last executing test programs: 20m12.43155067s ago: executing program 2 (id=636): r0 = socket$kcm(0x2d, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2000000}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8}}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x0, 0x0, 0x80000008}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b0001006d61637365630000180002800c0004000200000100c280000700030004"], 0x48}}, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000480)="d8001c00180081064e81f7050044fd56170d12a0b9b54570", 0x18}], 0x1}, 0xc000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r2}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000fc0)={r1, 0x20, &(0x7f0000000f80)={&(0x7f0000000040)=""/118, 0x76, 0x0, &(0x7f0000000140)=""/32, 0x20}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x6}, 0x10, r7}, 0x94) 20m11.891268199s ago: executing program 2 (id=641): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(&(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) socket(0x2a, 0x2, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) 20m9.585930891s ago: executing program 2 (id=644): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0x2, 0x4) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000440)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x6, 0xfffa, 0x8, 0x8, 0x7fffffff, 0x2, "9dbb4290a7e8"}}, 0x11e) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x8, 0xfffffffc}, 0x1c) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f00000001c0)=0x7, 0x4) setrlimit(0xd, &(0x7f0000000300)={0x8, 0xffffffffffffffff}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x1002, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000002780)=ANY=[], 0xfb5) 20m7.679357367s ago: executing program 2 (id=650): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0003000000000000000000000000000800010001000010"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, 0x0, 0x4) r1 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x1940450, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000002c0)='./file1\x00', &(0x7f0000000240)='./file0\x00', 0x0, 0x2180846, 0x0) umount2(&(0x7f0000000080)='./file0/../file0\x00', 0x0) write$tcp_congestion(r1, &(0x7f0000000100)='reno\x00', 0x5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) 20m6.036844991s ago: executing program 2 (id=654): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) close(r0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='exofs\x00', 0x208000, &(0x7f0000000100)='/dev/ptp0\x00') r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x1fb283, 0x0) setxattr$security_evm(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f00000001c0)=@ng={0x4, 0x10, "e65cd5358e3ee5"}, 0x9, 0x2) umount2(&(0x7f0000000200)='./file1\x00', 0x0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40103d0b, &(0x7f0000000440)={0x4, 0x9}) 20m3.928576287s ago: executing program 2 (id=659): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000220a09040000000000000000020000000900020073797a32000000000900010073797a30000000002400048020000180080001006c6f6700140002800600014000080000080003400000886914000000110001"], 0x78}}, 0x0) close(0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 20m2.876380195s ago: executing program 32 (id=659): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00009d1000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f00002a0000/0x4000)=nil) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000220a09040000000000000000020000000900020073797a32000000000900010073797a30000000002400048020000180080001006c6f6700140002800600014000080000080003400000886914000000110001"], 0x78}}, 0x0) close(0x3) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 17m41.159277235s ago: executing program 5 (id=986): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) getpid() mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x404, 0xbe07) r1 = socket(0x2, 0x801, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0xa8400000000, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x301ac0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004"], 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@fallback, 0x24, 0x0, 0x80000010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2f) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x50, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', 's}z', 0x20, 0xfcd}, 0x2f, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000004c0), 0x0, 0xfffffffffffffffe) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, 0x0, 0x0) 17m40.351215105s ago: executing program 5 (id=990): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3, 0x1}, 0x18, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300"], 0x2c}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff830500000700ffffff", @ANYRES8=r0], 0x4}}, 0x0) sendfile(r3, r1, 0x0, 0x100000000) 17m40.103785963s ago: executing program 5 (id=991): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000004780)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_gstrings={0x1b, 0x7, 0x9f, "18cc8ed88a72764b693337e5b15b96f7eee7c30d4bcbf6fdabb50243ee734c701a97320bdd9c8e852c422cc2bac1f859dd3deb101f32e5db057ab9b638d6700ebe8cd3f380832cc25c9034608fd0c7d161207cbd2a896729afcb216f02cfcc48ca6d7a0f179bc593395960e5edd2c4b64c01116e63349e87c51a5a10fd1150a0253f6252fb207a3021583e86abe47ca7091a72ac6903dae01987d894d482d2"}}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x3}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80c0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002840)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) r4 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f00000004c0)={0x0, @null, @netrom={'nr', 0x0}, 0xfffffe4c, 'syz1\x00', @bcast, 0x5, 0x1, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000005a80)={0x2, 0x0, {&(0x7f00000003c0)=""/110, 0x6e, 0x0, 0x1, 0x2}}, 0x48) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) socket(0x1e, 0x1, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r7}, 0x94) 17m36.457769118s ago: executing program 5 (id=1002): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESOCT=r0], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024002, 0x0) dup(r4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{}, 0x0, &(0x7f0000000200)=r7}, 0x1e) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff]}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b00)={0x14, r2, 0x1, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x58, 0x1c, 0x29, 0x8, 0xb57, 0x8528, 0x6d39, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x1, 0x0, 0xb, [{{0x9, 0x4, 0xc8, 0x2, 0x1, 0x3, 0x1, 0x2, 0x3, [], [{{0x9, 0x5, 0x4, 0x0, 0x10, 0x5, 0x0, 0x8}}]}}]}}]}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file1/file4\x00', &(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 17m33.409933981s ago: executing program 5 (id=1009): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\xc8\xa9\x13\b\x9a\x8bF\v\x8a\x93F\x00\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f00000001c0)='.\n#)|.\x02\xd8\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6w\xbf\xfa\xd5?\xa3\'\xca%\xd0\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdcY\x9aM\x90\xa4\x05\xa8\xec\xf3\xa4h\x11\x19\x87E$\n://\xf3\x96\xaf\x1c8\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02\xc6\xf61\xbd\xbcBq\xba\xc6\x8e\x89\x15UTaf\xfc\x89\xab\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc30]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xadp\xba\xaa\xab\'\x1cRO\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x8529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf1\xa4C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\b\x88\xc9Xw\xe9\xf4\xa4\x94Q\x03s/\xac\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\b\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\x02[\xef\x03\x90W% \xe6b\xa2\\\x86\xac\xdax\x997AOJ=\x1f\x00\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c', 0x6000000) semctl$GETALL(0x0, 0x0, 0xd, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, &(0x7f0000000000)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x25, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) 17m31.785093519s ago: executing program 5 (id=1015): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000009c0)=ANY=[@ANYBLOB]) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28000, 0x102) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000001640)='debugfs\x00', 0x208000, 0x0) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r5) unlink(&(0x7f0000000140)='./cgroup\x00') r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0x9, 0x1, 0x0, @SEQ_CONTROLLER=0xff, 0x51}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r7}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x4, 0x4, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x6}, 0x94) write(r0, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40", 0x20) 17m30.217567845s ago: executing program 33 (id=1015): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f00000009c0)=ANY=[@ANYBLOB]) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x28000, 0x102) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000001640)='debugfs\x00', 0x208000, 0x0) r5 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r5) unlink(&(0x7f0000000140)='./cgroup\x00') r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0x9, 0x1, 0x0, @SEQ_CONTROLLER=0xff, 0x51}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r7}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x1}, 0x8, 0x10, &(0x7f00000002c0)={0x2, 0x4, 0x4, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x6}, 0x94) write(r0, &(0x7f0000000240)="240000001a007f0214f9f4070009040803000000000000050000000008000f40", 0x20) 9.226248911s ago: executing program 4 (id=3688): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000357500007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x8, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) mremap(&(0x7f00000d9000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x200, 0x0) socket$caif_seqpacket(0x25, 0x5, 0x5) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) write(r4, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x80, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "3aa00278be2271310101c304f39ec797d43bed4e56253677936858c6a30e6a2a36439f239c8ef617a170e3723ad3a8631381f2e6d46a3d5b0efd66ed6b4ce7d1a3"}]}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f0000000380)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000fefffe7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000965040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000c9be17044171e1d3d7b1efd036d7af273bce36015779c4cef58fa35d17c668a4b63e069efb29797573b8538e31ec24925095a163b9d4e76be2661f2a395e41f7e31a8021e00b00104e0801d4de36e5fdc6c42a7b3ff13f2360a6e231fd223bc33091dd61258a1fda45991fbdce6793c8a4785ee8b60092659b941bbd694dff0f0000000000003a45404b04bf97c4fea679c032b363956cd8bac9626b5db1b07a0bd7cc85e961506a35a04617dc0200379e731d3a8d8feac94a4ee293001f6ce7d5b40bf2a7f9be8173a9639a79fae885d05afe042c0e7821d406c967379e7521292d24d6c8034f2fc7c855a8945e9bce678ee9a015abc9daac8876623db56346916674ceb55f60b493f2f4d736acb2f206fc538450a676d71c01175b8454eb92567e8f8a707b590d7219288e23ee0800000000000010a49fc8f4ff0300000000000000000000cb947d6017ad27714772ad790af252e648ef8c313c604324f5b306000000000000cf327a8f5dd89315b8c8650a70162bba30ad7804fa4140f1a754ffff000000ab744d306619dfb3a37d897662bee00189f43da46a908a235c84cbad335fd1d2f2ef93a6a70c8b8ece0e243eab05a34ab0a7e7e497065e5e282e284f8d5e8852a265d528075214af000000000070d42182d8f3a347d48289a824e5b7b238e27263a23c0b865f75331d888c72df1da4b290582f00024227f03204add786a87b23ceb17c25810e769fe2d6a7bd8e504843b66b1a8c7b364bd2194ba9c8f60ac0c9b18d8c1b9e1a736825c91b4dff0000c1c5dcffa295c2930000000000235d84b0193a5ea7c77cdb7de8ce1a59ab4158097b4dd13ebfaf4425c6855530b56a3320d85c8fe85f667998b1a7e589f486c107761108e4e230419fd27b6ad9c10b25c6b6ed84badbb970dcf133279dd355e41de944564bdab99c5c712a9fbc8e9691c775bb94f746505e1e748cf1710d52468b4b1625ce21612ed5e807dfb5f19f3267e5366b2c0b2a0be49ae476263c9407ac6c596bf3cf66204984f5aebf93d1caa220ea6969cea852fe9a7d1eee13f1f48722a69ad9fb850bd093a302b9250245900ad5c8e5f20ddf77ee3d5a168964fad1aa7347d36c502d02b1d96d753ef6fc354fc126070060c65c147651fca62c0a06939f40c90ebc3042e753fe91b5770b24f25c558736dd7e1e9fb214cbb04c5c6ee4c970b320ba6fb6ef4615f4092de54c519f4622e1224153463ea80248a45a95a189958f586d606dcaa9aac656cf95a2d35225cfb0e6f47486d5cbb04a590116d4de92e203e107d68728a189b0d537d2442beab2f8ce7b2dd357200dcd139e47267012fc2a2b6bad79be429d1ddaccbe0139f16ca1b9bc1103000000ed1ece54cfdbe04670bee9b42fe3dc42033997e2e700b6edb2b49b5f2f6001ee0a9e5d1bee199ce9124a5cb479040000000000000049ead5b02d5ea1dcf6cdcf332fe94b3c1932d8d391754774a32c9b7e6ca4023bce2c7281d27a2cb62383ab3a3bb535650fbfb96c89936855eb7a485698f0d20c3eedd6123ef8f218d52ea2c346f80acb8b9a71856d2f2d1a7c6f45ee127b6a1d1ac1e243ed02e49e8aafe835919564af915965a050c37ceff855bd2dec3452c7c38f5dbf1ff1ff00020000000000006a1a029ea6540b40b2f797813af2c7d4ed235c2dc5f1dbbfcc52b2f55fd3f9f100c4891d0cb4c10ed01489bf235c45822594842da1b411346297a40bbf221bbf63ad3822575dcc01a3c34b5aa4e3750400000000000000fc0fd9c746cf0ed4b0343d00a154e6a869346256ffbd666a34414ab0f40bec45b1c24f02ac9bc20e69201968537dd4dc61323c8b6d3643183631664eeca616696fb30fe89c8bdb15037c801fca4a9c220fec5d14582a00b62548ddf2599e5ffc5330cefb8903d276eae21b0b4b20100ead8256636c7e754185e815dd21445cc965a0526da38021a3e540949494ef3041cfa5067f556a0af5c19d27ff4f61fa7762d7963c96853709e773f14c47eef784cb145ae9d6d37fc7b5d83e05ac773fcc429eae6826a9d207d4c39df8eed9cc2ae3f68df1c6495a82d02939b448bf8038521057714e6e644d633d2abe9e0b0025d16b7eff573f78364ed70a62a7b1e55311dc0193d47f9ecc8c7ad268dc6e2e75f8cc83315411bd6c6b88e1850ee757ac2f9e4d6ac510003717d5847a19e750db92d33d6bdc434d0b52b2eb4b1790459e35122f46b205120a54bf657da9fd55d43a89e333481de468f5984a69509e9eac5a5b39c004396e8cb3ab037fd62fa43f259f13ebc4b590e9ea07ea37689049c799cd444d45dabe3e3cf086768daa6816c37793d17a284d2828f5eab2d3f0bedd5334b7bb4c983fa9cd4bd86f0ad227901e83ef4871695380d25bea2929fa66382af6ddb89917ab100046151bd08fce74247955247daa1ea75139b9ce3771526503c7db3a4b3ff39301986c1fd9b5c42d39e768946c9a7ee8dd081bfb6ea5fa132ebdbe72d02ce9f2000000006f63ae8311afc4943c963d39e42c54a3f52d121bfb425fe268892f654febdaee43e95b5ae6749275e1ad8b8b279e1ae296e03a8d9386d8e199dc1f00000008000000000000000026c43493c622f041b47d329b248e8ccd92e9b17007ba2578eefcb59f50343722e6cba3be72fd037eb5fa243a395b5c83376a14414b32c2e8a33de8000000003927da2bec76f4e15c8bf3715c5bfe7b3617d0fcf9b5861554b5b76b8ae69c644a48931306a16cff8a38ea95553867e2c5fb1e99b1802e616345871b4611627874cfbe30fa5793c873ae6f75427f3eeda690147b9615b096d967c2d7f5ddf725f0544f8750a5ed04d6ca0f223506fec5d5e65b467c59459f6113cf41c174a63a17fc79d0b777a0c903c0d2e7f79b6f9ce68a3b72315407040f6a09cadc25e87b7c6b4a3079c7989b4cf04b251fb555fa9a2d74392939b4dbaa9e620e22ab975ac3a5a329157762c1f29075fbdd39451a56b97c90e4fde6782a7c78e7fbe8400054dcafcd51e9eef2d2ea10a3f2636ac2239cef5d8505060de55f472aa89cb8e0188f2ee96cb1ae8dee3c03d0a942c6289cbc4499cea402bd0550520f4aae98c436f18a667ae4efeb5e6a4b1b3f53536145a87578eac8bfc1037acd9d9629449714ed1302714c3519fdd8529b5a86ce2fabb7f285fe73730000000000000000000000000000000073b6f8e9255567374cb2cc80be58fca5b1dc50d85342e56beda632edb7f0a4abcabae102fadfbffecc6b1549315dda8e09d18a7fe5e1574e4fad426b6ca211da39a16dffdd661a20b20c390e00004b002cd83b754c3d32819c823027b3cf8f8da6e63d099712be370bb2aa06debff931ea0a2e7aa0390000000000000045b6720d74c470d49e1e97d1668bb75ad994089d723c2eeaad3f857937fa3df615121a1841ed452dd395788e1a82efda18b41c06c948ef44af8500fbe1ee0828a3b047afb80435935b0f99b381dcf101e9a1593bdaab3bc88c70bf56995a4790a339e1b62516356644ed7df6db419d0976a5169e68e8bd4712552c5ec03f2818c17c4a5bf1e5ecd9bb40074a63c66b61f4779226a99dc5ff9c442e93991570797493569e6f9ccd6d73bcbce41022d4731fc61b6bf0188c74a21471332a546ffe8e9dd738aa2ca782ff5a547a1ad7c348c59ff99d1496404eafcd0333df8f2801d39ad0c82735af24b819efc2fd67c6a53835f0af6a51d1b9123f4b9af7fa2ee2ebf4bc2973cf04380b41aa7577e35bcd28446bfcea19aa85440fe0fdce12e53da7b8842b7527a34d1bcb16fcdc84f2c46a78c01c2ff463cdd0d65267b0822e899e893514a02acd8c21583d181208175d08ff75223da84d53656eb7ab46ad442d70c67a6010029329aaf116308d57e77065464eb94ba18e680c2030b4212c135a3c3bbce5e911453b9e35e5b2a0390ebeb084988880a7b07435188680ce166b8858f00876c191fd4df2c32440ddcce4410199080009ad86d35168a442cfb9d399172c436a744649c810ce30505348d6f7bc87f0c202ab626acfaf0c732a3536fd46796b1bb6a2217834db8066789735a67dc95c679d02e0eaf743911bde21ffe0b6ccda73dee5694020544392d0538a8075706b26b2680555bd5dd1b4e2f59275c02372ff99d5f1066d018016c43541c6374be429d483f513c84a7dc1aced670625a93082a9bfaa86b2aa73ada8945b088d9ec0aa549a8ec8e50060fcace5e89ee1ffc1dc0f8a87"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00002f00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) 6.444740074s ago: executing program 4 (id=3694): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000020000003c0001"], 0x50}}, 0x0) 6.386195145s ago: executing program 1 (id=3695): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x401, 0xc8000) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000005c0)=""/4096) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) removexattr(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f0000000400)="c7442400e4000000c744240206000000ff2c242ed89c1e0c000000440f01b2f5ffffff0f98c4660f38826606440f20c0350a000000440f22c0c744240016010000c74424020d000000ff2c242e0f2380b98c0b0000b86bc20000ba000000000f30410f01c4", 0x65}], 0x1, 0x8, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0), 0x2300c0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000015c0)='ext4_sync_file_enter\x00', r3, 0x0, 0xffe}, 0xfffffffffffffda4) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000080)={&(0x7f0000000040)=[{0x9, 0x29, 0x0, 0x0}], 0x1}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0180000000000000000006241a00000809057f0340000000000904010000020d000009040101"], 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x2}]}, {0x0, [0x0, 0x61, 0x5f, 0x5f, 0x3e]}}, 0x0, 0x2b, 0x0, 0x1, 0x9}, 0x28) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) 6.186032517s ago: executing program 0 (id=3696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x7ffffe, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x29b0, &(0x7f0000000140)={0x0, 0x7495, 0x2004, 0x2, 0x1f7}, &(0x7f0000000040)=0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='stat\x00') r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000002dc0)={0x6, 0x118, 0xfa00, {{0x4003, 0x20004, "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", 0x7, 0x9, 0x0, 0x7f, 0xef, 0x2, 0xc8, 0x1}, r4}}, 0x120) pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) gettid() execve(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000006000000000000000000000000000000000000179c9e5a4de9988afafbfbff255b292e05b79f7db2f07f42b1a885c81d437bc17d3e3e14e482b6a58aa4b36862ff40acafd0fd1c52330b009b9614c50800"/96], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='sample_threshold\x00', r5}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r6 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000000380)='//\xf2b\x06\b\xba\xdfXo\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14\\8\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r2, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 4.968653605s ago: executing program 0 (id=3699): preadv(0xffffffffffffffff, &(0x7f0000001700)=[{&(0x7f0000000300)=""/228, 0xe4}, {&(0x7f0000000400)=""/229, 0xe5}, {&(0x7f0000000500)=""/94, 0x5e}, {&(0x7f0000000580)=""/135, 0x87}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/192, 0xc0}], 0x6, 0xfffffffc, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) kexec_load(0x0, 0x0, 0x0, 0x1) write$ppp(0xffffffffffffffff, &(0x7f0000000140)="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", 0x11f) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$cgroup_ro(r0, &(0x7f00000002c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r2], 0x0) 4.852077731s ago: executing program 3 (id=3700): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000980)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xa, 0x5}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x7}, @TCA_PIE_ALPHA={0x8, 0x4, 0x8}, @TCA_PIE_BETA={0x8, 0x5, 0x7}]}}]}, 0x48}}, 0x0) 4.807282847s ago: executing program 4 (id=3701): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000001fb4365d99271d34707e4f1339b283", @ANYRES64, @ANYRESOCT, @ANYRES32=0x0, @ANYRES64, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a310000000078000000030a01040000"], 0xec}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = fsopen(&(0x7f00000001c0)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xa0}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000400003700000008000300", @ANYRES32=r7, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003b000000080003", @ANYRES32=r10, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 4.014604383s ago: executing program 3 (id=3703): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000440)=0x8, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001140)="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", 0x390}, {&(0x7f00000004c0)="439e9c06fc6e6cabc8569d63a866b31ff3ceda1e28f23f455e96a02001fc3fb089ed9e5234", 0x25}], 0x2, 0x0, 0x0, 0x1000000}}], 0x2, 0x0) 4.014254891s ago: executing program 4 (id=3704): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x20, {[@local=@item_4={0x3, 0x2, 0x1, "70e392b1"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x4, '\x00\x00'}, @local=@item_4={0x3, 0x2, 0x3, "793f29fd"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x20, {[@local=@item_4={0x3, 0x2, 0x1, "70e392b1"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x4, '\x00\x00'}, @local=@item_4={0x3, 0x2, 0x3, "793f29fd"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 3.620196792s ago: executing program 3 (id=3706): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56d45, 0x70b923, 0x7ffff, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {0x2, 0xb}, {0x3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x10008004) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r7 = syz_io_uring_setup(0x7b07, &(0x7f0000000380)={0x0, 0x15c4, 0x2, 0x2, 0xfe}, &(0x7f0000000400), &(0x7f00000004c0)) r8 = io_uring_setup(0x2c90, &(0x7f0000000100)={0x0, 0xf0ce, 0x3480, 0xfffffffc, 0x14, 0x0, r7}) bpf$ENABLE_STATS(0x20, &(0x7f0000000340), 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$inet6(r9, &(0x7f0000000240)={&(0x7f0000000040)={0xa, 0x4e1d, 0xfffffffe, @remote, 0x2}, 0x1c, 0x0}, 0x20048811) io_uring_enter(r8, 0x0, 0xcb, 0xf, &(0x7f0000000000)={[0x20]}, 0x18) ioprio_set$pid(0x3, 0x0, 0x2007) 2.894766535s ago: executing program 6 (id=3707): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r1 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xfffffffc}}, './file0\x00'}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f0000000080)="1510aeb8bd0485dd52fe20d39f9d556f886289197d15ae56c98c5b487d4b776c75cf8a9addb5d609c89944eda55a9905a390606f769b09615cea956238a6e5f4d52265ce57"}, 0x20) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf542881a4912579e}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x2, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40054) getpeername$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7f, '\x00', 0x0, r0, 0x1, 0x0, 0x3}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x0, &(0x7f00000002c0), &(0x7f0000000300)='GPL\x00', 0x7, 0x4f, &(0x7f0000000340)=""/79, 0x41100, 0x40, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000500)=[r5, r2], &(0x7f0000000540)=[{0x3, 0x5, 0x7, 0x5}, {0x5, 0x4, 0x0, 0x4}, {0x0, 0x3, 0x0, 0x6}, {0x2, 0x1, 0xc, 0xb}, {0x5, 0x1, 0xc, 0x3}, {0x3, 0x1, 0xf}, {0x2, 0x2, 0x9, 0x4}], 0x10, 0x5}, 0x94) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xdcb9, 0x61}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x40000) r9 = syz_socket_connect_nvme_tcp() ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r9, 0x8010671f, &(0x7f00000008c0)={&(0x7f0000000800)=""/138, 0x8a}) readahead(r5, 0x9, 0x5) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000900)={{r9}, "f836841ebe239a90dabbc87760953ee207a752a2cdc82b356a4ccdc868acc098b2c52c101bca0be7a55eeb3dac5bb3fe3c9e4794c81be3fa00e2087bf99076105a581bb2465e16f4cc1bc7e24a165e44401e5e551aac0deed3928eec91aac2ffc3aa733d1df5fd5ab1c66d3ef9cda9aa258a14553fa2cb16885f5432a51858da0565b4e6d3d2c4f8d2268b0bc150acb6194f6784cda949eb875d97baabba62db2a679ba8357cf1fdaa3c671ca8270995ec05c372a9f02bdc05469083e52b5b726541dafcba79990d98219b517fd45aeb84f6cdb1992ee1888cac6d62d4263d15c11bc0ee3669209a7ee2a3b75667975d5011adcff79fa8ef0d7bdf0d6ae2f62ccdb09083682a88250309dc2cb2c347ec1f9a7c69bb85dcfd9c8fc2d5c3d3366ef7fd0ecf4bd94c73296d94674141d5cee3139008f7401a2ccbd7511e09475d726dbad6eeed6eca9d39c05153ba931936f970b5e26141d699175f8886fec750aeee5e4fa135cf243db48115bba099e0c5b28a127d4d9844d31d166a2e823db935e9a383b5624a3b856cfb489795adab8ec67b7ee730725bb045921256985d9f41d78711b70812cd3b1133d1e6e468f42c10ff723c049180b6c98565644b9ce0fabfa8b325889729ba3845e1247e5aa98a222774628701dc3f4d8b3199da8ea2f615a7f7b4f528a23d0be63078112b0f233468771f1962c09d7d7d394711d3529a6323d7f3232b47da2af0bdab460045f4273b6b735246e76032e7ea7db4c990818fadc4b8b8067eed8001d20ff81ff48f5b1079539ef207a35bb9c64b891da317594323b2ad6ac1b2cafb81b0c7a56cf90f900f185ee15967fdd31ac643898d116d7d8e7406fcd1b055dfd7e81b3da9585640011c6a60058f89824a7e676131928bdf9b2d47587fea320953168a353bf5d330374cd146443b67747642270cbe06e7e12dc446466628cb0d745d6df7a2df6036dd2b641601a0cda01f6291a767b7d7843c8f3102eb317d37c45f31f4470685d4fdf3c854adb1198d77863cd634aef0d70d48354bfaaf66d896f2e98744bc457d2cc45e3e14299aa3a1db3374073a8bd010ac9b0a5f6ad9e599e16e1a683e9f279580e34f084c20ba73a2d6a172aa36013825ecec548081cd3869520fb415785c5f5ee69a8e0a99ee64a7363535b6aa1cfeb0bcbf8c8586ff711cb3207af42906121a52555ace2da909eb92bdd239aa9f147843e6065c71daffcc8a8a75acaceae749f9e2f96e4018b59bbc52aba15665104cf6b6d42efd1ee98cbf3d2f14a61ce7926d62844bc183285c5de7a7a8b0aa1f25bb9be37efbb9c830d54143b7769dc38f061ce07d8853937324bda6903eafd812fa8954b522e35bbffb726c1942e901892775d60948e765469deb2931aa0889603d03d919ac62240d34e865fa2a6ebe3dba91fb3f41782f2f4f88c91c44573434d62b7a265d6b8a854428a01839fd0c153e1cc129f03f4ae57e4f1427e7534c1e180c09409202def1fc802c95d2ab64bf27c92ba10bb36613f7f505cabd6f11558789d89af0ca6676d246596a1e213b18127c5c0a03c04682ef05bbde1700f93646992f84beea544fecd8b2f975151267bf2a4738445b57b3961a0c045a71a2a04f77d07a6f1228adbbb0e107b1d0b8af3efe5a30e8c46972a963548857cacf94fd2f144f474334f002cae1b739bfc27d061503e15116800bba6253b0340511c98cd8cd355d5f3cafb1ce16fcd13fcc4273ff18de376d61c3202d05f8f9dd1649e2a75f08139bfdf07cd8e1fd62e1555ba6823e418e23a54b19f2ef4cdb5833048420bac74cb6d59c26f26829522182984bd8cc48c67dcd1b2cabe0779c768d3d17294e3e60b59f7cd9c6569afbe4461472c5be23cd09891bc7302f1c6ce0f3990a2178917aa1a54f9a3cb24b47e9336f939bb2723e91a69aead980e43a2fced72372e736f09ca1b59d58445b05ac81dd864ee6503e328c2bf15e83e9fbad3bff5313aac8057cc5aac24a308461b9cf893bde826a68d4b95ee2f0678b23b080746ecb84e12f5ae01d9324577d8f6ae521ea58fd42f8502fc6add4038b564d3806630c7175bb50e30a962f0fff9b1c4f0bac85460d4e12fbf8015c6f6c62e18bc3f9482e16fc21f920005041ab14e07084ab67f2218c3cf75bd7248191a8810710f689003afb56537b8d5ca966e99fe73921649e421be02afa5acd82a6d82b347d21a08eef2b213dc98d99c522619d00b5b3ee339625c6fc3c6703f700a3854484174bdf6a86f217bd042c2b598a2a1ead2b0661ba0aa9d0f5d76358f6a27c1e0a9b0ec110dec817eac28bf1bae247440df4e49bd8763a822004b2802bae51cb99e9908f79521d2389ac1df355945f6c62c87eb5b67b6c90bda0c715edf3720e561213797234cf4a8ba43b5b85ad5fc893f1cbd587a176ddd0234e036e7e88a12bbb19ddbc2d4da01b9e60ce79a069b5f730ab45b5d013037925a23469703dbc9e827c00b61f76c0b6a9e263203c1a91cac1537916da6693a38355d99975e3756db3c0b63a65c02cfa25b9dbba516bfe0d25fa6b52507b610edde00dde6bfa687412ee9afba15890dbc870ca54e6a56da87d3a7ec65c8ce45ef69291be0077e6e25c13f6463123b67814480159e2f8e0ea07568d6d8d2b3e30b0f37907b1bd2fa2cee5cdae71e046f7e7408cab18251469e26756878dace44495a3038e3070845c364223fc8d15b65be75b4c7c10f5663d5fa8b35d82db39ebb9db395f3587f97784410f2f5721bb2af952135dd627e1a2f1c586b704db6a3465252095b57c37ec05d902c624432b7a2867a9081bff66277aa26a1cefb979917a2149c927dc68080adb734b3296bec6c45627952340c7f77d04e7698ad8d5a2a7106e86d0bc8fff954635a870ba8326c8dad368045a045fc6b103ae8a9487dacf294431088971621a977027a23386f73deddfa8faba0614fa58fbe80e9c51913738dc2c36726967f0ab507be756ade4ae383ea69f71fc924a4f348283297f8e9d95d9a9dbe909d774089088c4e1a6cb8d595963a699f750076d27e98e9bdaa1c46ae665d64ca23609705781a8ca7571dd5bc5642b3025384a6ad948c28a511d5fde5bef02557a7d893f123a4f99993d18e534c48a5335247de5fc1ad92817938d5248b5d9f4317db1b3d564801cc52cc057df03ddf9892bd0a1b17800a663302ca993585ae69950b7091bbc39124325af6d77de28943f3186c091efb7c2535e8dd9431a073296d90bf7771c38d4647ade02961be6994f80cb6bcdd61f4d8ba675cb4951f1a585bf79a36e30fc2bb0263b9da3e59bbd80a20d604d403aa6adac9a715650e6b7598891fa0e1a5ece53fa749b591947c73c2bba69c22be17af9303988d1b38915dfaf53018a9943af24a44778502b15d9f62fd2e05ae10425ef84ab9b38c45d0e0d0a3fa169c9411e77a3128ebecd0b44f420708837b30e8d286c046f19c6db1213824b41b10b6b7802656560383de8e34081d416ada0668dca493091ece682baf604094b936dfa201fffd41afd60dbee5e14e4073b631164605bcfc3e510736256c06ef39d3f8db7024a8b7925a44dc023f8f86b669e9873fefc00e8cdad65210bc37396f0e91173ed4cb0a1371a42e9d4889e91af7cf7a209ca9fff984c971d85555acd32f1194ac8b40e1ed4645158ccff62e3c05de975bc2a478466cac103c58b7d81ab80d7f86c7102c1077991adafd78d796399f33371fa0be3222ad5d6c7d271f01233e665a1c20b0cf0d50e8e74a56056b0142eca8af3ce8caa59b5863c11c74207fc158b1d2d718b43337f642307623a89786692b0afdceebbf53f74abe5ccc1031e0abb71d7a44315b937d8a45ed280c33435eb06a0fb3f0a1326f1bbb589649f71820d5858a38af492807a0afd7231352209d4c1e469bb7fd4ad7e2568853c89e42d86d63eb695271140999aa02a473c5fcaded56129e76828f9c73ead380aa5b53832b016e235ad58009b4689a970b0c91128077b9ef956110f7466853b74f62f98bccfc9227e027545214856f60b4532987d7bf55da2762f4aeaa884097da0fa702c9a6c98bf628e5f01354c4b0f7163422a57fa4b46dc0eac2787bace05959c6d58ad50fda2ff08c32557923e3ec63180710c168d545ee27b944eee49cf86ac40def0c5907271451735294a71148342a2c237b89fc8dc2aead9edb5027155e746b98d254a350802bc7ca0664f8eece49903ebab5f75f69fce1687f85f5c1a07e459904e184c6b1fed1d208d95e446a397719103f3db4e52a18e84499edbfa76418178d37328888b18a29e96f0bcf0977156f3dbaecf5c0323541be5e1db52a8d8cd443ac26224500b3a4813c4e5ab0c43027ce1a8ce1c2f12f7a04fd53cddaaea3127db959c5a32006e894b8d76d70794f9179f8c078e76d79ce1b64a944bd2ea9ac8076e8347c4f06ee3a0ef6f1b396d6e299b55666cc8b06ac4a8e23bf982d73077079b82601ef880b0264c7e828c3f77224d4f95ee9726487bb1607030e07c49251a3562b9af3a4794b0d2092c7021fc093849f63d3349ddc1a7cb1d945a3b0f333a79a6426dd899b07b2e660a481bb8b499086d5fddd8844e115661c1d24a3bc6f7b8504b052d43bce84e0f7148d16e4c5edac3a620a62a2ee8d09de05b2fb49e038e370eceb6c595e68427536109f13054c22e1dc7ffc4876a57f4dbfa52e32d971ec38894dbc8b3ee66a5108793df6d407acd764a42c6efd27763562d199b5a1f6b9d619ca91df412810a5fe77fac169197157007b025d60f87165b058e6b37cd35b419cf0f723d0bfe86f316b1bffcf2eed7ab418b2f1c1bab9425536b1d850cd002be6d64f6f46d1893050aaadfab1600f29370935f06ec9a42ad1a490e4045cb520b34b86f9f72bda5a3c85df83e83bdac91039ae3cb9d2d73039c9dbb68a2f7ac859c347e290cb63d80d78592097f8155b5ee955f547f80c40278a1c908b13c0876220330168d501d9342445651544c1732c7997b3105b7d4bbb127c133ddd14c08bd55cf74a0fc54df831e666c3ecc6b61f9a7a37b9858d90f9a1a97177b89ca31da439f2ad7f944d974fd3e8f8c0d156356ab63c0124a80acf4e1232d858ce5ed6368635485b6be07ed9fab9f4efbbaf0022a2e6792ee7c81a068f78089b91fa089aa4ebbc7cc77adcc5b8146e59d92b83c242b581fe7502ecce3f5fabe541328b67bd442e00156a06856e7ff2ddaec32d0640546c9aaf63eef3cd2bb40b35a2493de1caa94637249421361aecd4c5ac9e3d09926e90609788d622500ac06047082727e83bb0d49ac700ac757bd0964753506f9270c48b0bf5808fd9aa401e274ad6f4585a0fd025041efc41758462a9f9c6b7fe177fd80fd108b697187b605c76d0f2d2c040fe344ddae31fa7dd40e80519a177640bd91ae1b9252a1e6e40ed83993571fa9fe62222b53cf3120e8e9a80a5e92b18139ba1623afc43647dc591a9199674c0f21bcc87e622e8208493205948d964b2423971936a23eaf2e850988a6c7c014ebba42dd8b92994c43b8d6e79f4d31b913bba77100af881864a926269405d719bec4f7d8c2ab5036748cca5d6a7d6ba6ba445784ba04b0076aca3b89dbed5818c7d309debd9c526352562362d4b9b42b32aabe77d8ad4b2ee482662ad8550da52470fa1f294c5e17ee83b245fbb18f9a2f50329d188e8fd327c0c7d1da2bfa67409f4dbb6a37b3139a969552070c763220e3ab1d9a502f09e2ab525e570b0bf19f1da0495a"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$VIDIOC_G_SLICED_VBI_CAP(r7, 0xc0745645, &(0x7f0000001900)={0x9, [0x8, 0x7a09, 0xd7a2, 0xa, 0xfffd, 0x8000, 0x2, 0xf0a9, 0x8, 0x8, 0x2, 0x5, 0x0, 0x7, 0x7, 0x7f, 0x81, 0x7, 0x212, 0x5, 0x1, 0x7fff, 0x9, 0xa, 0x6, 0x4, 0x7ff, 0x2, 0x0, 0x8, 0xd588, 0x9dd2, 0x7ff, 0xad69, 0x2, 0x8, 0x10, 0x2, 0x4, 0x3, 0x4, 0xe, 0x42a, 0x8, 0x20, 0x8, 0x24, 0xe2a], 0xd}) setsockopt$RDS_GET_MR_FOR_DEST(r7, 0x114, 0x7, &(0x7f0000001a80)={@x25, {&(0x7f0000001980)=""/130, 0x82}, &(0x7f0000001a40)}, 0xa0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001b80)={r7, &(0x7f0000001b40)}, 0x20) syz_kvm_setup_cpu$x86(r7, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001c00)=[@textreal={0x8, &(0x7f0000001bc0)="ba6100b80100ef26640f080f01c20f01ee0f072ef2e168260f225c0f303e660f388231b800008ed0", 0x28}], 0x1, 0x48, &(0x7f0000001c40)=[@vmwrite={0x8, 0x0, 0x10, 0x0, 0x3, 0x0, 0x1, 0x0, 0x2}, @efer={0x2, 0xe001}], 0x2) ioctl$FIGETBSZ(r5, 0x2, &(0x7f0000001c80)) r10 = syz_open_dev$sndmidi(&(0x7f0000001cc0), 0x7, 0x14b002) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000001d40)={0x1, 0x20, '\x00', 0x0, &(0x7f0000001d00)=[0x0, 0x0, 0x0, 0x0]}) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f0000001d80)={0xffffffffffffffff, 0x0, 0x3, r4, 0x535}, 0xc) write$uinput_user_dev(r7, &(0x7f0000001dc0)={'syz0\x00', {0x7, 0x81, 0xff4b, 0x7}, 0x10, [0x4, 0x0, 0x101, 0x80000001, 0x40, 0x100, 0x10000, 0xfffffe01, 0x4, 0x2, 0x3268, 0x1, 0x7, 0x101, 0x9263, 0x200, 0x1000, 0x6, 0xb, 0x8, 0x18, 0xff, 0x4, 0x8d12, 0x8, 0x0, 0x0, 0x3, 0x2, 0x7, 0xff, 0x162, 0x2, 0x9, 0xc1d, 0x7, 0x9, 0x1ff, 0x9, 0x6, 0x8, 0x3, 0x1beb0, 0x4, 0x8001, 0x6, 0x8, 0xffffff90, 0x4, 0x0, 0x1, 0x70b, 0x5, 0x7, 0x1000, 0x1, 0x100, 0x9, 0x3, 0x2, 0x0, 0x365040, 0xfffffd89, 0xcb5d], [0xe97f, 0x9, 0xffff, 0x7, 0x8000, 0x1, 0x80000001, 0x5, 0x8a1d, 0x3, 0xc, 0x6384, 0x8, 0xffffff7b, 0xfc, 0xffffffff, 0x1, 0x2, 0xb6, 0x5, 0xf, 0xf3, 0x400, 0xf, 0x9, 0xba3e, 0x7, 0x2, 0x5, 0x3, 0x6, 0xffff, 0x6, 0xf3, 0x0, 0xff, 0x5, 0x18000000, 0x6, 0x80000000, 0x6, 0x1, 0xfffffff7, 0x5, 0x0, 0x7, 0x80000001, 0x9, 0xfffffffd, 0x9, 0xd, 0x0, 0xff, 0x7, 0x7, 0x2, 0x9f8, 0x9, 0x1004000, 0x0, 0x2, 0xffff, 0x0, 0x6], [0xd, 0x4, 0x1, 0x3a9, 0x7f, 0x5226, 0x5, 0xffffff7f, 0x38, 0x4, 0x0, 0x3, 0x9, 0x10, 0x7, 0x4, 0x6b, 0x62f2, 0x0, 0x10000, 0x7, 0x8, 0xfffffffa, 0x80, 0x6, 0x800000, 0x6, 0x81, 0x7, 0x5, 0x0, 0x4, 0x2, 0x80, 0x9, 0x0, 0xced3, 0xfffffffe, 0x7, 0x4, 0x14, 0x40, 0x8, 0x1, 0x7, 0x0, 0x19a41e7f, 0x4, 0x0, 0x3, 0x8, 0x5, 0x1000000, 0x6, 0x1, 0x3, 0x9, 0x2, 0x7fffffff, 0xfffffffa, 0x7, 0xfffffff9, 0x7f, 0x5], [0xb3, 0xc, 0x7, 0x4, 0x1, 0x1, 0x4, 0x8, 0x401, 0xc0, 0xfffffff9, 0x9, 0x1, 0x401, 0xb6c, 0x6, 0x3, 0x6, 0xd, 0xfc, 0x1fad, 0x7fffffff, 0xfff, 0x8, 0x17cec074, 0xffffffff, 0x9, 0x6, 0x81, 0x7f, 0x0, 0x100, 0x3, 0x37, 0x2, 0xa278, 0x8, 0x7f, 0x7, 0x4, 0x5, 0x4, 0xfffffffd, 0x0, 0x3df, 0x1, 0x8001, 0x1, 0x1, 0x90, 0x9, 0xe25e, 0x3, 0x80000000, 0x9b0b, 0x3, 0x40, 0x81b0, 0x74b, 0x4, 0x1, 0x80, 0x9, 0x865]}, 0x45c) open_by_handle_at(r2, &(0x7f0000002240)=@xfs={0x1c, 0x81, {0x2, 0x7a0, 0xbe6, 0xfffffff8}}, 0x0) r11 = getpgrp(0xffffffffffffffff) sendmmsg$unix(r7, &(0x7f0000004e80)=[{{&(0x7f0000002280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002540)=[{&(0x7f0000002300)="cc99e2064e3d4341d7361e8fac8d563a7822071cafc88d2b6cae801bd7133e7be6a86adb9faea1d69498de4f01e98265e04f29973062f6295f0769881cd255e54660728ed0f7af940fc88c35e80c5ab493dac475222e946447beb23d67c63495b59e6d8508ab528517b59cc081b99e317ef35661806d407c58523f008c2889e906cdcfb78b7377c9a44f2e9a9e959b76bc267021e597ba5a0c9937673c1a6c09f956a95315e71d489dabbf", 0xab}, {&(0x7f00000023c0)="912fa6abd72ea6a5d4992d144fd2cddae67698d3978c64aa3ce27187c9481af079562b336677398f19d2c56018fa1bccc7f146849c2ae05e0fc96ae2ae322f85df883da25b1410c19a72287dc014160856440fb6b4fad45308daf73ee9c142957de455f466273f298eebde290eaeb1c95beab2865ab7c784fbd79bdfe05fb1d7006787d1413b722404663be8e6ffe96e6b3dcbfe5b7da423d6e2c96e7332c0", 0x9f}, {&(0x7f0000002480)="018b4a03bd995770c90b3554230adfc61aed7aa780dc8626e8731c68cb7ee7525f56573c0bd16d049271d9bf072614bada0092db2ca652b395c0411689c8596f8f4b778ff6c4e2993bf09020c618a31c975ea078325afff32f33e38e17f32730b48fc99f1c26306e846c4bd970db9feeaf0026979ec5dd5bc6c6f4c27ca7ecedae2ac8e84344a2823d97b1eac985c1", 0x8f}], 0x3, &(0x7f00000045c0)=[@cred={{0x1c, 0x1, 0x2, {r11}}}, @rights={{0x24, 0x1, 0x1, [r9, r3, r6, r6, r7]}}], 0x48, 0x40}}, {{&(0x7f0000004640)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000004940)=[{&(0x7f00000046c0)="664c28e392984001da2fa7e79be2e17a4458e9210929700e07f3d4688ef47b0af9cdfaca31f6ebaca8019c70c0dba98a8bf4090397c33e23cfb2baff485ee9deaea0d002d94886a658f162c825792c21cd37f75bd4c3a6c6bf46b1e1704a544c88ddce2115d24b6fab4823212ccc920f0c1ee10662a704df4135ad05c780ea0690f3ba7ee2545bba0d46d26b314f8064fb7d9e3b626f8f6bcbb06a36381e453e2baca2319004dc096570a745a54338d3901dd2e5e050025bbfd55830a75ef34a8378f1559b634a82cfbcf53625c55f59b6d61fc475eadffa1cfa43f5eca77fcf1f", 0xe1}, {&(0x7f00000047c0)="929e9a8a1e306ccfac512b19ff72c899", 0x10}, {&(0x7f0000004800)="0103f98af4630117f0dbc654bcb448adb85affb3fea55f396bc5bc408f0ad2c1cfecb959b6964cab3d65f6de44d9d1ae6be5a3d3b5c840cb7c71819e3b06a31aef13e3ea8370aa4914c857f265803ce7150598202e310919686eb02b1a0597e1de1721fc981c49830ce7e724710255a02deda7b9cd493cc93b9fe833255e20", 0x7f}, {&(0x7f0000004880)="3eb9fde133f2a6c9e61e74e28e4d5792d7f5ef1c50494475203f320dd8183d544936628cf868238192dc3fb494c98f5efae44ec450126d6edf3c6bd1ad2a0d77eadcf21f151ed7c1401df87c7e15dfb7859c4df22406e03731a2b93ddfa8ec040c53a621ee4a21d18117a8bc265b84cc1bcb2620", 0x74}, {&(0x7f0000004900)="1ba74b62057ebc6d86a4675067edb2a2400d2472f612b82746e4ce1b0dc70df60d99d5535dfa35f825c7dd5f6e84bfe45823", 0x32}], 0x5, &(0x7f0000004dc0)=[@rights={{0x24, 0x1, 0x1, [r3, r3, 0xffffffffffffffff, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r1, r3, r10, r2]}}], 0x90, 0x4004}}], 0x2, 0x4000) 2.846521051s ago: executing program 6 (id=3708): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000020000003c0001"], 0x50}}, 0x0) 2.772990317s ago: executing program 6 (id=3709): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000d00)=ANY=[@ANYBLOB="6800000010001fff000000000000000000000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000480012800b000100697036746e6c00003800028014000200fe8000000000000000000000000000aa08000100", @ANYRES32=r0, @ANYBLOB="040013001400030017"], 0x68}}, 0x0) 2.66736756s ago: executing program 6 (id=3710): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x9) write$P9_RWRITE(r2, &(0x7f0000000040)={0xb}, 0x11000) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) 2.661008674s ago: executing program 0 (id=3711): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='%'], 0x20) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) socket(0x2a, 0x2, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='smbus_result\x00', r2, 0x0, 0x6}, 0x18) ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000300)=0x1) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r4, 0x0, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000180)=0x2, 0x4) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000340)=[@mss, @window={0x3, 0x6, 0x6}, @mss={0x2, 0x18}], 0x3) 1.900025302s ago: executing program 1 (id=3712): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000013000500020000000000000007000000", @ANYRES32=r2, @ANYBLOB="004002000000000014001a80100005800c000380080001"], 0x34}}, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a8049d2a44ce42557b2e72e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c5301001ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f5d6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e54908000000a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c7fbc0efaccca18e94b87dc586ee60baa55469755ab00e92b607f2aeee00ad72fb29c1847f85b2f8ec3a34864b18eaaa131a4940c9af11606e5d9360c3f4a2c8308d50c34b1bbaac018469ac346dc2a539e20350297097e7bf21ea0c2a0aa083b2b3543af05c7fb5391a1c81304b520fafb941b2dc3cfb03c3dd8567a459752a5ca573ee7cf4f518af508d141c98dc9914df1521e9ee49decdf2418e7f74adea9fda805bc75906dafd279aee36397966427cdef205c67fbbb3d5", 0x1cc}, {&(0x7f0000000740)="0a985d7879f1", 0x6}], 0x3}, 0x8001) socket(0x2, 0x5, 0x0) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000200000014000200626f6e64300000000000000000d300000900010073797a30000000000900030073797a3100000000"], 0x43}}, 0x0) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x40030000000000, 0x0, 0x15}, 0x0) 1.803397174s ago: executing program 3 (id=3713): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x8}}}}}}}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000004000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1f0000000700"], 0x50) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) (fail_nth: 3) 1.773531354s ago: executing program 1 (id=3714): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000100000003c0001"], 0x50}}, 0x0) (fail_nth: 9) 1.669138138s ago: executing program 0 (id=3715): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000500)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptp0(0xffffff9c, &(0x7f0000000000), 0x80000, 0x0) socket(0xa, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x1, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f00000001c0), &(0x7f00000003c0)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80a00, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0xe6e, 0xffffffffe0000001, 0x0, 0xffffffffffffffff, 0x1ffffffe, 0x6}, 0x0, &(0x7f00000002c0)={0x3fb, 0x5, 0xfffffffffffff328, 0x400, 0x0, 0xa, 0x3ff, 0x4}, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$sock(r5, &(0x7f0000000780)={&(0x7f0000000300)=@in={0x2, 0x4e22, @local}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x24, 0xfffffffb}}], 0x18}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd2f, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xe2}, @TCA_ROUTE4_TO={0x8, 0x2, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc044}, 0x40) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xb, &(0x7f0000000400)=ANY=[@ANYRESOCT=r2], &(0x7f00000004c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r6, 0x0, 0xa}, 0x18) r7 = socket$netlink(0x10, 0x3, 0x9) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000080)={0x11, @private=0xa010102, 0x15, 0x0, 'wrr\x00', 0x0, 0x0, 0x2c}, 0x2c) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x28, r9, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)={{0x14, 0x3ed, 0x1, 0x0, 0x40000000}, [], {0x14, 0x3ed}}, 0x28}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) socket$netlink(0x10, 0x3, 0x0) 1.027481222s ago: executing program 6 (id=3716): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@private2, @in6=@rand_addr=' \x01\x00', 0x4e20, 0x2000, 0x2, 0x3, 0x2, 0x0, 0x20}, {0x0, 0x0, 0x1}, {0x2, 0x0, 0x0, 0xffffffffffff3826}, 0x8001, 0x6e6bba, 0x1, 0x0, 0x2}, {{@in=@rand_addr=0x64010100, 0xfffffffd, 0x32}, 0xa, @in6=@empty, 0x3503, 0x4, 0x0, 0x0, 0x3}}, 0xe8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r1, 0x0, 0xd, &(0x7f0000000040)=0x6aba, 0x4) setsockopt$inet_int(r1, 0x0, 0xc, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xd}}, 0x6}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) recvmmsg(r2, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000340)=[{0x0}, {0x0}], 0x2}, 0x81}], 0x3, 0x0, 0x0) shutdown(r2, 0x1) unshare(0x22020600) socket$kcm(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) read$msr(r3, &(0x7f0000000040)=""/103, 0x67) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000300), 0x8) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000040)=@filter={'filter\x00', 0xc, 0x4, 0x2a0, 0xffffffff, 0xd0, 0xd0, 0x0, 0x98, 0xffffffff, 0x208, 0xd0, 0x208, 0x98, 0x4, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x32}, @multicast1, 0xff000000, 0x0, 'wg0\x00', 'dvmrp0\x00', {0xff}, {}, 0x33, 0x2, 0x50}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x8, 0x1, [0x4, 0x1f, 0x28, 0x10, 0x3d, 0x8, 0x2c, 0x2f, 0x14, 0x3c, 0x12, 0xf, 0x30, 0xe, 0x3e, 0x21], 0x1, 0x5}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@local, @broadcast, 0xffffff00, 0x0, 'ip6tnl0\x00', 'hsr0\x00'}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) 959.473117ms ago: executing program 3 (id=3717): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 959.293441ms ago: executing program 1 (id=3718): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00002b00630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440), &(0x7f0000000000), 0x0, 0x84ffffff}, 0x28) 872.811535ms ago: executing program 1 (id=3719): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_open_dev$MSR(0x0, 0x0, 0x0) capset(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x19, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x19, 0x80ff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x5000000}}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x0, 0x6}, @jmp={0x5, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffffc}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x2f}, 0x94) 442.867757ms ago: executing program 4 (id=3720): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061199c000000e7ff9400000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) vmsplice(r2, &(0x7f0000000880)=[{&(0x7f0000000440)="8ab042e5548e19fd9a6e15666b8f022de0fd07269e3a6a53ec06ccdafcf5a9e1b29968eb58edb659121d70278a67e2ca8f85fd3688677fdbb4e41dba3d0cd504276ab01876fa4627b01997c0aeb81458cf70b8cd83203e30ea4164a155ffa4b65bec47a18ecc646f61d6831d633297835c4a2e7d0efe628fc771", 0x7a}, {&(0x7f00000004c0)="00f4edada890da0f9e7aa2d437cd4eabdf58588c35fb65bbe8fc49e6c38bbdac24bf1e0c08d536906c26398ef76d58f96927beddee8e0988d855f1fd2f53ccf324d8e08a2f969b79cfb2f98aacb8161a566a0a8dc372d0b0d2c1a3c326fe569a59e289fded498b811aa3478bc881e07d361fca4a60c65249372779e09ce6687429f612429f7f5329139bac9d2b5ea59d20dbceee3b9552df8709e7bdccbfb6508fcccb7a310231494f3b674e0126b7286d5b7d33ecbf370bb51472799980b00e75d161209ae1a824f8271fff7e22c1ba431d7352abe60a14f13e1185cf2906e2df72ea48aa641ca483629080b979c27ac2f06fd8", 0xf4}, {&(0x7f00000005c0)="077504489ac6831a363f356b1c9e1afddf8cace86e5137a4d0c8124f466f2d07af4144a012f02e3ea9e7555cf286e143dbe83d57", 0x34}, {&(0x7f0000000600)="34617a8fb7745877092ea61fb3a8bbd30b1af6b2d1689d8774581af88673de5b8ddb1af21d2a9156cc8897393093e1c16e2bd5313428d829a60f4663e6ae5fce87216ba0b0272b64a03f637933df64b6b9955c12c32b784d7759e441b6af4a95a4d31d1312d700e5c396e5ed897c1e35bd7ea59f26bb2cec827535ad971867da95a35b84162eb2fa924badf16d5351a7265e326a59351f667eb37249352399100459725ddfcc8d245e0c003878c32d0dfc7474bda82495913b982defd87f9b359595e40d53e850d0", 0xc8}, {&(0x7f0000000700)="d74e964d9475b824a3a308405d6b22", 0xf}, {&(0x7f0000000740)="650bee0e82190ac5f11ad5a2655e6761cd8c0c75b0a5cc", 0x17}, {&(0x7f0000000780)="88a402f668f5baa9b1dcf7be4025ccab546564191928995e071e340631eba4bcfa05d59316808a2bd8363db2790e1b961b9572baa9bff8fcc64f8dcf089fc5ba6b666b023a0e6761306c4d842ebd6a243de48e0b904aa93a1c7bace089adb8fc62f40d659d082a4dbcaf23bd1bf0b1b981d54fafd53fe5021789c9abfd9e426e9b5f9349de773634355014e9b02dea2efd9d5537d971be16bd74ee85e48204773d7cadeef47c35d531255c7dfdb5b9fb71b0b5daec2ad10a02852e5084a07f4ce14e72a7add5a321d3aa1c5042ace3bae770c2a214aca43e51862462b08784ea821a529276254fbc04bde213a1d690c7786920363047b1", 0xf7}, {&(0x7f0000000980)="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", 0xfc}, {&(0x7f0000000a80)="62ef4d6cd6f5f7462bdc6a6b54e1c1ea156ee03347b88531cefad3044295ecebc13b75763db577db9aca85198789fa784579c9bd90d9a0331f08c01540e77788d9a683c87d4bba2313c04af241bb341bc92880390fb082d8f859898070a41ea4503ce5dad9479798c41110a55df6b171979893c8adcc99b0cb32e6f5fce9b890a28427263dbb0036db24b0aca3729c3497891fe4aa19a9cea19499072d45e4911dc2ac5a8ee39bffa62630dbe0d48963f1e5540388fc43f763187403c7c2ed094abf693cee090f5d25e27d2f4c229d9bb2849d5ff3e1afdcc37a6a36779e8cf07881a0", 0xe3}, {&(0x7f0000000b80)="3cc4a3c112d7675e292af33b00e9612dd66d92957fe1f943d1f3c27ac72a7d5576fc2abcbcc0369fa81d3fe0ec0326d267a7fc06c8953d5ee3471865f381b39499d3a375a8a8a863699708127e2159f79de79e3ddf31bec6da819da72951417b5cba86b17fe665fcec346aec475a5845c3244449f192a32877319e1da3ab99e1737c7385d8f15f5ff1e55d1e5505c07949342e0519fe6a40a6452e01411d98de94929a92dc81d80f0b3a71c8fa3283f4ac02b1b60061f2b1b9abaa0aa7b591dfada4f0c037b1195ce57b", 0xca}], 0xa, 0x3) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)={{0x14, 0x11c}, [@NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0x2, @sliced={0x3, [0x6, 0x4, 0x2, 0x0, 0xb6b5, 0x100, 0x8, 0x4, 0xfeff, 0x101, 0x0, 0x9, 0x8, 0xd, 0x71c, 0x1, 0x9, 0x1d6, 0x1ff, 0xc, 0x100, 0x5, 0xdf, 0x0, 0x3, 0x7, 0x2, 0x2181, 0x200, 0x8001, 0x48, 0x10, 0x9c5, 0x8000, 0x9, 0x6, 0x1, 0x0, 0x0, 0x1, 0x38, 0x7, 0x2528, 0x4, 0x1, 0xa, 0x6, 0x4], 0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) fchown(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @private=0xa010501, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @loopback, 0x0, 0x0, 'lblcr\x00', 0x0, 0x0, 0xfffffffc}, 0x2c) setsockopt$inet_sctp_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000080), 0x4) socket(0x10, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x1, 0x21, 0x0, 0x8000, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x14, r1, 0x1}, 0x14}}, 0x0) 211.298131ms ago: executing program 6 (id=3721): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x3, 0x2) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f00000000c0)={&(0x7f0000000040)=""/93, 0x5d}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000180)="831c3cbf2308e3f0852cab158e47a7ca214e6313a7879c9d079e3ade56e8473c0e211a7f9e97cf599c02cd7b18f50b24c87fde88975acdfde15cea24228ef4bd812d1a70b80ecec231bcc6db51ffdedd358fb1813a8b58ccea2e0b3bd5d0808f7e3d99185659da984e4c2d287593766daf499a984a1e0971ca953750e60a06e23cdb535361e1", 0x86}, {&(0x7f0000000240)="0b112b4546bed014fc06e764f97b179c470063e216c788fc8d2656c76b13f979f1a6a322d53366933ea4f81a49791aedafa1195b750145587e98480593567d590c0b188b8bbafab950093e90d28bdabe11c58dc465855d91897d44d73762fd9eb346c285441c505cb8305c424095fadc8766f57599687da1232c8173f74354119a356b0497d4cddd9eea646ff155be7cffcef256121d878a92236e23cb24c81dbaa2ef5514ce6b83a2c10abd3e9e07d48a024e441505f91659802295044d798a0ff02a8ac39d87054d2434a7525b03067e0cc4c4d9630d8e686edb4cfe85", 0xde}, {&(0x7f0000000340)="5aa1f2115abdeaa6f0d527fd4e9a9f421b97e2926738e6dff45b19db8dda879c594d4b40196caba8fdf0df7748", 0x2d}], 0x3, &(0x7f00000003c0)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@ssrr={0x89, 0xb, 0x8c, [@broadcast, @local]}, @lsrr={0x83, 0xf, 0x4d, [@local, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}], 0x30}, 0x4000800) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000440)=0x8, 0x4) r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000480), 0x200, 0x0) r4 = fcntl$dupfd(r3, 0x406, r2) ioctl$VIDIOC_SUBDEV_G_SELECTION(r3, 0xc040563d, &(0x7f00000004c0)={0x0, 0x0, 0x102, 0x6, {0x1000, 0x8, 0x2, 0x7fffffff}}) write$rfkill(r0, &(0x7f0000000500)={0xffff0000, 0x7, 0x3, 0x1}, 0x8) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000600)={r4, 0x0, 0x4a, 0x0, &(0x7f0000000540)="d39ebafa54b4b36f50ab4921a4420c473c8b43e130b1939b0c6ba3845bf27c1562e99c8d58510bb0893a4e69de04258e6df657ea9c6dbe338dedb730b8c5678bb5e6d96f3671c07cdc3f", 0x0, 0xe, 0x0, 0x0, 0x0, &(0x7f00000005c0)}, 0x50) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000900)={0x1, 0x0, &(0x7f00000006c0)=""/82, &(0x7f0000000740)=""/131, &(0x7f0000000800)=""/249, 0x8000000}) r5 = syz_io_uring_setup(0x69f1, &(0x7f0000000940)={0x0, 0x4d84, 0x400, 0x1, 0x3e3, 0x0, r4}, &(0x7f00000009c0), &(0x7f0000000a00)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000ec0)={0xf, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000a40)=""/9, 0x9}, {&(0x7f0000000a80)=""/179, 0xb3}, {&(0x7f0000000b40)=""/82, 0x52}, {&(0x7f0000000bc0)=""/64, 0x40}, {&(0x7f0000000c00)=""/157, 0x9d}, {&(0x7f0000000cc0)=""/14, 0xe}, {&(0x7f0000000d00)=""/243, 0xf3}], &(0x7f0000000e80)=[0x2e3e05ef, 0x1], 0x7}, 0x20) r6 = gettid() sched_setaffinity(r6, 0x8, &(0x7f0000000f00)=0x9d124c8400) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000fc0)={'wg2\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0xf, 0x2, &(0x7f0000000f40)=@raw=[@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000f80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', r7, @fallback, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001000)={0x4, 0x10, 0x0, 0x80000001}, 0x10, 0x0, r4, 0x1, &(0x7f0000001040)=[r3, r3, r0], &(0x7f0000001080)=[{0x1, 0x5, 0x10, 0x5}], 0x10, 0x7}, 0x94) get_robust_list(r6, &(0x7f00000012c0)=&(0x7f0000001280)={&(0x7f00000011c0)={&(0x7f0000001180)}, 0x0, &(0x7f0000001240)={&(0x7f0000001200)}}, &(0x7f0000001300)=0x18) bind$inet6(r4, &(0x7f0000001340)={0xa, 0x4e20, 0x0, @mcast2, 0x1}, 0x1c) syz_open_dev$MSR(&(0x7f0000001380), 0x33146a5b, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000013c0)={'bridge0\x00'}) accept$ax25(r4, &(0x7f0000001400)={{0x3, @bcast}, [@rose, @null, @netrom, @netrom, @null, @remote, @default, @bcast]}, &(0x7f0000001480)=0x48) setsockopt$MRT6_ADD_MFC_PROXY(r4, 0x29, 0xd2, &(0x7f00000014c0)={{0xa, 0x4e21, 0x6, @mcast1, 0x4}, {0xa, 0x4e22, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1}, 0xffffffffffffffff, {[0x7, 0x200, 0x0, 0x5, 0x0, 0x9, 0x2, 0x800]}}, 0x5c) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000001540), &(0x7f0000001580)=0x30) ioctl$KDSKBLED(r3, 0x4b65, 0x7) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) openat$nullb(0xffffffffffffff9c, &(0x7f00000015c0), 0x18d00, 0x0) 210.936612ms ago: executing program 1 (id=3722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x401, 0xc8000) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000005c0)=""/4096) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) removexattr(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, &(0x7f0000000400)="c7442400e4000000c744240206000000ff2c242ed89c1e0c000000440f01b2f5ffffff0f98c4660f38826606440f20c0350a000000440f22c0c744240016010000c74424020d000000ff2c242e0f2380b98c0b0000b86bc20000ba000000000f30410f01c4", 0x65}], 0x1, 0x8, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000004c0), 0x2300c0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000015c0)='ext4_sync_file_enter\x00', r3, 0x0, 0xffe}, 0xfffffffffffffda4) ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000080)={&(0x7f0000000040)=[{0x9, 0x29, 0x0, 0x0}], 0x1}) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000020000082505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0180000000000000000006241a00000809057f0340000000000904010000020d000009040101"], 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x4, 0x0, 0x0, 0x4, 0x1, 0x2}]}, {0x0, [0x0, 0x61, 0x5f, 0x5f, 0x3e]}}, 0x0, 0x2b, 0x0, 0x1, 0x9}, 0x28) syz_usb_control_io$cdc_ncm(r4, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) 210.599967ms ago: executing program 3 (id=3723): clock_adjtime(0x0, &(0x7f0000000000)={0xf7d, 0x1, 0x8, 0x8000000000000001, 0x218, 0xff, 0x8000000000000001, 0x8000, 0x800, 0x602a8319, 0x5d94, 0x3, 0x6, 0xffffffff, 0xffffffffffffffc0, 0x80000000, 0x10000, 0x3, 0x9, 0x7, 0x100000000, 0x4, 0x7dd, 0x1, 0x80000001, 0x6b91}) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='memory.numa_stat\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x2, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f00000001c0)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @in6={0xa, 0x4e24, 0x40, @mcast2}}}, 0x90) clock_adjtime(0x3, &(0x7f0000000280)={0x93, 0x2, 0x0, 0x7, 0x2, 0x0, 0x5, 0x8000000000000001, 0x0, 0xff, 0x7, 0xfffffffffffffff6, 0x6, 0x4, 0xe, 0xffff, 0x7fffffff, 0xf, 0x2, 0x0, 0x8, 0x4, 0x3, 0x1, 0x240, 0x2}) clock_adjtime(0x1, &(0x7f0000000380)={0x0, 0x2, 0x9, 0x6926, 0xe66, 0xee, 0xffffffff00000000, 0xb848, 0x18000000, 0x0, 0xcf, 0x73e, 0x8000000000000001, 0xb, 0xfff, 0x7fffffff, 0x6, 0x3, 0x8, 0x10467947, 0xffff, 0x4, 0xfff, 0x400, 0x0, 0x7}) clock_adjtime(0x1, &(0x7f0000000480)={0x3, 0xb5fa, 0x6, 0x6, 0x4, 0x4, 0xfffffffffffffff6, 0x7, 0xa9, 0x6, 0x3, 0xffffffff, 0x5, 0x8, 0x3, 0x3, 0xda15, 0x8, 0x29a0, 0x7, 0xb227, 0xd, 0x7fffffff, 0x8d8a, 0x4, 0x8000000000000000}) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000580)={r0, r0}, 0xc) r2 = openat(r0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x9) syz_genetlink_get_family_id$batadv(&(0x7f0000000600), r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000640)='./cgroup/syz1\x00', 0x1ff) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000680)={0xf0, "3f96ee0cd5e6b519d6549bcdf454090d4cb113d3db44bc3908aaa5af34eee08cb88422d153175836a5d2e0abe139ce23d744e3d0dbb1b025d177aaed5311e4865721ea383a567d15ff42a4dce5654c79c1257bb50bac62362eca662c631aa7d9fcc83c3f85a3a7cd4b926d69fd3968bec10b01724f1f98d1480571f9d508262829b543799d8cfaa26901091c8b8fe11d326b57ab580ac5a576b1d316f19182aef6b9b3a9f7ce0cb7313f4ef93a98c16861d721d98a861aa23d1a71bb47c20ee3441724e952417e8c25d1e23e65dc3eff85994cd1db319536f6dcc60664a3671010604709e746a177a6e2dec15c5cf7de"}) bind$rose(r0, &(0x7f0000000780)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @bcast}, 0x1c) openat$fb0(0xffffffffffffff9c, &(0x7f00000007c0), 0x30400, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000880)={r2, &(0x7f0000000800)="4fe56ebadd4ceb62e677a840840f04656998babf6607b61b414504fca4a0f6ae79fba382da2207f2c32808051d80fdd5703f310f", &(0x7f0000000840)=""/32}, 0x20) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000900)={0x7, "3469122cd79ecb795cdd6a5418f6c0a2893709863df4577ee4ca2e9d5d64a386", 0xffffffffffffffff}) fcntl$addseals(r4, 0x409, 0x8) mkdir(&(0x7f0000000940)='./file0\x00', 0x6a) dup2(r4, r4) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x2, &(0x7f0000ffb000/0x2000)=nil) r5 = syz_open_dev$sndctrl(&(0x7f0000000980), 0x9, 0xc6100) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0x40405515, &(0x7f00000009c0)={0x0, 0x7, 0x3f5, 0x2, 'syz1\x00', 0x2}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000a00)=0x7c1871d9113823db, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a40), 0x1c0300) ioctl$sock_qrtr_TIOCOUTQ(r0, 0x5411, &(0x7f0000000a80)) fsetxattr$trusted_overlay_upper(r3, &(0x7f0000000ac0), &(0x7f0000000b00)={0x0, 0xfb, 0x5c, 0x0, 0x5b, "eabcdf0fc261c57f5832e0003ca7304e", "5b17b46776c27b5629adfe780e14c858cc2495253459b6a3a5d8e62f29cd68da76eafbc62f3a09744eabc71da5aae3506bc32f016479832751c3f2297582b81ed7e482c2d4f54a"}, 0x5c, 0x3) r6 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000b80), 0x34ca86f6e7c45450, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000bc0)={0x10002, 0x7, 0x2000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000001900)={0x14, &(0x7f0000001880)={0x0, 0x30, 0x1d, {0x1d, 0x30, "97862e1f25e169e1f3dbc0e9f08bfe7040bbc689fbba6c1bdba5a2"}}, &(0x7f00000018c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001bc0)={0x44, &(0x7f0000001940)={0x20, 0xf, 0xb8, "1dd1c0ab0c9952311824a2e64800ff8d46aacc748ce811b4c122eaae13e859e3e23c0dfbe64bb41b77e5392014bbc4e58364dfdbdce127c3009d800dbd161d1d2ffb0a5e6b1cd61342a5b2f46a5cfe05a659783331f95d6d3602a273dfbf1dcc5550454bf0156899d63caab21b53f32ed00e5f81e928b5993b5e14d71b9b6e22c186c79084d5e310fc21866df72cf5045a477c4685964c6cdfeeed691ecfb62056f4b3fbfab8c4c2548ca0561ab029eb8e04334a69ce9183"}, &(0x7f0000001a00)={0x0, 0xa, 0x1, 0xd7}, &(0x7f0000001a40)={0x0, 0x8, 0x1, 0xd}, &(0x7f0000001a80)={0x20, 0x80, 0x1c, {0x5, 0x2, 0x1, 0x1, 0xf42a, 0x9, 0x4, 0x80000000, 0x800, 0x9, 0x1ff, 0x8}}, &(0x7f0000001ac0)={0x20, 0x85, 0x4, 0x40}, &(0x7f0000001b00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001b40)={0x20, 0x87, 0x2, 0x80}, &(0x7f0000001b80)={0x20, 0x89, 0x2}}) 0s ago: executing program 0 (id=3724): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_setup(0x4a86, 0x0) r0 = socket(0x1e, 0x4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$l2tp(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) syz_open_dev$MSR(0x0, 0x2, 0x0) syz_open_dev$video4linux(0x0, 0x401, 0x0) syz_kvm_add_vcpu$x86(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r2) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r5, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}, 0x1, 0x0, 0x5f00}, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, 0x0, 0x0) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') kernel console output (not intermixed with test programs): 7136] RBP: 00007fe3a6a75090 R08: 0000200000000500 R09: 0000000000000000 [ 1336.482179][T17136] R10: 0000000000800009 R11: 0000000000000246 R12: 0000000000000001 [ 1336.482192][T17136] R13: 0000000000000000 R14: 00007fe3a5db5fa0 R15: 00007ffd1c949ad8 [ 1336.482224][T17136] [ 1336.549389][T16968] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1336.566328][ T5966] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1336.588404][T17136] smb3: Unexpected value for 'rdma' [ 1336.840384][T16968] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1336.848336][ T5966] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1337.001875][ T5966] usb 7-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 1337.003122][T16968] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1337.106775][ T5966] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1337.272574][ T5966] usb 7-1: config 0 descriptor?? [ 1337.302320][T16968] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1337.771973][ T5966] usbhid 7-1:0.0: can't add hid device: -71 [ 1337.786198][ T5966] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1337.841414][ T5966] usb 7-1: USB disconnect, device number 27 [ 1337.984875][T16968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1338.037744][T16968] 8021q: adding VLAN 0 to HW filter on device team0 [ 1338.066707][T14194] bridge0: port 1(bridge_slave_0) entered blocking state [ 1338.073956][T14194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1338.129632][T17163] netlink: 184 bytes leftover after parsing attributes in process `syz.3.3101'. [ 1338.150410][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1338.157916][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1339.516274][T17175] xt_socket: unknown flags 0xd0 [ 1340.801793][T17178] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3107'. [ 1341.950352][T17190] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3108'. [ 1341.959612][T17190] netlink: 660 bytes leftover after parsing attributes in process `syz.6.3108'. [ 1342.991850][T16968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1343.137550][T17202] trusted_key: encrypted_key: insufficient parameters specified [ 1343.248654][T17204] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3112'. [ 1343.271727][T16968] veth0_vlan: entered promiscuous mode [ 1343.278041][T17204] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3112'. [ 1343.330322][T16968] veth1_vlan: entered promiscuous mode [ 1343.864192][ T5918] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1343.922861][T16968] veth0_macvtap: entered promiscuous mode [ 1343.957376][T16968] veth1_macvtap: entered promiscuous mode [ 1344.046088][ T5918] usb 7-1: Using ep0 maxpacket: 8 [ 1344.059764][T16968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1344.068195][T17209] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3113'. [ 1344.097577][ T5918] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1344.133704][T16968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1344.136238][ T5918] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1344.162823][ T5918] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1344.190778][ T5918] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1344.209905][T16968] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.225964][ T5918] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.255240][ T5918] usb 7-1: Product: syz [ 1344.260931][T16968] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.268503][ T5918] usb 7-1: Manufacturer: syz [ 1344.284640][T16968] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.285645][ T5918] usb 7-1: SerialNumber: syz [ 1344.311600][T16968] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.445233][ T30] audit: type=1804 audit(1754172977.059:200): pid=17222 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.3115" name="/newroot/7/file0" dev="tmpfs" ino=57 res=1 errno=0 [ 1344.473844][T17222] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 1344.482881][T17222] ref_ctr increment failed for inode: 0x39 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88807b443200 [ 1344.898236][T17225] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 1344.907714][ T30] audit: type=1804 audit(1754172977.519:201): pid=17225 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.3116" name="file0" dev="tmpfs" ino=3374 res=1 errno=0 [ 1344.984952][T17225] ref_ctr increment failed for inode: 0xd2e offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88802a383200 [ 1345.355087][T17229] (unnamed net_device) (uninitialized): (slave wg2): Device is not bonding slave [ 1345.375138][T17229] (unnamed net_device) (uninitialized): option active_slave: invalid value (wg2) [ 1345.560800][T14197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.584222][T14197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.679962][T14197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.692060][T14197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.766809][T17200] loop0: Can't mount, would change RO state [ 1345.980350][ T5918] cdc_ncm 7-1:1.0: failed GET_NTB_PARAMETERS [ 1346.006275][ T5918] cdc_ncm 7-1:1.0: bind() failure [ 1346.337911][ T5918] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 1346.759042][ T5918] cdc_ncm 7-1:1.1: bind() failure [ 1346.789498][ T5918] usb 7-1: USB disconnect, device number 28 [ 1346.903522][T17249] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3125'. [ 1347.104987][T17251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3126'. [ 1347.136069][T17251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1347.143861][T17251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1347.194189][T17251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1347.255972][T17251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1347.843464][ T5854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1347.857983][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1347.870705][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1347.880984][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1347.890841][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1348.086609][T17270] netlink: 184 bytes leftover after parsing attributes in process `syz.6.3132'. [ 1348.293965][ T1164] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.182940][ T5854] Bluetooth: hci4: command 0x0405 tx timeout [ 1349.384187][T17273] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3133'. [ 1349.743729][ T1164] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1349.792364][T17281] gtp0: entered promiscuous mode [ 1349.885941][T17281] gtp0: entered allmulticast mode [ 1349.903325][T17273] overlayfs: failed to clone upperpath [ 1349.939561][ T5854] Bluetooth: hci0: command tx timeout [ 1349.957747][T17274] overlayfs: failed to clone upperpath [ 1350.131074][ T1164] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.911632][ T1164] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1351.675537][ T5918] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1351.815129][T17265] chnl_net:caif_netlink_parms(): no params data found [ 1351.856342][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 1351.866037][ T5918] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.891863][T17313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3145'. [ 1351.902015][T17313] netlink: 660 bytes leftover after parsing attributes in process `syz.3.3145'. [ 1351.912521][ T5918] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1351.925964][ T5918] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1351.944099][ T5918] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1351.954056][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.962706][ T5918] usb 5-1: Product: syz [ 1351.967745][ T5918] usb 5-1: Manufacturer: syz [ 1351.973035][ T5918] usb 5-1: SerialNumber: syz [ 1352.006768][ T5854] Bluetooth: hci0: command tx timeout [ 1352.127720][ T1164] bridge_slave_1: left allmulticast mode [ 1352.134280][ T1164] bridge_slave_1: left promiscuous mode [ 1352.140276][ T1164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.153474][ T1164] bridge_slave_0: left allmulticast mode [ 1352.160030][ T1164] bridge_slave_0: left promiscuous mode [ 1352.167973][ T1164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1352.845240][ T5918] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 1352.873071][ T5918] cdc_ncm 5-1:1.0: bind() failure [ 1352.932532][ T5918] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1352.954051][ T5918] cdc_ncm 5-1:1.1: bind() failure [ 1352.967082][ T5918] usb 5-1: USB disconnect, device number 52 [ 1353.174673][T17330] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3149'. [ 1354.087133][ T5854] Bluetooth: hci0: command tx timeout [ 1354.267076][T17337] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3150'. [ 1354.782397][ T1164] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1356.145215][ T1164] bond0 (unregistering): (slave 1@): Releasing backup interface [ 1356.165003][ T1164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1356.174336][T15712] Bluetooth: hci0: command tx timeout [ 1356.190817][ T1164] bond0 (unregistering): Released all slaves [ 1356.212802][T17354] netlink: 'syz.4.3157': attribute type 2 has an invalid length. [ 1356.220996][T17354] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3157'. [ 1356.968689][T17265] bridge0: port 1(bridge_slave_0) entered blocking state [ 1357.005275][T17265] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.016176][T17265] bridge_slave_0: entered allmulticast mode [ 1357.043757][T17265] bridge_slave_0: entered promiscuous mode [ 1357.070144][T17356] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3157'. [ 1357.085527][T17356] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3157'. [ 1357.099417][ T1164] : left promiscuous mode [ 1357.156158][ T30] audit: type=1326 audit(1754172989.759:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17360 comm="syz.0.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01158eb69 code=0x7ffc0000 [ 1357.188210][ T30] audit: type=1326 audit(1754172989.759:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17360 comm="syz.0.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01158eb69 code=0x7ffc0000 [ 1357.282841][ T1164] tipc: Disabling bearer [ 1357.290654][ T1164] tipc: Left network mode [ 1357.295565][T17265] bridge0: port 2(bridge_slave_1) entered blocking state [ 1357.304590][T17265] bridge0: port 2(bridge_slave_1) entered disabled state [ 1357.312069][ T30] audit: type=1326 audit(1754172989.769:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17360 comm="syz.0.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff01158eb69 code=0x7ffc0000 [ 1357.386489][T17265] bridge_slave_1: entered allmulticast mode [ 1357.415341][T17265] bridge_slave_1: entered promiscuous mode [ 1357.415362][ T30] audit: type=1326 audit(1754172989.769:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17360 comm="syz.0.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01158eb69 code=0x7ffc0000 [ 1357.611484][ T30] audit: type=1326 audit(1754172989.769:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17360 comm="syz.0.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff01158eb69 code=0x7ffc0000 [ 1357.752162][ T30] audit: type=1326 audit(1754172989.769:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17360 comm="syz.0.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7ff01158eb69 code=0x7ffc0000 [ 1357.823905][ T30] audit: type=1326 audit(1754172989.779:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17360 comm="syz.0.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff01152ad69 code=0x7ffc0000 [ 1357.841448][T17265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1357.956149][ T30] audit: type=1326 audit(1754172989.779:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17360 comm="syz.0.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff01152ad69 code=0x7ffc0000 [ 1358.142699][ T30] audit: type=1326 audit(1754172989.779:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17360 comm="syz.0.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff01152ad69 code=0x7ffc0000 [ 1358.226170][ T30] audit: type=1326 audit(1754172989.779:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17360 comm="syz.0.3159" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff01152ad69 code=0x7ffc0000 [ 1358.260988][T15712] Bluetooth: hci0: command 0x0405 tx timeout [ 1358.341063][T17265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1359.569479][T17265] team0: Port device team_slave_0 added [ 1359.620857][T17265] team0: Port device team_slave_1 added [ 1359.662181][ T1164] : left promiscuous mode [ 1359.696909][ T1164] team0: left promiscuous mode [ 1360.184182][ T1164] team_slave_0: left promiscuous mode [ 1360.202745][ T1164] team_slave_1: left promiscuous mode [ 1360.239026][ T1164] hsr_slave_0: left promiscuous mode [ 1360.260260][ T1164] hsr_slave_1: left promiscuous mode [ 1360.304527][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1360.330763][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1360.361791][ T1164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1360.399459][ T1164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1360.511505][ T1164] veth1_macvtap: left promiscuous mode [ 1360.537010][ T1164] veth0_macvtap: left promiscuous mode [ 1360.566988][ T1164] veth1_vlan: left promiscuous mode [ 1360.585720][ T1164] veth0_vlan: left promiscuous mode [ 1360.671644][T17410] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3176'. [ 1360.691538][T17410] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3176'. [ 1361.827421][ T1164] team0 (unregistering): Port device team_slave_1 removed [ 1361.915160][ T1164] team0 (unregistering): Port device team_slave_0 removed [ 1362.019563][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.628401][T17265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1362.635601][T17265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1362.694993][T17265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1362.805602][T17265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1362.829959][T17265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1362.878711][T17265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1363.431098][T17265] hsr_slave_0: entered promiscuous mode [ 1363.610175][T17265] hsr_slave_1: entered promiscuous mode [ 1363.621850][T17265] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1363.631000][T17265] Cannot create hsr debugfs directory [ 1363.852743][ T1164] IPVS: stop unused estimator thread 0... [ 1366.046957][T17463] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1366.138775][T17472] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3195'. [ 1367.342290][T17489] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3200'. [ 1368.714443][T17265] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1368.755049][T17265] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1369.788807][T17265] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1369.900827][T17265] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1370.982353][T17265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1371.009956][ T5854] Bluetooth: hci1: unexpected event for opcode 0x0403 [ 1371.057022][T17265] 8021q: adding VLAN 0 to HW filter on device team0 [ 1371.074271][T14242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.081477][T14242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1371.187523][T14242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.195165][T14242] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1371.324223][T17539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3213'. [ 1371.334238][T17539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3213'. [ 1371.447526][ T30] kauditd_printk_skb: 618 callbacks suppressed [ 1371.447550][ T30] audit: type=1804 audit(1754173004.069:830): pid=17541 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.3212" name="/newroot/441/file0" dev="tmpfs" ino=2344 res=1 errno=0 [ 1371.475937][ C1] vkms_vblank_simulate: vblank timer overrun [ 1372.669753][T17557] netlink: del zone limit has 4 unknown bytes [ 1372.829012][T17561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3219'. [ 1372.838036][T17265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1372.868934][T17561] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3219'. [ 1373.328517][ T5971] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1373.462489][T17561] dummy0: entered promiscuous mode [ 1373.499841][T17561] team0: entered promiscuous mode [ 1373.511844][T17561] team_slave_0: entered promiscuous mode [ 1373.528044][T17561] team_slave_1: entered promiscuous mode [ 1373.539173][T17561] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1373.549252][T17561] Cannot create hsr debugfs directory [ 1373.646153][ T5971] usb 1-1: Using ep0 maxpacket: 8 [ 1373.665157][ T5971] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.673091][T17265] veth0_vlan: entered promiscuous mode [ 1373.707311][ T5971] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1373.719843][T17265] veth1_vlan: entered promiscuous mode [ 1373.751155][ T5971] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1373.754128][T17265] veth0_macvtap: entered promiscuous mode [ 1373.780405][ T5971] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1373.806624][T17265] veth1_macvtap: entered promiscuous mode [ 1373.823388][ T5971] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.843967][T17265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1373.852183][ T5971] usb 1-1: Product: syz [ 1373.861463][ T5971] usb 1-1: Manufacturer: syz [ 1373.879108][T17265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1373.885839][ T5971] usb 1-1: SerialNumber: syz [ 1373.922849][T17265] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.955210][T17265] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.144831][T17265] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.154501][T17265] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.345068][ T30] audit: type=1804 audit(1754173007.959:831): pid=17578 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.3226" name="/newroot/35/file0" dev="tmpfs" ino=203 res=1 errno=0 [ 1375.371738][ T5971] cdc_ncm 1-1:1.0: bind() failure [ 1375.396586][T17581] gtp0: entered promiscuous mode [ 1375.428204][ T5971] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 1375.436487][T17581] gtp0: entered allmulticast mode [ 1375.441802][ T5971] cdc_ncm 1-1:1.1: bind() failure [ 1375.490959][ T5971] usb 1-1: USB disconnect, device number 47 [ 1376.367798][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1376.396682][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1376.485592][ T6027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1376.494627][ T6027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1376.505993][T17593] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1376.626886][T17607] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3235'. [ 1376.636067][T17607] netlink: 660 bytes leftover after parsing attributes in process `syz.4.3235'. [ 1376.837876][T17593] usb 7-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 1376.847320][T17593] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1376.863789][T17593] usb 7-1: config 0 descriptor?? [ 1376.907220][T17593] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 1377.575933][T17593] gspca_sunplus: reg_w_riv err -110 [ 1377.581485][T17593] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 1379.386307][T17593] usb 7-1: USB disconnect, device number 29 [ 1380.256492][T17630] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3242'. [ 1382.667042][T15712] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1382.679537][T15712] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1382.688696][T15712] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1382.699085][T15712] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1382.709848][T15712] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1383.476211][ T30] audit: type=1804 audit(1754173016.089:832): pid=17655 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.1.3249" name="/newroot/3/file0" dev="tmpfs" ino=33 res=1 errno=0 [ 1383.635943][T17620] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1383.670717][ T30] audit: type=1326 audit(1754173016.269:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17657 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a5b8eb69 code=0x7ffc0000 [ 1383.796310][T17620] usb 1-1: Using ep0 maxpacket: 32 [ 1383.799298][ T30] audit: type=1326 audit(1754173016.269:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17657 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a5b8eb69 code=0x7ffc0000 [ 1383.803768][T17620] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1383.959225][T17658] sctp: [Deprecated]: syz.4.3250 (pid 17658) Use of int in maxseg socket option. [ 1383.959225][T17658] Use struct sctp_assoc_value instead [ 1384.071202][T17620] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1384.088261][T16949] IPVS: starting estimator thread 0... [ 1384.186449][T17620] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1384.196601][T17644] chnl_net:caif_netlink_parms(): no params data found [ 1384.196753][ T30] audit: type=1326 audit(1754173016.279:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17657 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe3a5b8eb69 code=0x7ffc0000 [ 1384.226309][T17620] usb 1-1: Product: syz [ 1384.230904][T17620] usb 1-1: Manufacturer: syz [ 1384.236599][T17620] usb 1-1: SerialNumber: syz [ 1384.299001][T17665] IPVS: using max 25 ests per chain, 60000 per kthread [ 1384.302739][ T30] audit: type=1326 audit(1754173016.279:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17657 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a5b8eb69 code=0x7ffc0000 [ 1384.549673][T17620] usb 1-1: config 0 descriptor?? [ 1384.597969][T17647] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1384.617527][T17620] hub 1-1:0.0: bad descriptor, ignoring hub [ 1384.623553][T17620] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1384.635722][ T30] audit: type=1326 audit(1754173016.279:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17657 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fe3a5b8eb69 code=0x7ffc0000 [ 1384.659213][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1384.702438][ T30] audit: type=1326 audit(1754173016.279:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17657 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a5b8eb69 code=0x7ffc0000 [ 1384.727410][ T30] audit: type=1326 audit(1754173016.279:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17657 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a5b8eb69 code=0x7ffc0000 [ 1384.758526][ T30] audit: type=1326 audit(1754173016.319:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17657 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe3a5b8eb69 code=0x7ffc0000 [ 1384.787158][ T30] audit: type=1326 audit(1754173016.509:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17657 comm="syz.4.3250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a5b8eb69 code=0x7ffc0000 [ 1384.816335][T15712] Bluetooth: hci3: command tx timeout [ 1385.126395][T17593] usb 1-1: USB disconnect, device number 48 [ 1385.404100][T17680] netlink: 'syz.6.3254': attribute type 1 has an invalid length. [ 1385.636436][T17593] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1386.032636][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1386.116251][T17644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.166104][T17593] usb 1-1: Using ep0 maxpacket: 32 [ 1386.903063][T15712] Bluetooth: hci3: command tx timeout [ 1386.904836][T17644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1386.917296][T17644] bridge_slave_0: entered allmulticast mode [ 1386.928257][T17644] bridge_slave_0: entered promiscuous mode [ 1386.937794][T17644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.945177][T17644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1386.954553][T17593] usb 1-1: device descriptor read/all, error -71 [ 1386.963493][T17644] bridge_slave_1: entered allmulticast mode [ 1386.974758][T17644] bridge_slave_1: entered promiscuous mode [ 1387.056123][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1387.387128][T17644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1387.466989][T17695] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3258'. [ 1387.480158][T17695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3258'. [ 1388.022336][T17644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1388.087725][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1388.823122][T17644] team0: Port device team_slave_0 added [ 1388.892313][T17593] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1388.952525][ T5169] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1388.968571][T15712] Bluetooth: hci3: command tx timeout [ 1388.979260][T17644] team0: Port device team_slave_1 added [ 1389.170190][ T5169] usb 1-1: Using ep0 maxpacket: 16 [ 1389.278151][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1389.313176][ T5169] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1389.379930][ T5169] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1389.467891][ T5169] usb 1-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1389.524581][ T5169] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.551978][ T5169] usb 1-1: config 0 descriptor?? [ 1389.824539][T17644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1389.845618][T17644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.374986][T17644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1390.393587][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1390.428692][T17644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1390.435754][T17644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1390.439544][ T5169] playstation 0003:054C:05C4.0011: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.0-1/input0 [ 1390.489791][T17644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1390.581311][ T5169] playstation 0003:054C:05C4.0011: Failed to retrieve feature with reportID 18: -71 [ 1390.610548][ T5169] playstation 0003:054C:05C4.0011: Failed to retrieve DualShock4 pairing info: -71 [ 1390.624888][ T5169] playstation 0003:054C:05C4.0011: Failed to get MAC address from DualShock4 [ 1390.634972][ T5169] playstation 0003:054C:05C4.0011: Failed to create dualshock4. [ 1390.680188][ T5169] playstation 0003:054C:05C4.0011: probe with driver playstation failed with error -71 [ 1390.695245][ T5169] usb 1-1: USB disconnect, device number 51 [ 1390.775343][T17728] netlink: 500 bytes leftover after parsing attributes in process `syz.4.3267'. [ 1390.806419][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1391.125129][T15712] Bluetooth: hci3: command tx timeout [ 1391.447509][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1391.842916][T17644] hsr_slave_0: entered promiscuous mode [ 1391.873896][T17644] hsr_slave_1: entered promiscuous mode [ 1391.893719][T17644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1391.901649][T17644] Cannot create hsr debugfs directory [ 1392.566546][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1393.211647][ T30] kauditd_printk_skb: 32 callbacks suppressed [ 1393.211668][ T30] audit: type=1804 audit(1754173025.829:874): pid=17748 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.3272" name="/newroot/26/file0" dev="tmpfs" ino=160 res=1 errno=0 [ 1393.623307][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1394.125182][T17644] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.143421][T17644] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 50994 - 0 [ 1394.163442][T17644] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 35513 - 0 [ 1394.691801][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1394.852230][T17644] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.864228][T17644] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 50994 - 0 [ 1394.880456][T17644] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 35513 - 0 [ 1395.158729][T17771] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3280'. [ 1395.172127][T17644] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1395.183367][T17644] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 50994 - 0 [ 1395.198308][T17644] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 35513 - 0 [ 1395.349768][T17775] FAULT_INJECTION: forcing a failure. [ 1395.349768][T17775] name failslab, interval 1, probability 0, space 0, times 0 [ 1395.364691][T17775] CPU: 1 UID: 0 PID: 17775 Comm: syz.4.3281 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1395.364719][T17775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1395.364732][T17775] Call Trace: [ 1395.364741][T17775] [ 1395.364750][T17775] dump_stack_lvl+0x189/0x250 [ 1395.364778][T17775] ? __pfx____ratelimit+0x10/0x10 [ 1395.364801][T17775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1395.364833][T17775] ? __pfx__printk+0x10/0x10 [ 1395.364866][T17775] ? __pfx___might_resched+0x10/0x10 [ 1395.364888][T17775] ? fs_reclaim_acquire+0x7d/0x100 [ 1395.364918][T17775] should_fail_ex+0x414/0x560 [ 1395.364946][T17775] should_failslab+0xa8/0x100 [ 1395.364972][T17775] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1395.364991][T17775] ? getname_flags+0xb8/0x540 [ 1395.365021][T17775] getname_flags+0xb8/0x540 [ 1395.365050][T17775] do_sys_openat2+0xbc/0x1c0 [ 1395.365080][T17775] ? __pfx_do_sys_openat2+0x10/0x10 [ 1395.365108][T17775] ? ksys_write+0x22a/0x250 [ 1395.365127][T17775] ? __pfx_ksys_write+0x10/0x10 [ 1395.365139][T17775] ? rcu_is_watching+0x15/0xb0 [ 1395.365160][T17775] __x64_sys_openat+0x138/0x170 [ 1395.365185][T17775] do_syscall_64+0xfa/0x3b0 [ 1395.365204][T17775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.365219][T17775] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1395.365234][T17775] ? clear_bhb_loop+0x60/0xb0 [ 1395.365253][T17775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.365268][T17775] RIP: 0033:0x7fe3a5b8d4d0 [ 1395.365283][T17775] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1395.365296][T17775] RSP: 002b:00007fe3a6a32b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1395.365314][T17775] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe3a5b8d4d0 [ 1395.365326][T17775] RDX: 0000000000000002 RSI: 00007fe3a6a32c10 RDI: 00000000ffffff9c [ 1395.365335][T17775] RBP: 00007fe3a6a32c10 R08: 0000000000000000 R09: 00007fe3a6a32987 [ 1395.365346][T17775] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1395.365355][T17775] R13: 0000000000000000 R14: 00007fe3a5db6160 R15: 00007ffd1c949ad8 [ 1395.365380][T17775] [ 1396.077510][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1397.148975][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1397.847133][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1397.967879][T17644] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1398.007877][T17644] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1398.038925][T17644] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1398.073332][T17644] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1398.262490][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1399.036264][T16949] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1399.048221][T17593] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1399.286780][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1400.042668][T17644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1400.241848][T17644] 8021q: adding VLAN 0 to HW filter on device team0 [ 1400.283671][T14191] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.290957][T14191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1400.833113][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1400.881555][T14191] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.888842][T14191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1402.112559][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1403.128911][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1403.203006][T17859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3302'. [ 1404.891678][T12547] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1405.059959][T17877] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3305'. [ 1405.214291][T15712] Bluetooth: hci3: command 0x0405 tx timeout [ 1406.243904][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1406.984384][T17644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1407.075465][T17644] veth0_vlan: entered promiscuous mode [ 1407.172719][T17882] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3307'. [ 1407.182520][T17882] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3307'. [ 1407.192748][T17882] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3307'. [ 1407.249876][T17644] veth1_vlan: entered promiscuous mode [ 1407.646799][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1407.837086][T17888] gtp1: entered promiscuous mode [ 1407.846130][T17888] gtp1: entered allmulticast mode [ 1407.884715][T17644] veth0_macvtap: entered promiscuous mode [ 1407.922686][T17644] veth1_macvtap: entered promiscuous mode [ 1408.495690][T16949] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1408.587916][T17644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1408.602607][T17644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1408.645224][T17644] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.654716][T17896] random: crng reseeded on system resumption [ 1408.670256][T17644] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.680051][T17644] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.697392][T17644] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1408.727005][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1409.864202][T14197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1409.878350][T14197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1409.889717][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1410.397428][T16949] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1410.524416][T14235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1410.561547][T14235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1410.656344][T16949] usb 2-1: Using ep0 maxpacket: 32 [ 1410.709045][T16949] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1410.807537][T16949] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 1410.908924][T16949] usb 2-1: language id specifier not provided by device, defaulting to English [ 1410.941301][T16949] usb 2-1: New USB device found, idVendor=3275, idProduct=0085, bcdDevice=f7.29 [ 1410.981645][T16949] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.023729][T16949] usb 2-1: Product: syz [ 1411.037067][T17923] netlink: 'syz.3.3238': attribute type 3 has an invalid length. [ 1411.045512][T16949] usb 2-1: Manufacturer: 񷟗è [ 1411.073097][T16949] usb 2-1: SerialNumber: syz [ 1411.086956][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1411.893533][T16949] usb 2-1: USB disconnect, device number 42 [ 1411.934182][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1412.558683][T17932] binder: BINDER_SET_CONTEXT_MGR already set [ 1412.564719][T17932] binder: 17930:17932 ioctl 4018620d 200000000040 returned -16 [ 1413.067188][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1413.123494][T17929] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3324'. [ 1414.086807][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1414.993634][T17953] FAULT_INJECTION: forcing a failure. [ 1414.993634][T17953] name failslab, interval 1, probability 0, space 0, times 0 [ 1415.017434][T17953] CPU: 0 UID: 0 PID: 17953 Comm: syz.1.3328 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1415.017465][T17953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1415.017478][T17953] Call Trace: [ 1415.017487][T17953] [ 1415.017497][T17953] dump_stack_lvl+0x189/0x250 [ 1415.017526][T17953] ? __pfx____ratelimit+0x10/0x10 [ 1415.017549][T17953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1415.017571][T17953] ? __pfx__printk+0x10/0x10 [ 1415.017608][T17953] ? __pfx___might_resched+0x10/0x10 [ 1415.017631][T17953] ? fs_reclaim_acquire+0x7d/0x100 [ 1415.017660][T17953] should_fail_ex+0x414/0x560 [ 1415.017688][T17953] should_failslab+0xa8/0x100 [ 1415.017713][T17953] __kmalloc_noprof+0xcb/0x4f0 [ 1415.017732][T17953] ? tomoyo_encode+0x28b/0x550 [ 1415.017761][T17953] tomoyo_encode+0x28b/0x550 [ 1415.017790][T17953] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1415.017825][T17953] ? tomoyo_mount_permission+0x27a/0x970 [ 1415.017848][T17953] tomoyo_mount_permission+0x377/0x970 [ 1415.017873][T17953] ? tomoyo_mount_permission+0x27a/0x970 [ 1415.017895][T17953] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1415.017980][T17953] security_sb_mount+0xec/0x350 [ 1415.018009][T17953] path_mount+0xbc/0xfe0 [ 1415.018027][T17953] ? user_path_at+0x44/0x60 [ 1415.018048][T17953] ? kmem_cache_free+0x18f/0x400 [ 1415.018076][T17953] __se_sys_mount+0x317/0x410 [ 1415.018103][T17953] ? __pfx___se_sys_mount+0x10/0x10 [ 1415.018120][T17953] ? rcu_is_watching+0x15/0xb0 [ 1415.018145][T17953] ? do_syscall_64+0xbe/0x3b0 [ 1415.018163][T17953] ? __x64_sys_mount+0x20/0xc0 [ 1415.018186][T17953] do_syscall_64+0xfa/0x3b0 [ 1415.018204][T17953] ? lockdep_hardirqs_on+0x9c/0x150 [ 1415.018224][T17953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.018242][T17953] ? clear_bhb_loop+0x60/0xb0 [ 1415.018264][T17953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.018281][T17953] RIP: 0033:0x7f73fc18eb69 [ 1415.018299][T17953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1415.018316][T17953] RSP: 002b:00007f73fd00e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1415.018347][T17953] RAX: ffffffffffffffda RBX: 00007f73fc3b5fa0 RCX: 00007f73fc18eb69 [ 1415.018362][T17953] RDX: 0000200000000040 RSI: 0000200000000540 RDI: 0000000000000000 [ 1415.018375][T17953] RBP: 00007f73fd00e090 R08: 0000200000000500 R09: 0000000000000000 [ 1415.018387][T17953] R10: 0000000000800009 R11: 0000000000000246 R12: 0000000000000002 [ 1415.018398][T17953] R13: 0000000000000000 R14: 00007f73fc3b5fa0 R15: 00007ffceafccc98 [ 1415.018431][T17953] [ 1415.018480][T17953] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1415.293380][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1416.326747][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1416.629485][T17968] netlink: 'syz.4.3333': attribute type 3 has an invalid length. [ 1416.741329][T17970] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3334'. [ 1417.368256][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1417.695523][T17593] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1418.310241][T16949] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1418.327994][T17593] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1418.413373][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1418.490635][T16949] usb 4-1: Using ep0 maxpacket: 8 [ 1418.503609][T17999] netlink: 'syz.0.3342': attribute type 10 has an invalid length. [ 1418.512516][T17999] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3342'. [ 1418.521896][T18000] random: crng reseeded on system resumption [ 1418.531236][T17999] dummy0: entered promiscuous mode [ 1418.550401][T17999] bridge0: port 3(dummy0) entered blocking state [ 1418.559016][T17999] bridge0: port 3(dummy0) entered disabled state [ 1418.574447][T17999] dummy0: entered allmulticast mode [ 1418.595391][T17999] bridge0: port 3(dummy0) entered blocking state [ 1418.602653][T17999] bridge0: port 3(dummy0) entered forwarding state [ 1418.967887][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1418.968109][T16949] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1419.091458][T16949] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1419.140582][T16949] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1419.256350][T16949] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1419.294988][T16949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1419.307666][T16949] usb 4-1: Product: syz [ 1419.325652][T16949] usb 4-1: Manufacturer: syz [ 1419.338204][T16949] usb 4-1: SerialNumber: syz [ 1419.353453][T18006] netlink: 'syz.6.3344': attribute type 11 has an invalid length. [ 1419.418531][T18008] netlink: 'syz.0.3345': attribute type 3 has an invalid length. [ 1419.446445][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1420.089459][T16949] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 1420.095875][T16949] cdc_ncm 4-1:1.0: bind() failure [ 1420.270824][T16949] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1420.286334][T16949] cdc_ncm 4-1:1.1: bind() failure [ 1420.375231][T18015] tipc: Enabling of bearer rejected, already enabled [ 1421.077594][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1421.130065][T16949] usb 4-1: USB disconnect, device number 54 [ 1422.096193][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1422.783472][T18033] No control pipe specified [ 1422.877983][T18037] nbd: must specify at least one socket [ 1423.860046][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.904836][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1424.050291][T18045] netlink: 'syz.3.3356': attribute type 3 has an invalid length. [ 1424.166477][T18047] netlink: 'syz.4.3357': attribute type 5 has an invalid length. [ 1424.252913][T18049] 9pnet: p9_errstr2errno: server reported unknown error @ [ 1424.312995][T18049] netlink: 'syz.3.3359': attribute type 1 has an invalid length. [ 1424.514838][T18049] bridge1: entered promiscuous mode [ 1424.546159][T18049] bridge1: entered allmulticast mode [ 1425.378588][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1425.976324][ T5854] Bluetooth: hci5: command 0x0406 tx timeout [ 1426.455280][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1427.006519][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1427.288233][ T9117] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1427.353937][T18079] netlink: 'syz.1.3369': attribute type 3 has an invalid length. [ 1428.086731][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1429.606626][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1429.764833][T18096] FAT-fs (nullb0): bogus number of reserved sectors [ 1429.772265][T18096] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 1429.853382][ T9117] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1430.175983][ T30] audit: type=1804 audit(1754173062.779:875): pid=18098 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.3372" name="/newroot/474/file0" dev="tmpfs" ino=2512 res=1 errno=0 [ 1430.476495][T18103] Cannot find add_set index 0 as target [ 1430.648704][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1431.686814][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1432.661761][ T9117] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1432.744843][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1432.885547][T18113] bridge0: port 2(bridge_slave_1) entered disabled state [ 1432.893285][T18113] bridge0: port 1(bridge_slave_0) entered disabled state [ 1432.905172][ T9117] usb 2-1: Using ep0 maxpacket: 32 [ 1432.915263][T18113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3379'. [ 1432.930204][ T9117] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1432.946189][ T9117] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1432.954370][ T9117] usb 2-1: can't read configurations, error -71 [ 1432.976442][T18113] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3379'. [ 1433.113543][T18118] FAULT_INJECTION: forcing a failure. [ 1433.113543][T18118] name failslab, interval 1, probability 0, space 0, times 0 [ 1433.132874][T18118] CPU: 1 UID: 0 PID: 18118 Comm: syz.6.3381 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1433.132905][T18118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1433.132918][T18118] Call Trace: [ 1433.132927][T18118] [ 1433.132936][T18118] dump_stack_lvl+0x189/0x250 [ 1433.132967][T18118] ? __pfx____ratelimit+0x10/0x10 [ 1433.132991][T18118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1433.133013][T18118] ? __pfx__printk+0x10/0x10 [ 1433.133046][T18118] ? __pfx___might_resched+0x10/0x10 [ 1433.133066][T18118] ? fs_reclaim_acquire+0x7d/0x100 [ 1433.133096][T18118] should_fail_ex+0x414/0x560 [ 1433.133122][T18118] should_failslab+0xa8/0x100 [ 1433.133147][T18118] __kmalloc_cache_noprof+0x70/0x3d0 [ 1433.133166][T18118] ? alloc_fs_context+0x61/0x7d0 [ 1433.133195][T18118] alloc_fs_context+0x61/0x7d0 [ 1433.133215][T18118] ? do_raw_read_unlock+0x3d/0x80 [ 1433.133241][T18118] ? _raw_read_unlock+0x28/0x50 [ 1433.133260][T18118] ? get_fs_type+0x407/0x480 [ 1433.133291][T18118] do_new_mount+0x10e/0xa40 [ 1433.133324][T18118] __se_sys_mount+0x317/0x410 [ 1433.133354][T18118] ? __pfx___se_sys_mount+0x10/0x10 [ 1433.133384][T18118] ? rcu_is_watching+0x15/0xb0 [ 1433.133413][T18118] ? do_syscall_64+0xbe/0x3b0 [ 1433.133434][T18118] ? __x64_sys_mount+0x20/0xc0 [ 1433.133459][T18118] do_syscall_64+0xfa/0x3b0 [ 1433.133480][T18118] ? lockdep_hardirqs_on+0x9c/0x150 [ 1433.133500][T18118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.133520][T18118] ? clear_bhb_loop+0x60/0xb0 [ 1433.133545][T18118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.133565][T18118] RIP: 0033:0x7f271898eb69 [ 1433.133583][T18118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1433.133599][T18118] RSP: 002b:00007f2719847038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1433.133623][T18118] RAX: ffffffffffffffda RBX: 00007f2718bb5fa0 RCX: 00007f271898eb69 [ 1433.133638][T18118] RDX: 0000200000000040 RSI: 0000200000000540 RDI: 0000000000000000 [ 1433.133651][T18118] RBP: 00007f2719847090 R08: 0000200000000500 R09: 0000000000000000 [ 1433.133664][T18118] R10: 0000000000800009 R11: 0000000000000246 R12: 0000000000000002 [ 1433.133677][T18118] R13: 0000000000000000 R14: 00007f2718bb5fa0 R15: 00007ffc127ba368 [ 1433.133710][T18118] [ 1433.696307][T12820] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1433.700000][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1433.709889][T14235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1433.780423][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1433.834413][T18124] netlink: 'syz.4.3385': attribute type 3 has an invalid length. [ 1433.926498][T17620] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1434.092880][T17620] usb 7-1: device descriptor read/64, error -71 [ 1434.376655][T17620] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1434.605944][ T9117] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1434.807324][T12547] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1435.336911][T17620] usb 7-1: device descriptor read/64, error -71 [ 1435.904023][ T30] audit: type=1804 audit(1754173068.519:876): pid=18139 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.3.3388" name="/newroot/16/file0" dev="tmpfs" ino=104 res=1 errno=0 [ 1435.937792][T12547] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1435.988173][T18142] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3390'. [ 1436.016324][ T9117] usb 5-1: Using ep0 maxpacket: 8 [ 1436.059072][ T9117] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1436.076761][T17620] usb usb7-port1: attempt power cycle [ 1436.092460][ T9117] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.171995][ T9117] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1436.191098][ T9117] pvrusb2: ********** [ 1436.195533][ T9117] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1436.207764][ T9117] pvrusb2: Important functionality might not be entirely working. [ 1436.222938][ T9117] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1436.256906][ T9117] pvrusb2: ********** [ 1436.362092][ T2343] pvrusb2: Invalid write control endpoint [ 1436.445500][ T2343] pvrusb2: Invalid write control endpoint [ 1436.460743][ T2343] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1436.473532][ T2343] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1436.498016][ T2343] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1436.511251][ T2343] pvrusb2: Device being rendered inoperable [ 1436.520105][ T2343] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1436.530182][ T2343] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1436.549726][ T2343] pvrusb2: Attached sub-driver cx25840 [ 1436.579855][ T2343] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1436.595938][T17620] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1436.619360][T18134] pvrusb2: Attempted to execute control transfer when device not ok [ 1436.674378][T18154] tipc: Started in network mode [ 1436.680212][T18154] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 1436.696287][T18154] tipc: Enabled bearer , priority 10 [ 1437.544784][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1437.557214][ T2343] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1437.740372][T14230] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1437.830423][ T5169] tipc: Node number set to 4269801488 [ 1437.859793][T17620] usb 7-1: device descriptor read/8, error -71 [ 1437.903204][T18158] sp0: Synchronizing with TNC [ 1438.186659][ T5169] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1438.928320][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1438.982934][ T9117] usb 5-1: USB disconnect, device number 53 [ 1439.111691][ T5169] usb 2-1: Using ep0 maxpacket: 8 [ 1439.128090][ T5169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1439.268292][ T5169] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1439.733091][T17593] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1439.771577][ T5169] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1439.777984][T14191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1439.932443][ T5169] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 1439.989331][ T5169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1440.070402][ T5169] usb 2-1: config 0 descriptor?? [ 1440.085380][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1440.351491][T18190] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3403'. [ 1440.426021][ T30] audit: type=1804 audit(1754173073.029:877): pid=18192 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.3402" name="/newroot/72/file0" dev="tmpfs" ino=408 res=1 errno=0 [ 1440.591731][ T5169] logitech 0003:046D:C293.0012: nested delimiters [ 1440.651490][ T5169] logitech 0003:046D:C293.0012: item 0 4 2 10 parsing failed [ 1440.697909][ T5169] logitech 0003:046D:C293.0012: parse failed [ 1440.704586][ T5169] logitech 0003:046D:C293.0012: probe with driver logitech failed with error -22 [ 1440.763797][ T5828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1440.808886][T18158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3394'. [ 1440.886554][ T5854] Bluetooth: hci4: command 0x0405 tx timeout [ 1440.909064][ T30] audit: type=1326 audit(1754173073.529:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18198 comm="syz.6.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271898eb69 code=0x7ffc0000 [ 1440.946948][ T30] audit: type=1326 audit(1754173073.569:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18198 comm="syz.6.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f271898eb69 code=0x7ffc0000 [ 1441.016704][ T30] audit: type=1326 audit(1754173073.569:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18198 comm="syz.6.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271898eb69 code=0x7ffc0000 [ 1441.106801][T18202] sctp: [Deprecated]: syz.6.3405 (pid 18202) Use of int in maxseg socket option. [ 1441.106801][T18202] Use struct sctp_assoc_value instead [ 1441.406664][ T30] audit: type=1326 audit(1754173073.569:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18198 comm="syz.6.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f271898eb69 code=0x7ffc0000 [ 1441.578087][T16949] usb 2-1: USB disconnect, device number 45 [ 1441.609564][ T30] audit: type=1326 audit(1754173073.569:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18198 comm="syz.6.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271898eb69 code=0x7ffc0000 [ 1441.616107][ T5828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1441.664491][ T30] audit: type=1326 audit(1754173073.569:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18198 comm="syz.6.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f271898eb69 code=0x7ffc0000 [ 1441.715912][ T30] audit: type=1326 audit(1754173074.319:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18198 comm="syz.6.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271898eb69 code=0x7ffc0000 [ 1441.797683][ T30] audit: type=1326 audit(1754173074.319:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18198 comm="syz.6.3405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271898eb69 code=0x7ffc0000 [ 1443.074183][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1443.096466][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1443.749575][T18226] xt_socket: unknown flags 0xd0 [ 1443.796185][ T5169] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1444.461917][ T5828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1444.686078][ T5169] usb 2-1: Using ep0 maxpacket: 8 [ 1444.703937][ T5169] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.761146][ T5169] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1444.801339][ T5169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.840871][ T5169] usb 2-1: config 0 descriptor?? [ 1444.868465][ T5169] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1444.893458][ T30] audit: type=1804 audit(1754173077.509:886): pid=18229 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.3414" name="/newroot/78/file0" dev="tmpfs" ino=441 res=1 errno=0 [ 1444.920596][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1445.022560][T18231] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3415'. [ 1445.036277][T18231] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1445.158907][T18231] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1445.527449][T12547] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1445.639087][T18231] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1445.711688][T18231] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1445.850140][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1445.870941][T18233] No such timeout policy "syz0" [ 1446.171931][T18236] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 1446.256123][ T5169] gspca_vc032x: reg_w err -110 [ 1446.261252][ T5169] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 1446.396116][T16949] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1446.586507][T16949] usb 5-1: Using ep0 maxpacket: 8 [ 1446.660783][T16949] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1446.749442][T15812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1446.767779][T16949] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1447.435400][T16949] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1447.730481][T16949] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1447.766208][T17620] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1448.507804][T14242] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1448.540725][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1448.545838][T16949] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1448.597910][T16949] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1448.609725][T16949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.685472][ T5169] usb 2-1: USB disconnect, device number 46 [ 1449.011100][T16949] usb 5-1: usb_control_msg returned -32 [ 1449.031494][T16949] usbtmc 5-1:16.0: can't read capabilities [ 1449.622494][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1449.834934][T18255] netlink: 'syz.6.3420': attribute type 11 has an invalid length. [ 1450.573234][T14194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1450.656323][T15812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1450.990230][T15812] usb 5-1: USB disconnect, device number 54 [ 1451.816463][T15812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1451.839032][T14194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1452.890010][T12547] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1453.704344][ T6027] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1454.369716][ T5966] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1454.470302][T18274] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3426'. [ 1454.727042][ T5828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1454.808384][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1455.045900][ T5966] usb 2-1: Using ep0 maxpacket: 8 [ 1455.063279][ T5966] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1455.086656][T18278] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3427'. [ 1455.106026][ T5966] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1455.124215][ T5966] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1455.146401][ T5966] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1455.196284][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.204597][ T5966] usb 2-1: Product: syz [ 1455.212451][ T5966] usb 2-1: Manufacturer: syz [ 1455.217849][ T5966] usb 2-1: SerialNumber: syz [ 1455.698042][T18281] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3428'. [ 1455.776688][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1455.793918][T18281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1455.808195][T18281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1455.836101][T18281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1455.844035][T18281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1455.984837][ T5966] cdc_ncm 2-1:1.0: bind() failure [ 1456.199002][T14194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1456.238634][ T5966] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 1456.258180][ T5966] usb 2-1: USB disconnect, device number 47 [ 1457.219934][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1457.368195][T14200] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1457.721651][T18306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3435'. [ 1457.736219][ T9117] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1457.864018][T18309] random: crng reseeded on system resumption [ 1457.908918][ T9117] usb 7-1: Using ep0 maxpacket: 16 [ 1457.971590][ T9117] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1458.041741][ T9117] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1458.099458][ T9117] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1458.248417][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1458.265483][ T9117] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1458.288525][ T9117] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1458.318989][ T9117] usb 7-1: config 0 descriptor?? [ 1458.876206][T18334] Cannot find map_set index 0 as target [ 1459.107293][ T9117] input: HID 0955:7214 Haptics as /devices/virtual/input/input24 [ 1459.235122][ T9117] shield 0003:0955:7214.0013: Registered Thunderstrike controller [ 1459.456439][T14194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1459.483587][ T5828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1459.495725][ T9117] shield 0003:0955:7214.0013: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.6-1/input0 [ 1459.614205][T16949] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1459.669108][ T9117] usb 7-1: USB disconnect, device number 34 [ 1459.799226][T16949] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1460.274441][T16949] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1460.558341][T16949] shield 0003:0955:7214.0013: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1460.587499][T15812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1461.056096][T16949] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1461.401506][T16949] usb 4-1: Using ep0 maxpacket: 32 [ 1461.760053][T16949] usb 4-1: config 0 has an invalid interface number: 96 but max is 0 [ 1461.769824][T16949] usb 4-1: config 0 has no interface number 0 [ 1461.778236][T16949] usb 4-1: config 0 interface 96 has no altsetting 0 [ 1461.788531][T16949] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=b2.44 [ 1461.798470][T16949] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1461.807114][T16949] usb 4-1: Product: syz [ 1461.811502][T16949] usb 4-1: Manufacturer: syz [ 1461.822124][T16949] usb 4-1: SerialNumber: syz [ 1461.833845][ T5828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1461.840220][T16949] usb 4-1: config 0 descriptor?? [ 1461.856258][T14242] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1461.868474][T15812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1461.921711][T16949] legousbtower 4-1:0.96: interrupt endpoints not found [ 1461.964318][T18353] random: crng reseeded on system resumption [ 1462.125292][T16949] usb 4-1: USB disconnect, device number 55 [ 1462.288791][T18356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1462.510658][T18356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1462.536061][T18365] xt_socket: unknown flags 0xd0 [ 1463.193183][T14200] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1463.301296][ T5828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1463.385160][T18368] vxcan1: entered allmulticast mode [ 1465.062332][T14235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1465.551184][T18356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1465.834065][ T5828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1467.029267][ T5828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1467.053273][T18373] netlink: 'syz.4.3454': attribute type 10 has an invalid length. [ 1468.237502][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1468.261408][T14197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1468.819612][ T9117] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1468.887296][T18390] random: crng reseeded on system resumption [ 1468.889098][T14242] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1468.896097][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1469.001012][T18392] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3461'. [ 1469.014668][T18393] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3461'. [ 1469.025374][ T9117] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1469.062170][ T9117] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1469.079860][ T9117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.107885][ T9117] usb 5-1: Product: ퟿疅篹쉈汹坜獞鄓⎟卝ꑏⶏ伻䶉迸ʦꍩ뎰㦓▎恰飆坏ࠩ⒱坧眖駐婁̗꺋Ⲷ㚺닇鉀ῼ샿䷰׌빫텂準軇蟺㧉뛐西줼᧋⏞믒Ȏ㐦뤼昭㎖؛᫆㌘䉄䥒蕻⭁丶ꓓㅞ퀓줝䗖⣞ [ 1469.163049][T18397] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3464'. [ 1469.184994][ T9117] usb 5-1: Manufacturer: ⽖瀚뛽몌긓嚋坿駃ᐕ蛢൥ᛋ넬ၘᄕ᭵ⅹ뷠㮪蚡븸㭓늱뉆飺ꔳ猜⣩끓㠜篕ᄿꇖ屃ிꔳ㇜윱旡ᶅ１럊唩̟묙ꎰ갲ⱐ㳳璺㠑㾤赺 [ 1469.213668][ T9117] usb 5-1: SerialNumber: ї [ 1469.315084][T18402] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3466'. [ 1469.481308][ T5828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1469.676936][T18406] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3463'. [ 1469.688524][ T5169] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1470.300791][T18381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.320873][T18381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.444106][T18381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.483093][T18381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.502051][ T5169] usb 4-1: Using ep0 maxpacket: 32 [ 1470.535120][ T5169] usb 4-1: config 2 has an invalid interface number: 157 but max is 0 [ 1470.560984][T18381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.580934][ T5169] usb 4-1: config 2 has no interface number 0 [ 1470.610941][ T5169] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b [ 1470.624199][T18381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.659438][ T5169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.671473][T18381] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1470.684505][T15812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1470.702195][ T5169] usb 4-1: Product: syz [ 1470.729077][T14242] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1470.735884][ T5169] usb 4-1: Manufacturer: syz [ 1470.770043][T18381] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1470.835459][ T5169] usb 4-1: SerialNumber: syz [ 1471.166567][ T9117] cdc_ncm 5-1:1.0: bind() failure [ 1471.169254][ T5169] imon 4-1:2.157: unable to register, err -19 [ 1471.332885][ T9117] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1471.348162][T18395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1471.357880][ T9117] cdc_ncm 5-1:1.1: bind() failure [ 1471.371917][T18395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1471.380064][T18413] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3469'. [ 1471.392335][ T9117] usb 5-1: USB disconnect, device number 55 [ 1471.428715][T17593] usb 4-1: USB disconnect, device number 56 [ 1471.477567][T18413] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3469'. [ 1471.772015][T15712] Bluetooth: hci0: command 0x0405 tx timeout [ 1471.780400][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1473.546507][ T5169] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1474.137573][T14242] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1474.393162][T18449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1474.415247][T18449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1474.468648][T18452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3482'. [ 1474.599504][T17593] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1474.658874][T14242] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1474.700322][T15812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1475.766700][T15812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1475.881217][T14197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1475.987643][T15812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1476.169205][ T30] audit: type=1326 audit(1754173108.789:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18466 comm="syz.3.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffc98eb69 code=0x7ffc0000 [ 1476.234111][ T30] audit: type=1326 audit(1754173108.789:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18466 comm="syz.3.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffc98eb69 code=0x7ffc0000 [ 1476.275992][ T30] audit: type=1326 audit(1754173108.849:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18466 comm="syz.3.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5ffc98eb69 code=0x7ffc0000 [ 1476.481844][ T30] audit: type=1326 audit(1754173108.849:890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18466 comm="syz.3.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffc98eb69 code=0x7ffc0000 [ 1476.587866][T18472] sctp: [Deprecated]: syz.3.3485 (pid 18472) Use of int in maxseg socket option. [ 1476.587866][T18472] Use struct sctp_assoc_value instead [ 1476.886142][T15812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1476.951651][T12820] IPVS: starting estimator thread 0... [ 1477.056045][ T30] audit: type=1326 audit(1754173108.849:891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18466 comm="syz.3.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffc98eb69 code=0x7ffc0000 [ 1477.126245][T18476] IPVS: using max 25 ests per chain, 60000 per kthread [ 1477.163414][T18478] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3486'. [ 1477.173090][T18478] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3486'. [ 1477.305557][ T30] audit: type=1326 audit(1754173108.849:892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18466 comm="syz.3.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f5ffc98eb69 code=0x7ffc0000 [ 1477.355659][ T30] audit: type=1326 audit(1754173108.849:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18466 comm="syz.3.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffc98eb69 code=0x7ffc0000 [ 1477.382528][ T30] audit: type=1326 audit(1754173108.849:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18466 comm="syz.3.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5ffc98eb69 code=0x7ffc0000 [ 1477.727489][ T30] audit: type=1326 audit(1754173110.349:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18466 comm="syz.3.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffc98eb69 code=0x7ffc0000 [ 1477.775947][ T30] audit: type=1326 audit(1754173110.349:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18466 comm="syz.3.3485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ffc98eb69 code=0x7ffc0000 [ 1477.816285][T18483] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3488'. [ 1477.940328][T15812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1478.441304][T18490] syz_tun: entered allmulticast mode [ 1478.464142][T18489] syz_tun: left allmulticast mode [ 1479.131009][ T5828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1480.062937][ T1164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1480.076071][T14230] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1480.153519][T18509] netlink: del zone limit has 4 unknown bytes [ 1480.172921][ T5828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1480.857717][T18524] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3502'. [ 1481.845311][ T5828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1481.845459][T17593] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1481.905212][T14191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1482.027007][T18539] netlink: 'syz.6.3507': attribute type 1 has an invalid length. [ 1482.112881][T18542] input: syz1 as /devices/virtual/input/input25 [ 1482.163590][T18542] input: failed to attach handler evdev to device input25, error: -4 [ 1483.201108][ T5828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1483.292863][T18561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3512'. [ 1483.606888][T15812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1484.247441][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1484.902738][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.936539][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1485.963928][T14200] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1485.964035][T14191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1488.542649][ T1164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1488.543798][T14242] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1488.966913][T15812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1489.107566][T18592] FAULT_INJECTION: forcing a failure. [ 1489.107566][T18592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1489.140540][T18592] CPU: 1 UID: 0 PID: 18592 Comm: syz.6.3521 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1489.140573][T18592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1489.140594][T18592] Call Trace: [ 1489.140603][T18592] [ 1489.140612][T18592] dump_stack_lvl+0x189/0x250 [ 1489.140640][T18592] ? __pfx____ratelimit+0x10/0x10 [ 1489.140664][T18592] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1489.140696][T18592] ? __pfx__printk+0x10/0x10 [ 1489.140720][T18592] ? __might_fault+0xb0/0x130 [ 1489.140753][T18592] should_fail_ex+0x414/0x560 [ 1489.140779][T18592] _copy_from_iter+0x1db/0x16f0 [ 1489.140808][T18592] ? rcu_is_watching+0x15/0xb0 [ 1489.140831][T18592] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1489.140854][T18592] ? __pfx__copy_from_iter+0x10/0x10 [ 1489.140881][T18592] ? __build_skb_around+0x257/0x3e0 [ 1489.140912][T18592] ? netlink_sendmsg+0x642/0xb30 [ 1489.140938][T18592] ? skb_put+0x11b/0x210 [ 1489.140972][T18592] netlink_sendmsg+0x6b2/0xb30 [ 1489.141012][T18592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1489.141052][T18592] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1489.141073][T18592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1489.141103][T18592] __sock_sendmsg+0x21c/0x270 [ 1489.141133][T18592] ____sys_sendmsg+0x505/0x830 [ 1489.141171][T18592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1489.141214][T18592] ? import_iovec+0x74/0xa0 [ 1489.141248][T18592] ___sys_sendmsg+0x21f/0x2a0 [ 1489.141282][T18592] ? __pfx____sys_sendmsg+0x10/0x10 [ 1489.141356][T18592] ? __fget_files+0x2a/0x420 [ 1489.141378][T18592] ? __fget_files+0x3a0/0x420 [ 1489.141442][T18592] __x64_sys_sendmsg+0x19b/0x260 [ 1489.141478][T18592] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1489.141519][T18592] ? __pfx_ksys_write+0x10/0x10 [ 1489.141536][T18592] ? rcu_is_watching+0x15/0xb0 [ 1489.141563][T18592] ? do_syscall_64+0xbe/0x3b0 [ 1489.141589][T18592] do_syscall_64+0xfa/0x3b0 [ 1489.141609][T18592] ? lockdep_hardirqs_on+0x9c/0x150 [ 1489.141630][T18592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.141651][T18592] ? clear_bhb_loop+0x60/0xb0 [ 1489.141684][T18592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.141705][T18592] RIP: 0033:0x7f271898eb69 [ 1489.141726][T18592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1489.141745][T18592] RSP: 002b:00007f2719847038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1489.141769][T18592] RAX: ffffffffffffffda RBX: 00007f2718bb5fa0 RCX: 00007f271898eb69 [ 1489.141784][T18592] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 1489.141798][T18592] RBP: 00007f2719847090 R08: 0000000000000000 R09: 0000000000000000 [ 1489.141810][T18592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1489.141822][T18592] R13: 0000000000000000 R14: 00007f2718bb5fa0 R15: 00007ffc127ba368 [ 1489.141856][T18592] [ 1490.159529][T15812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1490.918875][T15812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1491.206247][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1491.288621][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1491.305551][T12820] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1491.405858][T17593] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1491.645639][T17593] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 1492.246581][T15812] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1492.535892][T17593] usb 1-1: config 0 has no interface number 0 [ 1492.662075][T17593] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 1492.673650][T17593] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.689524][T17593] usb 1-1: Product: syz [ 1492.708411][T17593] usb 1-1: Manufacturer: syz [ 1492.715079][T17593] usb 1-1: SerialNumber: syz [ 1493.187884][T17593] usb 1-1: config 0 descriptor?? [ 1493.246037][ T5918] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1493.330093][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1493.690185][T17593] usb 1-1: Found UVC 0.08 device syz (046d:0823) [ 1493.746804][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 1493.877378][T17593] usb 1-1: No valid video chain found. [ 1493.884778][ T5918] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1493.900597][T17593] usb 1-1: USB disconnect, device number 52 [ 1493.906941][ T5918] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1493.966085][ T5918] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1494.001978][ T5918] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1494.093714][T14235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1494.094122][T14191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1494.128709][T18636] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3535'. [ 1494.145062][T18636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3535'. [ 1494.164612][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1494.410408][ T5828] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1494.428607][ T5918] usb 4-1: Product: syz [ 1494.578927][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1494.593699][ T5918] usb 4-1: Manufacturer: syz [ 1494.611080][ T5918] usb 4-1: SerialNumber: syz [ 1494.680110][ T5918] usb 4-1: can't set config #1, error -71 [ 1494.724526][ T5918] usb 4-1: USB disconnect, device number 57 [ 1495.658173][ T24] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1496.146200][ T24] usb 2-1: new low-speed USB device number 49 using dummy_hcd [ 1496.296085][ T24] usb 2-1: device descriptor read/64, error -71 [ 1496.588414][ T24] usb 2-1: new low-speed USB device number 50 using dummy_hcd [ 1497.059540][ T7123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1497.116248][ T24] usb 2-1: device descriptor read/64, error -71 [ 1497.236442][ T24] usb usb2-port1: attempt power cycle [ 1497.576013][ T24] usb 2-1: new low-speed USB device number 51 using dummy_hcd [ 1497.690976][ T24] usb 2-1: device descriptor read/8, error -71 [ 1498.076537][T17593] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1498.276071][ T24] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 1498.297260][ T24] usb 2-1: device descriptor read/8, error -71 [ 1498.327481][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1498.405923][T17593] usb 5-1: Using ep0 maxpacket: 8 [ 1498.406747][ T24] usb usb2-port1: unable to enumerate USB device [ 1498.463558][T17593] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1498.514679][T17593] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1498.541463][T17593] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1498.555222][T17593] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1498.595351][T17593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1498.689370][T17593] usb 5-1: Product: syz [ 1498.693888][T17593] usb 5-1: Manufacturer: syz [ 1498.709242][T17593] usb 5-1: SerialNumber: syz [ 1500.155945][T17593] cdc_ncm 5-1:1.0: bind() failure [ 1500.220075][T17593] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 1500.239226][T18706] sp0: Synchronizing with TNC [ 1500.264650][ T1164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1500.286197][ T7123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1500.299139][T14197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1500.343275][T17593] usb 5-1: USB disconnect, device number 56 [ 1500.896582][T12820] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1502.348261][T18721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3559'. [ 1502.358290][T18721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1502.366657][T18721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1503.158499][T14235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1503.207068][T18721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1503.228113][T18721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1503.474439][T14242] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1504.197390][ T30] audit: type=1326 audit(1754173136.809:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18732 comm="syz.6.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271898eb69 code=0x7ffc0000 [ 1504.396818][ T30] audit: type=1326 audit(1754173136.809:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18732 comm="syz.6.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271898eb69 code=0x7ffc0000 [ 1504.659246][T18738] sctp: [Deprecated]: syz.6.3564 (pid 18738) Use of int in maxseg socket option. [ 1504.659246][T18738] Use struct sctp_assoc_value instead [ 1504.895283][ T30] audit: type=1326 audit(1754173136.819:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18732 comm="syz.6.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f271898eb69 code=0x7ffc0000 [ 1505.003317][T18744] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3566'. [ 1505.012995][T18744] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3566'. [ 1505.024109][T18744] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3566'. [ 1505.467212][ T30] audit: type=1326 audit(1754173136.819:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18732 comm="syz.6.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271898eb69 code=0x7ffc0000 [ 1505.492087][T18747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3567'. [ 1505.536013][ T30] audit: type=1326 audit(1754173136.819:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18732 comm="syz.6.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f271898eb69 code=0x7ffc0000 [ 1505.570622][ T30] audit: type=1326 audit(1754173136.819:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18732 comm="syz.6.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271898eb69 code=0x7ffc0000 [ 1505.665863][ T30] audit: type=1326 audit(1754173136.849:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18732 comm="syz.6.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f271898eb69 code=0x7ffc0000 [ 1505.736623][ T30] audit: type=1326 audit(1754173138.089:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18732 comm="syz.6.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271898eb69 code=0x7ffc0000 [ 1505.812967][ T30] audit: type=1326 audit(1754173138.089:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18732 comm="syz.6.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f271898eb69 code=0x7ffc0000 [ 1505.947340][T18755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3570'. [ 1506.016754][T14235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1506.028734][T14197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1506.050632][ T1164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1506.350494][T18765] xt_socket: unknown flags 0xd0 [ 1507.740262][T18783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3576'. [ 1507.766381][T18783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1507.785690][T18783] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1507.813812][T18783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1507.823014][T18783] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1508.105503][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3581'. [ 1508.124150][T18797] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3581'. [ 1508.308485][T18802] x_tables: ip_tables: SET.0 target: invalid size 64 (kernel) != (user) 0 [ 1508.995813][T17593] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1509.033838][T14242] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1509.336642][T14191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1509.517130][T17593] usb 7-1: Using ep0 maxpacket: 8 [ 1509.524840][T17593] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1509.557986][T17593] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 1509.600789][T17593] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1509.635237][T17593] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1509.656483][T17593] usb 7-1: New USB device strings: Mfr=129, Product=2, SerialNumber=3 [ 1509.672040][T17593] usb 7-1: Product: syz [ 1509.684744][T17593] usb 7-1: Manufacturer: syz [ 1509.695566][T17593] usb 7-1: SerialNumber: syz [ 1509.707853][T17593] usb 7-1: config 0 descriptor?? [ 1509.720359][T17593] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input26 [ 1510.863098][T17593] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1510.876917][T12820] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 1511.295329][ T9117] usb 7-1: USB disconnect, device number 35 [ 1511.325901][T12820] usb 5-1: device descriptor read/64, error -71 [ 1511.889693][T12820] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 1511.910059][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1511.924604][T14191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1511.927870][T14194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1512.046042][T12820] usb 5-1: device descriptor read/64, error -71 [ 1512.167279][T12820] usb usb5-port1: attempt power cycle [ 1512.526052][T12820] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 1512.557573][T12820] usb 5-1: device descriptor read/8, error -71 [ 1513.547574][T18852] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3595'. [ 1513.558807][T18852] netlink: 660 bytes leftover after parsing attributes in process `syz.4.3595'. [ 1515.838845][T14197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1515.853932][ T1164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1516.460460][T17593] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1516.637847][T17593] usb 7-1: Using ep0 maxpacket: 32 [ 1516.647703][T17593] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1516.682115][T17593] usb 7-1: config 0 has no interface number 0 [ 1516.707120][T17593] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1516.742173][T17593] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.793180][T17593] usb 7-1: Product: syz [ 1516.799743][T18883] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1516.805035][T17593] usb 7-1: Manufacturer: syz [ 1516.840681][T18883] CIFS: Unable to determine destination address [ 1516.852903][T17593] usb 7-1: SerialNumber: syz [ 1516.874522][T17593] usb 7-1: config 0 descriptor?? [ 1516.893307][T17593] smsc95xx v2.0.0 [ 1517.037080][T18885] mkiss: ax0: crc mode is auto. [ 1517.139320][T18889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3605'. [ 1517.368422][T18893] (unnamed net_device) (uninitialized): (slave wg2): Device is not bonding slave [ 1517.382826][T18893] (unnamed net_device) (uninitialized): option active_slave: invalid value (wg2) [ 1517.557812][T14242] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1517.569497][T14197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1517.583881][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1517.719180][T18897] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3606'. [ 1517.729413][T18897] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3606'. [ 1517.748742][T18897] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3606'. [ 1519.449735][T17593] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 1519.524632][T18909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3610'. [ 1519.543939][T18909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3610'. [ 1519.821984][T17593] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1519.844803][T17593] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1520.033191][T17593] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 1520.090468][ T9117] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1520.131798][T17593] usb 7-1: USB disconnect, device number 36 [ 1520.811482][ T30] audit: type=1804 audit(1754173153.119:906): pid=18924 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.3616" name="/newroot/97/file0" dev="tmpfs" ino=546 res=1 errno=0 [ 1521.370009][T14191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1522.007522][T14242] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1523.181612][ T30] audit: type=1326 audit(1754173155.799:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18945 comm="syz.4.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a5b8eb69 code=0x7ffc0000 [ 1523.258033][ T30] audit: type=1326 audit(1754173155.799:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18945 comm="syz.4.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a5b8eb69 code=0x7ffc0000 [ 1523.289193][T14197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1523.301250][ T1164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1523.458400][T14191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1524.013371][ T30] audit: type=1326 audit(1754173155.799:909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18945 comm="syz.4.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe3a5b8eb69 code=0x7ffc0000 [ 1524.086639][T18946] sctp: [Deprecated]: syz.4.3624 (pid 18946) Use of int in maxseg socket option. [ 1524.086639][T18946] Use struct sctp_assoc_value instead [ 1524.473280][ T30] audit: type=1326 audit(1754173155.799:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18945 comm="syz.4.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a5b8eb69 code=0x7ffc0000 [ 1524.576272][T18960] sctp: [Deprecated]: syz.6.3625 (pid 18960) Use of int in maxseg socket option. [ 1524.576272][T18960] Use struct sctp_assoc_value instead [ 1525.221832][ T30] audit: type=1326 audit(1754173155.799:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18945 comm="syz.4.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fe3a5b8eb69 code=0x7ffc0000 [ 1525.252615][T18964] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3627'. [ 1525.321254][ T30] audit: type=1326 audit(1754173155.799:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18945 comm="syz.4.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a5b8eb69 code=0x7ffc0000 [ 1525.385615][ T30] audit: type=1326 audit(1754173155.799:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18945 comm="syz.4.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe3a5b8eb69 code=0x7ffc0000 [ 1525.426116][ T30] audit: type=1326 audit(1754173156.659:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18945 comm="syz.4.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a5b8eb69 code=0x7ffc0000 [ 1525.463735][ T30] audit: type=1326 audit(1754173156.659:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18945 comm="syz.4.3624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a5b8eb69 code=0x7ffc0000 [ 1525.645860][T17620] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1526.595895][T17620] usb 1-1: Using ep0 maxpacket: 16 [ 1526.608143][T17620] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1526.619713][T17620] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1526.630049][T17620] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1526.639743][T17620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.678206][T17620] usb 1-1: config 0 descriptor?? [ 1526.693065][T18978] gtp0: entered promiscuous mode [ 1526.730327][T18978] gtp0: entered allmulticast mode [ 1527.127366][T14197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1527.214239][T18993] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1527.223442][T18993] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1528.140798][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1528.222877][T17620] hid (null): unknown global tag 0xe [ 1528.228583][T17620] hid (null): unknown global tag 0xc [ 1528.234892][T17620] hid (null): report_id 28336 is invalid [ 1528.486884][T17620] letsketch 0003:6161:4D15.0014: Device info: ఁ [ 1529.094833][ T7123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1529.120806][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1529.136011][T14194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1529.331074][T17620] usb 1-1: Max retries (5) exceeded reading string descriptor 201 [ 1529.357528][T17620] letsketch 0003:6161:4D15.0014: probe with driver letsketch failed with error -71 [ 1529.372875][T17620] usb 1-1: USB disconnect, device number 53 [ 1530.316120][ T5918] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1530.553270][T19025] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3643'. [ 1531.062565][ T5918] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1531.297237][T19034] (unnamed net_device) (uninitialized): (slave wg2): Device is not bonding slave [ 1531.341055][T19034] (unnamed net_device) (uninitialized): option active_slave: invalid value (wg2) [ 1531.420759][T19037] netlink: del zone limit has 4 unknown bytes [ 1531.586127][ T9117] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1531.817471][ T9117] usb 5-1: Using ep0 maxpacket: 32 [ 1531.832466][ T9117] usb 5-1: config 1 has an invalid interface number: 242 but max is 0 [ 1531.852115][ T9117] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1532.000835][ T9117] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 1532.855620][ T9117] usb 5-1: config 1 has no interface number 1 [ 1532.866406][ T9117] usb 5-1: config 1 interface 242 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1532.981588][ T9117] usb 5-1: config 1 interface 242 has no altsetting 0 [ 1532.991577][ T9117] usb 5-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 1533.000883][ T9117] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.013803][ T9117] usb 5-1: Product: syz [ 1533.024008][ T9117] usb 5-1: Manufacturer: syz [ 1533.229630][T14242] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1533.279372][ T9117] usb 5-1: SerialNumber: syz [ 1533.721603][ T1164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1534.084443][ T9117] aqc111 5-1:1.242: probe with driver aqc111 failed with error -22 [ 1534.115433][T19062] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3657'. [ 1535.084434][T14242] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1535.100914][ T7123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1535.101084][T14191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1535.311127][ T9117] usb 5-1: USB disconnect, device number 61 [ 1535.402545][T19075] random: crng reseeded on system resumption [ 1536.173101][T19086] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3663'. [ 1536.195633][T19086] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3663'. [ 1536.301195][T19086] dummy0: entered promiscuous mode [ 1536.437419][T19086] team0: entered promiscuous mode [ 1536.444438][T19086] team_slave_0: entered promiscuous mode [ 1536.451370][T19086] team_slave_1: entered promiscuous mode [ 1536.462589][T19086] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 1536.475006][T19086] Cannot create hsr debugfs directory [ 1537.464670][T19101] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3666'. [ 1538.650873][T14242] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1538.777527][T19111] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3671'. [ 1538.794818][T19111] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3671'. [ 1539.087277][ T9117] usb 7-1: new low-speed USB device number 37 using dummy_hcd [ 1539.283057][T19133] tipc: Enabling of bearer rejected, already enabled [ 1539.305478][T19132] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3678'. [ 1539.359091][T14191] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1539.999267][ T9117] usb 7-1: config index 0 descriptor too short (expected 6427, got 27) [ 1540.568839][ T1164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1540.582295][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1540.602586][T14197] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1540.895237][ T9117] usb 7-1: config 0 has an invalid interface number: 21 but max is 0 [ 1540.904508][T17593] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1540.916789][ T9117] usb 7-1: config 0 has no interface number 0 [ 1540.923338][ T9117] usb 7-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1540.937495][ T9117] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1540.949019][ T9117] usb 7-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1540.959178][ T9117] usb 7-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1540.973329][ T9117] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.983753][ T9117] usb 7-1: config 0 descriptor?? [ 1541.052596][T19141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3681'. [ 1541.209368][T17593] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1541.893909][ T9117] usb 7-1: USB disconnect, device number 37 [ 1542.459086][T19154] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3684'. [ 1542.606087][T19158] netlink: 'syz.1.3686': attribute type 3 has an invalid length. [ 1544.486934][T14230] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1544.867920][T19175] (unnamed net_device) (uninitialized): (slave wg2): Device is not bonding slave [ 1545.355431][T19175] (unnamed net_device) (uninitialized): option active_slave: invalid value (wg2) [ 1545.702667][T14209] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1545.717420][T19186] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3694'. [ 1545.898076][T14230] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1545.916284][T14194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1546.575345][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.609620][T14194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1546.631325][T14230] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1546.679654][T19198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3698'. [ 1546.806682][ T9117] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1547.016037][ T9117] usb 2-1: Using ep0 maxpacket: 8 [ 1547.041628][ T9117] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.127487][ T9117] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1547.149831][ T9117] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1547.189559][T19203] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3701'. [ 1547.201957][ T9117] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1547.416851][ T9117] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1547.496213][ T5828] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1547.499581][ T9117] usb 2-1: Product: syz [ 1547.743053][ T9117] usb 2-1: Manufacturer: syz [ 1547.749028][ T9117] usb 2-1: SerialNumber: syz [ 1547.915615][ T5828] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.932289][ T5828] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1547.953719][ T5828] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1547.976485][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1547.997900][ T5828] usb 1-1: SerialNumber: syz [ 1548.246997][ T5169] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1548.660128][ T9117] cdc_ncm 2-1:1.0: bind() failure [ 1548.756804][ T5169] usb 5-1: Using ep0 maxpacket: 16 [ 1548.783031][ T5828] usb 1-1: 0:2 : does not exist [ 1548.791439][ T5828] usb 1-1: unit 255 not found! [ 1548.791696][ T5169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1548.810545][ T9117] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 1548.810693][ T5169] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1548.836339][ T5169] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1548.853111][ T5828] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1548.869975][ T5828] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1548.879292][ T5169] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1548.893136][ T9117] usb 2-1: USB disconnect, device number 53 [ 1548.914089][ T5169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.921091][T19222] tipc: Enabled bearer , priority 0 [ 1548.933959][ T5828] usb 1-1: USB disconnect, device number 54 [ 1548.934816][T19222] syzkaller0: entered promiscuous mode [ 1548.948049][ T5169] usb 5-1: config 0 descriptor?? [ 1548.949373][T19222] syzkaller0: entered allmulticast mode [ 1549.033115][T19222] tipc: Resetting bearer [ 1549.106084][T19228] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3708'. [ 1549.876110][ T5169] usbhid 5-1:0.0: can't add hid device: -71 [ 1549.899788][ T5169] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1549.909918][T19221] tipc: Resetting bearer [ 1549.923971][ T5169] usb 5-1: USB disconnect, device number 62 [ 1549.979151][T19221] tipc: Disabling bearer [ 1550.177590][ T1164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1550.199070][T19245] FAULT_INJECTION: forcing a failure. [ 1550.199070][T19245] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1550.223899][T19244] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3714'. [ 1550.236043][T19245] CPU: 0 UID: 0 PID: 19245 Comm: syz.3.3713 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1550.236074][T19245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1550.236088][T19245] Call Trace: [ 1550.236097][T19245] [ 1550.236107][T19245] dump_stack_lvl+0x189/0x250 [ 1550.236151][T19245] ? __pfx____ratelimit+0x10/0x10 [ 1550.236175][T19245] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1550.236199][T19245] ? __pfx__printk+0x10/0x10 [ 1550.236226][T19245] ? __might_fault+0xb0/0x130 [ 1550.236262][T19245] should_fail_ex+0x414/0x560 [ 1550.236291][T19245] _copy_from_iter+0x1db/0x16f0 [ 1550.236341][T19245] ? __pfx__copy_from_iter+0x10/0x10 [ 1550.236367][T19245] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1550.236402][T19245] ? skb_put+0x11b/0x210 [ 1550.236437][T19245] hci_sock_sendmsg+0x422/0xef0 [ 1550.236475][T19245] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1550.236511][T19245] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1550.236532][T19245] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1550.236563][T19245] __sock_sendmsg+0x21c/0x270 [ 1550.236593][T19245] sock_write_iter+0x258/0x330 [ 1550.236620][T19245] ? __pfx_sock_write_iter+0x10/0x10 [ 1550.236656][T19245] ? bpf_lsm_file_permission+0x9/0x20 [ 1550.236679][T19245] ? security_file_permission+0x75/0x290 [ 1550.236721][T19245] vfs_write+0x54b/0xa90 [ 1550.236748][T19245] ? __pfx_sock_write_iter+0x10/0x10 [ 1550.236771][T19245] ? __pfx_vfs_write+0x10/0x10 [ 1550.236805][T19245] ? __fget_files+0x2a/0x420 [ 1550.236840][T19245] ksys_write+0x145/0x250 [ 1550.236865][T19245] ? __pfx_ksys_write+0x10/0x10 [ 1550.236881][T19245] ? rcu_is_watching+0x15/0xb0 [ 1550.236911][T19245] ? do_syscall_64+0xbe/0x3b0 [ 1550.236940][T19245] do_syscall_64+0xfa/0x3b0 [ 1550.236961][T19245] ? lockdep_hardirqs_on+0x9c/0x150 [ 1550.236982][T19245] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.237002][T19245] ? clear_bhb_loop+0x60/0xb0 [ 1550.237028][T19245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.237049][T19245] RIP: 0033:0x7f5ffc98eb69 [ 1550.237069][T19245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1550.237087][T19245] RSP: 002b:00007f5ffd899038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1550.237111][T19245] RAX: ffffffffffffffda RBX: 00007f5ffcbb5fa0 RCX: 00007f5ffc98eb69 [ 1550.237127][T19245] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000006 [ 1550.237140][T19245] RBP: 00007f5ffd899090 R08: 0000000000000000 R09: 0000000000000000 [ 1550.237154][T19245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1550.237167][T19245] R13: 0000000000000000 R14: 00007f5ffcbb5fa0 R15: 00007ffe5450fa58 [ 1550.237202][T19245] [ 1550.511209][ C0] vkms_vblank_simulate: vblank timer overrun [ 1550.519896][T19244] FAULT_INJECTION: forcing a failure. [ 1550.519896][T19244] name failslab, interval 1, probability 0, space 0, times 0 [ 1550.533587][T19244] CPU: 1 UID: 0 PID: 19244 Comm: syz.1.3714 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1550.533615][T19244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1550.533628][T19244] Call Trace: [ 1550.533636][T19244] [ 1550.533645][T19244] dump_stack_lvl+0x189/0x250 [ 1550.533673][T19244] ? __pfx____ratelimit+0x10/0x10 [ 1550.533697][T19244] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1550.533718][T19244] ? __pfx__printk+0x10/0x10 [ 1550.533758][T19244] should_fail_ex+0x414/0x560 [ 1550.533786][T19244] should_failslab+0xa8/0x100 [ 1550.533810][T19244] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1550.533829][T19244] ? skb_clone+0x212/0x3a0 [ 1550.533856][T19244] skb_clone+0x212/0x3a0 [ 1550.533882][T19244] __netlink_deliver_tap+0x404/0x850 [ 1550.533927][T19244] ? netlink_deliver_tap+0x2e/0x1b0 [ 1550.533957][T19244] netlink_deliver_tap+0x19c/0x1b0 [ 1550.533987][T19244] netlink_sendskb+0x68/0x140 [ 1550.534024][T19244] netlink_rcv_skb+0x28c/0x470 [ 1550.534053][T19244] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1550.534075][T19244] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1550.534122][T19244] ? down_read+0x1ad/0x2e0 [ 1550.534150][T19244] genl_rcv+0x28/0x40 [ 1550.534168][T19244] netlink_unicast+0x75c/0x8e0 [ 1550.534206][T19244] netlink_sendmsg+0x805/0xb30 [ 1550.534233][T19244] ? __lock_acquire+0xab9/0xd20 [ 1550.534264][T19244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1550.534305][T19244] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1550.534327][T19244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1550.534357][T19244] __sock_sendmsg+0x21c/0x270 [ 1550.534387][T19244] ____sys_sendmsg+0x505/0x830 [ 1550.534424][T19244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1550.534468][T19244] ? import_iovec+0x74/0xa0 [ 1550.534502][T19244] ___sys_sendmsg+0x21f/0x2a0 [ 1550.534536][T19244] ? __pfx____sys_sendmsg+0x10/0x10 [ 1550.534612][T19244] ? __fget_files+0x2a/0x420 [ 1550.534635][T19244] ? __fget_files+0x3a0/0x420 [ 1550.534672][T19244] __x64_sys_sendmsg+0x19b/0x260 [ 1550.534708][T19244] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1550.534751][T19244] ? __pfx_ksys_write+0x10/0x10 [ 1550.534768][T19244] ? rcu_is_watching+0x15/0xb0 [ 1550.534798][T19244] ? do_syscall_64+0xbe/0x3b0 [ 1550.534826][T19244] do_syscall_64+0xfa/0x3b0 [ 1550.534847][T19244] ? lockdep_hardirqs_on+0x9c/0x150 [ 1550.534868][T19244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.534888][T19244] ? clear_bhb_loop+0x60/0xb0 [ 1550.534914][T19244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1550.534934][T19244] RIP: 0033:0x7f73fc18eb69 [ 1550.534953][T19244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1550.534972][T19244] RSP: 002b:00007f73fd00e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1550.534995][T19244] RAX: ffffffffffffffda RBX: 00007f73fc3b5fa0 RCX: 00007f73fc18eb69 [ 1550.535019][T19244] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 1550.535033][T19244] RBP: 00007f73fd00e090 R08: 0000000000000000 R09: 0000000000000000 [ 1550.535047][T19244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1550.535060][T19244] R13: 0000000000000000 R14: 00007f73fc3b5fa0 R15: 00007ffceafccc98 [ 1550.535095][T19244] [ 1550.868060][ T1108] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1551.001025][ T9117] IPVS: starting estimator thread 0... [ 1551.218829][T19255] IPVS: using max 23 ests per chain, 55200 per kthread [ 1551.456628][T14230] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1551.480075][T14194] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1551.684402][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 1551.684424][ T30] audit: type=1326 audit(1754173184.299:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19261 comm="syz.4.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe3a5b8eb69 code=0x7ffc0000 [ 1551.971061][ T30] audit: type=1326 audit(1754173184.299:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19261 comm="syz.4.3720" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe3a5b8eb69 code=0x7ffc0000 [ 1552.001482][T19264] sctp: [Deprecated]: syz.4.3720 (pid 19264) Use of int in maxseg socket option. [ 1552.001482][T19264] Use struct sctp_assoc_value instead [ 1552.153652][ T7123] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1552.154066][ T1164] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1657.885852][ C0] ------------[ cut here ]------------ [ 1657.892631][ C0] WARNING: CPU: 0 PID: 0 at kernel/rcu/tree_stall.h:1015 rcu_check_gp_start_stall+0x2e4/0x470 [ 1657.902941][ C0] Modules linked in: [ 1657.907783][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1657.917649][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1657.927944][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 [ 1657.934335][ C0] Code: ff ff 48 c7 c7 00 04 ac 99 be 04 00 00 00 e8 63 51 78 00 4c 89 f7 b8 01 00 00 00 87 05 b5 45 04 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 80 44 14 8e 74 47 48 c7 c0 30 e5 a0 8f 48 c1 e8 [ 1657.955537][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 1657.961668][ C0] RAX: 0000000000000000 RBX: 0000000000000a02 RCX: ffffffff81a7be3d [ 1657.970016][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e144480 [ 1657.978015][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 1657.986383][ C0] R10: dffffc0000000000 R11: fffffbfff3358080 R12: 0000000000002904 [ 1657.994701][ C0] R13: 1ffff110170c75c2 R14: ffffffff8e144480 R15: dffffc0000000000 [ 1658.002720][ C0] FS: 0000000000000000(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 1658.011884][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1658.018685][ C0] CR2: 0000001b3100aff8 CR3: 000000005d58c000 CR4: 00000000003526f0 [ 1658.026789][ C0] Call Trace: [ 1658.030098][ C0] [ 1658.032975][ C0] rcu_core+0x5f7/0x1710 [ 1658.037266][ C0] ? __lock_acquire+0xab9/0xd20 [ 1658.042248][ C0] ? ktime_get+0x3e/0x1f0 [ 1658.046626][ C0] ? __pfx_rcu_core+0x10/0x10 [ 1658.051360][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1658.056762][ C0] ? sched_clock+0x3f/0x60 [ 1658.061730][ C0] ? sched_clock_cpu+0x74/0x430 [ 1658.066787][ C0] ? ktime_get+0x3e/0x1f0 [ 1658.071278][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1658.077764][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1658.083180][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1658.089295][ C0] handle_softirqs+0x283/0x870 [ 1658.094268][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1658.099176][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1658.104792][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1658.110640][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1658.115449][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1658.120695][ C0] irq_exit_rcu+0x9/0x30 [ 1658.124974][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1658.130830][ C0] [ 1658.133832][ C0] [ 1658.136900][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1658.143021][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1658.148895][ C0] Code: 53 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ad 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1658.168627][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 1658.174816][ C0] RAX: 506592dfbe223800 RBX: ffffffff81976918 RCX: 506592dfbe223800 [ 1658.183255][ C0] RDX: 0000000000000001 RSI: ffffffff8d982fba RDI: ffffffff8be1ba40 [ 1658.191548][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 1658.199635][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa0b3f0 [ 1658.207632][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 1658.215748][ C0] ? do_idle+0x1e8/0x510 [ 1658.220221][ C0] default_idle+0x13/0x20 [ 1658.224583][ C0] default_idle_call+0x74/0xb0 [ 1658.229388][ C0] do_idle+0x1e8/0x510 [ 1658.233593][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1658.238925][ C0] ? __pfx_do_idle+0x10/0x10 [ 1658.243646][ C0] ? do_idle+0x11/0x510 [ 1658.247929][ C0] cpu_startup_entry+0x44/0x60 [ 1658.252756][ C0] rest_init+0x2de/0x300 [ 1658.257035][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1658.262797][ C0] start_kernel+0x47d/0x500 [ 1658.267557][ C0] x86_64_start_reservations+0x24/0x30 [ 1658.273422][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1658.278618][ C0] common_startup_64+0x13e/0x147 [ 1658.283682][ C0] [ 1658.286827][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1658.294502][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 1658.304509][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1658.314766][ C0] Call Trace: [ 1658.318235][ C0] [ 1658.321465][ C0] dump_stack_lvl+0x99/0x250 [ 1658.326293][ C0] ? __asan_memcpy+0x40/0x70 [ 1658.330934][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1658.336176][ C0] ? __pfx__printk+0x10/0x10 [ 1658.340908][ C0] panic+0x2db/0x790 [ 1658.344841][ C0] ? __pfx_panic+0x10/0x10 [ 1658.349486][ C0] ? common_startup_64+0x13e/0x147 [ 1658.354739][ C0] __warn+0x31b/0x4b0 [ 1658.358770][ C0] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 1658.364548][ C0] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 1658.370431][ C0] report_bug+0x2be/0x4f0 [ 1658.374825][ C0] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 1658.380593][ C0] ? rcu_check_gp_start_stall+0x2e4/0x470 [ 1658.386344][ C0] ? rcu_check_gp_start_stall+0x2e6/0x470 [ 1658.392107][ C0] handle_bug+0x84/0x160 [ 1658.396474][ C0] exc_invalid_op+0x1a/0x50 [ 1658.401012][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1658.405889][ C0] RIP: 0010:rcu_check_gp_start_stall+0x2e4/0x470 [ 1658.412251][ C0] Code: ff ff 48 c7 c7 00 04 ac 99 be 04 00 00 00 e8 63 51 78 00 4c 89 f7 b8 01 00 00 00 87 05 b5 45 04 18 85 c0 0f 85 17 ff ff ff 90 <0f> 0b 90 48 81 ff 80 44 14 8e 74 47 48 c7 c0 30 e5 a0 8f 48 c1 e8 [ 1658.432059][ C0] RSP: 0018:ffffc90000007bb8 EFLAGS: 00010046 [ 1658.438161][ C0] RAX: 0000000000000000 RBX: 0000000000000a02 RCX: ffffffff81a7be3d [ 1658.446980][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8e144480 [ 1658.455248][ C0] RBP: ffffc90000007e30 R08: 0000000000000003 R09: 0000000000000004 [ 1658.463255][ C0] R10: dffffc0000000000 R11: fffffbfff3358080 R12: 0000000000002904 [ 1658.471342][ C0] R13: 1ffff110170c75c2 R14: ffffffff8e144480 R15: dffffc0000000000 [ 1658.479454][ C0] ? rcu_check_gp_start_stall+0x2cd/0x470 [ 1658.485222][ C0] ? rcu_check_gp_start_stall+0x2cd/0x470 [ 1658.490978][ C0] rcu_core+0x5f7/0x1710 [ 1658.495255][ C0] ? __lock_acquire+0xab9/0xd20 [ 1658.500237][ C0] ? ktime_get+0x3e/0x1f0 [ 1658.504624][ C0] ? __pfx_rcu_core+0x10/0x10 [ 1658.509618][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1658.514922][ C0] ? sched_clock+0x3f/0x60 [ 1658.519388][ C0] ? sched_clock_cpu+0x74/0x430 [ 1658.524270][ C0] ? ktime_get+0x3e/0x1f0 [ 1658.528634][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 1658.534916][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1658.540404][ C0] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 1658.546255][ C0] handle_softirqs+0x283/0x870 [ 1658.551067][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 1658.555950][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1658.561325][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 1658.566672][ C0] __irq_exit_rcu+0xca/0x1f0 [ 1658.571395][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 1658.576647][ C0] irq_exit_rcu+0x9/0x30 [ 1658.580921][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1658.586634][ C0] [ 1658.589606][ C0] [ 1658.592565][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1658.598610][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1658.604358][ C0] Code: 53 de 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ad 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1658.624196][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 1658.630382][ C0] RAX: 506592dfbe223800 RBX: ffffffff81976918 RCX: 506592dfbe223800 [ 1658.638515][ C0] RDX: 0000000000000001 RSI: ffffffff8d982fba RDI: ffffffff8be1ba40 [ 1658.646710][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 1658.654835][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa0b3f0 [ 1658.663050][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 1658.671546][ C0] ? do_idle+0x1e8/0x510 [ 1658.675938][ C0] default_idle+0x13/0x20 [ 1658.680408][ C0] default_idle_call+0x74/0xb0 [ 1658.685239][ C0] do_idle+0x1e8/0x510 [ 1658.689356][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1658.694597][ C0] ? __pfx_do_idle+0x10/0x10 [ 1658.699234][ C0] ? do_idle+0x11/0x510 [ 1658.703439][ C0] cpu_startup_entry+0x44/0x60 [ 1658.708232][ C0] rest_init+0x2de/0x300 [ 1658.712552][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1658.718178][ C0] start_kernel+0x47d/0x500 [ 1658.722914][ C0] x86_64_start_reservations+0x24/0x30 [ 1658.728500][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1658.733919][ C0] common_startup_64+0x13e/0x147 [ 1658.739000][ C0] [ 1659.908552][ C0] Shutting down cpus with NMI [ 1659.913865][ C0] Kernel Offset: disabled [ 1659.918695][ C0] Rebooting in 86400 seconds..