last executing test programs: 9m59.707540296s ago: executing program 3 (id=790): syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xc7, &(0x7f0000000100)=0xffff) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4404c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x446102) dup(0xffffffffffffffff) close(0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000600"/24], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) write$tcp_congestion(r6, &(0x7f0000000300)='reno\x00', 0x5) 9m57.346304558s ago: executing program 3 (id=793): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x6, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB], 0x0, 0x58}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e24}, 0x6e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$inet6(0xa, 0x3, 0x5) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f00000012c0)={0x0, 0x0, r3, r3, 0x7, 0xa, 0x3, 0x3, {0x7fff, 0xa, 0xff, 0x0, 0x5, 0xc, 0x3, 0x1, 0xfffa, 0x2, 0x6, 0x0, 0x8000, 0x5, "9a303f1b9372a91fb7a1849863ffcc2ada9a633af69c5bfc25a5099bc6535850"}}) r4 = syz_open_dev$amidi(&(0x7f0000000200), 0x2, 0x101040) read$midi(r4, &(0x7f0000000300)=""/10, 0xa) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r2, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}], 0x1, 0xc040) 9m55.798197288s ago: executing program 3 (id=799): r0 = syz_open_dev$video(&(0x7f0000000040), 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = shmget$private(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) shmat(r2, &(0x7f0000ffb000/0x4000)=nil, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x3, 0x0, 0x407}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x280d1}, 0x14011) r4 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='map_files\x00') getdents64(r5, &(0x7f0000000080)=""/147, 0x93) r6 = memfd_create(&(0x7f0000000280)='/dev/cpu/#/msr\x00', 0x2) ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000300)={r6, 0x0, 0x2000, 0x8000}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) r8 = syz_open_dev$amidi(&(0x7f0000000140), 0x2, 0x181) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r8, 0x40045731, &(0x7f0000000000)) close(r7) socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000040)={0x1, &(0x7f00000001c0)=[{0x6, 0x4, 0x8, 0xa}]}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000340)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) signalfd4(r0, &(0x7f0000000380)={[0x6]}, 0x8, 0x800) open(&(0x7f00000003c0)='./file0\x00', 0x4882, 0x42) 9m54.963685546s ago: executing program 3 (id=801): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) pipe2(&(0x7f0000001040)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r3, 0x6, 0x0) tee(r1, r3, 0x60000000000, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="200004000000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x8, &(0x7f0000000000)=0x10, 0x4) r6 = socket(0x1e, 0x4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1a1011, 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) recvfrom$packet(r5, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) open(&(0x7f0000000140)='./bus\x00', 0x143bc2, 0x1d6) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000002c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) 9m49.557626513s ago: executing program 3 (id=815): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000e40)=""/267, 0x10b}, {&(0x7f0000000d40)=""/244, 0xf4}, {&(0x7f0000004300)=""/4045, 0xfcd}, {&(0x7f00000006c0)=""/196, 0xc4}, {&(0x7f0000000340)=""/221, 0xdd}, {&(0x7f0000000440)=""/205, 0xcd}, {&(0x7f0000000a40)=""/190, 0xbe}, {&(0x7f0000000bc0)=""/117, 0x75}], 0x8}, 0x40012100) r1 = fsmount(0xffffffffffffffff, 0x1, 0x5) ioctl$VHOST_VDPA_SET_CONFIG(r1, 0x4008af74, &(0x7f0000000040)={0x2c960, 0xe8, "e229fa5e32cf559801f1f940686ba020448325f0afda0079dd5c2440bf9b913478d016d391c1ee6d69c3a09c786981bc7ccfb415f5e706a6bb0ec65c27bffcfe6b7aea438d282e71a014825f940beea05c9efcb75425c28a7391b5a39aa18a4a27d63e7db173f3cc6e99162a7edc56934295a90f4fdafad6e911e978adf78bb911ffe0803dfa7904b32047fd84fc75d05c4d8305e7cec4ec26e69265e46f253f0c39f9e70cc35524f54ef1b525cf3b596a437980e2876be049befa738fa669d2b8d28529960c1c85bc58bf602643a5335e8a35b61757b4d0dde165947f1da6500d534025590a15b3"}) r2 = syz_init_net_socket$x25(0x3, 0x5, 0x3) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000000)={0x6b, 0xa238, 0x7, 0x6, 0x2, 0x81}) 9m47.295248729s ago: executing program 3 (id=826): write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x1, 0x5004) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="6c66b8ae008ec865da00b8010000000f01d90f01df0fc7360f320fae8f00a0000066b81f018ee8b9840b00000f32", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) connect$rose(r4, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) chdir(&(0x7f0000000300)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 9m46.088044586s ago: executing program 32 (id=826): write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000000)={'pim6reg1\x00', @link_local}) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @bcast, @bpq0, 0x0, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r3, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) ptrace$getregset(0x4204, r3, 0x2, &(0x7f0000000740)={0x0}) ptrace$ARCH_SHSTK_UNLOCK(0x1e, r3, 0x1, 0x5004) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="6c66b8ae008ec865da00b8010000000f01d90f01df0fc7360f320fae8f00a0000066b81f018ee8b9840b00000f32", 0x2e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) connect$rose(r4, &(0x7f0000000200)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) chdir(&(0x7f0000000300)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) 11.198130307s ago: executing program 4 (id=2579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x8080000, 0x0, r3}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) io_uring_setup(0x30a7, &(0x7f0000000000)={0x0, 0x9dd9, 0x2000, 0x2, 0x373}) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="15000000fe0000"], 0x1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rename(0x0, 0x0) add_key$keyring(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) socket$netlink(0x10, 0x3, 0xf) r5 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r5, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x28000010) 10.129618933s ago: executing program 4 (id=2583): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000070000000100010008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r0, 0xe4}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) 9.528757133s ago: executing program 5 (id=2585): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4040842) r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x100000007, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/ipv6_route\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rt_sigaction(0x12, 0x0, 0x0, 0x8, &(0x7f0000000180)) lseek(r3, 0x9c, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000002700), 0x0, 0x0) r8 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r9 = socket$inet_smc(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r11, &(0x7f0000010400)=[{{&(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000280)=[{&(0x7f0000000500)="50430940dbaeefda5c466709172c22d6463acf587425295b5a0b661f0c188f514cdb69228ee6b024b865bc3760208aa42029885e2648720eb384fe9bd1f0b2a39a67eb03ed96f968ca95a129553417f80016d8c3896027a6f4284b1874ea2f4cb6", 0x61}, {&(0x7f00000001c0)}], 0x2, &(0x7f00000008c0)=[@cred={{0x1c}}], 0x20, 0x4}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000900)="527d93155229aaa6de4715b6a25703ce52406a85e6a0d8f5f4c3ef43b5810e33c3a4db892d64a0e379e7dea488f368ba2f68c2f7e025f3befb66421ca033fbe64eb98ca8545c7181339c9ca545cd2963c08c325a0d65c5cc971915f2560a6d19a84e2c7ce6fe3bf77e9f42f878a3a1b46d920a4f3119eff8f6d52dd2740d889ba984edad931f84835229501cafa3dcb505b809200497b3298cbc2061fbdc2fc99b62d6cbad55d6e80ab906d1c0", 0xad}, {&(0x7f00000009c0)="54963df12b2e5b9f2131b4d35d3ccf599000c5887468f9b9800ca13077f18fe3cc3fc01d663e9059a245d6506a811dfcc08baca3a28937d6af70887af5bfb87f48cc4b7fdde817ab3c461e21a224de329142b67f632648957ff5607644f4d1263911dc6067513bc06c7a224c190c8d2636330279f58106a73aef8c5f9ea819994e516c21e8219b8f6942ecaf2f8c8b85d8cf18f5d8f53f540e3f7083f84e23d542952196c0817f47c76d6cf51a6af685be", 0xb1}, {&(0x7f0000000a80)="6625f41618738338803dbb92d20d0a64dd0789df17a727a11fc116af68f291a52021cb92925ec030bf0b06f1653f251703c8377d84680113a510ca82a92e032294efc6ffdf72f9cc208aa6d20b4e37781743", 0x52}, {&(0x7f0000000b00)="16c52b5cbe75713f5b5404399c0972725bd92d65d38c404cdf71bdce1b2bc56c4fb81a1f174b5ae77531733720bb9a1092a35db579cfe2d83109", 0x3a}], 0x4, 0x0, 0x0, 0x4080}}, {{&(0x7f0000000b80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000c00)="b9d1f89fa19fbefe5a44413fe53f18342f72c2695f9a1fcda1e7491d146d58393d9039e46e133f4786745a96912a76d3719a6e0fa71629961fb5b622efeb0426cb8167a20f5cd1bcb10df66f9bf2ac6d8d96fc7552d6aa74c06a", 0x5a}, {&(0x7f0000000c80)="dd240e4c1e3948c62851d9f33e1ae8da08b638ba8f717e37ae9638c97deb02c7f64bb094877b45182aea71ca14dfc7f9d57b6064bbf155abf2e77a74744a6a19200d47e1cf748a0fdc8810875abb5e19f56450d78ea44e2138ca1e77523ad8617c0e3dcffd72e20449ab851e2894ff47a02d4d3aee6f35c43a8c05dc529f7deebd6b68befbcc5113f096360aea49", 0x8e}, {&(0x7f0000000d40)="f39f3ae4426a45aefcb6638e3e21fa9c6f098bf65e77fda173f70bc65e798ee6dee396892b88a06628326654fdc14b86", 0x30}, {&(0x7f0000000d80)="bf568fa920b7850c3140eb62ebbec2ba5a8dfa6f1ab6e2d1be4a0a071aa56c932919b7dcf2", 0x25}, {&(0x7f0000000dc0)="3661f2680e0ca64aa9b4f9e4c6dc34e2faa27564fc69f1625ebc36872f3712c5fb2b93d9b12a3e1ad9446f7cc9a2475bfae555d7676755e1d329c0d0a4cf7f5a640c5445b3a57a3c200d54153020c2660968ee06695873af879034eacc89a8fbf3bc12d8851528b2d7553256032eee367b71d4d19d2de48e9220775c2c9c", 0x7e}, {0x0}, {&(0x7f00000027c0)="80881d2dffe5addbd596eecba7e9bb265d07d1ed5841dfd574ea528fce13cf23e5f0d11179887e757f16122b26d0ea29ba51fc142ae0b74eb87d2614f9be507837bfc8cbc700689dd351a5ac931438d1d4671344b722c978671124f64e9119691104a18ea7711a3e05da93efa6c7cc517d0648733c893c652c79286f38e800e0a7509ef219b6907d39a8cf00c6d69393fdef68c67743495698a2c43678233988b47c30996424c81cd0a6fdd8fa0e183f0131ea67ce54beb283bc1029bbb591777f4e3ad9ef50e3d0d7f93aef351086fc4049d971fca3c21db0e6ecd1cf5d7804e1b3d7e609abfce30a9540491223524aeffd936246eb1f1b5ba7dd212d51644bdc87d6e77400105825f36465261103fa49cb38b1b57a2bc505bf07b8e087b1b5fbd86735a949968ac75c64c604187de944f337b2e1ed138e5207279985e12e031e1ea2d3a2ce2ed886839b9d673497b1f445fd97c939e36de67ed7c3d528147f7102b54e3226588eb3f4170049ee0f08277c6c5f8a73c22d2f9b119ed9f00f238171a582587ff48214292f8cfe7609fa7d17592ae8772d8d1eac9fdac6244f227adbd2ff4fa3cbeabdc1d52b8a75e4840f240c5659bbb4723c882c09093afa7b2abff4a5c15c4e2ecc399ee1e806c0989125bbcd020908bfc26c00b9259603ef0a4def241bb19ca6e38c1bcfcb72d3dd004aa43945c6e2841241a806443db72bfc193bae3b8a5b9ce4feef381c13a63bb344ddb7bb9dc1e0fcf572bec9326649adef4574d1c3cf40f625816ec24876b71e544c16bc397e815750045fbac02a556f591be98a36206a9180f65e15f7b600a14c033065c3458b04222bc29e9a87173a1173fc7d7714b803d54a7fad914f718742f00e9012fbcd790584e5131812f4f9f98ee5e808e9414442c6376fc319c9747e86cf6310cdacff3a3d294b4fef40ba46e3202a511501dfc35933effff6248a8e1f8a22191b33fbe1b824bda4dff588b0b2b3c773f9b94cd077d2d1d58c78817332302ffec17ba8f5a9d7c9e8e768e83017d48392874168916dc690b92a00de7213676765073549a7c394f205fa875931e3085e0de2b32a1019a2155d7db85de6810a03fa3dde58f427aaeead8a268aed1dcc089f6d98da36e4a7ce502fa6938660421893e07f27e3f751cb3b4d576af63b56c2b91d8817989a17820d0b1a5202bb61d5aa517b116fa223af7943938877347731761b6b7e698851d3a294d0e373c32877a83c1a780b8d2a065e464b4aee779958269dc329ddcb88fd900156e830ab70d3fc963b496cdb4c199ec738e81752289e91e8532f9bd8a55ee201e386b7deac5a0ebffb7fb6872f5b037e672740dc52b17aa7ce2713e10112ccad0772f5103c2789a128545e6e51c2e1f90de927f68baf2380d6a4d781a74dd3e2647f415a004cb120a5ee086c34ebdfdca4dcb172620b334fc4f61ed24d09d78a09ac66873cc4127f1e3b561922dd0fd8a877528c426652290a18f7d60fb1ae451c4b45bb20d6105f3005daf00a3dd2403af483ab7cf3b53ac30c42b2c3c39e184da10f30801ca53d30c9bf9fde54393907338eb1f7ec3146367901a7be3655b5f6d7652ef015f2571861f02752843aec41bf29e795eb46e93340fa7950727c16659f970534d3d6a8f4142e3d864928e670af031a36a6f36628bb3fcaf144cf9e6885eb48b7ece41ded765a5d773fe5fa3bf5f9b45b236fc7c3d0c93634c0ab7505aa174e6c64ad4721d3acf8f41924c0a60001dbf94510cbe66a1a95dd15dcab6e8b6ff7599b7dcf8010e101ccf63c139dab6262855162b2ff68483b5b33e1046633fc3b947b26674ba5af428ff1e9cd12ba5e1a4fb0bdcbcceeb329ebf869885a1baa83bb4128cdd1ffc2cea0f898172d4c621a3fb25d52c7c172a180c368d21fac07eb13e1faea846bcfd6a5c8bd26727f85188f8efe586840e262b43cd1f297eeb598b4f229109f2ba1ac956bc17c3fe4f531378f838a314e4598f6a3b3e17fc8206b0029ccc61017374b458bc0d3815bdaedc8edf15ebf8dae45c093544239736b65f0e0f86e78975e63796b876226e0ba63792e084f9b56feac301ad3b5deaeb9212b04608a3fce5ef43c9307f6c0f421b1a693017071ff9f35f6851b7aa8d7ac71aff5dc4b14524667ae7cdc159385dd9895eb84d0ff1be9875faff8209954890fbd93115d32b6f077975fb2492ba60f4eec0e23f48f5e87b0555b9ef04008cb9b41d952e6202b5d04ebccf2777181113533dec2fe71a9806a1b73dbfd976fa76366f1d30240cf2ea68d60a00dafd01f6af64730bee1a33e1de07c52c7d2d807c2dca20e1d94bf5a0540c4147969e97af8ff061b33289601b15d44b0dec785a0160847eeb38f0c3f4fd6c8e3edd502749c5eb5638fd353c9fb0ee3a30d75908c5b0a6d2b21287f2c8d9afacc5c76c725635121272ee8793e1c9acf217e3a8b0eaa786c8520b08b7e51306b06157507964e0d72ed94ca3947af66b9a96c9557fa56857c3cf6859f3c267e1e6c8c2aacf2e218a25b0407541d38ab7e1a459b7fcd958479087147597861c644a933169309e4332d5bd42efcec253842d4b8f443f57cb2995644c83b577bca791c45f142e4c4e151a438513bc03b19c8776003e1786bd1b0ae420f53aa4c61588778a8fad22db4c8a4d36b880a8ad96f640740ab0cb3e51cae7b6490e6ce0fca4a658231f256729a6ddb0c47e845fea94c6f95146c353927d4ed32eb64a2a9f55cde2b2a9fdfc86699b67502aec0133e9b029added877d58a0e8fba22a6ec3cc0a158dfba81be909c694610be2e1c96bec634a2b60da557b31c65a8a25d4885b4b616230bd453afcf6b76ff62474f4e44c85de95729777da38feab02858d3a268d2ac87044c34476dbfc8333e5fdb9d360a5009512e2c31111d39b65b796a332e0412555e247c48dc9a3c84506a97b9afa87e2cfb434e993b79aa28df029b83f3894ac15f59b10b40ac74368714e01e5f4c51c9db493b9bd9cb98a98a26fb7f6de0be6e07a0e565580ad5ef9da0afc597921cd31098fc0c626d68a5c00a2e98bb990ae4ff9f8c109113ddaeb403b2aaebb8a6e4dcd332fc4808e06694cd412f021bef0a74aa014fc264596b355801685f3f34ed28d06d09c69d985a3a83b20b44b4ad3b947e3cead17818b39c00aeb1594dcee94bd85bdf7265a53bc1122a6dee5564dc4235fe170ae5a5c5b3b8219393a13e60246c68d29af86c4ae46fa3dd8d221885231d04cdb6a0b5174fe9370de3402bb55cb4e316f98037bb0c17ff88530d76c25f86304ea40fa4cda815265c5b11bcd34005bb34aad7a2f4697371481b06f8f791ec2a7d62882d4ea3c57e262acceeca76c7a184cab8f67808eef6c6d721f720e80cc3515c1a30ea7d04dedd23c798ab376ff875fc7c807d65aa04fa58c90b4d6163dbd1b9a55d2778138e5be43add3a3ccac92174dda7931670ab546f3accc5211ae85d4fdd2c9c7a4669c8a5124a069121b50c23f36984100b6d99dfd9bed20ff42cf756fd562902e82aa85bb8bf6df6d2c007c297c127107cfd5357a160de0ea301f2bd232a13b010fccf34d7b6bbafa5d87b55ee145c0fee5787517653e86e20f2c26df2588726e5a38d8da6dfe76d9ae29ecc365ae7be3c1607af4c2fd6471b458f704fa0f5d928bebe5e97a02cd004ede35b09a8471af0aaeb126144b8a7a3a57aa011c7053bb8b1b60078e040110959ddfd4d3855977777e6f8d753f306ab0f1f3482fc34c7e47c3cd1273b484f043de47e85d09c63e7480ce1462ce6dfb3a8c5102900d0d7fd53b4a2d6f5f690bffd074b63de3c3a039781e53f0c2c83edc619cdf9142ea7f69f0a90c0f4980e5cb6b218d886a6b375c5c7b9537051a776971d16f9d2f734cfc0f52bfcacdf7b0c008f64bfa316232180e631569dbefd82e3512ba036853ac317e90c0e863da141af4a0b9d89cee101400edb13e22b55a0e59aefaf4949a41146a6b686638cb8cb3ab950064c931ae8f0e8423ad27465aa85c416e4e9e6f86ced6f457e356bbe92fac7e5157b6207f386ad13c363f252ce1bf8d900cf6c0f4c843e8c40c17925108630730c6cbb74ef863ee828fe035d25d7007eb254883ede856b37248ca0b7f9c208af7c4df84cc76cdf3a47f98ade8f42d1e4135388b18a43932eae196cec8ae8439cb32d7a5449356ebb9bde97e2cb2d6f9f78b27201a839c24ed3f982f4357290c2c4612d0d9ecd663c87e1ec94d1be02dc59b2f3ab9252e99f420eb7b19ffc8399977738a149ba29ce273a1e3346ddca34b1e71b29a18d65210e90ca79c6a4683ec3335d05e6278713c8c3b758999eef27283a04054ad9e521151a835d1aad198e4933695511ab268065586370e5c281b6b63f4f7b45915ca0f1a8d94725a2485be80c0a63f5b04510b64c340eb095a7eb1f393b8304b2bb84ca7f03a82b4961d6fd6cdf4a66c3d5b4d0293f9a17d2f422cb9383a1186d13e5b8006bae4fc49346c9aa12b444d634b7570ad3bc0d793248406217110b75cb76ea74c98fcc72addb8c5a6e795c6555f46356b11091f5886553c86923060f45e79bebef913c992aacc7ce49f9898f329992c7003df354b713bef9390189dbae9d67d030f0d2b63c98ace626eae3af342fbc38de6b6a550cbcaa784f35f4fe5d00b42ddace305e293e02fe111ec13362a43d3b24b84fd0725152e1db5394f0c8481860d2140f4bb7c7adceed79db1283489166c209e437b413614068291606c7132d44c36f8175274159cc5270fc2bd2a33eb0965c3a86ddf8926d46dd7bdecc43a6e3fd85be0aa14574de1a3cc3139ddf66f5c4a49dc62911104710e0810d7a5c185ce1fac4d132fa6f5ebe7c9200bf4ec83c66062413db7830b0928fa1b42ba2ecb2b976a6c56e47b3a27a1a97a8998edaecd797abb54bbeaae869aafd9ae1a6c5dc7bd196c27894c21f3d48a944e76ed5af4915684d07ed01400d188ee4b65716337f09fffbf42361a745f07e6915f696f2beb043a4aa4fec3597a12e76cdd23929256953bde1bfda14cc887b63b9f8df4c1095fb9fed91e074ffc958837236adb03f5a3ad09346c27fff7a110b2d503a0505b3d20228018aa17a7fccb4a1c547592851f667d15b8aa9e1a1e33fc4fe5d3b780a4d5ba9e92864f603fe615ce134093a6d0092c5912bef632cf4f2f285175e3c97249d21d97f78e36506b834a2f9fa42ef51a7446254899c228bb78defb48bddd7bd5687e929bed9f41deea1b0f791739bb87c6fb3844b14883ff6d4d1ff20c17a0c5eb08d70ff257edd532d63fdee8502d10d8c391b8a22c07ec34fc1cff57693a49af5342855b045b5bd2a9f7f315d98da0b93d187240451feb3ac0d61e9ff7c832234449578c8417639dff06b60827b22f18026aa5aaef406847b2138fa49b76edc2345884347d287b14b55e4beed4d2f164ca5603a7e79488b1d150dadfe22bee1f4424ffb717945bfa885207af5d87a0e9ac4f7a18c5e2f00e46e0e25b492a703247bc3c9dfe6a03040892c3809b8686699acd74983b73761158a2c68c17a3d82f41872f733081dbd4b0af5e9724bd2dc54cfa86cf2be7799f0c619bbf4271715cab5b2cca2b23952dabb2487fb6f4ce497d1b58c3fc62fe091d0619dfdae2286650220cb189056fc3a8bc5fca67f74bda4255b8b3bf8826b229459c29322c8fa1eac803c6ab3cde92f681eb1f03b64e7855492d6d25256650bf2dbe54771acb583c48229a3b6162a5688c02b509641e169f7f71f936fea0fb8baed430", 0x1000}], 0x7, &(0x7f0000000ec0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x58}}, {{&(0x7f0000000f40)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000fc0)="9b688626154033b0d85100bad4", 0xd}, {&(0x7f0000001000)="def6112ecbf73296f482f420dfa9ef861455f946e85f1fe5137f6ac9238cae6cdb046ab803e377cd1d5e99bfb0e40f81780f193f81d93498151da0283db1c968713ae4ee042a0b71e1c8e9cb1e4ca1d6c73261c5ef67b5bd8d3e3fc89bd91ecd0bf136cdae030f815f3944f810ffe1c79180fa6a1e3aceb0c55a981956ce4f27eeae71c8e70b31763b6a96245d93bbcb7cba541c4746fdeb9fb366458707b7f0ba95b050b41ae421e9f6242b6ae5", 0xae}], 0x2, 0x0, 0x0, 0x4000001}}, {{&(0x7f0000001100)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f00000014c0)=[{&(0x7f0000001180)="25c11a00a6a5e3b0d4af8d1a983593f500e2c27d0eaede483de4b41d852ea1c95a01ddec289fd0b94fb58a4a0405b6757ce9561388e71ee5f1319a209ebb713abc03df005e41742f8cfe580fd710bc067976d6dd3d4a50db374251f2f7b1ec632877d6ff054fa9f54939509ca52c79f4cf6fe3ebb16389135009a88349c05dade54873b4c4e66b771662f80910d67dc918d27d882c3d8fa84c32f3fd", 0x9c}, {&(0x7f0000001240)="94616fd5bdf5bc69229ce864b4332fac0d2d8878181fdb386531e99d3284708dfe766c24250010a2a8917da76131510ebe5abcd893c951ed35a6937f81005925d8f36c8ad26afbd6800d39e802d5751b6ba34ea84a9c45353e4f2aaa415bfc56c0792cc7f8dee4b2c8a5aeeca7221c171d27d3954a8389adcdb3859fcd74602416a810be", 0x84}, {&(0x7f0000001300)="4b5657932f0ddc97a593cb6a53ba31824340ee2e0c5f79", 0x17}, {&(0x7f00000037c0)="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", 0x1000}, {&(0x7f0000001340)="78781c59bef50c7c5ae41effe6214c751c7359cafca982c4cdc0dfbd2e53dd4e3d2d81c511087398a7a8e82420eef7c24959f4d354faf24503e31c4c422da8ddbc67fe4bcd005618b1fdb9f978f686e4324364ca59d3668a5b784c9212", 0x5d}, {&(0x7f00000047c0)="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", 0x1000}, {&(0x7f00000013c0)="aca05238fd9d5869b9828d6b9378a9e37789694e28764359f493994c132e5196352355856870cb834bcec5a1b3fb77b273a410a61844d49a13b55305ce6c286285be752c2e2af9966a10481dda", 0x4d}, {&(0x7f0000001440)="a403aea83ef1af15f30064707050f42cfe817ae7ede936603395b9299ffcfb117eb581188340a3932b7d3aa17b86a2bacaa537ce2381cb1812187768ef01f1f6953585ab81c443be8efd7ac04ff1df68ef35671518bae99bf3f946d7007d9a8ae4157c50836784fec9d9b1fd1d1949b71a3f3e53d8170d0f8f5572", 0x7b}], 0x8, &(0x7f00000057c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32=r2, @ANYRES32=r4, @ANYRES32, @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r10, @ANYRES32, @ANYRES32=r11, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r10, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x150, 0x40000}}, {{0x0, 0x0, &(0x7f0000006240)=[{&(0x7f0000001700)="7a6fc92706f5a1508be4a12aef666bc6ecb458299004d1a5523a5be762ec59ed746cd1d8ac0fafdc898f51cb693b90c0e7828a48f626fdb297fe3320305668368e4b1bd4b60c8a5d2bea53b5e2ffb6a116ee5c8a4004ac179174764cc182db822f32609cf74b1fd03da04b56cbc0bebeed331edc9cd811375f3a631cd4104441bc5266bfa1cc70fec277e017340e4127759356372e65e2", 0x97}, {&(0x7f0000006140)="c34b863a53f3836e18902c5929", 0xd}, {&(0x7f0000006180)="1ae3210e873ab5fc2271d69737c8233423f4791ecde538ef8ec5241a1a8ae5b68bcd6eb4e50ded18570917c48eb54c8c9d2fbb4dcba0a75381b19c353d672caa18473d274a4962811f17670ff97b7e9891ce17024375c0257dafe8aa45783621e2f04035786ea36550863498ccbc081370f5d9ebca11a462062dcb18149119ee26ad7f06f2b2ca8f16d02931f4d0658d5a30230e17b7897753e07046291d56b361f2853c26173107ffbf0e1284beca0be17d988ed52d9f04c0f2ff", 0xbb}, {&(0x7f000000a280)="cc9d0b786468bafea6c380965fea89b0f8f8e50dea62a648484b401e3b7a56af9ce7b94a065587ccc8206d00920eda3e6a0d372d165de239b12a933b8d815df594668cda62e959328e11f2ffe197cd8abdf89e8a25196912439d23157ac3852bec0e1db270888131be0c0378ea72c05847455500be26cafacb975f4c8d2a1081544274e0515595d8fbc3b86c13ff9180a0053258b6b22a15fc5a80b70054df8fc9644499f59c1c7b11d122d6", 0xac}], 0x4, &(0x7f000000a3c0)=[@rights={{0x2c, 0x1, 0x1, [r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [r8, 0xffffffffffffffff, r7, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r11, 0xffffffffffffffff, r3, r4]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd0, 0x40004}}, {{&(0x7f000000a4c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000a700)=[{&(0x7f000000a540)="74ec4e0cd0e947ce", 0x8}, {&(0x7f000000a580)="b6ce13b882e1887eca0cf101e58eb81dd2f4232a894e3278abe83a941fe06082b8278ca8134a9b82d4719394acbf77e7851c3bc71462ce44ac8d360015e7a7b2f83557ebee4a78750dd3189d08b38488250d90cc", 0x54}, {&(0x7f000000a600)="753c231dd3bb29fcb7b39a0a9ff5e3f327cac9e59b8dbc0453de8d3d6340ef11221cd62dfaed1edab61d29abbbc6542a5b0ce457a96c9b3d8b8a428f362ab7f6a10dcdf7ee219be9c5763e7822638c0041b642317c8250cb8c6800b501bbd27c14d6cff6893af3bce3eaa0e2390501b0f13748a7861bee234350bd4f38aefc052091e37012b33e89deda56efe6bdd1830801e295db823de2efd96bf183f0d7b31e53f38edee714f1920c3edf0f0afa72289dd3789d068265d799b169462f351b2accb36a300b84ecc7ce44af6b835f9ae3dacb", 0xd3}], 0x3, &(0x7f000000ab80)=[@rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r8, r10, 0xffffffffffffffff, r9, r9, r9, r7]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r5, r4, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0, 0x4001}}, {{&(0x7f000000ac80)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f000000c0c0)=[{&(0x7f000000ad00)="e28c9e315a3286fe3916ab926f45bd060bb6a1972abfd35ee225911ca8", 0x1d}, {&(0x7f000000ad40)="fd570e193b39fa1b694998b6b7ca7a7a28dce4c29267adfb64a1bcb782332ce8a89b8d79a893b53e2d68572db1ebfff3658fe32c11583d6be332c1c5db00058deac87da6ae704a5e9878ada508d5b79ef241a5c0a897835b7a8772a956d78794aaac0b3f1fc3c175d0c2af85861169b9d4e11f528852e01009f4f3faff2d2834f8798a9c9218198828cc81b99244860b19e059235e5787006ee0ac3855debbdc59ea209976d9c3cec251f5175f36d6572f8b692b01e27cdb76d5e74fe7e8e880bec6530dec0270599fd3a2f5", 0xcc}, {&(0x7f000000ae40)="be7c3c55ba1d180359", 0x9}, {&(0x7f000000ae80)="e3156ede9581914cb49c75e92926b8cd56b0a90f1df2fae8b8d53a3e4a0f9bbdb37e40772e7f77afd2c266d9ef4dfdb7d4504d47ca4a09d01096616193f1bbe5c8f0c655bd5b65c0aa272ff1d758214a27d8c6037dff1886c6f0d4f403bc2af551360f0dc664b3126565be01bf93372646a102a602ed7a6d6eef087a8ad45300fde89c33d85a23b0204bcaa45346c32e1cb35e2b61b561946eb165e063a238c6e44169c358f69265dec237a9a96b0d00cd0e6c8eb92400128682cf60ddb8aa1e4d204f8bac382a7140df4b437540778fa31fb7cc34c466d948c6cc333cdba37cba", 0xe1}, {&(0x7f000000af80)="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", 0x1000}, {&(0x7f000000bf80)="377fdd88927c8c251b5b7bbc86b53481a078852bd4c230f2c6f808aaee11057573ea88e5bd55ade36cf60cbe6d2ce3e7b659c8f66acb9dbd9a10ce0872fe5773766a8ddecafcdc9e9471204dfab68cc556fa86b5c911f7b40c5cda1dac5771b083652641ef4d2f0daeef590f5e7d4f80e5c1c68a0e8b6c09e95d3d5c2df5f88d362cecec216d6d08b94194b7ce762c51e25f4b27ba1c7bd277125a842ce8f500d6236de6e5b5ca438daa07333ea8bde313ce8adcf605b59e95b03b2b9ce8f7bd448e26e759430dcf", 0xc8}, {&(0x7f000000c080)="7bb43b71449e1bd598f116ecd48e4dd4dd3a87d544a24bc41d3840a2a9bfead69f263ca86cd6", 0x26}], 0x7, &(0x7f00000102c0)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, r2, 0xffffffffffffffff, r3, 0xffffffffffffffff, r9]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x100, 0x40084}}], 0x8, 0x0) r12 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r12, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r12, &(0x7f0000000000), 0x10) read(r12, &(0x7f00000017c0)=""/4090, 0xffa) setsockopt$CAN_RAW_RECV_OWN_MSGS(r12, 0x65, 0x4, &(0x7f0000000340)=0x1, 0x4) ioctl$SIOCGSTAMP(r12, 0x8906, 0x0) sendmsg$can_raw(r12, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r13}, 0x10, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x3, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "e5631d6f20af6daa"}, 0x10}}, 0x0) dup(r8) 9.408756964s ago: executing program 4 (id=2586): recvfrom$packet(0xffffffffffffffff, &(0x7f0000000000)=""/251, 0xfb, 0x0, &(0x7f0000000100)={0x11, 0xbfb6f8d66b72934b, 0x0, 0x1, 0x7, 0x6, @local}, 0x14) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ftruncate(r0, 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x5}}, './file1\x00'}) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file1\x00', 0x0, 0x18}, 0x18) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000000240)=""/238, 0xee}], 0x1, 0xfff, 0x97) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0xfff}, 0x8) r3 = syz_open_dev$MSR(&(0x7f00000003c0), 0x5, 0x0) read$msr(r3, &(0x7f0000000400)=""/218, 0xda) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000600)={@cgroup=r0, 0x1d, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000540)=[0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@map=r0, r0, 0x9, 0x2, r1, @void, @value=r2, @void, @void, r5}, 0x20) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f00000007c0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x54, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xe5cd}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7fff}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40084}, 0x4000801) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000840), r0) sendmsg$TIPC_NL_MON_PEER_GET(r7, &(0x7f0000000ac0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1e0, r8, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xff33, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xb}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x400}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x81}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'eth', 0x3a, 'dummy0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0d3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}}}}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_NODE={0x60, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_KEY={0x45, 0x4, {'gcm(aes)\x00', 0x1d, "ee3ebb3e3069c314a566c5fc792ea6aba86b81d1fdf0ee15931487e660"}}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0xc0}, 0x40000) getsockopt$rose(r0, 0x104, 0x4, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) unshare(0x30000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000bc0)=@generic={&(0x7f0000000b80)='./file0\x00', r0}, 0x18) syz_usb_connect$uac1(0x1, 0xa3, &(0x7f0000000c00)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x91, 0x3, 0x1, 0x5, 0x10, 0xaa, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x3, 0x3, 0xd0, "d2add80b"}, @as_header={0x7, 0x24, 0x1, 0x6, 0xd, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x7, 0x7f, 0xe, {0x7, 0x25, 0x1, 0x0, 0x2, 0x6}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x2, 0x1, 0x5b, 0x9, "8516e4"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0xe, 0x4, 0xc, 0x5, "e278b8", "be35"}, @as_header={0x7, 0x24, 0x1, 0xd2, 0x5, 0x2}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x7, 0x0, 0x7, {0x7, 0x25, 0x1, 0x0, 0x67, 0x3}}}}}}}]}}, &(0x7f0000000ec0)={0xa, &(0x7f0000000cc0)={0xa, 0x6, 0x200, 0x4, 0x0, 0x26, 0x8}, 0x2e, &(0x7f0000000d00)={0x5, 0xf, 0x2e, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xfe, "cde31d24e2f88fbc8d41e46e1861b930"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0xec, 0x5, 0xe}, @wireless={0xb, 0x10, 0x1, 0xc, 0x95, 0x9, 0x0, 0x3, 0x4}]}, 0x5, [{0x4, &(0x7f0000000d40)=@lang_id={0x4, 0x3, 0x3001}}, {0x7a, &(0x7f0000000d80)=@string={0x7a, 0x3, "e380beb2a57bdab53ed7442c17f1e8c564c95363aca6e70b0b024aab12aaf99d5c6bd9c4d8fdc7f2bffe1bd71959fa7732ec9429126e6db44940c37302bd6da2f506237eedc6ede34923b06777c9659c9388dff1e7b25e172ab76ed81a4d2a450aeea020b3e01f28ba6af6f70db3625443257a1bf4cff9eb"}}, {0x4, &(0x7f0000000e00)=@lang_id={0x4, 0x3, 0x458}}, {0x25, &(0x7f0000000e40)=@string={0x25, 0x3, "7c7368ac016509f72a885c277049b09e19bb923e3045aed7834cf069f97543a91e2c2d"}}, {0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x480a}}]}) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001240)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001200)={&(0x7f0000000f80)={0x25c, r8, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffc01}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}]}, @TIPC_NLA_LINK={0x74, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3a}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xaf}]}, @TIPC_NLA_NODE={0xfc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "7f89ea53c269a9cd295074cd21d83699fee6d0b3359c0cc6"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "e0152fe9e1f6196f2cab5b41e2ccaa9488a7f6ffbd97d8e9"}}, @TIPC_NLA_NODE_KEY={0x46, 0x4, {'gcm(aes)\x00', 0x1e, "edca3f7ffda8e7fb84b364d57101f70802e11bcffd8cf68df73575d75ceb"}}, @TIPC_NLA_NODE_ID={0x15, 0x3, "bca294f882d983e167a29cc14897799e0a"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NET={0x68, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x10}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xb}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000000000000001}]}]}, 0x25c}, 0x1, 0x0, 0x0, 0xc4}, 0x4000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r0) sendmsg$NL80211_CMD_SET_CHANNEL(r7, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x40, r9, 0x200, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xfffffffd, 0x5d}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x239}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}]}, 0x40}, 0x1, 0x0, 0x0, 0x24008055}, 0x8000) bind$rds(r0, &(0x7f00000013c0)={0x2, 0x4e24, @remote}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'ip6tnl0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000001540)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x48, r6, 0x320, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x44851}, 0x4040040) syz_io_uring_setup(0x601c, &(0x7f0000001580)={0x0, 0xc029, 0x100, 0x1, 0x241, 0x0, r0}, &(0x7f0000001600), &(0x7f0000001640)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000001680)={0x2, r7, 0x2}) ioctl$MON_IOCH_MFLUSH(r11, 0x9208, 0x3) ioctl$KVM_SET_TSC_KHZ_cpu(r1, 0xaea2, 0x3ff) 8.680243453s ago: executing program 5 (id=2588): socket(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) io_setup(0x8, &(0x7f0000002b00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f0000000080), &(0x7f0000000180)=""/27}, 0x20) ioprio_set$uid(0x3, 0x0, 0x4004) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) unshare(0x22020600) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x4842, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], 0x3, 0x36b, &(0x7f0000000700)="$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") mq_notify(0xffffffffffffffff, 0xfffffffffffffffe) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./bus\x00', 0x0, 0x4000}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, 0x0, &(0x7f0000000400)=@tcp6}, 0xfffffecb) fsopen(&(0x7f0000000180)='adfs\x00', 0x0) 7.409207107s ago: executing program 5 (id=2590): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdir(0x0, 0x0) pipe2$9p(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000500)="170000000200020000ffbe8c5ee17688a2000afdff02a217fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ab05761547a681f009cee1fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f1398e9e90539062a80e605007f716e27e1ea033f02f71b47b63a93dac0193750236323ded2aa084cd36276a3afffdd061ec7e0", 0xb9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f0000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000500), 0x81, r2}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, 0x0, 0x25, 0x1, @val=@iter={&(0x7f0000000180)=@map_fd=r2, 0x10}}, 0x20) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6, 0x10, r4, 0x7d7d6000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="747261d27462289670e8350c1e203e8fb16ed964c58205eaca3aa4077854993786220adcde25fd33ee396ffe13a55c3f9e8d61efa753dc77fb7b349f32aa133dc325c3414456d88cb3be72602a08f22d12618f43f1bf30a17876c022405c00682e29bdaae2ce3ed22e37754b95dd04375d11ed92ff9b344c436c45e6e6b3bd69491c58cbbb376e1dca525fe09689a5bf4bad4764ba09adb6e1890fab5a525b083c6f7580271f4afcd332042dcac4e151c3082f78d174d49e04eb82691be41356b1055c3eb339a50bc93381b97d84eaf629b5a4835529c38bd0896b96b64a2767394764872fa2b66028", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',k']) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, 0x0, 0x0, 0x80, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000500)="88", 0x1, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = dup(r6) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000306010200000000000000000a00000c0500010007"], 0x28}}, 0x8090) 7.25554901s ago: executing program 1 (id=2591): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x22020}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r1}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x800000003, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000380)) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000340)='FREEZING\x00', 0x9) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) setfsuid(0xee00) setresuid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) ftruncate(0xffffffffffffffff, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, 0xffffffffffffffff, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 6.226517285s ago: executing program 5 (id=2593): futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) open(0x0, 0x518282, 0x78e22799f4a46e8e) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001400030500008000fbdbdf25022056ff", @ANYRES32=r3, @ANYBLOB="080002007f00000114000300766c616e3000000000030000000000000800090006000000"], 0x3c}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x801, 0x0, &(0x7f0000000040), 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0x69, 0x3c, 0x1e, 0x10, 0x6cd, 0x202, 0x3e04, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x23, 0x0, 0x2, 0x72, 0x2f, 0x68, 0x0, [], [{{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x6, 0x9, 0x5}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x81, 0x3, 0x40}}]}}]}}]}}, 0x0) 6.180829169s ago: executing program 4 (id=2594): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) read$FUSE(0xffffffffffffffff, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x4350050}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="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", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x8, {0x5, 0x0, 0x0, 0x0, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x1, 0xfffffffffffffff9, 0x200, 0x1ff, 0x0, 0x0, 0xc000, 0x1, 0x0, 0xee01, 0x0, 0x10}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.68653663s ago: executing program 2 (id=2595): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="f1", 0x1}], 0x1) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000280)=0x4, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, 0xffffffffffffffff, 0xa, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x2acc11b2dfac7e61}}, 0x40) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x3f9, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f000087e000/0x1000)=nil, 0x1000, 0x9) chroot(&(0x7f0000000040)='./cgroup\x00') r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) setuid(0xee01) 5.333525818s ago: executing program 0 (id=2596): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000070000000100010008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) 5.204706047s ago: executing program 2 (id=2597): mknod$loop(&(0x7f00000000c0)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x970) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x2, 0x400421, 0x0, 0xee, 0x0, 0xad, 0x0, 0x0, 0x40, 0xffffff02}}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe}}, &(0x7f0000000100)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r4, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}, 0x400}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) connect(r5, &(0x7f0000000140)=@in6={0xa, 0x4e23, 0x9f, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0xffff}, 0x80) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000, 0x9}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x1, 0x3}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000000)={r7}) bind$tipc(r8, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r9, &(0x7f00000001c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, 0x5, 0x0) dup2(r7, r0) 5.083578571s ago: executing program 0 (id=2598): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x1c}}, 0x4800) mount$cgroup(0x0, 0x0, 0x0, 0x1008000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) openat$dir(0xffffffffffffff9c, 0x0, 0x141002, 0x108) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac14140000"], 0x50}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000700)={0x1b3}) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="02090000020000000000000000003f64"], 0x10}}, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) 4.189501807s ago: executing program 2 (id=2599): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) r4 = signalfd4(r1, &(0x7f0000000300)={[0x5]}, 0x8, 0x80000) fgetxattr(r4, &(0x7f0000000040)=@random={'security.', 'nl80211\x00'}, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r7, 0x7003) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) msgctl$IPC_SET(0x0, 0x1, 0xffffffffffffffff) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r9) sendmsg$NLBL_CALIPSO_C_LIST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r10, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000090) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xc, 0x1, 0x20a9, 0x3, 0x2, 0x1}) 4.090811482s ago: executing program 0 (id=2600): socket(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) io_setup(0x8, &(0x7f0000002b00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f0000000080), &(0x7f0000000180)=""/27}, 0x20) ioprio_set$uid(0x3, 0x0, 0x4004) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) unshare(0x22020600) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x4842, &(0x7f0000000a80)=ANY=[@ANYBLOB="636865636b3d7374726963742c696f636861727365743d6d616363726f617469616e2c757466383d312c73686f72746e616d653d77696e39352c73686f7277696e39352c696e652c73686f727497ccfa966904631b97a981ddf2ad95ae6e616d6f3d77696e6e742c73686f72746e616d653d6c6f7765722c73686f72746e616d673d77696e39352c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c73686f72746e616d653d6c6f7765722c004d922322f36367833e5a7d7cbbf27e1c28be6539fdec1cff6e0f000000000000000000000051eade04c6771c6e6c057467ac23fb259c375339bb40133b20e985fbc390c7020f4c61f9341e833f5afaa505493f7b5706ce436035721ddb54b2543a9ac2fb5498407c920231d5511f6ee88a8881df6c7977e2bf715171a5ddb27180cd7ed9dda28c9b524b62fba5d4f1d770e291998f279ea8f50dbcd00e64dfdda9c3b735a4f18bd83c89b2bb73bac5a883f257"], 0x3, 0x36b, &(0x7f0000000700)="$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") mq_notify(0xffffffffffffffff, 0xfffffffffffffffe) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./bus\x00', 0x0, 0x4000}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, 0x0, &(0x7f0000000400)=@tcp6}, 0xfffffecb) fsopen(&(0x7f0000000180)='adfs\x00', 0x0) 3.050293434s ago: executing program 2 (id=2601): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_open_dev$sndpcmc(0x0, 0xfffffffffffffffd, 0x4f40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r0, 0xae03, 0xa) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"/1752], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 3.001302427s ago: executing program 1 (id=2602): ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = accept(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x28) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x20008c0, &(0x7f0000000a00)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0xff}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@shortname_lower}, {@fat=@check_strict}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@codepage={'codepage', 0x3d, '864'}}, {@utf8no}, {@shortname_winnt}, {@uni_xlateno}, {@numtail}, {@utf8}, {@uni_xlate}]}, 0x80, 0x350, &(0x7f0000000580)="$eJzs3U9oW3UcAPBv9tKkHcz2IAwF4elN0LJWPOipZXQwzEUl+OcgBtepNHXQYLA7NKsX8Sh41JM3D3rwsLMIinjz4NUJMhUPutvA4ZMkL81Lk3adkM3i53MI331/329+v7c8mtfX5tdXV2LjwkxcvHHjeszOlqK8cnYlbpZiIZIYuBLjKhNyAMDxcDPL4s+s74gtpSkvCQCYst77/+unCpl3vz6sPvPuDwDHXv79/9xhNbMHDVyaypIAgCkbu///yMhwZfRH/eXCbwUAAMfV8y+9/MxqLeK5NJ2N2HyvXW/X4+nh+OrFeDOasR5nYj5uRfQvFLoPpd7jufO1tTNpmnbil4Wodzva9YjNTrvev1JYTXr91ViK+VjI+/OrjSzLknNf1NaW0p6IuNLpzR+bpXZ9Jk7m8/94MtZjOdK4f6w/4nxtbTnNn6C+OejvROwO71t0178Y8/H9a3EpmnEhur2Dy5ra2s5Smp7NaiP97Xq1V9d34B0QAAAAAAAAAAAAAAAAAAAAAAD4VxbTPQt7+99kw/17FhcnjPf2x+n35/sD7fb3B8qqWWTZH+88Xn8/iZH9gfbvz9Oul+PEvT10AAAAAAAAAAAAAAAAAAAA+M9obVei0Wyub7W2L28Ug85Wa/tERHQzb3372VdzMV5zm6Ccz1EYSvPU5Y1GlgyKs2SkJg+S7uSDzKdX91ZcrKnuHcXEZVQPHmo2Tz3880fDzEPJ4Jn/HtYkMfkAk33LKAab9/WXdCf/UXvB8m1qrmVZdlD7zivjXVGKKN/5C3d4kHWDb66/8cATrdNP9jJfZn2PPjb/wrUPP/lto9Hszhy9V7Cy1bqVbTTyf08+2Q4OksL5U4p+UCqeCeXD2ndHM43kh99ffPCD7442e1bMvD2hJukfzuf7hyr9oLvMfUNzk+aamXDyTyE4/fFK4+rOT78etavwRcJGHQAAAAAAAAAAAAAAAAAAcFcUPiueyz/sO3NY11PPTn9lAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHD3DP/+fyHYHcscJfirE+ND1fWtVkTlXh8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/c/8EAAD//9HQbnk=") 2.879852332s ago: executing program 0 (id=2603): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32, @ANYBLOB="0000000002000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0xdf, &(0x7f0000001400)=""/223, 0x0, 0x43, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe4a}, 0x94) 2.829106939s ago: executing program 5 (id=2604): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mkdir(0x0, 0x0) pipe2$9p(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x10, &(0x7f0000000500)="170000000200020000ffbe8c5ee17688a2000afdff02a217fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ab05761547a681f009cee1fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f1398e9e90539062a80e605007f716e27e1ea033f02f71b47b63a93dac0193750236323ded2aa084cd36276a3afffdd061ec7e0", 0xb9) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f0000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000000500), 0x81, r2}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, 0x0, 0x25, 0x1, @val=@iter={&(0x7f0000000180)=@map_fd=r2, 0x10}}, 0x20) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6, 0x10, r4, 0x7d7d6000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r5 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="747261d27462289670e8350c1e203e8fb16ed964c58205eaca3aa4077854993786220adcde25fd33ee396ffe13a55c3f9e8d61efa753dc77fb7b349f32aa133dc325c3414456d88cb3be72602a08f22d12618f43f1bf30a17876c022405c00682e29bdaae2ce3ed22e37754b95dd04375d11ed92ff9b344c436c45e6e6b3bd69491c58cbbb376e1dca525fe09689a5bf4bad4764ba09adb6e1890fab5a525b083c6f7580271f4afcd332042dcac4e151c3082f78d174d49e04eb82691be41356b1055c3eb339a50bc93381b97d84eaf629b5a4835529c38bd0896b96b64a2767394764872fa2b66028", @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r5, @ANYBLOB=',k']) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$tmpfs(0x0, 0x0, 0x0, 0x80, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000500)="88", 0x1, 0x0, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfea8, 0xa) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = dup(r6) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="640000000206030000000000fffff0000000000016000300686173683a6e65742c706f72742c6e6574000000050004000000000005000500020000000900020073797a3200000000050001000700000014000780080013400000000008001240"], 0x64}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000306010200000000000000000a00000c0500010007"], 0x28}}, 0x8090) 2.322434908s ago: executing program 1 (id=2605): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r2, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x4080018) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0xe0, r2, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x34, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}]}, @NL802154_ATTR_SEC_DEVICE={0x34, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x38, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa2}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000200)={0x0, @initdev}, &(0x7f0000000240)=0xc) r4 = socket(0x10, 0x80002, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000008c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22385}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x48}}, 0x4000010) 2.272079154s ago: executing program 0 (id=2606): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 1.713692284s ago: executing program 2 (id=2607): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000182000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000340)={[0x3ffffd, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x213f85fe, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x5, 0x4, 0x100000000], 0x3000, 0x280384}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x2, 0xeeef0000, 0x2000, &(0x7f000041f000/0x2000)=nil}) socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e20, 0x3, 'none\x00', 0x30, 0x4, 0x68}, 0x2c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) 1.710245429s ago: executing program 1 (id=2608): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000070000000100010008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) 1.60076993s ago: executing program 1 (id=2609): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r4, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x4c, 0x0, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x20, 0x10, 0x403, 0x0, 0x1000000, {0x0, 0x0, 0x0, 0x0, 0x235, 0x2881}}, 0x20}, 0x1, 0xba01, 0x0, 0x4000080}, 0x0) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x84, 0x66, &(0x7f0000000ac0)={r6, 0xd0}, 0x0) 634.531268ms ago: executing program 1 (id=2610): socket$inet(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc1}) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000140)={0x7, 0x5, 0xfc000000}) io_uring_enter(r1, 0x17f, 0x5fe, 0x33, 0x0, 0x62) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffc93, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000180)={0x40040, 0xd2, 0xf}, 0x18) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000440)={'fscrypt:', @desc3}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c9, 0x12) 564.021447ms ago: executing program 0 (id=2611): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) r4 = signalfd4(r1, &(0x7f0000000300)={[0x5]}, 0x8, 0x80000) fgetxattr(r4, &(0x7f0000000040)=@random={'security.', 'nl80211\x00'}, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r6, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$RTC_UIE_ON(r7, 0x7003) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) msgctl$IPC_SET(0x0, 0x1, 0xffffffffffffffff) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r9) sendmsg$NLBL_CALIPSO_C_LIST(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r10, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4000090) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0xc, 0x1, 0x20a9, 0x3, 0x2, 0x1}) 108.451716ms ago: executing program 4 (id=2612): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x18}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "7f"}]}], {0x14}}, 0x70}}, 0x0) 13.727039ms ago: executing program 4 (id=2613): socket(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) io_setup(0x8, &(0x7f0000002b00)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r4, &(0x7f0000000080), &(0x7f0000000180)=""/27}, 0x20) ioprio_set$uid(0x3, 0x0, 0x4004) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) unshare(0x22020600) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) mq_notify(0xffffffffffffffff, 0xfffffffffffffffe) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./bus\x00', 0x0, 0x4000}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, 0x0, &(0x7f0000000400)=@tcp6}, 0xfffffecb) fsopen(&(0x7f0000000180)='adfs\x00', 0x0) 6.485179ms ago: executing program 5 (id=2614): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, 0x0, 0x0) r2 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, 0x0, 0x0, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2, 0x4}, 0x0, 0x0) (fail_nth: 3) 0s ago: executing program 2 (id=2615): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[], 0x1c}}, 0x4800) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x1008000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x400) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) openat$dir(0xffffffffffffff9c, 0x0, 0x141002, 0x108) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r5, 0xc01064ab, &(0x7f0000000700)={0x1b3}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x10}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) kernel console output (not intermixed with test programs): 37][T14027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 780.387950][T14027] RSP: 002b:00007f0b05506038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 780.387969][T14027] RAX: ffffffffffffffda RBX: 00007f0b047e5fa0 RCX: 00007f0b0458eec9 [ 780.387981][T14027] RDX: 0000000000000002 RSI: 0000200000019880 RDI: 0000000000000006 [ 780.387992][T14027] RBP: 00007f0b05506090 R08: 0000000000000000 R09: 0000000000000000 [ 780.388002][T14027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 780.388012][T14027] R13: 00007f0b047e6038 R14: 00007f0b047e5fa0 R15: 00007ffff7b01a48 [ 780.388040][T14027] [ 780.700484][ T5928] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 780.754453][ T5999] usb 3-1: USB disconnect, device number 40 [ 780.875886][ T5928] rc_core: IR keymap rc-dvico-portable not found [ 780.888179][ T5999] appletouch 3-1:0.85: input: appletouch disconnected [ 780.912855][ T5928] Registered IR keymap rc-empty [ 780.926902][ T5928] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 781.093556][T10258] appletouch 6-1:0.85: Geyser mode initialized. [ 781.139010][T10258] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.85/input/input35 [ 781.166221][ T5928] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input36 [ 781.231261][T14043] Device name cannot be null; rc = [-22] [ 781.689201][ T5928] dvb-usb: schedule remote query interval to 100 msecs. [ 781.719488][T10258] usb 6-1: USB disconnect, device number 29 [ 781.725557][ C0] appletouch 6-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 781.759880][ T5928] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 781.866734][ T9] dvb-usb: bulk message failed: -22 (1/0) [ 781.920428][ T5928] usb 2-1: USB disconnect, device number 43 [ 781.965056][T10258] appletouch 6-1:0.85: input: appletouch disconnected [ 782.006687][T14049] 9pnet_fd: Insufficient options for proto=fd [ 782.118793][ T5928] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 782.181523][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 782.181539][ T30] audit: type=1326 audit(1758556717.079:3647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14052 comm="syz.5.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856f58eec9 code=0x7ffc0000 [ 782.243097][ T30] audit: type=1326 audit(1758556717.129:3648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14052 comm="syz.5.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856f58eec9 code=0x7ffc0000 [ 782.737583][T14060] Device name cannot be null; rc = [-22] [ 782.768585][ T30] audit: type=1326 audit(1758556717.129:3649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14052 comm="syz.5.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f856f58eec9 code=0x7ffc0000 [ 782.856591][ T30] audit: type=1326 audit(1758556717.129:3650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14052 comm="syz.5.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856f58eec9 code=0x7ffc0000 [ 783.193578][ T30] audit: type=1326 audit(1758556717.129:3651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14052 comm="syz.5.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856f58eec9 code=0x7ffc0000 [ 783.330953][T14068] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2179'. [ 783.435028][T14069] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 783.492538][ T30] audit: type=1326 audit(1758556717.129:3652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14052 comm="syz.5.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f856f58eec9 code=0x7ffc0000 [ 783.514940][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.542645][ T30] audit: type=1326 audit(1758556717.129:3653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14052 comm="syz.5.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856f58eec9 code=0x7ffc0000 [ 783.565087][ C0] vkms_vblank_simulate: vblank timer overrun [ 783.581417][T14055] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 783.664427][T14063] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 784.482364][T14073] wg2 speed is unknown, defaulting to 1000 [ 784.941026][T14081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2184'. [ 784.952797][ T30] audit: type=1326 audit(1758556717.129:3654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14052 comm="syz.5.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f856f58eec9 code=0x7ffc0000 [ 784.975593][ T30] audit: type=1326 audit(1758556717.129:3655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14052 comm="syz.5.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856f58eec9 code=0x7ffc0000 [ 784.998009][ C0] vkms_vblank_simulate: vblank timer overrun [ 785.004530][ T30] audit: type=1326 audit(1758556717.129:3656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14052 comm="syz.5.2181" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f856f58eec9 code=0x7ffc0000 [ 785.171982][T14088] FAULT_INJECTION: forcing a failure. [ 785.171982][T14088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 785.207282][T14088] CPU: 1 UID: 0 PID: 14088 Comm: syz.2.2187 Not tainted syzkaller #0 PREEMPT(full) [ 785.207313][T14088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 785.207323][T14088] Call Trace: [ 785.207331][T14088] [ 785.207339][T14088] dump_stack_lvl+0x189/0x250 [ 785.207365][T14088] ? __pfx____ratelimit+0x10/0x10 [ 785.207383][T14088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 785.207403][T14088] ? __pfx__printk+0x10/0x10 [ 785.207436][T14088] should_fail_ex+0x414/0x560 [ 785.207463][T14088] _copy_to_user+0x31/0xb0 [ 785.207484][T14088] simple_read_from_buffer+0xe1/0x170 [ 785.207514][T14088] proc_fail_nth_read+0x1b3/0x220 [ 785.207537][T14088] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 785.207560][T14088] ? rw_verify_area+0x2a6/0x4d0 [ 785.207581][T14088] ? __lock_acquire+0xab9/0xd20 [ 785.207600][T14088] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 785.207622][T14088] vfs_read+0x200/0xa30 [ 785.207642][T14088] ? fdget_pos+0x247/0x320 [ 785.207664][T14088] ? __pfx___mutex_lock+0x10/0x10 [ 785.207685][T14088] ? __pfx_vfs_read+0x10/0x10 [ 785.207705][T14088] ? __fget_files+0x2a/0x420 [ 785.207725][T14088] ? __fget_files+0x3a0/0x420 [ 785.207739][T14088] ? __fget_files+0x2a/0x420 [ 785.207762][T14088] ksys_read+0x145/0x250 [ 785.207787][T14088] ? __pfx_ksys_read+0x10/0x10 [ 785.207814][T14088] ? do_syscall_64+0xbe/0xfa0 [ 785.207837][T14088] do_syscall_64+0xfa/0xfa0 [ 785.207855][T14088] ? lockdep_hardirqs_on+0x9c/0x150 [ 785.207873][T14088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.207889][T14088] ? clear_bhb_loop+0x60/0xb0 [ 785.207909][T14088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.207924][T14088] RIP: 0033:0x7f5722d8d8dc [ 785.207941][T14088] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 785.207956][T14088] RSP: 002b:00007f5723c76030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 785.207975][T14088] RAX: ffffffffffffffda RBX: 00007f5722fe5fa0 RCX: 00007f5722d8d8dc [ 785.207988][T14088] RDX: 000000000000000f RSI: 00007f5723c760a0 RDI: 0000000000000006 [ 785.207999][T14088] RBP: 00007f5723c76090 R08: 0000000000000000 R09: 0000000000000000 [ 785.208010][T14088] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 785.208021][T14088] R13: 00007f5722fe6038 R14: 00007f5722fe5fa0 R15: 00007ffc66211cd8 [ 785.208052][T14088] [ 785.635105][T14096] wg2 speed is unknown, defaulting to 1000 [ 787.119359][T14109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2192'. [ 788.283021][T14123] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2195'. [ 791.197129][T14151] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 791.206425][T14151] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 791.214049][T14151] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 791.338942][T14154] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 791.904583][ T10] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 791.932198][T14161] netlink: 'syz.5.2207': attribute type 1 has an invalid length. [ 792.008948][T14161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 792.073729][T14163] bond1: (slave geneve2): making interface the new active one [ 792.095270][T14163] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 792.110770][ T10] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 792.132209][ T10] usb 2-1: config 0 has no interface number 0 [ 792.311663][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 792.344791][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.942030][ T10] usb 2-1: Product: syz [ 792.946324][ T10] usb 2-1: Manufacturer: syz [ 792.951104][ T10] usb 2-1: SerialNumber: syz [ 792.957267][T14166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2208'. [ 792.974018][ T10] usb 2-1: config 0 descriptor?? [ 793.205093][ T10] uvcvideo 2-1:0.64: Found Unit with invalid ID 0 [ 793.213942][ T10] uvcvideo 2-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 793.234251][ T10] uvcvideo 2-1:0.64: No valid video chain found. [ 793.292188][ T10] usb 2-1: USB disconnect, device number 44 [ 793.647239][ T5999] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 794.435186][ T5999] usb 3-1: Using ep0 maxpacket: 32 [ 794.449705][ T5999] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 794.452684][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 794.452702][ T30] audit: type=1326 audit(1758556729.339:3676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14198 comm="syz.0.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bb38eec9 code=0x7ffc0000 [ 794.465683][ T5999] usb 3-1: config 0 has no interface number 0 [ 794.502994][ T5999] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 794.515390][ T5999] usb 3-1: config 0 interface 85 has no altsetting 0 [ 794.522334][ T30] audit: type=1326 audit(1758556729.349:3677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14198 comm="syz.0.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bb38eec9 code=0x7ffc0000 [ 794.545063][ C1] vkms_vblank_simulate: vblank timer overrun [ 794.962979][ T30] audit: type=1326 audit(1758556729.349:3678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14198 comm="syz.0.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f32bb38eec9 code=0x7ffc0000 [ 794.985681][ T30] audit: type=1326 audit(1758556729.359:3679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14198 comm="syz.0.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bb38eec9 code=0x7ffc0000 [ 795.014211][ T30] audit: type=1326 audit(1758556729.359:3680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14198 comm="syz.0.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bb38eec9 code=0x7ffc0000 [ 795.046848][ T5999] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 795.072222][ T5999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.093016][ T5999] usb 3-1: Product: syz [ 795.104589][ T5887] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 795.112304][ T30] audit: type=1326 audit(1758556729.359:3681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14198 comm="syz.0.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f32bb38eec9 code=0x7ffc0000 [ 795.136022][ T5999] usb 3-1: Manufacturer: syz [ 795.140647][ T5999] usb 3-1: SerialNumber: syz [ 795.156587][ T5999] usb 3-1: config 0 descriptor?? [ 795.180450][ T30] audit: type=1326 audit(1758556729.359:3682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14198 comm="syz.0.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bb38eec9 code=0x7ffc0000 [ 795.204337][ T30] audit: type=1326 audit(1758556729.359:3683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14198 comm="syz.0.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f32bb38eec9 code=0x7ffc0000 [ 795.787924][ T30] audit: type=1326 audit(1758556729.359:3684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14198 comm="syz.0.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f32bb38eec9 code=0x7ffc0000 [ 795.818285][ T30] audit: type=1326 audit(1758556729.359:3685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14198 comm="syz.0.2220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f32bb38eec9 code=0x7ffc0000 [ 795.889145][ T5887] usb 2-1: New USB device found, idVendor=05ac, idProduct=b301, bcdDevice=e4.00 [ 795.898377][ T5887] usb 2-1: New USB device strings: Mfr=9, Product=2, SerialNumber=3 [ 795.906453][ T5887] usb 2-1: Product: syz [ 795.910712][ T5887] usb 2-1: Manufacturer: syz [ 795.920469][ T5887] usb 2-1: SerialNumber: syz [ 796.813309][ T5887] usb 2-1: config 0 descriptor?? [ 796.958998][ T5999] appletouch 3-1:0.85: Geyser mode initialized. [ 796.977258][ T5999] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input37 [ 797.041969][ T5999] usb 2-1: USB disconnect, device number 45 [ 797.051886][T14220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2225'. [ 797.175797][ T5887] usb 3-1: USB disconnect, device number 41 [ 797.238859][ T5887] appletouch 3-1:0.85: input: appletouch disconnected [ 798.290424][T14241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2231'. [ 798.300899][T14241] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2231'. [ 798.359074][T14244] FAULT_INJECTION: forcing a failure. [ 798.359074][T14244] name failslab, interval 1, probability 0, space 0, times 0 [ 798.372126][T14244] CPU: 0 UID: 0 PID: 14244 Comm: syz.2.2232 Not tainted syzkaller #0 PREEMPT(full) [ 798.372151][T14244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 798.372162][T14244] Call Trace: [ 798.372171][T14244] [ 798.372179][T14244] dump_stack_lvl+0x189/0x250 [ 798.372206][T14244] ? __pfx____ratelimit+0x10/0x10 [ 798.372227][T14244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 798.372247][T14244] ? __pfx__printk+0x10/0x10 [ 798.372275][T14244] ? __pfx___might_resched+0x10/0x10 [ 798.372297][T14244] ? fs_reclaim_acquire+0x7d/0x100 [ 798.372320][T14244] should_fail_ex+0x414/0x560 [ 798.372347][T14244] should_failslab+0xa8/0x100 [ 798.372367][T14244] __kmalloc_noprof+0xcb/0x7f0 [ 798.372390][T14244] ? iovec_from_user+0x87/0x250 [ 798.372413][T14244] iovec_from_user+0x87/0x250 [ 798.372435][T14244] __import_iovec+0x163/0x7f0 [ 798.372463][T14244] import_iovec+0x74/0xa0 [ 798.372484][T14244] ___sys_recvmsg+0x43a/0x510 [ 798.372513][T14244] ? __pfx____sys_recvmsg+0x10/0x10 [ 798.372558][T14244] ? __fget_files+0x3a0/0x420 [ 798.372586][T14244] do_recvmmsg+0x307/0x770 [ 798.372616][T14244] ? __pfx_do_recvmmsg+0x10/0x10 [ 798.372650][T14244] ? _copy_from_user+0x94/0xb0 [ 798.372690][T14244] __x64_sys_recvmmsg+0x1af/0x240 [ 798.372714][T14244] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 798.372740][T14244] ? do_syscall_64+0xbe/0xfa0 [ 798.372764][T14244] do_syscall_64+0xfa/0xfa0 [ 798.372781][T14244] ? lockdep_hardirqs_on+0x9c/0x150 [ 798.372800][T14244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.372817][T14244] ? clear_bhb_loop+0x60/0xb0 [ 798.372838][T14244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 798.372855][T14244] RIP: 0033:0x7f5722d8eec9 [ 798.372871][T14244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 798.372885][T14244] RSP: 002b:00007f5723c76038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 798.372904][T14244] RAX: ffffffffffffffda RBX: 00007f5722fe5fa0 RCX: 00007f5722d8eec9 [ 798.372917][T14244] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 798.372930][T14244] RBP: 00007f5723c76090 R08: 0000200000003700 R09: 0000000000000000 [ 798.372941][T14244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 798.372952][T14244] R13: 00007f5722fe6038 R14: 00007f5722fe5fa0 R15: 00007ffc66211cd8 [ 798.372983][T14244] [ 798.636194][ T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 798.657985][T10520] block nbd1: Possible stuck request ffff888025887000: control (read@0,1024B). Runtime 270 seconds [ 798.669022][T10520] block nbd1: Possible stuck request ffff8880258871c0: control (read@1024,1024B). Runtime 270 seconds [ 798.680671][T10520] block nbd1: Possible stuck request ffff888025887380: control (read@2048,1024B). Runtime 270 seconds [ 798.691973][T10520] block nbd1: Possible stuck request ffff888025887540: control (read@3072,1024B). Runtime 270 seconds [ 798.801703][ T10] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 798.810540][ T10] usb 2-1: config 0 has no interface number 0 [ 799.202577][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 799.216549][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.232163][ T10] usb 2-1: Product: syz [ 799.237881][ T10] usb 2-1: Manufacturer: syz [ 799.243133][ T10] usb 2-1: SerialNumber: syz [ 799.254407][ T10] usb 2-1: config 0 descriptor?? [ 799.570933][ T10] uvcvideo 2-1:0.64: Found Unit with invalid ID 0 [ 799.594740][ T10] uvcvideo 2-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 799.622862][ T10] uvcvideo 2-1:0.64: No valid video chain found. [ 800.238467][ T10] usb 2-1: USB disconnect, device number 46 [ 800.626322][T14263] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 800.815196][T14263] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 800.872522][T14270] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 801.018015][T14277] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2241'. [ 801.548227][T14273] 9pnet_fd: Insufficient options for proto=fd [ 802.601028][T14286] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2243'. [ 802.610416][T14286] openvswitch: netlink: Message has 512 unknown bytes. [ 803.527846][T14273] 9pnet_fd: Insufficient options for proto=fd [ 803.550605][T14273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2240'. [ 803.580560][ T30] kauditd_printk_skb: 84 callbacks suppressed [ 803.580577][ T30] audit: type=1326 audit(1758556738.479:3770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.4.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d35b8eec9 code=0x7ffc0000 [ 803.684720][ T10] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 804.614897][ T30] audit: type=1326 audit(1758556738.519:3771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.4.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d35b8eec9 code=0x7ffc0000 [ 804.637492][ T30] audit: type=1326 audit(1758556738.539:3772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.4.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d35b8eec9 code=0x7ffc0000 [ 804.660084][ T30] audit: type=1326 audit(1758556738.539:3773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.4.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d35b8eec9 code=0x7ffc0000 [ 804.682493][ C1] vkms_vblank_simulate: vblank timer overrun [ 804.691955][ T30] audit: type=1326 audit(1758556738.539:3774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.4.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d35b8eec9 code=0x7ffc0000 [ 804.693226][T14314] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 804.714378][ C1] vkms_vblank_simulate: vblank timer overrun [ 804.714644][ T30] audit: type=1326 audit(1758556738.539:3775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.4.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8d35b8eec9 code=0x7ffc0000 [ 804.731357][ T10] usb 6-1: config 0 has an invalid interface number: 27 but max is 0 [ 804.749416][ C1] vkms_vblank_simulate: vblank timer overrun [ 804.825121][T14324] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2250'. [ 804.853607][ T10] usb 6-1: config 0 has no interface number 0 [ 804.893527][ T10] usb 6-1: New USB device found, idVendor=174f, idProduct=8a33, bcdDevice=17.05 [ 804.894573][T14314] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 804.913703][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.916672][ T30] audit: type=1326 audit(1758556738.539:3776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.4.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d35b8eec9 code=0x7ffc0000 [ 804.957741][ T10] usb 6-1: Product: syz [ 804.961944][ T10] usb 6-1: Manufacturer: syz [ 804.980263][ T10] usb 6-1: SerialNumber: syz [ 805.007262][ T10] usb 6-1: config 0 descriptor?? [ 805.016834][ T30] audit: type=1326 audit(1758556738.539:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.4.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8d35b8eec9 code=0x7ffc0000 [ 805.040423][ T30] audit: type=1326 audit(1758556738.539:3778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.4.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d35b8eec9 code=0x7ffc0000 [ 805.065958][ T10] uvcvideo 6-1:0.27: Found Unit with invalid ID 0 [ 805.072684][ T30] audit: type=1326 audit(1758556738.539:3779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14304 comm="syz.4.2248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8d35b8eec9 code=0x7ffc0000 [ 805.165172][T14302] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 805.229969][T14293] Bluetooth: hci3: command 0x0405 tx timeout [ 805.245832][ T10] uvcvideo 6-1:0.27: probe with driver uvcvideo failed with error -22 [ 805.254605][ T5887] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 805.267469][ T10] usb 6-1: USB disconnect, device number 30 [ 805.336347][ T5928] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 805.435536][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 805.449460][ T5887] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 805.463449][ T5887] usb 1-1: config 0 has no interface number 0 [ 805.484968][ T5887] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 805.524580][ T5928] usb 2-1: Using ep0 maxpacket: 8 [ 805.531071][ T5887] usb 1-1: config 0 interface 85 has no altsetting 0 [ 805.540087][ T5928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 805.556850][ T5887] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 805.564583][ T5928] usb 2-1: config 0 has no interfaces? [ 805.571761][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.587268][ T5928] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 805.604628][ T5887] usb 1-1: Product: syz [ 805.608847][ T5887] usb 1-1: Manufacturer: syz [ 805.613486][ T5887] usb 1-1: SerialNumber: syz [ 805.614600][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.636771][ T5887] usb 1-1: config 0 descriptor?? [ 805.652518][ T5928] usb 2-1: Product: syz [ 805.666170][ T5928] usb 2-1: Manufacturer: syz [ 805.674836][ T5928] usb 2-1: SerialNumber: syz [ 805.692313][ T5928] usb 2-1: config 0 descriptor?? [ 805.727604][T14345] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 805.734163][T14345] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 805.748837][T14345] vhci_hcd vhci_hcd.0: Device attached [ 805.755869][T14346] vhci_hcd: connection closed [ 805.756251][ T200] vhci_hcd: stop threads [ 805.766751][ T200] vhci_hcd: release socket [ 805.771219][ T200] vhci_hcd: disconnect device [ 806.158585][T14356] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2259'. [ 806.167999][T14356] openvswitch: netlink: Message has 512 unknown bytes. [ 806.463868][ T5887] appletouch 1-1:0.85: Failed to read mode from device. [ 806.473796][ T5887] appletouch 1-1:0.85: probe with driver appletouch failed with error -5 [ 806.501702][ T5887] usb 1-1: USB disconnect, device number 59 [ 807.388980][T14390] FAULT_INJECTION: forcing a failure. [ 807.388980][T14390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 807.405556][T14390] CPU: 0 UID: 0 PID: 14390 Comm: syz.0.2265 Not tainted syzkaller #0 PREEMPT(full) [ 807.405580][T14390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 807.405590][T14390] Call Trace: [ 807.405598][T14390] [ 807.405606][T14390] dump_stack_lvl+0x189/0x250 [ 807.405632][T14390] ? __pfx____ratelimit+0x10/0x10 [ 807.405652][T14390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 807.405672][T14390] ? __pfx__printk+0x10/0x10 [ 807.405692][T14390] ? __might_fault+0xb0/0x130 [ 807.405724][T14390] should_fail_ex+0x414/0x560 [ 807.405748][T14390] _copy_from_user+0x2d/0xb0 [ 807.405765][T14390] iommufd_fops_ioctl+0x411/0x580 [ 807.405795][T14390] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 807.405828][T14390] ? __fget_files+0x3a0/0x420 [ 807.405843][T14390] ? __fget_files+0x2a/0x420 [ 807.405861][T14390] ? bpf_lsm_file_ioctl+0x9/0x20 [ 807.405879][T14390] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 807.405901][T14390] __se_sys_ioctl+0xfc/0x170 [ 807.405924][T14390] do_syscall_64+0xfa/0xfa0 [ 807.405944][T14390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.405959][T14390] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 807.405975][T14390] ? clear_bhb_loop+0x60/0xb0 [ 807.405994][T14390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.406010][T14390] RIP: 0033:0x7f32bb38eec9 [ 807.406026][T14390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 807.406039][T14390] RSP: 002b:00007f32bc183038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 807.406058][T14390] RAX: ffffffffffffffda RBX: 00007f32bb5e5fa0 RCX: 00007f32bb38eec9 [ 807.406076][T14390] RDX: 0000200000000480 RSI: 0000000000003b83 RDI: 0000000000000003 [ 807.406087][T14390] RBP: 00007f32bc183090 R08: 0000000000000000 R09: 0000000000000000 [ 807.406098][T14390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 807.406108][T14390] R13: 00007f32bb5e6038 R14: 00007f32bb5e5fa0 R15: 00007fffacaa6b98 [ 807.406140][T14390] [ 808.124830][ T5999] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 808.343813][ T5887] usb 2-1: USB disconnect, device number 47 [ 809.072880][ T5999] usb 3-1: config 0 has an invalid interface number: 27 but max is 0 [ 809.083447][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.260964][ T5999] usb 3-1: config 0 has no interface number 0 [ 809.297301][ T5999] usb 3-1: New USB device found, idVendor=174f, idProduct=8a33, bcdDevice=17.05 [ 809.407209][T14414] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 809.415479][T14414] macsec1: entered promiscuous mode [ 809.420905][T14414] macsec1: entered allmulticast mode [ 809.434639][T14414] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 809.547197][T14418] vfat: Unknown parameter 'shorwin95' [ 810.096143][ T5999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.107844][ T5999] usb 3-1: Product: syz [ 810.112187][ T5999] usb 3-1: Manufacturer: syz [ 810.117251][ T5999] usb 3-1: SerialNumber: syz [ 810.124385][ T5999] usb 3-1: config 0 descriptor?? [ 810.137693][ T5999] uvcvideo 3-1:0.27: Found Unit with invalid ID 0 [ 810.364281][ T5999] uvcvideo 3-1:0.27: probe with driver uvcvideo failed with error -22 [ 810.412712][ T5999] usb 3-1: USB disconnect, device number 42 [ 811.407306][T14445] wg2 speed is unknown, defaulting to 1000 [ 811.416470][T14450] program syz.2.2281 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 813.502788][T14477] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2287'. [ 815.074699][ T5943] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 815.256880][ T5943] usb 3-1: config 0 has an invalid interface number: 27 but max is 0 [ 815.281664][ T5943] usb 3-1: config 0 has no interface number 0 [ 815.393082][ T5943] usb 3-1: New USB device found, idVendor=174f, idProduct=8a33, bcdDevice=17.05 [ 815.402606][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.423329][ T5943] usb 3-1: Product: syz [ 815.617701][ T5943] usb 3-1: Manufacturer: syz [ 815.637299][ T5943] usb 3-1: SerialNumber: syz [ 815.665253][ T5943] usb 3-1: config 0 descriptor?? [ 815.681130][ T5943] uvcvideo 3-1:0.27: Found Unit with invalid ID 0 [ 815.832529][T14503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2294'. [ 815.857559][T14503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2294'. [ 815.880165][ T5943] uvcvideo 3-1:0.27: probe with driver uvcvideo failed with error -22 [ 815.913422][ T5943] usb 3-1: USB disconnect, device number 43 [ 816.054930][T14509] netlink: 'syz.1.2297': attribute type 1 has an invalid length. [ 816.120542][T14509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 816.176592][T14509] bond2: (slave dummy0): making interface the new active one [ 816.188685][T14509] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 816.806723][T10258] IPVS: starting estimator thread 0... [ 817.413800][T14525] IPVS: using max 49 ests per chain, 117600 per kthread [ 819.077463][T14536] wg2 speed is unknown, defaulting to 1000 [ 819.547913][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2307'. [ 819.646187][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2307'. [ 819.974607][ T5951] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 820.144837][ T5887] usb 3-1: new low-speed USB device number 44 using dummy_hcd [ 820.173392][ T5951] usb 6-1: config 0 has an invalid interface number: 27 but max is 0 [ 820.216674][ T5951] usb 6-1: config 0 has no interface number 0 [ 820.237595][ T5951] usb 6-1: New USB device found, idVendor=174f, idProduct=8a33, bcdDevice=17.05 [ 820.260209][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.294195][ T5951] usb 6-1: Product: syz [ 820.309040][ T5951] usb 6-1: Manufacturer: syz [ 820.313671][ T5951] usb 6-1: SerialNumber: syz [ 820.358406][ T5887] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 820.380196][ T5951] usb 6-1: config 0 descriptor?? [ 820.388219][ T5887] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 820.428494][ T5951] uvcvideo 6-1:0.27: Found Unit with invalid ID 0 [ 820.437322][ T5887] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 820.463195][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 820.498974][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 820.518578][ T5887] usb 3-1: language id specifier not provided by device, defaulting to English [ 820.549182][ T5887] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de [ 820.572261][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.607508][ T5887] usb 3-1: Manufacturer: 牢 [ 820.635242][ T5887] usb 3-1: config 0 descriptor?? [ 820.642953][ T5951] uvcvideo 6-1:0.27: probe with driver uvcvideo failed with error -22 [ 820.695929][ T5887] hub 3-1:0.0: bad descriptor, ignoring hub [ 820.711698][ T5951] usb 6-1: USB disconnect, device number 31 [ 820.717868][ T5887] hub 3-1:0.0: probe with driver hub failed with error -5 [ 820.768771][ T5887] input: 牢 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input39 [ 820.891792][T14578] FAULT_INJECTION: forcing a failure. [ 820.891792][T14578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 820.905070][T14578] CPU: 0 UID: 0 PID: 14578 Comm: syz.0.2311 Not tainted syzkaller #0 PREEMPT(full) [ 820.905095][T14578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 820.905107][T14578] Call Trace: [ 820.905115][T14578] [ 820.905123][T14578] dump_stack_lvl+0x189/0x250 [ 820.905150][T14578] ? __pfx____ratelimit+0x10/0x10 [ 820.905171][T14578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 820.905192][T14578] ? __pfx__printk+0x10/0x10 [ 820.905216][T14578] ? __might_fault+0xb0/0x130 [ 820.905251][T14578] should_fail_ex+0x414/0x560 [ 820.905278][T14578] _copy_from_user+0x2d/0xb0 [ 820.905298][T14578] video_usercopy+0x346/0x1450 [ 820.905332][T14578] ? __pfx___video_do_ioctl+0x10/0x10 [ 820.905355][T14578] ? __pfx_video_usercopy+0x10/0x10 [ 820.905394][T14578] ? __fget_files+0x3a0/0x420 [ 820.905416][T14578] v4l2_ioctl+0x18d/0x1e0 [ 820.905438][T14578] ? __pfx_v4l2_ioctl+0x10/0x10 [ 820.905460][T14578] __se_sys_ioctl+0xfc/0x170 [ 820.905485][T14578] do_syscall_64+0xfa/0xfa0 [ 820.905505][T14578] ? lockdep_hardirqs_on+0x9c/0x150 [ 820.905524][T14578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.905541][T14578] ? clear_bhb_loop+0x60/0xb0 [ 820.905562][T14578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.905579][T14578] RIP: 0033:0x7f32bb38eec9 [ 820.905595][T14578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.905611][T14578] RSP: 002b:00007f32bc141038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 820.905630][T14578] RAX: ffffffffffffffda RBX: 00007f32bb5e6180 RCX: 00007f32bb38eec9 [ 820.905644][T14578] RDX: 0000200000000080 RSI: 000000004020565a RDI: 0000000000000007 [ 820.905656][T14578] RBP: 00007f32bc141090 R08: 0000000000000000 R09: 0000000000000000 [ 820.905667][T14578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.905678][T14578] R13: 00007f32bb5e6218 R14: 00007f32bb5e6180 R15: 00007fffacaa6b98 [ 820.905709][T14578] [ 821.139576][ T10] usb 3-1: USB disconnect, device number 44 [ 821.412569][T14588] macsec2: entered promiscuous mode [ 821.418029][T14588] macsec2: entered allmulticast mode [ 821.536821][T14595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2317'. [ 821.711439][T14589] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 822.153662][T14589] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 822.643290][T14617] wg2 speed is unknown, defaulting to 1000 [ 823.816380][T10258] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 824.026590][T10258] usb 3-1: Using ep0 maxpacket: 32 [ 824.037630][T10258] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 824.053804][T10258] usb 3-1: config 0 has no interface number 0 [ 824.064686][T10258] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 824.109674][T10258] usb 3-1: config 0 interface 85 has no altsetting 0 [ 824.140070][T10258] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 824.170260][T10258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.233411][T10258] usb 3-1: Product: syz [ 824.242569][T10258] usb 3-1: Manufacturer: syz [ 824.254553][T10258] usb 3-1: SerialNumber: syz [ 824.708607][T10258] usb 3-1: config 0 descriptor?? [ 824.990946][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 824.990962][ T30] audit: type=1326 audit(1758556759.889:3832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14655 comm="syz.1.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 825.019765][ C1] vkms_vblank_simulate: vblank timer overrun [ 825.663092][T14662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2332'. [ 825.689295][ T30] audit: type=1326 audit(1758556759.889:3833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14655 comm="syz.1.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 825.740347][ T30] audit: type=1326 audit(1758556759.899:3834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14655 comm="syz.1.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 825.816200][ T30] audit: type=1326 audit(1758556759.899:3835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14655 comm="syz.1.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 825.838651][ C1] vkms_vblank_simulate: vblank timer overrun [ 825.852190][T10258] appletouch 3-1:0.85: Geyser mode initialized. [ 826.488381][T10258] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input40 [ 826.500143][ T30] audit: type=1326 audit(1758556759.899:3836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14655 comm="syz.1.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 826.532879][ T30] audit: type=1326 audit(1758556759.899:3837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14655 comm="syz.1.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 826.555221][ C1] vkms_vblank_simulate: vblank timer overrun [ 826.571318][ T30] audit: type=1326 audit(1758556759.899:3838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14655 comm="syz.1.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 826.579130][ C0] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 826.599089][ T30] audit: type=1326 audit(1758556759.899:3839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14655 comm="syz.1.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 826.709125][T10258] usb 3-1: USB disconnect, device number 45 [ 826.742932][ T30] audit: type=1326 audit(1758556759.909:3840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14655 comm="syz.1.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 826.766810][ T30] audit: type=1326 audit(1758556759.909:3841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14655 comm="syz.1.2331" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 826.866120][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b4ce800: rx timeout, send abort [ 826.882118][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b4cfc00: rx timeout, send abort [ 826.944403][T10258] appletouch 3-1:0.85: input: appletouch disconnected [ 827.376070][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b4ce800: abort rx timeout. Force session deactivation [ 827.390549][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b4cfc00: abort rx timeout. Force session deactivation [ 828.026191][T14690] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2341'. [ 828.124818][ T24] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 828.179996][T10258] kernel read not supported for file /1357/attr/prev (pid: 10258 comm: kworker/0:3) [ 828.306372][ T24] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 828.315872][ T24] usb 3-1: config 0 has no interface number 0 [ 828.323916][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 828.338244][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.346456][ T24] usb 3-1: Product: syz [ 828.350841][ T24] usb 3-1: Manufacturer: syz [ 828.357152][ T24] usb 3-1: SerialNumber: syz [ 828.376558][ T24] usb 3-1: config 0 descriptor?? [ 828.602735][ T24] uvcvideo 3-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 828.618679][ T24] uvcvideo 3-1:0.64: No valid video chain found. [ 828.644069][ T24] usb 3-1: USB disconnect, device number 46 [ 828.881608][T14705] overlayfs: missing 'workdir' [ 829.651641][T10258] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 829.671582][T10520] block nbd1: Possible stuck request ffff888025887000: control (read@0,1024B). Runtime 300 seconds [ 829.683195][T10520] block nbd1: Possible stuck request ffff8880258871c0: control (read@1024,1024B). Runtime 300 seconds [ 829.694678][T10520] block nbd1: Possible stuck request ffff888025887380: control (read@2048,1024B). Runtime 300 seconds [ 829.714684][T10520] block nbd1: Possible stuck request ffff888025887540: control (read@3072,1024B). Runtime 300 seconds [ 829.906315][T10258] usb 6-1: Using ep0 maxpacket: 32 [ 829.915073][T10258] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.946185][T10258] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 829.955556][T10258] usb 6-1: New USB device found, idVendor=0463, idProduct=4e05, bcdDevice= 0.00 [ 829.966882][T10258] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.982688][T10258] usb 6-1: config 0 descriptor?? [ 830.144584][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 830.284759][ T5943] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 830.298602][ T10] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 830.307832][ T10] usb 2-1: config 0 has no interface number 0 [ 830.321646][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 830.331328][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.339487][ T10] usb 2-1: Product: syz [ 830.344175][ T10] usb 2-1: Manufacturer: syz [ 830.349004][ T10] usb 2-1: SerialNumber: syz [ 830.356851][ T10] usb 2-1: config 0 descriptor?? [ 830.447699][ T5943] usb 3-1: Using ep0 maxpacket: 32 [ 830.455380][ T5943] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 830.466150][ T5943] usb 3-1: config 0 has no interface number 0 [ 830.472399][ T5943] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 830.488585][ T5943] usb 3-1: config 0 interface 85 has no altsetting 0 [ 830.503340][ T5943] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 830.514705][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.522743][ T5943] usb 3-1: Product: syz [ 830.527221][ T5943] usb 3-1: Manufacturer: syz [ 830.531840][ T5943] usb 3-1: SerialNumber: syz [ 830.541329][ T5943] usb 3-1: config 0 descriptor?? [ 830.596253][ T10] uvcvideo 2-1:0.64: Found Unit with invalid ID 0 [ 830.605947][ T10] uvcvideo 2-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 830.613325][ T10] uvcvideo 2-1:0.64: No valid video chain found. [ 830.624382][ T10] usb 2-1: USB disconnect, device number 48 [ 830.681230][T14723] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 830.691350][T14723] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 830.700000][T14723] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 831.157987][ T5943] appletouch 3-1:0.85: Geyser mode initialized. [ 831.207131][ T5943] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input41 [ 831.361956][ T5943] usb 3-1: USB disconnect, device number 47 [ 831.408623][ T5943] appletouch 3-1:0.85: input: appletouch disconnected [ 831.484450][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056216000: rx timeout, send abort [ 831.492857][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888024bd6c00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 831.873985][T14741] veth1_macvtap: left promiscuous mode [ 831.992706][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056216000: abort rx timeout. Force session deactivation [ 833.257511][T14751] overlayfs: missing 'workdir' [ 833.709007][ T5943] usb 6-1: USB disconnect, device number 32 [ 835.404120][T14763] wg2 speed is unknown, defaulting to 1000 [ 835.444636][ T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 835.630703][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 835.643695][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 835.709574][ T24] usb 2-1: New USB device found, idVendor=17ef, idProduct=6004, bcdDevice= 0.00 [ 835.787481][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 835.996965][ T24] usb 2-1: config 0 descriptor?? [ 837.038468][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 837.047619][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 837.070680][ T24] usb 2-1: USB disconnect, device number 49 [ 837.120264][T14784] wg2 speed is unknown, defaulting to 1000 [ 837.364630][ T5943] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 837.578257][ T5943] usb 6-1: Using ep0 maxpacket: 32 [ 837.591658][ T5943] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 837.609358][ T5943] usb 6-1: config 0 has no interface number 0 [ 837.633803][ T5943] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 837.669660][ T5943] usb 6-1: config 0 interface 85 has no altsetting 0 [ 837.702186][ T5943] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 837.731041][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.744373][ T5943] usb 6-1: Product: syz [ 837.751106][ T5943] usb 6-1: Manufacturer: syz [ 837.756127][ T5943] usb 6-1: SerialNumber: syz [ 837.921462][ T5943] usb 6-1: config 0 descriptor?? [ 838.504944][T10258] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 838.674433][T10258] usb 3-1: Using ep0 maxpacket: 32 [ 838.689019][ T5943] appletouch 6-1:0.85: Failed to read mode from device. [ 838.697137][ T5943] appletouch 6-1:0.85: probe with driver appletouch failed with error -5 [ 838.739776][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 838.742058][T10258] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 838.753194][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 838.768271][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 838.780925][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 838.788531][ C1] raw-gadget.0 gadget.5: ignoring, device is not running [ 838.797475][T10258] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 838.806791][T10258] usb 3-1: New USB device found, idVendor=0463, idProduct=4e05, bcdDevice= 0.00 [ 838.815992][T10258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.819454][ T5943] usb 6-1: USB disconnect, device number 33 [ 838.861204][T10258] usb 3-1: config 0 descriptor?? [ 839.353804][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 839.353820][ T30] audit: type=1326 audit(1758556774.249:3893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 839.386650][ T30] audit: type=1326 audit(1758556774.249:3894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 839.411877][ T30] audit: type=1326 audit(1758556774.249:3895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 840.152578][ T30] audit: type=1326 audit(1758556774.249:3896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 840.184733][ T30] audit: type=1326 audit(1758556774.249:3897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 840.342269][ T30] audit: type=1326 audit(1758556774.249:3898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 840.388152][ T30] audit: type=1326 audit(1758556774.249:3899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 840.411964][ T30] audit: type=1326 audit(1758556774.249:3900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 840.562669][ T30] audit: type=1326 audit(1758556774.249:3901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 840.963865][ T30] audit: type=1326 audit(1758556774.249:3902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14817 comm="syz.1.2374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 841.038524][ T5928] usb 3-1: USB disconnect, device number 48 [ 841.154387][T14832] wg2 speed is unknown, defaulting to 1000 [ 841.206356][T14834] FAULT_INJECTION: forcing a failure. [ 841.206356][T14834] name failslab, interval 1, probability 0, space 0, times 0 [ 841.240571][T14834] CPU: 0 UID: 0 PID: 14834 Comm: syz.1.2376 Not tainted syzkaller #0 PREEMPT(full) [ 841.240598][T14834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 841.240610][T14834] Call Trace: [ 841.240617][T14834] [ 841.240625][T14834] dump_stack_lvl+0x189/0x250 [ 841.240652][T14834] ? __pfx____ratelimit+0x10/0x10 [ 841.240672][T14834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 841.240692][T14834] ? __pfx__printk+0x10/0x10 [ 841.240720][T14834] ? __pfx___might_resched+0x10/0x10 [ 841.240742][T14834] ? fs_reclaim_acquire+0x7d/0x100 [ 841.240766][T14834] should_fail_ex+0x414/0x560 [ 841.240799][T14834] should_failslab+0xa8/0x100 [ 841.240824][T14834] kmem_cache_alloc_noprof+0x74/0x6e0 [ 841.240848][T14834] ? vm_area_alloc+0x24/0x140 [ 841.240871][T14834] vm_area_alloc+0x24/0x140 [ 841.240889][T14834] mmap_region+0xddf/0x1c70 [ 841.240920][T14834] ? __lock_acquire+0xab9/0xd20 [ 841.240949][T14834] ? __pfx_mmap_region+0x10/0x10 [ 841.241048][T14834] ? mm_get_unmapped_area+0xa7/0xd0 [ 841.241086][T14834] ? bpf_lsm_mmap_addr+0x9/0x20 [ 841.241105][T14834] ? security_mmap_addr+0x71/0x270 [ 841.241133][T14834] do_mmap+0xc45/0x10d0 [ 841.241167][T14834] ? __pfx_do_mmap+0x10/0x10 [ 841.241186][T14834] ? down_write_killable+0x178/0x230 [ 841.241209][T14834] ? __pfx_vfs_write+0x10/0x10 [ 841.241232][T14834] ? __pfx_down_write_killable+0x10/0x10 [ 841.241255][T14834] ? apparmor_mmap_file+0xc4/0xe0 [ 841.241278][T14834] vm_mmap_pgoff+0x2a6/0x4d0 [ 841.241308][T14834] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 841.241326][T14834] ? ksys_write+0x22a/0x250 [ 841.241351][T14834] ? __pfx_ksys_write+0x10/0x10 [ 841.241374][T14834] ? ksys_mmap_pgoff+0xf4/0x760 [ 841.241395][T14834] ? __x64_sys_mmap+0x7f/0x140 [ 841.241422][T14834] do_syscall_64+0xfa/0xfa0 [ 841.241441][T14834] ? lockdep_hardirqs_on+0x9c/0x150 [ 841.241460][T14834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.241476][T14834] ? clear_bhb_loop+0x60/0xb0 [ 841.241497][T14834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.241514][T14834] RIP: 0033:0x7f0b0458eec9 [ 841.241530][T14834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 841.241545][T14834] RSP: 002b:00007f0b05506038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 841.241565][T14834] RAX: ffffffffffffffda RBX: 00007f0b047e5fa0 RCX: 00007f0b0458eec9 [ 841.241578][T14834] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000200000000000 [ 841.241590][T14834] RBP: 00007f0b05506090 R08: ffffffffffffffff R09: 0000000000000000 [ 841.241601][T14834] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000001 [ 841.241612][T14834] R13: 00007f0b047e6038 R14: 00007f0b047e5fa0 R15: 00007ffff7b01a48 [ 841.241644][T14834] [ 841.511881][ C0] vkms_vblank_simulate: vblank timer overrun [ 842.517712][T14848] trusted_key: encrypted_key: insufficient parameters specified [ 843.197445][T14845] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2380'. [ 843.278693][T14850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2382'. [ 843.774210][T14844] wg2 speed is unknown, defaulting to 1000 [ 844.378917][T14293] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 844.394694][T14293] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 844.414726][T14293] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 844.428217][T14293] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 844.436835][T14293] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 844.951499][T14868] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 845.075470][T14870] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 845.095978][T14870] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 845.427821][T14862] wg2 speed is unknown, defaulting to 1000 [ 845.860674][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 845.871948][T14898] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2388'. [ 845.956326][ T2974] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.066907][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 846.087197][ T9] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 846.103103][ T9] usb 1-1: config 0 has no interface number 0 [ 846.113622][ T9] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 846.138030][ T9] usb 1-1: config 0 interface 85 has no altsetting 0 [ 846.303757][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 846.324648][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.324844][ T2974] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.354734][ T9] usb 1-1: Product: syz [ 846.358927][ T9] usb 1-1: Manufacturer: syz [ 846.363517][ T9] usb 1-1: SerialNumber: syz [ 846.388221][ T9] usb 1-1: config 0 descriptor?? [ 846.504747][T14293] Bluetooth: hci5: command tx timeout [ 846.554027][T14903] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2389'. [ 846.688142][ T2974] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.819342][T14904] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2389'. [ 846.917321][ T2974] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.039614][ T9] appletouch 1-1:0.85: Geyser mode initialized. [ 847.068665][ T9] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input43 [ 847.202030][T14912] vfat: Unknown parameter 'shorwin95' [ 847.804109][ T9] usb 1-1: USB disconnect, device number 60 [ 847.897472][ T9] appletouch 1-1:0.85: input: appletouch disconnected [ 848.042454][T14919] vfat: Unknown parameter 'shorwin95' [ 848.585636][T14293] Bluetooth: hci5: command tx timeout [ 849.044723][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 849.241509][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 849.301087][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.359231][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 849.390791][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 849.503724][ T9] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 849.543819][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.608265][ T9] usb 1-1: config 0 descriptor?? [ 850.069995][ T9] shield 0003:0955:7214.0010: item fetching failed at offset 4/5 [ 850.089314][ T9] shield 0003:0955:7214.0010: Parse failed [ 850.127825][ T9] shield 0003:0955:7214.0010: probe with driver shield failed with error -22 [ 850.665275][T14293] Bluetooth: hci5: command tx timeout [ 852.065141][ T2974] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 852.116501][ T2974] bond0 (unregistering): (slave team0): Releasing backup interface [ 852.306645][ T2974] bond0 (unregistering): Released all slaves [ 852.507929][T14862] chnl_net:caif_netlink_parms(): no params data found [ 852.545294][ T9] usb 1-1: USB disconnect, device number 61 [ 852.745047][T14293] Bluetooth: hci5: command tx timeout [ 853.633627][T14964] wg2 speed is unknown, defaulting to 1000 [ 853.653921][ T2974] tipc: Left network mode [ 854.906604][T14862] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.913811][T14862] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.934425][T14862] bridge_slave_0: entered allmulticast mode [ 854.967058][T14862] bridge_slave_0: entered promiscuous mode [ 854.980201][T14985] wg2 speed is unknown, defaulting to 1000 [ 854.985294][T14862] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.014947][T14862] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.030820][T14862] bridge_slave_1: entered allmulticast mode [ 855.095729][T14862] bridge_slave_1: entered promiscuous mode [ 855.405665][ T2974] mac80211_hwsim hwsim10 wlan0 (unregistering): left allmulticast mode [ 855.733322][T14862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.767624][T14862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.029891][T14862] team0: Port device team_slave_0 added [ 856.066630][T14862] team0: Port device team_slave_1 added [ 856.181393][ T2974] hsr_slave_0: left promiscuous mode [ 856.197299][ T2974] hsr_slave_1: left promiscuous mode [ 856.222241][ T2974] veth1_macvtap: left promiscuous mode [ 856.228690][ T2974] veth0_macvtap: left promiscuous mode [ 856.235212][ T2974] veth1_vlan: left promiscuous mode [ 856.242262][ T2974] veth0_vlan: left promiscuous mode [ 856.515842][T15013] vfat: Unknown parameter 'shorwin95' [ 857.862388][T15017] bond0: option arp_validate: invalid value (18446744073491447809) [ 857.891602][T14862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 857.915898][T14862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.844274][T14862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.135713][T14862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.142853][T14862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.483487][T14862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.748933][T14862] hsr_slave_0: entered promiscuous mode [ 859.755642][T14862] hsr_slave_1: entered promiscuous mode [ 859.889973][T14862] debugfs: 'hsr0' already exists in 'hsr' [ 859.910199][T14862] Cannot create hsr debugfs directory [ 859.968494][T10520] block nbd1: Possible stuck request ffff888025887000: control (read@0,1024B). Runtime 330 seconds [ 859.980723][T10520] block nbd1: Possible stuck request ffff8880258871c0: control (read@1024,1024B). Runtime 330 seconds [ 859.993014][T10520] block nbd1: Possible stuck request ffff888025887380: control (read@2048,1024B). Runtime 330 seconds [ 860.006830][T10520] block nbd1: Possible stuck request ffff888025887540: control (read@3072,1024B). Runtime 330 seconds [ 860.048616][ T2974] IPVS: stop unused estimator thread 0... [ 862.825501][T15084] 9pnet_fd: Insufficient options for proto=fd [ 862.886199][T15085] netlink: 'syz.5.2418': attribute type 10 has an invalid length. [ 863.171696][T15085] team0: Port device wlan1 added [ 863.248725][T15088] wg2 speed is unknown, defaulting to 1000 [ 863.304640][ T5951] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 864.334655][ T9] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 864.706606][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 864.991058][ T9] usb 6-1: config 0 has an invalid interface number: 202 but max is 1 [ 864.994622][ T5951] usb 1-1: Using ep0 maxpacket: 16 [ 865.000587][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.023043][ T9] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 865.032109][ T9] usb 6-1: config 0 has no interface number 0 [ 865.038296][ T9] usb 6-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 865.054672][ T9] usb 6-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 865.067343][ T9] usb 6-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 865.080938][ T9] usb 6-1: config 0 interface 202 has no altsetting 0 [ 865.088093][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.092141][ T9] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 865.112184][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.123044][ T5951] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 865.162148][ T5951] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 865.174655][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.182711][ T9] usb 6-1: Product: syz [ 865.193951][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.202180][ T9] usb 6-1: Manufacturer: syz [ 865.213094][ T5951] usb 1-1: config 0 descriptor?? [ 865.267865][T15095] wg2 speed is unknown, defaulting to 1000 [ 865.274679][ T9] usb 6-1: SerialNumber: syz [ 865.350519][ T9] usb 6-1: config 0 descriptor?? [ 865.400425][ T9] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 865.648049][ T5951] shield 0003:0955:7214.0011: item fetching failed at offset 4/5 [ 865.675265][ T5951] shield 0003:0955:7214.0011: Parse failed [ 865.691480][ T5951] shield 0003:0955:7214.0011: probe with driver shield failed with error -22 [ 865.733249][T15112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.764183][T15112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.808335][T15112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.878316][T15112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.023177][ T9] usb 1-1: USB disconnect, device number 62 [ 866.458827][ T13] usb 6-1: Failed to submit usb control message: -110 [ 866.524671][ T13] usb 6-1: unable to send the bmi data to the device: -110 [ 866.531941][ T13] usb 6-1: unable to get target info from device [ 866.557960][ T13] usb 6-1: could not get target info (-110) [ 866.563946][ T13] usb 6-1: could not probe fw (-110) [ 867.049337][T15094] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 867.118671][T14862] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 867.482713][T14862] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 867.812841][T14862] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 867.876034][T14312] usb 6-1: USB disconnect, device number 34 [ 867.892770][T14862] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 868.002935][T15151] fuse: Bad value for 'fd' [ 868.317999][T15151] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 868.325775][T15151] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 868.333983][T15151] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 868.341748][T15151] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 868.881161][T15169] vfat: Unknown parameter 'shorwin95' [ 869.461871][T14862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.542996][T14862] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.188853][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.295279][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.302407][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.658023][T15180] wg2 speed is unknown, defaulting to 1000 [ 870.723733][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.731007][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 871.104914][ T5928] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 871.471101][ T5928] usb 2-1: Using ep0 maxpacket: 16 [ 871.525765][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.569423][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.613038][ T5928] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 871.636429][ T5928] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 871.664665][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.725656][ T5928] usb 2-1: config 0 descriptor?? [ 872.090502][T14862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.160172][ T5928] shield 0003:0955:7214.0012: item fetching failed at offset 4/5 [ 872.185992][ T5928] shield 0003:0955:7214.0012: Parse failed [ 872.204758][ T5928] shield 0003:0955:7214.0012: probe with driver shield failed with error -22 [ 873.070587][ T5928] usb 2-1: USB disconnect, device number 50 [ 873.554891][ T5951] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 873.849395][ T5951] usb 3-1: Using ep0 maxpacket: 32 [ 873.858500][ T5951] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 873.868307][ T5951] usb 3-1: config 0 has no interface number 0 [ 873.882664][ T5951] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 873.922999][ T5951] usb 3-1: config 0 interface 85 has no altsetting 0 [ 874.019050][ T5951] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 874.031755][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.061969][ T5951] usb 3-1: Product: syz [ 874.082513][ T5951] usb 3-1: Manufacturer: syz [ 874.193837][ T5951] usb 3-1: SerialNumber: syz [ 874.238099][T14862] veth0_vlan: entered promiscuous mode [ 874.253166][ T5951] usb 3-1: config 0 descriptor?? [ 874.292961][T14862] veth1_vlan: entered promiscuous mode [ 874.427611][T14862] veth0_macvtap: entered promiscuous mode [ 874.440504][T14862] veth1_macvtap: entered promiscuous mode [ 874.631635][T14862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 874.689250][T14862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 874.740436][ T6280] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.852496][ T6280] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.894307][ T5951] appletouch 3-1:0.85: Geyser mode initialized. [ 874.950124][ T6280] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 874.983396][ T5951] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input44 [ 875.040891][ T6280] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 875.121648][ T5951] usb 3-1: USB disconnect, device number 49 [ 875.216056][ T10] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 875.228708][T10258] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 875.268012][ T5951] appletouch 3-1:0.85: input: appletouch disconnected [ 875.279054][ T7634] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 875.309375][ T7634] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 875.386653][ T10] usb 1-1: config 0 has an invalid interface number: 27 but max is 0 [ 875.407291][ T10] usb 1-1: config 0 has no interface number 0 [ 875.414710][T10258] usb 2-1: Using ep0 maxpacket: 16 [ 875.460192][T15252] fuse: Bad value for 'fd' [ 875.780959][T15252] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 875.789166][T15252] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 875.797465][T15252] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 875.805220][T15252] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 875.899949][T15245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.041333][ T10] usb 1-1: New USB device found, idVendor=174f, idProduct=8a33, bcdDevice=17.05 [ 876.051525][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.071072][T15245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.079233][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 876.120179][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 876.135113][ T10] usb 1-1: Product: syz [ 876.148106][ T10] usb 1-1: Manufacturer: syz [ 876.374863][ T10] usb 1-1: SerialNumber: syz [ 876.391306][ T10] usb 1-1: config 0 descriptor?? [ 876.568196][ T10] uvcvideo 1-1:0.27: Found Unit with invalid ID 0 [ 877.131499][ T10] uvcvideo 1-1:0.27: probe with driver uvcvideo failed with error -22 [ 877.152251][ T10] usb 1-1: USB disconnect, device number 63 [ 877.412134][T15266] vfat: Unknown parameter 'shorwin95' [ 878.072877][T15273] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 878.208922][T15274] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 879.155646][T15282] wg2 speed is unknown, defaulting to 1000 [ 879.463916][T15284] FAULT_INJECTION: forcing a failure. [ 879.463916][T15284] name failslab, interval 1, probability 0, space 0, times 0 [ 879.516265][T15284] CPU: 0 UID: 0 PID: 15284 Comm: syz.0.2446 Not tainted syzkaller #0 PREEMPT(full) [ 879.516298][T15284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 879.516312][T15284] Call Trace: [ 879.516320][T15284] [ 879.516329][T15284] dump_stack_lvl+0x189/0x250 [ 879.516356][T15284] ? __pfx____ratelimit+0x10/0x10 [ 879.516377][T15284] ? __pfx_dump_stack_lvl+0x10/0x10 [ 879.516397][T15284] ? __pfx__printk+0x10/0x10 [ 879.516424][T15284] ? __pfx___might_resched+0x10/0x10 [ 879.516448][T15284] ? fs_reclaim_acquire+0x7d/0x100 [ 879.516471][T15284] should_fail_ex+0x414/0x560 [ 879.516500][T15284] should_failslab+0xa8/0x100 [ 879.516521][T15284] __kmalloc_cache_noprof+0x6f/0x6f0 [ 879.516544][T15284] ? trace_contention_end+0x39/0x120 [ 879.516560][T15284] ? vhost_task_create+0xf8/0x320 [ 879.516586][T15284] vhost_task_create+0xf8/0x320 [ 879.516604][T15284] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 879.516624][T15284] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 879.516644][T15284] ? __pfx_vhost_task_create+0x10/0x10 [ 879.516672][T15284] ? __pfx_vhost_task_fn+0x10/0x10 [ 879.516711][T15284] kvm_mmu_post_init_vm+0x14c/0x300 [ 879.516736][T15284] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 879.516764][T15284] ? __mutex_trylock_common+0x153/0x260 [ 879.516784][T15284] ? __pfx___mutex_trylock_common+0x10/0x10 [ 879.516802][T15284] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 879.516826][T15284] ? rcu_is_watching+0x15/0xb0 [ 879.516851][T15284] ? trace_contention_end+0x39/0x120 [ 879.516868][T15284] ? look_up_lock_class+0x74/0x170 [ 879.516890][T15284] ? register_lock_class+0x51/0x320 [ 879.516918][T15284] ? __lock_acquire+0xab9/0xd20 [ 879.516971][T15284] kvm_vcpu_ioctl+0x95c/0xe90 [ 879.516999][T15284] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 879.517042][T15284] ? __fget_files+0x2a/0x420 [ 879.517065][T15284] ? __fget_files+0x3a0/0x420 [ 879.517081][T15284] ? __fget_files+0x2a/0x420 [ 879.517103][T15284] ? bpf_lsm_file_ioctl+0x9/0x20 [ 879.517123][T15284] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 879.517143][T15284] __se_sys_ioctl+0xfc/0x170 [ 879.517169][T15284] do_syscall_64+0xfa/0xfa0 [ 879.517188][T15284] ? lockdep_hardirqs_on+0x9c/0x150 [ 879.517207][T15284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.517224][T15284] ? clear_bhb_loop+0x60/0xb0 [ 879.517245][T15284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.517262][T15284] RIP: 0033:0x7f32bb38eec9 [ 879.517279][T15284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 879.517301][T15284] RSP: 002b:00007f32bc162038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 879.517321][T15284] RAX: ffffffffffffffda RBX: 00007f32bb5e6090 RCX: 00007f32bb38eec9 [ 879.517335][T15284] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 879.517346][T15284] RBP: 00007f32bc162090 R08: 0000000000000000 R09: 0000000000000000 [ 879.517357][T15284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 879.517368][T15284] R13: 00007f32bb5e6128 R14: 00007f32bb5e6090 R15: 00007fffacaa6b98 [ 879.517401][T15284] [ 880.505216][T10258] usb 2-1: unable to get BOS descriptor or descriptor too short [ 880.534004][T10258] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 880.545315][T15297] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 880.553207][T15297] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 880.567244][T15297] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 880.577330][T10258] usb 2-1: chopping to 0 config(s) [ 880.588260][T10258] usb 2-1: can't read configurations, error -32 [ 880.804602][T10258] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 880.804602][ T5951] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 880.934615][T10258] usb 2-1: device descriptor read/64, error -32 [ 881.014448][ T5951] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 881.023087][ T5951] usb 1-1: config 0 has no interface number 0 [ 881.044819][ T5951] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 881.044859][T10258] usb usb2-port1: attempt power cycle [ 881.056086][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.074559][ T5951] usb 1-1: Product: syz [ 881.078899][ T5951] usb 1-1: Manufacturer: syz [ 881.083618][ T5951] usb 1-1: SerialNumber: syz [ 881.129933][ T5951] usb 1-1: config 0 descriptor?? [ 882.106383][ T5951] uvcvideo 1-1:0.64: Found Unit with invalid ID 0 [ 882.113623][ T5951] uvcvideo 1-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 882.142722][ T5951] uvcvideo 1-1:0.64: No valid video chain found. [ 882.167952][ T5951] usb 1-1: USB disconnect, device number 64 [ 882.178130][ T7634] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 882.451666][T15305] wg2 speed is unknown, defaulting to 1000 [ 883.412395][T15325] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 883.884632][ T5887] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 884.071186][ T5887] usb 5-1: config 0 has an invalid interface number: 27 but max is 0 [ 884.081248][ T5887] usb 5-1: config 0 has no interface number 0 [ 884.109350][ T5887] usb 5-1: New USB device found, idVendor=174f, idProduct=8a33, bcdDevice=17.05 [ 884.124536][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 884.132566][ T5887] usb 5-1: Product: syz [ 884.159080][ T5887] usb 5-1: Manufacturer: syz [ 884.163719][ T5887] usb 5-1: SerialNumber: syz [ 884.240998][ T5887] usb 5-1: config 0 descriptor?? [ 884.302682][T15341] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2460'. [ 884.350313][ T5887] uvcvideo 5-1:0.27: Found Unit with invalid ID 0 [ 884.417433][T15341] FAULT_INJECTION: forcing a failure. [ 884.417433][T15341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 884.469572][T15341] CPU: 1 UID: 0 PID: 15341 Comm: syz.2.2460 Not tainted syzkaller #0 PREEMPT(full) [ 884.469599][T15341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 884.469609][T15341] Call Trace: [ 884.469617][T15341] [ 884.469625][T15341] dump_stack_lvl+0x189/0x250 [ 884.469650][T15341] ? __pfx____ratelimit+0x10/0x10 [ 884.469669][T15341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 884.469688][T15341] ? __pfx__printk+0x10/0x10 [ 884.469709][T15341] ? __might_fault+0xb0/0x130 [ 884.469741][T15341] should_fail_ex+0x414/0x560 [ 884.469766][T15341] _copy_from_user+0x2d/0xb0 [ 884.469785][T15341] ___sys_sendmsg+0x158/0x2a0 [ 884.469808][T15341] ? __pfx____sys_sendmsg+0x10/0x10 [ 884.469861][T15341] ? __fget_files+0x2a/0x420 [ 884.469878][T15341] ? __fget_files+0x3a0/0x420 [ 884.469903][T15341] __sys_sendmmsg+0x227/0x430 [ 884.469928][T15341] ? __pfx___sys_sendmmsg+0x10/0x10 [ 884.469956][T15341] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 884.470001][T15341] ? ksys_write+0x22a/0x250 [ 884.470027][T15341] ? __pfx_ksys_write+0x10/0x10 [ 884.470055][T15341] __x64_sys_sendmmsg+0xa0/0xc0 [ 884.470078][T15341] do_syscall_64+0xfa/0xfa0 [ 884.470097][T15341] ? lockdep_hardirqs_on+0x9c/0x150 [ 884.470116][T15341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.470133][T15341] ? clear_bhb_loop+0x60/0xb0 [ 884.470154][T15341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.470171][T15341] RIP: 0033:0x7f5722d8eec9 [ 884.470188][T15341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 884.470203][T15341] RSP: 002b:00007f5723c76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 884.470223][T15341] RAX: ffffffffffffffda RBX: 00007f5722fe5fa0 RCX: 00007f5722d8eec9 [ 884.470236][T15341] RDX: 0400000000000181 RSI: 00002000000030c0 RDI: 0000000000000005 [ 884.470249][T15341] RBP: 00007f5723c76090 R08: 0000000000000000 R09: 0000000000000000 [ 884.470260][T15341] R10: 9200000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.470272][T15341] R13: 00007f5722fe6038 R14: 00007f5722fe5fa0 R15: 00007ffc66211cd8 [ 884.470303][T15341] [ 884.737686][ T5887] uvcvideo 5-1:0.27: probe with driver uvcvideo failed with error -22 [ 884.747968][ T5887] usb 5-1: USB disconnect, device number 5 [ 884.896749][T15347] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 884.915025][T15347] FAT-fs (loop1): unable to read boot sector [ 885.786046][T10258] libceph: connect (1)[c::]:6789 error -97 [ 885.918580][T10258] libceph: mon0 (1)[c::]:6789 connect error [ 886.209758][T10258] libceph: connect (1)[c::]:6789 error -97 [ 886.246872][ T5951] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 886.396983][T10258] libceph: mon0 (1)[c::]:6789 connect error [ 886.588455][ T5951] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 886.610416][ T5951] usb 1-1: config 0 has no interface number 0 [ 886.627045][ T5951] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 886.654781][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.673396][ T5951] usb 1-1: Product: syz [ 886.678992][T15351] ceph: No mds server is up or the cluster is laggy [ 886.688029][ T5951] usb 1-1: Manufacturer: syz [ 886.692646][ T5951] usb 1-1: SerialNumber: syz [ 886.728619][ T5951] usb 1-1: config 0 descriptor?? [ 886.878255][T15370] erofs (device loop2): cannot find valid erofs superblock [ 886.927739][T15370] I/O error, dev loop2, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 886.950406][T15370] hfsplus: unable to find HFS+ superblock [ 887.200540][ T5951] uvcvideo 1-1:0.64: Found Unit with invalid ID 0 [ 887.299860][ T5951] uvcvideo 1-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 887.374157][ T5951] uvcvideo 1-1:0.64: No valid video chain found. [ 887.434807][T15358] fuse: Bad value for 'fd' [ 887.465376][ T5951] usb 1-1: USB disconnect, device number 65 [ 887.850691][T15381] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:4352 [ 887.889478][T15381] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 888.181652][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 888.181669][ T30] audit: type=1326 audit(1758556823.079:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz.4.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba158eec9 code=0x7ffc0000 [ 888.240453][ T30] audit: type=1326 audit(1758556823.129:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz.4.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba158eec9 code=0x7ffc0000 [ 888.913187][ T30] audit: type=1326 audit(1758556823.139:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz.4.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ba158eec9 code=0x7ffc0000 [ 888.957028][ T30] audit: type=1326 audit(1758556823.139:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz.4.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba158eec9 code=0x7ffc0000 [ 888.990181][ T30] audit: type=1326 audit(1758556823.139:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz.4.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba158eec9 code=0x7ffc0000 [ 889.013011][ T30] audit: type=1326 audit(1758556823.139:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz.4.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ba158eec9 code=0x7ffc0000 [ 889.050813][ T30] audit: type=1326 audit(1758556823.139:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz.4.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba158eec9 code=0x7ffc0000 [ 889.073300][ C0] vkms_vblank_simulate: vblank timer overrun [ 889.175030][ T30] audit: type=1326 audit(1758556823.139:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz.4.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba158eec9 code=0x7ffc0000 [ 889.641649][ T30] audit: type=1326 audit(1758556823.139:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz.4.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7ba158eec9 code=0x7ffc0000 [ 889.814627][ T30] audit: type=1326 audit(1758556823.139:3929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15390 comm="syz.4.2474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ba158eec9 code=0x7ffc0000 [ 890.032059][T10520] block nbd1: Possible stuck request ffff888025887000: control (read@0,1024B). Runtime 360 seconds [ 890.043050][T10520] block nbd1: Possible stuck request ffff8880258871c0: control (read@1024,1024B). Runtime 360 seconds [ 890.054463][T10520] block nbd1: Possible stuck request ffff888025887380: control (read@2048,1024B). Runtime 360 seconds [ 890.070631][T10520] block nbd1: Possible stuck request ffff888025887540: control (read@3072,1024B). Runtime 360 seconds [ 890.095701][T15411] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 890.123627][T15411] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 890.144863][ T5943] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 890.154245][T15411] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 890.279177][T15419] FAULT_INJECTION: forcing a failure. [ 890.279177][T15419] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.295413][T15419] CPU: 0 UID: 0 PID: 15419 Comm: syz.0.2482 Not tainted syzkaller #0 PREEMPT(full) [ 890.295438][T15419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 890.295448][T15419] Call Trace: [ 890.295453][T15419] [ 890.295458][T15419] dump_stack_lvl+0x189/0x250 [ 890.295475][T15419] ? __pfx____ratelimit+0x10/0x10 [ 890.295487][T15419] ? __pfx_dump_stack_lvl+0x10/0x10 [ 890.295499][T15419] ? __pfx__printk+0x10/0x10 [ 890.295513][T15419] ? __might_fault+0xb0/0x130 [ 890.295534][T15419] should_fail_ex+0x414/0x560 [ 890.295553][T15419] _copy_from_user+0x2d/0xb0 [ 890.295564][T15419] snd_seq_write+0x300/0x810 [ 890.295586][T15419] ? __pfx_snd_seq_write+0x10/0x10 [ 890.295600][T15419] ? bpf_lsm_file_permission+0x9/0x20 [ 890.295611][T15419] ? security_file_permission+0x75/0x290 [ 890.295623][T15419] ? rw_verify_area+0x255/0x4d0 [ 890.295640][T15419] vfs_writev+0x4b6/0x960 [ 890.295652][T15419] ? __pfx_snd_seq_write+0x10/0x10 [ 890.295667][T15419] ? __pfx_vfs_writev+0x10/0x10 [ 890.295686][T15419] ? __fget_files+0x2a/0x420 [ 890.295699][T15419] ? __fget_files+0x3a0/0x420 [ 890.295708][T15419] ? __fget_files+0x2a/0x420 [ 890.295722][T15419] do_writev+0x14d/0x2d0 [ 890.295735][T15419] ? __pfx_do_writev+0x10/0x10 [ 890.295747][T15419] ? do_syscall_64+0xbe/0xfa0 [ 890.295761][T15419] do_syscall_64+0xfa/0xfa0 [ 890.295771][T15419] ? lockdep_hardirqs_on+0x9c/0x150 [ 890.295782][T15419] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.295792][T15419] ? clear_bhb_loop+0x60/0xb0 [ 890.295804][T15419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.295813][T15419] RIP: 0033:0x7f32bb38eec9 [ 890.295823][T15419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 890.295831][T15419] RSP: 002b:00007f32bc183038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 890.295842][T15419] RAX: ffffffffffffffda RBX: 00007f32bb5e5fa0 RCX: 00007f32bb38eec9 [ 890.295850][T15419] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000003 [ 890.295856][T15419] RBP: 00007f32bc183090 R08: 0000000000000000 R09: 0000000000000000 [ 890.295862][T15419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.295867][T15419] R13: 00007f32bb5e6038 R14: 00007f32bb5e5fa0 R15: 00007fffacaa6b98 [ 890.295884][T15419] [ 890.304750][ T5943] usb 2-1: Using ep0 maxpacket: 16 [ 891.772736][ T5943] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 891.882888][ T5943] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 891.899114][ T5943] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 891.914604][ T5943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.924411][ T5943] usb 2-1: Product: syz [ 891.944957][ T5943] usb 2-1: Manufacturer: syz [ 891.949605][ T5943] usb 2-1: SerialNumber: syz [ 891.956418][T15431] FAULT_INJECTION: forcing a failure. [ 891.956418][T15431] name failslab, interval 1, probability 0, space 0, times 0 [ 892.410575][ T5943] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 892.414802][T15431] CPU: 0 UID: 0 PID: 15431 Comm: syz.0.2485 Not tainted syzkaller #0 PREEMPT(full) [ 892.414826][T15431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 892.414836][T15431] Call Trace: [ 892.414843][T15431] [ 892.414851][T15431] dump_stack_lvl+0x189/0x250 [ 892.414876][T15431] ? __pfx____ratelimit+0x10/0x10 [ 892.414896][T15431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 892.414915][T15431] ? __pfx__printk+0x10/0x10 [ 892.414942][T15431] ? __pfx___might_resched+0x10/0x10 [ 892.414970][T15431] should_fail_ex+0x414/0x560 [ 892.414996][T15431] should_failslab+0xa8/0x100 [ 892.415016][T15431] __kmalloc_noprof+0xcb/0x7f0 [ 892.415038][T15431] ? kfree+0x4d/0x6d0 [ 892.415055][T15431] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 892.415083][T15431] tomoyo_realpath_from_path+0xe3/0x5d0 [ 892.415106][T15431] ? tomoyo_domain+0xd9/0x130 [ 892.415133][T15431] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 892.415152][T15431] tomoyo_path_number_perm+0x1e8/0x5a0 [ 892.415198][T15431] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 892.415256][T15431] ? __fget_files+0x2a/0x420 [ 892.415276][T15431] ? __fget_files+0x3a0/0x420 [ 892.415291][T15431] ? __fget_files+0x2a/0x420 [ 892.415311][T15431] security_file_ioctl+0xcb/0x2d0 [ 892.415332][T15431] __se_sys_ioctl+0x47/0x170 [ 892.415356][T15431] do_syscall_64+0xfa/0xfa0 [ 892.415374][T15431] ? lockdep_hardirqs_on+0x9c/0x150 [ 892.415392][T15431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.415409][T15431] ? clear_bhb_loop+0x60/0xb0 [ 892.415428][T15431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.415444][T15431] RIP: 0033:0x7f32bb38eec9 [ 892.415460][T15431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 892.415473][T15431] RSP: 002b:00007f32bc183038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 892.415491][T15431] RAX: ffffffffffffffda RBX: 00007f32bb5e5fa0 RCX: 00007f32bb38eec9 [ 892.415504][T15431] RDX: 0000200000000000 RSI: 0000000000008937 RDI: 0000000000000004 [ 892.415515][T15431] RBP: 00007f32bc183090 R08: 0000000000000000 R09: 0000000000000000 [ 892.415526][T15431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.415536][T15431] R13: 00007f32bb5e6038 R14: 00007f32bb5e5fa0 R15: 00007fffacaa6b98 [ 892.415567][T15431] [ 892.415587][T15431] ERROR: Out of memory at tomoyo_realpath_from_path. [ 892.463009][ T5943] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 893.081925][ T5943] usb 2-1: USB disconnect, device number 54 [ 893.110706][T10569] udevd[10569]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 893.163935][T15440] tipc: Started in network mode [ 893.172328][T15440] tipc: Node identity 6edc684cbc8a, cluster identity 4711 [ 893.202575][T15440] tipc: Enabled bearer , priority 0 [ 893.215323][T15440] syzkaller0: entered promiscuous mode [ 893.221072][T15440] syzkaller0: entered allmulticast mode [ 893.253885][T15440] tipc: Resetting bearer [ 893.406567][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 893.406583][ T30] audit: type=1326 audit(1758556828.309:4011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15437 comm="syz.5.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856f58eec9 code=0x7ffc0000 [ 893.410051][T15456] FAULT_INJECTION: forcing a failure. [ 893.410051][T15456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 893.413206][ T30] audit: type=1326 audit(1758556828.309:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15437 comm="syz.5.2487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f856f58eec9 code=0x7ffc0000 [ 893.503097][T15456] CPU: 0 UID: 0 PID: 15456 Comm: syz.1.2493 Not tainted syzkaller #0 PREEMPT(full) [ 893.503121][T15456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 893.503132][T15456] Call Trace: [ 893.503148][T15456] [ 893.503155][T15456] dump_stack_lvl+0x189/0x250 [ 893.503181][T15456] ? __pfx____ratelimit+0x10/0x10 [ 893.503200][T15456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 893.503219][T15456] ? __pfx__printk+0x10/0x10 [ 893.503242][T15456] ? __might_fault+0xb0/0x130 [ 893.503276][T15456] should_fail_ex+0x414/0x560 [ 893.503303][T15456] _copy_from_user+0x2d/0xb0 [ 893.503322][T15456] iommufd_vfio_ioctl+0x1f8/0x12f0 [ 893.503342][T15456] ? kasan_quarantine_put+0xdd/0x220 [ 893.503365][T15456] ? lockdep_hardirqs_on+0x9c/0x150 [ 893.503384][T15456] ? __pfx_iommufd_vfio_ioctl+0x10/0x10 [ 893.503407][T15456] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 893.503430][T15456] ? do_vfs_ioctl+0xbe8/0x1430 [ 893.503448][T15456] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 893.503466][T15456] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 893.503507][T15456] iommufd_fops_ioctl+0x119/0x580 [ 893.503538][T15456] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 893.503569][T15456] ? __fget_files+0x2a/0x420 [ 893.503591][T15456] ? __fget_files+0x3a0/0x420 [ 893.503607][T15456] ? __fget_files+0x2a/0x420 [ 893.503627][T15456] ? bpf_lsm_file_ioctl+0x9/0x20 [ 893.503647][T15456] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 893.503671][T15456] __se_sys_ioctl+0xfc/0x170 [ 893.503696][T15456] do_syscall_64+0xfa/0xfa0 [ 893.503714][T15456] ? lockdep_hardirqs_on+0x9c/0x150 [ 893.503732][T15456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.503749][T15456] ? clear_bhb_loop+0x60/0xb0 [ 893.503770][T15456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.503786][T15456] RIP: 0033:0x7f0b0458eec9 [ 893.503802][T15456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 893.503818][T15456] RSP: 002b:00007f0b05506038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 893.503837][T15456] RAX: ffffffffffffffda RBX: 00007f0b047e5fa0 RCX: 00007f0b0458eec9 [ 893.503849][T15456] RDX: 0000200000000240 RSI: 0000000000003b70 RDI: 0000000000000003 [ 893.503861][T15456] RBP: 00007f0b05506090 R08: 0000000000000000 R09: 0000000000000000 [ 893.503872][T15456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 893.503883][T15456] R13: 00007f0b047e6038 R14: 00007f0b047e5fa0 R15: 00007ffff7b01a48 [ 893.503913][T15456] [ 893.745887][ C0] vkms_vblank_simulate: vblank timer overrun [ 893.814395][T15461] input: syz1 as /devices/virtual/input/input45 [ 893.820923][ T9] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 893.974596][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 893.994380][ T9] usb 1-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice=51.90 [ 894.003953][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.012653][T15261] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 894.020655][ T9] usb 1-1: Product: syz [ 894.025459][ T9] usb 1-1: Manufacturer: syz [ 894.030118][ T9] usb 1-1: SerialNumber: syz [ 894.266561][ T5943] tipc: Node number set to 3528878156 [ 894.588949][ T9] r8152-cfgselector 1-1: Unknown version 0x0000 [ 894.607197][ T9] r8152-cfgselector 1-1: config 0 descriptor?? [ 894.634865][T15261] usb 6-1: Using ep0 maxpacket: 32 [ 894.652486][T15261] usb 6-1: config 0 has an invalid interface number: 202 but max is 1 [ 894.682296][T15261] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 894.704421][T15261] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 894.730288][T15261] usb 6-1: config 0 has no interface number 0 [ 894.744396][T15261] usb 6-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 894.896844][T15261] usb 6-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 894.908667][T15261] usb 6-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 894.923741][T15261] usb 6-1: config 0 interface 202 has no altsetting 0 [ 894.938533][ T9] r8152-cfgselector 1-1: USB disconnect, device number 66 [ 894.962867][T15261] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 895.574666][T15261] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.583843][T15261] usb 6-1: Product: syz [ 895.588841][T15261] usb 6-1: Manufacturer: syz [ 895.593538][T15261] usb 6-1: SerialNumber: syz [ 895.602423][T15261] usb 6-1: config 0 descriptor?? [ 895.649596][T15439] tipc: Resetting bearer [ 895.684669][ T30] audit: type=1326 audit(1758556830.559:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15475 comm="syz.1.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 895.723308][ T30] audit: type=1326 audit(1758556830.559:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15475 comm="syz.1.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 895.941580][ T30] audit: type=1326 audit(1758556830.559:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15475 comm="syz.1.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 896.179381][ T30] audit: type=1326 audit(1758556830.559:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15475 comm="syz.1.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 896.205022][T15439] tipc: Disabling bearer [ 896.251673][T15471] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 896.258977][T15471] macsec1: entered promiscuous mode [ 896.264407][T15471] macsec1: entered allmulticast mode [ 896.269851][T15471] mac80211_hwsim hwsim20 wlan0: entered allmulticast mode [ 896.284026][ T30] audit: type=1326 audit(1758556830.559:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15475 comm="syz.1.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 896.306903][ T30] audit: type=1326 audit(1758556830.569:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15475 comm="syz.1.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 896.330707][ T30] audit: type=1326 audit(1758556830.569:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15475 comm="syz.1.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 896.355861][ T30] audit: type=1326 audit(1758556830.569:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15475 comm="syz.1.2501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b0458eec9 code=0x7ffc0000 [ 896.402818][T15261] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 896.418007][T15483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.441251][T15483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.477591][T15459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 896.491902][T15459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 896.581556][ T5887] usb 6-1: USB disconnect, device number 35 [ 896.588389][ T13] usb 6-1: Failed to submit usb control message: -71 [ 896.614631][ T13] usb 6-1: unable to send the bmi data to the device: -71 [ 896.627118][ T13] usb 6-1: unable to get target info from device [ 896.647112][ T13] usb 6-1: could not get target info (-71) [ 896.653031][ T13] usb 6-1: could not probe fw (-71) [ 897.486713][T15504] netdevsim netdevsim4: Direct firmware load for lookup_extent_enter failed with error -2 [ 897.548291][T15504] netdevsim netdevsim4: Falling back to sysfs fallback for: lookup_extent_enter [ 897.658518][T15508] ext4: Bad value for 'auto_da_alloc' [ 898.520738][T15521] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:4352 [ 898.529814][T15521] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 898.544603][ T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 898.544935][ T5943] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 898.711787][T14293] Bluetooth: hci5: unexpected event for opcode 0x200a [ 898.721813][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 898.756505][ T9] usb 3-1: config 0 has no interface number 0 [ 898.764854][ T5943] usb 1-1: Using ep0 maxpacket: 8 [ 898.789330][ T5943] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 898.809751][ T9] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 898.811783][ T5943] usb 1-1: config 0 has no interfaces? [ 898.824901][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.853734][ T9] usb 3-1: Product: syz [ 898.859569][ T9] usb 3-1: Manufacturer: syz [ 898.861661][ T5943] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 898.892825][ T5943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 898.903853][ T9] usb 3-1: SerialNumber: syz [ 898.914348][ T5943] usb 1-1: Product: syz [ 898.930744][ T5943] usb 1-1: Manufacturer: syz [ 898.941410][ T9] usb 3-1: config 0 descriptor?? [ 898.953888][ T5943] usb 1-1: SerialNumber: syz [ 898.971901][ T5943] usb 1-1: config 0 descriptor?? [ 899.172853][ T9] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 899.200394][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 899.833226][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 899.841801][ T9] usb 3-1: media controller created [ 899.955983][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 900.036005][T15538] erofs (device loop5): cannot find valid erofs superblock [ 900.069886][ T5943] usb 1-1: USB disconnect, device number 67 [ 900.079993][T15540] erofs (device loop1): cannot find valid erofs superblock [ 900.101592][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 900.105665][T15538] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 900.120055][T15538] hfsplus: unable to find HFS+ superblock [ 900.643899][ T9] usb 3-1: USB disconnect, device number 50 [ 900.718333][T15540] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 900.747086][T15540] hfsplus: unable to find HFS+ superblock [ 900.806425][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 900.806500][ T30] audit: type=1326 audit(1758556835.709:4075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15542 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 900.888410][ T30] audit: type=1326 audit(1758556835.709:4076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15542 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 900.910789][ C0] vkms_vblank_simulate: vblank timer overrun [ 900.919852][ T30] audit: type=1326 audit(1758556835.709:4077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15542 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 900.942273][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.533068][ T30] audit: type=1326 audit(1758556835.709:4078): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15542 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 901.555559][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.918247][ T30] audit: type=1326 audit(1758556835.709:4079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15542 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 901.942008][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.950981][ T30] audit: type=1326 audit(1758556835.709:4080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15542 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 901.973473][ C0] vkms_vblank_simulate: vblank timer overrun [ 902.411652][ T30] audit: type=1326 audit(1758556835.709:4081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15542 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 902.513835][ T30] audit: type=1326 audit(1758556835.709:4082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15542 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 902.569682][ T30] audit: type=1326 audit(1758556835.709:4083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15542 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 902.592136][ C0] vkms_vblank_simulate: vblank timer overrun [ 902.625871][ T30] audit: type=1326 audit(1758556835.709:4084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15542 comm="syz.2.2519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 902.875961][T10258] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 903.209070][T15564] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2524'. [ 903.218526][T15564] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2524'. [ 903.255029][T10258] usb 2-1: Using ep0 maxpacket: 32 [ 903.382193][T10258] usb 2-1: config 0 has an invalid interface number: 202 but max is 1 [ 903.396298][T10258] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 903.407517][T10258] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 903.963576][T10258] usb 2-1: config 0 has no interface number 0 [ 903.969873][T10258] usb 2-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 904.003202][T10258] usb 2-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 904.025308][T10258] usb 2-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 904.044758][T10258] usb 2-1: config 0 interface 202 has no altsetting 0 [ 904.056431][T10258] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 904.069209][T10258] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.087530][T10258] usb 2-1: Product: syz [ 904.102007][T10258] usb 2-1: Manufacturer: syz [ 904.114587][T10258] usb 2-1: SerialNumber: syz [ 904.127518][T10258] usb 2-1: config 0 descriptor?? [ 904.156547][T10258] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 904.228268][T15577] erofs (device loop5): cannot find valid erofs superblock [ 904.249821][T15577] I/O error, dev loop5, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 904.259344][T15577] hfsplus: unable to find HFS+ superblock [ 904.874862][T10258] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 904.959958][T15589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.226402][ T36] usb 2-1: Failed to submit usb control message: -110 [ 905.345854][T15589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.355879][ T36] usb 2-1: unable to send the bmi data to the device: -110 [ 905.365743][ T36] usb 2-1: unable to get target info from device [ 905.372182][ T36] usb 2-1: could not get target info (-110) [ 905.385893][ T36] usb 2-1: could not probe fw (-110) [ 905.387585][T15589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 905.428352][T10258] usb 3-1: unable to get BOS descriptor or descriptor too short [ 905.457275][T10258] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 905.580336][T15589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.594738][T10258] usb 3-1: language id specifier not provided by device, defaulting to English [ 905.608595][T10258] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 905.622221][T10258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.631125][T10258] usb 3-1: Product: syz [ 905.639248][T10258] usb 3-1: Manufacturer: 튀䗼莀娙ç댖滺鳚鰺良ꝵᅂﳧ뫱㨳雝䣯ԅ뽀섗숔씣晵㥝侍듕畝漨潥钓豢⛑갷띿䂪붅ன溸ϑ컻ᗒ栧牖禄垐醪ᷧꓞ⃌棡原겳༰駢뿐洴欁깴䄩⧌䐲갹矔伤斳ᮥ꜈ꡱ典縫葩畁 [ 905.667447][T10258] usb 3-1: SerialNumber: syz [ 905.898812][T10258] cdc_ncm 3-1:1.0: bind() failure [ 905.909869][T10258] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 905.916845][T10258] cdc_ncm 3-1:1.1: bind() failure [ 905.926021][T10258] usb 3-1: USB disconnect, device number 51 [ 905.928999][ T5943] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 906.096269][ T5943] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 906.106875][ T5943] usb 5-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6d.4d [ 906.116180][ T5943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.127136][ T5943] usb 5-1: config 0 descriptor?? [ 906.135660][ T5943] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 906.142092][ T5943] command write [95] error -22 [ 906.645993][T15556] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 906.871792][ T5951] usb 5-1: USB disconnect, device number 6 [ 906.909727][ T9] usb 2-1: USB disconnect, device number 55 [ 907.701773][T15611] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 907.717219][T15611] macsec0: entered promiscuous mode [ 907.724555][T15611] macsec0: entered allmulticast mode [ 907.730187][T15611] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 907.901270][T15610] erofs (device loop1): cannot find valid erofs superblock [ 907.962673][T15610] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 907.974471][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2538'. [ 907.986885][T15610] hfsplus: unable to find HFS+ superblock [ 908.710030][T15622] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 908.804177][T15637] erofs (device loop4): cannot find valid erofs superblock [ 909.100072][T15637] I/O error, dev loop4, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 909.139443][T15637] hfsplus: unable to find HFS+ superblock [ 909.792269][ T5951] libceph: connect (1)[c::]:6789 error -101 [ 909.798527][ T5951] libceph: mon0 (1)[c::]:6789 connect error [ 910.070421][ T5887] libceph: connect (1)[c::]:6789 error -101 [ 910.097769][ T5887] libceph: mon0 (1)[c::]:6789 connect error [ 910.467293][ T30] kauditd_printk_skb: 22 callbacks suppressed [ 910.467309][ T30] audit: type=1326 audit(1758556845.369:4107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15657 comm="syz.2.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 910.529827][ T5951] Process accounting resumed [ 910.534346][ T30] audit: type=1326 audit(1758556845.369:4108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15657 comm="syz.2.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 910.617888][ T30] audit: type=1326 audit(1758556845.419:4109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15657 comm="syz.2.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 911.271291][ T5951] libceph: connect (1)[c::]:6789 error -101 [ 911.279670][ T5951] libceph: mon0 (1)[c::]:6789 connect error [ 911.290032][T15644] ceph: No mds server is up or the cluster is laggy [ 911.404956][ T30] audit: type=1326 audit(1758556845.419:4110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15657 comm="syz.2.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 911.464788][ T30] audit: type=1326 audit(1758556845.419:4111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15657 comm="syz.2.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 911.609337][ T30] audit: type=1326 audit(1758556845.419:4112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15657 comm="syz.2.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 911.621827][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2552'. [ 911.635708][T15670] netlink: 'syz.5.2553': attribute type 1 has an invalid length. [ 911.674039][T15670] netlink: 240 bytes leftover after parsing attributes in process `syz.5.2553'. [ 911.707347][ T30] audit: type=1326 audit(1758556845.419:4113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15657 comm="syz.2.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 911.774677][ T30] audit: type=1326 audit(1758556845.419:4114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15657 comm="syz.2.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 911.824605][ T30] audit: type=1326 audit(1758556845.419:4115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15657 comm="syz.2.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 911.864807][ T30] audit: type=1326 audit(1758556845.419:4116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15657 comm="syz.2.2550" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 912.174691][T10258] usb 6-1: new full-speed USB device number 36 using dummy_hcd [ 912.930450][T10258] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 912.961207][T10258] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.060866][T10258] usb 6-1: config 0 descriptor?? [ 913.088669][T10258] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 913.596716][T10258] gp8psk: usb in 128 operation failed. [ 913.630545][T15703] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 913.642808][T15703] macsec1: entered promiscuous mode [ 913.654452][T15703] macsec1: entered allmulticast mode [ 913.660527][T15703] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 913.737372][T15701] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 913.819778][T10258] gp8psk: usb in 146 operation failed. [ 913.826127][T10258] gp8psk: failed to get FW version [ 913.834116][T10258] gp8psk: FPGA Version = 196 [ 914.354669][T10258] gp8psk: usb in 138 operation failed. [ 914.375173][T10258] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 914.455151][T10258] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 914.468912][T10258] usb 6-1: USB disconnect, device number 36 [ 915.122261][T15721] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 915.189130][T15723] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2567'. [ 915.534428][ T5943] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 915.860723][T15738] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 915.871491][T15738] FAT-fs (loop4): unable to read boot sector [ 915.999606][ T5943] usb 6-1: Using ep0 maxpacket: 16 [ 916.068086][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 916.140940][ T5943] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 916.181345][ T5943] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 916.254619][ T5943] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 916.263691][ T5943] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.327526][ T5943] usb 6-1: config 0 descriptor?? [ 916.568578][T15751] macsec2: entered promiscuous mode [ 916.579192][T15751] macsec2: entered allmulticast mode [ 917.557592][T15752] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2570'. [ 917.628646][T15752] openvswitch: netlink: Message has 512 unknown bytes. [ 917.644649][T15754] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 917.658385][T15754] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 917.791402][ T5943] shield 0003:0955:7214.0013: item fetching failed at offset 4/5 [ 917.800043][ T5943] shield 0003:0955:7214.0013: Parse failed [ 917.806046][ T5943] shield 0003:0955:7214.0013: probe with driver shield failed with error -22 [ 918.123719][T15726] mac80211_hwsim hwsim15 syzkaller0: left promiscuous mode [ 918.137576][T15762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2576'. [ 918.153747][T15726] mac80211_hwsim hwsim15 syzkaller0: left allmulticast mode [ 918.356180][ T5875] Bluetooth: hci5: command 0x0405 tx timeout [ 918.670166][T15765] erofs (device loop1): cannot find valid erofs superblock [ 919.031273][T15765] I/O error, dev loop1, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 919.065786][ T5951] usb 6-1: USB disconnect, device number 37 [ 919.104808][T15765] hfsplus: unable to find HFS+ superblock [ 920.114847][T10520] block nbd1: Possible stuck request ffff888025887000: control (read@0,1024B). Runtime 390 seconds [ 920.125640][T10520] block nbd1: Possible stuck request ffff8880258871c0: control (read@1024,1024B). Runtime 390 seconds [ 920.136653][T10520] block nbd1: Possible stuck request ffff888025887380: control (read@2048,1024B). Runtime 390 seconds [ 920.148421][T10520] block nbd1: Possible stuck request ffff888025887540: control (read@3072,1024B). Runtime 390 seconds [ 921.485056][ T24] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 921.615968][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 921.616023][ T30] audit: type=1326 audit(1758556856.499:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.2.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 921.764005][T15804] vfat: Unknown parameter 'shorwin95' [ 922.285282][T15796] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 922.288462][ T30] audit: type=1326 audit(1758556856.499:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.2.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 922.320018][T15796] FAT-fs (loop1): unable to read boot sector [ 922.326541][ T24] usb 5-1: Invalid ep0 maxpacket: 32 [ 922.540353][ T30] audit: type=1326 audit(1758556856.509:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.2.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 922.624625][ T24] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 922.707160][ T30] audit: type=1326 audit(1758556857.199:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.2.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 922.766769][T15808] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2590'. [ 922.798654][ T30] audit: type=1326 audit(1758556857.199:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.2.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 922.842083][ T30] audit: type=1326 audit(1758556857.199:4172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.2.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 922.913973][ T30] audit: type=1326 audit(1758556857.199:4173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.2.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 922.921593][ T24] usb 5-1: Invalid ep0 maxpacket: 32 [ 923.011423][ T30] audit: type=1326 audit(1758556857.299:4174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.2.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 923.041459][ T24] usb usb5-port1: attempt power cycle [ 923.094686][ T30] audit: type=1326 audit(1758556857.329:4175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.2.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 923.117767][ T30] audit: type=1326 audit(1758556857.329:4176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15797 comm="syz.2.2589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 923.140616][ T10] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 923.304812][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 923.444615][ T24] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 923.485359][ T24] usb 5-1: Invalid ep0 maxpacket: 32 [ 923.487400][ T10] usb 1-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 923.510185][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.623351][ T10] usb 1-1: Product: syz [ 923.634662][ T24] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 923.642390][ T10] usb 1-1: Manufacturer: syz [ 923.669725][ T10] usb 1-1: SerialNumber: syz [ 923.735670][ T10] usb 1-1: config 0 descriptor?? [ 923.742044][ T24] usb 5-1: device descriptor read/8, error -71 [ 923.782386][ T10] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 923.808373][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 923.821509][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 923.864836][ T10] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 923.875114][ T24] usb usb5-port1: unable to enumerate USB device [ 923.876234][ T10] usb 1-1: media controller created [ 923.912133][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 924.015276][ T10] cxusb: set interface failed [ 924.025564][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 924.189455][ T10] DVB: Unable to find symbol mt352_attach() [ 924.210020][ T10] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 924.224823][T15261] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 924.475010][T15261] usb 6-1: Using ep0 maxpacket: 16 [ 924.480198][ T10] rc_core: IR keymap rc-dvico-portable not found [ 924.514851][ T10] Registered IR keymap rc-empty [ 924.521489][T15261] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 924.539069][ T10] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 924.555115][T15261] usb 6-1: config 0 has no interface number 0 [ 924.594779][T15261] usb 6-1: config 0 interface 35 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 924.612566][ T10] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input46 [ 924.667071][T15261] usb 6-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=3e.04 [ 924.679731][ T10] dvb-usb: schedule remote query interval to 100 msecs. [ 924.698331][T15261] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 924.714889][ T10] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 924.742096][T15261] usb 6-1: Product: syz [ 924.746494][T15261] usb 6-1: Manufacturer: syz [ 924.774574][T15261] usb 6-1: SerialNumber: syz [ 924.780715][ T10] usb 1-1: USB disconnect, device number 68 [ 924.820827][T15261] usb 6-1: config 0 descriptor?? [ 925.008660][ T10] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 925.549152][T15261] usb 6-1: USB disconnect, device number 38 [ 927.567328][T15860] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 927.576660][T15860] FAT-fs (loop1): unable to read boot sector [ 927.670555][T15864] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2604'. [ 927.873013][T15867] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 927.884723][T15867] macsec1: entered promiscuous mode [ 927.893021][T15867] macsec1: entered allmulticast mode [ 927.899175][T15867] mac80211_hwsim hwsim7 wlan0: entered allmulticast mode [ 928.233219][ T10] libceph: connect (1)[c::]:6789 error -13 [ 928.243777][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 928.546668][ T10] libceph: connect (1)[c::]:6789 error -13 [ 928.553304][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 928.631669][T15882] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 929.000945][T15869] ceph: No mds server is up or the cluster is laggy [ 929.182282][ T10] libceph: connect (1)[c::]:6789 error -13 [ 929.304467][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 929.991376][ T30] kauditd_printk_skb: 55 callbacks suppressed [ 929.991392][ T30] audit: type=1326 audit(1758556864.889:4232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15897 comm="syz.2.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 930.020042][ C0] vkms_vblank_simulate: vblank timer overrun [ 930.424013][ T31] INFO: task udevd:10573 blocked for more than 143 seconds. [ 930.450449][ T31] Not tainted syzkaller #0 [ 930.451842][ T30] audit: type=1326 audit(1758556864.889:4233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15897 comm="syz.2.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 930.461015][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 930.487768][ T31] task:udevd state:D stack:21912 pid:10573 tgid:10573 ppid:5232 task_flags:0x400140 flags:0x00080003 [ 930.504358][T15906] FAULT_INJECTION: forcing a failure. [ 930.504358][T15906] name failslab, interval 1, probability 0, space 0, times 0 [ 930.518352][ T31] Call Trace: [ 930.522079][T15906] CPU: 1 UID: 0 PID: 15906 Comm: syz.5.2614 Not tainted syzkaller #0 PREEMPT(full) [ 930.522104][T15906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 930.522115][T15906] Call Trace: [ 930.522123][T15906] [ 930.522130][T15906] dump_stack_lvl+0x189/0x250 [ 930.522156][T15906] ? __pfx____ratelimit+0x10/0x10 [ 930.522177][T15906] ? __pfx_dump_stack_lvl+0x10/0x10 [ 930.522197][T15906] ? __pfx__printk+0x10/0x10 [ 930.522224][T15906] ? __pfx___might_resched+0x10/0x10 [ 930.522252][T15906] should_fail_ex+0x414/0x560 [ 930.522279][T15906] should_failslab+0xa8/0x100 [ 930.522299][T15906] __kvmalloc_node_noprof+0x158/0x910 [ 930.522318][T15906] ? io_ring_ctx_alloc+0x14c/0xc10 [ 930.522347][T15906] io_ring_ctx_alloc+0x14c/0xc10 [ 930.522368][T15906] ? io_uring_fill_params+0x3f9/0x7e0 [ 930.522393][T15906] io_uring_create+0x14a/0xba0 [ 930.522422][T15906] __se_sys_io_uring_setup+0x264/0x270 [ 930.522443][T15906] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 930.522481][T15906] ? do_syscall_64+0xbe/0xfa0 [ 930.522504][T15906] do_syscall_64+0xfa/0xfa0 [ 930.522522][T15906] ? lockdep_hardirqs_on+0x9c/0x150 [ 930.522541][T15906] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.522557][T15906] ? clear_bhb_loop+0x60/0xb0 [ 930.522578][T15906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.522595][T15906] RIP: 0033:0x7f856f58eec9 [ 930.522610][T15906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.522624][T15906] RSP: 002b:00007f8570415fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 930.522643][T15906] RAX: ffffffffffffffda RBX: 00007f856f7e6090 RCX: 00007f856f58eec9 [ 930.522655][T15906] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111 [ 930.522667][T15906] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000 [ 930.522678][T15906] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 930.522689][T15906] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000 [ 930.522719][T15906] [ 930.727109][ T31] [ 930.733007][ T31] __schedule+0x1798/0x4cc0 [ 930.737870][ T31] ? __pfx___schedule+0x10/0x10 [ 930.742978][ T31] ? schedule+0x91/0x360 [ 930.747623][ T31] schedule+0x165/0x360 [ 930.752052][ T31] io_schedule+0x80/0xd0 [ 930.756713][ T31] folio_wait_bit_common+0x6b0/0xb80 [ 930.762436][ T31] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 930.768745][ T31] ? __pfx_wake_page_function+0x10/0x10 [ 930.774749][ T31] ? __filemap_get_folio+0x6d0/0xaf0 [ 930.775339][ T30] audit: type=1326 audit(1758556864.889:4234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15897 comm="syz.2.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 930.780201][ T31] ? do_read_cache_folio+0x4e9/0x590 [ 930.802453][ C0] vkms_vblank_simulate: vblank timer overrun [ 930.833134][ T31] do_read_cache_folio+0x1aa/0x590 [ 930.843141][ T30] audit: type=1326 audit(1758556864.889:4235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15897 comm="syz.2.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 930.867805][ T31] ? __pfx_blkdev_read_folio+0x10/0x10 [ 930.873476][ T31] read_part_sector+0xb6/0x2b0 [ 930.880956][ T30] audit: type=1326 audit(1758556864.889:4236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15897 comm="syz.2.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 930.929234][ T31] adfspart_check_POWERTEC+0x8c/0xf30 [ 930.937554][ T31] ? __pfx_adfspart_check_ICS+0x10/0x10 [ 930.953514][ T31] ? __pfx_adfspart_check_POWERTEC+0x10/0x10 [ 930.966381][ T30] audit: type=1326 audit(1758556864.899:4237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15897 comm="syz.2.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 930.990492][ T30] audit: type=1326 audit(1758556864.899:4238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15897 comm="syz.2.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 931.004771][ T31] bdev_disk_changed+0x75f/0x14b0 [ 931.013426][ T30] audit: type=1326 audit(1758556864.899:4239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15897 comm="syz.2.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 931.051853][ T31] ? __pfx_bdev_disk_changed+0x10/0x10 [ 931.059864][ T31] ? wait_on_inode+0xc0/0x230 [ 931.065859][ T31] blkdev_get_whole+0x380/0x510 [ 931.070906][ T31] bdev_open+0x31e/0xd30 [ 931.076301][ T31] blkdev_open+0x457/0x600 [ 931.080926][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 931.087196][ T31] do_dentry_open+0x953/0x13f0 [ 931.092199][ T31] vfs_open+0x3b/0x340 [ 931.098656][ T31] ? path_openat+0x2ecd/0x3830 [ 931.103676][ T31] path_openat+0x2ee5/0x3830 [ 931.126127][ T31] ? __pfx_path_openat+0x10/0x10 [ 931.136557][ T31] do_filp_open+0x1fa/0x410 [ 931.139041][ T30] audit: type=1326 audit(1758556864.899:4240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15897 comm="syz.2.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 931.142686][ T31] ? __lock_acquire+0xab9/0xd20 [ 931.168997][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 931.174408][ T31] ? _raw_spin_unlock+0x28/0x50 [ 931.179810][ T31] ? alloc_fd+0x64c/0x6c0 [ 931.181754][ T30] audit: type=1326 audit(1758556864.899:4241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15897 comm="syz.2.2615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f5722d8eec9 code=0x7ffc0000 [ 931.184170][ T31] do_sys_openat2+0x121/0x1c0 [ 931.211697][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 931.217188][ T31] __x64_sys_openat+0x138/0x170 [ 931.222250][ T31] do_syscall_64+0xfa/0xfa0 [ 931.227247][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.233330][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 931.240886][ T31] ? clear_bhb_loop+0x60/0xb0 [ 931.245939][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.252058][ T31] RIP: 0033:0x7efccf4a7407 [ 931.256900][ T31] RSP: 002b:00007ffc4b6888f0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 931.265686][ T31] RAX: ffffffffffffffda RBX: 00007efccfbd3880 RCX: 00007efccf4a7407 [ 931.273683][ T31] RDX: 00000000000a0800 RSI: 000055818296fe40 RDI: ffffffffffffff9c [ 931.281893][ T31] RBP: 0000558182960910 R08: 0000000000000000 R09: 0000000000000000 [ 931.290110][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00005581829817d0 [ 931.298498][ T31] R13: 000055818296e190 R14: 0000000000000000 R15: 00005581829817d0 [ 931.306893][ T31] [ 931.309995][ T31] [ 931.309995][ T31] Showing all locks held in the system: [ 931.319995][ T31] 2 locks held by kworker/u8:0/12: [ 931.331484][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 931.348764][ T31] #1: ffffc90000117ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 931.361716][ T31] 2 locks held by kworker/u8:1/13: [ 931.367361][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 931.379115][ T31] #1: ffffc90000127ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 931.392253][ T31] 1 lock held by khungtaskd/31: [ 931.397566][ T31] #0: ffffffff8e33d260 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 931.408186][ T31] 2 locks held by kworker/u8:2/36: [ 931.413427][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 931.426284][ T31] #1: ffffc90000ac7ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 931.439086][ T31] 2 locks held by kworker/u8:3/50: [ 931.444208][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 931.456750][ T31] #1: ffffc90000bb7ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 931.470510][ T31] 2 locks held by kworker/u8:4/60: [ 931.476085][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 931.488273][ T31] #1: ffffc9000211fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 931.500915][ T31] 2 locks held by kworker/u8:5/200: [ 931.506363][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 931.518194][ T31] #1: ffffc90002e57ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 931.531312][ T31] 2 locks held by kworker/u8:6/2974: [ 931.537029][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 931.550375][ T31] #1: ffffc9000be17ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 931.563414][ T31] 2 locks held by kworker/u8:7/4278: [ 931.569032][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 931.581086][ T31] #1: ffffc9000d6b7ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 931.594000][ T31] 2 locks held by getty/5621: [ 931.599087][ T31] #0: ffff88814d3760a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 931.609931][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 931.620758][ T31] 1 lock held by syz-executor/5848: [ 931.632307][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.642640][ T31] #0: ffff8880b863a018 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 931.654390][ T31] 2 locks held by kworker/u8:8/6280: [ 931.660080][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 931.673774][ T31] #1: ffffc9000bc67ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 931.687827][ T31] 2 locks held by kworker/u8:9/6368: [ 931.693151][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 931.709055][ T31] #1: ffffc9000bdb7ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 931.721524][ T31] 2 locks held by kworker/u8:10/6438: [ 931.727703][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 931.739592][ T31] #1: ffffc9000c08fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 931.753393][ T31] 2 locks held by kworker/u8:12/7634: [ 931.759606][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 931.772538][ T31] #1: ffffc90003c97ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 931.785720][ T31] 2 locks held by kworker/u8:13/7964: [ 931.791129][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 931.802400][ T31] #1: ffffc9000e98fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 931.815111][ T31] 1 lock held by udevd/10573: [ 931.819804][ T31] #0: ffff8881433f9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 931.831678][ T31] 2 locks held by syz.2.2615/15897: [ 931.836976][ T31] #0: ffff88807e3d5848 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 931.847750][ T31] #1: ffffffff8e342cf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 931.860314][ T31] 2 locks held by kworker/u8:11/15907: [ 931.866100][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 931.877672][ T31] #1: ffffc90005317ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 931.890459][ T31] 2 locks held by kworker/u8:14/15908: [ 931.896299][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 931.907755][ T31] #1: ffffc90005307ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 931.920542][ T31] 2 locks held by kworker/u8:15/15909: [ 931.926469][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 931.938241][ T31] #1: ffffc9000527fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 931.952534][ T31] 2 locks held by kworker/u8:16/15910: [ 931.959947][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 931.971674][ T31] #1: ffffc9000523fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 931.984281][ T31] 2 locks held by kworker/u8:17/15911: [ 931.990149][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.001952][ T31] #1: ffffc9000515fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.014719][ T31] 2 locks held by kworker/u8:18/15912: [ 932.020217][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.032227][ T31] #1: ffffc9000b877ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.047347][ T31] 2 locks held by kworker/u8:19/15913: [ 932.052828][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.066392][ T31] #1: ffffc900054f7ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.078618][ T31] 2 locks held by kworker/u8:20/15914: [ 932.084077][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.096278][ T31] #1: ffffc90005677ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.109099][ T31] 2 locks held by kworker/u8:21/15915: [ 932.114708][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.126473][ T31] #1: ffffc9000514fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.139217][ T31] 2 locks held by kworker/u8:22/15916: [ 932.144956][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.156893][ T31] #1: ffffc9000513fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.171422][ T31] 2 locks held by kworker/u8:23/15917: [ 932.177589][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.188846][ T31] #1: ffffc900050cfba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.202393][ T31] 2 locks held by kworker/u8:24/15918: [ 932.207915][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.219383][ T31] #1: ffffc900050afba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.231905][ T31] 2 locks held by kworker/u8:25/15919: [ 932.237432][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.248643][ T31] #1: ffffc9000509fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.261315][ T31] 2 locks held by kworker/u8:26/15920: [ 932.268666][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.280871][ T31] #1: ffffc90004b9fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.293874][ T31] 2 locks held by kworker/u8:27/15921: [ 932.299650][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.311083][ T31] #1: ffffc90004a8fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.325390][ T31] 2 locks held by kworker/u8:28/15922: [ 932.330867][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.342173][ T31] #1: ffffc90004997ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.354593][ T31] 2 locks held by kworker/u8:29/15923: [ 932.360088][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.373405][ T31] #1: ffffc90004987ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.386697][ T31] 2 locks held by kworker/u8:30/15924: [ 932.392418][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.405815][ T31] #1: ffffc9000488fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.418886][ T31] 2 locks held by kworker/u8:31/15925: [ 932.424905][ T31] 2 locks held by kworker/u8:32/15926: [ 932.430398][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.441908][ T31] #1: ffffc9000485fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.454164][ T31] 2 locks held by kworker/u8:33/15927: [ 932.459890][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.472058][ T31] #1: ffffc900047ffba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.485633][ T31] 2 locks held by kworker/u8:34/15928: [ 932.491115][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.502339][ T31] #1: ffffc900047efba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.520868][ T31] 2 locks held by kworker/u8:35/15929: [ 932.527471][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.539061][ T31] #1: ffffc9000476fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.554473][ T31] 2 locks held by kworker/u8:36/15930: [ 932.560410][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.573713][ T31] #1: ffffc900046dfba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.586556][ T31] 2 locks held by kworker/u8:37/15931: [ 932.592031][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.603290][ T31] #1: ffffc9000459fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.615927][ T31] 2 locks held by kworker/u8:38/15932: [ 932.621600][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.634268][ T31] #1: ffffc900055c7ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.647007][ T31] 2 locks held by kworker/u8:39/15933: [ 932.652481][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.665285][ T31] #1: ffffc9000411fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.678205][ T31] 2 locks held by kworker/u8:40/15934: [ 932.683706][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.695807][ T31] #1: ffffc90002ef7ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.708489][ T31] 2 locks held by kworker/u8:41/15935: [ 932.713986][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.725851][ T31] #1: ffffc90002e97ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.739298][ T31] 2 locks held by kworker/u8:42/15936: [ 932.745784][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.758747][ T31] #1: ffffc9000215fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.771540][ T31] 2 locks held by kworker/u8:43/15937: [ 932.779209][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.791115][ T31] #1: ffffc90003edfba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.803706][ T31] 2 locks held by kworker/u8:44/15938: [ 932.809615][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.821298][ T31] #1: ffffc90003ecfba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.834917][ T31] 2 locks held by kworker/u8:45/15939: [ 932.840436][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.853250][ T31] #1: ffffc90003ebfba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.865927][ T31] 2 locks held by kworker/u8:46/15940: [ 932.871428][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.883484][ T31] #1: ffffc90003d1fba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.897235][ T31] 2 locks held by kworker/u8:47/15941: [ 932.902737][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.916352][ T31] #1: ffffc90003cc7ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.929021][ T31] 2 locks held by kworker/u8:48/15942: [ 932.935064][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.946716][ T31] #1: ffffc900037e7ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.960917][ T31] 2 locks held by kworker/u8:49/15943: [ 932.966628][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 932.978183][ T31] #1: ffffc900037d7ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 932.992523][ T31] 2 locks held by kworker/u8:50/15944: [ 932.998671][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 933.010874][ T31] #1: ffffc90003777ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 933.024696][ T31] 2 locks held by kworker/u8:51/15945: [ 933.030170][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 933.041475][ T31] #1: ffffc900035d7ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 933.053972][ T31] 2 locks held by kworker/u8:52/15946: [ 933.059817][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 933.073568][ T31] #1: ffffc900035c7ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 933.087700][ T31] 2 locks held by kworker/u8:53/15947: [ 933.093175][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 933.106649][ T31] #1: ffffc90003577ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 933.119332][ T31] 2 locks held by kworker/u8:54/15948: [ 933.125611][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 933.137318][ T31] #1: ffffc90003567ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 933.150568][ T31] 2 locks held by kworker/u8:55/15949: [ 933.157807][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 933.169448][ T31] #1: ffffc90003557ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 933.182322][ T31] 2 locks held by kworker/u8:56/15950: [ 933.189335][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 933.200842][ T31] #1: ffffc90003527ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 933.213274][ T31] 2 locks held by kworker/u8:57/15951: [ 933.220250][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 933.231957][ T31] #1: ffffc90003517ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 933.245629][ T31] 2 locks held by kworker/u8:58/15952: [ 933.251101][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 933.262824][ T31] #1: ffffc900034c7ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 933.276434][ T31] 2 locks held by kworker/u8:59/15953: [ 933.281911][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 933.295320][ T31] #1: ffffc90003497ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 933.307763][ T31] 2 locks held by kworker/u8:60/15954: [ 933.313258][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 933.325136][ T31] #1: ffffc9000c257ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 933.337718][ T31] 2 locks held by kworker/u8:61/15955: [ 933.343213][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 933.355401][ T31] #1: ffffc9000c1d7ba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 933.368584][ T31] 2 locks held by kworker/u8:62/15956: [ 933.374229][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 933.385876][ T31] #1: ffffc9000bfbfba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 933.400796][ T31] 2 locks held by kworker/u8:63/15957: [ 933.406592][ T31] #0: ffff88801ff53148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 933.417981][ T31] #1: ffffc9000bfafba0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 933.430396][ T31] 3 locks held by kworker/u8:64/15958: [ 933.436622][ T31] #0: ffff88813fe09948 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 933.448779][ T31] #1: ffffc9000bf7fba0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 933.461350][ T31] #2: ffffffff8e342cf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 933.473062][ T31] [ 933.478580][ T31] ============================================= [ 933.478580][ T31] [ 933.524728][ T31] NMI backtrace for cpu 0 [ 933.524748][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 933.524767][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 933.524777][ T31] Call Trace: [ 933.524785][ T31] [ 933.524794][ T31] dump_stack_lvl+0x189/0x250 [ 933.524823][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 933.524843][ T31] ? __pfx__printk+0x10/0x10 [ 933.524878][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 933.524905][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 933.524932][ T31] ? __pfx__printk+0x10/0x10 [ 933.524958][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 933.524982][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 933.525008][ T31] watchdog+0xf60/0xfa0 [ 933.525035][ T31] ? watchdog+0x1e2/0xfa0 [ 933.525060][ T31] kthread+0x711/0x8a0 [ 933.525083][ T31] ? __pfx_watchdog+0x10/0x10 [ 933.525103][ T31] ? __pfx_kthread+0x10/0x10 [ 933.525122][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 933.525140][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 933.525157][ T31] ? __pfx_kthread+0x10/0x10 [ 933.525176][ T31] ret_from_fork+0x4bc/0x870 [ 933.525201][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 933.525231][ T31] ? __switch_to_asm+0x39/0x70 [ 933.525250][ T31] ? __switch_to_asm+0x33/0x70 [ 933.525269][ T31] ? __pfx_kthread+0x10/0x10 [ 933.525292][ T31] ret_from_fork_asm+0x1a/0x30 [ 933.525328][ T31] [ 933.525354][ T31] Sending NMI from CPU 0 to CPUs 1: [ 933.672428][ C1] NMI backtrace for cpu 1 [ 933.672459][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 933.672478][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 933.672489][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 933.672514][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 33 4a 23 00 f3 0f 1e fa fb f4 c8 e6 02 00 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 933.672529][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 933.672545][ C1] RAX: 0c09e3eb1a9b7c00 RBX: ffffffff8196a2b7 RCX: 0c09e3eb1a9b7c00 [ 933.672558][ C1] RDX: 0000000000000001 RSI: ffffffff8dba2d53 RDI: ffffffff8c03aa60 [ 933.672570][ C1] RBP: ffffc90000197f10 R08: ffff8880b8732fdb R09: 1ffff110170e65fb [ 933.672582][ C1] R10: dffffc0000000000 R11: ffffed10170e65fc R12: ffffffff8fc39670 [ 933.672595][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a52b58 [ 933.672606][ C1] FS: 0000000000000000(0000) GS:ffff888125ae7000(0000) knlGS:0000000000000000 [ 933.672620][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 933.672631][ C1] CR2: 00007ffc66210f7c CR3: 0000000075b02000 CR4: 00000000003526f0 [ 933.672646][ C1] Call Trace: [ 933.672654][ C1] [ 933.672661][ C1] default_idle+0x13/0x20 [ 933.672682][ C1] default_idle_call+0x73/0xb0 [ 933.672704][ C1] do_idle+0x1e7/0x510 [ 933.672729][ C1] ? __pfx_do_idle+0x10/0x10 [ 933.672759][ C1] cpu_startup_entry+0x44/0x60 [ 933.672781][ C1] start_secondary+0x101/0x110 [ 933.672800][ C1] common_startup_64+0x13e/0x147 [ 933.672826][ C1] [ 933.673468][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 933.839143][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 933.848242][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 933.858289][ T31] Call Trace: [ 933.861559][ T31] [ 933.864475][ T31] dump_stack_lvl+0x99/0x250 [ 933.869067][ T31] ? __asan_memcpy+0x40/0x70 [ 933.873651][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 933.878836][ T31] ? __pfx__printk+0x10/0x10 [ 933.883425][ T31] vpanic+0x237/0x6d0 [ 933.887395][ T31] ? __pfx_vpanic+0x10/0x10 [ 933.891885][ T31] ? preempt_schedule_common+0x83/0xd0 [ 933.897335][ T31] panic+0xb9/0xc0 [ 933.901044][ T31] ? __pfx_panic+0x10/0x10 [ 933.905455][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 933.910822][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 933.916970][ T31] watchdog+0xf9f/0xfa0 [ 933.921126][ T31] ? watchdog+0x1e2/0xfa0 [ 933.925455][ T31] kthread+0x711/0x8a0 [ 933.929523][ T31] ? __pfx_watchdog+0x10/0x10 [ 933.934196][ T31] ? __pfx_kthread+0x10/0x10 [ 933.938773][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 933.943957][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 933.949141][ T31] ? __pfx_kthread+0x10/0x10 [ 933.953721][ T31] ret_from_fork+0x4bc/0x870 [ 933.958303][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 933.963411][ T31] ? __switch_to_asm+0x39/0x70 [ 933.968166][ T31] ? __switch_to_asm+0x33/0x70 [ 933.972917][ T31] ? __pfx_kthread+0x10/0x10 [ 933.977494][ T31] ret_from_fork_asm+0x1a/0x30 [ 933.982289][ T31] [ 933.985581][ T31] Kernel Offset: disabled [ 933.989898][ T31] Rebooting in 86400 seconds..