last executing test programs: 1m20.229417168s ago: executing program 1 (id=162): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002078316e00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r2, 0x5, 0x400000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x14c8}]}, 0x38}}, 0x0) 1m18.998868006s ago: executing program 1 (id=165): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e0000002000000000000000000000000000000000000002b0a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500"], 0xfc}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 1m18.893554187s ago: executing program 1 (id=166): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) membarrier(0x40, 0x0) membarrier(0x20, 0x0) write$sequencer(r0, &(0x7f0000000040)=[@t={0x81, 0x5, 0x0, 0x9}], 0x8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup(r0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f3, &(0x7f0000001040)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x40, 0xab00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x8, 0x0, 0x4, 0x0, @empty, @empty}}}}) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)={[], 0x1f}, 0x0) 1m18.50012957s ago: executing program 1 (id=168): syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab82) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x34, &(0x7f00000000c0)=ANY=[@ANYBLOB="40084900000023dad6c7d3620ccd1bad54f43c348fcbcd27a1c27366421d94e0568506dcbb2da8bbf88a6ec81f8739fd699187a266bdc51476db1d7d98dddc2d1d44e60b89e5e55564"], 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) syz_init_net_socket$ax25(0x3, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40048094) r2 = socket$netlink(0x10, 0x3, 0x15) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000380)="5800000014000300000000000000679abeff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff5a60525808f91cb2cd3d8586dd77daf2f7a5512cd5f0c645", 0x70}], 0x1) prlimit64(0x0, 0x8, &(0x7f00000002c0)={0x2, 0x800000088}, 0x0) sched_setscheduler(0x0, 0x5, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x22, &(0x7f0000000000), 0x6b) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='jfs\x00', 0x1a0c000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) openat$cgroup(0xffffffffffffffff, &(0x7f00000005c0)='syz1\x00', 0x200002, 0x0) 1m16.560014547s ago: executing program 1 (id=175): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffffffd, 0x8000, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x4, &(0x7f00000000c0)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) r7 = socket$unix(0x1, 0x3, 0x0) bind$unix(r7, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x3, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x200200, 0x21) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) 1m14.055138431s ago: executing program 1 (id=179): prlimit64(0x0, 0xf, &(0x7f0000000140)={0xa, 0x8b}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES64=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x2034, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e2ea11e73d9be051db986", 0x0, 0x37ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x50) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, @mcast1, @empty, 0x20, 0x0, 0x0, 0xa}}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xa4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x80000, 0x80) (async) r6 = open(&(0x7f0000000140)='./file0\x00', 0x80000, 0x80) mknodat$loop(r6, &(0x7f0000001600)='./file0\x00', 0xc000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') 58.102606702s ago: executing program 32 (id=179): prlimit64(0x0, 0xf, &(0x7f0000000140)={0xa, 0x8b}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES64=r2], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x2034, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e2ea11e73d9be051db986", 0x0, 0x37ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4}, 0x50) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000380)={'ip6_vti0\x00', 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, @mcast1, @empty, 0x20, 0x0, 0x0, 0xa}}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0xa4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x80000, 0x80) (async) r6 = open(&(0x7f0000000140)='./file0\x00', 0x80000, 0x80) mknodat$loop(r6, &(0x7f0000001600)='./file0\x00', 0xc000, 0x0) chdir(&(0x7f0000000140)='./bus\x00') 15.920113223s ago: executing program 5 (id=343): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x282000, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r2, 0x8004500f, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffc, 0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0xa, 0x3, 0x3a) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x1e, 0x5, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x18) socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_tables_targets\x00') r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000003c0007010000000000000000017c00000400fc800c00018006000600800a0000080002800400728008000500", @ANYRES32=r7, @ANYBLOB="717e40fd5ce258f868d5bbba1249af06f2"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000480)) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f00000005c0)) sendmmsg$unix(r4, &(0x7f0000001500), 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) connect$l2tp6(r8, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r8, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty, 0x1000000}, 0x1c, 0x0}}], 0x17fd147c801ae9ab, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=ANY=[@ANYBLOB="4400000010000304040000000200000000000000", @ANYRES32=0x0, @ANYBLOB="1103020000000000140032800b0001006970766c618600000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1], 0x44}, 0x1, 0xba01}, 0x810) 13.467706108s ago: executing program 5 (id=350): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) clock_adjtime(0x0, &(0x7f00000009c0)={0x40000003fd, 0x20, 0x100000000000000, 0x69, 0x0, 0x7, 0x1000009, 0x10000000008, 0x2, 0x4, 0x0, 0x0, 0x9, 0x0, 0x1, 0xfffffffffffffffd, 0x5, 0x20000000000, 0x1040, 0x8, 0x7f, 0x3, 0x6, 0x3, 0xfffffffffffffffe, 0x3}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) syz_io_uring_setup(0xcae, &(0x7f00000002c0)={0x0, 0x0, 0x80, 0x1, 0x3a6}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000240)=0xffff7c00, 0x0, 0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc000, 0x0, 0x81, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f00000000c0), 0x0, 0x1, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000e00)={0x4ff1, r5, r4}) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="001b000000000000000000002d00000000000000335ff03b1729ded152d0dccb99625ca444f698337f8f8ffb37fb350ab76e7c3936a7d06d2f4a961eec5baaeb", @ANYRES32=0x0, @ANYRES32], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2e, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(0x0, 0x10000, 0x4000) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff, 0xfffffffd}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000003000/0x2000)=nil) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') 12.968209748s ago: executing program 4 (id=353): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=ANY=[@ANYBLOB="c00000001000010000000000000000000000000a"], 0xc0}}, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "ff00"}, @local=@item_4={0x3, 0x2, 0x0, "53743ff6"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0600"}, @main=@item_4={0x3, 0x0, 0xb, "d2795e6a"}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x2, "00000400"}]}}, 0x0}, 0x0) 9.567257485s ago: executing program 0 (id=360): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e22, @empty}}}, 0x84) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) (async) setsockopt$MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) 9.451426375s ago: executing program 4 (id=361): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x33, 0x7f, 0x20000a2e, 0x0, 0x0, 0x3, 0x2000000, 0x0, 0x3000000}}) (rerun: 64) landlock_restrict_self(r0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000140)={0x4000, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f00000000c0)={0x18, 0x0, {0x4, @multicast, 'bond0\x00'}}, 0x1e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000003000000000000000d20a00009500000000000000ee805f149f357946ec08f9077d696a70c8f889ebe1bd33dcdb9942b29818c7e78d2925dd7f1907468a49b767e74e760818ba0dfed0ff80c610e6e5a4709130b9b06a9230e9958ad82ecc6ee71928f3a3163a409ffda37aa9bb5b8b21ca54b7af9c064b2606b661ae1cf579c467de9d326d2fd44275f5b62ea06fd150af657b4095dbd41b825b1f36be338a163283587f260ee065782f9c0d4b65a48d95d86daf0ea5e5386c042699"], 0x0, 0xf}, 0x94) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r5, &(0x7f0000000000)=ANY=[], 0x38) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0) (async) ioctl$PPPOEIOCSFWD(r4, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, 'ipvlan0\x00'}}) (async, rerun: 32) landlock_restrict_self(r3, 0x0) (async, rerun: 32) landlock_restrict_self(r3, 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) (rerun: 64) 9.181970026s ago: executing program 5 (id=362): bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket(0x2a, 0x2, 0x0) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x8000000, 0x100000001, 0x201, 0x1}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) close(0x3) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x65, 0x8}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000a00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @local, @mcast1, 0x10, 0x0, 0x6, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[], 0x50) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 9.080825368s ago: executing program 0 (id=364): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() syz_pidfd_open(r0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x11, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$netlink(0x10, 0x3, 0xa) socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0xfe0f, 0x8811}, 0x0) 8.91707187s ago: executing program 4 (id=365): r0 = socket(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x60800, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000400)={0x5, 0x10001, 0x1, 'queue0\x00', 0x9}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) landlock_create_ruleset(0x0, 0x0, 0x0) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000180)=0x2, 0x12) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = getpgid(0x0) fcntl$setownex(r6, 0xf, &(0x7f00000001c0)={0x0, r7}) fcntl$getownex(r6, 0x10, &(0x7f00000003c0)) syz_emit_ethernet(0x3e, &(0x7f0000000500)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, '\x00@e', 0x8, 0x2c, 0xff, @ipv4={'\x00', '\xff\xff', @remote}, @ipv4={'\x00', '\xff\xff', @loopback}, {[@routing={0x3b, 0x0, 0x0, 0x7}]}}}}}, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x5, 0x400) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="2e000000040f80ec5cacbcca670413a1f8480d0000005e140602000000000e000a00290000000280000000000000000000000000000000dd64a5746e28b2704808db745972e94acefd3e0000", 0x4c}], 0x1}, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x1000) 8.772344384s ago: executing program 0 (id=366): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x54}, 0x4000) syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) (async) pipe2$9p(&(0x7f0000000000), 0x80000) 7.316295129s ago: executing program 5 (id=368): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000001000000000000000020000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x1004014, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 6.918622231s ago: executing program 5 (id=370): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) socket$can_raw(0x1d, 0x3, 0x1) r2 = getpid() setreuid(0xee00, 0x0) syz_pidfd_open(r2, 0x0) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000340)) r5 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r5}) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) syz_clone3(&(0x7f00000006c0)={0x192142100, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, 0x0}, 0x58) 5.4122547s ago: executing program 0 (id=371): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000002540)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="20000000080000000000000900000000fffffff90000000900007fff00000007000000030000d06ad09118ef916b3c849c20cdfa70ed6fb514fdbf6e565a49997c14b2fed46085044872"], 0x0, 0x600) 5.123581954s ago: executing program 0 (id=373): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/partitions\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$PTP_PIN_GETFUNC(r1, 0xc0603d06, &(0x7f00000000c0)={'\x00', 0x8, 0x0, 0xbd78}) openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000080)={0x0, &(0x7f0000001e80)}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) getresgid(&(0x7f0000000280), 0x0, &(0x7f0000000400)) ioctl$sock_SIOCSPGRP(0xffffffffffffffff, 0x8902, 0x0) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x3}, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = syz_open_dev$swradio(&(0x7f0000000380), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r7, 0xc008561b, &(0x7f0000000000)={0xf0f040, 0x8}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x88}}, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x32314152}}) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b7000000639d0000bca30000000000002403000030feffff720af0ffa4ffffff71a4f0ff000000001f030000000000002e100200000000002604f8ffffff000414010000000300001d1300000000639d7a0a00fe0020001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb150c537bf2085651d6dd6ce9bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf0134c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4136dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91ff073e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30c1675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab000000000000003f8dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc090000000000000061563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9901010000b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba435926b61c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0aa81192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e5789c6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06eef98aee88ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06ee0ff698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e913ac1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e495295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000060000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c97552606ffff97e86dc995604346262a177b06c634969a31b5717c416f8224662f4dd46d6081cb96dd607410ee222ec8f206c4b74"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffd}, 0x35861afe2a15ad58}, 0x48) 5.114050133s ago: executing program 3 (id=374): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x985201) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={r1, 0x0, {0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1b, 0x0, "8db7a645ed46d5335dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5d030b49f32393a93ea4d0436aa3592a47913", "fc0177a6f3bb16d5d5568693e0e50bbf206c9d8db97cd01095e7ea15b0ba5f8a654e14dc7c4cc6b50488873b3acc6e02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd81992394e3c7a178fb1c16c99189819ef400", [0x80, 0x87]}}) r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffffffff, 0x4000) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x80000001, 0x2, 0x10, 0x1d, "22b418b08302004f26220b333898db01a0cabd5601002ed67dd8225d47375daf4f0cce2ae4a77b721d437a1395578ec747c300", "1c8e94a1e05df9e1478038136088ce23dc3cc42ebe9a8ab6769db2db8d8e9b52", [0x6, 0x6]}) 4.852414586s ago: executing program 5 (id=375): r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x1, 0x143000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "08004e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r2, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0x9) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000040)=0x800, 0x4) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r6, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) ioctl$SNDCTL_DSP_GETOSPACE(r6, 0x8010500c, &(0x7f0000000200)) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, 0x0) 4.77606671s ago: executing program 3 (id=376): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() syz_pidfd_open(r0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x11, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$netlink(0x10, 0x3, 0xa) socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0xff7f, 0x8811}, 0x0) 4.313639077s ago: executing program 4 (id=378): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a00)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}], 0x18}}], 0x1, 0x4000040) recvfrom(0xffffffffffffffff, 0x0, 0x12, 0x40002050, 0x0, 0x58) bind$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x4}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x19) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a00120002002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a59", 0x43}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r4, 0x80dc5521, &(0x7f0000000180)=""/135) r5 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)={[{0x2d, 'blkio'}]}, 0x7) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a140efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb737ae996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be500e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef1d7ee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x5, &(0x7f0000000140)=0x6, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) 3.764148946s ago: executing program 3 (id=379): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1a"], 0x7c}}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000000)={r5, r6, 0x1, 0x0, 0x3}) 3.618677302s ago: executing program 2 (id=380): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000001c0)={0x0, 0x0, r5, 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1a"], 0x7c}}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$sndpcmc(&(0x7f00000002c0), 0x7, 0x10000) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r4, 0xc01864b0, &(0x7f0000000000)={r5, r6, 0x1, 0x0, 0x3}) 2.648252484s ago: executing program 2 (id=381): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptp0(0xffffffffffffff9c, 0x0, 0x8080, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) dup(r2) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2a020400) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28) ppoll(&(0x7f0000000100)=[{r3, 0x31}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.625546834s ago: executing program 3 (id=382): prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ptp0(0xffffffffffffff9c, 0x0, 0x8080, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) dup(r2) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2a020400) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "db57cda808852139", "252432e72844858a068b92a5a810f4dc", "11802ff5", "5aee41448c84afb7"}, 0x28) ppoll(&(0x7f0000000100)=[{r3, 0x31}], 0x1, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 2.568613936s ago: executing program 0 (id=383): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0xc, 0xfffffffffffffffe) add_key(&(0x7f00000002c0)='ceph\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x50) 1.642912677s ago: executing program 3 (id=384): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={r3, 0x2}, 0x8) 1.430204987s ago: executing program 2 (id=385): r0 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000880000000200000004"], 0x50) close(0x3) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001180), 0x88003, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r3, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r2, 0x80083313, &(0x7f0000000000)) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc1}, &(0x7f0000000540)={0x0, "28d45e254301ac35780b5bd451f0d571bf9b2f6c86b66eb8a0249255d7e2c81666ac0839616825b8e8d131100a00fe8f7574043de70014929ddb20b29b94565f", 0x10}, 0x48, r0) syz_open_dev$sndmidi(&(0x7f0000000380), 0xc3, 0x88000) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000004000000ff0f00800000a6534c"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x7, 0x14, &(0x7f0000000200)=ANY=[@ANYRES16=r1, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r8 = getpid() r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff}, 0x6) write(r9, &(0x7f0000000340)="4100000001000f", 0x7) sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) fcntl$setownex(r7, 0xf, &(0x7f00000002c0)={0x0, r8}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="80000000", @ANYRES16=r10, @ANYBLOB="050200001a0816fcf2fa7f3a000008000300", @ANYRES32=r11], 0x80}}, 0x24000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) keyctl$read(0xb, r0, &(0x7f0000003440)=""/4114, 0x1012) openat$zero(0xffffffffffffff9c, &(0x7f0000000140), 0x620000, 0x0) 1.101616336s ago: executing program 4 (id=386): r0 = syz_open_dev$loop(&(0x7f0000000080), 0x401, 0x985201) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14507e, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000000c0)={r1, 0x0, {0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1b, 0x0, "8db7a645ed46d5335dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5d030b49f32393a93ea4d0436aa3592a47913", "fc0177a6f3bb16d5d5568693e0e50bbf206c9d8db97cd01095e7ea15b0ba5f8a654e14dc7c4cc6b50488873b3acc6e02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd81992394e3c7a178fb1c16c99189819ef400", [0x80, 0x87]}}) r2 = syz_open_dev$loop(&(0x7f0000000280), 0xffffffff, 0x4000) ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f00000002c0)={0x0, {}, 0x0, {}, 0x80000001, 0x2, 0x10, 0x1d, "22b418b08302004f26220b333898db01a0cabd5601002ed67dd8225d47375daf4f0cce2ae4a77b721d437a1395578ec747c300", "1c8e94a1e05df9e1478038136088ce23dc3cc42ebe9a8ab6769db2db8d8e9b52", [0x6, 0x6]}) 1.010897598s ago: executing program 2 (id=387): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000000)={'pcl812\x00', [0x2, 0x5, 0x0, 0x2, 0x3ff, 0x2, 0x4858, 0x4000000, 0x800, 0xffffff52, 0x67f341ba, 0x4, 0x3, 0x7, 0x5, 0x3, 0x100, 0x8, 0x42a5, 0x7ff, 0x80000001, 0x0, 0x9, 0x7, 0x3, 0x1000, 0x0, 0xffff, 0x9e13, 0x98, 0x5, 0x40]}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x80, 0x9, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_ADT={0x6c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xd1}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0xb}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x45}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x2e}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x20004810}, 0xc010) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = msgget$private(0x0, 0x4) msgctl$MSG_STAT_ANY(r2, 0xd, &(0x7f0000000240)=""/59) r3 = semget$private(0x0, 0x2, 0x30a) semctl$GETZCNT(r3, 0x3, 0xf, &(0x7f0000000280)=""/99) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000300)=""/47) read$FUSE(r1, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000002380)={0x28, 0xffffffffffffffda, r4, {{0x4, 0x80, 0xa4f5357692e65e72}}}, 0x28) msgsnd(r2, &(0x7f00000023c0)={0x0, "56123e4cd9cb4983eae09bf426b4f0661748e3a35cb077c0cc3cd25969860152bf92b7b086e0f44766aeb79eb5fca80ff2463373997e1309602bdce28e1b26459e32219e70030b79688c6321e6a584f1e993c2eadccf1ce9879c1dd7e8729480b106e217dbe348fc88c2f8312253c600e932b0548388de1f482a1cc5d1d7e6f9372f8d605a995e1f0267a375a5319c091aaccf2094d694b99af22ccccef3a77ee55f81bb1c820a224aa09155f4009494af631ddb3ecd4e7d40b30437f1a144c0daad52237b3d981f62666fefc100baf78d03cd4a66fcab97f2685a1b21dd56440300afb5b53d79ae44a31e"}, 0xf3, 0x800) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000024c0)={0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x5, 0x9, 0x6, 0x4, 0xe0, 0x7, 0x6}, &(0x7f0000002580)=0x9c) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000025c0)={r5, 0x2}, &(0x7f0000002600)=0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002640)={r1}, 0x4) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000002680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f0000002700)={r6, 0x200, 0x200}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002780)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000002840)={&(0x7f0000002740)={0x10, 0x0, 0x0, 0x68180}, 0xc, &(0x7f0000002800)={&(0x7f00000027c0)={0x38, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0xc0) ioctl$VIDIOC_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000002880)={0x365, 0x0, '\x00', {0x0, @reserved}}) ioctl$VIDIOC_ENUM_FREQ_BANDS(r1, 0xc0405665, &(0x7f0000002940)={0x9, 0x2, 0x43, 0x20, 0x40, 0x6}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000002980)=0x5, 0x4) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f00000029c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r8, &(0x7f0000002a00)='hugetlb.1GB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$rds(0x15, 0x5, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000002a40), 0x50000, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002bc0)={r1, &(0x7f0000002a80)="97296b4be799da63da5dadc40bc2daf50512c5907caee28c6112cf0f27f3ba7adf04bef44e5be2684d97d1cd4b5c3a2ea0ff02c45a321678532656539c3e7cd260e7dfcb0b08869caa4834ad564f49663aadb1d1a6b7a93cb056e273b77e20f0793b4761ef5d78e43fc0c8677d6132efb11c299e98b255b957d63f2c9406ec34aa4a705203083b861ffa118141b79185f26b646872c0e84e9534d8558c474a5fc7f76c17369622ff086cb18989c4e8478ef376024b95f5c35efb87ee5a56bd5a50ecb75428f7767b7768b5857cd9080ea54cd76e8813a570f2be4d1539399e17bac085fcbad43b", &(0x7f0000002b80)=@udp=r1}, 0x20) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 815.843237ms ago: executing program 4 (id=388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000074000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021380011800a0001006c696d6974000000280002800c00024000000000000000030c00014000000000000001010c0001400000000000000101b81700000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000008c1703800c0000800800034000000002b0"], 0x1874}}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x40}}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) mkdir(&(0x7f00000020c0)='./file0\x00', 0x22) write$FUSE_ENTRY(r4, &(0x7f0000000440)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}}}, 0x90) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@posixacl}]}}) 754.837708ms ago: executing program 2 (id=389): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000000008500000019000000180100002020702500000000002020207b1af8ff00000000bfa100002300000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 54.647407ms ago: executing program 3 (id=390): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = getpid() syz_pidfd_open(r0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$kcm(0x11, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) socket$netlink(0x10, 0x3, 0xa) socket$pppoe(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0xffef, 0x8811}, 0x0) 0s ago: executing program 2 (id=391): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40000103, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(0xffffffffffffffff, &(0x7f0000002d00)=[{{&(0x7f0000000440)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000000500)=""/249, 0xf9}, {&(0x7f0000001780)=""/78, 0x4e}, {&(0x7f0000001800)=""/209, 0xd1}, {&(0x7f0000001900)=""/116, 0x74}, {&(0x7f0000001980)=""/160, 0xa0}, {&(0x7f0000001a40)=""/246, 0xf6}, {&(0x7f0000000600)=""/2, 0x2}, {&(0x7f0000001b40)=""/234, 0xea}], 0x9, &(0x7f0000001d00)=""/4096, 0x1000}, 0x1ff}], 0x1, 0x40000020, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10138, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e24, 0x2c1, @local, 0xfffffff9}}, 0x8, 0x1b56, 0x200, 0x5, 0x0, 0x0, 0x9}, &(0x7f00000000c0)=0x9c) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000280)={r5, 0xffff}, 0x8) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='rxrpc_call\x00', r7}, 0x18) unshare(0x6a040000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.40' (ED25519) to the list of known hosts. [ 82.075289][ T5821] cgroup: Unknown subsys name 'net' [ 82.274547][ T5821] cgroup: Unknown subsys name 'cpuset' [ 82.283995][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.903428][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.715274][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.719441][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.731301][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.738531][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.747403][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.754925][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.762399][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 86.764749][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.772222][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.778750][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 86.799895][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.808407][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 86.830822][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 86.840129][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.857958][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.867680][ T5835] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.882295][ T5154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.889509][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.898791][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.906173][ T5154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.914527][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.925525][ T5843] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.937856][ T5154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.952422][ T5154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.971693][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.666547][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 87.761725][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 87.861898][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 87.886435][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 87.935399][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 88.044420][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.052394][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.059984][ T5845] bridge_slave_0: entered allmulticast mode [ 88.067209][ T5845] bridge_slave_0: entered promiscuous mode [ 88.116234][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.123565][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.131819][ T5845] bridge_slave_1: entered allmulticast mode [ 88.139800][ T5845] bridge_slave_1: entered promiscuous mode [ 88.176836][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.184155][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.192011][ T5832] bridge_slave_0: entered allmulticast mode [ 88.199303][ T5832] bridge_slave_0: entered promiscuous mode [ 88.256756][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.266440][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.273674][ T5832] bridge_slave_1: entered allmulticast mode [ 88.284338][ T5832] bridge_slave_1: entered promiscuous mode [ 88.295000][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.352078][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.375456][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.383448][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.390848][ T5831] bridge_slave_0: entered allmulticast mode [ 88.397976][ T5831] bridge_slave_0: entered promiscuous mode [ 88.456901][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.464492][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.471958][ T5837] bridge_slave_0: entered allmulticast mode [ 88.479536][ T5837] bridge_slave_0: entered promiscuous mode [ 88.487509][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.495885][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.503201][ T5831] bridge_slave_1: entered allmulticast mode [ 88.510481][ T5831] bridge_slave_1: entered promiscuous mode [ 88.517208][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.524637][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.532185][ T5841] bridge_slave_0: entered allmulticast mode [ 88.540261][ T5841] bridge_slave_0: entered promiscuous mode [ 88.550696][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.575126][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.582692][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.589964][ T5837] bridge_slave_1: entered allmulticast mode [ 88.597158][ T5837] bridge_slave_1: entered promiscuous mode [ 88.616214][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.623576][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.631609][ T5841] bridge_slave_1: entered allmulticast mode [ 88.638862][ T5841] bridge_slave_1: entered promiscuous mode [ 88.647619][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.674169][ T5845] team0: Port device team_slave_0 added [ 88.683073][ T5845] team0: Port device team_slave_1 added [ 88.717849][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.782434][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.820270][ T5832] team0: Port device team_slave_0 added [ 88.828874][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.853888][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.866683][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.891388][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.905233][ T5832] team0: Port device team_slave_1 added [ 88.911943][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.919703][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.946277][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.957475][ T5849] Bluetooth: hci4: command tx timeout [ 88.960846][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.968220][ T5154] Bluetooth: hci1: command tx timeout [ 88.974605][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.975556][ T5844] Bluetooth: hci0: command tx timeout [ 89.006169][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.033351][ T5831] team0: Port device team_slave_0 added [ 89.038300][ T5844] Bluetooth: hci2: command tx timeout [ 89.106661][ T5831] team0: Port device team_slave_1 added [ 89.112378][ T5844] Bluetooth: hci3: command tx timeout [ 89.131943][ T5837] team0: Port device team_slave_0 added [ 89.153072][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.160435][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.186660][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.216934][ T5837] team0: Port device team_slave_1 added [ 89.241111][ T5841] team0: Port device team_slave_0 added [ 89.247728][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.254976][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.281014][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.317538][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.326962][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.353400][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.366845][ T5841] team0: Port device team_slave_1 added [ 89.385093][ T5845] hsr_slave_0: entered promiscuous mode [ 89.392093][ T5845] hsr_slave_1: entered promiscuous mode [ 89.412915][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.420295][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.446559][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.485918][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.492929][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.518941][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.531586][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.539178][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.565556][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.597435][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.604716][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.631785][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.657358][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.664767][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.691336][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.788107][ T5832] hsr_slave_0: entered promiscuous mode [ 89.794645][ T5832] hsr_slave_1: entered promiscuous mode [ 89.801207][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.809558][ T5832] Cannot create hsr debugfs directory [ 89.904897][ T5841] hsr_slave_0: entered promiscuous mode [ 89.911600][ T5841] hsr_slave_1: entered promiscuous mode [ 89.917681][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.925381][ T5841] Cannot create hsr debugfs directory [ 89.955943][ T5831] hsr_slave_0: entered promiscuous mode [ 89.962522][ T5831] hsr_slave_1: entered promiscuous mode [ 89.968848][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.976451][ T5831] Cannot create hsr debugfs directory [ 90.007537][ T5837] hsr_slave_0: entered promiscuous mode [ 90.014586][ T5837] hsr_slave_1: entered promiscuous mode [ 90.020957][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.028930][ T5837] Cannot create hsr debugfs directory [ 90.551345][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.571694][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.602018][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.617753][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.678271][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.707887][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.720302][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.748636][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.789350][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.813315][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.839905][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.866030][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.940776][ T5841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.972686][ T5841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.983230][ T5841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.994452][ T5841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.028325][ T5844] Bluetooth: hci4: command tx timeout [ 91.038807][ T5154] Bluetooth: hci1: command tx timeout [ 91.044497][ T5844] Bluetooth: hci0: command tx timeout [ 91.113781][ T5844] Bluetooth: hci2: command tx timeout [ 91.134321][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.167380][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.180791][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.190416][ T5844] Bluetooth: hci3: command tx timeout [ 91.199675][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.262644][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.285869][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.344608][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.393570][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.428177][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.435503][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.450531][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.479193][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.486328][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.527374][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.540147][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.547263][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.557308][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.564450][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.614933][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.622146][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.654117][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.674128][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.681274][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.717143][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.768093][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.831270][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.880951][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.888188][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.901500][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.908710][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.930478][ T45] cfg80211: failed to load regulatory.db [ 91.933791][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.943283][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.007930][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.015138][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.282393][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.413557][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.542823][ T5832] veth0_vlan: entered promiscuous mode [ 92.613501][ T5832] veth1_vlan: entered promiscuous mode [ 92.725475][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.775794][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.872672][ T5832] veth0_macvtap: entered promiscuous mode [ 92.885487][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.904333][ T5832] veth1_macvtap: entered promiscuous mode [ 92.937508][ T5831] veth0_vlan: entered promiscuous mode [ 93.004168][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.021472][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.045059][ T5831] veth1_vlan: entered promiscuous mode [ 93.054808][ T5841] veth0_vlan: entered promiscuous mode [ 93.062979][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.072445][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.081588][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.091315][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.113360][ T5154] Bluetooth: hci1: command tx timeout [ 93.113521][ T5849] Bluetooth: hci4: command tx timeout [ 93.119564][ T5844] Bluetooth: hci0: command tx timeout [ 93.159558][ T5837] veth0_vlan: entered promiscuous mode [ 93.175939][ T5841] veth1_vlan: entered promiscuous mode [ 93.192414][ T5844] Bluetooth: hci2: command tx timeout [ 93.213049][ T5837] veth1_vlan: entered promiscuous mode [ 93.246712][ T5837] veth0_macvtap: entered promiscuous mode [ 93.268952][ T5844] Bluetooth: hci3: command tx timeout [ 93.280326][ T5831] veth0_macvtap: entered promiscuous mode [ 93.316285][ T5831] veth1_macvtap: entered promiscuous mode [ 93.324635][ T5837] veth1_macvtap: entered promiscuous mode [ 93.374588][ T5845] veth0_vlan: entered promiscuous mode [ 93.412819][ T5841] veth0_macvtap: entered promiscuous mode [ 93.428047][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.440105][ T5841] veth1_macvtap: entered promiscuous mode [ 93.455680][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.465209][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.482281][ T5845] veth1_vlan: entered promiscuous mode [ 93.486394][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.506244][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.526051][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.551426][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.570185][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.579911][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.592121][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.601163][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.616269][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.627641][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.636717][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.645666][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.661937][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.678773][ T5932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.686637][ T5932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.731186][ T5841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.743431][ T5841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.752622][ T5841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.762278][ T5841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.777460][ T5845] veth0_macvtap: entered promiscuous mode [ 93.805032][ T5845] veth1_macvtap: entered promiscuous mode [ 93.835387][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.967370][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.989501][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.997712][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.054576][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.091112][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.108867][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.127250][ T5845] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.141602][ T5845] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.157760][ T5845] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.167554][ T5845] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.276526][ T5932] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.301863][ T5932] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.084746][ T5932] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.097758][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.105891][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.127131][ T5932] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.198712][ T5849] Bluetooth: hci0: command tx timeout [ 95.204428][ T5849] Bluetooth: hci1: command tx timeout [ 95.211018][ T5844] Bluetooth: hci4: command tx timeout [ 95.271081][ T5154] Bluetooth: hci2: command tx timeout [ 95.348989][ T5154] Bluetooth: hci3: command tx timeout [ 95.396028][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.411323][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.470684][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.499265][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.557205][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.579227][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.668532][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 95.899747][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 96.323429][ T10] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 96.387709][ T5983] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.439874][ T10] usb 4-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 96.457094][ T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 96.515265][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.793930][ T9] usb 4-1: USB disconnect, device number 2 [ 96.976825][ T5994] netlink: 112 bytes leftover after parsing attributes in process `syz.2.13'. [ 97.030047][ T5994] netlink: 332 bytes leftover after parsing attributes in process `syz.2.13'. [ 97.039198][ T5994] netlink: 'syz.2.13': attribute type 9 has an invalid length. [ 97.046758][ T5994] netlink: 108 bytes leftover after parsing attributes in process `syz.2.13'. [ 97.055682][ T5994] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13'. [ 97.065967][ T5994] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.216818][ T5998] loop7: detected capacity change from 0 to 7 [ 97.227160][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.236528][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.246168][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.255439][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.266693][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.275998][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.285830][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.295134][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.355065][ T6001] Invalid logical block size (6) [ 97.381443][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.390703][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.399185][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 97.408434][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.417618][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.428834][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 97.438586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 97.442815][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.456083][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.464602][ T5998] ldm_validate_partition_table(): Disk read failed. [ 97.497712][ T6004] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16'. [ 97.515715][ T6004] netlink: 128 bytes leftover after parsing attributes in process `syz.2.16'. [ 97.970292][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 97.979563][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 97.989720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 98.211121][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.220372][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 98.338709][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.582967][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.592231][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 98.600819][ T5998] Dev loop7: unable to read RDB block 0 [ 98.647469][ T5998] loop7: unable to read partition table [ 98.698874][ T5998] loop7: partition table beyond EOD, truncated [ 98.764605][ T5998] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 99.140052][ T6017] netlink: 'syz.2.20': attribute type 6 has an invalid length. [ 99.207136][ T6015] netlink: 'syz.2.20': attribute type 6 has an invalid length. [ 99.437856][ T56] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.529536][ T6017] Zero length message leads to an empty skb [ 99.660768][ T56] usb 1-1: Using ep0 maxpacket: 32 [ 99.671870][ T6015] policy can only be matched on NF_INET_PRE_ROUTING [ 99.671909][ T6015] unable to load match [ 99.695736][ T56] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.717766][ T6015] overlayfs: missing 'lowerdir' [ 99.728318][ T56] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 99.743259][ T6031] capability: warning: `syz.3.23' uses deprecated v2 capabilities in a way that may be insecure [ 99.764817][ T56] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 99.777780][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.799864][ T56] usb 1-1: Product: syz [ 99.804114][ T56] usb 1-1: Manufacturer: syz [ 99.823111][ T56] usb 1-1: SerialNumber: syz [ 99.892338][ T56] usb 1-1: config 0 descriptor?? [ 100.136044][ T6012] netlink: 277 bytes leftover after parsing attributes in process `syz.0.19'. [ 100.210836][ T56] usb 1-1: USB disconnect, device number 2 [ 100.280540][ T6035] netlink: 60 bytes leftover after parsing attributes in process `syz.1.24'. [ 100.336825][ T6035] netlink: 20 bytes leftover after parsing attributes in process `syz.1.24'. [ 100.345941][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.1.24'. [ 100.718622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 100.819961][ T6040] syz.1.26: attempt to access beyond end of device [ 100.819961][ T6040] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 100.834663][ T6040] gfs2: error -5 reading superblock [ 100.878713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 100.898647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 100.948742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 100.949373][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 102.173668][ T6061] lo speed is unknown, defaulting to 1000 [ 102.180225][ T6061] lo speed is unknown, defaulting to 1000 [ 102.193613][ T6061] lo speed is unknown, defaulting to 1000 [ 102.231553][ T6061] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 102.309246][ T6061] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 102.834862][ T6061] lo speed is unknown, defaulting to 1000 [ 102.917156][ T6061] lo speed is unknown, defaulting to 1000 [ 102.925200][ T6061] lo speed is unknown, defaulting to 1000 [ 102.933127][ T6061] lo speed is unknown, defaulting to 1000 [ 102.940811][ T6061] lo speed is unknown, defaulting to 1000 [ 103.364534][ T6066] syz.3.35 uses obsolete (PF_INET,SOCK_PACKET) [ 103.534794][ T6070] FAULT_INJECTION: forcing a failure. [ 103.534794][ T6070] name failslab, interval 1, probability 0, space 0, times 1 [ 103.558754][ T6070] CPU: 0 UID: 0 PID: 6070 Comm: syz.1.36 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 103.558783][ T6070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.558815][ T6070] Call Trace: [ 103.558827][ T6070] [ 103.558836][ T6070] dump_stack_lvl+0x189/0x250 [ 103.558885][ T6070] ? __pfx____ratelimit+0x10/0x10 [ 103.558907][ T6070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.558936][ T6070] ? __pfx__printk+0x10/0x10 [ 103.558964][ T6070] ? __pfx___might_resched+0x10/0x10 [ 103.558987][ T6070] ? fs_reclaim_acquire+0x7d/0x100 [ 103.559016][ T6070] should_fail_ex+0x414/0x560 [ 103.559043][ T6070] should_failslab+0xa8/0x100 [ 103.559067][ T6070] __kmalloc_noprof+0xcb/0x4f0 [ 103.559103][ T6070] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 103.559123][ T6070] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 103.559155][ T6070] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 103.559188][ T6070] genl_family_rcv_msg_doit+0xb8/0x300 [ 103.559231][ T6070] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 103.559256][ T6070] ? rcu_is_watching+0x15/0xb0 [ 103.559279][ T6070] ? cap_capable+0x11f/0x460 [ 103.559300][ T6070] ? safesetid_security_capable+0xa9/0x1a0 [ 103.559324][ T6070] ? bpf_lsm_capable+0x9/0x20 [ 103.559348][ T6070] ? security_capable+0x7e/0x2e0 [ 103.559381][ T6070] genl_rcv_msg+0x60e/0x790 [ 103.559427][ T6070] ? __pfx_genl_rcv_msg+0x10/0x10 [ 103.559447][ T6070] ? ref_tracker_free+0x63a/0x7d0 [ 103.559468][ T6070] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 103.559497][ T6070] ? __pfx_nl80211_connect+0x10/0x10 [ 103.559519][ T6070] ? __pfx_nl80211_post_doit+0x10/0x10 [ 103.559538][ T6070] ? __pfx_ref_tracker_free+0x10/0x10 [ 103.559572][ T6070] netlink_rcv_skb+0x205/0x470 [ 103.559601][ T6070] ? __pfx_genl_rcv_msg+0x10/0x10 [ 103.559624][ T6070] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.559690][ T6070] ? down_read+0x1ad/0x2e0 [ 103.559731][ T6070] genl_rcv+0x28/0x40 [ 103.559749][ T6070] netlink_unicast+0x75c/0x8e0 [ 103.559786][ T6070] netlink_sendmsg+0x805/0xb30 [ 103.559825][ T6070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.559863][ T6070] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 103.559882][ T6070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.559923][ T6070] __sock_sendmsg+0x21c/0x270 [ 103.559952][ T6070] ____sys_sendmsg+0x505/0x830 [ 103.559989][ T6070] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.560030][ T6070] ? import_iovec+0x74/0xa0 [ 103.560062][ T6070] ___sys_sendmsg+0x21f/0x2a0 [ 103.560095][ T6070] ? __pfx____sys_sendmsg+0x10/0x10 [ 103.560164][ T6070] ? __fget_files+0x2a/0x420 [ 103.560186][ T6070] ? __fget_files+0x3a0/0x420 [ 103.560220][ T6070] __x64_sys_sendmsg+0x19b/0x260 [ 103.560255][ T6070] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 103.560296][ T6070] ? __pfx_ksys_write+0x10/0x10 [ 103.560321][ T6070] ? do_syscall_64+0xbe/0x3b0 [ 103.560348][ T6070] do_syscall_64+0xfa/0x3b0 [ 103.560369][ T6070] ? lockdep_hardirqs_on+0x9c/0x150 [ 103.560392][ T6070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.560411][ T6070] ? clear_bhb_loop+0x60/0xb0 [ 103.560434][ T6070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.560452][ T6070] RIP: 0033:0x7f4ea838eb69 [ 103.560474][ T6070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.560490][ T6070] RSP: 002b:00007f4ea925f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.560510][ T6070] RAX: ffffffffffffffda RBX: 00007f4ea85b6080 RCX: 00007f4ea838eb69 [ 103.560524][ T6070] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 103.560535][ T6070] RBP: 00007f4ea925f090 R08: 0000000000000000 R09: 0000000000000000 [ 103.560546][ T6070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.560558][ T6070] R13: 0000000000000001 R14: 00007f4ea85b6080 R15: 00007ffe427f53d8 [ 103.560588][ T6070] [ 105.564046][ T30] audit: type=1326 audit(1754038964.823:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6080 comm="syz.4.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c58eb69 code=0x7ffc0000 [ 105.735382][ T6085] sg_write: data in/out 220/14 bytes for SCSI command 0x0-- guessing data in; [ 105.735382][ T6085] program syz.0.39 not setting count and/or reply_len properly [ 105.765637][ T30] audit: type=1326 audit(1754038964.823:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6080 comm="syz.4.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c58eb69 code=0x7ffc0000 [ 105.839313][ T30] audit: type=1326 audit(1754038964.843:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6080 comm="syz.4.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c58eb69 code=0x7ffc0000 [ 105.861601][ T30] audit: type=1326 audit(1754038964.853:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6080 comm="syz.4.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c58eb69 code=0x7ffc0000 [ 105.886622][ T30] audit: type=1326 audit(1754038964.873:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6080 comm="syz.4.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7feb2c58eb69 code=0x7ffc0000 [ 105.909165][ T30] audit: type=1326 audit(1754038964.913:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6080 comm="syz.4.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c58eb69 code=0x7ffc0000 [ 105.979512][ T30] audit: type=1326 audit(1754038964.923:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6080 comm="syz.4.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c58eb69 code=0x7ffc0000 [ 106.091384][ T30] audit: type=1326 audit(1754038964.933:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6080 comm="syz.4.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feb2c58eb69 code=0x7ffc0000 [ 106.272514][ T30] audit: type=1326 audit(1754038964.943:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6080 comm="syz.4.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c58eb69 code=0x7ffc0000 [ 106.519571][ T30] audit: type=1326 audit(1754038964.943:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6080 comm="syz.4.40" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feb2c58eb69 code=0x7ffc0000 [ 107.669544][ T5899] IPVS: starting estimator thread 0... [ 107.771587][ T6102] IPVS: using max 28 ests per chain, 67200 per kthread [ 108.056306][ T6114] process 'syz.0.50' launched './file2' with NULL argv: empty string added [ 108.088753][ T6115] netlink: 'syz.4.48': attribute type 1 has an invalid length. [ 108.191026][ T979] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.470613][ T979] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62 [ 108.536456][ T6123] FAULT_INJECTION: forcing a failure. [ 108.536456][ T6123] name failslab, interval 1, probability 0, space 0, times 0 [ 108.543645][ T979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.574851][ T6123] CPU: 1 UID: 0 PID: 6123 Comm: syz.4.51 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 108.574877][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.574888][ T6123] Call Trace: [ 108.574896][ T6123] [ 108.574905][ T6123] dump_stack_lvl+0x189/0x250 [ 108.574932][ T6123] ? __pfx____ratelimit+0x10/0x10 [ 108.574953][ T6123] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.574976][ T6123] ? __pfx__printk+0x10/0x10 [ 108.575005][ T6123] ? __pfx___might_resched+0x10/0x10 [ 108.575027][ T6123] ? fs_reclaim_acquire+0x7d/0x100 [ 108.575056][ T6123] should_fail_ex+0x414/0x560 [ 108.575083][ T6123] should_failslab+0xa8/0x100 [ 108.575107][ T6123] __kmalloc_cache_noprof+0x70/0x3d0 [ 108.575127][ T6123] ? cfg80211_connect+0xcfd/0x21a0 [ 108.575157][ T6123] cfg80211_connect+0xcfd/0x21a0 [ 108.575195][ T6123] ? __asan_memset+0x22/0x50 [ 108.575259][ T6123] nl80211_connect+0x17bc/0x1cd0 [ 108.575288][ T6123] ? __pfx___mutex_trylock_common+0x10/0x10 [ 108.575320][ T6123] ? __pfx_nl80211_connect+0x10/0x10 [ 108.575342][ T6123] ? trace_contention_end+0x39/0x120 [ 108.575408][ T6123] ? nl80211_pre_doit+0x4f1/0x930 [ 108.575434][ T6123] genl_family_rcv_msg_doit+0x215/0x300 [ 108.575463][ T6123] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 108.575497][ T6123] ? bpf_lsm_capable+0x9/0x20 [ 108.575541][ T6123] ? security_capable+0x7e/0x2e0 [ 108.575576][ T6123] genl_rcv_msg+0x60e/0x790 [ 108.575606][ T6123] ? __pfx_genl_rcv_msg+0x10/0x10 [ 108.575626][ T6123] ? ref_tracker_free+0x63a/0x7d0 [ 108.575647][ T6123] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 108.575665][ T6123] ? __pfx_nl80211_connect+0x10/0x10 [ 108.575688][ T6123] ? __pfx_nl80211_post_doit+0x10/0x10 [ 108.575709][ T6123] ? __pfx_ref_tracker_free+0x10/0x10 [ 108.575745][ T6123] netlink_rcv_skb+0x205/0x470 [ 108.575776][ T6123] ? __pfx_genl_rcv_msg+0x10/0x10 [ 108.575801][ T6123] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 108.575849][ T6123] ? down_read+0x1ad/0x2e0 [ 108.575877][ T6123] genl_rcv+0x28/0x40 [ 108.575896][ T6123] netlink_unicast+0x75c/0x8e0 [ 108.575935][ T6123] netlink_sendmsg+0x805/0xb30 [ 108.575995][ T6123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.576036][ T6123] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 108.576058][ T6123] ? __pfx_netlink_sendmsg+0x10/0x10 [ 108.576091][ T6123] __sock_sendmsg+0x21c/0x270 [ 108.576122][ T6123] ____sys_sendmsg+0x505/0x830 [ 108.576163][ T6123] ? __pfx_____sys_sendmsg+0x10/0x10 [ 108.576215][ T6123] ? import_iovec+0x74/0xa0 [ 108.576252][ T6123] ___sys_sendmsg+0x21f/0x2a0 [ 108.576302][ T6123] ? __pfx____sys_sendmsg+0x10/0x10 [ 108.576374][ T6123] ? __fget_files+0x2a/0x420 [ 108.576397][ T6123] ? __fget_files+0x3a0/0x420 [ 108.576433][ T6123] __x64_sys_sendmsg+0x19b/0x260 [ 108.576469][ T6123] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 108.576514][ T6123] ? __pfx_ksys_write+0x10/0x10 [ 108.576531][ T6123] ? rcu_is_watching+0x15/0xb0 [ 108.576560][ T6123] ? do_syscall_64+0xbe/0x3b0 [ 108.576589][ T6123] do_syscall_64+0xfa/0x3b0 [ 108.576611][ T6123] ? lockdep_hardirqs_on+0x9c/0x150 [ 108.576633][ T6123] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.576654][ T6123] ? clear_bhb_loop+0x60/0xb0 [ 108.576680][ T6123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.576700][ T6123] RIP: 0033:0x7feb2c58eb69 [ 108.576718][ T6123] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.576736][ T6123] RSP: 002b:00007feb2d355038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 108.576758][ T6123] RAX: ffffffffffffffda RBX: 00007feb2c7b5fa0 RCX: 00007feb2c58eb69 [ 108.576774][ T6123] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 108.576786][ T6123] RBP: 00007feb2d355090 R08: 0000000000000000 R09: 0000000000000000 [ 108.576799][ T6123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.576811][ T6123] R13: 0000000000000000 R14: 00007feb2c7b5fa0 R15: 00007ffe622df998 [ 108.576843][ T6123] [ 109.169340][ T6124] random: crng reseeded on system resumption [ 109.239524][ T979] usb 2-1: config 0 descriptor?? [ 109.338543][ T979] usb 2-1: selecting invalid altsetting 1 [ 109.365465][ T979] flexcop_usb: set interface failed. [ 109.395998][ T979] b2c2_flexcop_usb 2-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22 [ 109.552288][ T5851] usb 2-1: USB disconnect, device number 2 [ 109.716901][ T6148] __nla_validate_parse: 1 callbacks suppressed [ 109.716915][ T6148] netlink: 12 bytes leftover after parsing attributes in process `syz.1.57'. [ 109.731996][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 109.742148][ T5975] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.842098][ T56] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 109.898250][ T5975] usb 3-1: Using ep0 maxpacket: 16 [ 109.905444][ T5975] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.126551][ T5975] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 110.141068][ T5975] usb 3-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 110.150277][ T5975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.163319][ T5975] usb 3-1: config 0 descriptor?? [ 110.198317][ T56] usb 4-1: Using ep0 maxpacket: 32 [ 110.654771][ T56] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 110.692471][ T6165] netlink: 44 bytes leftover after parsing attributes in process `syz.0.61'. [ 110.705702][ T6165] ======================================================= [ 110.705702][ T6165] WARNING: The mand mount option has been deprecated and [ 110.705702][ T6165] and is ignored by this kernel. Remove the mand [ 110.705702][ T6165] option from the mount to silence this warning. [ 110.705702][ T6165] ======================================================= [ 110.741495][ T6165] new mount options do not match the existing superblock, will be ignored [ 110.756845][ T6165] option changes via remount are deprecated (pid=6159 comm=syz.0.61) [ 111.186906][ T56] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 111.278268][ T56] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.338535][ T56] usb 4-1: Product: syz [ 111.344282][ T56] usb 4-1: Manufacturer: syz [ 111.426907][ T56] usb 4-1: SerialNumber: syz [ 111.456877][ T56] usb 4-1: config 0 descriptor?? [ 111.528683][ T5975] smartjoyplus 0003:0925:0005.0001: item fetching failed at offset 3/5 [ 111.593364][ T5975] smartjoyplus 0003:0925:0005.0001: parse failed [ 111.768686][ T6141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.774158][ T5975] smartjoyplus 0003:0925:0005.0001: probe with driver smartjoyplus failed with error -22 [ 111.790684][ T6143] netlink: 277 bytes leftover after parsing attributes in process `syz.3.55'. [ 111.825458][ T6141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.843007][ T5975] usb 4-1: USB disconnect, device number 3 [ 111.895616][ T10] usb 3-1: USB disconnect, device number 2 [ 111.924237][ T6175] program syz.4.64 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.336474][ T6176] netlink: 16 bytes leftover after parsing attributes in process `syz.0.65'. [ 112.354799][ T6176] netlink: 128 bytes leftover after parsing attributes in process `syz.0.65'. [ 112.449742][ T5975] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 112.682708][ T5975] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 112.798650][ T5975] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.024843][ T5975] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 113.455542][ T5975] usb 5-1: config 1 has no interface number 1 [ 113.462534][ T5975] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 113.482550][ T5975] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.517072][ T5975] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.559646][ T5975] usb 5-1: Product: syz [ 113.563867][ T5975] usb 5-1: Manufacturer: syz [ 113.607544][ T5975] usb 5-1: SerialNumber: syz [ 113.814103][ T6194] syz.0.71: attempt to access beyond end of device [ 113.814103][ T6194] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 113.827530][ T6194] gfs2: error -5 reading superblock [ 114.320266][ T5975] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 114.345923][ T5975] usb 5-1: MIDIStreaming interface descriptor not found [ 114.574982][ T5975] usb 5-1: USB disconnect, device number 2 [ 115.302217][ T5965] udevd[5965]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.528274][ T979] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.700266][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.731971][ T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.761937][ T979] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.850962][ T979] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 116.060749][ T979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.089019][ T979] usb 4-1: config 0 descriptor?? [ 116.434789][ T979] usbhid 4-1:0.0: can't add hid device: -71 [ 116.447368][ T979] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 116.581397][ T6236] syz.4.80: attempt to access beyond end of device [ 116.581397][ T6236] nbd4: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 116.595153][ T6236] gfs2: error -5 reading superblock [ 117.063525][ T979] usb 4-1: USB disconnect, device number 4 [ 117.190696][ T6238] netlink: 4344 bytes leftover after parsing attributes in process `syz.3.81'. [ 117.250020][ T6240] syz.0.82: attempt to access beyond end of device [ 117.250020][ T6240] nbd0: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 117.263036][ T6240] gfs2: error -5 reading superblock [ 117.356542][ T6242] CUSE: unknown device info "ÿ" [ 117.366975][ T6242] CUSE: zero length info key specified [ 117.518683][ T979] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 117.678264][ T979] usb 4-1: Using ep0 maxpacket: 16 [ 117.712064][ T979] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.737008][ T979] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.795301][ T979] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.824858][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.847731][ T979] usb 4-1: Product: syz [ 117.858869][ T6250] 9pnet_fd: Insufficient options for proto=fd [ 117.865114][ T979] usb 4-1: Manufacturer: syz [ 117.871694][ T979] usb 4-1: SerialNumber: syz [ 118.002019][ T6253] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.055863][ T6253] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.434772][ T979] usb 4-1: 0:2 : does not exist [ 118.554168][ T979] usb 4-1: USB disconnect, device number 5 [ 118.677577][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.056242][ T6266] netlink: 72 bytes leftover after parsing attributes in process `syz.4.92'. [ 121.563571][ T6282] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 121.571854][ T6282] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 121.580537][ T6282] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 121.589192][ T6282] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 122.017970][ T6285] 9pnet_fd: Insufficient options for proto=fd [ 122.283782][ T6294] bond_slave_0: entered promiscuous mode [ 122.290001][ T6294] bond_slave_1: entered promiscuous mode [ 122.362361][ T6294] vlan2: entered promiscuous mode [ 122.688319][ T6294] bond0: entered promiscuous mode [ 123.410235][ T56] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 123.514830][ T6310] mkiss: ax0: crc mode is auto. [ 123.712121][ T56] usb 1-1: Using ep0 maxpacket: 32 [ 123.773023][ T56] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 123.917798][ T56] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 124.151742][ T56] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 124.356994][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 124.583297][ T56] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 124.811635][ T56] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 125.085676][ T56] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 125.282927][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.630880][ T56] usb 1-1: config 0 descriptor?? [ 126.833075][ T56] usb 1-1: can't set config #0, error -71 [ 126.874890][ T6324] syz.3.112: attempt to access beyond end of device [ 126.874890][ T6324] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 126.888366][ T6324] gfs2: error -5 reading superblock [ 126.945121][ T56] usb 1-1: USB disconnect, device number 3 [ 127.130403][ T6331] netlink: 72 bytes leftover after parsing attributes in process `syz.0.111'. [ 127.467491][ T6336] tmpfs: Unknown parameter 'usrquota_block' [ 128.371128][ T6333] 9pnet_fd: Insufficient options for proto=fd [ 128.549336][ T6339] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 128.557225][ T6339] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 128.566962][ T6339] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 128.575032][ T6339] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 129.205707][ T6346] bond_slave_0: entered promiscuous mode [ 129.211507][ T6346] bond_slave_1: entered promiscuous mode [ 129.224172][ T6346] vlan2: entered promiscuous mode [ 129.231097][ T6346] bond0: entered promiscuous mode [ 129.381094][ T6343] lo speed is unknown, defaulting to 1000 [ 129.479632][ T5899] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 129.493059][ T6351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 129.638494][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 129.653064][ T5899] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 129.674137][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.697665][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.742997][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 129.784152][ T5899] usb 5-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 129.828496][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.843379][ T5899] usb 5-1: config 0 descriptor?? [ 130.142167][ T5899] redragon 0003:0C45:760B.0002: unknown main item tag 0x6 [ 130.196907][ T5899] redragon 0003:0C45:760B.0002: item fetching failed at offset 7/133 [ 130.241502][ T5899] redragon 0003:0C45:760B.0002: probe with driver redragon failed with error -22 [ 130.327805][ T5899] usb 5-1: USB disconnect, device number 3 [ 131.402385][ T6386] netlink: 'syz.4.130': attribute type 9 has an invalid length. [ 131.415815][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.130'. [ 131.436565][ T6386] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.446150][ T6386] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.455079][ T6386] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.463855][ T6386] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.501093][ T6386] netlink: 'syz.4.130': attribute type 9 has an invalid length. [ 131.531019][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.130'. [ 131.710070][ T5975] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.242860][ T5975] usb 4-1: Using ep0 maxpacket: 16 [ 132.286799][ T5975] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 132.327074][ T5975] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 132.384882][ T5975] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 132.418250][ T5975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.448186][ T5975] usb 4-1: Product: syz [ 132.462658][ T5975] usb 4-1: Manufacturer: syz [ 132.467314][ T5975] usb 4-1: SerialNumber: syz [ 132.885725][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.989341][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.501360][ T5975] usb 4-1: config 0 descriptor?? [ 135.885870][ T6415] warning: `syz.1.138' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 136.227319][ T5975] usb 4-1: can't set config #0, error -71 [ 136.238555][ T6403] mkiss: ax0: crc mode is auto. [ 136.276219][ T5975] usb 4-1: USB disconnect, device number 6 [ 136.396801][ T6422] netlink: 24 bytes leftover after parsing attributes in process `syz.4.139'. [ 136.668524][ T5834] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 136.844643][ T5948] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 136.927140][ T5834] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 136.927189][ T5834] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.927224][ T5834] usb 5-1: Product: syz [ 136.927255][ T5834] usb 5-1: Manufacturer: syz [ 136.927287][ T5834] usb 5-1: SerialNumber: syz [ 137.008441][ T5948] usb 2-1: Using ep0 maxpacket: 16 [ 137.053709][ T5948] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 137.053841][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.053927][ T5948] usb 2-1: Product: syz [ 137.054009][ T5948] usb 2-1: Manufacturer: syz [ 137.054097][ T5948] usb 2-1: SerialNumber: syz [ 137.128944][ T5834] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 137.259623][ T5948] usb 2-1: config 0 descriptor?? [ 137.315662][ T6441] netlink: 32 bytes leftover after parsing attributes in process `syz.3.145'. [ 137.315754][ T6441] netlink: 32 bytes leftover after parsing attributes in process `syz.3.145'. [ 137.592032][ T5948] usb 2-1: USB disconnect, device number 3 [ 137.657682][ T5834] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 137.669160][ T6441] netlink: 32 bytes leftover after parsing attributes in process `syz.3.145'. [ 137.669232][ T6441] netlink: 32 bytes leftover after parsing attributes in process `syz.3.145'. [ 138.460514][ T5975] usb 5-1: USB disconnect, device number 4 [ 139.338300][ T5948] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 139.593517][ T5834] usb 5-1: Service connection timeout for: 256 [ 139.608202][ T5834] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 139.617244][ T5834] ath9k_htc: Failed to initialize the device [ 139.649141][ T5948] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 139.668559][ T5975] usb 5-1: ath9k_htc: USB layer deinitialized [ 139.715715][ T5948] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 139.788940][ T5948] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 139.868415][ T56] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 139.913944][ T6476] netlink: 72 bytes leftover after parsing attributes in process `syz.2.153'. [ 139.961294][ T5948] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 140.029349][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.098376][ T56] usb 1-1: device descriptor read/64, error -71 [ 140.181476][ T6467] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 140.328364][ T6455] mmap: syz.1.147 (6455) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.418862][ T56] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 140.598437][ T56] usb 1-1: device descriptor read/64, error -71 [ 140.678232][ T979] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 140.719636][ T56] usb usb1-port1: attempt power cycle [ 140.858578][ T979] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 141.068374][ T56] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 141.111238][ T56] usb 1-1: device descriptor read/8, error -71 [ 141.121040][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.330905][ T5948] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 141.361233][ T979] usb 5-1: config 0 descriptor?? [ 141.370326][ T5948] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input7 [ 141.399891][ T979] cp210x 5-1:0.0: cp210x converter detected [ 141.422203][ T56] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 141.479694][ T5948] usb 4-1: USB disconnect, device number 7 [ 141.479763][ C1] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 141.498748][ T56] usb 1-1: device descriptor read/8, error -71 [ 141.596569][ T6497] FAULT_INJECTION: forcing a failure. [ 141.596569][ T6497] name failslab, interval 1, probability 0, space 0, times 0 [ 141.607052][ T979] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 141.609793][ T56] usb usb1-port1: unable to enumerate USB device [ 141.633630][ T979] cp210x 5-1:0.0: querying part number failed [ 141.672622][ T6497] CPU: 0 UID: 0 PID: 6497 Comm: syz.1.158 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 141.672649][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 141.672662][ T6497] Call Trace: [ 141.672671][ T6497] [ 141.672681][ T6497] dump_stack_lvl+0x189/0x250 [ 141.672719][ T6497] ? __pfx____ratelimit+0x10/0x10 [ 141.672743][ T6497] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.672768][ T6497] ? __pfx__printk+0x10/0x10 [ 141.672803][ T6497] ? ref_tracker_alloc+0x318/0x460 [ 141.672831][ T6497] should_fail_ex+0x414/0x560 [ 141.672858][ T6497] should_failslab+0xa8/0x100 [ 141.672884][ T6497] kmem_cache_alloc_noprof+0x73/0x3c0 [ 141.672905][ T6497] ? skb_clone+0x212/0x3a0 [ 141.672931][ T6497] skb_clone+0x212/0x3a0 [ 141.672956][ T6497] __netlink_deliver_tap+0x404/0x850 [ 141.673001][ T6497] ? netlink_deliver_tap+0x2e/0x1b0 [ 141.673033][ T6497] netlink_deliver_tap+0x19c/0x1b0 [ 141.673077][ T6497] netlink_unicast+0x730/0x8e0 [ 141.673125][ T6497] netlink_sendmsg+0x805/0xb30 [ 141.673162][ T6497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.673198][ T6497] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 141.673218][ T6497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.673247][ T6497] __sock_sendmsg+0x21c/0x270 [ 141.673273][ T6497] ____sys_sendmsg+0x505/0x830 [ 141.673326][ T6497] ? __pfx_____sys_sendmsg+0x10/0x10 [ 141.673369][ T6497] ? import_iovec+0x74/0xa0 [ 141.673414][ T6497] ___sys_sendmsg+0x21f/0x2a0 [ 141.673447][ T6497] ? __pfx____sys_sendmsg+0x10/0x10 [ 141.673514][ T6497] ? __fget_files+0x2a/0x420 [ 141.673535][ T6497] ? __fget_files+0x3a0/0x420 [ 141.673567][ T6497] __x64_sys_sendmsg+0x19b/0x260 [ 141.673600][ T6497] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 141.673641][ T6497] ? __pfx_ksys_write+0x10/0x10 [ 141.673656][ T6497] ? rcu_is_watching+0x15/0xb0 [ 141.673683][ T6497] ? do_syscall_64+0xbe/0x3b0 [ 141.673715][ T6497] do_syscall_64+0xfa/0x3b0 [ 141.673736][ T6497] ? lockdep_hardirqs_on+0x9c/0x150 [ 141.673756][ T6497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.673776][ T6497] ? clear_bhb_loop+0x60/0xb0 [ 141.673799][ T6497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.673818][ T6497] RIP: 0033:0x7f4ea838eb69 [ 141.673835][ T6497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.673856][ T6497] RSP: 002b:00007f4ea9280038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 141.673876][ T6497] RAX: ffffffffffffffda RBX: 00007f4ea85b5fa0 RCX: 00007f4ea838eb69 [ 141.673890][ T6497] RDX: 0000000004004804 RSI: 0000200000000000 RDI: 0000000000000003 [ 141.673903][ T6497] RBP: 00007f4ea9280090 R08: 0000000000000000 R09: 0000000000000000 [ 141.673914][ T6497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.673926][ T6497] R13: 0000000000000000 R14: 00007f4ea85b5fa0 R15: 00007ffe427f53d8 [ 141.673955][ T6497] [ 141.957550][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.055920][ T979] usb 5-1: cp210x converter now attached to ttyUSB0 [ 142.071878][ T979] usb 5-1: USB disconnect, device number 5 [ 142.127305][ T979] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 142.139958][ T979] cp210x 5-1:0.0: device disconnected [ 142.314286][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 142.463736][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 142.474560][ T979] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 142.670493][ T979] usb 5-1: unable to get BOS descriptor or descriptor too short [ 143.515030][ T979] usb 5-1: not running at top speed; connect to a high speed hub [ 143.529969][ T979] usb 5-1: config 64 has an invalid interface number: 227 but max is 0 [ 143.538527][ T979] usb 5-1: config 64 has no interface number 0 [ 143.544821][ T979] usb 5-1: config 64 interface 227 altsetting 9 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 143.565886][ T979] usb 5-1: config 64 interface 227 has no altsetting 0 [ 143.607831][ T979] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0006, bcdDevice=4f.a5 [ 143.617448][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.629697][ T979] usb 5-1: Product: syz [ 143.633928][ T979] usb 5-1: Manufacturer: syz [ 143.655107][ T979] usb 5-1: SerialNumber: syz [ 143.683944][ T6519] ./file0: Can't open blockdev [ 143.752018][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 144.256232][ T6529] netlink: 16 bytes leftover after parsing attributes in process `syz.3.169'. [ 144.266289][ T6529] netlink: 128 bytes leftover after parsing attributes in process `syz.3.169'. [ 144.627445][ T979] ati_remote 5-1:64.227: ati_remote_probe: Unexpected endpoint_in [ 144.661533][ T979] usb 5-1: USB disconnect, device number 6 [ 145.028591][ T6537] netlink: 72 bytes leftover after parsing attributes in process `syz.1.168'. [ 145.683504][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 145.683524][ T30] audit: type=1400 audit(1754039005.003:25): lsm=SMACK fn=smack_file_fcntl action=denied subject="w" object="_" requested=w pid=6532 comm="syz.0.167" path="/38" dev="tmpfs" ino=213 [ 145.845588][ T6547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.861173][ T6547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.881893][ T5834] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 145.998455][ T5851] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 146.048872][ T5834] usb 4-1: device descriptor read/64, error -71 [ 146.128803][ T5851] usb 5-1: device descriptor read/64, error -71 [ 147.232541][ T5851] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 147.427139][ T5834] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 147.538451][ T5851] usb 5-1: device descriptor read/64, error -71 [ 147.578392][ T5834] usb 4-1: device descriptor read/64, error -71 [ 148.498488][ T5851] usb usb5-port1: attempt power cycle [ 148.730987][ T6562] mkiss: ax0: crc mode is auto. [ 148.948388][ T5851] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 149.601684][ T5834] usb usb4-port1: attempt power cycle [ 149.669538][ T5851] usb 5-1: device descriptor read/8, error -71 [ 154.108472][ T5834] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 154.544287][ T5834] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 154.678721][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.739700][ T5834] usb 5-1: config 0 descriptor?? [ 154.770745][ T5834] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 154.978499][ T30] audit: type=1326 audit(1754039014.293:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6572 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c58eb69 code=0x7ffc0000 [ 154.978639][ T5834] gp8psk: usb in 128 operation failed. [ 155.031627][ T5834] gp8psk: usb in 137 operation failed. [ 155.048684][ T5834] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 155.069983][ T5834] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 155.102139][ T30] audit: type=1326 audit(1754039014.293:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6572 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c58eb69 code=0x7ffc0000 [ 155.144676][ T5834] usb 5-1: USB disconnect, device number 11 [ 155.192308][ T30] audit: type=1326 audit(1754039014.293:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6572 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7feb2c58eb69 code=0x7ffc0000 [ 155.287763][ T30] audit: type=1326 audit(1754039014.293:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6572 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c58eb69 code=0x7ffc0000 [ 155.372383][ T30] audit: type=1326 audit(1754039014.293:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6572 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c58eb69 code=0x7ffc0000 [ 155.447369][ T30] audit: type=1326 audit(1754039014.293:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6572 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feb2c58e76b code=0x7ffc0000 [ 155.524313][ T30] audit: type=1326 audit(1754039014.293:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6572 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c58eb69 code=0x7ffc0000 [ 155.594615][ T30] audit: type=1326 audit(1754039014.293:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6572 comm="syz.4.180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb2c58eb69 code=0x7ffc0000 [ 155.971307][ T6580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.183'. [ 156.059651][ T6580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.183'. [ 157.162963][ T6610] tipc: Started in network mode [ 157.168074][ T6610] tipc: Node identity ac14140f, cluster identity 4711 [ 157.179487][ T6610] tipc: New replicast peer: 255.255.255.255 [ 157.196531][ T6610] tipc: Enabled bearer , priority 10 [ 157.247250][ T6610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.190'. [ 157.256677][ T6610] tipc: Disabling bearer [ 157.509014][ T5899] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 157.725367][ T6607] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 157.768445][ T6607] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 157.779966][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 157.792378][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 157.803725][ T5834] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 157.813456][ T6607] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 157.822152][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 157.845504][ T6607] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 157.857217][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 157.873912][ T5899] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 157.892754][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.919124][ T5899] usb 5-1: config 0 descriptor?? [ 157.934548][ T6605] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 158.158895][ T5834] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 158.177034][ T5834] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 158.186546][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.197646][ T5834] usb 1-1: Product: syz [ 158.202811][ T5834] usb 1-1: Manufacturer: syz [ 158.207530][ T5834] usb 1-1: SerialNumber: syz [ 158.278282][ T6616] loop6: detected capacity change from 0 to 524287999 [ 158.355060][ T6617] netlink: 'syz.3.192': attribute type 12 has an invalid length. [ 159.075529][ T6616] Dev loop6: unable to read RDB block 8 [ 159.081373][ T6616] loop6: unable to read partition table [ 159.087251][ T6616] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 159.224752][ T5899] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 159.322508][ T5834] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 159.331629][ T5899] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 159.366711][ T5899] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 159.390798][ T5899] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 159.427095][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.4.191'. [ 159.437687][ T5899] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 162.383777][ T5834] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 163.211730][ T5899] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 163.243093][ T5834] usb 1-1: USB disconnect, device number 8 [ 163.269209][ T5975] usb 5-1: USB disconnect, device number 12 [ 163.414824][ T6631] : entered promiscuous mode [ 163.642679][ T6628] fido_id[6628]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 164.080193][ T6648] netlink: 16 bytes leftover after parsing attributes in process `syz.2.199'. [ 164.098376][ T6648] netlink: 128 bytes leftover after parsing attributes in process `syz.2.199'. [ 165.586389][ T6664] tipc: Started in network mode [ 165.618968][ T6664] tipc: Node identity ac14140f, cluster identity 4711 [ 165.653701][ T6664] tipc: New replicast peer: 255.255.255.255 [ 165.684251][ T6664] tipc: Enabled bearer , priority 10 [ 165.922665][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.2.206'. [ 165.932615][ T6664] tipc: Disabling bearer [ 165.940674][ T979] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 166.284844][ T979] usb 5-1: unable to get BOS descriptor or descriptor too short [ 166.568187][ T56] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 166.878444][ T5899] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 166.976358][ T979] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 167.025300][ T979] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 167.125811][ T979] usb 5-1: config 1 interface 0 has no altsetting 1 [ 167.162168][ T6672] ./file0: Can't open blockdev [ 167.228843][ T979] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 167.237936][ T979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.264720][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 167.274629][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 167.283511][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 167.283542][ T979] usb 5-1: Product: syz [ 167.296134][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 167.303417][ T5899] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 167.318560][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 167.348779][ T5899] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 167.358203][ T56] usb 1-1: Using ep0 maxpacket: 32 [ 167.360448][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.383797][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.384994][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.397993][ T979] usb 5-1: Manufacturer: syz [ 167.408901][ T56] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 167.422740][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.437230][ T5899] usb 3-1: Product: syz [ 167.441800][ T979] usb 5-1: SerialNumber: syz [ 167.463392][ T5899] usb 3-1: Manufacturer: syz [ 167.469856][ T5899] usb 3-1: SerialNumber: syz [ 167.473109][ T56] usb 1-1: config 0 descriptor?? [ 167.530659][ T979] smsusb:smsusb_probe: board id=8, interface number 0 [ 167.555960][ T5899] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 167.584271][ T6670] lo speed is unknown, defaulting to 1000 [ 167.738778][ T979] smsusb:smsusb_probe: Device initialized with return code -19 [ 167.890447][ T56] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 167.901074][ T56] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 167.908040][ T56] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 167.915861][ T56] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 167.922996][ T56] savu 0003:1E7D:2D5A.0004: unknown main item tag 0x0 [ 167.930027][ T56] savu 0003:1E7D:2D5A.0004: unbalanced collection at end of report description [ 167.954379][ T56] savu 0003:1E7D:2D5A.0004: parse failed [ 167.965421][ T56] savu 0003:1E7D:2D5A.0004: probe with driver savu failed with error -22 [ 168.009507][ T5948] usb 5-1: USB disconnect, device number 13 [ 168.118645][ T6667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.134641][ T6667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.599109][ T5899] usb 3-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 168.648927][ T979] usb 1-1: USB disconnect, device number 9 [ 168.720383][ T6689] netlink: 'syz.3.212': attribute type 5 has an invalid length. [ 168.754862][ T5899] usb 3-1: USB disconnect, device number 3 [ 168.796226][ T6670] chnl_net:caif_netlink_parms(): no params data found [ 169.251347][ T6696] vlan2: entered promiscuous mode [ 169.428289][ T5154] Bluetooth: hci5: command tx timeout [ 169.584313][ T6670] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.843739][ T6670] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.968873][ T6670] bridge_slave_0: entered allmulticast mode [ 170.098817][ T6718] FAULT_INJECTION: forcing a failure. [ 170.098817][ T6718] name failslab, interval 1, probability 0, space 0, times 0 [ 170.124556][ T6670] bridge_slave_0: entered promiscuous mode [ 170.148462][ T6718] CPU: 0 UID: 0 PID: 6718 Comm: syz.2.219 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 170.148491][ T6718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.148502][ T6718] Call Trace: [ 170.148510][ T6718] [ 170.148519][ T6718] dump_stack_lvl+0x189/0x250 [ 170.148548][ T6718] ? __pfx____ratelimit+0x10/0x10 [ 170.148571][ T6718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.148595][ T6718] ? __pfx__printk+0x10/0x10 [ 170.148625][ T6718] ? __pfx___might_resched+0x10/0x10 [ 170.148649][ T6718] ? fs_reclaim_acquire+0x7d/0x100 [ 170.148679][ T6718] should_fail_ex+0x414/0x560 [ 170.148707][ T6718] should_failslab+0xa8/0x100 [ 170.148732][ T6718] __kmalloc_noprof+0xcb/0x4f0 [ 170.148752][ T6718] ? tomoyo_encode+0x28b/0x550 [ 170.148783][ T6718] tomoyo_encode+0x28b/0x550 [ 170.148816][ T6718] tomoyo_realpath_from_path+0x58d/0x5d0 [ 170.148855][ T6718] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 170.148879][ T6718] tomoyo_path_number_perm+0x1e8/0x5a0 [ 170.148905][ T6718] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 170.148947][ T6718] ? __lock_acquire+0xab9/0xd20 [ 170.148990][ T6718] ? __fget_files+0x2a/0x420 [ 170.149016][ T6718] ? __fget_files+0x2a/0x420 [ 170.149038][ T6718] ? __fget_files+0x3a0/0x420 [ 170.149067][ T6718] ? __fget_files+0x2a/0x420 [ 170.149094][ T6718] security_file_ioctl+0xcb/0x2d0 [ 170.149120][ T6718] __se_sys_ioctl+0x47/0x170 [ 170.149155][ T6718] do_syscall_64+0xfa/0x3b0 [ 170.149177][ T6718] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.149200][ T6718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.149221][ T6718] ? clear_bhb_loop+0x60/0xb0 [ 170.149247][ T6718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.149267][ T6718] RIP: 0033:0x7f1096d8eb69 [ 170.149286][ T6718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.149303][ T6718] RSP: 002b:00007f1097bce038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 170.149326][ T6718] RAX: ffffffffffffffda RBX: 00007f1096fb6080 RCX: 00007f1096d8eb69 [ 170.149341][ T6718] RDX: 00002000000000c0 RSI: 0000000000002285 RDI: 0000000000000005 [ 170.149354][ T6718] RBP: 00007f1097bce090 R08: 0000000000000000 R09: 0000000000000000 [ 170.149371][ T6718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.149382][ T6718] R13: 0000000000000000 R14: 00007f1096fb6080 R15: 00007fff79c81df8 [ 170.149414][ T6718] [ 170.675659][ T6718] ERROR: Out of memory at tomoyo_realpath_from_path. [ 170.725563][ T6670] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.795510][ T6670] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.831354][ T6670] bridge_slave_1: entered allmulticast mode [ 170.858513][ T6670] bridge_slave_1: entered promiscuous mode [ 170.958573][ T5899] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 171.002150][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.084538][ T6670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.141386][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.146407][ T5899] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 171.174638][ T6670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.188242][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 171.195853][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.237380][ T5899] usb 1-1: config 0 descriptor?? [ 171.389164][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.392098][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 171.508254][ T5154] Bluetooth: hci5: command tx timeout [ 171.514109][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 171.575179][ T5899] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 171.579826][ T6670] team0: Port device team_slave_0 added [ 171.875574][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 171.884856][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.897473][ T6726] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 171.908821][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 172.015687][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.041266][ T6670] team0: Port device team_slave_1 added [ 172.137831][ T5899] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 172.150106][ T5899] asix 1-1:0.0: probe with driver asix failed with error -71 [ 172.188802][ T5834] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 172.208353][ T24] usb 3-1: USB disconnect, device number 5 [ 172.209375][ T5899] usb 1-1: USB disconnect, device number 10 [ 172.299683][ T6670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 172.313465][ T6670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.342629][ T6670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 172.349953][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 172.387064][ T6670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 172.403134][ T6670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 172.415363][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.451998][ T6670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 172.470891][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.499359][ T5834] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 172.515304][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.550634][ T5834] usb 4-1: config 0 descriptor?? [ 172.587371][ T6670] hsr_slave_0: entered promiscuous mode [ 172.605983][ T6670] hsr_slave_1: entered promiscuous mode [ 172.622145][ T6670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.633815][ T6670] Cannot create hsr debugfs directory [ 173.268853][ T6747] xt_CT: You must specify a L4 protocol and not use inversions on it [ 173.382890][ T60] bridge_slave_1: left allmulticast mode [ 173.459014][ T60] bridge_slave_1: left promiscuous mode [ 173.588543][ T5154] Bluetooth: hci5: command tx timeout [ 173.652155][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.728502][ T60] bridge_slave_0: left allmulticast mode [ 173.754592][ T60] bridge_slave_0: left promiscuous mode [ 173.874180][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.877196][ T6753] netlink: 16 bytes leftover after parsing attributes in process `syz.2.232'. [ 173.894835][ T6753] netlink: 128 bytes leftover after parsing attributes in process `syz.2.232'. [ 174.488791][ T5899] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 175.567722][ T5899] usb 5-1: Using ep0 maxpacket: 16 [ 175.573503][ T5834] usbhid 4-1:0.0: can't add hid device: -71 [ 175.580602][ T5834] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 175.600789][ T5899] usb 5-1: config 1 has an invalid descriptor of length 208, skipping remainder of the config [ 175.623990][ T5899] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 175.640527][ T5834] usb 4-1: USB disconnect, device number 11 [ 175.668403][ T5154] Bluetooth: hci5: command tx timeout [ 175.681459][ T5899] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 175.702120][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.718294][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 175.744119][ T5899] usb 5-1: Product: syz [ 175.758986][ T5899] usb 5-1: Manufacturer: syz [ 175.763726][ T5899] usb 5-1: SerialNumber: syz [ 175.870292][ T24] usb 1-1: config index 0 descriptor too short (expected 72, got 10) [ 175.881706][ T24] usb 1-1: config 1 descriptor has 1 excess byte, ignoring [ 175.897133][ T24] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 176.016378][ T5899] usb 5-1: cannot find UAC_HEADER [ 176.091565][ T5899] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 176.129999][ T5899] usb 5-1: USB disconnect, device number 14 [ 176.147345][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.317094][ T60] bond_slave_0: left promiscuous mode [ 176.344665][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.367830][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.401505][ T60] bond_slave_1: left promiscuous mode [ 176.410427][ T60] bond0 (unregistering): Released all slaves [ 177.222069][ T5948] kernel write not supported for file bpf-prog (pid: 5948 comm: kworker/1:5) [ 177.628510][ T24] usb 1-1: string descriptor 0 read error: -71 [ 177.656104][ T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 177.673849][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.033272][ T24] usb 1-1: can't set config #1, error -71 [ 178.341070][ T24] usb 1-1: USB disconnect, device number 11 [ 178.806836][ T60] hsr_slave_0: left promiscuous mode [ 178.826786][ T60] hsr_slave_1: left promiscuous mode [ 178.828265][ T56] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 178.863971][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.886717][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.928031][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.947710][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.139533][ T56] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 179.162967][ T56] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 179.427181][ T56] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 179.490207][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 179.530747][ T56] usb 3-1: SerialNumber: syz [ 179.600190][ T60] veth1_macvtap: left promiscuous mode [ 179.659277][ T60] veth0_macvtap: left promiscuous mode [ 179.665181][ T60] veth1_vlan: left promiscuous mode [ 179.674146][ T60] veth0_vlan: left promiscuous mode [ 180.606346][ T56] usb 3-1: 0:2 : does not exist [ 180.641268][ T56] usb 3-1: unit 5: unexpected type 0x03 [ 180.682760][ T56] usb 3-1: USB disconnect, device number 6 [ 180.806164][ T5885] udevd[5885]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 181.730067][ T5834] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 182.959945][ T5948] libceph: connect (1)[c::]:6789 error -101 [ 182.972042][ T5948] libceph: mon0 (1)[c::]:6789 connect error [ 183.297037][ T5948] libceph: connect (1)[c::]:6789 error -101 [ 183.358376][ T5948] libceph: mon0 (1)[c::]:6789 connect error [ 183.380190][ T6865] ceph: No mds server is up or the cluster is laggy [ 183.401014][ T5834] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 183.556942][ T5834] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 183.571895][ T5834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.581724][ T5834] usb 1-1: Product: syz [ 183.585930][ T5834] usb 1-1: Manufacturer: syz [ 183.591035][ T5834] usb 1-1: SerialNumber: syz [ 183.627137][ T5834] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 183.885713][ T60] team0 (unregistering): Port device team_slave_1 removed [ 184.099138][ T5834] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 184.565702][ T60] team0 (unregistering): Port device team_slave_0 removed [ 185.176937][ T6842] tipc: New replicast peer: 255.255.255.255 [ 185.196580][ T6842] tipc: Enabled bearer , priority 10 [ 185.265935][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.252'. [ 185.275013][ T6839] tipc: Disabling bearer [ 185.558192][ T6670] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 185.595966][ T6670] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 185.653326][ T6889] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 185.700151][ T6670] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 185.734315][ T6670] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 185.935073][ T5851] usb 1-1: USB disconnect, device number 12 [ 186.338752][ T6916] SET target dimension over the limit! [ 186.862557][ T6670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.977514][ T6670] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.138073][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.145293][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.160831][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.168012][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.940217][ T6938] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 189.564294][ T6952] bridge1: entered promiscuous mode [ 190.060172][ T6670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.958378][ T6978] tracefs: Unknown parameter '/' [ 193.136314][ T7011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.285'. [ 193.152865][ T6670] veth0_vlan: entered promiscuous mode [ 193.226572][ T7011] netlink: 16 bytes leftover after parsing attributes in process `syz.0.285'. [ 193.237088][ T6670] veth1_vlan: entered promiscuous mode [ 193.405766][ T6670] veth0_macvtap: entered promiscuous mode [ 193.498980][ T6670] veth1_macvtap: entered promiscuous mode [ 193.598749][ T979] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 193.617276][ T7025] 9pnet_fd: Insufficient options for proto=fd [ 193.619671][ T6670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 193.682082][ T6670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 193.753931][ T6670] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.792702][ T6670] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.807030][ T979] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 193.838708][ T6670] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 193.851291][ T979] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 194.011767][ T6670] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.021129][ T979] usb 3-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.00 [ 194.044237][ T979] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.096160][ T979] usb 3-1: config 0 descriptor?? [ 194.359214][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.365668][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.870389][ T979] thrustmaster 0003:044F:B320.0005: hidraw0: USB HID v0.00 Device [HID 044f:b320] on usb-dummy_hcd.2-1/input0 [ 195.100847][ T80] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.289106][ T979] thrustmaster 0003:044F:B320.0005: no inputs found [ 195.309791][ T80] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.482972][ T979] usb 3-1: USB disconnect, device number 7 [ 195.609062][ T6708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.647307][ T6708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.778061][ T7047] fido_id[7047]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 196.374471][ T7066] binder: 7065:7066 unknown command 0 [ 196.739851][ T7066] binder: 7065:7066 ioctl c0306201 200000000480 returned -22 [ 196.799397][ T7066] netlink: 'syz.2.297': attribute type 29 has an invalid length. [ 197.423076][ T7077] netlink: 32 bytes leftover after parsing attributes in process `syz.0.299'. [ 197.492503][ T7083] netlink: 'syz.2.301': attribute type 4 has an invalid length. [ 197.585532][ T7083] netlink: 'syz.2.301': attribute type 4 has an invalid length. [ 197.805808][ T7098] netlink: 20 bytes leftover after parsing attributes in process `syz.4.305'. [ 197.824405][ T7100] netlink: 40 bytes leftover after parsing attributes in process `syz.2.306'. [ 197.844057][ T7101] netlink: 20 bytes leftover after parsing attributes in process `syz.4.305'. [ 197.860662][ T30] audit: type=1326 audit(1754039057.183:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1096d8eb69 code=0x7ffc0000 [ 197.943075][ T30] audit: type=1326 audit(1754039057.203:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f1096d8eb69 code=0x7ffc0000 [ 198.036862][ T30] audit: type=1326 audit(1754039057.203:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1096d8eb69 code=0x7ffc0000 [ 198.068569][ T30] audit: type=1326 audit(1754039057.213:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1096d8eb69 code=0x7ffc0000 [ 198.135871][ T30] audit: type=1326 audit(1754039057.213:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1096d8eb69 code=0x7ffc0000 [ 198.165339][ T30] audit: type=1326 audit(1754039057.213:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1096d8eb69 code=0x7ffc0000 [ 198.245522][ T30] audit: type=1326 audit(1754039057.213:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1096d8eb69 code=0x7ffc0000 [ 198.497130][ T30] audit: type=1326 audit(1754039057.213:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1096d8eb69 code=0x7ffc0000 [ 198.532559][ T979] kernel write not supported for file bpf-prog (pid: 979 comm: kworker/0:2) [ 198.575661][ T30] audit: type=1326 audit(1754039057.213:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1096d8eb69 code=0x7ffc0000 [ 198.737856][ T30] audit: type=1326 audit(1754039057.223:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.2.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f1096d8eb69 code=0x7ffc0000 [ 199.909568][ T7139] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 199.917500][ T7139] F2FS-fs (loop11): Can't find valid F2FS filesystem in 1th superblock [ 199.932367][ T7139] F2FS-fs (loop11): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 199.940722][ T7139] F2FS-fs (loop11): Can't find valid F2FS filesystem in 2th superblock [ 200.310700][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 200.498682][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 200.518391][ T10] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 200.557547][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.592407][ T7144] Driver unsupported XDP return value 0 on prog (id 103) dev N/A, expect packet loss! [ 200.602466][ T10] usb 4-1: config 0 has no interface number 0 [ 201.420636][ T7159] loop6: detected capacity change from 0 to 524287999 [ 202.278404][ T7160] netlink: 'syz.2.322': attribute type 12 has an invalid length. [ 202.468237][ T10] usb 4-1: string descriptor 0 read error: -71 [ 202.474642][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 202.491797][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.581991][ T10] usb 4-1: config 0 descriptor?? [ 202.617876][ T10] usb 4-1: can't set config #0, error -71 [ 202.688223][ T10] usb 4-1: USB disconnect, device number 12 [ 202.761328][ T5834] kernel write not supported for file bpf-prog (pid: 5834 comm: kworker/0:3) [ 203.163571][ T7180] 9pnet_virtio: no channels available for device ./file0 [ 204.645374][ T7211] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 204.655065][ T7211] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 204.680290][ T7211] F2FS-fs (loop9): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 204.688204][ T7211] F2FS-fs (loop9): Can't find valid F2FS filesystem in 2th superblock [ 205.302357][ T7220] netlink: 'syz.2.337': attribute type 3 has an invalid length. [ 205.571760][ T7223] loop6: detected capacity change from 0 to 524287999 [ 205.659519][ T7224] netlink: 'syz.0.336': attribute type 12 has an invalid length. [ 206.117017][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 206.274123][ T5885] udevd[5885]: symlink '../../loop6' '/dev/disk/by-diskseq/79.tmp-b7:6' failed: Read-only file system [ 206.285278][ T10] usb 3-1: device descriptor read/64, error -71 [ 206.353645][ T5885] udevd[5885]: symlink '../../loop6' '/dev/disk/by-diskseq/79.tmp-b7:6' failed: Read-only file system [ 206.396167][ T5834] kernel write not supported for file bpf-prog (pid: 5834 comm: kworker/0:3) [ 206.463287][ T5885] udevd[5885]: symlink '../../loop6' '/dev/disk/by-diskseq/79.tmp-b7:6' failed: Read-only file system [ 206.634734][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 207.358312][ T10] usb 3-1: device descriptor read/64, error -71 [ 207.582859][ T10] usb usb3-port1: attempt power cycle [ 207.726157][ T7251] netlink: 'syz.5.343': attribute type 50 has an invalid length. [ 207.970908][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 208.156247][ T10] usb 3-1: device descriptor read/8, error -71 [ 208.989101][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 209.036619][ T10] usb 3-1: device descriptor read/8, error -71 [ 209.178960][ T10] usb usb3-port1: unable to enumerate USB device [ 209.444388][ T30] audit: type=1326 audit(1754039068.763:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7276 comm="syz.5.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af718eb69 code=0x7ffc0000 [ 209.546569][ T30] audit: type=1326 audit(1754039068.763:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7276 comm="syz.5.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af718eb69 code=0x7ffc0000 [ 209.907051][ T30] audit: type=1326 audit(1754039068.803:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7276 comm="syz.5.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f1af718eb69 code=0x7ffc0000 [ 209.946304][ T30] audit: type=1326 audit(1754039068.803:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7276 comm="syz.5.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af718eb69 code=0x7ffc0000 [ 210.235777][ T30] audit: type=1326 audit(1754039068.803:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7276 comm="syz.5.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af718eb69 code=0x7ffc0000 [ 210.289115][ T7286] netlink: 16 bytes leftover after parsing attributes in process `syz.2.352'. [ 210.316094][ T7291] netlink: 172 bytes leftover after parsing attributes in process `syz.4.353'. [ 210.358353][ T30] audit: type=1326 audit(1754039068.803:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7276 comm="syz.5.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f1af718eb69 code=0x7ffc0000 [ 210.452380][ T30] audit: type=1326 audit(1754039072.814:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7276 comm="syz.5.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af718eb69 code=0x7ffc0000 [ 210.562049][ T30] audit: type=1326 audit(1754039072.814:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7276 comm="syz.5.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1af718eb69 code=0x7ffc0000 [ 210.644640][ T30] audit: type=1326 audit(1754039072.814:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7276 comm="syz.5.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1af718eb69 code=0x7ffc0000 [ 210.688330][ T5834] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 210.750437][ T30] audit: type=1326 audit(1754039072.814:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7276 comm="syz.5.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f1af718eb69 code=0x7ffc0000 [ 210.868880][ T5834] usb 5-1: Using ep0 maxpacket: 16 [ 210.880641][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.894839][ T7295] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 210.912376][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.955297][ T5834] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 211.025089][ T5834] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 211.066787][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.100180][ T5834] usb 5-1: config 0 descriptor?? [ 211.524601][ T5834] microsoft 0003:045E:07DA.0006: ignoring exceeding usage max [ 211.999103][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 212.007164][ T5835] Bluetooth: hci4: command 0x0406 tx timeout [ 212.019850][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 212.026903][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 212.835910][ T5834] microsoft 0003:045E:07DA.0006: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 213.006401][ T5834] microsoft 0003:045E:07DA.0006: no inputs found [ 213.107352][ T5834] microsoft 0003:045E:07DA.0006: could not initialize ff, continuing anyway [ 213.270215][ T5892] udevd[5892]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 213.310317][ T5834] usb 5-1: USB disconnect, device number 15 [ 213.347368][ T7323] netdevsim netdevsim4: Direct firmware load for . [ 213.347368][ T7323] failed with error -2 [ 213.366119][ T7314] fido_id[7314]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 213.442190][ T7323] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 213.442190][ T7323] [ 213.868665][ T5885] udevd[5885]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 213.942841][ T5885] udevd[5885]: symlink '../../loop5' '/dev/disk/by-diskseq/81.tmp-b7:5' failed: Read-only file system [ 214.235796][ T56] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 214.565056][ T56] usb 1-1: Using ep0 maxpacket: 8 [ 214.806512][ T56] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.131894][ T56] usb 1-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 215.142203][ T56] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.150945][ T56] usb 1-1: Product: syz [ 215.156614][ T56] usb 1-1: Manufacturer: syz [ 215.167341][ T56] usb 1-1: SerialNumber: syz [ 215.183294][ T5885] udevd[5885]: symlink '../../loop5' '/dev/disk/by-diskseq/82.tmp-b7:5' failed: Read-only file system [ 215.234326][ T56] usb 1-1: config 0 descriptor?? [ 215.271223][ T56] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 215.331631][ T56] usb 1-1: selecting invalid altsetting 1 [ 215.415527][ T5885] udevd[5885]: symlink '../../loop5' '/dev/disk/by-diskseq/82.tmp-b7:5' failed: Read-only file system [ 215.463103][ T56] gspca_stk014: reg_r err -71 [ 215.481233][ T56] stk014 1-1:0.0: probe with driver stk014 failed with error -71 [ 215.510659][ T10] kernel write not supported for file bpf-prog (pid: 10 comm: kworker/0:1) [ 215.513435][ T56] usb 1-1: USB disconnect, device number 13 [ 215.696977][ T5885] udevd[5885]: symlink '../../loop5' '/dev/disk/by-diskseq/82.tmp-b7:5' failed: Read-only file system [ 217.277124][ T7371] tipc: Failed to remove unknown binding: 66,1,1/0:3973268457/3973268459 [ 217.318409][ T7371] tipc: Failed to remove unknown binding: 66,1,1/0:3973268457/3973268459 [ 217.684022][ T6213] udevd[6213]: symlink '../../loop5' '/dev/disk/by-diskseq/83.tmp-b7:5' failed: Read-only file system [ 217.792482][ T5885] udevd[5885]: symlink '../../loop5' '/dev/disk/by-diskseq/83.tmp-b7:5' failed: Read-only file system [ 218.101032][ T7390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.377'. [ 218.381541][ T5885] udevd[5885]: symlink '../../loop5' '/dev/disk/by-diskseq/83.tmp-b7:5' failed: Read-only file system [ 218.911749][ T979] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 219.588538][ T979] usb 5-1: Using ep0 maxpacket: 16 [ 219.646920][ T979] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 219.684188][ T979] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 219.704221][ T979] usb 5-1: Product: syz [ 219.717769][ T979] usb 5-1: Manufacturer: syz [ 219.731093][ T979] usb 5-1: SerialNumber: syz [ 219.755031][ T979] usb 5-1: config 0 descriptor?? [ 220.234519][ T7425] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.756824][ T7426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 220.790193][ T5834] usb 5-1: USB disconnect, device number 16 [ 221.271812][ T7435] random: crng reseeded on system resumption [ 221.430808][ T7435] netlink: 100 bytes leftover after parsing attributes in process `syz.2.385'. [ 221.655719][ T7430] udevd[7430]: symlink '../../loop5' '/dev/disk/by-diskseq/85.tmp-b7:5' failed: Read-only file system [ 221.978467][ T7445] netlink: 172 bytes leftover after parsing attributes in process `syz.4.388'. [ 221.997244][ T7445] netlink: 172 bytes leftover after parsing attributes in process `syz.4.388'. [ 222.907767][ T7445] ------------[ cut here ]------------ [ 222.913975][ T7445] WARNING: CPU: 1 PID: 7445 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x2c8/0x370 [ 222.924249][ T7445] Modules linked in: [ 222.928817][ T7445] CPU: 1 UID: 0 PID: 7445 Comm: syz.4.388 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 222.938785][ T7445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.949334][ T7445] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 222.956368][ T7445] Code: 74 10 4c 89 e7 89 54 24 0c e8 14 14 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 b8 a6 77 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 222.976535][ T7445] RSP: 0018:ffffc90004f0f9c0 EFLAGS: 00010246 [ 222.984815][ T7445] RAX: ffffc90004f0fa00 RBX: 0000000000000012 RCX: 0000000000000000 [ 222.994406][ T7445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004f0fa28 [ 223.002862][ T7445] RBP: ffffc90004f0faa8 R08: ffffc90004f0fa27 R09: 0000000000000000 [ 223.011354][ T7445] R10: ffffc90004f0fa00 R11: fffff520009e1f45 R12: 0000000000000000 [ 223.021280][ T7445] R13: 1ffff920009e1f3c R14: 0000000000040d40 R15: dffffc0000000000 [ 223.029401][ T7445] FS: 00007feb2d3346c0(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 223.038749][ T7445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 223.045374][ T7445] CR2: 00007f7a5b200000 CR3: 0000000032cda000 CR4: 00000000003526f0 [ 223.053455][ T7445] Call Trace: [ 223.056784][ T7445] [ 223.059817][ T7445] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 223.067660][ T7445] ? v9fs_fid_xattr_get+0x237/0x2e0 [ 223.074075][ T7445] __alloc_pages_noprof+0xa/0x30 [ 223.079156][ T7445] ___kmalloc_large_node+0x85/0x210 [ 223.084404][ T7445] __kmalloc_large_node_noprof+0x18/0x90 [ 223.090178][ T7445] __kmalloc_noprof+0x36f/0x4f0 [ 223.095079][ T7445] ? v9fs_fid_get_acl+0x4f/0x100 [ 223.100162][ T7445] ? __pfx_v9fs_cache_inode_get_cookie+0x10/0x10 [ 223.106576][ T7445] v9fs_fid_get_acl+0x4f/0x100 [ 223.111497][ T7445] v9fs_get_acl+0x9a/0x360 [ 223.115986][ T7445] v9fs_inode_from_fid_dotl+0x221/0x2b0 [ 223.121670][ T7445] v9fs_mount+0x6cb/0xa10 [ 223.126051][ T7445] ? __pfx_v9fs_mount+0x10/0x10 [ 223.131030][ T7445] ? __pfx_legacy_get_tree+0x10/0x10 [ 223.136394][ T7445] legacy_get_tree+0xfd/0x1a0 [ 223.141175][ T7445] ? __pfx_v9fs_mount+0x10/0x10 [ 223.146072][ T7445] vfs_get_tree+0x92/0x2b0 [ 223.150621][ T7445] do_new_mount+0x24a/0xa40 [ 223.155204][ T7445] __se_sys_mount+0x317/0x410 [ 223.160112][ T7445] ? __pfx___se_sys_mount+0x10/0x10 [ 223.166682][ T7445] ? rcu_is_watching+0x15/0xb0 [ 223.172719][ T7445] ? do_syscall_64+0xbe/0x3b0 [ 223.177467][ T7445] ? __x64_sys_mount+0x20/0xc0 [ 223.182370][ T7445] do_syscall_64+0xfa/0x3b0 [ 223.186962][ T7445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.193204][ T7445] ? asm_sysvec_call_function_single+0x1a/0x20 [ 223.199456][ T7445] ? clear_bhb_loop+0x60/0xb0 [ 223.204208][ T7445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.210222][ T7445] RIP: 0033:0x7feb2c58eb69 [ 223.214726][ T7445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.234461][ T7445] RSP: 002b:00007feb2d334038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 223.243000][ T7445] RAX: ffffffffffffffda RBX: 00007feb2c7b6080 RCX: 00007feb2c58eb69 [ 223.251064][ T7445] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 223.259157][ T7445] RBP: 00007feb2c611df1 R08: 0000200000000500 R09: 0000000000000000 [ 223.268723][ T7445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.276748][ T7445] R13: 0000000000000000 R14: 00007feb2c7b6080 R15: 00007ffe622df998 [ 223.285923][ T7445] [ 223.289048][ T7445] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 223.296371][ T7445] CPU: 1 UID: 0 PID: 7445 Comm: syz.4.388 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 223.306214][ T7445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 223.316301][ T7445] Call Trace: [ 223.319621][ T7445] [ 223.322589][ T7445] dump_stack_lvl+0x99/0x250 [ 223.327409][ T7445] ? __asan_memcpy+0x40/0x70 [ 223.332137][ T7445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.337474][ T7445] ? __pfx__printk+0x10/0x10 [ 223.342130][ T7445] panic+0x2db/0x790 [ 223.346077][ T7445] ? __pfx_panic+0x10/0x10 [ 223.350535][ T7445] ? show_trace_log_lvl+0x4fb/0x550 [ 223.355786][ T7445] __warn+0x31b/0x4b0 [ 223.359799][ T7445] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 223.365828][ T7445] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 223.371860][ T7445] report_bug+0x2be/0x4f0 [ 223.376241][ T7445] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 223.382268][ T7445] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 223.388305][ T7445] ? __alloc_frozen_pages_noprof+0x2ca/0x370 [ 223.394334][ T7445] handle_bug+0x84/0x160 [ 223.398621][ T7445] exc_invalid_op+0x1a/0x50 [ 223.403169][ T7445] asm_exc_invalid_op+0x1a/0x20 [ 223.408066][ T7445] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 223.414706][ T7445] Code: 74 10 4c 89 e7 89 54 24 0c e8 14 14 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 b8 a6 77 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 223.434354][ T7445] RSP: 0018:ffffc90004f0f9c0 EFLAGS: 00010246 [ 223.440469][ T7445] RAX: ffffc90004f0fa00 RBX: 0000000000000012 RCX: 0000000000000000 [ 223.448569][ T7445] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90004f0fa28 [ 223.456578][ T7445] RBP: ffffc90004f0faa8 R08: ffffc90004f0fa27 R09: 0000000000000000 [ 223.464579][ T7445] R10: ffffc90004f0fa00 R11: fffff520009e1f45 R12: 0000000000000000 [ 223.472568][ T7445] R13: 1ffff920009e1f3c R14: 0000000000040d40 R15: dffffc0000000000 [ 223.480576][ T7445] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 223.486960][ T7445] ? v9fs_fid_xattr_get+0x237/0x2e0 [ 223.492190][ T7445] __alloc_pages_noprof+0xa/0x30 [ 223.497147][ T7445] ___kmalloc_large_node+0x85/0x210 [ 223.502368][ T7445] __kmalloc_large_node_noprof+0x18/0x90 [ 223.508035][ T7445] __kmalloc_noprof+0x36f/0x4f0 [ 223.512915][ T7445] ? v9fs_fid_get_acl+0x4f/0x100 [ 223.517876][ T7445] ? __pfx_v9fs_cache_inode_get_cookie+0x10/0x10 [ 223.524226][ T7445] v9fs_fid_get_acl+0x4f/0x100 [ 223.529013][ T7445] v9fs_get_acl+0x9a/0x360 [ 223.533456][ T7445] v9fs_inode_from_fid_dotl+0x221/0x2b0 [ 223.539032][ T7445] v9fs_mount+0x6cb/0xa10 [ 223.543400][ T7445] ? __pfx_v9fs_mount+0x10/0x10 [ 223.548277][ T7445] ? __pfx_legacy_get_tree+0x10/0x10 [ 223.553602][ T7445] legacy_get_tree+0xfd/0x1a0 [ 223.558300][ T7445] ? __pfx_v9fs_mount+0x10/0x10 [ 223.563178][ T7445] vfs_get_tree+0x92/0x2b0 [ 223.567633][ T7445] do_new_mount+0x24a/0xa40 [ 223.572173][ T7445] __se_sys_mount+0x317/0x410 [ 223.576934][ T7445] ? __pfx___se_sys_mount+0x10/0x10 [ 223.582153][ T7445] ? rcu_is_watching+0x15/0xb0 [ 223.586958][ T7445] ? do_syscall_64+0xbe/0x3b0 [ 223.591661][ T7445] ? __x64_sys_mount+0x20/0xc0 [ 223.596446][ T7445] do_syscall_64+0xfa/0x3b0 [ 223.600968][ T7445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.607047][ T7445] ? asm_sysvec_call_function_single+0x1a/0x20 [ 223.613215][ T7445] ? clear_bhb_loop+0x60/0xb0 [ 223.617915][ T7445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.623843][ T7445] RIP: 0033:0x7feb2c58eb69 [ 223.628277][ T7445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.647900][ T7445] RSP: 002b:00007feb2d334038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 223.656330][ T7445] RAX: ffffffffffffffda RBX: 00007feb2c7b6080 RCX: 00007feb2c58eb69 [ 223.664316][ T7445] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 223.672301][ T7445] RBP: 00007feb2c611df1 R08: 0000200000000500 R09: 0000000000000000 [ 223.680296][ T7445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.688278][ T7445] R13: 0000000000000000 R14: 00007feb2c7b6080 R15: 00007ffe622df998 [ 223.696276][ T7445] [ 223.699638][ T7445] Kernel Offset: disabled [ 223.703971][ T7445] Rebooting in 86400 seconds..