/0x10 [ 473.269775][ T31] ret_from_fork+0x3fc/0x770 [ 473.269807][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 473.269841][ T31] ? __switch_to_asm+0x39/0x70 [ 473.269859][ T31] ? __switch_to_asm+0x33/0x70 [ 473.269878][ T31] ? __pfx_kthread+0x10/0x10 [ 473.269901][ T31] ret_from_fork_asm+0x1a/0x30 [ 473.269938][ T31] [ 473.269946][ T31] Sending NMI from CPU 1 to CPUs 0: [ 473.341642][ C0] net_ratelimit: 8 callbacks suppressed [ 473.341665][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 473.344869][ C0] NMI backtrace for cpu 0 [ 473.344883][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 473.344904][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 473.344916][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 473.344940][ C0] Code: e8 8e 34 80 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 cf 87 e1 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 473.344956][ C0] RSP: 0018:ffffc900000068b0 EFLAGS: 00000002 [ 473.344972][ C0] RAX: 1ffffffff33b2a00 RBX: 00000000000003fd RCX: 0000000000000000 [ 473.344985][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 473.345001][ C0] RBP: ffffffff99d957d0 R08: ffff8880247d8237 R09: 1ffff110048fb046 [ 473.345015][ C0] R10: dffffc0000000000 R11: ffffffff85402660 R12: dffffc0000000000 [ 473.345028][ C0] R13: 0000000000000000 R14: ffffffff99d95540 R15: 0000000000000000 [ 473.345040][ C0] FS: 0000000000000000(0000) GS:ffff888125c85000(0000) knlGS:0000000000000000 [ 473.345054][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.345067][ C0] CR2: 00007f3b09581178 CR3: 0000000021f64000 CR4: 00000000003526f0 [ 473.345082][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 473.345092][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 473.345103][ C0] Call Trace: [ 473.345110][ C0] [ 473.345118][ C0] wait_for_lsr+0x19e/0x2f0 [ 473.345143][ C0] serial8250_console_write+0x134c/0x1ba0 [ 473.345169][ C0] ? __lock_acquire+0xab9/0xd20 [ 473.345193][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 473.345213][ C0] ? console_flush_all+0x13a/0xc40 [ 473.345231][ C0] ? console_flush_all+0x13a/0xc40 [ 473.345251][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 473.345269][ C0] ? console_flush_all+0x13a/0xc40 [ 473.345284][ C0] ? console_flush_all+0x13a/0xc40 [ 473.345303][ C0] console_flush_all+0x728/0xc40 [ 473.345321][ C0] ? console_flush_all+0x13a/0xc40 [ 473.345341][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 473.345364][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 473.345386][ C0] console_unlock+0xc4/0x270 [ 473.345425][ C0] ? __pfx_console_unlock+0x10/0x10 [ 473.345451][ C0] ? vprintk_emit+0x444/0x7a0 [ 473.345474][ C0] ? vprintk_emit+0x444/0x7a0 [ 473.345499][ C0] vprintk_emit+0x5b7/0x7a0 [ 473.345523][ C0] ? vprintk_emit+0x444/0x7a0 [ 473.345548][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 473.345576][ C0] ? ___ratelimit+0x622/0xab0 [ 473.345604][ C0] _printk+0xcf/0x120 [ 473.345622][ C0] ? __pfx__printk+0x10/0x10 [ 473.345641][ C0] ? ip_vs_scheduler_err+0x27c/0x3a0 [ 473.345668][ C0] ip_vs_sed_schedule+0x12a/0x380 [ 473.345690][ C0] ip_vs_schedule+0xbad/0x1c80 [ 473.345716][ C0] ? __pfx_ip_vs_schedule+0x10/0x10 [ 473.345734][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 473.345765][ C0] ? ip_vs_conn_in_get_proto+0x363/0x4d0 [ 473.345789][ C0] ? ip_vs_service_find+0xd4b/0xf00 [ 473.345813][ C0] udp_conn_schedule+0x332/0x710 [ 473.345840][ C0] ? __pfx_udp_conn_schedule+0x10/0x10 [ 473.345866][ C0] ? ipt_do_table+0x13dd/0x1630 [ 473.345887][ C0] ip_vs_in_hook+0xc09/0x1be0 [ 473.345909][ C0] ? ip_vs_out_hook+0x9b5/0xef0 [ 473.345925][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 473.345954][ C0] ? nf_nat_ipv4_local_fn+0x1de/0x540 [ 473.345981][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 473.346005][ C0] nf_hook_slow+0xc5/0x220 [ 473.346026][ C0] nf_hook+0x217/0x380 [ 473.346046][ C0] ? __lock_acquire+0xab9/0xd20 [ 473.346069][ C0] ? nf_hook+0x9d/0x380 [ 473.346089][ C0] ? __pfx_nf_hook+0x10/0x10 [ 473.346111][ C0] ? __pfx_dst_output+0x10/0x10 [ 473.346131][ C0] ? unwind_next_frame+0xa5/0x2390 [ 473.346158][ C0] ? ip_fast_csum+0x1ee/0x2b0 [ 473.346185][ C0] __ip_local_out+0x4db/0x600 [ 473.346205][ C0] ? __pfx_dst_output+0x10/0x10 [ 473.346228][ C0] ip_local_out+0x26/0x70 [ 473.346250][ C0] iptunnel_xmit+0x571/0xa00 [ 473.346275][ C0] udp_tunnel_xmit_skb+0x266/0x3c0 [ 473.346297][ C0] tipc_udp_xmit+0x7c7/0xab0 [ 473.346318][ C0] ? tipc_udp_xmit+0xa4/0xab0 [ 473.346334][ C0] ? __pfx_tipc_udp_xmit+0x10/0x10 [ 473.346353][ C0] ? tipc_net+0x45/0x270 [ 473.346382][ C0] ? tipc_udp_send_msg+0x2a6/0x3f0 [ 473.346401][ C0] tipc_bearer_xmit_skb+0x2b0/0x400 [ 473.346426][ C0] ? tipc_bearer_xmit_skb+0xa9/0x400 [ 473.346451][ C0] ? __pfx_tipc_bearer_xmit_skb+0x10/0x10 [ 473.346481][ C0] tipc_disc_timeout+0x580/0x6d0 [ 473.346508][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 473.346539][ C0] call_timer_fn+0x17e/0x5f0 [ 473.346560][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 473.346582][ C0] ? call_timer_fn+0xbe/0x5f0 [ 473.346602][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 473.346628][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 473.346651][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 473.346674][ C0] ? __pfx_tipc_disc_timeout+0x10/0x10 [ 473.346708][ C0] __run_timer_base+0x61a/0x860 [ 473.346726][ C0] ? ktime_get+0x3e/0x1f0 [ 473.346767][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 473.346785][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 473.346812][ C0] run_timer_softirq+0xb7/0x180 [ 473.346833][ C0] handle_softirqs+0x286/0x870 [ 473.346860][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 473.346888][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 473.346915][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 473.346936][ C0] __irq_exit_rcu+0xca/0x1f0 [ 473.346961][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 473.346995][ C0] irq_exit_rcu+0x9/0x30 [ 473.347017][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 473.347042][ C0] [ 473.347047][ C0] [ 473.347054][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 473.347073][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 473.347097][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 f6 28 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 473.347112][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 473.347127][ C0] RAX: 82bc4fb3092b0f00 RBX: ffffffff81975c68 RCX: 82bc4fb3092b0f00 [ 473.347140][ C0] RDX: 0000000000000001 RSI: ffffffff8d96e7d3 RDI: ffffffff8be1b680 [ 473.347152][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 473.347166][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8f9fe2f0 [ 473.347179][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 473.347193][ C0] ? do_idle+0x1e8/0x510 [ 473.347224][ C0] default_idle+0x13/0x20 [ 473.347240][ C0] default_idle_call+0x74/0xb0 [ 473.347257][ C0] do_idle+0x1e8/0x510 [ 473.347285][ C0] ? __pfx_do_idle+0x10/0x10 [ 473.347318][ C0] cpu_startup_entry+0x44/0x60 [ 473.347343][ C0] rest_init+0x2de/0x300 [ 473.347361][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 473.347382][ C0] start_kernel+0x47d/0x500 [ 473.347410][ C0] x86_64_start_reservations+0x24/0x30 [ 473.347429][ C0] x86_64_start_kernel+0x143/0x1c0 [ 473.347453][ C0] common_startup_64+0x13e/0x147 [ 473.347480][ C0] [ 474.132692][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 474.164014][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 474.170934][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller #0 PREEMPT(full) [ 474.181043][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 474.191155][ T31] Call Trace: [ 474.194471][ T31] [ 474.197429][ T31] dump_stack_lvl+0x99/0x250 [ 474.202060][ T31] ? __asan_memcpy+0x40/0x70 [ 474.206688][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.211901][ T31] ? __pfx__printk+0x10/0x10 [ 474.216505][ T31] panic+0x2db/0x790 [ 474.220423][ T31] ? __pfx_panic+0x10/0x10 [ 474.224858][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 474.230705][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 474.236102][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 474.242272][ T31] watchdog+0x102d/0x1030 [ 474.246614][ T31] ? watchdog+0x1de/0x1030 [ 474.251086][ T31] kthread+0x70e/0x8a0 [ 474.255165][ T31] ? __pfx_watchdog+0x10/0x10 [ 474.259854][ T31] ? __pfx_kthread+0x10/0x10 [ 474.264483][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 474.269698][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.274911][ T31] ? __pfx_kthread+0x10/0x10 [ 474.279511][ T31] ret_from_fork+0x3fc/0x770 [ 474.284110][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 474.289259][ T31] ? __switch_to_asm+0x39/0x70 [ 474.294050][ T31] ? __switch_to_asm+0x33/0x70 [ 474.298823][ T31] ? __pfx_kthread+0x10/0x10 [ 474.303426][ T31] ret_from_fork_asm+0x1a/0x30 [ 474.308210][ T31] [ 474.311637][ T31] Kernel Offset: disabled [ 474.315972][ T31] Rebooting in 86400 seconds..