last executing test programs: 1m8.619689015s ago: executing program 2 (id=2891): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_udp(0x2, 0x2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004280)="ba5b8ea61489f0f38300fd701eb516b4c60bbe2ff4823e4606fb2bb264192217c6fa28b332cf26b91e1d9164bd551945a835ae0d1cbd61c683a32fcfc15e84e91526d14a8f3a5e20426db65cd52292757c753315dcfc610cc8fec0689484ec083ec9b5abb9fae2bf0a3b615f0dea062169cf61a9f0cb3f29a6c28752f80c082728c300e1ecca8a70b8e500dea6d9152bc6627bfd3018cfb624a1b541defe58da6df08027d67434aaa60468d9fc3772251814262313bc9f879561d5479379d0bcc9736efeb8b2927751c83c2beb3cebe9a44b8962332c6298095dd686e96a86ff0ea7add27ad201b64b7340ce6dfa43464a8270f0f11b1485389f8b4e85756be2ebcc8a560a2edf06e44cc43d256501a1e44283fc4c14cd5a17a8538c602de6eaa0db28eb73343825ef7d295cf1af0d4a3154db224d319f1c109a09bf3a723e5bf7c69aa82ce7150de7713ac205e73945a7f94b1cdfb1376f2e41a70fb7d39cc4e38e60c2ca1ab7937defac79abe448aed5be52805b47f4811729cccc363b0dd88472950ce5afedf7e3ee53e567540674d48528c0dd9c341ba63fe213d5c907889e1a048e7c239306ef73a03cdd8c2636831949418bc4b651e523f781f3588ce069c174e7195d6a15a14f09d14b1f7bb2b33d37421e63ddfa269ab8b62a0ee3d97d516a5bb00b8125e38eb3a536a0b17b54621febb2936dbba1079139474afcbdb0ce42811d1e4c345eddf278b16de9ef061afa842c4596f93d7f4b25a1e04efa933b7c3c9f69a6e998acc68e22b11bb935fa8715134028a6cdaecec54089c2a0c689dbb9b54114b03889ffc4230be929a2b27b04f8db25c52f0e994d55197cf4a035a060a5d0a5bb702bb1c5c4cd8762cfa2bd55440960be8fa8a21193cefb0ea9fd71854f8201129ea98e89224f80b50d3280b2ca4675719b12be1544eb3d1c9aa6d0b8fb3bbc76895d9bb836683f84fdd22fe08add2f5b05afdc35c1ca9464ff38c5023c6e83c08d4782056cfa79f5afcb6a64b3588611d728a201dd5347a476b41e230ca9d495df26795e8f3f3aaa3bf94f9b7480c2a6c699cf91a48f7b1f6cd489f65fe73e13c009e18d70ba6f14d2d6f1553ebda5e195342486f18229b2627418b336bebce7c27aab37618dc9f2451d9eb0680101af466f33aff9a8b12961e2cd01e815f673190e7c3cbf84cf0d233679cdd5cac74c4fc4d784398fedd4f52c098632d8e10a12f34cbfb256ba61362432ec74732abc64c3b711f2aab8273ef88e31897d2e503bb80493c0a1182d638420beb6ef9e11aca868c9fc61aa787ca8dbac99df545ce2d5d5c4fc7e31e415e5c2b06a32abeab7306c528bd22c23135e94fafa4271ad4bb229871909786a2252b8214a30f09bea5913b84079d2fe6845d75013a15069002b0e0956e4c81c2a9f75fcc040c47ad4c23a4f2797c8d9c43f87cbbe0786b11967d5ad1dcbc5fe39b61615ba16392337b78bd5e5fc9ad9d646be0ab3a8d246309e056fa66d34ddef99b7371713b9e2827a30d54645664743af794ebbe927e43df9146950aa24058b81ce7f9555d1987baa47c486bc4180db65b897eb21ff2529423c88f2227ef4eef0b035ccc9d11f895d18ed9f00504d9db260d1561a5cc3692a52dac20d64ed22c50da171b223fcfe0a7e451c8341deb63e3ed6ffca9fd79aac6c8cd4e58a4c2af8acd487bea4846b7c222add7872d21ab64567800fee1b1669f631201335fbc5d1b3d9045b000055edc3bd551518216893d708a44b438e4479e33508c12fe031e8f7a1968912eb7cbe4053f5940063c2fb5770387db74dd8707a71b7671cc5abf42012a9ee638c60f59d9678b22fc536ffb953843ed6c66ab9bcf7cf5ff249a440aa726339b9a96fd3a0e3c3ed11ab910ebdc3e0eba99809fbd8bf1580f0a140924bedce7e90ee7e0d8bb9f8cbc990da15772e67d36991a25c38b77ef6d01357ccbbf6549103955a4dc82e0b1cd5e16907a4e7f488b0949934947a7b69f3956b3b62c9d357c9a3329dda4b827437c6d0efc7f5b767253c0a7b463ec9ec9064142f0b14a1c617ef9b7130a51cc2b98079337edfac68c8b777b73bd58097daa9f64ca3b9daabcc53dfce7be8dcd83b73f453023d5732ab3bb95a80845e6e427ba688518ef7425cf036ad42df97b339ab880c949081ebe5f4c051823cd12679164984abc2a2e3676e7e44c20643e48a2f2440ef1b541b9baf3e8a7db7a0f01c5217ef20038474d9c1207e72fd71a25d5a8f7b91be13b3a3b9d57edcf7c88b0a3b4a060a7e03a5667e5b444b0057dd5ab4e1c85e09f5552faa5654bba884bdca0247f12b3244a0f7a0492e321eb418cfa75915d76e9e26d734345fbd6e9b40f9c47b203ebbfbad6b330ec90adac0e1b03745e48a1eb3fa3c079d47062bf5a779c3479e6f5c4b8800a1e7513fcdfa0a6c6bcaccc6f736a0ec4031d7fa23c89bb6a8702a694aa87e88521490a5dbd5d0e5775b561ef9d4376e367e31a83df641c55d3801f573ef7a2ea945379f9d07a04cf8bae55e51599719f79ca33917c421ff63a335e11b4f266f5171e27b60b544f893cc8fec2bd191ff7ed87476e31979df4f01d71af376541bf09c0147d3ccb91285e6eff7c44fc8031e3a03b47abea0828e42861d2747259e1f7815d1d18bc8efcc36a27643fbbbf33eeed6b5036773a305a901da08f858e1909ff3ea335bb48200020044b0711b67615a0626017da66274e804883aa858d04707d443805caceb8bd239e31ea7a446752fe789205bb083f1ca90d1589c43e8bb152801fff7bf3853d8bfcdd630b41aa3fe1f09bdc4cb1ec33885c21b883935468dfa05063f9d7c1faf14115ed359122187a90b2045c96650b2be20f1519edaa1d3597d2bb22e08954d00f7addb14b639258c75698a98046028c6f9ff187086b569cd4856d97ea1799722158e8418dde709acb7fcf890edeedf6f49c7d79ee5df4c535d53bb54ecd4a3031471262190d44b1d86a5410f34b80e387eee07acb83acb7de24b2df74b0b9bd6179e132d1a5e70fb52a2f704df3851e264192663297183b1dcf9e7f1a2c746991c2f239308201a1daa8b2478079af02204c8244adc87dfcc0397a4db01f1f079c39bed4b12a5c5e4cc0b0c66e83691ddb7e7c30d23a1b97ae7e0fdb56564ba2999c7aecced3e0fd1d185bdc1c27f4404f11177275563d1303dbdd6947277d90ff461425f6e6aa64a69a1463861f83fedd00d0c3f8c21eb9184cc02f501ab353cdcd3ec8da677e8da8472d22bf14f34bd5c4335dcb59d8a645a7074f604cf2defbd2fa005b0b88d64f010f1902612a3006dbd0c0c6af178ae888dcddd074845fd691dfe45d56311f491549581b225d6997703eb55cbd60beabb8d468d07ef9e6d8ad78521a455dd0595a66c2d5bef407cf266c4837e8b41ec5b08e7f097abc73e0e36ab26e101e5f994f672c741a49e608d93843e84a42162f0774436fded89e7e753902869178a9346c237266943780da10ac18b6a8abb97b558d4fb331fd90820b2a3b64b11776e7d4f53a1bb0f6695319120905d8d32f9042c3a40c2c47f89b4622cde88af69f732bb6438085a7c614a9cb913a7753feacbc54e32c33431230c78b252b4bc0874b1e07d85e7cb3b07957916d448bba0e9d97c320a7fca0e01948cf7507fb3bd94221e3b92ba3c55f00a4569d64c3eb3936a2fae6db0d527b55e40171f2df19b84cfcd57332eba0765eebabbd9e6a9bc8e1f43829d170025cd465318a28ef062815445264aee30b5976da2480cd70d23255b6f240ea6f211560b767ea16b8738f8e85398d4df771b1005e5d590062d55434d504b5e9be5a8b3d2b3b41413cfc2a808318679ef0b2607d6ef00496234956cdf74ba8332051a8facb438dceada860d3aad5cb33385023d224715cc28cec354686541f66902a883c4552528b078aadc8528a442dab2e68451d9ad0966687c6d8fd696652af8d43ffd37e7ccb96d5a0bf6d72c37685512e90bd085d5f46d36ef55af96e2eaa1f5d5ce44460413578d716f963df48ac4ce00130bb44db351e4fb52f8b2ae0a944c49514da5d740f3891c34b0681066f0c2f7c26a80a44018832051d2c358df63f6e339da476150cf834100f26e73ed4bbd82107c2fcd401955bcf1c83c2a1a1b1f72c60da8f9c5647113364cff4a204af27f131883e993e436c186b5319f1d2475842d032baaf41722e697e2d1fe83717e1fb6be097fea1fba7d354ebf8d688d78b0df5c11a49f3f3a2a134ba1157372820cf67138b7672bc6e115219df45ffbc31074cd6ef7ce0ec8574bda2c839a086335164894a9ccd2da9b53c95ea12f6499ced7e2011720f0fcc32fc6fd00a8a206754abec3525674040f63cad36056425d329cae87d1e76cdcb43fa95151f250362666eed4a3924551919da9d6ffb8094d836340ea3cfd1d4916b6b631bb0886f696e60b604c4d7fdd55e282e22c549814ce6f75bd3460488d3500ce58aa241a6a8c5d50af901df1b85dbd32fced3dfc4d510f08ccaf81fdae78db2d5bf7676f0b2ab72fe3f43878f7dc43e4bab02047ff51c02b37b1db2f68068fdee95f59248a633ee9dd1153b0a54129197fe8fea93fc473ce6097704da00fc25c99adbd1e24e5532868e8b1c2649699385a480785c88d837513a33ea024af35adf57c6c7a0bc8f5495d7424235116a79739c86842bb35e9ca5da7798f7ae3ccd9434dad566b70bed82c644cb65ddb37e94a2f06c332b32a829aad2ddc813ebcc07e07e5587f7f7ab27bafa0aac1441a809fba549bd3fa7b8c16851c3d22d7ba41ebb1b19f8e9f5d114950a5798ad8ed4d1b5bb4ddc6f3cecdd719baa78ad32d0fb94b8156811f9ef54ab2a29738e2e596b1424b19ef39d0a354c3e8aa6227f4fb2787b10cfc615dc356800066f800718edb658bb3b85d775c0724e7c2942c8cacf420a0e23fc2bc40d078ca5f4fb9d95236c8c35008c43e864b2ee0d7f2a634978c6c34bc2b5040a29ca1b1c60a92d7ff86b3c9dd90ebf3fb212d4c23d69be399837b92fa04dca5075ea7877561ab64664d12a1e1ff39cc20f4518b460ae9f87995bd3ae66272f3f24a47c6340cb0318b67acdb26064bcccf7ccba386e07127d9ffbda288cf2924623902d9f4be97605ab5dd02a969f44de8a94abd68020c1f47033ac2b7d0e9431035e358f7d876a119e31b154b6e66815f286a41a23cba9fea4dc4febb5210b291202e8dbeb6ee9e006f108ddf891ece25c7311e7f4c788c37e8a39382405627a547e609393cffd1cbfadf90ff9060a14700539d497dafb6a249e4ec814a9e68d7a954a3c51776af6fd839b9b4b1af37797431c15794508731fd5be32edc6514ee16681f9934b0d83185ca69820d3a590d511e9f5f3ee5bf33f6ed22d507481bd7f05aa644ff19809d49a3c2924cc408ddb839d6f07cf0894ec6a6372c453d23aa324802308833027861946679abd540548abb956743cf0ccb3925caff0c597334b72e8d081c7aa9822207426b16539e370678a2fda3f34555d721570e725e3eab5cce6e0f7faaa3580f6c7d7eedbab4a0b7af72d3daa450e467917181bb2c3eaec374209f7e74a4e9195487316e7c934d3f4d0a0ffd73ae1c0855690d5f03d04ad567dcdfc366f92bf13c3e667dbce23e2b64232c11f641bd7cac7f1f9eee72eb98a5cc28226afcd1fefec1b275186c48f063fc2e99448569bb5a903ad450a5812b17c8fa3a7ae639734974d368ad0968b2ff1381c128ab00b837d765e36bfdaf8d5284975faf739b9882a0db327ea522fbd71c3a708cc674bee98602540804d856829826a95543c0168af63ff084c46ed81320f5d6bcca8fe5955091caeb78ddf53b819ff91bce937e02025beaff559462045263a3ff132dfdb5024747bb5afcdf8dee04a8085a9268790256483e7f33fde71478f8772339154952dff0e1acffe87ee37f830c30b89042b778cc87fbbb7967fb0110a54ea4a7bbdc575a93dfcd4f1841c9a75dce63f90afed202aceb7a9593d0deece3adfd66b4f40f50c0cc1822835bfba2b20f25d991f8ed85204e9b56da4709e3c1544a96fcb914c327aa8d6e7e22b21c3745f579483a1959a2766cb34a961572c6b1cedc06cbb4299053514fbb384f8192f4a5e0483667c685b3fd032a9c01471651bd7f8503eb7a9b564f779f9d33b120fb9eae779e37b28c82790917da2d763186401bf9b9d3a50572dbd7f7ac54a5afed50594e175ecb23f9c9fb949bbf84b94ec580a1d70aa405d645ee0848517d239d5dd0c0474e0b50991236b57d6af5325621399fa647946be8b27bff179dabfbf084cd7bc3fdb5313636ba7ee5264e90d76add5b41c3d23fbcb2e9066f187bba2770abea27f2aaf8cbe545f216e5bdecb3a584511970314058474803a24f88903bbd69e333e2c9046183c7945736a0f39676b64b12b319c3ce11107679c67d87ab6e9e1d2d28905674e9da798e2026cb544d4ae356991d29ed4bd38f2a5a7c6cf2a30b1b6d48700cce7eb573e84a46c25070525f67d45538704ca3cf53be6c44e84fbb40387803e6db47b373cd36783689b7f93eb27287570dae90d21214a85d6bfa898fcc2181af6e25daea786d7d50afa58731b4fac9c9d2861c802cfa6ef854e747217c0a894a28d21d0a43b9de43985c4756c29b561029ef95cfdc27bf38f26dac2fdf97cc58d9c1c59bf4ee59768ad51a1d0d8de92d0e2c723b1ddf411d23566ce0b72cc227d41fb63b6a13188fe72525ad316fae05f5aa7233f7bfed187f1b1f87a861afb173552f5d7c9bc7acc95107bbc323c376044a01ab13da42d1ab27b86dc3de3b157e47790b78896bcb2c532a7b7487bb6f24c4021c42357df52e4d5848b5584609a482dea46d173d2a695958002abd093c25f002116f8afc55e729024a4dedf5a4d3c626ebd9367fc18e7e4c7554fba0ad7349c5d526ea6dbd2c03ff33580b15fec3c1f827e885db592b47015544f6b1d400bde1133afa0071f68feebd987a807cc6d5b1b8827410c0b6d46c4b0cf6a5df999f71ba3ef4d9dae246d3e58e7428d98a33076ffc525946780d0100000000000000b872f0999d47c6e424317bd8b0e2f70ac10dfaa19990e2a3f744ea5b32996dc228ff8de836b5ecb7e56cfb3dbf48172b5ff09eecf14439b8bbc5cf3ccc9863ef5547fa2896b73196cdcab97954f9acbec8e7d2626b1a3b8983fa31961ef8c8684ee824f343933cd73d516e1f8086556ab718010022319ab39f72b9e7989e50ec8681f3f6a778e7d23c8be2f4c26bc0ed855947107e93cc9e7515fe67b0c3b6e43d9fb157be2b2f2d9c799de55214974ec254f54cb6c20a76e656cd753502499750238164f1cefc37636e9eb4038053b631c95d80bc50e248ef5692eeb3f0c86aa50476eeb8f80f7115a4c410dd80264c123ff0b62b6291db85865816cc36871b061984a4afc440029c338684330a640e9b31e06eea4ded4e15d92c44a28368138aed08699aee772ac5734e74a65a6b8acd6cb86b2bcf12330ea808524ee838adfa3c185d24e3b2e5e89a5c9b95a659298a4935549e218d4bb4da58a2a663251ffae5c6137f8e70a86a3a26f4bdf2187fa4b9fb3c822ab961846fc01d247530c89daed7ef18a14cba3b47d369980cf48049021cbaa271caee8e00aea56ac7b5c29899348ae129ba840c39f33a7c2f0b2fefb5291d23ea7e5aa91101585576d9996a05897341e41063bf9cae137ed985283bbe3abe8e5a2754378e2ca7f1287056c8a05459d6a47ae4933c43879287b7ee557f3af6b047775ce76aa064be50caec22382a5e735765910fdd926d148ff77f42ee9f60fedb0c4158e02a385934c84521d52be0e0e0dddb0bae54acc1685919cc0d62192950c2e476d169f3533ff9dd440c6092450e15e5199d1d302bd81c3f1df78e71a39df0194beb1ff8dac956129b7be3d39b6505b17d2fb309859d6de62cf58760a4623267ec5496588d2ab5407e31a132f26fe29ece80ad80653ca190b83c9ac8345259087f0a84a001fbfb49c7442ab371d30897b94779039f17857ea96afb9fa41db33d7f3dcf123244975a1714a96db05fc1bcac173081dfaae090b16c05aca4dc98afd5798347b2cfc60ba92eb5e237752d64df1982ef13b116f6b010b0d2eca243f0f991a3f34a486bf58e06d6f922e07413d5844ff279559f8c401785e0207ece4ce7dc53c7705e2647a3c352902efb136fb0f6952eb8acebf90e7e56e831c228cc319e9d079d89d2ff1d43fc1a1139c2d7893ae246747a8c0c1c34c28cf5d6ea9b6c71b3e966b3f32259a19c3e35e4a08d4dd27052033fd7f1437ce9cd2088b31b8ba974558dedb1f8d4355e224e1b8df8da3bc93cb3f9b582ac379dcd0104a3f146d6d3fb699de99cccd099beabe63841a2dba61a465b258692fd98c9d4ff1fbc7212ea2066c5367f64707e7b2e14c51d78a5328d044ac33b1313502b986ac0462c6c3455f60f727e3e895b1e4df196d4f7a9e21c53a6500f0dc6e957530164bc648ebfedb6c973ae8fe49a92fca7274f29edcb202356775baab723f9e3a03a1d24d6dda56853ef0a91ca8bc7c530e28ee896efd1a1f5866206dd82e0eb554f4afedd9e87562903b49963d72d8caca7bb0975252f8f5578287e583aac618995a941299fa0973e67ae44469336e45b68f978fedfc8785e333610f8029b194226f86e770ac987cb84f9c76e5ccaaefe64bfcadf5635bee6077e05364e8872100003c9442e1c7cadd6f98e0dc9e2db17eabc8e6307ffd485dd06935a423d5c9cff832cc1d481e49d6dc00176d0342fdab19cec251b6fbed3ab6374ecd022de617cb2720ffebfb8b98b426cb445439b7b088fc7d9ed9a91989f2bbad8519070a6f916df7c49e3184fef1753387a5a2b5b991e04de915e053c471d198b843fb0afe5a68cf8fffe65bab08f6f5425d458a55de6355558bc5049e3a176977630a45de0b7076cdda2a167003090bbbfba5618ba2f6481cdb1386d1fb3c44a35c4d0cf9ca14dad697078fa4a062e55515c8cd69c6b2e911b19f637cba7c6ca26b3b4b2a74fd5cbc64f269fa5d6f9628830962db2d7ee04a6c37673c593771e568e8dd6cb965e67e6f4be91e625c1015160c234e8893eac8ba39708b9f32e519abfb9c5b2562e424d6eb2c8a737a830997821fc294c559d14d7c0bc8fb03ceb44f1bce3f63c46607ba95d70cb8098d30e1e3e6c5957ed3b4bb1b96d3c3879098247483e6c4f669bd556387b346bfc5497fd76a8e89bf185968f3e3dd58214ec024f5a4a180b31eefef8233bbcac8d9706b35476cd5d4cbe86034928f5c4a3c07fbd3e19ec89536aaa4fcbc2c7212ad2b5c3213a32d760e9883149f1770ef77a1313bcbbd41ebe246e847aac1baf975fdd326bf81fc68e19ce8cc7f056f5be524f35fdc7f4c0420c36846ce5415c725291ebe4964090e5c59d6844ad02acb37c437486e677b0b48c8bfced79275ff64f4be33b3492d40b8496754a36b9657efbaeb2e958de29b2de4c2346de000039c2877e1a21bf2b550d0ac6cce5feb72faaccb3ba47f498c460669ca345b5561f99b5f2f020a2c01b9d95399064eed1b7e75b802f3e70239b1c58c75f9067ca4543ec5d5e32fbfbb36d9ba9db1682c7c63e91f399752c155dc5077a2dacfdd6f9e52031290be704314d5ebdcccf9f30985dbae514d0283f6c4b7e3ebdd46b6279e8031b3847a8b46240053ce76bee81fa7b62266a1b501153aacda0803809cb4671d53f6e55dad8fd508373c1c2c9353a1c9f8de2509eacbe8e1733477880c549e327a8db5aae29169ac886cd5086b7f4e8823549c44e48fcc3683fd045dd93677336998c4016dc31823ec36a0d2ceca92c131cb3d8d5e08275f40f70943de8bbcf583a8985c30dbacef8425aaca57dc860753c31c17194f71c5d316572bcf81ab8db62e06c1ee39c6a24dd0f68d82c75762842c9bbb70127029154cb768aafd308471eb518c8aecf27c0efd01883961ce002a6231189293d00dc4d71824d2af860b7b3efc3c282b2719dc737bc5c3ac23dd7dd1420472d64acf6bb2d97503804a67cf9516e28167ab8fd38acf90ce56cfb304b59a5960f4f38963db71bd7ead69178d8ce52b74297ea3a0cdd55bb1eb849c02f8a87610bc7fc48a7af7d6e56cc41cff303afadeb6b4592605c3c3c2385c9a165c1c7e30194c0e994499472b08aaaaca3707b9baf3185f5b1314853d50d7b86f255615fd4009f07b87085bcc44c865f7e14d29e64f95001bc00c68afc3a0a0555027d460519f15264289c0918cf594b5ad37252575a9484a1de681f70745d2c6248581cd3702767115637c7cf7bc15a63775b90c285be77db8b85dc08ab81bb307694417a8d1c4aa1ed8716bc58a35e1dc8e23cde3748c6a93370397dd5c41371fbe45b86e3180e410dec137bd47730c7fdb7e062cafae686201b69071f6027ac38c191c333d27f5cc814c4522859598e7e54a04a7deae272533ae39e296785124efb6714089e6567b8db2cb403d87bea3a718b925825b914764ead06b48727e4c42bee1a36e9844f35c79fb50c89e4d9ad6a7b464299fcd10037166c2cecd017bfc184ef59fe2575e93a139a47e2baf5482f3a5d248413c87a39baf7e1eb1441ceb37f5df211844834808cd4df62b2e0b0b0a75da0e27720b5ae54fe00518e951e21ba4e1bc2d454e7bbfb86e3aaf7b9a25e354e56aeebd11e832471fc8edd0d3b4d3c123779cee870c86d97d703bc44b639a2fc49855fa54e9304de1dcedf90df397733fa94792c1bf0685335b027f3de1ac8f7f007f61ea9e51988f1fcbaf982b5b808645c4eb2fcaaca3c10667eddc4007061eaf3c250744baae0332bff7c9f077ede4b593853f4a165dcfee11b75d5107d1a86a6669c231415eef1dbb58f0b829ef03f4ee0e6acc787b1ad31807852ec4269d23322304842ac0cb13cd53e7e4479cb7fd9d7b4ecd722ecfea4c59f69760323d9930b03cba558cbe30711447ca93a01596d2bc245e9908738b1de17f07c9eeaa28472e08570a3129e81c874a894b23b1d8a77c1b4275fdea8adf5ff10bad0ebd41073059c3a900801699d4c1b023336ed5d675b57db4770f85b0cf1e0dab135633936ceaffbc4a8a1dd58bec1fd3fbcee9be9874158abd4376928b2023191d2c87f3657943a60dcb16212704cfbee381e58194c5671b594494c60325512773dc7dc38da37d8b275becb97f472067bfd7d3594afd78a0803839248c75fdce6b62711026cc32e1e3aa01152175a3096603394e773883790e96622a2b347ebe569eb26d4010115cfa611d4deb83ae4b0753b528fea440c95d5650acb53931f8ef6b6614b2aefd0754c5484b6139ad18a0cc23efbc3def8595ca45ef24cb6083c93261381a111f2ef450f5f95a343de96d4d426d3a7a72526b09b825a75df24dbf4d51a5b77f8cb948bcb78c4b4c09da92aeaf9855d40b0d5d8eabc5fe57c555f58ba0125e29512d2295b0c9ddba45f37a346e7826a4e3bcfa40a54be096f695adf9e66bc9f369556ac26c6fe46d4bd80ac949cd31e1390c14387a81cb5cf814944e60a2937", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x4, 0x3, 0x1ff, 0x800000000400000, 0x81, 0x0, {0x1, 0xfffffffffffffffd, 0x80000000000, 0x2, 0x400000000000, 0x6, 0x0, 0xfffffffd, 0x1, 0x1000, 0x4000000, 0x0, 0x0, 0x0, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000002100), &(0x7f0000002180)=0x60) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000021c0), 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002200)) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/protocols\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) setgid(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e000000000000000000"], 0x80}}, 0x0) 1m7.057442922s ago: executing program 2 (id=2894): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001380)=@newtaction={0x98, 0x30, 0x871a15abc695fb3d, 0x0, 0x25dfdbfe, {}, [{0x84, 0x1, [@m_tunnel_key={0x80, 0x1, 0x0, 0x0, {{0xf}, {0x50, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}}, 0x20}, 0x1, 0xba01, 0x0, 0x20000000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0], 0x0, 0x54, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$ITER_CREATE(0x21, &(0x7f0000000700), 0x8) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f0000000bc0)=""/95, 0x5f}], 0x1, 0x3, 0xfffffffc) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000740)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r4) r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) write$cgroup_int(r5, 0x0, 0x0) r6 = inotify_init1(0x800) syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd=r6, 0x4, &(0x7f0000000080)=""/164, 0xa4, 0x14, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x7, 0x14, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5a34971f, 0x0, 0x0, 0x0, 0x8}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1d7c}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff8}, @alu={0x7, 0x1, 0xc, 0x1, 0x2, 0xffffffffffffffe0, 0x4}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @jmp={0x5, 0x1, 0x8, 0x2, 0xa, 0xfffffffffffffffc, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0xb, 0x5, 0x7, 0xfffffffffffffff0, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x7, 0x7d, &(0x7f00000001c0)=""/125, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0xa, 0xfffffffc, 0xd}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f00000008c0), 0x0, 0x10, 0x8}, 0x94) 1m6.843958211s ago: executing program 2 (id=2896): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0xe5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18}, 0x94) syz_io_uring_setup(0x30ac, &(0x7f0000000440)={0x0, 0x16bc, 0x4000, 0xfffffff8, 0xfe}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xc4}}, 0x20050800) syz_open_dev$usbfs(&(0x7f0000000100), 0x20076, 0x123301) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') getdents(r1, &(0x7f0000000040)=""/44, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYRESDEC, @ANYRESOCT], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) syz_init_net_socket$ax25(0x3, 0x5, 0xc4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001e9f9c28e83717b4f16e26000701fcff712b9836770a8d5da354d25c4b48dba76b4c1f83005d86ee44b1584270fb1423c7530059cd5dcacf6f3bb15e49f547f7a43d4f36916191b64b4e6e86fc8ca8fd6d1cd3058c5425fd648017832fda42125dc880f750eaf9292519ecfcdb9be6746dbac84dee195729ad1ec00e242701b25bc64c3850357125ffbc2d6dbcf15b42e9dacd356f2baf37742663a8cb99b2095ccb8604909982fd51d41827a9dd33127c54cae894975fc04dce803a0420b9ce6fca42f8a5f6edfd085d65ffce62fe007b82cf084558ed7648cdc9d65d"], 0x14}, 0x1, 0x0, 0x0, 0x488c0}, 0x4c044) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="14d38443c546bb221c3e0000003400090000000000004000000400"], 0x14}, 0x1, 0x0, 0x0, 0x400c841}, 0x14040044) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setregid(0xffffffffffffffff, 0x0) 1m5.391500388s ago: executing program 2 (id=2900): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x95}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000080)="b3019c", 0x3, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) recvmmsg(r5, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186, 0xba}, {0xffffffffffffffff}], 0x2, &(0x7f0000000280)=""/239, 0xef}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000680)=[{0x0}, {0x0}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000580)=""/245, 0xf5}], 0x4, &(0x7f0000000700)=""/27, 0x1b}}, {{&(0x7f0000000740)=@nfc, 0x80, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180, 0xb4}}], 0x4, 0x10162, 0x0) sendmsg$nl_generic(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x9}}, 0x14}}, 0x20004814) 1m4.182812148s ago: executing program 2 (id=2903): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) r1 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYRES64=0x0, @ANYBLOB="aa558a8937bee3cc801239f722c7d456e72607fd62e703b3c50f9a0f59a3d44788e14a5da89d4d3571bd761ca022d5752623dede36063938e9827d6ac72a31038772c90de09b6fe1dd05460143ca88d687ce32a46d4094c897faf4e2929e30319f8e911a68e16a720e752e83c1b6fbd2da49a5a30de11eb8c89bcc2f4a8806824dd6af4eb7db0198aac5e706480dd92e1336c79149e6b70a5b8676bc2ba6ff36e0708256c9f775d0a2cfbf23e6ad976dfa3280d6f44400d5eba2fe01cd50205ee99575f90817709453364c777614e487", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYRES16=r2], 0x48) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x7, @remote}, r5}}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f0000000280), 0x35c, 0x0) read$msr(r6, &(0x7f0000032680)=""/102392, 0x18ff8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1200060000000000200069de9d41a276ca8f8fc805d8645a576fcd6f195cfe4e4e6155987809c097e0db5a96b763cf9e97471678c388d90163c1ce8f66d82a8a21be083a89864cabcbeb53a885da87cd043d4b09cbf5a9d20274c06e533755d4fefac88621d35ec653e3e791221286abad2c2a9796cbc691bf491dd90965dbd231b184e7d74c06dd40e91702cd8e39dfcbe75e5dff3562648e0f15141cb0a83118882f0c9015220d", @ANYRES32, @ANYRES16, @ANYRESHEX=r3, @ANYRES16=r3, @ANYBLOB='\x00\x00\x00\\\x00'/28, @ANYRES32, @ANYRESOCT, @ANYRESDEC=r0], 0x50) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r7, &(0x7f0000000540), &(0x7f0000000640)=@udp6=r1}, 0x20) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000300)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x3, 0x3, @remote}, r5, 0x2}}, 0x48) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, 0x0, 0x0) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[], 0x280}, 0x1, 0x0, 0x0, 0x48000}, 0xc845) 1m3.038013908s ago: executing program 2 (id=2904): r0 = memfd_create(&(0x7f0000000400)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x11, r0, 0xe7e47000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$caif_stream(0x25, 0x1, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x34, r1, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) memfd_create(0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 47.423360675s ago: executing program 32 (id=2904): r0 = memfd_create(&(0x7f0000000400)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1', 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xa, 0x11, r0, 0xe7e47000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$caif_stream(0x25, 0x1, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x34, r1, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) memfd_create(0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x5}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1b, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x6}]}) 31.979420406s ago: executing program 0 (id=2998): r0 = accept$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x6000000, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x100000, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000006000000feffffff00"]}, 0xa5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r2}, 0x18) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x3, &(0x7f0000000040)=0xfffe, 0x4) bind$inet(r5, &(0x7f0000003900)={0x2, 0x4e24, @multicast1}, 0x10) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='.\x00', &(0x7f0000000140)='vxfs\x00', 0x0, 0x0) 30.605722579s ago: executing program 0 (id=3000): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) connect$pppl2tp(r1, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x4002, @multicast2}, 0x5, 0x0, 0x4}}, 0x2e) 30.072277734s ago: executing program 0 (id=3002): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000380)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000280)=0x14) read(r1, &(0x7f00000019c0)=""/4097, 0x1001) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfffffff3, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0x3, 0x40000003, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0x80000001, 0x7, 0x9, 0xffff, 0x3c5b, 0x4, 0x24, 0x3, 0xfffffffe, 0x1f461e2c, 0x2, 0xfffffffa, 0x3, 0x3, 0x3, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x0, 0x80071, 0x5, 0xfffff000, 0x103, 0x0, 0x5, 0x803c, 0x4, 0x1, 0x1000, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000007, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xb, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xffff, 0x2000002, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0x3], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0xf, 0x88, 0x0, 0x5, 0x5, 0x3b, 0x3, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0xa2, 0x7, 0x53cf697b, 0x1, 0x3, 0x54fe12d2, 0xbf, 0x200, 0x0, 0x400002, 0x3, 0x4, 0x5, 0xf23, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0x6, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x6, 0x400007, 0x2, 0x5, 0x735, 0x8, 0x3, 0x50fd, 0x10001, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10000, 0xfffffffe, 0x8, 0x2b94, 0xa1f, 0x8, 0x9, 0x1, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x918) unshare(0x22020600) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x40, r4, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x4}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x0) syz_usbip_server_init(0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x216c00, 0x0) flistxattr(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="88000000", @ANYRES16=r7, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r8, @ANYBLOB="4f000e0080000000ffffffffffff08021100000008021100000000000000000000000000640001000406e0080080d0912a01022d1a5a0013000000000000000004000400140000000100070000009700080026006c09000008000c006400000008000d00000000000400e200"], 0x88}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0xfffffffffffffffd, &(0x7f00000000c0), 0x111, 0x3}}, 0x20) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000111401000000000000000000080003000000000008004b0013000000", @ANYRES16], 0x30}}, 0x4040010) 27.605988165s ago: executing program 0 (id=3010): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200), 0x2, 0x9}}, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="16000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec309d59191b00867997f9c0efa9c9092a31cdbb98ea272787afda0af59a320709c3a59ef05c6f40ceafec53f48d6186e7d8409e35306221caf67b370d875eff3191932728e5ab6c9a3acf6ccee3e352c898f5744abaedfb53f92c37acb126bd143f3e9cdfcf25a8d6129fcc3a141c3f5ab6db772f87c787817a9b699dd60732d952716b103bc1e91ac5b1ed92f35389580994bb0df9bce07e7a80921888f984139f488d25", 0xc0}, {&(0x7f0000001480)="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", 0x1001}], 0x3) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000007380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="f1e6ffffffff000000001300000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x50) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) close(r0) 27.398020168s ago: executing program 0 (id=3012): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) setrlimit(0x5, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000040)=0x7, 0x4) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x402, 0x0) r4 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$unix(0x1, 0x5, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000580)={&(0x7f0000000240), 0xc, &(0x7f0000000340)={&(0x7f0000000500)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x594, 0x26}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x2d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x66}]}, 0x4c}}, 0x40000) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "a4c3eabfbc4a051fc8f66eedf1c6676b4e9ac471123ee41b102a78284f881840", "c493c69907ac61ee57f3ff6656218f8c880cab0b7f5f977f29b54144914986b5", "7795433781033bb967429b7c68c2566066943f3a566d7fd05557583a535a3b9e", "cba936683f411a1265d9ffb369dbe16de72fd8ee91c60f531196c136add25f43", "3fda464b4ffcb83f5c89e20fe8814b4e26bb81519905d65c5a0ae43be09d9f7b", "9900255a099270427859ce54", 0x43dd5e67, 0x9, 0x4, 0x5, 0xfffffffe}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r3, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000200)={0x1}, 0x1) sendto$inet6(r0, 0x0, 0x0, 0x890, 0x0, 0x0) r6 = socket$inet(0x2b, 0x801, 0x0) ioctl$sock_SIOCGIFBR(r6, 0x8940, &(0x7f0000000280)=@get={0x1, 0x0, 0x1}) 25.682207546s ago: executing program 0 (id=3016): bpf$MAP_CREATE(0x0, 0x0, 0x48) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r10, @ANYBLOB="01"], 0x3c}}, 0x0) 13.791600211s ago: executing program 4 (id=3047): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r0}, 0x10) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000200)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002480)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000500000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) preadv2(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 12.79974848s ago: executing program 4 (id=3049): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x4, 0x88}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f0000000100)=0x9) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) r2 = socket$netlink(0x10, 0x3, 0xa) r3 = dup(r2) r4 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) ftruncate(r4, 0x200004) sendfile(r3, r4, 0x0, 0x80001d00c0d1) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x8259, 0x400, 0x2, 0xf8}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x0) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) close(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(0x0, 0x7) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) exit(0x0) 12.47553965s ago: executing program 4 (id=3053): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x38, 0x1404, 0x10, 0x70bd2d, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x40408c0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800) 9.600684368s ago: executing program 5 (id=3058): socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r4, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x6, 0x80}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1, 0x2, 0x1b8, 0x2}) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000280)={@private2}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r7}, &(0x7f0000000100), &(0x7f0000000140)=r9}, 0x20) 7.434326538s ago: executing program 5 (id=3061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r5, 0xc0045520, &(0x7f0000001000)=""/91) write$FUSE_INIT(r3, &(0x7f00000004c0)={0x50, 0x0, r4, {0x7, 0x1f, 0xfffffffd, 0x2022144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x50) syz_fuse_handle_req(r3, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)={0x10, 0x0, 0x5}, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r6, 0x0, 0x0) 7.406156067s ago: executing program 1 (id=3062): syz_io_uring_setup(0x7868, &(0x7f00000000c0)={0x0, 0x9013, 0x8000, 0x4, 0x165}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000002440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) open(&(0x7f0000000100)='.\x00', 0x555502, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, 0x0) 6.362452725s ago: executing program 5 (id=3063): socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xf3a, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, 0x0, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000140)={0x10, 0x0, r7}) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000002c0)={0x8, r7}) unshare(0x26020480) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000085100000060000001800000062a25b6fff6fe1e81f0000133450351bd61363c1a35a797e968e8207764153e82fd89982aa9364d3f4282066590100008000000000d70520630471d24706ff0ccc377e668a3f00d27aa9fd5123b466c83119be5071997df32bb494b83548c7e1332f67199c12715a6c63567ccb741b25a6646705607843d40e6356fcfa8a8849c74d61eb822cd0d20000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r9, r8}, 0xc) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x15, @remote, 'gre0\x00'}}, 0x1e) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(0xffffffffffffffff, 0x40047435, &(0x7f0000000200)=0x1) 6.308007495s ago: executing program 1 (id=3064): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000005d80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000080)="7957d404736da65f9d132319c6a502980bd709", 0x13}, {&(0x7f00000005c0)="ada3468ff5b811c75a5cb675c4e3a6039748de9cec396af61311", 0x1a}], 0x2, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000019880)=[{{0x0, 0x3c00, &(0x7f0000019740)=[{&(0x7f0000019940)='i', 0x1}], 0x1}}], 0x1, 0x2604082c) 6.143445049s ago: executing program 1 (id=3065): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030080e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x24004000) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)={&(0x7f000000c300)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x95}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000080)="b3019c", 0x3, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x8, &(0x7f0000000380)=0x3f, 0x4) recvmmsg(r5, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x80, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186, 0xba}, {0xffffffffffffffff}], 0x2, &(0x7f0000000280)=""/239, 0xef}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18, 0x12}, {0x0}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000000580)=""/245, 0xf5}], 0x4}}, {{&(0x7f0000000740)=@nfc, 0x80, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180, 0xb4}}], 0x4, 0x10162, 0x0) sendmsg$nl_generic(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001080)={0x14, 0x38, 0x301, 0x270bd26, 0x25dfdbfa, {0x9}}, 0x14}}, 0x20004814) 5.31148237s ago: executing program 5 (id=3066): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000040)=@arm64={0xa, 0x8, 0x7f, '\x00', 0x3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x2f, 0x0, @loopback, @local}}}}}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r4, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r4], 0x40c}}, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000140)={0x10001, {{0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}}}, 0x88) 5.310574803s ago: executing program 3 (id=3067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000009c0)=ANY=[@ANYBLOB="0180c2000001aaaaaaaaaa1f08004500002400000002001190"], 0x0) r5 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r6, &(0x7f00000004c0)=""/57, 0x39) fsopen(&(0x7f0000000000)='msdos\x00', 0x1) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x78, 0x0, 0x3, {0x0, 0x0, 0x0, {0x4, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x3, 0x0, 0x0, 0x4000, 0x25daa903, 0xffffffffffffffff, r7, 0xffffffff, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000340), 0x888000, &(0x7f0000000400)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r7}}) shmat(r5, &(0x7f0000ff9000/0x1000)=nil, 0x0) 4.359547823s ago: executing program 3 (id=3068): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) setgid(0x0) lstat(0x0, &(0x7f0000000300)) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4100, 0x4}}, 0x10, 0x0}, 0x10) 3.705550381s ago: executing program 3 (id=3069): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="0800b685f75b000200fc00ff05ffdf00da8075392313db00", 0x18) r4 = socket(0x1e, 0x5, 0x0) listen(r4, 0x0) r5 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r5, &(0x7f0000000400)={&(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x1, {0x0, 0x4, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24000000}, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) sendmsg$tipc(r5, &(0x7f0000000240)={&(0x7f0000000300), 0x10, &(0x7f0000000500)=[{&(0x7f0000000340)='Z', 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 3.583420673s ago: executing program 5 (id=3070): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x60102, 0xc) fcntl$setstatus(r3, 0x4, 0x6800) write$binfmt_format(r3, &(0x7f0000000040)='0\x00', 0x2) read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b40)={0x38, r5, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f0000000280)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000680)={0x1b4, r5, 0x102, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x60, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @private=0xa010100}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x2, @rand_addr=' \x01\x00', 0x6}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffff3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x63fb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb06e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd1}]}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MEDIA={0xd8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5d84c8f6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xaf1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x80}, 0x200448c4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0x1e, 0x80004, 0x0) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) ppoll(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3.582749777s ago: executing program 4 (id=3071): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="180000001600010a"], 0x78}}, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000105082, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f0000000dc0), &(0x7f00000001c0)) ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x101080, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) r2 = fsopen(&(0x7f0000000400)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000540)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10xffffffffffffffff}) vmsplice(r6, &(0x7f0000000040)=[{&(0x7f0000000100)="dd", 0x1}], 0x1, 0xf) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[], 0x48) r8 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000200000000000000000000000181179cdd27e46a7980148bff5af3f413f447e7edc3595ef7114caaa3caf8bc6a42c4075d7124251951e7a1df1", @ANYBLOB="bc97fb137ce6382e079fce41b51599d7a47b50944a76af039f0450f0ee01992c0128ccb2507c284e0dfb93ae449e8ddc7fa0cec1d831fe7658b4dd1392aba946b3334258268971f61d77284f859c30b4faa0", @ANYRESDEC=r3, @ANYRES8=r7, @ANYRESHEX=r8], 0x0, 0x8001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.075960372s ago: executing program 1 (id=3073): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xa, &(0x7f0000000040)={0x88a, 0x20000008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000b1c0)="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", 0x2000, 0x0) ioprio_set$uid(0x3, 0x0, 0x4004) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) r4 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_S_MODE(r4, 0x40046109, &(0x7f0000000100)=0x31) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getresgid(0x0, &(0x7f0000000180), 0x0) close(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000240)=0x81) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r5, 0x8, &(0x7f00000002c0)=0x81) socket$nl_generic(0x10, 0x3, 0x10) 2.074321808s ago: executing program 5 (id=3074): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_connect(0x3, 0xfa5, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x83, 0x83, 0xc9, 0x60, 0x12d1, 0x79a4, 0xefca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf93, 0x4, 0xb4, 0x1f, 0x0, 0x9, [{{0x9, 0x4, 0x4e, 0x7, 0xb, 0xff, 0x5, 0x14, 0xb3, [@uac_as], [{{0x9, 0x5, 0x0, 0x8, 0x3ff, 0x6, 0x5, 0x7a, [@generic={0xff, 0x23, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0xfd, 0xa}]}}, {{0x9, 0x5, 0xf, 0x0, 0x10, 0xa, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xf7, 0xa}, @uac_iso={0x7, 0x25, 0x1, 0x3, 0xf9, 0x2}]}}, {{0x9, 0x5, 0x80, 0xc, 0x210, 0x70, 0x55, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x1, 0x7}, @generic={0x65, 0x9, "c63163589cdad90ef86ed597a0ee0c1d411c9310abe06ff1e9b453247cb3840c8309514e6039b0ff97883b079ca4bfc78942d49854582f565537ebf4b52cf9813dd444678d8bff059da35ed4f626836e08bf15d46cb2567f3cbdbd394bc865fb20992f"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x10, 0x4, 0xff, 0x1}}, {{0x9, 0x5, 0x8, 0x10, 0x40, 0xd, 0x4, 0xcd, [@generic={0xdf, 0x3, "a282a680523835e73d7000f407f50730772db441a3cb97c6b5855280feb2ea18ca457c7d04c10bcf97a58359b9f280743ccf47bfbb837fa6fc06d28285b9a7c6b63f6a3b14475286d13a3f784e9ef6cac0a3c2c317970ef6cdf2555c0e115dcf8c02d402e7ee329ddf51ae880a712591bbe0277b0e3a18a9c4882393b84f23eb5330140ba2df1e04b79c35e880b22057c36eb5ae2eb0fa4c11cd09732bc604dc120195d2f734f029591de92bbedf7ac604533dfa795e0e9c9b372026169b2ce0077221e494cce2a41beb5eed57a53e9395fb1494d83a5921c5d58ad890"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x3ff, 0x1, 0x0, 0x3, [@generic={0x25, 0x1, "b4ec3cfea193b47b3e45fdf03671921d943a2c3265831652075389c6727e4c55bad103"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x3, 0x3, 0x5, [@generic={0x30, 0x1, "bef6d51b98e8b55db5e79ba228f54da4ceb09b31c138bd733443419cab1767e1990bf4b6cd9858e8f13ed7c7776d"}, @generic={0xbf, 0x22, "6f7f2c2471d9a77e570121c226cf168d7ee293b02ee5265599098555dbff6baaaca6fa1f2fb5e7d2eefd646adeb77d8b99349c90f10e3911f9181f3157219579f2b05c213817a1dd6236684ef5af8ba8556143a9abd8c077640b98e7f15f58a0f7e2f6a8f39ecd46fbac1d1441f6c6849c131b641d6a2b112d0567d070baa80892564c55a5bd6ef30304817dd9749cce8410721a84219e927dde5071b4890e63eb560ac2ef84f417055dfca2013ac2fe33db6380ee6a1aea72a4edc851"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x20, 0xf, 0x10, 0x9}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x8, 0x6e, 0x1}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x3, 0x3, 0x1e}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x2, 0x8}}]}}, {{0x9, 0x4, 0x8b, 0xe4, 0x10, 0xe6, 0xbf, 0x3b, 0x9, [@uac_control={{0xa, 0x24, 0x1, 0x8, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x3, 0x305, 0x4, 0x1, 0x8}, @processing_unit={0xa, 0x24, 0x7, 0x2, 0x0, 0xb, "5036c7"}]}, @cdc_ecm={{0xb, 0x24, 0x6, 0x0, 0x0, "ed7c63901a75"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0xfffffffb, 0x7f, 0x3ff, 0x5}, [@acm={0x4}, @dmm={0x7, 0x24, 0x14, 0x4, 0xdd}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xf}]}], [{{0x9, 0x5, 0xc, 0x10, 0x20, 0x4, 0x0, 0x7f}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x93, 0xab, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x96a1}]}}, {{0x9, 0x5, 0xa, 0x0, 0x0, 0x2, 0x9, 0x8, [@generic={0xbb, 0x24, "9f42e2c22e21935b5a724eca7b3397500f48b691cfbde04cbc54a3de085cc6b65753a7348397c4cce789fb8059943acfdede5d049458cb2e7b4165d8035691798e43ca4291726fdebe8773e256cb583fa61d011e38445877bb03f7cb0ffa9c926e706c4f46ebf0e723cb7bb5c9f2d94c8b4bac5ff2287fe37fe26fd1812691aded685d5ec052a58c77432282e3bb3ce0e3253eff6e8af204c524cc40fe1d145515fe276484694f83521476e74f2ff31e1a20d2efa5fa098e28"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x0, 0x80, 0xff}}, {{0x9, 0x5, 0xd, 0x4, 0x200, 0x5, 0x10, 0xef, [@generic={0x37, 0x1, "e234644e5d5954b63dbfcecad5fa81595ab362f4a80b34dbb9410448af614f1c9cba27f858b92e0a34c5714de6512fe03774f00375"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0xf5, 0x0, 0x26, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x6, 0x9}, @generic={0x37, 0x22, "e5458dfcf9e5e55deba7f4a5c0a511e1532b105b4474391269af4f40c6940bd9205b857f9cae94876f509d23309fe573d6b28ca01a"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x0, 0x8, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x8, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0xf9, 0x7f}]}}, {{0x9, 0x5, 0x37b589f6fc781589, 0x3, 0x40, 0x7, 0x1, 0xe8, [@generic={0xb4, 0xb, "17659e1325e579cd81ace4c8ac69a9d89dc6b43e1da566e7d3a0e48346b01cead45ae722cce1000317bae61f4e11a1f4232b7c6aa0ec674f8e33c27006fcf05dc409cd9473e7f96f7fd525515c17ea28d25b2ce628ccb0ea96ab246f8e5b7c7d3d9835307c7ca92ad230f02619394cb1310a6e5fd8cc0541e5f1b519caea9c52ae9f4fc22e2004662dd71105876b3db27ccf8ebe521d048541828f51abd987c3a25636d2955551b5e2a07d108a4658f17f06"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0xf, 0x5, 0x8, [@generic={0x89, 0xd, "e7b1558e2b3a2eda3f0904082f7d3398cd5d73100cf815d73937ae4587df39ca8c2c77f592ac60c7342035017630ac77bfefaa8ddb9160b21d809961dc150e80630fa8d66a0f4e6ca7e582f00661dce942f0f796aba8e195326ea3aa5f93405b0d1ab258aef4d5587288d6bf562a261d5809bcf26056a4bfb8b2d8c84ea13a73c88586a178b3a5"}, @generic={0x43, 0x22, "5ce491759e6e93f06d410ed8aaf2fe5d4f654ff03de42f332be2d074a967844d7f6e46fbf8200e643e80e516274146673db4b9f6595e2e5128d1289d8ef1f75a06"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x50, 0x1, 0xb, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x0, 0x8}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x5, 0x5, 0x6, [@generic={0x55, 0xe, "3adbc01e0c0292bad8f395f31dceaf2f51300d2aacb09f4c1ac27503cefb8d68c14654d3fb795600bdbe718c2fc5c8cb020ac5cadf6e2fe2e66e2b8e79fc91f36e095ecbd7be411c22e6579132f04a51506b04"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x40, 0x1, 0xfa, 0x4, [@generic={0x29, 0x11, "b7138142de4df7e97dd26d0b1458fd20b0c53d6206150d448701ac55b7506a3fdc8e062a4196ea"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x3ff, 0x3, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xb7c}]}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0x40, 0x8, 0x60, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x5}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0xa, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x81, 0x1}, @generic={0xb3, 0x5, "569edb5aa65ed51c558ef1a58c8af72db4d4509d86f500679c0099bdf85186f9d8ed5604170737fe83ce9dee9ab9f80e3a4dec512233e7dd4cf6b431c5e67e0cc88b37d46c8afed0ae4e8e3d8a1fe4dda79f5b248ec3e9a78ec1e9d7cc603ccc836bb5387297a0e0047d745d3e735f79be96bf6c78788aec5e8ca248ad5fe4e38aa152bd7bb703206dccd2697cf400196e2e11848b4fa92242b75f97c5e65d842da71809b065eb81a22896d59fc54be616"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0x1, 0x45, 0x4, [@generic={0xdd, 0x1, "a39d29eed4285cf227880bbf3b948644342c42a828d6661ead7708cb7f09d875d0ddc9dca8e77f2b4a037c59119a89541ee2df1718440c0333f946f5b6e33bcb337e6ee4c9cd66aa96fac06ead43337913ce16cb51c9cb22fd37992507197a1bd5338ceb8fe3436db471653b0baac2af63ada518f9bff690c5ec3baa71a6fffa03fb62a1bc979c56f7a31fc4c2417b1ff6d9f1df1254dbd631c7479e41cb79da6fc69b5de5bfb2a24f1825b4acd7a2fd178ccb37df00f0fad045f441b4d4ff5905fa0aeb9e4075914dfe391ff44fe69165b766cab90cec7d37c7c4"}]}}]}}, {{0x9, 0x4, 0x8e, 0x29, 0x5, 0xa, 0xe3, 0xd5, 0xe, [], [{{0x9, 0x5, 0xf, 0x8, 0x10, 0x93, 0x2, 0x2}}, {{0x9, 0x5, 0xa, 0x10, 0x10, 0x9, 0xff, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x0, 0x2}]}}, {{0x9, 0x5, 0xb, 0xc, 0x20, 0x80, 0xc, 0x3d, [@generic={0x31, 0x6, "d5e202dd55d9656c0aef39632eb0282f2c8a61468538caf6065695ab312520ceab30e9f15c1c8a17051804d516588a"}, @generic={0xeb, 0xe, "6f6248377c8792d98b9d0aa562d00ab49ea259d2b1d9f394384b7f78abb189661205cf0b8ada63837f69a4e76e0699d02c16205efe2ab34998292960596ff49d94438213d039f3784fa1866c2849ba337942a8b7d4d100537aef636fbbe8517b07a0955058f52bbf37ea08befd78b42c5c133b79c4f9b3a69674287ff93fa013e9d251137deec5e40b2ea87945d75c7f5f174effdc8315c78b9b4863517c587fddc7f6c393021358f919b76875885e88249cae7f01633e2f6b61502576c5306693e337990ca562983a8c66c58abe4579951c53b21c4b3d04feca3c00af545ea4e575e3650a40f88cd0"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x3ff, 0x4, 0x5, 0x6d, [@generic={0x32, 0xc, "8d441a24b395c24b4a9e5e2b54692ca399692fbcb81c74a8e465de241c8eec2d1d16c571bcc87e6e38807c7d3f6034ac"}, @uac_iso={0x7, 0x25, 0x1, 0x82, 0x5, 0x1000}]}}, {{0x9, 0x5, 0x5, 0x10, 0xe1dfb27cdd7aec25, 0xfa, 0x10, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7f, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x7}]}}]}}, {{0x9, 0x4, 0xae, 0x4, 0x6, 0xd4, 0x91, 0x15, 0x6, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "95ff"}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x300, 0x8, 0x63}, [@country_functional={0x6, 0x24, 0x7, 0x5f, 0x401}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x90}, @network_terminal={0x7, 0x24, 0xa, 0x7, 0x1, 0x80, 0x6}]}, @hid_hid={0x9, 0x21, 0x9, 0x5, 0x1, {0x22, 0x913}}], [{{0x9, 0x5, 0xc, 0xc, 0x10, 0x2, 0x2, 0x5, [@generic={0xa7, 0x5, "80a3580c940bae7dd57265e70cccc75274af93584f27ad285290c8e659495bd7eb32ba84e19c4f5258040274fe1ba80e3b2a9b83b6719549df2da8a52ffacd186d5c1a2fa5aab8b14db7483a1f0bf6e9cd6dcb6940cc431e4a0927149a0c018e12c031089bc86f364329c1950d038a4c891c6cada5312484436f6a4015a95e361f12fc06029751f7b39f47b0cb2c3106eef4bb87cfa0bc1630c5452deec8835e22817882bd"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0x6}]}}, {{0x9, 0x5, 0xa, 0xc, 0x40, 0x9, 0xd, 0xfb, [@generic={0x2f, 0x24, "5c0942813ce276014763e8c5a97d03148efbe5497ed470ed7f7af376adec0fa272eb7de83945b700fcab205c70"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x200, 0x6, 0x3, 0x4}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x0, 0xd9, 0x3, [@generic={0x9f, 0x7, "61e71742c051c1f953c139a5de6bcd0eabdcd4745805ed47e67f2c77cba54b6b576c231cf00c4d860ecc8def8d41b87bf6e4c22d553247403849ae81233301c3b55a65e15db97f5a3f3c3957b587ad4dd8aa6fc46ed4b51d26067bbfa573333b0e1edb19dde28417c893a9bd434c2fb978c00a5fe3684772bc75424af5c82bb897e4b6a6299c60e46f5497adf656122741164f36aa8e5abcdebbb4ec2e"}]}}, {{0x9, 0x5, 0x87, 0x4, 0x40, 0x3, 0x3, 0x7, [@generic={0xc6, 0x8, "410059bd2c42502d1dd2633b7fdd03ce2a03cc11c8e562a93e59842513fa7c3b7f2428e7ef2d3fdb8f992162b6d15cf1f8a03dff872e707cce15032c4c652a00a85b2ebb63204469786d120cd997e5185e5604023f0e184452dada732f4824eb5d3c6f93a87e08948ba4b4b2440e4eab912e225d1ee6f490b5b6969ef3fe57f1b6feb2cd938dafccd830be8372d23d78e82504f8ed870efec2cd59ce943d313a3df6ea6925c5c8cd87cd480fadedd90eea20e037c9ede705e23dbc020c937c5015eda3e1"}, @generic={0x80, 0x31, "1bd5b825a2637bc04b4b4d3e07de53721c3d2b6515295c9bd2e4b173c137d8d687024620d4e552425474d6ced0395ea4a83375d3c89ba01b05a6f632530e3069d9df65a8f50fa04fbe4d90ecd27e8c9a56469f0af98e856cad5c9dbeb381dbc10789fbc49f67ead165f341ced775e3a03626bedb6bec16ebeb96d1e3684b"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x400, 0x1, 0x7, 0x5, [@generic={0x94, 0x7, "36e6354be5bbed9f4e75efbb3b6fb2f83ef1534e05a36a316da028cc3dad4f68470a4c8420eb64098d8f800646a43a17d5c53224ff713ce73d9dccf2db0c6ea92d43ec421f82247616e0f16a1438de3a6b2c9dfa2695f9ec6d27572ea080d8217f3062c6c4914d3751631db9bb23bf9ac6d7788f387fe29fb51701d3fa8cdf89c3368b11e1833b30d85a7758e4afd055b4ef"}, @generic={0x6a, 0x11, "98c1058748fa69048c9cbc458511e365fb6f21ebebf2e60f037bc58d646338fdb5a3a3131495dbd101d4fac6d84a3a58dbf0e6cf05a9bb86afdb2456de460af23a53f3dcfeb2e32327d0fd5462ac0251cd087aa96bf7f3cbde76a8260686e4e01b98d9f8ee99390d"}]}}]}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x250, 0x9, 0xf8, 0xe, 0x20, 0x9}, 0x4c, &(0x7f0000001940)={0x5, 0xf, 0x4c, 0x6, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x8, 0xfd, 0x7df2, 0x3e}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0xd, 0x4}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x9}, @ssp_cap={0x20, 0x10, 0xa, 0x8, 0x5, 0x42f, 0xf00f, 0xb, [0x3f00, 0x18030, 0x0, 0x0, 0xffc0c0]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x7, 0x4, 0x4, 0x40}]}, 0x5, [{0x63, &(0x7f0000001080)=ANY=[@ANYBLOB="6303cfb00aa9209b7fc809232d3ba35a1798fa9899f57db2a847005c88dad4d1d231866bb7c755443170076b588489f080ad2b9d110935fb263d87c5efc18043152c261031f4b53a81bc82a2c0b8324bd5ce2ab033bccc09006df50de750eeedb8135b"]}, {0x9d, &(0x7f00000019c0)=ANY=[@ANYBLOB="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"/312]}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x3c01}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x813}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x340a}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000040), 0x40, 0x50800) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0xfffffffffffffffd, 0x0, 0x10000, 0x0, 0x4002004e4, 0x62, 0x0, 0x0, 0x0, 0x0, 0x3], 0x10000, 0x2011c0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="03000000000000007508000000000000030000000000000061f57c86d978"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x200d, 0x3, 0x20, 0x0, 0x5f1, 0x1}) syz_usb_control_io$printer(r0, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) r6 = syz_io_uring_setup(0x422d, &(0x7f0000000340)={0x0, 0xfffffffd, 0x10100, 0x3}, &(0x7f0000000000), &(0x7f0000000140)=0x0) r8 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, 0x0, 0x0, r8) syz_io_uring_setup(0x1866, &(0x7f00000003c0), &(0x7f0000000040)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r9, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r6, 0x184d, 0x0, 0x42, 0x0, 0x0) ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000080)=0xfffffffa) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r10 = syz_open_pts(r5, 0x0) ioctl$TCFLSH(r10, 0x540b, 0x2) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000001340)=@security={'security\x00', 0xe, 0x4, 0x4c0, 0xffffffff, 0x0, 0x2b8, 0x0, 0xffffffff, 0xffffffff, 0x3f0, 0x3f0, 0x3f0, 0xffffffff, 0x4, &(0x7f0000001300), {[{{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @loopback, [0x0, 0xffffff00, 0xffffff00, 0xff000000], [0xff, 0x0, 0x0, 0xffffff], 'gre0\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x7, 0x4, 0x55}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@hl={{0x28}, {0x2}}, @common=@dst={{0x48}, {0x6, 0x7, 0x1, [0x401, 0x5, 0x2, 0x0, 0x5, 0x2, 0x4, 0xc, 0x146, 0x8000, 0xb5, 0x4, 0x1000, 0x3, 0x401, 0xfff8], 0x5}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x27}, 'batadv0\x00', {0x9}}}}, {{@ipv6={@mcast1, @loopback, [0xff000000, 0xffffffff, 0xffffff00, 0xff], [0xffffffff, 0x0, 0xff000000, 0xff], 'veth1_virt_wifi\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x89, 0x2, 0x5, 0x2b}, 0x0, 0x118, 0x158, 0x0, {}, [@common=@hbh={{0x48}, {0x8, 0x0, 0x0, [0x7fff, 0xfffa, 0xd, 0x2, 0xfff, 0x2, 0x0, 0xd, 0x8, 0xfff, 0x1, 0xff16, 0x2, 0x400, 0x7, 0x9], 0xc}}, @common=@ipv6header={{0x28}, {0x5a, 0x20, 0x1}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x5, 0x9, 0x9, 0x10000, 0x2, 0x4, 0x5, 0x3]}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@hl={{0x28}, {0x2, 0x3}}, @common=@ipv6header={{0x28}, {0x0, 0xa8}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "264db55b705fdd6acaefdecc2f46be3f0f63043eecb46643ad5c104d743f"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xffffffffffffff12) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.027183301s ago: executing program 4 (id=3075): socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xf3a, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f00000002c0)={0x18, 0x3, 0x0, r5, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, &(0x7f0000000140)={0x10, 0x0, r6}) ioctl$IOMMU_DESTROY$hwpt(0xffffffffffffffff, 0x3b80, &(0x7f00000002c0)={0x8, r6}) unshare(0x26020480) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000d0ff0000000000000000000085100000060000001800000062a25b6fff6fe1e81f0000133450351bd61363c1a35a797e968e8207764153e82fd89982aa9364d3f4282066590100008000000000d70520630471d24706ff0ccc377e668a3f00d27aa9fd5123b466c83119be5071997df32bb494b83548c7e1332f67199c12715a6c63567ccb741b25a6646705607843d40e6356fcfa8a8849c74d61eb822cd0d20000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r8, r7}, 0xc) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r9, 0x40047438, &(0x7f0000000040)=0x2) ioctl$PPPIOCBRIDGECHAN(r9, 0x40047435, &(0x7f0000000200)=0x1) 1.040588039s ago: executing program 3 (id=3076): r0 = socket$xdp(0x2c, 0x3, 0x0) userfaultfd(0x80001) r1 = syz_io_uring_setup(0x88d, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0x1f, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x2d) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xac24, 0x10000, 0x2, 0x362}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) creat(&(0x7f0000000000)='./file0\x00', 0x8) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r0, 0x0, 0x0, 0x0, 0x80800}) io_uring_enter(r4, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 643.913233ms ago: executing program 4 (id=3077): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) io_uring_setup(0x7d98, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) epoll_create1(0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) migrate_pages(0x0, 0x800000005, &(0x7f00000002c0)=0x7f, 0x0) syslog(0x1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000002100), 0x1, 0x2) ioctl$VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000180)={0xfffffffc, 0x5, 0x1}) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000280)={0x5, @pix={0x7, 0x8, 0x34363248, 0x7, 0x9, 0xffffffff, 0x3, 0x2, 0x1, 0x1, 0x0, 0x4}}) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r4 = accept4(r2, 0x0, 0x0, 0x0) recvfrom$inet(r4, 0x0, 0x0, 0x20, 0x0, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000340)=0x530d, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r6) 583.465751ms ago: executing program 1 (id=3078): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) r4 = fspick(0xffffffffffffff9c, &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) setgid(0x0) lstat(&(0x7f00000032c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000000540)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4100, 0x4}}, 0x10, 0x0}, 0x10) 14.466195ms ago: executing program 3 (id=3079): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) clock_settime(0x100000000000000, &(0x7f0000000240)={0x77359400}) 0s ago: executing program 1 (id=3080): syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x88, 0x8f, 0xdb, 0x8, 0x1604, 0x8001, 0x37a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xe6, 0xef, 0xe4, 0x0, [], [{{0x9, 0x5, 0x5}}]}}]}}]}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x16}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa0}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x2}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x4d, 0xa, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20018000}, 0x0) kernel console output (not intermixed with test programs): ? __pfx_pfkey_sendmsg+0x10/0x10 [ 974.348924][T14834] __sock_sendmsg+0x219/0x270 [ 974.348948][T14834] ____sys_sendmsg+0x505/0x830 [ 974.348971][T14834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 974.348997][T14834] ? import_iovec+0x74/0xa0 [ 974.349023][T14834] ___sys_sendmsg+0x21f/0x2a0 [ 974.349045][T14834] ? __pfx____sys_sendmsg+0x10/0x10 [ 974.349127][T14834] ? __fget_files+0x2a/0x420 [ 974.349147][T14834] ? __fget_files+0x3a0/0x420 [ 974.349177][T14834] __x64_sys_sendmsg+0x19b/0x260 [ 974.349205][T14834] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 974.349235][T14834] ? __pfx_ksys_write+0x10/0x10 [ 974.349251][T14834] ? rcu_is_watching+0x15/0xb0 [ 974.349279][T14834] ? do_syscall_64+0xbe/0x3b0 [ 974.349304][T14834] do_syscall_64+0xfa/0x3b0 [ 974.349325][T14834] ? lockdep_hardirqs_on+0x9c/0x150 [ 974.349345][T14834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.349362][T14834] ? clear_bhb_loop+0x60/0xb0 [ 974.349390][T14834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.349406][T14834] RIP: 0033:0x7ff9d858e929 [ 974.349422][T14834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.349436][T14834] RSP: 002b:00007ff9d948c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 974.349455][T14834] RAX: ffffffffffffffda RBX: 00007ff9d87b5fa0 RCX: 00007ff9d858e929 [ 974.349468][T14834] RDX: 0000000024000800 RSI: 00002000000001c0 RDI: 0000000000000003 [ 974.349479][T14834] RBP: 00007ff9d948c090 R08: 0000000000000000 R09: 0000000000000000 [ 974.349490][T14834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 974.349500][T14834] R13: 0000000000000000 R14: 00007ff9d87b5fa0 R15: 00007ffe39fe4178 [ 974.349528][T14834] [ 975.202077][ T5942] usb 4-1: USB disconnect, device number 48 [ 976.186305][T14857] binder: 14854:14857 ioctl c018620c 200000000640 returned -22 [ 977.605216][ T5942] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 977.667017][T14876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 977.709367][T14876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 977.872448][ T5942] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 977.880924][ T5942] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.906161][ T5942] usb 1-1: config 0 has no interface number 0 [ 977.958824][ T5899] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 978.065116][T14876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.077499][ T5942] usb 1-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 978.086978][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.091331][T14876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.095109][ T5942] usb 1-1: Product: syz [ 978.107141][ T5942] usb 1-1: Manufacturer: syz [ 978.674981][ T5899] usb 3-1: config 0 has an invalid interface number: 185 but max is 0 [ 978.678374][ T5942] usb 1-1: SerialNumber: syz [ 978.685450][ T5899] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 978.703196][ T5899] usb 3-1: config 0 has no interface number 0 [ 978.705028][ T5942] usb 1-1: config 0 descriptor?? [ 978.709510][ T5899] usb 3-1: config 0 interface 185 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 978.709534][ T5899] usb 3-1: config 0 interface 185 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 978.712037][ T5899] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=d2.82 [ 978.767454][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.775805][ T5899] usb 3-1: Product: syz [ 978.780118][ T5899] usb 3-1: Manufacturer: syz [ 978.784806][ T5899] usb 3-1: SerialNumber: syz [ 978.792405][ T5899] usb 3-1: config 0 descriptor?? [ 978.799944][ T5899] usb 3-1: bad CDC descriptors [ 978.805438][ T5899] usb 3-1: unsupported MDLM descriptors [ 978.900692][T14887] binder: 14885:14887 ioctl c018620c 200000000640 returned -22 [ 979.097836][ T9606] usb 3-1: USB disconnect, device number 43 [ 979.464402][ T5942] usb 1-1: USB disconnect, device number 33 [ 979.548910][ T5899] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 980.351744][ T5899] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 980.386156][ T5899] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 980.461002][ T5899] usb 4-1: config 0 has no interface number 0 [ 980.543879][ T5899] usb 4-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 980.613394][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 980.743318][ T5899] usb 4-1: Product: syz [ 980.791672][ T5899] usb 4-1: Manufacturer: syz [ 980.850937][ T5899] usb 4-1: SerialNumber: syz [ 981.000393][ T5899] usb 4-1: config 0 descriptor?? [ 981.370487][ T5899] usb 4-1: USB disconnect, device number 49 [ 982.728854][T14920] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2546'. [ 982.861169][T14919] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2546'. [ 983.137459][T14925] binder: 14924:14925 ioctl c018620c 200000000640 returned -22 [ 983.971569][T14936] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 985.151755][ T5942] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 985.332084][ T5942] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 985.359118][ T5942] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 985.414482][ T5942] usb 1-1: config 0 has no interface number 0 [ 985.491847][ T5942] usb 1-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 985.533735][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.615035][ T5942] usb 1-1: Product: syz [ 985.620372][ T5942] usb 1-1: Manufacturer: syz [ 985.625002][ T5942] usb 1-1: SerialNumber: syz [ 985.641159][ T5942] usb 1-1: config 0 descriptor?? [ 986.236884][ T5942] usb 1-1: USB disconnect, device number 34 [ 987.307861][T14977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2565'. [ 987.899037][T14983] ubi: mtd0 is already attached to ubi31 [ 989.218556][T15001] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.2575'. [ 989.469242][ T5942] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 989.734089][ T5942] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 989.793846][ T5942] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 990.013636][ T5942] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 990.029268][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 990.037883][ T5942] usb 1-1: SerialNumber: syz [ 990.052695][T14969] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2565'. [ 990.071915][T15007] overlayfs: missing 'lowerdir' [ 990.661715][ T5942] usb 1-1: 0:2 : does not exist [ 990.746331][ T5942] usb 1-1: USB disconnect, device number 35 [ 992.303953][T15030] netlink: 'syz.3.2584': attribute type 29 has an invalid length. [ 992.356163][T15030] netlink: 'syz.3.2584': attribute type 29 has an invalid length. [ 992.526016][T15040] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2591'. [ 992.951867][T15065] netlink: 'syz.0.2600': attribute type 21 has an invalid length. [ 993.201904][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.260368][T15079] pim6reg1: entered promiscuous mode [ 993.266318][T15079] pim6reg1: entered allmulticast mode [ 993.280795][T15083] ÿÿÿÿÿÿ: renamed from bond_slave_0 [ 993.662771][T15105] veth0_vlan: entered allmulticast mode [ 993.722136][T15103] pim6reg1: entered promiscuous mode [ 993.727529][T15103] pim6reg1: entered allmulticast mode [ 993.742843][T15105] veth0_vlan: left promiscuous mode [ 993.768975][T15105] veth0_vlan: entered promiscuous mode [ 994.303190][T15128] wg2: entered promiscuous mode [ 994.314111][T15128] wg2: entered allmulticast mode [ 994.411360][T15134] pim6reg1: entered promiscuous mode [ 994.438530][T15134] pim6reg1: entered allmulticast mode [ 994.972840][T15160] lo speed is unknown, defaulting to 1000 [ 994.980832][T15160] lo speed is unknown, defaulting to 1000 [ 997.593922][T15207] overlayfs: missing 'lowerdir' [ 999.977701][T15227] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2665'. [ 1000.747163][T15229] binder: 15228:15229 ioctl c018620c 200000000640 returned -22 [ 1001.361175][ T9606] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1001.655402][T15237] futex_wake_op: syz.3.2668 tries to shift op by -1; fix this program [ 1001.845394][ T30] audit: type=1326 audit(1751292195.662:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15235 comm="syz.3.2668" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f55ba78e929 code=0x0 [ 1002.683371][ T9606] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1002.684235][T15241] overlayfs: overlapping lowerdir path [ 1002.691943][ T9606] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.691965][ T9606] usb 1-1: config 0 has no interface number 0 [ 1002.853483][ T9606] usb 1-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 1002.877028][ T9606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.897688][ T9606] usb 1-1: Product: syz [ 1003.212940][ T9606] usb 1-1: Manufacturer: syz [ 1003.217619][ T9606] usb 1-1: SerialNumber: syz [ 1003.244464][ T9606] usb 1-1: config 0 descriptor?? [ 1003.276543][T15255] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1003.285387][T15255] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1003.843867][ T9606] usb 1-1: USB disconnect, device number 36 [ 1005.260305][T15282] FAULT_INJECTION: forcing a failure. [ 1005.260305][T15282] name failslab, interval 1, probability 0, space 0, times 0 [ 1005.399025][T15282] CPU: 1 UID: 0 PID: 15282 Comm: syz.2.2680 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1005.399052][T15282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1005.399063][T15282] Call Trace: [ 1005.399072][T15282] [ 1005.399080][T15282] dump_stack_lvl+0x189/0x250 [ 1005.399109][T15282] ? __pfx____ratelimit+0x10/0x10 [ 1005.399131][T15282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1005.399152][T15282] ? __pfx__printk+0x10/0x10 [ 1005.399174][T15282] ? __pfx___might_resched+0x10/0x10 [ 1005.399195][T15282] ? fs_reclaim_acquire+0x7d/0x100 [ 1005.399222][T15282] should_fail_ex+0x414/0x560 [ 1005.399246][T15282] ? alloc_netdev_mqs+0x8e5/0x11e0 [ 1005.399267][T15282] should_failslab+0xa8/0x100 [ 1005.399289][T15282] __kvmalloc_node_noprof+0x161/0x5f0 [ 1005.399310][T15282] ? alloc_netdev_mqs+0x8e5/0x11e0 [ 1005.399336][T15282] alloc_netdev_mqs+0x8e5/0x11e0 [ 1005.399363][T15282] br_add_bridge+0x39/0xf0 [ 1005.399388][T15282] br_ioctl_stub+0x526/0xc80 [ 1005.399406][T15282] ? trace_contention_end+0x39/0x120 [ 1005.399426][T15282] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1005.399451][T15282] ? sock_ioctl+0x4b4/0x790 [ 1005.399479][T15282] ? __lock_acquire+0xab9/0xd20 [ 1005.399506][T15282] ? smack_file_ioctl+0x24a/0x340 [ 1005.399530][T15282] ? __pfx_br_ioctl_stub+0x10/0x10 [ 1005.399545][T15282] sock_ioctl+0x4d5/0x790 [ 1005.399568][T15282] ? __pfx_sock_ioctl+0x10/0x10 [ 1005.399589][T15282] ? __fget_files+0x2a/0x420 [ 1005.399616][T15282] ? __fget_files+0x3a0/0x420 [ 1005.399634][T15282] ? __fget_files+0x2a/0x420 [ 1005.399658][T15282] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1005.399679][T15282] ? __pfx_sock_ioctl+0x10/0x10 [ 1005.399699][T15282] __se_sys_ioctl+0xfc/0x170 [ 1005.399720][T15282] do_syscall_64+0xfa/0x3b0 [ 1005.399741][T15282] ? lockdep_hardirqs_on+0x9c/0x150 [ 1005.399761][T15282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.399777][T15282] ? clear_bhb_loop+0x60/0xb0 [ 1005.399798][T15282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.399813][T15282] RIP: 0033:0x7ff9d858e929 [ 1005.399830][T15282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.399844][T15282] RSP: 002b:00007ff9d948c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1005.399863][T15282] RAX: ffffffffffffffda RBX: 00007ff9d87b5fa0 RCX: 00007ff9d858e929 [ 1005.399876][T15282] RDX: 0000200000000200 RSI: 00000000000089a0 RDI: 0000000000000003 [ 1005.399888][T15282] RBP: 00007ff9d948c090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.399899][T15282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.399910][T15282] R13: 0000000000000000 R14: 00007ff9d87b5fa0 R15: 00007ffe39fe4178 [ 1005.399942][T15282] [ 1007.144583][ T5913] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1008.205625][T15307] binder: 15306:15307 ioctl c018620c 200000000640 returned -22 [ 1008.331268][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 1008.698102][ T5913] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1008.717812][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.737404][ T5913] usb 1-1: Product: syz [ 1008.742058][ T5913] usb 1-1: Manufacturer: syz [ 1009.383278][ T5913] usb 1-1: SerialNumber: syz [ 1009.391924][ T5913] usb 1-1: config 0 descriptor?? [ 1009.546429][ T5913] usb 1-1: can't set config #0, error -71 [ 1009.594975][ T5837] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1009.723514][ T5913] usb 1-1: USB disconnect, device number 37 [ 1009.758176][T15319] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2690'. [ 1009.872698][T15320] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2690'. [ 1010.264120][ T5837] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1010.295917][ T5837] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.592116][ T5837] usb 2-1: config 0 has no interface number 0 [ 1010.608191][ T5837] usb 2-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 1010.624315][ T5837] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.741500][ T5837] usb 2-1: Product: syz [ 1010.751275][ T5837] usb 2-1: Manufacturer: syz [ 1010.771291][ T5837] usb 2-1: SerialNumber: syz [ 1010.785212][ T5837] usb 2-1: config 0 descriptor?? [ 1011.022987][ T5837] usb 2-1: USB disconnect, device number 44 [ 1012.371120][T15346] usb usb8: usbfs: process 15346 (syz.0.2694) did not claim interface 0 before use [ 1014.243205][T15362] binder: 15361:15362 ioctl c018620c 200000000640 returned -22 [ 1015.528913][ T5941] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1016.457324][ T5941] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1016.465551][ T5941] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.476062][ T5941] usb 3-1: config 0 has no interface number 0 [ 1016.485087][ T5941] usb 3-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 1016.538122][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.603611][T15389] lo speed is unknown, defaulting to 1000 [ 1016.610527][T15389] lo speed is unknown, defaulting to 1000 [ 1017.042826][T15386] lo speed is unknown, defaulting to 1000 [ 1017.077302][ T5941] usb 3-1: Product: syz [ 1017.086357][ T5941] usb 3-1: Manufacturer: syz [ 1017.114409][ T5941] usb 3-1: SerialNumber: syz [ 1017.132492][T15386] lo speed is unknown, defaulting to 1000 [ 1017.201203][ T5941] usb 3-1: config 0 descriptor?? [ 1017.253789][ T5941] usb 3-1: can't set config #0, error -71 [ 1017.666251][ T5941] usb 3-1: USB disconnect, device number 44 [ 1020.088795][ T43] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1020.287524][ T43] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=31.00 [ 1020.454256][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.621937][ T43] usb 3-1: Product: syz [ 1020.626345][ T43] usb 3-1: Manufacturer: syz [ 1020.665636][ T43] usb 3-1: SerialNumber: syz [ 1021.000954][ T43] usb 3-1: config 0 descriptor?? [ 1021.025962][T15433] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1021.035751][T15433] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1021.041664][ T43] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1021.046754][ T43] usb 3-1: Detected FT4232HP [ 1021.079623][T15433] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1021.085859][T15433] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1021.097609][T15433] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1021.109473][T15433] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1021.155448][T15433] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1021.184020][T15433] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1021.282103][ T43] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1021.436312][ T43] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1021.444942][ T43] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1021.455237][ T43] usb 3-1: USB disconnect, device number 45 [ 1021.463211][ T43] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1021.473232][ T43] ftdi_sio 3-1:0.0: device disconnected [ 1022.239070][T10111] Bluetooth: hci1: command 0x0406 tx timeout [ 1022.420230][T15460] batman_adv: batadv0: Adding interface: dummy0 [ 1022.444723][T15460] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 1022.469401][T15460] batman_adv: batadv0: Interface activated: dummy0 [ 1023.129170][T10111] Bluetooth: hci3: command 0x0406 tx timeout [ 1023.135777][T10111] Bluetooth: hci2: command 0x0406 tx timeout [ 1023.200097][T15466] Bluetooth: hci4: command 0x0406 tx timeout [ 1023.236898][T15465] batadv0: mtu less than device minimum [ 1023.244557][T15471] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1023.285125][T15465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (67) [ 1023.297321][T15465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (67) [ 1023.309045][T15465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (67) [ 1023.320731][T15465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (67) [ 1023.332474][T15465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (67) [ 1023.344192][T15465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (67) [ 1023.355858][T15465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (67) [ 1023.367589][T15465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (67) [ 1023.379280][T15465] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (67) [ 1023.939704][T15475] netlink: 'syz.0.2736': attribute type 1 has an invalid length. [ 1023.974987][T15475] netlink: 'syz.0.2736': attribute type 1 has an invalid length. [ 1024.138952][T15475] netlink: 'syz.0.2736': attribute type 1 has an invalid length. [ 1024.208680][T15475] netlink: 'syz.0.2736': attribute type 1 has an invalid length. [ 1024.305602][T15475] netlink: 'syz.0.2736': attribute type 1 has an invalid length. [ 1024.315718][T15475] netlink: 'syz.0.2736': attribute type 1 has an invalid length. [ 1024.323613][T15466] Bluetooth: hci1: command 0x0406 tx timeout [ 1024.338796][T15475] netlink: 'syz.0.2736': attribute type 1 has an invalid length. [ 1024.798831][T15475] netlink: 'syz.0.2736': attribute type 1 has an invalid length. [ 1024.807019][T15475] netlink: 'syz.0.2736': attribute type 1 has an invalid length. [ 1024.868501][T15475] netlink: 'syz.0.2736': attribute type 1 has an invalid length. [ 1024.896680][T15475] FAULT_INJECTION: forcing a failure. [ 1024.896680][T15475] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.922197][T15485] tipc: Started in network mode [ 1024.937011][T15475] CPU: 0 UID: 0 PID: 15475 Comm: syz.0.2736 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1024.937035][T15475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1024.937044][T15475] Call Trace: [ 1024.937051][T15475] [ 1024.937059][T15475] dump_stack_lvl+0x189/0x250 [ 1024.937085][T15475] ? __pfx____ratelimit+0x10/0x10 [ 1024.937107][T15475] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1024.937128][T15475] ? __pfx__printk+0x10/0x10 [ 1024.937150][T15475] ? __pfx___might_resched+0x10/0x10 [ 1024.937170][T15475] ? fs_reclaim_acquire+0x7d/0x100 [ 1024.937196][T15475] should_fail_ex+0x414/0x560 [ 1024.937220][T15475] should_failslab+0xa8/0x100 [ 1024.937242][T15475] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1024.937262][T15475] ? __alloc_skb+0x112/0x2d0 [ 1024.937281][T15475] __alloc_skb+0x112/0x2d0 [ 1024.937301][T15475] netlink_ack+0x146/0xa50 [ 1024.937317][T15475] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1024.937338][T15475] ? ref_tracker_free+0x63a/0x7d0 [ 1024.937356][T15475] ? __copy_skb_header+0xa7/0x550 [ 1024.937377][T15475] ? __pfx_ref_tracker_free+0x10/0x10 [ 1024.937395][T15475] ? __skb_clone+0x63/0x7a0 [ 1024.937422][T15475] netlink_rcv_skb+0x28c/0x470 [ 1024.937441][T15475] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1024.937465][T15475] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1024.937496][T15475] ? netlink_deliver_tap+0x2e/0x1b0 [ 1024.937511][T15475] ? netlink_deliver_tap+0x2e/0x1b0 [ 1024.937534][T15475] netlink_unicast+0x758/0x8d0 [ 1024.937569][T15475] netlink_sendmsg+0x805/0xb30 [ 1024.937597][T15475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1024.937622][T15475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1024.937641][T15475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1024.937660][T15475] __sock_sendmsg+0x219/0x270 [ 1024.937685][T15475] ____sys_sendmsg+0x505/0x830 [ 1024.937711][T15475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1024.937738][T15475] ? import_iovec+0x74/0xa0 [ 1024.937765][T15475] ___sys_sendmsg+0x21f/0x2a0 [ 1024.937787][T15475] ? __pfx____sys_sendmsg+0x10/0x10 [ 1024.937843][T15475] ? __fget_files+0x2a/0x420 [ 1024.937863][T15475] ? __fget_files+0x3a0/0x420 [ 1024.937895][T15475] __x64_sys_sendmsg+0x19b/0x260 [ 1024.937928][T15475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1024.937957][T15475] ? __pfx_ksys_write+0x10/0x10 [ 1024.937974][T15475] ? rcu_is_watching+0x15/0xb0 [ 1024.938001][T15475] ? do_syscall_64+0xbe/0x3b0 [ 1024.938030][T15475] do_syscall_64+0xfa/0x3b0 [ 1024.938050][T15475] ? lockdep_hardirqs_on+0x9c/0x150 [ 1024.938071][T15475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.938088][T15475] ? clear_bhb_loop+0x60/0xb0 [ 1024.938109][T15475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.938126][T15475] RIP: 0033:0x7f4acb38e929 [ 1024.938143][T15475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1024.938158][T15475] RSP: 002b:00007f4acc14f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1024.938177][T15475] RAX: ffffffffffffffda RBX: 00007f4acb5b5fa0 RCX: 00007f4acb38e929 [ 1024.938190][T15475] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 1024.938202][T15475] RBP: 00007f4acc14f090 R08: 0000000000000000 R09: 0000000000000000 [ 1024.938214][T15475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1024.938226][T15475] R13: 0000000000000000 R14: 00007f4acb5b5fa0 R15: 00007ffd986bc168 [ 1024.938256][T15475] [ 1025.288755][T15466] Bluetooth: hci2: command 0x0406 tx timeout [ 1025.295106][T15466] Bluetooth: hci3: command 0x0406 tx timeout [ 1025.301255][ T5846] Bluetooth: hci4: command 0x0406 tx timeout [ 1025.327886][T15485] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 1025.337182][T15485] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 1025.351191][T15485] tipc: Enabled bearer , priority 1 [ 1025.645494][T15492] bio_check_eod: 2 callbacks suppressed [ 1025.645515][T15492] syz.0.2741: attempt to access beyond end of device [ 1025.645515][T15492] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1025.669641][T15492] syz.0.2741: attempt to access beyond end of device [ 1025.669641][T15492] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1025.693366][T15492] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1025.739848][T15492] syz.0.2741: attempt to access beyond end of device [ 1025.739848][T15492] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1025.888874][T15492] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1025.925256][T15498] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2741'. [ 1025.940613][T15492] syz.0.2741: attempt to access beyond end of device [ 1025.940613][T15492] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1025.969628][T15492] syz.0.2741: attempt to access beyond end of device [ 1025.969628][T15492] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1026.093049][T15492] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1026.288929][T15492] syz.0.2741: attempt to access beyond end of device [ 1026.288929][T15492] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1026.471895][ T43] tipc: Node number set to 1 [ 1026.586378][T15492] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1026.628826][T15492] syz.0.2741: attempt to access beyond end of device [ 1026.628826][T15492] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1026.642389][T15492] syz.0.2741: attempt to access beyond end of device [ 1026.642389][T15492] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1026.659054][T15507] netlink: 84 bytes leftover after parsing attributes in process `syz.2.2746'. [ 1026.774006][T15492] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1026.785467][T15492] syz.0.2741: attempt to access beyond end of device [ 1026.785467][T15492] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1026.802574][T15492] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1026.843890][T15492] syz.0.2741: attempt to access beyond end of device [ 1026.843890][T15492] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1026.863498][T15492] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 1026.880074][T15511] FAULT_INJECTION: forcing a failure. [ 1026.880074][T15511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1026.900776][T15492] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 1026.913132][T15511] CPU: 0 UID: 0 PID: 15511 Comm: syz.3.2748 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1026.913157][T15511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1026.913168][T15511] Call Trace: [ 1026.913176][T15511] [ 1026.913186][T15511] dump_stack_lvl+0x189/0x250 [ 1026.913214][T15511] ? __pfx____ratelimit+0x10/0x10 [ 1026.913249][T15511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1026.913271][T15511] ? __pfx__printk+0x10/0x10 [ 1026.913303][T15511] should_fail_ex+0x414/0x560 [ 1026.913328][T15511] _copy_to_user+0x31/0xb0 [ 1026.913355][T15511] simple_read_from_buffer+0xe1/0x170 [ 1026.913381][T15511] proc_fail_nth_read+0x1df/0x250 [ 1026.913407][T15511] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1026.913433][T15511] ? rw_verify_area+0x258/0x650 [ 1026.913451][T15511] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1026.913475][T15511] vfs_read+0x1fd/0x980 [ 1026.913501][T15511] ? __pfx___mutex_lock+0x10/0x10 [ 1026.913524][T15511] ? __pfx_vfs_read+0x10/0x10 [ 1026.913544][T15511] ? __fget_files+0x2a/0x420 [ 1026.913568][T15511] ? __fget_files+0x3a0/0x420 [ 1026.913588][T15511] ? __fget_files+0x2a/0x420 [ 1026.913616][T15511] ksys_read+0x145/0x250 [ 1026.913637][T15511] ? __pfx_ksys_read+0x10/0x10 [ 1026.913653][T15511] ? rcu_is_watching+0x15/0xb0 [ 1026.913679][T15511] ? do_syscall_64+0xbe/0x3b0 [ 1026.913706][T15511] do_syscall_64+0xfa/0x3b0 [ 1026.913725][T15511] ? lockdep_hardirqs_on+0x9c/0x150 [ 1026.913750][T15511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.913779][T15511] ? clear_bhb_loop+0x60/0xb0 [ 1026.913800][T15511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.913815][T15511] RIP: 0033:0x7f55ba78d33c [ 1026.913831][T15511] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1026.913846][T15511] RSP: 002b:00007f55bb6dc030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1026.913864][T15511] RAX: ffffffffffffffda RBX: 00007f55ba9b5fa0 RCX: 00007f55ba78d33c [ 1026.913875][T15511] RDX: 000000000000000f RSI: 00007f55bb6dc0a0 RDI: 0000000000000005 [ 1026.913886][T15511] RBP: 00007f55bb6dc090 R08: 0000000000000000 R09: 0000000000000000 [ 1026.913896][T15511] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1026.913907][T15511] R13: 0000000000000000 R14: 00007f55ba9b5fa0 R15: 00007fff17f1ed88 [ 1026.913937][T15511] [ 1027.147005][T15492] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 1027.894682][T15521] lo speed is unknown, defaulting to 1000 [ 1027.902349][T15521] lo speed is unknown, defaulting to 1000 [ 1028.054002][T15528] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20000 [ 1029.766263][T15549] FAULT_INJECTION: forcing a failure. [ 1029.766263][T15549] name failslab, interval 1, probability 0, space 0, times 0 [ 1029.800433][T15549] CPU: 1 UID: 0 PID: 15549 Comm: syz.4.2760 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1029.800460][T15549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1029.800472][T15549] Call Trace: [ 1029.800481][T15549] [ 1029.800490][T15549] dump_stack_lvl+0x189/0x250 [ 1029.800517][T15549] ? __pfx____ratelimit+0x10/0x10 [ 1029.800540][T15549] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1029.800563][T15549] ? __pfx__printk+0x10/0x10 [ 1029.800584][T15549] ? __pfx___might_resched+0x10/0x10 [ 1029.800606][T15549] ? fs_reclaim_acquire+0x7d/0x100 [ 1029.800633][T15549] should_fail_ex+0x414/0x560 [ 1029.800660][T15549] should_failslab+0xa8/0x100 [ 1029.800683][T15549] __kmalloc_noprof+0xcb/0x4f0 [ 1029.800701][T15549] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1029.800722][T15549] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1029.800757][T15549] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1029.800785][T15549] genl_family_rcv_msg_doit+0xb8/0x300 [ 1029.800814][T15549] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1029.800839][T15549] ? rcu_is_watching+0x15/0xb0 [ 1029.800862][T15549] ? cap_capable+0x11f/0x460 [ 1029.800882][T15549] ? safesetid_security_capable+0xa9/0x1a0 [ 1029.800904][T15549] ? bpf_lsm_capable+0x9/0x20 [ 1029.800926][T15549] ? security_capable+0x7e/0x2e0 [ 1029.800954][T15549] genl_rcv_msg+0x60e/0x790 [ 1029.800983][T15549] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1029.801002][T15549] ? ref_tracker_free+0x63a/0x7d0 [ 1029.801019][T15549] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1029.801039][T15549] ? __pfx_nl80211_set_cqm+0x10/0x10 [ 1029.801055][T15549] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1029.801076][T15549] ? __pfx_ref_tracker_free+0x10/0x10 [ 1029.801106][T15549] netlink_rcv_skb+0x205/0x470 [ 1029.801125][T15549] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1029.801149][T15549] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1029.801186][T15549] ? down_read+0x1ad/0x2e0 [ 1029.801206][T15549] genl_rcv+0x28/0x40 [ 1029.801225][T15549] netlink_unicast+0x758/0x8d0 [ 1029.801261][T15549] netlink_sendmsg+0x805/0xb30 [ 1029.801290][T15549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.801318][T15549] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1029.801337][T15549] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1029.801357][T15549] __sock_sendmsg+0x219/0x270 [ 1029.801384][T15549] ____sys_sendmsg+0x505/0x830 [ 1029.801410][T15549] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1029.801440][T15549] ? import_iovec+0x74/0xa0 [ 1029.801468][T15549] ___sys_sendmsg+0x21f/0x2a0 [ 1029.801490][T15549] ? __pfx____sys_sendmsg+0x10/0x10 [ 1029.801548][T15549] ? __fget_files+0x2a/0x420 [ 1029.801569][T15549] ? __fget_files+0x3a0/0x420 [ 1029.801601][T15549] __x64_sys_sendmsg+0x19b/0x260 [ 1029.801623][T15549] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1029.801653][T15549] ? __pfx_ksys_write+0x10/0x10 [ 1029.801670][T15549] ? rcu_is_watching+0x15/0xb0 [ 1029.801698][T15549] ? do_syscall_64+0xbe/0x3b0 [ 1029.801725][T15549] do_syscall_64+0xfa/0x3b0 [ 1029.801755][T15549] ? lockdep_hardirqs_on+0x9c/0x150 [ 1029.801776][T15549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.801794][T15549] ? clear_bhb_loop+0x60/0xb0 [ 1029.801815][T15549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.801832][T15549] RIP: 0033:0x7f8fa378e929 [ 1029.801849][T15549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1029.801865][T15549] RSP: 002b:00007f8fa4534038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1029.801885][T15549] RAX: ffffffffffffffda RBX: 00007f8fa39b5fa0 RCX: 00007f8fa378e929 [ 1029.801898][T15549] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1029.801909][T15549] RBP: 00007f8fa4534090 R08: 0000000000000000 R09: 0000000000000000 [ 1029.801921][T15549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1029.801932][T15549] R13: 0000000000000000 R14: 00007f8fa39b5fa0 R15: 00007ffeec9fe5b8 [ 1029.801963][T15549] [ 1029.850908][T15550] binder: 15545:15550 ioctl c018620c 200000000640 returned -22 [ 1030.456149][T15559] kAFS: unable to lookup cell 'sy[N6/rÆ>ßãmNíÜb’z1' [ 1031.204634][T15561] bio_check_eod: 2 callbacks suppressed [ 1031.204652][T15561] syz.2.2765: attempt to access beyond end of device [ 1031.204652][T15561] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1031.247792][T15561] syz.2.2765: attempt to access beyond end of device [ 1031.247792][T15561] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1031.911973][T15561] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1031.978941][ T43] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1032.186085][ T43] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 1032.428748][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.446626][T15561] syz.2.2765: attempt to access beyond end of device [ 1032.446626][T15561] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1032.459646][ T43] usb 2-1: config 0 has no interface number 0 [ 1032.470669][ T43] usb 2-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 1032.483642][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.507936][T15561] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1032.523400][ T43] usb 2-1: Product: syz [ 1032.560629][T15569] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2765'. [ 1032.734753][ T43] usb 2-1: Manufacturer: syz [ 1032.739449][ T43] usb 2-1: SerialNumber: syz [ 1032.747424][ T43] usb 2-1: config 0 descriptor?? [ 1032.789678][T15561] syz.2.2765: attempt to access beyond end of device [ 1032.789678][T15561] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1033.280132][ T43] usb 2-1: USB disconnect, device number 45 [ 1033.282825][T15561] syz.2.2765: attempt to access beyond end of device [ 1033.282825][T15561] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1033.303104][T15561] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1033.509979][T15561] syz.2.2765: attempt to access beyond end of device [ 1033.509979][T15561] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1033.746134][T15561] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1033.879641][T15561] syz.2.2765: attempt to access beyond end of device [ 1033.879641][T15561] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1033.927490][T15561] syz.2.2765: attempt to access beyond end of device [ 1033.927490][T15561] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1033.948925][T15561] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1033.968920][T15561] syz.2.2765: attempt to access beyond end of device [ 1033.968920][T15561] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1033.995784][T15561] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1034.035327][T15561] syz.2.2765: attempt to access beyond end of device [ 1034.035327][T15561] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1034.058379][T15561] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1034.097206][T15561] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1034.099818][T15588] FAULT_INJECTION: forcing a failure. [ 1034.099818][T15588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1034.110403][T15561] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1034.155500][T15588] CPU: 1 UID: 0 PID: 15588 Comm: syz.4.2772 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1034.155527][T15588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1034.155538][T15588] Call Trace: [ 1034.155545][T15588] [ 1034.155554][T15588] dump_stack_lvl+0x189/0x250 [ 1034.155582][T15588] ? __pfx____ratelimit+0x10/0x10 [ 1034.155604][T15588] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1034.155626][T15588] ? __pfx__printk+0x10/0x10 [ 1034.155656][T15588] should_fail_ex+0x414/0x560 [ 1034.155681][T15588] _copy_to_user+0x31/0xb0 [ 1034.155707][T15588] simple_read_from_buffer+0xe1/0x170 [ 1034.155733][T15588] proc_fail_nth_read+0x1df/0x250 [ 1034.155759][T15588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1034.155783][T15588] ? rw_verify_area+0x258/0x650 [ 1034.155802][T15588] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1034.155824][T15588] vfs_read+0x1fd/0x980 [ 1034.155848][T15588] ? __pfx___mutex_lock+0x10/0x10 [ 1034.155871][T15588] ? __pfx_vfs_read+0x10/0x10 [ 1034.155891][T15588] ? __fget_files+0x2a/0x420 [ 1034.155916][T15588] ? __fget_files+0x3a0/0x420 [ 1034.155934][T15588] ? __fget_files+0x2a/0x420 [ 1034.155963][T15588] ksys_read+0x145/0x250 [ 1034.155984][T15588] ? __pfx_ksys_read+0x10/0x10 [ 1034.156000][T15588] ? rcu_is_watching+0x15/0xb0 [ 1034.156027][T15588] ? do_syscall_64+0xbe/0x3b0 [ 1034.156053][T15588] do_syscall_64+0xfa/0x3b0 [ 1034.156073][T15588] ? lockdep_hardirqs_on+0x9c/0x150 [ 1034.156105][T15588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.156122][T15588] ? clear_bhb_loop+0x60/0xb0 [ 1034.156143][T15588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.156159][T15588] RIP: 0033:0x7f8fa378d33c [ 1034.156176][T15588] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1034.156190][T15588] RSP: 002b:00007f8fa4534030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1034.156209][T15588] RAX: ffffffffffffffda RBX: 00007f8fa39b5fa0 RCX: 00007f8fa378d33c [ 1034.156222][T15588] RDX: 000000000000000f RSI: 00007f8fa45340a0 RDI: 0000000000000006 [ 1034.156233][T15588] RBP: 00007f8fa4534090 R08: 0000000000000000 R09: 0000000000000000 [ 1034.156243][T15588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1034.156253][T15588] R13: 0000000000000000 R14: 00007f8fa39b5fa0 R15: 00007ffeec9fe5b8 [ 1034.156283][T15588] [ 1034.521453][T15594] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2775'. [ 1034.570078][T15596] overlayfs: missing 'lowerdir' [ 1035.580648][T15606] binder: 15605:15606 ioctl c018620c 200000000640 returned -22 [ 1036.084199][ T5837] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1036.379895][T15614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2781'. [ 1037.027635][ T5837] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1037.037929][T15617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2783'. [ 1037.120832][T15620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2783'. [ 1037.168935][ T5837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1037.204806][ T5837] usb 4-1: config 0 has no interface number 0 [ 1037.220336][ T5837] usb 4-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 1037.233058][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.242867][ T5837] usb 4-1: Product: syz [ 1037.247073][ T5837] usb 4-1: Manufacturer: syz [ 1037.255006][ T5837] usb 4-1: SerialNumber: syz [ 1037.262781][ T5837] usb 4-1: config 0 descriptor?? [ 1037.498052][ T5837] usb 4-1: USB disconnect, device number 50 [ 1037.832177][ T5913] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1037.989297][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 1038.058089][ T5913] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1038.448686][ T5913] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1038.455370][ T5913] usb 1-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1038.467066][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.511341][ T5913] usb 1-1: config 0 descriptor?? [ 1038.582213][T15641] bio_check_eod: 2 callbacks suppressed [ 1038.582231][T15641] syz.4.2790: attempt to access beyond end of device [ 1038.582231][T15641] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1038.611705][T15641] syz.4.2790: attempt to access beyond end of device [ 1038.611705][T15641] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1038.631207][T15641] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1038.642841][T15641] syz.4.2790: attempt to access beyond end of device [ 1038.642841][T15641] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1038.663716][T15641] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1038.689635][T15641] syz.4.2790: attempt to access beyond end of device [ 1038.689635][T15641] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1038.707263][T15641] syz.4.2790: attempt to access beyond end of device [ 1038.707263][T15641] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1038.728319][T15641] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1038.760290][T15641] syz.4.2790: attempt to access beyond end of device [ 1038.760290][T15641] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1038.802141][ T5913] logitech 0003:046D:C286.0007: hidraw0: USB HID v0.03 Device [HID 046d:c286] on usb-dummy_hcd.0-1/input0 [ 1038.813610][ T5913] logitech 0003:046D:C286.0007: no inputs found [ 1038.818772][ T43] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 1038.827711][T15641] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1038.850201][T15641] syz.4.2790: attempt to access beyond end of device [ 1038.850201][T15641] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1038.880609][T15641] syz.4.2790: attempt to access beyond end of device [ 1038.880609][T15641] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1038.908779][T15641] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1038.930824][T15641] syz.4.2790: attempt to access beyond end of device [ 1038.930824][T15641] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1038.982350][ T5941] usb 1-1: USB disconnect, device number 38 [ 1038.991332][ T43] usb 2-1: device descriptor read/64, error -71 [ 1039.012855][T15641] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1039.112304][T15641] syz.4.2790: attempt to access beyond end of device [ 1039.112304][T15641] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1039.136987][T15641] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1039.151786][T15641] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1039.216776][T15641] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1039.248950][ T43] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 1039.429603][ T43] usb 2-1: device descriptor read/64, error -71 [ 1039.560842][ T43] usb usb2-port1: attempt power cycle [ 1040.033968][T15662] FAULT_INJECTION: forcing a failure. [ 1040.033968][T15662] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.047139][T15662] CPU: 1 UID: 0 PID: 15662 Comm: syz.2.2796 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1040.047162][T15662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1040.047173][T15662] Call Trace: [ 1040.047181][T15662] [ 1040.047190][T15662] dump_stack_lvl+0x189/0x250 [ 1040.047217][T15662] ? __pfx____ratelimit+0x10/0x10 [ 1040.047240][T15662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1040.047263][T15662] ? __pfx__printk+0x10/0x10 [ 1040.047287][T15662] ? atomic_notifier_call_chain+0x26/0x180 [ 1040.047310][T15662] ? atomic_notifier_call_chain+0x26/0x180 [ 1040.047337][T15662] should_fail_ex+0x414/0x560 [ 1040.047363][T15662] should_failslab+0xa8/0x100 [ 1040.047386][T15662] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1040.047407][T15662] ? __alloc_skb+0x112/0x2d0 [ 1040.047423][T15662] ? rht_lock+0xff/0x220 [ 1040.047448][T15662] __alloc_skb+0x112/0x2d0 [ 1040.047471][T15662] fdb_notify+0xa6/0x160 [ 1040.047496][T15662] fdb_delete+0xec4/0x1160 [ 1040.047523][T15662] ? fdb_delete+0x39a/0x1160 [ 1040.047548][T15662] ? __pfx_fdb_delete+0x10/0x10 [ 1040.047569][T15662] ? netlink_deliver_tap+0x19c/0x1b0 [ 1040.047585][T15662] ? netlink_unicast+0x72f/0x8d0 [ 1040.047611][T15662] ? br_fdb_flush+0x2fe/0x4b0 [ 1040.047635][T15662] br_fdb_flush+0x334/0x4b0 [ 1040.047658][T15662] ? br_fdb_flush+0x2c/0x4b0 [ 1040.047691][T15662] br_fdb_delete_bulk+0x949/0xc90 [ 1040.047719][T15662] ? __pfx_br_fdb_delete_bulk+0x10/0x10 [ 1040.047741][T15662] ? __pfx___nla_validate_parse+0x10/0x10 [ 1040.047788][T15662] ? safesetid_security_capable+0xa9/0x1a0 [ 1040.047815][T15662] ? __nla_parse+0x40/0x60 [ 1040.047840][T15662] rtnl_fdb_del+0x78c/0xa90 [ 1040.047865][T15662] ? __pfx_rtnl_fdb_del+0x10/0x10 [ 1040.047915][T15662] ? __pfx_rtnl_fdb_del+0x10/0x10 [ 1040.047933][T15662] rtnetlink_rcv_msg+0x77c/0xb70 [ 1040.047961][T15662] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1040.047983][T15662] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1040.048005][T15662] ? ref_tracker_free+0x63a/0x7d0 [ 1040.048024][T15662] ? __copy_skb_header+0xa7/0x550 [ 1040.048045][T15662] ? __pfx_ref_tracker_free+0x10/0x10 [ 1040.048065][T15662] ? __skb_clone+0x63/0x7a0 [ 1040.048093][T15662] netlink_rcv_skb+0x205/0x470 [ 1040.048113][T15662] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1040.048138][T15662] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1040.048170][T15662] ? netlink_deliver_tap+0x2e/0x1b0 [ 1040.048188][T15662] ? netlink_deliver_tap+0x2e/0x1b0 [ 1040.048211][T15662] netlink_unicast+0x758/0x8d0 [ 1040.048247][T15662] netlink_sendmsg+0x805/0xb30 [ 1040.048275][T15662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1040.048303][T15662] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1040.048323][T15662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1040.048342][T15662] __sock_sendmsg+0x219/0x270 [ 1040.048369][T15662] ____sys_sendmsg+0x505/0x830 [ 1040.048394][T15662] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1040.048424][T15662] ? import_iovec+0x74/0xa0 [ 1040.048452][T15662] ___sys_sendmsg+0x21f/0x2a0 [ 1040.048474][T15662] ? __pfx____sys_sendmsg+0x10/0x10 [ 1040.048533][T15662] ? __fget_files+0x2a/0x420 [ 1040.048553][T15662] ? __fget_files+0x3a0/0x420 [ 1040.048585][T15662] __x64_sys_sendmsg+0x19b/0x260 [ 1040.048609][T15662] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1040.048635][T15662] ? __pfx_ksys_write+0x10/0x10 [ 1040.048650][T15662] ? rcu_is_watching+0x15/0xb0 [ 1040.048678][T15662] ? do_syscall_64+0xbe/0x3b0 [ 1040.048711][T15662] do_syscall_64+0xfa/0x3b0 [ 1040.048732][T15662] ? lockdep_hardirqs_on+0x9c/0x150 [ 1040.048753][T15662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.048771][T15662] ? clear_bhb_loop+0x60/0xb0 [ 1040.048792][T15662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.048809][T15662] RIP: 0033:0x7ff9d858e929 [ 1040.048827][T15662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1040.048843][T15662] RSP: 002b:00007ff9d948c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1040.048862][T15662] RAX: ffffffffffffffda RBX: 00007ff9d87b5fa0 RCX: 00007ff9d858e929 [ 1040.048875][T15662] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1040.048888][T15662] RBP: 00007ff9d948c090 R08: 0000000000000000 R09: 0000000000000000 [ 1040.048899][T15662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1040.048911][T15662] R13: 0000000000000000 R14: 00007ff9d87b5fa0 R15: 00007ffe39fe4178 [ 1040.048940][T15662] [ 1040.468073][ C1] vkms_vblank_simulate: vblank timer overrun [ 1040.538692][ T43] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 1040.660637][ T43] usb 2-1: device descriptor read/8, error -71 [ 1040.898823][ T43] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 1040.927818][ T43] usb 2-1: device descriptor read/8, error -71 [ 1041.042940][ T43] usb usb2-port1: unable to enumerate USB device [ 1043.361332][T15681] net_ratelimit: 10 callbacks suppressed [ 1043.361347][T15681] netlink: zone id is out of range [ 1043.361422][T15681] netlink: zone id is out of range [ 1043.361427][T15681] netlink: zone id is out of range [ 1043.361440][T15681] netlink: zone id is out of range [ 1043.361445][T15681] netlink: zone id is out of range [ 1043.361451][T15681] netlink: zone id is out of range [ 1043.361455][T15681] netlink: zone id is out of range [ 1043.361460][T15681] netlink: zone id is out of range [ 1043.361465][T15681] netlink: zone id is out of range [ 1043.361470][T15681] netlink: zone id is out of range [ 1043.531112][T15686] 9pnet_fd: Insufficient options for proto=fd [ 1045.323400][T15704] binder: 15701:15704 ioctl c018620c 200000000640 returned -22 [ 1045.354331][T15706] batman_adv: batadv0: Adding interface: dummy0 [ 1045.361073][T15706] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1045.907616][T15706] batman_adv: batadv0: Interface activated: dummy0 [ 1045.938363][T15709] bio_check_eod: 2 callbacks suppressed [ 1045.938380][T15709] syz.3.2811: attempt to access beyond end of device [ 1045.938380][T15709] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1045.987962][T15709] syz.3.2811: attempt to access beyond end of device [ 1045.987962][T15709] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1046.044030][T15709] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1046.083045][T15709] syz.3.2811: attempt to access beyond end of device [ 1046.083045][T15709] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1046.111364][T15715] FAULT_INJECTION: forcing a failure. [ 1046.111364][T15715] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.129151][T15715] CPU: 1 UID: 0 PID: 15715 Comm: syz.0.2813 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1046.129178][T15715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1046.129189][T15715] Call Trace: [ 1046.129197][T15715] [ 1046.129206][T15715] dump_stack_lvl+0x189/0x250 [ 1046.129233][T15715] ? __pfx____ratelimit+0x10/0x10 [ 1046.129256][T15715] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1046.129279][T15715] ? __pfx__printk+0x10/0x10 [ 1046.129300][T15715] ? __pfx___might_resched+0x10/0x10 [ 1046.129322][T15715] ? fs_reclaim_acquire+0x7d/0x100 [ 1046.129350][T15715] should_fail_ex+0x414/0x560 [ 1046.129375][T15715] should_failslab+0xa8/0x100 [ 1046.129398][T15715] __kmalloc_noprof+0xcb/0x4f0 [ 1046.129417][T15715] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1046.129438][T15715] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1046.129465][T15715] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1046.129495][T15715] genl_family_rcv_msg_doit+0xb8/0x300 [ 1046.129523][T15715] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1046.129548][T15715] ? rcu_is_watching+0x15/0xb0 [ 1046.129571][T15715] ? cap_capable+0x11f/0x460 [ 1046.129591][T15715] ? safesetid_security_capable+0xa9/0x1a0 [ 1046.129613][T15715] ? bpf_lsm_capable+0x9/0x20 [ 1046.129634][T15715] ? security_capable+0x7e/0x2e0 [ 1046.129663][T15715] genl_rcv_msg+0x60e/0x790 [ 1046.129692][T15715] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1046.129711][T15715] ? ref_tracker_free+0x63a/0x7d0 [ 1046.129730][T15715] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1046.129750][T15715] ? __pfx_nl80211_set_interface+0x10/0x10 [ 1046.129769][T15715] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1046.129790][T15715] ? __pfx_ref_tracker_free+0x10/0x10 [ 1046.129822][T15715] netlink_rcv_skb+0x205/0x470 [ 1046.129840][T15715] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1046.129863][T15715] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1046.129899][T15715] ? down_read+0x1ad/0x2e0 [ 1046.129919][T15715] genl_rcv+0x28/0x40 [ 1046.129938][T15715] netlink_unicast+0x758/0x8d0 [ 1046.129974][T15715] netlink_sendmsg+0x805/0xb30 [ 1046.130003][T15715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1046.130030][T15715] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1046.130049][T15715] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1046.130074][T15715] __sock_sendmsg+0x219/0x270 [ 1046.130102][T15715] ____sys_sendmsg+0x505/0x830 [ 1046.130128][T15715] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1046.130158][T15715] ? import_iovec+0x74/0xa0 [ 1046.130186][T15715] ___sys_sendmsg+0x21f/0x2a0 [ 1046.130207][T15715] ? __pfx____sys_sendmsg+0x10/0x10 [ 1046.130265][T15715] ? __fget_files+0x2a/0x420 [ 1046.130286][T15715] ? __fget_files+0x3a0/0x420 [ 1046.130317][T15715] __x64_sys_sendmsg+0x19b/0x260 [ 1046.130339][T15715] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1046.130370][T15715] ? __pfx_ksys_write+0x10/0x10 [ 1046.130386][T15715] ? rcu_is_watching+0x15/0xb0 [ 1046.130413][T15715] ? do_syscall_64+0xbe/0x3b0 [ 1046.130441][T15715] do_syscall_64+0xfa/0x3b0 [ 1046.130461][T15715] ? lockdep_hardirqs_on+0x9c/0x150 [ 1046.130482][T15715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.130500][T15715] ? clear_bhb_loop+0x60/0xb0 [ 1046.130521][T15715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.130537][T15715] RIP: 0033:0x7f4acb38e929 [ 1046.130554][T15715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1046.130568][T15715] RSP: 002b:00007f4acc14f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1046.130587][T15715] RAX: ffffffffffffffda RBX: 00007f4acb5b5fa0 RCX: 00007f4acb38e929 [ 1046.130599][T15715] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 1046.130610][T15715] RBP: 00007f4acc14f090 R08: 0000000000000000 R09: 0000000000000000 [ 1046.130621][T15715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1046.130631][T15715] R13: 0000000000000000 R14: 00007f4acb5b5fa0 R15: 00007ffd986bc168 [ 1046.130660][T15715] [ 1046.199205][ T5913] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1046.201069][ C1] vkms_vblank_simulate: vblank timer overrun [ 1046.517910][ C1] vkms_vblank_simulate: vblank timer overrun [ 1046.527963][T15709] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1046.538098][T15709] syz.3.2811: attempt to access beyond end of device [ 1046.538098][T15709] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1046.551092][T15709] syz.3.2811: attempt to access beyond end of device [ 1046.551092][T15709] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1046.564009][T15709] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1046.573815][T15709] syz.3.2811: attempt to access beyond end of device [ 1046.573815][T15709] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1046.586855][T15709] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1046.596734][T15709] syz.3.2811: attempt to access beyond end of device [ 1046.596734][T15709] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1046.609727][T15709] syz.3.2811: attempt to access beyond end of device [ 1046.609727][T15709] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1046.622861][T15709] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1046.632513][T15709] syz.3.2811: attempt to access beyond end of device [ 1046.632513][T15709] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1046.645528][T15709] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1046.655352][T15709] syz.3.2811: attempt to access beyond end of device [ 1046.655352][T15709] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1046.668318][T15709] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1046.677936][T15709] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1046.687439][T15709] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1046.870532][ T5913] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 1046.886701][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1046.908770][ T5913] usb 3-1: config 0 has no interface number 0 [ 1046.917255][ T5913] usb 3-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 1046.927213][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.935556][ T5913] usb 3-1: Product: syz [ 1046.956698][ T5913] usb 3-1: Manufacturer: syz [ 1046.976814][ T5913] usb 3-1: SerialNumber: syz [ 1047.033413][T15718] overlayfs: failed to resolve './file0': -2 [ 1047.119813][ T5913] usb 3-1: config 0 descriptor?? [ 1047.165670][ T30] audit: type=1326 audit(1751292241.022:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15710 comm="syz.1.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d25f2ab19 code=0x7ffc0000 [ 1047.217331][ T30] audit: type=1326 audit(1751292241.022:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15710 comm="syz.1.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d25f8e929 code=0x7ffc0000 [ 1047.282196][ T30] audit: type=1326 audit(1751292241.022:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15710 comm="syz.1.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d25f8e929 code=0x7ffc0000 [ 1048.091042][ T30] audit: type=1326 audit(1751292241.022:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15710 comm="syz.1.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d25f2ab19 code=0x7ffc0000 [ 1048.113019][ T30] audit: type=1326 audit(1751292241.022:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15710 comm="syz.1.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d25f8e929 code=0x7ffc0000 [ 1048.135060][ T30] audit: type=1326 audit(1751292241.022:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15710 comm="syz.1.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d25f2ab19 code=0x7ffc0000 [ 1048.197302][ T30] audit: type=1326 audit(1751292241.022:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15710 comm="syz.1.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d25f2ab19 code=0x7ffc0000 [ 1048.218814][ C1] vkms_vblank_simulate: vblank timer overrun [ 1048.268814][ T30] audit: type=1326 audit(1751292241.022:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15710 comm="syz.1.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d25f2ab19 code=0x7ffc0000 [ 1048.282889][ T5913] usb 3-1: USB disconnect, device number 46 [ 1048.368762][ T30] audit: type=1326 audit(1751292241.022:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15710 comm="syz.1.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d25f8e929 code=0x7ffc0000 [ 1048.838016][ T30] audit: type=1326 audit(1751292241.022:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15710 comm="syz.1.2812" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7d25f2ab19 code=0x7ffc0000 [ 1049.336877][T15737] FAULT_INJECTION: forcing a failure. [ 1049.336877][T15737] name failslab, interval 1, probability 0, space 0, times 0 [ 1049.345982][T15466] Bluetooth: hci4: unexpected event for opcode 0x0c23 [ 1049.378838][T15737] CPU: 1 UID: 0 PID: 15737 Comm: syz.1.2821 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1049.378866][T15737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1049.378877][T15737] Call Trace: [ 1049.378885][T15737] [ 1049.378894][T15737] dump_stack_lvl+0x189/0x250 [ 1049.378923][T15737] ? __pfx____ratelimit+0x10/0x10 [ 1049.378946][T15737] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1049.378969][T15737] ? __pfx__printk+0x10/0x10 [ 1049.378990][T15737] ? __pfx___might_resched+0x10/0x10 [ 1049.379012][T15737] ? fs_reclaim_acquire+0x7d/0x100 [ 1049.379039][T15737] should_fail_ex+0x414/0x560 [ 1049.379064][T15737] should_failslab+0xa8/0x100 [ 1049.379088][T15737] __kmalloc_noprof+0xcb/0x4f0 [ 1049.379107][T15737] ? tomoyo_encode+0x28b/0x550 [ 1049.379135][T15737] tomoyo_encode+0x28b/0x550 [ 1049.379163][T15737] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1049.379188][T15737] ? tomoyo_domain+0xda/0x130 [ 1049.379217][T15737] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1049.379237][T15737] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1049.379260][T15737] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1049.379297][T15737] ? __lock_acquire+0xab9/0xd20 [ 1049.379339][T15737] ? __fget_files+0x2a/0x420 [ 1049.379361][T15737] ? __fget_files+0x2a/0x420 [ 1049.379381][T15737] ? __fget_files+0x3a0/0x420 [ 1049.379399][T15737] ? __fget_files+0x2a/0x420 [ 1049.379424][T15737] security_file_ioctl+0xcb/0x2d0 [ 1049.379448][T15737] __se_sys_ioctl+0x47/0x170 [ 1049.379470][T15737] do_syscall_64+0xfa/0x3b0 [ 1049.379492][T15737] ? lockdep_hardirqs_on+0x9c/0x150 [ 1049.379513][T15737] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.379531][T15737] ? clear_bhb_loop+0x60/0xb0 [ 1049.379552][T15737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.379569][T15737] RIP: 0033:0x7f7d25f8e929 [ 1049.379585][T15737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1049.379599][T15737] RSP: 002b:00007f7d26d83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1049.379618][T15737] RAX: ffffffffffffffda RBX: 00007f7d261b5fa0 RCX: 00007f7d25f8e929 [ 1049.379631][T15737] RDX: 0000200000000680 RSI: 00000000400442c9 RDI: 0000000000000004 [ 1049.379643][T15737] RBP: 00007f7d26d83090 R08: 0000000000000000 R09: 0000000000000000 [ 1049.379654][T15737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1049.379664][T15737] R13: 0000000000000000 R14: 00007f7d261b5fa0 R15: 00007ffcd73c5d08 [ 1049.379694][T15737] [ 1049.379771][T15737] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1049.948274][T15739] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2817'. [ 1050.187766][T15745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2822'. [ 1050.218848][T15745] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2822'. [ 1050.228036][T15745] validate_nla: 42 callbacks suppressed [ 1050.228052][T15745] netlink: 'syz.2.2822': attribute type 3 has an invalid length. [ 1050.248858][T15745] netlink: 'syz.2.2822': attribute type 2 has an invalid length. [ 1050.257143][T15745] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2822'. [ 1050.528630][ T5913] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1050.748679][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 1050.948625][ T5913] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 1051.019270][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.220101][ T5913] usb 4-1: Product: syz [ 1051.276080][ T5913] usb 4-1: Manufacturer: syz [ 1051.331884][ T5913] usb 4-1: SerialNumber: syz [ 1051.366711][ T5913] usb 4-1: config 0 descriptor?? [ 1051.460250][ T5913] usb 4-1: selecting invalid altsetting 3 [ 1051.466450][ T5913] comedi comedi0: could not set alternate setting 3 in high speed [ 1051.486048][ T5913] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1051.527844][ T5913] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 1051.620804][ T43] usb 4-1: USB disconnect, device number 51 [ 1051.882481][T15762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2829'. [ 1052.729196][T15779] FAULT_INJECTION: forcing a failure. [ 1052.729196][T15779] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.882877][T15779] CPU: 0 UID: 0 PID: 15779 Comm: syz.4.2833 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1052.882904][T15779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1052.882915][T15779] Call Trace: [ 1052.882923][T15779] [ 1052.882932][T15779] dump_stack_lvl+0x189/0x250 [ 1052.882961][T15779] ? __pfx____ratelimit+0x10/0x10 [ 1052.882984][T15779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1052.883007][T15779] ? __pfx__printk+0x10/0x10 [ 1052.883027][T15779] ? __pfx___might_resched+0x10/0x10 [ 1052.883050][T15779] ? fs_reclaim_acquire+0x7d/0x100 [ 1052.883078][T15779] should_fail_ex+0x414/0x560 [ 1052.883104][T15779] should_failslab+0xa8/0x100 [ 1052.883126][T15779] __kmalloc_noprof+0xcb/0x4f0 [ 1052.883146][T15779] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1052.883175][T15779] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 1052.883206][T15779] genl_family_rcv_msg_doit+0xb8/0x300 [ 1052.883235][T15779] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1052.883260][T15779] ? rcu_is_watching+0x15/0xb0 [ 1052.883285][T15779] ? cap_capable+0x11f/0x460 [ 1052.883304][T15779] ? safesetid_security_capable+0xa9/0x1a0 [ 1052.883327][T15779] ? bpf_lsm_capable+0x9/0x20 [ 1052.883349][T15779] ? security_capable+0x7e/0x2e0 [ 1052.883378][T15779] genl_rcv_msg+0x60e/0x790 [ 1052.883408][T15779] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1052.883428][T15779] ? __pfx_batadv_pre_doit+0x10/0x10 [ 1052.883445][T15779] ? __pfx_batadv_netlink_set_mesh+0x10/0x10 [ 1052.883463][T15779] ? __pfx_batadv_post_doit+0x10/0x10 [ 1052.883505][T15779] netlink_rcv_skb+0x205/0x470 [ 1052.883529][T15779] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1052.883552][T15779] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1052.883589][T15779] ? down_read+0x1ad/0x2e0 [ 1052.883609][T15779] genl_rcv+0x28/0x40 [ 1052.883628][T15779] netlink_unicast+0x758/0x8d0 [ 1052.883666][T15779] netlink_sendmsg+0x805/0xb30 [ 1052.883695][T15779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1052.883722][T15779] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1052.883742][T15779] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1052.883761][T15779] __sock_sendmsg+0x219/0x270 [ 1052.883788][T15779] ____sys_sendmsg+0x505/0x830 [ 1052.883814][T15779] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1052.883843][T15779] ? import_iovec+0x74/0xa0 [ 1052.883871][T15779] ___sys_sendmsg+0x21f/0x2a0 [ 1052.883893][T15779] ? __pfx____sys_sendmsg+0x10/0x10 [ 1052.883920][T15779] ? rcu_read_unlock_special+0x3fe/0x4c0 [ 1052.883969][T15779] ? __fget_files+0x2a/0x420 [ 1052.883989][T15779] ? __fget_files+0x3a0/0x420 [ 1052.884021][T15779] __x64_sys_sendmsg+0x19b/0x260 [ 1052.884043][T15779] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1052.884074][T15779] ? rcu_is_watching+0x15/0xb0 [ 1052.884102][T15779] ? do_syscall_64+0xbe/0x3b0 [ 1052.884128][T15779] do_syscall_64+0xfa/0x3b0 [ 1052.884151][T15779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.884168][T15779] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1052.884184][T15779] ? clear_bhb_loop+0x60/0xb0 [ 1052.884205][T15779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.884221][T15779] RIP: 0033:0x7f8fa378e929 [ 1052.884238][T15779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1052.884253][T15779] RSP: 002b:00007f8fa4534038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1052.884272][T15779] RAX: ffffffffffffffda RBX: 00007f8fa39b5fa0 RCX: 00007f8fa378e929 [ 1052.884285][T15779] RDX: 000000004004a040 RSI: 0000200000000680 RDI: 0000000000000003 [ 1052.884297][T15779] RBP: 00007f8fa4534090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.884308][T15779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.884319][T15779] R13: 0000000000000000 R14: 00007f8fa39b5fa0 R15: 00007ffeec9fe5b8 [ 1052.884349][T15779] [ 1054.726043][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.279518][T15796] FAULT_INJECTION: forcing a failure. [ 1056.279518][T15796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1056.306033][T15796] CPU: 1 UID: 0 PID: 15796 Comm: syz.4.2838 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1056.306059][T15796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1056.306070][T15796] Call Trace: [ 1056.306078][T15796] [ 1056.306086][T15796] dump_stack_lvl+0x189/0x250 [ 1056.306114][T15796] ? __pfx____ratelimit+0x10/0x10 [ 1056.306136][T15796] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1056.306157][T15796] ? __pfx__printk+0x10/0x10 [ 1056.306174][T15796] ? __might_fault+0xb0/0x130 [ 1056.306204][T15796] should_fail_ex+0x414/0x560 [ 1056.306229][T15796] _copy_from_user+0x2d/0xb0 [ 1056.306251][T15796] __se_sys_mount+0x18a/0x410 [ 1056.306287][T15796] ? __pfx___se_sys_mount+0x10/0x10 [ 1056.306304][T15796] ? rcu_is_watching+0x15/0xb0 [ 1056.306331][T15796] ? do_syscall_64+0xbe/0x3b0 [ 1056.306351][T15796] ? __x64_sys_mount+0x20/0xc0 [ 1056.306374][T15796] do_syscall_64+0xfa/0x3b0 [ 1056.306394][T15796] ? lockdep_hardirqs_on+0x9c/0x150 [ 1056.306416][T15796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.306431][T15796] ? clear_bhb_loop+0x60/0xb0 [ 1056.306451][T15796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.306467][T15796] RIP: 0033:0x7f8fa378e929 [ 1056.306482][T15796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1056.306495][T15796] RSP: 002b:00007f8fa4513038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1056.306514][T15796] RAX: ffffffffffffffda RBX: 00007f8fa39b6080 RCX: 00007f8fa378e929 [ 1056.306526][T15796] RDX: 0000200000000040 RSI: 0000200000000340 RDI: 0000000000000000 [ 1056.306537][T15796] RBP: 00007f8fa4513090 R08: 0000200000000140 R09: 0000000000000000 [ 1056.306549][T15796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1056.306559][T15796] R13: 0000000000000000 R14: 00007f8fa39b6080 R15: 00007ffeec9fe5b8 [ 1056.306587][T15796] [ 1056.306964][T15797] FAULT_INJECTION: forcing a failure. [ 1056.306964][T15797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1056.509217][T15797] CPU: 1 UID: 0 PID: 15797 Comm: syz.2.2837 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1056.509247][T15797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1056.509257][T15797] Call Trace: [ 1056.509265][T15797] [ 1056.509273][T15797] dump_stack_lvl+0x189/0x250 [ 1056.509300][T15797] ? __pfx____ratelimit+0x10/0x10 [ 1056.509322][T15797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1056.509343][T15797] ? __pfx__printk+0x10/0x10 [ 1056.509369][T15797] should_fail_ex+0x414/0x560 [ 1056.509393][T15797] _copy_to_user+0x31/0xb0 [ 1056.509418][T15797] simple_read_from_buffer+0xe1/0x170 [ 1056.509444][T15797] proc_fail_nth_read+0x1df/0x250 [ 1056.509470][T15797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1056.509494][T15797] ? rw_verify_area+0x258/0x650 [ 1056.509513][T15797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1056.509535][T15797] vfs_read+0x1fd/0x980 [ 1056.509559][T15797] ? __pfx___mutex_lock+0x10/0x10 [ 1056.509582][T15797] ? __pfx_vfs_read+0x10/0x10 [ 1056.509599][T15797] ? __fget_files+0x2a/0x420 [ 1056.509620][T15797] ? __fget_files+0x3a0/0x420 [ 1056.509635][T15797] ? __fget_files+0x2a/0x420 [ 1056.509661][T15797] ksys_read+0x145/0x250 [ 1056.509682][T15797] ? __pfx_ksys_read+0x10/0x10 [ 1056.509698][T15797] ? fput+0xa0/0xd0 [ 1056.509724][T15797] ? do_syscall_64+0xbe/0x3b0 [ 1056.509751][T15797] do_syscall_64+0xfa/0x3b0 [ 1056.509772][T15797] ? lockdep_hardirqs_on+0x9c/0x150 [ 1056.509793][T15797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.509811][T15797] ? clear_bhb_loop+0x60/0xb0 [ 1056.509831][T15797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.509845][T15797] RIP: 0033:0x7ff9d858d33c [ 1056.509860][T15797] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1056.509873][T15797] RSP: 002b:00007ff9d944a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1056.509889][T15797] RAX: ffffffffffffffda RBX: 00007ff9d87b6160 RCX: 00007ff9d858d33c [ 1056.509901][T15797] RDX: 000000000000000f RSI: 00007ff9d944a0a0 RDI: 0000000000000009 [ 1056.509912][T15797] RBP: 00007ff9d944a090 R08: 0000000000000000 R09: 0000000000000000 [ 1056.509923][T15797] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1056.509934][T15797] R13: 0000000000000000 R14: 00007ff9d87b6160 R15: 00007ffe39fe4178 [ 1056.509962][T15797] [ 1057.663146][T15814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2843'. [ 1057.756509][ T5913] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1058.075925][ T5913] usb 3-1: Using ep0 maxpacket: 16 [ 1058.098329][ T5913] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1058.116771][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=222 [ 1058.127085][ T5913] usb 3-1: SerialNumber: syz [ 1058.149192][ T5913] usb 3-1: config 0 descriptor?? [ 1058.181313][ T5913] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1058.226249][T15810] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2843'. [ 1058.256430][ T5913] usb 3-1: Detected FT232A [ 1058.266946][ T5913] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1058.372214][T15803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.381504][T15804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.392962][T15804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.401528][T15803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1060.696360][ T5913] usb 3-1: USB disconnect, device number 47 [ 1060.704597][ T5913] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1060.737171][ T5913] ftdi_sio 3-1:0.0: device disconnected [ 1062.578773][ T5913] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1062.749601][ T5913] usb 3-1: Using ep0 maxpacket: 8 [ 1062.771566][ T5913] usb 3-1: config index 0 descriptor too short (expected 16411, got 27) [ 1062.787794][ T5913] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1062.809877][ T5913] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1062.819282][ T5913] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.827371][ T5913] usb 3-1: Product: syz [ 1062.831731][ T5913] usb 3-1: Manufacturer: syz [ 1062.836339][ T5913] usb 3-1: SerialNumber: syz [ 1062.872209][ T5913] usb 3-1: config 0 descriptor?? [ 1062.881453][ T5913] streamzap 3-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 1063.089391][ T43] usb 3-1: USB disconnect, device number 48 [ 1063.537997][T15851] binder: 15850:15851 ioctl c018620c 200000000640 returned -22 [ 1064.054227][T15856] overlayfs: missing 'workdir' [ 1064.304360][ T43] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1064.744618][T15865] bridge0: port 3(netdevsim0) entered blocking state [ 1064.751455][T15865] bridge0: port 3(netdevsim0) entered disabled state [ 1064.758835][T15865] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1064.768466][T15865] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1064.776381][T15865] bridge0: port 3(netdevsim0) entered blocking state [ 1064.783431][T15865] bridge0: port 3(netdevsim0) entered forwarding state [ 1064.820427][ T43] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1064.842903][ T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.917871][ T43] usb 5-1: config 0 has no interface number 0 [ 1065.357185][ T43] usb 5-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 1065.405643][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1065.434727][ T43] usb 5-1: Product: syz [ 1065.460800][ T43] usb 5-1: Manufacturer: syz [ 1065.475645][ T43] usb 5-1: SerialNumber: syz [ 1065.501980][ T43] usb 5-1: config 0 descriptor?? [ 1065.613682][T15878] netlink: 'syz.0.2861': attribute type 9 has an invalid length. [ 1065.632699][T15878] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1065.794753][T15875] tipc: Started in network mode [ 1065.846324][T15875] tipc: Node identity d69836fd29a5, cluster identity 4711 [ 1066.386464][T15875] tipc: Enabled bearer , priority 0 [ 1066.466753][T15882] syzkaller0: entered promiscuous mode [ 1066.477673][T15872] could not allocate digest TFM handle cbcmac(aes) [ 1066.496752][ T43] usb 5-1: USB disconnect, device number 38 [ 1066.522989][T15882] syzkaller0: entered allmulticast mode [ 1066.547067][T15882] tipc: Resetting bearer [ 1066.595420][T15875] tipc: Resetting bearer [ 1066.867791][T15890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2865'. [ 1067.109170][ T43] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1067.478909][ T5913] tipc: Node number set to 4282201853 [ 1067.656842][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 1067.860596][ T43] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1067.872546][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1067.883827][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1067.916754][ T43] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1067.926559][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.934735][ T43] usb 1-1: Product: syz [ 1067.939211][ T43] usb 1-1: Manufacturer: syz [ 1067.943897][ T43] usb 1-1: SerialNumber: syz [ 1067.962078][ T43] usb 1-1: config 0 descriptor?? [ 1067.969135][T15887] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1068.168759][ T43] rc_core: IR keymap rc-streamzap not found [ 1068.207352][T15889] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2865'. [ 1068.234067][T15898] syzkaller1: entered promiscuous mode [ 1068.239647][T15898] syzkaller1: entered allmulticast mode [ 1068.853200][ T43] Registered IR keymap rc-empty [ 1070.726415][T15914] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1071.118348][T15920] net_ratelimit: 376 callbacks suppressed [ 1071.118386][T15920] openvswitch: netlink: Message has 16 unknown bytes. [ 1071.492912][ T43] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1071.531103][ T43] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input27 [ 1071.627704][ T43] usb 1-1: USB disconnect, device number 39 [ 1072.230335][ T43] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1072.262727][T15940] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1072.388871][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 1072.420342][ T43] usb 1-1: too many configurations: 40, using maximum allowed: 8 [ 1072.617462][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1072.701491][ T43] usb 1-1: can't read configurations, error -61 [ 1072.848944][ T43] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1073.038791][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 1073.061348][ T43] usb 1-1: too many configurations: 40, using maximum allowed: 8 [ 1073.109536][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1073.138098][ T43] usb 1-1: can't read configurations, error -61 [ 1073.482874][ T43] usb usb1-port1: attempt power cycle [ 1073.768795][T15466] Bluetooth: hci1: command 0x0406 tx timeout [ 1073.901854][ T43] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1073.989504][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 1073.989795][T15956] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2883'. [ 1074.009347][ T43] usb 1-1: too many configurations: 40, using maximum allowed: 8 [ 1074.076009][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1074.094277][ T43] usb 1-1: can't read configurations, error -61 [ 1074.122577][T15956] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2883'. [ 1074.151876][T15959] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2883'. [ 1074.179308][T15956] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2883'. [ 1074.258760][ T43] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1074.327404][ T43] usb 1-1: Using ep0 maxpacket: 16 [ 1074.333814][ T43] usb 1-1: too many configurations: 40, using maximum allowed: 8 [ 1074.358140][ T43] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1074.378304][ T43] usb 1-1: can't read configurations, error -61 [ 1074.392214][ T43] usb usb1-port1: unable to enumerate USB device [ 1074.616416][T15967] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2887'. [ 1075.326163][T15969] netlink: 'syz.1.2888': attribute type 1 has an invalid length. [ 1075.518694][T15969] netlink: 'syz.1.2888': attribute type 2 has an invalid length. [ 1075.808788][T15969] netlink: 'syz.1.2888': attribute type 1 has an invalid length. [ 1075.816646][T15969] netlink: 'syz.1.2888': attribute type 2 has an invalid length. [ 1076.040167][T15980] binder: 15976:15980 ioctl c018620c 200000000640 returned -22 [ 1076.850498][T15988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2892'. [ 1076.961988][T15990] netlink: 17 bytes leftover after parsing attributes in process `syz.1.2893'. [ 1076.996540][T15990] netlink: zone id is out of range [ 1077.018689][ T5913] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1077.026868][T15990] netlink: zone id is out of range [ 1077.061328][T15990] netlink: zone id is out of range [ 1077.066512][T15990] netlink: zone id is out of range [ 1077.106703][T15990] netlink: zone id is out of range [ 1077.147519][T15990] netlink: zone id is out of range [ 1077.158629][T15990] netlink: zone id is out of range [ 1077.163816][T15990] netlink: zone id is out of range [ 1077.171962][T15990] netlink: zone id is out of range [ 1077.177142][T15990] netlink: zone id is out of range [ 1077.205141][ T5913] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1077.213947][ T5913] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.250601][ T5913] usb 5-1: config 0 has no interface number 0 [ 1077.280297][ T5913] usb 5-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 1077.298637][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.316965][ T5913] usb 5-1: Product: syz [ 1077.337222][ T5913] usb 5-1: Manufacturer: syz [ 1077.351147][ T5913] usb 5-1: SerialNumber: syz [ 1077.358565][ T5913] usb 5-1: config 0 descriptor?? [ 1077.597789][ T5913] usb 5-1: USB disconnect, device number 39 [ 1078.374931][T16012] ubi: mtd0 is already attached to ubi31 [ 1078.638197][T16020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2900'. [ 1079.895140][T16034] hfsplus: unable to find HFS+ superblock [ 1082.747566][T16054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2909'. [ 1082.767163][T16054] netlink: 'syz.1.2909': attribute type 2 has an invalid length. [ 1082.837863][T16063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2913'. [ 1082.999736][T16066] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1084.623609][T16080] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1084.775216][T16088] xt_cluster: node mask cannot exceed total number of nodes [ 1084.798951][T10111] Bluetooth: hci4: command 0x0406 tx timeout [ 1086.005607][T16102] lo speed is unknown, defaulting to 1000 [ 1086.013239][T16102] lo speed is unknown, defaulting to 1000 [ 1086.490347][T16116] binder: 16115:16116 ioctl c018620c 200000000640 returned -22 [ 1087.159086][ T5913] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1087.179031][T16123] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1087.363195][T10111] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1087.376886][T10111] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1087.385996][T10111] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1087.402317][T10111] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1087.411582][T10111] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1087.422427][ T5913] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 1087.440645][ T5913] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.476442][ T5913] usb 4-1: config 0 has no interface number 0 [ 1087.518334][T16127] random: crng reseeded on system resumption [ 1087.530906][ T5913] usb 4-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 1087.541878][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1087.551106][ T5913] usb 4-1: Product: syz [ 1087.555348][ T5913] usb 4-1: Manufacturer: syz [ 1087.560539][ T5913] usb 4-1: SerialNumber: syz [ 1087.568193][ T5913] usb 4-1: config 0 descriptor?? [ 1087.588540][ T1344] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.624025][T16124] lo speed is unknown, defaulting to 1000 [ 1087.631791][T16124] lo speed is unknown, defaulting to 1000 [ 1087.744088][ T1344] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1087.957741][ T5913] usb 4-1: USB disconnect, device number 52 [ 1088.709645][ T1344] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.781195][T16124] chnl_net:caif_netlink_parms(): no params data found [ 1088.828378][ T1344] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1088.979994][T16124] bridge0: port 1(bridge_slave_0) entered blocking state [ 1088.987289][T16124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1088.995145][T16124] bridge_slave_0: entered allmulticast mode [ 1089.003649][T16124] bridge_slave_0: entered promiscuous mode [ 1089.038365][T16124] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.053843][T16124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.063334][T16124] bridge_slave_1: entered allmulticast mode [ 1089.063556][T16150] netlink: 'syz.1.2939': attribute type 4 has an invalid length. [ 1089.071299][T16124] bridge_slave_1: entered promiscuous mode [ 1089.082050][T16150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2939'. [ 1089.165385][T16124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.205578][T16124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1089.291354][T16124] team0: Port device team_slave_0 added [ 1089.302197][T16124] team0: Port device team_slave_1 added [ 1089.376261][T16124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.387837][T16124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1089.418694][T16124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.519999][T15466] Bluetooth: hci2: command tx timeout [ 1090.604203][ T1344] bond1 (unregistering): (slave veth3): Releasing active interface [ 1090.614182][ T1344] bond1 (unregistering): Released all slaves [ 1090.626814][T16124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1090.636470][T16124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1090.665410][T16124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.808853][ T1344] tipc: Disabling bearer [ 1090.844728][ T1344] tipc: Left network mode [ 1090.862499][T16174] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1090.925236][T16124] hsr_slave_0: entered promiscuous mode [ 1090.934864][T16124] hsr_slave_1: entered promiscuous mode [ 1090.941421][T16124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1090.949907][T16124] Cannot create hsr debugfs directory [ 1090.956479][T16177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1091.514791][T16193] bio_check_eod: 2 callbacks suppressed [ 1091.514805][T16193] syz.3.2949: attempt to access beyond end of device [ 1091.514805][T16193] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1091.533136][T16193] vxfs: unable to read disk superblock at 1 [ 1091.539196][T16193] syz.3.2949: attempt to access beyond end of device [ 1091.539196][T16193] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1091.552091][T16193] vxfs: unable to read disk superblock at 8 [ 1091.557996][T16193] vxfs: can't find superblock. [ 1091.603423][T15466] Bluetooth: hci2: command tx timeout [ 1091.694479][T16177] syz_tun: entered allmulticast mode [ 1091.755229][T16190] lo speed is unknown, defaulting to 1000 [ 1091.762410][T16190] lo speed is unknown, defaulting to 1000 [ 1091.853167][T16176] syz_tun: left allmulticast mode [ 1092.258045][ T1344] batman_adv: batadv0: Interface deactivated: dummy0 [ 1092.272971][ T1344] batman_adv: batadv0: Removing interface: dummy0 [ 1092.306541][ T1344] veth1_macvtap: left promiscuous mode [ 1092.325504][ T1344] veth0_macvtap: left promiscuous mode [ 1092.332052][ T1344] veth1_vlan: left promiscuous mode [ 1092.337643][ T1344] veth0_vlan: left promiscuous mode [ 1093.777986][T15466] Bluetooth: hci2: command tx timeout [ 1095.122986][T16225] binder: 16223:16225 ioctl c00c620f 0 returned -14 [ 1095.175012][T16232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2958'. [ 1095.682808][ T1344] IPVS: stop unused estimator thread 0... [ 1095.861863][T10111] Bluetooth: hci2: command tx timeout [ 1096.340901][T16245] bridge0: port 4(team0) entered blocking state [ 1096.347265][T16245] bridge0: port 4(team0) entered disabled state [ 1096.354097][T16245] team0: entered allmulticast mode [ 1096.359325][T16245] team_slave_0: entered allmulticast mode [ 1096.365047][T16245] team_slave_1: entered allmulticast mode [ 1096.372082][T16245] team0: entered promiscuous mode [ 1096.377107][T16245] team_slave_0: entered promiscuous mode [ 1096.383075][T16245] team_slave_1: entered promiscuous mode [ 1096.389224][T16245] bridge0: port 4(team0) entered blocking state [ 1096.395510][T16245] bridge0: port 4(team0) entered forwarding state [ 1096.566762][T16124] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1096.664275][T16124] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1096.905508][T16124] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1096.930326][T16255] syz.1.2962: attempt to access beyond end of device [ 1096.930326][T16255] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1096.945299][T16255] vxfs: unable to read disk superblock at 1 [ 1096.953583][T16255] syz.1.2962: attempt to access beyond end of device [ 1096.953583][T16255] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1096.966536][T16255] vxfs: unable to read disk superblock at 8 [ 1096.972521][T16255] vxfs: can't find superblock. [ 1097.215547][T16124] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1097.376753][T16260] binder: 16259:16260 ioctl c018620c 200000000640 returned -22 [ 1097.918744][T10111] Bluetooth: hci2: command 0x0405 tx timeout [ 1098.162627][T16124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1098.208738][ T9606] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1098.246434][T16124] 8021q: adding VLAN 0 to HW filter on device team0 [ 1098.267477][T15466] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1098.279760][T15466] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1098.288645][T15466] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1098.301127][T15466] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1098.331678][T15466] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1098.367100][ T3002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.374322][ T3002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1098.410037][ T1344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.417275][ T1344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1098.446552][ T9606] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1098.460973][ T9606] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1098.490982][ T9606] usb 1-1: config 0 has no interface number 0 [ 1098.525056][ T9606] usb 1-1: New USB device found, idVendor=056d, idProduct=0000, bcdDevice=39.00 [ 1098.540970][ T9606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.571659][ T9606] usb 1-1: Product: syz [ 1098.581370][ T9606] usb 1-1: Manufacturer: syz [ 1098.589300][ T9606] usb 1-1: SerialNumber: syz [ 1098.597064][ T9606] usb 1-1: config 0 descriptor?? [ 1098.634434][ T3002] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.726244][T16275] lo speed is unknown, defaulting to 1000 [ 1098.797486][ T3002] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.825963][T16275] lo speed is unknown, defaulting to 1000 [ 1098.857962][ T9606] usb 1-1: USB disconnect, device number 44 [ 1098.954533][ T3002] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.144996][ T3002] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.399962][T15466] Bluetooth: hci5: command tx timeout [ 1101.004499][T16275] chnl_net:caif_netlink_parms(): no params data found [ 1101.155437][ T3002] bridge_slave_1: left allmulticast mode [ 1101.176530][T16314] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2971'. [ 1101.185693][ T3002] bridge_slave_1: left promiscuous mode [ 1101.196619][ T3002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.227775][ T3002] bridge_slave_0: left allmulticast mode [ 1101.238283][ T3002] bridge_slave_0: left promiscuous mode [ 1102.502474][T15466] Bluetooth: hci5: command tx timeout [ 1102.597929][ T3002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.315279][T16124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1103.352919][T16325] syz.3.2974: attempt to access beyond end of device [ 1103.352919][T16325] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1103.367667][T16325] vxfs: unable to read disk superblock at 1 [ 1103.373899][T16325] syz.3.2974: attempt to access beyond end of device [ 1103.373899][T16325] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1103.386952][T16325] vxfs: unable to read disk superblock at 8 [ 1103.392956][T16325] vxfs: can't find superblock. [ 1103.554574][T16275] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.564080][T16275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1103.573954][T16275] bridge_slave_0: entered allmulticast mode [ 1103.591429][T16275] bridge_slave_0: entered promiscuous mode [ 1103.607252][T16275] bridge0: port 2(bridge_slave_1) entered blocking state [ 1103.616302][T16275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1103.629272][T16275] bridge_slave_1: entered allmulticast mode [ 1103.640031][T16275] bridge_slave_1: entered promiscuous mode [ 1104.268086][T16275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.336952][T16275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.566227][T10111] Bluetooth: hci5: command tx timeout [ 1104.642023][ T3002] hsr_slave_0: left promiscuous mode [ 1104.659200][ T3002] hsr_slave_1: left promiscuous mode [ 1104.677872][ T3002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1104.695330][ T3002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.721284][ T3002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1104.738870][ T3002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.794663][ T3002] veth1_macvtap: left promiscuous mode [ 1104.818717][ T3002] veth0_macvtap: left promiscuous mode [ 1104.824520][ T3002] veth1_vlan: left promiscuous mode [ 1104.838694][ T3002] veth0_vlan: left promiscuous mode [ 1105.507141][ T3002] team0 (unregistering): Port device team_slave_1 removed [ 1105.557216][ T3002] team0 (unregistering): Port device team_slave_0 removed [ 1106.055265][T16275] team0: Port device team_slave_0 added [ 1106.062734][T16350] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2979'. [ 1106.089882][T16352] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 1106.097511][ T980] lo speed is unknown, defaulting to 1000 [ 1106.103930][ T980] infiniband syz0: ib_query_port failed (-19) [ 1106.122209][T16275] team0: Port device team_slave_1 added [ 1106.175745][T16348] lo speed is unknown, defaulting to 1000 [ 1106.272846][T16275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.289385][T16275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.331380][T16275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.376218][T16275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.384225][T16275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1106.415024][T16275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.638739][T10111] Bluetooth: hci5: command 0x0419 tx timeout [ 1107.417228][T16124] veth0_vlan: entered promiscuous mode [ 1107.443445][ T3002] IPVS: stop unused estimator thread 0... [ 1107.444988][T16275] hsr_slave_0: entered promiscuous mode [ 1107.462200][T16275] hsr_slave_1: entered promiscuous mode [ 1107.468786][T16275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1107.477665][T16275] Cannot create hsr debugfs directory [ 1107.627046][T16124] veth1_vlan: entered promiscuous mode [ 1107.954543][T16378] syz.0.2985: attempt to access beyond end of device [ 1107.954543][T16378] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1107.967853][T16378] vxfs: unable to read disk superblock at 1 [ 1107.974044][T16378] syz.0.2985: attempt to access beyond end of device [ 1107.974044][T16378] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1107.986955][T16378] vxfs: unable to read disk superblock at 8 [ 1107.993037][T16378] vxfs: can't find superblock. [ 1108.005927][ T5941] hid-generic FFFA:0008:0008.0008: unknown main item tag 0x4 [ 1108.022276][ T5941] hid-generic FFFA:0008:0008.0008: hidraw0: HID v7fffff.ff Device [syz1] on syz0 [ 1108.053874][T16124] veth0_macvtap: entered promiscuous mode [ 1108.074929][T16124] veth1_macvtap: entered promiscuous mode [ 1108.161472][T16275] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1108.179840][T16275] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1108.199036][T16275] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1108.216901][T16124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.228173][T16275] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1108.377277][T16124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.402579][T16124] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.413914][T16124] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.423572][T16124] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.434560][T16124] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.395538][T10111] Bluetooth: hci5: command 0x0419 tx timeout [ 1109.664563][T16396] xt_hashlimit: overflow, rate too high: 0 [ 1109.809723][T16401] 9pnet_fd: Insufficient options for proto=fd [ 1109.815974][ T1344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.835596][ T1344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.896403][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.900487][T16275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.912145][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.956167][T16275] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.991960][ T1344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.999181][ T1344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1110.032124][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.039348][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1110.054967][T16406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2929'. [ 1110.153868][T16408] binder: 16407:16408 ioctl c018620c 200000000640 returned -22 [ 1111.686027][ T9606] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1111.923927][T16423] FAULT_INJECTION: forcing a failure. [ 1111.923927][T16423] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.945297][T16423] CPU: 1 UID: 0 PID: 16423 Comm: syz.1.2997 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1111.945323][T16423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1111.945335][T16423] Call Trace: [ 1111.945343][T16423] [ 1111.945352][T16423] dump_stack_lvl+0x189/0x250 [ 1111.945381][T16423] ? __pfx____ratelimit+0x10/0x10 [ 1111.945403][T16423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1111.945435][T16423] ? __pfx__printk+0x10/0x10 [ 1111.945458][T16423] ? __pfx___might_resched+0x10/0x10 [ 1111.945480][T16423] ? fs_reclaim_acquire+0x7d/0x100 [ 1111.945507][T16423] should_fail_ex+0x414/0x560 [ 1111.945532][T16423] should_failslab+0xa8/0x100 [ 1111.945554][T16423] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1111.945573][T16423] ? skb_clone+0x212/0x3a0 [ 1111.945598][T16423] skb_clone+0x212/0x3a0 [ 1111.945616][T16423] ? nfnetlink_rcv+0x486/0x2520 [ 1111.945641][T16423] nfnetlink_rcv+0x4b4/0x2520 [ 1111.945666][T16423] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 1111.945691][T16423] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1111.945714][T16423] ? __dev_queue_xmit+0x27e/0x3a70 [ 1111.945734][T16423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.945762][T16423] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1111.945800][T16423] ? ref_tracker_free+0x63a/0x7d0 [ 1111.945818][T16423] ? __copy_skb_header+0xa7/0x550 [ 1111.945840][T16423] ? __pfx_ref_tracker_free+0x10/0x10 [ 1111.945859][T16423] ? __skb_clone+0x63/0x7a0 [ 1111.945883][T16423] ? __skb_clone+0x483/0x7a0 [ 1111.945908][T16423] ? skb_clone+0x246/0x3a0 [ 1111.945931][T16423] ? __netlink_deliver_tap+0x807/0x850 [ 1111.945950][T16423] ? netlink_deliver_tap+0x2e/0x1b0 [ 1111.945975][T16423] ? netlink_deliver_tap+0x2e/0x1b0 [ 1111.945993][T16423] ? netlink_deliver_tap+0x2e/0x1b0 [ 1111.946017][T16423] netlink_unicast+0x758/0x8d0 [ 1111.946052][T16423] netlink_sendmsg+0x805/0xb30 [ 1111.946080][T16423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1111.946106][T16423] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1111.946126][T16423] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1111.946145][T16423] __sock_sendmsg+0x219/0x270 [ 1111.946171][T16423] ____sys_sendmsg+0x505/0x830 [ 1111.946197][T16423] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1111.946225][T16423] ? import_iovec+0x74/0xa0 [ 1111.946253][T16423] ___sys_sendmsg+0x21f/0x2a0 [ 1111.946274][T16423] ? __pfx____sys_sendmsg+0x10/0x10 [ 1111.946330][T16423] ? __fget_files+0x2a/0x420 [ 1111.946350][T16423] ? __fget_files+0x3a0/0x420 [ 1111.946381][T16423] __x64_sys_sendmsg+0x19b/0x260 [ 1111.946404][T16423] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1111.946438][T16423] ? __pfx_ksys_write+0x10/0x10 [ 1111.946456][T16423] ? rcu_is_watching+0x15/0xb0 [ 1111.946484][T16423] ? do_syscall_64+0xbe/0x3b0 [ 1111.946510][T16423] do_syscall_64+0xfa/0x3b0 [ 1111.946530][T16423] ? lockdep_hardirqs_on+0x9c/0x150 [ 1111.946552][T16423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.946568][T16423] ? clear_bhb_loop+0x60/0xb0 [ 1111.946589][T16423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.946606][T16423] RIP: 0033:0x7f7d25f8e929 [ 1111.946623][T16423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1111.946637][T16423] RSP: 002b:00007f7d26d83038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1111.946656][T16423] RAX: ffffffffffffffda RBX: 00007f7d261b5fa0 RCX: 00007f7d25f8e929 [ 1111.946669][T16423] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1111.946680][T16423] RBP: 00007f7d26d83090 R08: 0000000000000000 R09: 0000000000000000 [ 1111.946692][T16423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1111.946703][T16423] R13: 0000000000000000 R14: 00007f7d261b5fa0 R15: 00007ffcd73c5d08 [ 1111.946732][T16423] [ 1112.640628][T16430] syz.0.2998: attempt to access beyond end of device [ 1112.640628][T16430] nbd0: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1112.653468][T16430] vxfs: unable to read disk superblock at 1 [ 1112.659637][T16430] syz.0.2998: attempt to access beyond end of device [ 1112.659637][T16430] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1112.673236][T16430] vxfs: unable to read disk superblock at 8 [ 1112.679204][T16430] vxfs: can't find superblock. [ 1113.295017][ T9606] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1113.320844][T16275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.321276][ T9606] usb 4-1: can't read configurations, error -71 [ 1113.445766][T16434] netlink: 'syz.0.3000': attribute type 21 has an invalid length. [ 1113.538932][T16434] netlink: 'syz.0.3000': attribute type 1 has an invalid length. [ 1113.601326][T16444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2999'. [ 1114.537133][T16451] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 1114.552036][T16451] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1114.622298][T16451] vhci_hcd vhci_hcd.0: Device attached [ 1114.775783][T16466] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3002'. [ 1115.138997][T16465] netlink: 'syz.4.3004': attribute type 11 has an invalid length. [ 1115.147274][ T43] vhci_hcd: vhci_device speed not set [ 1115.218653][ T43] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 1116.082528][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.249077][T16453] vhci_hcd: connection reset by peer [ 1116.282517][ T3002] vhci_hcd: stop threads [ 1116.286815][ T3002] vhci_hcd: release socket [ 1116.312611][ T3002] vhci_hcd: disconnect device [ 1116.391696][T16488] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 1116.398347][T16488] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1116.414712][T16488] vhci_hcd vhci_hcd.0: Device attached [ 1116.430009][T16488] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(12) [ 1116.436658][T16488] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1116.450919][T16275] veth0_vlan: entered promiscuous mode [ 1116.474429][T16275] veth1_vlan: entered promiscuous mode [ 1116.479541][T16488] vhci_hcd vhci_hcd.0: Device attached [ 1116.487146][T16489] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(15) [ 1116.493780][T16489] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1116.546407][T16489] vhci_hcd vhci_hcd.0: Device attached [ 1116.550908][T16275] veth0_macvtap: entered promiscuous mode [ 1116.568477][T16488] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(14) [ 1116.575118][T16488] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1116.592510][T16275] veth1_macvtap: entered promiscuous mode [ 1116.608912][T10111] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1116.613404][T16488] vhci_hcd vhci_hcd.0: Device attached [ 1116.624358][ T9606] vhci_hcd: vhci_device speed not set [ 1116.645608][T16275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1116.669287][T16275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1116.676788][T16500] vhci_hcd: connection closed [ 1116.677031][T16498] vhci_hcd: connection closed [ 1116.678611][T16495] vhci_hcd: connection closed [ 1116.681996][T16492] vhci_hcd: connection closed [ 1116.692277][ T12] vhci_hcd: stop threads [ 1116.702010][ T9606] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 1116.727487][T16493] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 1116.727847][T16275] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1116.743934][ T12] vhci_hcd: release socket [ 1116.748686][ T12] vhci_hcd: disconnect device [ 1116.759151][ T12] vhci_hcd: stop threads [ 1117.188838][ T5913] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 1117.378808][ T5913] usb 4-1: device descriptor read/64, error -71 [ 1117.672953][ T12] vhci_hcd: release socket [ 1117.677533][ T12] vhci_hcd: disconnect device [ 1117.682998][T16275] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.692198][ T12] vhci_hcd: stop threads [ 1117.696467][ T12] vhci_hcd: release socket [ 1117.700982][T16275] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.710290][ T12] vhci_hcd: disconnect device [ 1117.715119][T16275] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1117.724465][ T12] vhci_hcd: stop threads [ 1117.728841][ T12] vhci_hcd: release socket [ 1117.734740][ T12] vhci_hcd: disconnect device [ 1117.783834][ T5913] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 1118.080162][ T5913] usb 4-1: device descriptor read/64, error -71 [ 1118.200381][ T5913] usb usb4-port1: attempt power cycle [ 1118.334022][T16528] netlink: 'syz.0.3016': attribute type 1 has an invalid length. [ 1118.365382][ T6935] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.380777][ T6935] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.453320][T16528] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1118.466213][T16528] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1118.488102][T16528] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1118.519053][T16528] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1118.539789][T16528] bond0: (slave geneve3): making interface the new active one [ 1118.553148][T16528] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 1118.583727][T16531] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1118.592930][ T5913] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 1118.624132][T16528] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3016'. [ 1118.628928][T13104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1118.643027][ T5913] usb 4-1: device descriptor read/8, error -71 [ 1118.646270][T13104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1118.666392][T16528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1118.899967][ T5913] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 1118.949626][ T5913] usb 4-1: device descriptor read/8, error -71 [ 1119.039024][ T980] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 1119.059613][ T5913] usb usb4-port1: unable to enumerate USB device [ 1119.206145][ T980] usb 6-1: config 1 has an invalid interface descriptor of length 6, skipping [ 1119.235561][ T980] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.276589][ T980] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1119.298736][ T980] usb 6-1: config 1 has no interface number 1 [ 1119.312482][ T980] usb 6-1: string descriptor 0 read error: -22 [ 1119.338793][ T980] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1119.358248][ T980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.392077][ T980] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1119.406487][T16532] delete_channel: no stack [ 1119.411459][ T980] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1119.445384][ T980] usb 6-1: MIDIStreaming interface descriptor not found [ 1119.530887][T15466] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1119.548509][T15466] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1119.567775][T15466] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1119.578295][T15466] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1119.592238][T15466] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1119.604825][ T980] usb 6-1: USB disconnect, device number 2 [ 1120.409794][ T43] vhci_hcd: vhci_device speed not set [ 1120.483705][ T6935] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.503950][ T6935] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1121.006209][T16544] lo speed is unknown, defaulting to 1000 [ 1121.073747][ T6935] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.114905][ T6935] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1121.261293][ T6935] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.274501][ T6935] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1121.415655][ T6935] bridge0: port 3(netdevsim0) entered disabled state [ 1121.468683][T16397] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1121.478945][ T6935] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 1121.487862][ T6935] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 1121.500444][ T6935] bridge0: port 3(netdevsim0) entered disabled state [ 1121.515488][ T6935] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.532586][ T6935] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1121.654533][T16397] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1121.676225][T16397] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1121.866624][T15466] Bluetooth: hci0: command tx timeout [ 1122.695125][ T9606] vhci_hcd: vhci_device speed not set [ 1122.702005][T16397] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1123.128934][T16397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.215877][T16566] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1123.265636][T16397] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1123.298077][T16544] chnl_net:caif_netlink_parms(): no params data found [ 1123.361789][ T6935] team0: left allmulticast mode [ 1123.367214][ T6935] team_slave_0: left allmulticast mode [ 1123.373323][ T6935] team_slave_1: left allmulticast mode [ 1123.379299][ T6935] team0: left promiscuous mode [ 1123.384177][ T6935] team_slave_0: left promiscuous mode [ 1123.393404][ T6935] team_slave_1: left promiscuous mode [ 1123.404938][ T6935] bridge0: port 4(team0) entered disabled state [ 1123.426682][ T6935] bridge_slave_1: left allmulticast mode [ 1123.434015][ T6935] bridge_slave_1: left promiscuous mode [ 1123.441081][ T6935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.454878][ T6935] bridge_slave_0: left allmulticast mode [ 1123.460717][ T6935] bridge_slave_0: left promiscuous mode [ 1123.466516][ T6935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.647045][T16397] usb 5-1: USB disconnect, device number 40 [ 1123.968715][T15466] Bluetooth: hci0: command tx timeout [ 1124.293340][ T6935] bond0 (unregistering): (slave ip6gretap1): Releasing active interface [ 1124.378958][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 1124.378974][ T30] audit: type=1326 audit(1751292318.232:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16596 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ba78e929 code=0x7ffc0000 [ 1124.431544][ T30] audit: type=1326 audit(1751292318.272:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16596 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ba78e929 code=0x7ffc0000 [ 1124.455394][ T30] audit: type=1326 audit(1751292318.272:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16596 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55ba78e929 code=0x7ffc0000 [ 1124.477743][ T30] audit: type=1326 audit(1751292318.272:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16596 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ba78e929 code=0x7ffc0000 [ 1124.504971][ T30] audit: type=1326 audit(1751292318.272:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16596 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ba78e929 code=0x7ffc0000 [ 1124.526944][ T30] audit: type=1326 audit(1751292318.272:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16596 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f55ba78e929 code=0x7ffc0000 [ 1124.575064][ T30] audit: type=1326 audit(1751292318.272:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16596 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ba78e929 code=0x7ffc0000 [ 1124.609476][ T30] audit: type=1326 audit(1751292318.272:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16596 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ba78e929 code=0x7ffc0000 [ 1124.678728][ T30] audit: type=1326 audit(1751292318.272:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16596 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f55ba78e929 code=0x7ffc0000 [ 1124.765999][ T30] audit: type=1326 audit(1751292318.272:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16596 comm="syz.3.3031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f55ba78e929 code=0x7ffc0000 [ 1124.793719][ T6935] dvmrp0 (unregistering): left allmulticast mode [ 1124.940047][ T6935] bond0 (unregistering): (slave geneve3): Releasing active interface [ 1125.167846][ T980] IPVS: starting estimator thread 0... [ 1125.328901][T16607] IPVS: using max 36 ests per chain, 86400 per kthread [ 1126.006594][T15466] Bluetooth: hci0: command tx timeout [ 1126.884255][ T6935] bond0 (unregistering): Released all slaves [ 1127.024524][T16594] dvmrp8: entered allmulticast mode [ 1127.504303][ T6935] tipc: Disabling bearer [ 1127.515937][ T6935] tipc: Left network mode [ 1128.178776][T15466] Bluetooth: hci0: command tx timeout [ 1128.481657][T16544] bridge0: port 1(bridge_slave_0) entered blocking state [ 1128.508821][T16544] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.516110][T16544] bridge_slave_0: entered allmulticast mode [ 1128.549373][T16639] netlink: 22 bytes leftover after parsing attributes in process `syz.4.3040'. [ 1128.565411][T16544] bridge_slave_0: entered promiscuous mode [ 1128.604746][T16544] bridge0: port 2(bridge_slave_1) entered blocking state [ 1128.647404][T16544] bridge0: port 2(bridge_slave_1) entered disabled state [ 1128.699575][T16544] bridge_slave_1: entered allmulticast mode [ 1128.707617][T16544] bridge_slave_1: entered promiscuous mode [ 1130.056811][T16544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1130.104395][T16544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1130.835455][T16544] team0: Port device team_slave_0 added [ 1130.893294][T16544] team0: Port device team_slave_1 added [ 1130.919228][T16646] dummy0: entered promiscuous mode [ 1130.928219][T16646] dummy0: left promiscuous mode [ 1131.106513][ T6935] hsr_slave_0: left promiscuous mode [ 1131.158736][ T6935] hsr_slave_1: left promiscuous mode [ 1131.164923][ T6935] batman_adv: batadv0: Interface deactivated: dummy0 [ 1131.201334][ T6935] batman_adv: batadv0: Removing interface: dummy0 [ 1131.220714][ T6935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1131.228173][ T6935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1131.289608][ T6935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1131.297078][ T6935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1131.313954][T16670] mmap: syz.4.3049 (16670): VmData 37523456 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 1131.375285][ T6935] veth1_macvtap: left promiscuous mode [ 1131.391185][ T6935] veth0_macvtap: left promiscuous mode [ 1131.396891][ T6935] veth1_vlan: left promiscuous mode [ 1131.436079][ T6935] veth0_vlan: left promiscuous mode [ 1132.900026][T16698] syz.1.3055: attempt to access beyond end of device [ 1132.900026][T16698] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 1132.913241][T16698] vxfs: unable to read disk superblock at 1 [ 1132.920120][T16698] syz.1.3055: attempt to access beyond end of device [ 1132.920120][T16698] nbd1: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1132.933374][T16698] vxfs: unable to read disk superblock at 8 [ 1132.940013][T16698] vxfs: can't find superblock. [ 1136.921299][ T980] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1137.149369][ T980] usb 4-1: Using ep0 maxpacket: 8 [ 1137.190212][ T980] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1137.223271][ T980] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 10 [ 1137.260898][ T980] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1137.331597][ T980] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1137.355030][ T980] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1137.372889][ T980] usb 4-1: Product: syz [ 1137.377195][ T980] usb 4-1: Manufacturer: syz [ 1137.382801][ T980] usb 4-1: SerialNumber: syz [ 1137.397396][ T980] usb 4-1: config 0 descriptor?? [ 1137.405146][ T980] cdc_ncm 4-1:0.0: CDC Union missing and no IAD found [ 1137.420424][ T980] cdc_ncm 4-1:0.0: bind() failure [ 1137.424023][ T6935] team0 (unregistering): Port device team_slave_1 removed [ 1137.526549][ T6935] team0 (unregistering): Port device team_slave_0 removed [ 1137.640175][T16717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.654186][T16717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.669960][ T980] usb 4-1: USB disconnect, device number 59 [ 1137.844914][T16733] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3065'. [ 1140.204315][T16736] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3066'. [ 1140.218883][T16736] net_ratelimit: 73 callbacks suppressed [ 1140.218903][T16736] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 1140.259583][T16544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.266578][T16544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1140.336071][T16544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.386328][T16544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.402614][T16544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1141.085672][T16544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.898086][T16544] hsr_slave_0: entered promiscuous mode [ 1142.053115][T16544] hsr_slave_1: entered promiscuous mode [ 1142.129148][T16544] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1142.155447][T16544] Cannot create hsr debugfs directory [ 1142.918827][T16397] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1142.932252][ T6935] IPVS: stop unused estimator thread 0... [ 1143.079979][T16397] usb 6-1: Using ep0 maxpacket: 32 [ 1143.103765][T16397] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1143.120207][T16397] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.141680][T16397] usb 6-1: Product: syz [ 1143.153861][T16397] usb 6-1: Manufacturer: syz [ 1143.168032][T16397] usb 6-1: SerialNumber: syz [ 1143.195062][T16397] usb 6-1: config 0 descriptor?? [ 1143.271506][T16397] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1143.810156][T16397] gspca_ov534_9: reg_w failed -110 [ 1143.879758][T16771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1143.889652][T16771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1249.038519][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1249.045518][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5835/1:b..l [ 1249.054068][ C1] rcu: (detected by 1, t=10504 jiffies, g=82117, q=1602 ncpus=2) [ 1249.061890][ C1] task:syz-executor state:R running task stack:21480 pid:5835 tgid:5835 ppid:5819 task_flags:0x400140 flags:0x00004000 [ 1249.076661][ C1] Call Trace: [ 1249.079966][ C1] [ 1249.082916][ C1] __schedule+0x16a2/0x4cb0 [ 1249.087454][ C1] ? preempt_schedule_common+0x83/0xd0 [ 1249.092927][ C1] ? __pfx___schedule+0x10/0x10 [ 1249.097792][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1249.102840][ C1] ? preempt_schedule+0xae/0xc0 [ 1249.107710][ C1] preempt_schedule_common+0x83/0xd0 [ 1249.113026][ C1] preempt_schedule+0xae/0xc0 [ 1249.117753][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 1249.123158][ C1] preempt_schedule_thunk+0x16/0x30 [ 1249.128394][ C1] _raw_spin_unlock+0x3f/0x50 [ 1249.133089][ C1] ? copy_pmd_range+0x66f1/0x7000 [ 1249.138127][ C1] copy_pmd_range+0x6727/0x7000 [ 1249.142992][ C1] ? arch_stack_walk+0xfc/0x150 [ 1249.147888][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 1249.153117][ C1] copy_page_range+0xc46/0x1270 [ 1249.157979][ C1] ? __lock_acquire+0xab9/0xd20 [ 1249.162861][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 1249.168169][ C1] ? up_write+0x1c4/0x420 [ 1249.172505][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 1249.179287][ C1] dup_mmap+0xf57/0x1ac0 [ 1249.183561][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 1249.188258][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1249.194162][ C1] ? mm_init+0xccc/0xf20 [ 1249.198426][ C1] copy_mm+0x13c/0x4b0 [ 1249.202509][ C1] copy_process+0x1706/0x3c00 [ 1249.207235][ C1] ? copy_process+0x97f/0x3c00 [ 1249.212027][ C1] ? __pfx_copy_process+0x10/0x10 [ 1249.217077][ C1] ? __handle_mm_fault+0x1144/0x5620 [ 1249.222383][ C1] kernel_clone+0x224/0x7f0 [ 1249.226902][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 1249.231952][ C1] __x64_sys_clone+0x18b/0x1e0 [ 1249.236723][ C1] ? count_memcg_event_mm+0x21/0x260 [ 1249.242016][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 1249.247324][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 1249.252621][ C1] ? do_syscall_64+0xbe/0x3b0 [ 1249.257315][ C1] do_syscall_64+0xfa/0x3b0 [ 1249.261829][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1249.267037][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.273111][ C1] ? clear_bhb_loop+0x60/0xb0 [ 1249.277796][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.283694][ C1] RIP: 0033:0x7f7d25f85193 [ 1249.288135][ C1] RSP: 002b:00007ffcd73c5f88 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1249.296585][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7d25f85193 [ 1249.304570][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 1249.312565][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 1249.320554][ C1] R10: 00005555617b67d0 R11: 0000000000000246 R12: 0000000000000000 [ 1249.328537][ C1] R13: 00000000000927c0 R14: 0000000000117416 R15: 00007ffcd73c6120 [ 1249.336542][ C1] [ 1249.339566][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g82117 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 1249.351891][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=69038 [ 1249.359781][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g82117 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 1249.371151][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1249.381121][ C1] rcu: RCU grace-period kthread stack dump: [ 1249.387009][ C1] task:rcu_preempt state:I stack:26792 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1249.398937][ C1] Call Trace: [ 1249.402218][ C1] [ 1249.405160][ C1] __schedule+0x16a2/0x4cb0 [ 1249.409700][ C1] ? schedule+0x165/0x360 [ 1249.414042][ C1] ? __pfx___schedule+0x10/0x10 [ 1249.418921][ C1] ? schedule+0x91/0x360 [ 1249.423175][ C1] schedule+0x165/0x360 [ 1249.427339][ C1] schedule_timeout+0x12b/0x270 [ 1249.432197][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1249.437571][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1249.443472][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1249.448784][ C1] ? prepare_to_swait_event+0x341/0x380 [ 1249.454342][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 1249.459218][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1249.464861][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 1249.470762][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1249.476051][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1249.481262][ C1] ? finish_swait+0xcd/0x1f0 [ 1249.485882][ C1] rcu_gp_kthread+0x99/0x390 [ 1249.490498][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1249.495718][ C1] ? __kthread_parkme+0x7b/0x200 [ 1249.500677][ C1] ? __kthread_parkme+0x1a1/0x200 [ 1249.505722][ C1] kthread+0x711/0x8a0 [ 1249.509807][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1249.515016][ C1] ? __pfx_kthread+0x10/0x10 [ 1249.519615][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1249.524819][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1249.530026][ C1] ? __pfx_kthread+0x10/0x10 [ 1249.534623][ C1] ret_from_fork+0x3fc/0x770 [ 1249.539225][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1249.544349][ C1] ? __switch_to_asm+0x39/0x70 [ 1249.549131][ C1] ? __switch_to_asm+0x33/0x70 [ 1249.553914][ C1] ? __pfx_kthread+0x10/0x10 [ 1249.558523][ C1] ret_from_fork_asm+0x1a/0x30 [ 1249.563317][ C1] [ 1249.566338][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1249.572674][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1249.577917][ C0] NMI backtrace for cpu 0 [ 1249.577934][ C0] CPU: 0 UID: 0 PID: 16785 Comm: syz.3.3079 Not tainted 6.16.0-rc4-syzkaller #0 PREEMPT(full) [ 1249.577951][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1249.577961][ C0] RIP: 0010:enqueue_hrtimer+0x158/0x3a0 [ 1249.577986][ C0] Code: 00 00 00 44 89 fe e8 17 c1 11 00 49 83 ff 1f 0f 87 ea 00 00 00 e8 c8 bc 11 00 bd 01 00 00 00 44 89 f9 d3 e5 43 80 7c 25 00 00 <74> 08 4c 89 f7 e8 be 14 73 00 4d 8b 3e 49 83 c7 44 4c 89 f8 48 c1 [ 1249.577998][ C0] RSP: 0018:ffffc90000007d08 EFLAGS: 00000046 [ 1249.578012][ C0] RAX: ffffffff81ae90c8 RBX: ffff888056a0d340 RCX: 0000000000000003 [ 1249.578023][ C0] RDX: 0000000000010000 RSI: 0000000000000003 RDI: 0000000000000020 [ 1249.578033][ C0] RBP: 0000000000000008 R08: ffffffff8f9fdaf7 R09: 1ffffffff1f3fb5e [ 1249.578043][ C0] R10: dffffc0000000000 R11: fffffbfff1f3fb5f R12: dffffc0000000000 [ 1249.578054][ C0] R13: 1ffff110170c4f98 R14: ffff8880b8627cc0 R15: 0000000000000003 [ 1249.578065][ C0] FS: 00005555630c4500(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000 [ 1249.578077][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1249.578087][ C0] CR2: 000000110c3de09d CR3: 000000007c98e000 CR4: 00000000003526f0 [ 1249.578100][ C0] Call Trace: [ 1249.578108][ C0] [ 1249.578120][ C0] __hrtimer_run_queues+0x656/0xc60 [ 1249.578181][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1249.578202][ C0] ? read_tsc+0x9/0x20 [ 1249.578222][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 1249.578254][ C0] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 1249.578275][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1249.578294][ C0] [ 1249.578300][ C0] [ 1249.578306][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1249.578321][ C0] RIP: 0010:task_work_add+0x0/0x420 [ 1249.578339][ C0] Code: 0f 8c 39 ff ff ff 4c 89 f7 e8 cc 87 94 00 e9 2c ff ff ff cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 [ 1249.578351][ C0] RSP: 0018:ffffc900036d7c78 EFLAGS: 00000246 [ 1249.578364][ C0] RAX: 1ffff1100f942a91 RBX: ffff88807ca15340 RCX: dffffc0000000000 [ 1249.578376][ C0] RDX: 0000000000000001 RSI: ffff88807ca15480 RDI: ffff88802fde8000 [ 1249.578387][ C0] RBP: ffffc900036d7d10 R08: ffffc900036d7d67 R09: 1ffff920006dafac [ 1249.578399][ C0] R10: dffffc0000000000 R11: fffff520006dafad R12: ffff88807ca15488 [ 1249.578410][ C0] R13: 1ffff920006daf90 R14: ffff88802fde8000 R15: ffff88807ca15480 [ 1249.578431][ C0] __fput_deferred+0x154/0x390 [ 1249.578452][ C0] ? __pfx___fput_deferred+0x10/0x10 [ 1249.578476][ C0] fput_close+0x119/0x200 [ 1249.578496][ C0] ? __pfx_fput_close+0x10/0x10 [ 1249.578520][ C0] filp_close+0x27/0x40 [ 1249.578534][ C0] __se_sys_close_range+0x359/0x650 [ 1249.578556][ C0] ? __pfx___se_sys_close_range+0x10/0x10 [ 1249.578574][ C0] ? rcu_is_watching+0x15/0xb0 [ 1249.578592][ C0] ? trace_sys_enter+0x25/0x120 [ 1249.578612][ C0] do_syscall_64+0xfa/0x3b0 [ 1249.578631][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1249.578648][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.578663][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1249.578679][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.578694][ C0] RIP: 0033:0x7f55ba78e929 [ 1249.578709][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1249.578721][ C0] RSP: 002b:00007fff17f1eee8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1249.578736][ C0] RAX: ffffffffffffffda RBX: 00000000001174a4 RCX: 00007f55ba78e929 [ 1249.578747][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1249.578757][ C0] RBP: 00007f55ba9b7ba0 R08: 0000000000000001 R09: 0000000317f1f1df [ 1249.578767][ C0] R10: 00007f55ba600000 R11: 0000000000000246 R12: 00007f55ba9b5fac [ 1249.578777][ C0] R13: 00007f55ba9b5fa0 R14: ffffffffffffffff R15: 00007fff17f1f000 [ 1249.578796][ C0]