last executing test programs: 5m27.169292227s ago: executing program 2 (id=446): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r6, 0x0}) fcntl$getownex(r2, 0x10, &(0x7f0000000180)) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r9, 0x0, 0x20000000) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) r11 = socket$unix(0x1, 0x5, 0x0) getsockopt$sock_cred(r11, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r12, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) fanotify_init(0x74, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r10}) close_range(r1, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000040)='adfs\x00', 0x1) 5m26.991090525s ago: executing program 2 (id=449): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, r0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) futex(0x0, 0x87, 0x0, 0x0, 0x0, 0x0) 5m25.671952058s ago: executing program 2 (id=451): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x74) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdffffff0000000014000000180001801400020065727370616e30000000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) r3 = semget$private(0x0, 0x4000000009, 0x408) semop(r3, &(0x7f0000000240)=[{0x2, 0x7fff, 0x1000}], 0x1) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r4, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f00000024c0)={0x32, 0xfffffffffffffffe, r5, {0x7, 0x2b, 0x1, 0x5000000, 0x50, 0x0, 0x2, 0xa5c, 0x0, 0x0, 0x80}}, 0x50) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x8000000000000003, {}, 0xfd}, 0x18) r8 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)=0x0) close(r6) timer_settime(r9, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 5m25.118440197s ago: executing program 2 (id=453): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r3, &(0x7f00000007c0)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a302f328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d1ae7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13766204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf508f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edce6c85cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, &(0x7f00000005c0)={&(0x7f0000000340)={0x50, 0x0, 0x40, {0x7, 0x28, 0x7f, 0x9010, 0x0, 0x0, 0x400, 0x3, 0x0, 0x0, 0x0, 0x10001}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x1000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) syz_fuse_handle_req(r3, &(0x7f0000006140)="e0332f8f5747b9f778142cc174a9b5f0244b78bb6346cb5fc9135b8220090ee698fddc241870359d32327f299718466d88c89e68097036bb35abfe03e3c02234dcdb2c7d1209c657485ca1aa3f2fb80e71397b80fca6f3cf2367fb19eb95e5b4a0170063374645d9e020099ffd7def3d94cd29412b3d7b7a47bc70121be848cfcecea78d41a93622b134bd06e84dec07a9e5abc29cb02d5b9091e748cffacf48352628822bab7b24a17bdf4b3f3bd9fb17793496aa6490da3f58039ce5b40745dd63f82d93bed80b50ca5742d67d39029a98db95c9392e2d5fd9a35bad30cfe98682b5a069738a12c3cfd25949106cfc839202fd21c2b28e44be73280d5037351ead2dd1c277d9cc9088c6b14365eb0937ea9685f6b26232293803260f2c8cfe176b55df304bc2865b8f52581afc4beed445ae8cc405cb7bcc51103aef812c41437c5b070a3591ad0964677f4f9017bb300727dfab009056bee3671a9694be2e2f2173fcc06ceba5aed0d93a3d7cd88365c5c354788efcc705e90d572e34e9e566fc206a8167970ecb9cbc43f4d9de4d43688582b6600dfcfc7379c831e756a45835647bd87879a3e3942c61b9ea2c2af35d49a4caa9a109b0beb972996ff8924ea371e15dc48efd12b1203a7f1fe354977fcf9e4ee2c8f210387e551ddb55e5f67ee6bb9bc8772649693b0adf24606e8ccc59f020834d8cbfcadfa1770549fe464dfc412308fbaee8d30bd20c002794bfb923bac6b490841248d12ad9a0e54d1d96e3aff5dc4930a6c8b7c75264a46af7a6339725fb84e0363463ebaaaf58d6b9309ae7c87a8df8c68d2487d684011de1fa7645f3f48cf3bb61bee8bcace2f8ef5f967f2765f8086aeaa5dcc34c84e379a7ddd6438cccb5b8098dfbffffffffffffeadbc4ad2b2ef98412a46f74a171ad056429dbb723cdb9ca9f9f03170dba2870e5988b7cb755599d1eb8f7eaf5c8ded4b56022cb479d0bdfae18f69f9ecc42f4c181ea10838229ba5db7f088ad8d5f77e49c1fd93ed6b983c43b23c7eeb1233f0c114885057a27cd3f67a309e3fecba241836bc92308b830b10b04af6c9595b44e859b9ca7ef079e151fdd500060787be3a7a5b3e23b06ec70f087134504f8b8e7b6799ebfe14f698ba7a813a380e6f92cace9230aa8094a2465f7224e2becad469d0aaf0e48b0098eacfb17abdb69bb2ebba97a09d2b739b532d70db91fcb0fcb38bccdc01d7c8113024ea8b619e385e58d31899721416e10b408504a9c4fcf870d21051227440a616cf62f6637b62eceaee09029f88009be02269cb5e5ed090c6f5e6c652c31214aef301bd23ec2504f90991cd27539c1b8b54db51825e951d076cd0e70f56de4b91894ce22049205483a0fe7d7886b36118bebd96d138980e26604b6e70a7275c6b81501143119a8c2c271558202eda196704ef9ae3c33301e1afbe56d069ce4926bf531d960f3df58192f3da558adc169d48d39e24e04e95c406b34b1f4ed2726ef0f6a67dd84c75636984191d019cebfa883fdf99affcdb4c874614a5312455403895891daf7469d6721583ccd1290ab05b14516f22965fc52c4a528f1a5c20cc133fea279d9efc991ec4d51d2654daceda234f6d3b0c635db697aba3eeaf8356319adba42428266ac09a6e6495ca8f60c1c4e052068511696296e88ef86a591948627ba97df634e0063eb5f208df00a069b1213c29e58cf76f591253d60de9d7c01d29992ccc728140299c429fec0df9d90f83fa2467ce00de83b16d10c7edb80ff8d4b1b19eea9bd1e2783a0d41215c9cf23bc3ca1ff414e3f29aadba00c5a8d5b44c28c10e99140e5428278e54bfd880a93fd1b54b560422ab2bfcf120a7902373b6442c6e9867b19aa0a6b77b1634ab6fd1c8a1d90d99ebb9ebcb89d593562b266fbc53c40501f9298690283c45059b3f6ee278e46cb3904c947446c28af8855b2a68e6e0c0da205a6e12fdd15b393d579039b31c1a54230ac2ea13cf1f5540046b4dcccdd731fff7323c4880e5d2d8668d8a7f08920715c06ef9652eb55f224c82a6fdb970dbf1032403f283bd868a23f4785a6ab9c0bcd2308dba1a1f258ae512cf64784e501008db366ab7093a6cc4b6ee86154d44a1a15c10834602dd5ccf730f6d1142ac19d113496dbcb80021cb5733924265d082a8453b5c21e0245e4a2627e8df090da6a129ee49c58c1a7437369acdee15f5e4e5638f05d9f6391572d9890219def702a013a2b05239664dba44feec2a9508a3200b47de03e6a784bca2f3633df534af33da0a95a34ca845b61a22ff55a5a4c04ff9e06e7162f458a8c56e106e75ffb76a921f4057dd73d5f3801aa78ca4c78d6b79bce560404c2fe3d57876287f73e84c27c486ffb997951f9e0b3aa81a5e7804ac7360add11e7851842d0ed8df041c999e50226fef006373bbb53d5d8e9d1653924e60234fd0b6645b821746f3d88591ff66e294e8e958ca425ddbc7d604f7cbbcb9d5fe0d4ad53878eb16bc801def1005e1eb12a6d4924d2179948e7aa542f2600ba3c6c600629d64c529c7326c1f38aa4e1a6cc259e58f86400d65d67856c8f4fffc33ad4c279dc05367307f562f8127f37b03c3cf38a97cfde0c02aad8ac40d347a9e0a496f227c068dc6c666fb2b6a18990f607399b0707d135752d93739e1840b5b4c125c81eeeb318869b408f87778451e49f3ad988a8aa97672989ad367833ff7e7f0e79c37ac794fe466623e122127fb94ebbc01bc775183b26b2dc407b1aa1a55d4ce04dbe1df4fba0377fea4c4bfa5a37c4dd733fd116b9c7f50b11dd512ad68646b9ddca295fe27bee78476901fbb5c8d2856ae0e9e21ab26e3587c1325f1fa28edb4081f2ba309d5fc39f7f54abbd0d5a152c2f7e3a8b3a5ef6e097b109061c91124f41f33055a7bb86706629f614d40346715cf2fe387ef4e4fc6646839824d3ef85eeac85bc5e681320f6fa7057e0a10de8c4678b48510f77b91bb397dd1209eaba8ea1f237c348e9e0d7af1229e2c04b6560e48e3a7491f3066b63a8923becdcfd8594c1c55098a51283b599765b049831cacd9478e5e996c778d524b476f6677218c94886d7548be7617e5796e35bb3c9b13d70e4897867d85f0350e9329985f051fb556b861aef7dead54e6b29b9ad837cb4774f47a5371ef034e3ce0113e67eba8842f4ac5b51a61315bf050078c710dcf14371d9593730b1d0302ef999f488bbf42b7360171da98ad68932bda4937358fd1d0c2bcd04f7dbe2beaffa0d53cccda316cb19270cf4aa56695ef3203b49fe92d1623cc1d714da6b8f94112db1781562ab2ae50bda23debd55da440434299c992f2f8c264310d6d8ccdd042737db0253d6889d8bf36fe99a131b73300c9798b8fd58b5fc681b97e71230cd3094e441fe5cf1294bbc28f41146f06e39d5e19e673dd489dbddfc16fe281160a8008e375025cbf25e84945f2f0a5ffb2cd58273328ea9d7533b2f0861eff95823cea18dc1877183fefab808bda0890f91f1d79b36953b138fd62caea3411900647a4afadfecade2ff6274175f06614d108daaf9821c413a137e33c826957953bb39e2f852097f978c3577abcb71d68b45794247d8e82614979708f6d6d0e469828206b22913d6d320d815d42c0d943640c63196f703f946089f535eac511e26c6a5a529e875eb15aaf65fd50dcbaf37a009f2f9081cdbc744cf7aa2336913e89f1961581ad4bb6aeb1d23a787e2d3f99639871df5842c30581263d5139128f0a3f37ef48bb636d7aae06581de6baa55a12019d3ed831950915fdc1eee819dd01047bda606f2852699529718c99606246a92bb1dd9435d8f3a48646c0e423441bc783be358c0c91e6846419b6c0a81354500cb2721834dc11ba40c3bbe5717e5142922a168ca0e20fc269ea584c7f68ff7cced62c4277385368b4ad596b79c45a9c4575c37f300cab37a5693cb777fabed412934d3a77505b17cb2628119ddff45f3fcbffb50386eb9cfb6f82b37fa852ad4b65bf8e2898b11bf051cb7fb0fa81cbf81b9ceebb05498aeb2691eb15297edd682976d5a4f444cdaa82f063bc4482c28c4e6257c7cf3e5ee5a502c6527b77b12725e7526ff896ee2f8066536dce04d63072a34c19d533d4dbdb93e7185482cbf7510c5eef2f8aebebad011727cd8061a367b7e1868252bb43d9a74c9c6a10539e357d5367fac69a9296fe5a79a2e5b45950ff462e0e882aa32ff7f29b5644e5311f3e0b076c58683de29ad9dd8b2c92a41ca8313ac997e44981e82aec550bbf6c88adf3d54e9fdf93d9dce95289e9086043d888f19d209cbea79f8f5b2c81b2c3889eae1cb5305e282b883c4cfa3798eceeabb442a74ff6a8470020a296ef01d8e32553663c844e67e5a3a44375f0074ce9547a6c489ee86d7652219491f35c6b904d51a26c3d2cc77d8ff97050dd0d0aed4a1ecf1db7ac48673a1dcc70ac16f709dcf4b90148aede5302111ceaa3a81c49b724cfa206283b62513f96c1da77efafe2d2d08a5f391ab690b5d974ceed2e95e85b1039def0e94c79cc0aa1de1f8133e985adfadf4a657710487b265bb6692fd2b91a06ac98d50b052b8a13168e2638b93209238fbe67f4590a81a2cdbcc479ca9178720a6ec05bc9457f27ad2e2fd2f4e9c643ef85b6287a01f7fd597799cce7d6464ed3c95110733d4ba92314ba3dd81e51f541a6e37f8bb14376e41560f9049b4ff349a467defc205f915a345b5f06d090645180ca642c719f03e9813bff7fd635660efe38b022130d42f2cedd792bcba2bfb14385c6d1cbe5ff2e38c22f1f8d5e4d93d296042507e43f24ff904827b16f2a3572d26078d7fdb0cfdbe2e6bee07b94ae441e510681c96f97ef0ddbd7efbd80ce0689f6e2022a189dd2937d3eadd82a154a5fac91b5ef48523706957b8d5f55077973e9a036009d745a6df39ba154dc59c4ef784d62b3f2d782dc508242a1b0e4cc294b6e62e98ef946f0d984c3174cf86b8a0beb615f046ec50dd0c8a9c0f36df60bd162f1130f894085e7c47b6c28ff336f5d75166c1840e7ad07204fc10ce976505f6aece0316d8c65b973f61cea2fe4c6db722717985c25249f041c07a86b878702a8c9ab7c33fe41039041aa38489b02a28f18d69ab34619e9e35514c54592c8059984ace64b5302b5f22d68c35c7ffb23c63ce877a1e1b160dd2c329eabcc0e1e3072021bd811de3c0c7a68af20ddb9e2912b7eecc2a8cf083a252d0fe31629b20559f7b976e4d8625644385c692b8cdc2886a42d750962d0dee10a1546ecb7ef961216cc456d2450a44aab07014fe0be076ca6bcb46b644af844b2ad8b3817f1895a5d579af3dc937541f4b7e9203e7a7af534b406d8f6e3bc555d767603122ab1c4e62de19d6af63be8e39fe45732859d6d92e11f1a847f7d62764b6364aa7f95f03cc7deba467da5be71657ae50ff6bf93c51efb7d19ac9887e92fe5f3c9d545209eff307c9e02073bd3404827e148aa63c135ed668589bdfec38cb47716201a9d02f1b03993f89e96b33b32e52ddffb0580dac45422ba7a3fef76e519a3dc8d12eac60c2d2f8c4303aafa3e80135c403360d51c9cdeba3ffb31e664302f587e0e983ede7f9b2bfe2bc64bd5029cfa88445e043e08f3e9affee25e980e75d2664738726e3d2eade7dce0ece78a514bbbe5a54c121374d079e3b05996052d66889742232b73e950e1a9892e7352c9e546a8cfb48332d2b2be6327208ca51dc2869a562581947f62b0d5bfb3e0911d4854f822d6738b4deb195840d2bbae0b074b8d1e1010c24ec00052dce7d259e3044aab1a99d261fb3b49cf09dfc85473f94db06d49e202ca12182283d48144f8389a5301679901600bf8130d36315b277a99204b85a1598f84bd2d4c4893108f6717bf44234181467d6eeee61e1823268b5c60bf04d0e13e429f411b51adfca20ff1a1b1eee203d59b03da1643c3e9fc474a91470116c6c5275542adb10f3adae2ae87e88b93f334e0ceb6216fc081e8d84d8b0a503196dc50599b22b89b807627b427a815aea0dbca69e5fb215ee996395d8a21a1c67ac295be33c6517504e1f00f579f8c484873cc670b5b9e787b1c30ca1f0b25f8bb8f4bde3b3f4fa730c292cbf97b25068ba9c65f78c555d5f75d52a57958d7111e824f3afa16484f625abf62afc80654c36fd9f8284466422fb18e08274e8febc719d45b784974d50d187ad2349429af3f7930252a4d45997762e9d5f5493d408ca144532aa89aa3d43c46951dafb8f81794e2e9679ce238cfe86e104461032819d62f217faa71fa9dc6da8861015567d1f7309090e25b7015dcc6d72a5e7ba53296ab1bc72467ac50831628cf5238155aed3fb189a8b527ebd38771e16454fe51e3edde55cea454414690491207c23f6cf33aaeeda432de2d1ede04e039a16245e66cce6f4e4ea534f290f02a2a81a46d6ffea7967dfbe37461f83d472091156594852823392efc953f4ac099d74e2d0328d9f47bd952352981a34055acd0273309484ab56afa85ff0c22fb53ac5d7cc8e346b4c2f38a4e2451738146b7b90c14f826c7dbc1b2be79d83772a8d629f2dfaf15286a15be1ea22a05d4ee3de6a6bfb7e208dbbcc88e77baac940d6438aeeb77c3a32db08b46e79545b65f7f3c1bd433092bc9116668c338ab35c01cb5871167868c6b61bd4c0ca5f96e5ce2465da06c4a320839f3bb7c0dffd40d5bb9a32fcbc6f691787de7211da062616272c77c62ac83e4cb29fb954ab27d9009877b79be54acd336bfe2a6e087abaab004743f5ea4ec8ddfb8086920e8e458a413adb98077a3cf860513cc8a453eb129556c871be7e7232a6130c4332819ad17b289fdb31f8f8854dffb4cfeca6d792567b444c750820a2a8a2e0f93779e61a4966650909369fc8bd5bd2bad4ff95cc8a14f6cd83ae6411b4bfe1a9b5cdf1fcf32c54cef1731edc47d41fa581376b25006fc859b98805d70a157e501a2cb2ab425340965213adfecdb5addb2b4b2ec5cc6935e4e279bb98283fb20dfcd8a2c91aefda9dc5a57bba4d8803d1eb0f4ba9529de01e39c2aa60a91267c31d036a3f669b9377661837f58c6950fdf38986ea13ff5e9c4d966bf999002da1a854d54aa225b259d91eb88425328e7d13b06dea321a151a8dfc44755214da97168e8acf027d66b7fff45ded94fcde53ff80342d4595644549c4ed827225596e2b30480e94eb049b6cd718fe8424d044bb5098e0206047ddb81755e3cb92131dd47ec754b64c4b78f663e364cf8a74cdd9857c81316dc4ccd5f02a84b310abfbc9d6a23ee6d1eaf6b8fc1544cfeb06002c8a40fb0e49859d2073a7b1cb112713518ad5e007d0a256f901469bfa5cae98841f877faeb584d41bfe695da72ca5700ae085f39c99f769502ea9f43c0b84ca4611441d5adb3e5d0a426297e535258748169cad487f97d171c0630642943508206ce648aad2971297f3d4037d73e5fbc73460ca7401b7dbd7807273ae077a81fd0d4bc90b6068e3ec95afcfeab16619306fb23942a4308e8253b35f4912df392dfc5daf35dd842a5a1f78fc294cbdbd504056f0c7779121b5b3db7461e437347452476f3b0bb22e63aa23cb9d3e797c6c95513058d8fb2c27864ac0e1f5001c988e29c79bfa4236c7be41dee5561d825c1f0fbebc0c06cc4712e88ad5efd94f4eb4e93794af42a9752a2ebc57dc2f3881c75bbb23ad25b69619f9f5b07fe114ba291d2b5b4c1c175e1aa3ee3eda55e6126b3ad1e613bf8e0bbac727b879e7796fa0ad100893677a18b53f5eb31db43a97370d3749afbeb43b9c1c11d9515976976d1cc1e44f35d317299ceb68ea2545f2a2b92b4e1046f6f92c33aae6995593189bb2611576599fd765b8e6fe2e88674ffd57ee8252287b1904d622c36a502db45c72b0d5fc3d983cc44bc955eb43911404667a4ab147d72b69ff2514dfb820ad75758e85df88499cea94ed658b4c1c2f49fe2bbb8d2dd97f844a6df289296cfb9cd5bc8d17aa235e2c4501b1422b25acd6dbc3a91d03904c545320524f9034955ab02f5d058097c37d23984baf808d28b3e12821eb8919a77c1b6a8bdeceecfcc487c39db592817dd378a7c5127b427e7279b2a82f6b8eec6b3fabe0947e353e7a386475b15011de93e2f2891f772ef90f4aba1ee1c4d7321c81ce4dcaa378daeabb93182c319494436dbe67d252a01291cacb59686ebd53c6df21c083e98fa299cf5e9b59f1ccea95c62b1437c8ff8754a6372b5b879ebc3241f6430871eafe35337d75cb68c42862846df4342ab434f7f0a7b9f66824e1e696e3dbecde179592774b7511e5a7a1a06ba601eb5f2a935c7cef0f83ecd412a84afdd05120fceb1afb6445ebfcdff8fffffffb75dddccc45afb4f5bb1308d39309c92c0b61a322d5229881fa5d598113cce54107036ca9f63fe863d257c706fe89d5c7ae59a459c6f15ba48d80da4aff541797b26418acddb987df3544bc4918cdbbdd8dd1bc2163c89635044e7b4da878457727a667c0146a12b4c46639497243259bfe4aa5ea50eb79f39fa9209256c9a685e3e39d6d8b6a9ca7d3554fbff0908ad6c6ecf68e506c20b16cd4a98e3ada9eb0cb3eb0b75b13b6d80bf99eddf2282da52cec085d3a725b71c29395d605e1eb26143290946a3a0d24347fa46145735dbf4eabc12150b8d5f7eeca804d7ed1fecd0132d1b94ebec65cbc07dfd4d54a5140567e77c646bd92666922c43aca8e482c59b970fa43087eb76d6715e4e8e5ebe54ca391383ef685b133534fcc1e5c5eb56f9d76a888506c4ac8d289c37039e0c4f927b0e11e85c5c7ec1cf4b19bebee6014cb89ee57f2ade8d166005e956d46a0c01f60b58299479e8a59a2e88f1a7ffd08b27d92fc2772b338959bd0a1c9cb95075c3cc17043c818345b29b76c0b8ed41c8c7259cc780c657cb9509daec1558453cfe061f54e08523a55d3223897559d51096b680802140800000000000000322e007c2af0c08867291dd732bfe4b24d1d5ae517a7f5903c369ac6b157d42eb6ca8c0d7b50fd533a56c814e7cf04db3012eebd53ec1b123d65ab1e462dc19182b690d56a88ad5a1f4d89f1749b005e88085505cc6d7de8eeee08def67bc1d1519d44b7a62dc07e491f328f786956d9200f00d78829e6af7c1a5835366201374b9487330920d4c57e2f7073292e173acc2424bb0d5e0e9448b4c02f9cfc99bc408110b6a3e9bc3799e4b178c2871069bc7d9ceba564378f02b2932c36f159478b5facd452b595a86d119216af9d860bd3997305320159a69a70fc62284141d23d2dc1e5394b271d99e5570450f1c55807e96c7cbe1b7c2e3e96f69fecf0f375e36e0d2acf145ce2d996c1909402744cce63664a75e480b197c345360321e830e5912d1d7bfe5a129a67fa98e6eda5268fa588047859daa11d087d0dbf0ccc7e120e3a5820cb4f5dc06748317e3f866518eb66e39dc8a68a7411b3403fc8eeab8283dee4d767e8e5842ed922e03ae5b3c9c494d5ebc61527ccd1222740fedd9e469ba6b30761cf387d654081c7e63182860e4548748058914a9cea01caf074fe6a78fafa2b45c516f9f20af9ac6773a400fa9661a872f6b55f0ed52a9be9e9c35502604b924f0eb628d6545da322e0713f9a5587e87e4b04fa495423b7c72093b764adfd1430a2e608b7af3d2bf80fef00e5b69abe386618274921ff57621bb99739de2e066ff17e95eba027f6a35170af3a69e93359a9643e155832d45c1aa9a8f71ad35504b99d3d0a1c11ae108664ea36f4dcded083aee17ac9efe7ee3fdf7b63c7c09bcef62caa88708510d45cea79d323083ddbfe7e5d3d9138f206a7af82ef1d26c85015c3e55a285a35d0052546493536b9061db27291a9292033753b7bddac63dac6f6271689240e43523c434a65e1d35299e386c953d0c92f21057e0b7883e049d20961e75069587eb3df6206496f76bbfd96635bb19837ba2ab193d79072ffb8829306b63697ff104a65031b8a38c24cca9ba23d5cdf753169a00fe2b2c3849f234a7029b657b3324c10d553e601aa97d17024f7bf5a99f96392f4a079a83daa27f4e3b512ee8536e764ce4dc36fb7810a9a502a693e55bd9f116202c5e906703e2c43d84448598b7af78aa60a205c152841e75e23436738ccaa6bbcef87e6a237d86d1a5e38e56c162cd6d61a4fb8b410b1643ad557a22348edfa82c23db11c9abdd8141fce263a66537512e93a930a4801ad862a902c7c1e00eb7c7466b1351318b7196c2a9016c55a05e104e124bdb568132f9397e31b10d04e5284bd029ea2f6a3ed11854e09b5871d6a725c21a9ef5d7e729a90a8206d5f61e6e42e47dda3e31b9134d47872a0dd7a576b665ec6ceaa5fd7d85ed7feede9ac9fc23e40241c0318077edda75b62eb271e28fb3705f7b4950c14b721a3a74a7a4e4de02cef5de76a1602b906016c0892ef37db51b0a1dd53f28b3d896f20abbad1ad0e0220960423267fc6e1779d1150fd584dd184bb43278d2d68ff21ac0daeef5408348cb80f4a9e0e606f6048bbaa517289451f084fffb63c5d904788cfc310b5495528a58f4650dafc4e4675b99d35ebab710ac6fefcee6c51a2835510fb6d2dbd8f97c3e53fb7a23c3f3c0283eb2271504581b9c1fa31e35c117e56a5d668a9c57df3b4e1129ca019a8b877fa4a22768dfbdd9d2154e17f4a7755b065090d88982471bfb242d89af5c6782693a6ab1b1be74dfa5655ac3b5ef4ace8dc595803cf4025bdf5c0e9fbe7a12a3a313311809591da08a2cc6cd8480dc960e1f79fa208440a0e589be5756c36d5830a51c4bdc39c2a85c0431bae3a7331b2ffdf23623693d343a7938a8a8a4dd4d523c6450a705bccbb38427f06f4f84a18adf303c0ddecf4ce2b6cdde4e09a4c31816195f0fe9f05fcdc0609f8a75ad2f23d5c24faaf346c13ec0512a5c29477ac561c878085d1a323f6bab08e2fb9ee57d7bb621ef21caf3609d74036c6dc1d7be0b6058d89dcb8d9aa4462fa0a740be66e3fdaa957f27c5a26dc586ac8c927ab2d7cf1b761798ea4191be8f4423cf1a6727d0c5f27a9969a753573afa584dea82678f3471ba36d726c396d68c671e579120f1a11cd50fa66b26fc2d6cb74ba07edbd5d3a288cf58ed1255381df02b2fb8983b7cf833433d1ab8fdef12651c3507e4b69fbc4b234678cca36761e8da434e5f036f204a1400da15277ef27ac140e2d574b89c0fd617da27e6ce862883bbe81c288834b9477d0d440c15dad505b363fcc1cfef8e2e3a96438809505844196acd0af751dedfced67f209c2ffa9c6da842c93ff4b5fd54a67df904f2f31b4236728c99582a667a8461d397770a657ffa7d514b0f076d7f35e9704a836e7882a2acf0a0ec2158ac7234953c3696abdc791c0b163ee76fbcc5adc18b6fa0f51f76f3d313a0d891f1deb69f6e44289b1aa43a768b8d13270959763a2c45129daeea493a5b0d7b36753b223dca9a8037368653400", 0x2000, &(0x7f0000000700)={&(0x7f0000000100)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x2b, 0x1, 0x300900, 0x0, 0x3, 0x5, 0xded, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) prlimit64(r0, 0x7, 0x0, &(0x7f00000002c0)) bind$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x2, @none, 0x0, 0x1}, 0xe) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) syz_genetlink_get_family_id$tipc2(&(0x7f00000022c0), 0xffffffffffffffff) creat(0x0, 0x108) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r7, &(0x7f0000006340)={0x2020}, 0x2020) write$FUSE_INIT(r7, 0x0, 0x0) 5m24.378083501s ago: executing program 2 (id=455): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) mount(&(0x7f0000000300)=@nullb, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000400)='usrquota') r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000040)={0x1f, @none}, 0x8) listen(r1, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000540), &(0x7f0000000580)=0x4) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000007c0)={0x8, @raw_data="1cc406eb698d0d0dfaa701552d76942a60ebb3adb9bf67f483a90adc0580d37482df0985e272ff7087bfa3c0088ce7ed78b40431e924e85393804c4ea28618905e07f0aae8049a37696f940c27925e1d0fe1e7e75a07aa649f04eeab9ac265e8fe4f20feb7ad90190421e086bbbf15b8fde550046bfd8dea43a2262e1883940eb0264091889edc696e10b21f981733ce8584a9ef57a4677942e92dd8eda4dfeee964d96d476aa8691a6e5771ee30318542828589abb2f342276572371efdd4f71e9672069b4b3f64"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x19}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x87}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf9}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}], {0x14}}, 0x94}}, 0x0) 5m23.416029869s ago: executing program 2 (id=460): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x6, @pix={0x2, 0xd1, 0x32315241, 0x1, 0x3, 0x400000, 0x7, 0xd2c, 0x0, 0x8, 0x0, 0x4}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0xfffffffffffff20, [{}, {0x0, 0x100000000000000}]}, 0x68) listen(r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc}) fcntl$lock(r3, 0x24, &(0x7f0000000080)={0x0, 0x2, 0x7fffffffffffffff, 0x4da2}) r4 = socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) sendmsg$sock(r4, &(0x7f0000000780)={&(0x7f0000000300)=@in={0x2, 0x4e22, @local}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x24, 0xfffffffb}}], 0x18}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)="120183008000", 0x0, 0x0, 0x4, 0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}, 0x0) 5m22.598002302s ago: executing program 32 (id=460): r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x6, @pix={0x2, 0xd1, 0x32315241, 0x1, 0x3, 0x400000, 0x7, 0xd2c, 0x0, 0x8, 0x0, 0x4}}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0xfffffffffffff20, [{}, {0x0, 0x100000000000000}]}, 0x68) listen(r1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc}) fcntl$lock(r3, 0x24, &(0x7f0000000080)={0x0, 0x2, 0x7fffffffffffffff, 0x4da2}) r4 = socket$inet_udp(0x2, 0x2, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80}) sendmsg$sock(r4, &(0x7f0000000780)={&(0x7f0000000300)=@in={0x2, 0x4e22, @local}, 0x80, 0x0, 0x0, &(0x7f0000000700)=[@mark={{0x14, 0x1, 0x24, 0xfffffffb}}], 0x18}, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0xfffffffc}) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000180)={0x53, 0x0, 0x6, 0xa, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000280)="120183008000", 0x0, 0x0, 0x4, 0x0, 0x0}) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}, 0x0) 51.503996119s ago: executing program 3 (id=1294): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) (async) creat(&(0x7f0000000000)='./file0\x00', 0x108) ioctl$KVM_GET_PIT2(0xffffffffffffffff, 0x8070ae9f, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x44, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r1 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) (async) gettid() (async) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000001100)={0x100, 0xee9, &(0x7f0000000040)="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", 0x0, 0x1c8}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4008090) read$FUSE(r1, &(0x7f00000008c0)={0x2020}, 0xfffffef0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2, 0x0, 0x6}, 0x18) (async) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) (async) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) (async) r4 = openat$sw_sync(0xffffff9c, &(0x7f0000000240), 0x1a9981, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x0, "e89c5b0900f8ff0000000007000000000000005b00"}) (async) r5 = socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000088f95dd5801400010000000000", @ANYRES32=0x0, @ANYBLOB="00000000640400000800040080000000"], 0x50}}, 0x8000) (async) bind$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 50.420067828s ago: executing program 3 (id=1299): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) r1 = fsopen(&(0x7f0000000140)='iso9660\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r5, r6, 0x4e, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x9, 0x0, 0x7ffc9ffb}]}) mlockall(0x4) getsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000100), &(0x7f0000000200)=0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r8, {0xfff3}, {}, {0x0, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40020) r9 = socket$igmp(0x2, 0x3, 0x2) r10 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000009c0), 0x183106, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r10, &(0x7f0000000080)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x0, 0xffff, {"2c8b42d5bb6c7a3f461813a3c240739c"}, 0x80000000000, 0x2, 0x8000000000000001}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x3b}}}}, 0x118) write$P9_RFLUSH(r10, &(0x7f0000000240)={0x7, 0x6d, 0x1}, 0x7) setsockopt$MRT_FLUSH(r9, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x4, 0x89, 0x9, @vifc_lcl_ifindex, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x2c}, @in6=@local, 0x4e22, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x7a, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) setsockopt$MRT_INIT(r9, 0x0, 0xc8, &(0x7f0000000080), 0x4) 48.568068523s ago: executing program 3 (id=1306): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x35, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, &(0x7f0000000080), &(0x7f0000000380)=r4}, 0x20) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40010, &(0x7f00000000c0)={0xa, 0x4e24, 0x99d, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1fd5b5ec}, 0x1c) r7 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r7, r7, r7}, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={'sha224-generic\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x30}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="0200000002"], 0x10) 48.194853782s ago: executing program 4 (id=1309): read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r1 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000}, 0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8f}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000440)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f00000028c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x89}, 0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002cbdeefbfedbe993300000001bc30300840c297396899651e8bc59856eee800d2b24a9c331ac7c0dd8eae7c9ccda28a70142cc8002b16ef1a64de88eec1f1b654cb57f1ea388b67048c3b7f719be6418a45a9a8f0512bed232883500d9e5f345a0d0d708ab36a34b44b6e3a3d9408165b78212e08278466cae9424abf7389b28a056f15b8de1e8386bbab34561a0942592ca7ebd72058e761c9d0f5e9ba2fe7170e3c15374de629f06438aee9e70108f4342a39c7cd6d07ca5cedf7372", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4080000}, 0x80) r8 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_PEC(r8, 0x703, 0x60) r9 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r9, 0x7a0, 0x0) getsockname$netlink(0xffffffffffffffff, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, 0x0, 0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002700)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200000000000000000000000000802304b2c90d00006ecf7d18da83117dfd31cc26bc568d8ec789cf78425235f30947cba95fe94fb83561989dfafcf7317903182028dcadfb99252ace1ecbb82c81311d641ac0d0c96c7902b633c6f7e4190f08c8c3b6111362fe72104a48f60082dc"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route_sched(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000002900)=@newtclass={0x8c0, 0x28, 0x8, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xc, 0xfff1}, {0xffe8, 0xfff2}, {0x8, 0x375852aba219f269}}, [@tclass_kind_options=@c_multiq={0xb}, @TCA_RATE={0x6, 0x5, {0x40, 0x9}}, @tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_LMAX={0x8}]}}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0xc, 0xa2}}, @tclass_kind_options=@c_htb={{0x8}, {0x848, 0x2, [@TCA_HTB_RATE64={0xc, 0x6, 0x6}, @TCA_HTB_CEIL64={0xc, 0x7, 0x4836}, @TCA_HTB_RATE64={0xc, 0x6, 0xd323}, @TCA_HTB_RTAB={0x404, 0x4, [0x80000001, 0x200, 0x8, 0x7, 0x0, 0x6, 0x595f, 0x1, 0x9, 0x2, 0x31, 0x101, 0xffffffff, 0x4, 0x8000, 0x4, 0x9, 0x3ff, 0x7fffffff, 0x7e41fbd4, 0x7adb, 0x0, 0x5, 0x10001, 0x8, 0x2, 0xf5ba, 0x118, 0x8, 0x6, 0x0, 0x1000, 0xffffffff, 0xde, 0x6, 0x8, 0x1, 0xfffffff9, 0x1, 0x766, 0x2ba, 0xd, 0x93, 0x6, 0x5, 0x4, 0x9, 0x5, 0x2, 0xf1, 0x3, 0x400, 0xfffffffd, 0x6, 0x80000000, 0x4, 0x7, 0xa230, 0x8, 0x1ff, 0x0, 0x7, 0x3, 0x967b, 0xffffffff, 0xb0, 0x5, 0xf2d1, 0x1000, 0x96, 0x2, 0x3, 0x0, 0x0, 0xab8, 0x1, 0x4, 0x5, 0x30d7, 0x5, 0x7, 0x4, 0x5, 0x7, 0x6, 0x8, 0x2, 0x4, 0x675, 0x7, 0x3f0243f1, 0xad5a, 0x2, 0x6, 0x7, 0x3, 0x4, 0x6, 0x81, 0x3e818c18, 0x8, 0x0, 0x9, 0x0, 0x1, 0x6, 0x7, 0x0, 0xa, 0x0, 0x9, 0xfa35, 0xf89, 0xfffffff7, 0x1ff, 0xfffffc01, 0x9, 0x7, 0x8, 0x1, 0x0, 0x5, 0x6, 0x9, 0xfffffff5, 0x1ff, 0xffff, 0xeab7, 0x889, 0x3, 0x80000000, 0x6, 0x4, 0x7, 0x5, 0x6, 0xd1, 0x9b27, 0xfe, 0xf, 0x8, 0x1, 0xd, 0x8, 0x1, 0x6, 0xca0, 0x1ff, 0xb, 0x37, 0x1, 0x3bc0, 0x49, 0x5, 0x101, 0xd, 0x4f08, 0x89, 0xc19, 0x40, 0xc773, 0x6, 0x80000000, 0x1, 0x9, 0x4, 0x10, 0x1, 0x2, 0x2, 0x7, 0x9, 0x3, 0x6, 0x8, 0x8, 0x8001, 0xc1, 0x8, 0x5, 0xd, 0xfffffffb, 0x4, 0x1, 0x9c, 0x2, 0x3, 0x10, 0x698, 0x1, 0x7ff, 0xffffff00, 0x8, 0x8001, 0x7, 0xf52, 0x0, 0x5, 0x40, 0x4, 0x1ff, 0x0, 0x5, 0x7, 0xfffff800, 0x8, 0x7c73, 0x3, 0x8001, 0x5, 0xfc, 0x917, 0x4, 0x0, 0x214b, 0x4, 0x8, 0x3, 0x5, 0x3, 0x4, 0x7, 0x8000, 0x4, 0x721, 0x8, 0x8, 0x1ff, 0x442, 0x8, 0x1, 0x1, 0x5, 0x0, 0x7fffffff, 0x8, 0x9, 0x8000, 0xfffffff9, 0x4, 0xfd, 0x2, 0x80000000, 0x0, 0x5, 0x1ff, 0xa5db, 0x80000001, 0x10, 0x6, 0xa7, 0x10, 0x4, 0x8001, 0x8d26, 0x7fff]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x7}, @TCA_HTB_RTAB={0x404, 0x4, [0x40, 0x2, 0x1, 0x200, 0x2, 0xe, 0x5, 0x3, 0x6, 0x2, 0x7, 0x0, 0x3, 0x2, 0x0, 0x7, 0x40, 0x80000000, 0x8, 0x4, 0x1ff, 0x3, 0xb, 0xfffffff9, 0x401, 0x6, 0x0, 0x9, 0x7f, 0xfffffff9, 0x8, 0x0, 0x200, 0x8, 0x4, 0x3, 0x1, 0xffffffff, 0x8151, 0x2, 0x3, 0x9, 0x0, 0xd, 0x0, 0x6, 0x6ca8, 0x1000, 0xa5bb, 0x6, 0x8, 0xffffffff, 0xfffffffc, 0x1, 0xfffffc01, 0xfffff7bb, 0x47, 0x8001, 0x3, 0x10, 0x1000, 0x166a, 0x1, 0x9f, 0xfffffe01, 0x3ff, 0x0, 0x80000001, 0xb, 0xc, 0x2, 0x7, 0x1, 0x9, 0x7, 0x8, 0x6, 0x200, 0x0, 0x55, 0xda2, 0x0, 0x47f4, 0x4, 0x0, 0xfffffff9, 0x5, 0x1, 0x7, 0x80, 0x6, 0x6, 0xffffbb7c, 0x7f, 0x200, 0x800, 0x2, 0x9, 0x0, 0xdf, 0x5, 0x7, 0x3, 0x3, 0x816a, 0xa7, 0x8, 0x7812, 0x5, 0x6, 0x7fffffff, 0x7, 0x2, 0x0, 0x0, 0x4, 0x7ff, 0x3, 0xc90, 0xb, 0x3, 0x3d1, 0x1, 0xffff8001, 0xff, 0x200, 0x3, 0xa235, 0xfffff12e, 0x3, 0x839, 0x0, 0x7, 0x4, 0x7, 0x80000002, 0x1000, 0x80000001, 0xfffffff9, 0x0, 0x8000000, 0x9, 0x1000, 0x2, 0xd, 0x6, 0x7, 0x3, 0x9, 0x7f, 0x1, 0x7, 0x7, 0xff, 0x7, 0x5, 0x3, 0x7, 0x2, 0x3, 0x8, 0xfffffffb, 0x364, 0x8001, 0x2a, 0x8, 0x48, 0x5, 0x8000, 0x6, 0x80000001, 0x401, 0xffff, 0x6, 0x4, 0x1ff, 0xa, 0x8, 0x1, 0x7, 0x2694, 0x9, 0xffff4e56, 0xaa, 0x4, 0x1, 0x0, 0x1ff, 0x5, 0x7fff, 0x9, 0x5, 0x0, 0x9, 0x2, 0x9d, 0x0, 0xff, 0x0, 0x41, 0x626, 0x2, 0x5, 0x8, 0xa, 0x3a, 0x8, 0x8, 0x3522, 0x1, 0xc5, 0x3, 0x5, 0x80000000, 0x80, 0x7, 0x8000, 0x188, 0xb, 0x1, 0x8, 0xf51, 0x1000, 0x81, 0x7d8, 0x8, 0xf, 0x9, 0x4, 0xffffa5cc, 0x1, 0xfffffff0, 0x5, 0x7, 0x2, 0x9, 0x3, 0xfffffffa, 0x8, 0x200, 0x2, 0x8001, 0xf8, 0x10000, 0x80000000, 0x8, 0x6, 0x8, 0x7ff, 0x5, 0x7, 0x8, 0xffff966b, 0x101, 0x0, 0x1]}, @TCA_HTB_CEIL64={0xc}]}}, @tclass_kind_options=@c_netem={0xa}, @TCA_RATE={0x6, 0x5, {0xf, 0xc}}]}, 0x8c0}, 0x1, 0x0, 0x0, 0x40800}, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x2900004, &(0x7f0000000480)=ANY=[@ANYBLOB='nr_blocks=3k6m,uid=', @ANYRESDEC=r0, @ANYBLOB="2c736d49636b66736ecadeae746d706673002c7569643e", @ANYRESDEC=r0, @ANYRESOCT=r4]) 47.986596721s ago: executing program 3 (id=1311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0x28, 0x24, 0x1, 0x4, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x10001}]}, @typed={0x8, 0x33, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x11}}]}, 0x28}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_procfs(0x0, &(0x7f00000012c0)='net/raw6\x00') preadv(r2, &(0x7f0000000500)=[{&(0x7f0000001300)=""/4090, 0xffa}], 0x1, 0x1000000, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x700, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 47.004133771s ago: executing program 3 (id=1312): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000380)='sys_exit\x00'}, 0x18) rt_sigpending(0x0, 0x1000000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) accept$inet6(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x78) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000240)) r5 = syz_open_dev$sndmidi(&(0x7f0000000440), 0x1, 0x408100) dup3(r5, r4, 0x0) epoll_pwait2(r2, &(0x7f0000000340)=[{}, {}, {}, {}], 0x4, &(0x7f00000003c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) fsopen(&(0x7f0000000300)='ntfs3\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) pwritev2(r8, &(0x7f0000000840)=[{&(0x7f00000004c0)="648e0f851ad83f9b33", 0x9}, {&(0x7f0000000500)="765bf5e51ec742a91d1486b9be85036512cfaa2ebf5515abffe1a7fb279b2bf6cd9a6e4199357abde8f7224f597dd38e5cb0e1380ace96e5d2dbef41bbc17fd7f8bd27b40537f6f4db88ba0f8139676a8195939f73b96fba8e70416b72395b41ba505609f6a2d860738df50419dc4e99963bce14f7d2e7288151ce450d6eb8ae113adf4c303e6d063184adcc9b004de4c1634f25bf662603050e", 0x9a}, {&(0x7f00000005c0)="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", 0xfe}, {&(0x7f00000006c0)="d96c663c4791484ca0b08462e02fbf214016ca5484f7de0c6f45b72dba2d8ebf4e863bb54b67ca9f5a5a3f0ad1a9b6fc310d0627594c36c9a68154860c4b8c40037a7ff5ea4d889c004ac0d52696a9b56a9965362f2b765922b47ef87295df56cc3a759711b420b568f3b0b4cb27ab7d7bd0999c9132e9020787db9f4979a5c907c49158a289adca79bd4f028312a11ddf423d894cbe6656865e8d5bdb286db2166bf9971574f9a98bc1a88e5d5ce2b91ce88a5bdd9d2860f81a1b00b3d6e5", 0xbf}, {&(0x7f0000000780)="4e19c1a4b30cfeb8b20cf93dcdefe6e836803c1ea3729465d9b7bc88a8fdc912c53e58d370894f29cb1f15a0f00fe4660ed7fb00a1a83abdd68a601f4d22265f010df9816f6f34b8", 0x48}, {&(0x7f0000000800)="1b49f1295a02fadbba4bb7072e21c5cd53691a62", 0x14}], 0x6, 0x3, 0x9, 0x17) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4, r7}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) fchdir(r10) 45.985009952s ago: executing program 4 (id=1316): mmap(&(0x7f0000389000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = fanotify_init(0x8, 0x8000) r2 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r1, 0x641, 0x48001018, r2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r3) sendmsg$IEEE802154_LIST_IFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r4, 0x137c34ab10f3c183, 0x70bd26, 0x25dfdbfc}, 0x14}}, 0x2000c054) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x640100fe, @local}, {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xfffe, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x9, 0x1, 0x8, 0x2, 0x1}]}}}}}}}, 0x0) sendfile(r5, r5, 0x0, 0x7f03) r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') move_mount(r9, 0x0, r9, &(0x7f0000000080)='./mnt\x00', 0x214) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r5) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f00000002c0)={&(0x7f0000389000/0x1000)=nil, &(0x7f0000389000/0x11000)=nil, 0x1000, 0x2}) sendmsg$L2TP_CMD_NOOP(r9, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r10, 0x10, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4000044) ioctl$KVM_GET_VCPU_EVENTS(r11, 0x4140aecd, &(0x7f0000000080)) 45.045442887s ago: executing program 4 (id=1317): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x210}) sendfile(r0, r0, 0x0, 0xb) r1 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000140)=0xef7b) copy_file_range(r0, &(0x7f0000000100)=0xf0, r0, 0x0, 0x9, 0x0) r2 = openat$smackfs_ipv6host(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) write$smackfs_ipv6host(r2, &(0x7f0000000200)=@l2={{0x7, 0x3a, 0x9, 0x3a, 0x0, 0x3a, 0x9, 0x3a, 0x4080, 0x3a, 0xf54, 0x3a, 0x8, 0x3a, 0x38}, 0x2f, 0x50, 0x20, '(%\''}, 0xeb) 44.913508707s ago: executing program 4 (id=1319): r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=ANY=[@ANYBLOB="1010"], 0x1010}, 0x0, 0xe3d08660d3cd4684}) io_uring_enter(r0, 0x92, 0x0, 0x0, 0x0, 0x0) 44.741638739s ago: executing program 4 (id=1320): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x19, 0x1, 0x0, 0x0, 0x0, 0x4337}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x28}]}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) 44.578916447s ago: executing program 4 (id=1321): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000838500000004000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x6, 0x2) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000100)={0x0, 0xcb, "c24dfe4506d390f3c0db560659eaeb24c8c8f615b4fdbf36373945d8561e1fa856411438dddf5d62bd8523eb0e969ba2b0bd8ca6d3d360a96ae145f848da06b869faa2681c5b188aa1ac5ae9f43bb32cd931974803c49d86b5b4898d6164a76e628e10bde4015bf85eab13093bc0924ebb0ed8724105293bcfddf549996928a4f347b5757e01520700a6876b6078695ee24cbbb87d801de5bb433e3a6c0a988ded81b77bf8a2dd32a3f68acdd5a197ab0c94dd3a159019ed591d04645428db3922fe050c8c596d3ddc4296"}) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000300)={0xf0f003, 0x6}) (async, rerun: 64) read(r1, &(0x7f0000000000)=""/197, 0xc5) (rerun: 64) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000240)=0x7f, 0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x4005, 0x1, {0x1, @win={{}, 0x7, 0xff7ffff4, 0x0, 0x0, 0x0}}, 0x2000}) 28.993836474s ago: executing program 33 (id=1321): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000838500000004000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = syz_open_dev$vim2m(&(0x7f0000000680), 0x6, 0x2) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000100)={0x0, 0xcb, "c24dfe4506d390f3c0db560659eaeb24c8c8f615b4fdbf36373945d8561e1fa856411438dddf5d62bd8523eb0e969ba2b0bd8ca6d3d360a96ae145f848da06b869faa2681c5b188aa1ac5ae9f43bb32cd931974803c49d86b5b4898d6164a76e628e10bde4015bf85eab13093bc0924ebb0ed8724105293bcfddf549996928a4f347b5757e01520700a6876b6078695ee24cbbb87d801de5bb433e3a6c0a988ded81b77bf8a2dd32a3f68acdd5a197ab0c94dd3a159019ed591d04645428db3922fe050c8c596d3ddc4296"}) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000300)={0xf0f003, 0x6}) (async, rerun: 64) read(r1, &(0x7f0000000000)=""/197, 0xc5) (rerun: 64) setsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000240)=0x7f, 0x4) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000340)={0x0, 0x4005, 0x1, {0x1, @win={{}, 0x7, 0xff7ffff4, 0x0, 0x0, 0x0}}, 0x2000}) 25.05247731s ago: executing program 3 (id=1312): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000380)='sys_exit\x00'}, 0x18) rt_sigpending(0x0, 0x1000000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) accept$inet6(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000002240)={0x10, 0xffffffffffffffda}, 0x10) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, 0x0}, 0x78) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000240)) r5 = syz_open_dev$sndmidi(&(0x7f0000000440), 0x1, 0x408100) dup3(r5, r4, 0x0) epoll_pwait2(r2, &(0x7f0000000340)=[{}, {}, {}, {}], 0x4, &(0x7f00000003c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000001a40)=""/102392, 0x18ff8) fsopen(&(0x7f0000000300)='ntfs3\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r8 = socket$inet_udplite(0x2, 0x2, 0x88) pwritev2(r8, &(0x7f0000000840)=[{&(0x7f00000004c0)="648e0f851ad83f9b33", 0x9}, {&(0x7f0000000500)="765bf5e51ec742a91d1486b9be85036512cfaa2ebf5515abffe1a7fb279b2bf6cd9a6e4199357abde8f7224f597dd38e5cb0e1380ace96e5d2dbef41bbc17fd7f8bd27b40537f6f4db88ba0f8139676a8195939f73b96fba8e70416b72395b41ba505609f6a2d860738df50419dc4e99963bce14f7d2e7288151ce450d6eb8ae113adf4c303e6d063184adcc9b004de4c1634f25bf662603050e", 0x9a}, {&(0x7f00000005c0)="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", 0xfe}, {&(0x7f00000006c0)="d96c663c4791484ca0b08462e02fbf214016ca5484f7de0c6f45b72dba2d8ebf4e863bb54b67ca9f5a5a3f0ad1a9b6fc310d0627594c36c9a68154860c4b8c40037a7ff5ea4d889c004ac0d52696a9b56a9965362f2b765922b47ef87295df56cc3a759711b420b568f3b0b4cb27ab7d7bd0999c9132e9020787db9f4979a5c907c49158a289adca79bd4f028312a11ddf423d894cbe6656865e8d5bdb286db2166bf9971574f9a98bc1a88e5d5ce2b91ce88a5bdd9d2860f81a1b00b3d6e5", 0xbf}, {&(0x7f0000000780)="4e19c1a4b30cfeb8b20cf93dcdefe6e836803c1ea3729465d9b7bc88a8fdc912c53e58d370894f29cb1f15a0f00fe4660ed7fb00a1a83abdd68a601f4d22265f010df9816f6f34b8", 0x48}, {&(0x7f0000000800)="1b49f1295a02fadbba4bb7072e21c5cd53691a62", 0x14}], 0x6, 0x3, 0x9, 0x17) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x4, r7}) r10 = socket$pppl2tp(0x18, 0x1, 0x1) fchdir(r10) 10.875943111s ago: executing program 0 (id=1397): creat(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x129282, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0xffffffff90010002, 0x0, 0x0, 0x0, 0xfffffffe}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000007080)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0x2020) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4048aecb, 0x0) unshare(0x2040400) r6 = socket$inet6(0xa, 0x2, 0x0) preadv2(r6, 0x0, 0x0, 0x6, 0x6, 0x2) mkdir(0x0, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) getsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) 9.586174827s ago: executing program 0 (id=1400): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000500000000000000000000001801000020a0702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) memfd_create(&(0x7f0000000500)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90k\x96\x05\r\x84\x87\x1c\b\x8c`\xea)A\x90m\xb6&\xd0\x9d\xb8\x7f\xc6W\x81\xb7\xf9\xbd\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff\xd6\xf2\xfe\xf3]\x15&\x97]mC\v\f\n\x1f\xe2\t\x14\x84\xe0\xa4\xda\xe7\xe8\xd5ue\xf4\xf8\xde\xf3\x00q?[\xba=\x1a\xb2\xdf]\xc0\xeb\x16\xe4\x7f\x17o\x1b\xa4M\xafa\xc7tR?3hH\x18\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xe3\xb5\xd6\xed1\x10\x8d\x87N\x9c8\xfd\xd0t\xe6?\x9c\x95`\xfc_\'N\x90\xb7\xb5\x0f\xeb\x17{\x1fu\'\xb4=\xbcO@AP1\x9d\x1b\xba%\xca!\x0eRsGT\xdf\xd8;\x9ea\xd0\x01\x0eq~\x00\xfbh\xf7\xc8\x97\\\xc0\\\x17', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x31}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x59c4, 0x8, 0x1000, 0x5cc}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x2, 0x0, 0x10004}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0x4, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1, {0x0, r5}}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) unshare(0x6a040000) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/freeze_filesystems', 0x149882, 0x8) write$sysctl(r6, &(0x7f0000000040)='1\x00', 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xc3490000) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_smc(0x2b, 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) socket(0x1e, 0x80000, 0xc52d) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x9, 0xe, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x1}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc72d}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x5, 0xb8, &(0x7f0000000780)=""/184, 0x41000, 0x50, '\x00', r11, @fallback=0x35, r6, 0x8, &(0x7f00000004c0)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0x8, 0xb4, 0x4}, 0x10, 0xffffffffffffffff, r1, 0x4, &(0x7f0000000380)=[r6, r6, r6, r6, r6, r6, r6], &(0x7f0000000580)=[{0x1, 0x5, 0xa, 0x5}, {0x3, 0x5, 0x3, 0x5}, {0x1, 0x2, 0x4, 0x6}, {0x4, 0x5, 0xe, 0x3}], 0x10, 0x7eb, @void, @value}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x57) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x702, 0xe, 0x0, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r7, 0x0, 0x82, &(0x7f00000000c0)={'nat\x00', 0x0, 0x0, 0x0, [0xf1, 0xfffffffb, 0x7, 0xfee, 0x3, 0x3]}, &(0x7f0000000340)=0x78) 6.856045045s ago: executing program 1 (id=1403): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x8084}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x10, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000180)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) pipe(0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 5.822876535s ago: executing program 1 (id=1404): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x5e62, 0x100000, @mcast2}, 0x1c) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r2) r3 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x50483, 0x0) ioctl$SNAPSHOT_GET_IMAGE_SIZE(r3, 0x8008330e, &(0x7f0000000400)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r4, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0x2000000000000019, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000a4000000006911120000000000851000000200000009d4f7ff0400000085100000faffffff95d71000000000009500a505000000"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r4, @sk_reuseport, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf8c, @void, @value}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000ac0)) 5.210641636s ago: executing program 0 (id=1405): r0 = socket(0x10, 0x803, 0x0) mq_open(0x0, 0x6e93ebbbcc0884f2, 0x196, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 5.101842928s ago: executing program 1 (id=1406): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) (rerun: 64) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) (async) r3 = fsopen(&(0x7f0000000240)='btrfs\x00', 0x1) keyctl$get_security(0x11, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000300)='5\xfd\x04\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd93\xe1\xa2\x05\x83Z\xbc\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r3, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000100)={0x1c, r2, 0xbb542054e2e11625, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WDEV={0x0, 0x99, {0x9, 0x2a}}]}, 0xfd66}, 0x1, 0x0, 0x0, 0x8c1}, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r8, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003}, 0x38) 3.157950553s ago: executing program 1 (id=1410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000002b40)=0x3ff9, 0x4) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000100)=0x6, 0x4) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000002100)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data}}}}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffddbdf25d4ade8f6efba603a91037c00"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) bind$can_raw(0xffffffffffffffff, &(0x7f00000000c0), 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0xfc5e, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r6, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0], [], [], [0x0, 0x3, 0x400000006]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000100)={r10}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r9}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r7, 0xc00c642d, &(0x7f0000000340)={r11, 0x80000}) 3.120062468s ago: executing program 5 (id=1411): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xf0b, 0x1400, 0x25dfdbff, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}]}}]}, 0x48}}, 0x44040) 3.02551449s ago: executing program 0 (id=1412): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x143600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prlimit64(0x0, 0x7, &(0x7f00000000c0)={0x4, 0x6}, 0x0) ioctl$KVM_CREATE_GUEST_MEMFD(r3, 0xc040aed4, &(0x7f00000001c0)={0x1fe0000}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c00"], 0x140}}, 0x0) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, 0x1, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) 2.799743811s ago: executing program 5 (id=1413): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x2, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xfeffffff, 0xffffffff, 0x2d0, 0x2d0, 0x2d0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00', {}, {0xff}, 0x8}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x4, 0x0, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mount$9p_tcp(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e23,msize=0x0000000000000#01,subj_user=tmpfs\x00,\x00']) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x7, 0x19, &(0x7f00000009c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x901e}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @generic={0x5, 0xc, 0x3, 0x7, 0xf}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b00)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000b40)={0x3, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000e40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r3], 0x0, 0x10, 0x7, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)) syz_emit_ethernet(0x32, &(0x7f0000001500)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0xd}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {0x0, 0x4e24, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x7d, 0x100}}}}}}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x1a1040, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB="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", @ANYRESHEX=r2], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 2.304745969s ago: executing program 0 (id=1414): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f00000193c0)={0x11, 0x13, &(0x7f0000019300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000206a932500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000000)='sys_enter\x00', r1, 0x0, 0x91}, 0x18) kexec_load(0x0, 0x0, 0x0, 0x3e0000) epoll_create1(0x80000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) close(r0) 2.194724358s ago: executing program 1 (id=1415): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000680)={0x14, 0x69, 0x1, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_usb_connect(0x2, 0x7e, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0xb4, 0x8f, 0x8e, 0x8, 0x12d1, 0xb1d0, 0x73d3, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x6c, 0x3, 0x2, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8b, 0x0, 0x0, 0xff, 0x3, 0x74}}, {{0x9, 0x4, 0xc3, 0x0, 0x0, 0xa1, 0x97, 0xa9, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x7, 0x3}, [@processing_unit={0xb, 0x24, 0x7, 0x6, 0x2, 0x0, "b79e02e3"}, @extension_unit={0x9, 0x24, 0x8, 0x1, 0x9, 0x2b, "b261"}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x206, 0x4, 0x1, 0x200, 0x7, 0x5}, @processing_unit={0xb, 0x24, 0x7, 0x6, 0x0, 0xb, "3a865078"}, @mixer_unit={0xb, 0x24, 0x4, 0x2, 0x8, "9b486f298d31"}]}]}}, {{0x9, 0x4, 0x37, 0x0, 0x1, 0xb9, 0x45, 0xed, 0x4, [], [{{0x9, 0x5, 0xf, 0xc, 0x20, 0x4, 0x4, 0x2}}]}}]}}]}}, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8923, &(0x7f0000000000)={'netdevsim0\x00', 0x7}) r4 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2eaa000000000000711043000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) setgid(0xffffffffffffffff) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x0, 0x1, 0x4, 0x0, 0x0, {0x0, 0x2710}, {}, 0x0, 0x1, {0x0}, 0x2000000}) 1.492482935s ago: executing program 5 (id=1416): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r1, 0x4bfa, 0x10000000000004) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$binfmt_register(r2, &(0x7f0000000040)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x6, 0x3a, ',-r', 0x3a, 'veth0_to_team\x00', 0x3a, './file0', 0x3a, [0x50]}, 0x39) ioctl$RTC_WIE_OFF(r3, 0x7010) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="01002cbd7000fddbdf250a00000004000280180001801400020076657468305f746f5f7465616d0000001800028011000400157cc60b4bfa014adbbed2076d000000"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 1.283741403s ago: executing program 5 (id=1417): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f0000001240)=""/102400, 0x200000, 0x80000000000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x444cf}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_UDP_CSUM={0x5}]}}}]}, 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX], 0x60}}, 0x0) 1.130630371s ago: executing program 6 (id=1356): r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007e3dc410cd0621013ddd0102030109021b00010009400009048500"], 0x0) socket$packet(0x11, 0x3, 0x300) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000140)='htcp\x00', 0x5) shutdown(r2, 0x1) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.123578334s ago: executing program 5 (id=1418): bpf$MAP_CREATE(0x0, 0x0, 0x48) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x2, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0x7af79b76c6e36690, 0xfff3}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x26}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRESDEC=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r1 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x803341) ioctl$SG_IO(r1, 0x2285, &(0x7f00000003c0)={0x53, 0xffffffffffffffff, 0x6, 0x6, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000480)="41d599ca01a5", 0x0, 0x400, 0x20004, 0x1, 0x0}) write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x10, 0x400000000080803, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r4, 0x2, &(0x7f00000000c0)={0x1, 0x2}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x7c, 0x30, 0x2, 0x0, 0x0, {}, [{0x68, 0x1, [@m_ct={0x64, 0x1, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x0, 0x80000000}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_PARMS={0x18, 0x1, {0x7ff, 0x610, 0xffffffffffffffff, 0x7}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) 914.945917ms ago: executing program 0 (id=1419): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000015c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x110b, 0x8000000000002}) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r5, 0xf3, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r4, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 0s ago: executing program 5 (id=1420): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000000)={@private2, 0x0, r4}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c0000001000390400"/20, @ANYRES32=r4, @ANYBLOB="19e8b61c3f71178b905dcd", @ANYRESHEX=r3, @ANYRESDEC=r2], 0x6c}}, 0x0) write$smackfs_ipv6host(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="3078313030303030303030303030303030303a3078303030303030303030303030303030343a307830303030303030303030303030303016400000003030303030303030303030303830303a3078303030303030303030303030303030643a3078303032303030303030303030303030353a3078303030303030303030303030303066663a3078303030303030343030303030303430332f301e303030303030303030303030303030303935202c003f5d87e3dc2136e2c7f2e28cf6b846f9fed9b8ade9ac4ecfd78e1b611c4d06e3a0ebd7e8895a11eaa5e7b40baaa7a603a8369b1f06ef624e6dca4840ded86eff8c351f249c43470e4269cc9392b6db3ac709e8cdc4461e3ba84cd3fcd95f75fd8619a5360b0b66cc96"], 0xaf) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x6, 0x800000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) sendmsg$inet(r3, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000300)="862a5f5356b4a0aefd3299673fa2257c05604a954a540786375709353134707a2e595216f465ee2a42eb898bd1b8c380a961b07bf8401d4dacac415d235a0aa5a04a86393d0f260b9f40b9693c7b5282d37a7f6c35f690846bc9662ddc64c685429ca800703827c5e280c2a1926fd597cc720b712843887cf8", 0x79}, {&(0x7f00000000c0)="46a54976afcf0a4f601fd9727c67d71f257c7b4b5fdff19165d4c4149dce3dd30c2d1c68e31e386fc124b2bc07eb4bc4e6ce3f18253a60565c7041d4e3d137837721ee8ebb69aca33a7795956ac07d3926f04c8534f978646144dacf2080d4565c7d4c8291735c9cbd89731016", 0x6d}], 0x2, &(0x7f00000005c0)}, 0x8000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = io_uring_setup(0x6c70, &(0x7f0000001300)={0x0, 0x15c, 0x100, 0xffffffff}) r7 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r6, 0x4, &(0x7f0000000000)=r7, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000001240)) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r8, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000000)={r9, @in={{0x2, 0x0, @empty}}, 0x0, 0x7ffe}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000340)={r9, @in={{0x2, 0x4e21, @empty}}, 0x0, 0x0, 0x0, 0x81, 0x34, 0xffffffff}, 0x9c) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) kernel console output (not intermixed with test programs): 382.273635][ T9196] do_syscall_64+0xfa/0x3b0 [ 382.273668][ T9196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.273684][ T9196] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 382.273699][ T9196] ? clear_bhb_loop+0x60/0xb0 [ 382.273719][ T9196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.273735][ T9196] RIP: 0033:0x7efdf1d8e929 [ 382.273751][ T9196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.273765][ T9196] RSP: 002b:00007efdf2b30038 EFLAGS: 00000246 ORIG_RAX: 000000000000012f [ 382.273784][ T9196] RAX: ffffffffffffffda RBX: 00007efdf1fb6080 RCX: 00007efdf1d8e929 [ 382.273796][ T9196] RDX: 00002000000000c0 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 382.273808][ T9196] RBP: 00007efdf2b30090 R08: 0000000000000200 R09: 0000000000000000 [ 382.273819][ T9196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.273828][ T9196] R13: 0000000000000001 R14: 00007efdf1fb6080 R15: 00007fff1a006c08 [ 382.273857][ T9196] [ 382.647020][ T9196] overlayfs: failed to get inode (-12) [ 382.842813][ T9199] netlink: 'syz.4.923': attribute type 10 has an invalid length. [ 382.869295][ T9206] netlink: 76 bytes leftover after parsing attributes in process `syz.1.924'. [ 382.965900][ T9199] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 383.661516][ T9218] netlink: 36 bytes leftover after parsing attributes in process `syz.3.925'. [ 384.935728][ T9240] FAULT_INJECTION: forcing a failure. [ 384.935728][ T9240] name failslab, interval 1, probability 0, space 0, times 0 [ 385.005551][ T9240] CPU: 0 UID: 0 PID: 9240 Comm: syz.0.933 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 385.005576][ T9240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 385.005586][ T9240] Call Trace: [ 385.005593][ T9240] [ 385.005601][ T9240] dump_stack_lvl+0x189/0x250 [ 385.005627][ T9240] ? __pfx____ratelimit+0x10/0x10 [ 385.005650][ T9240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 385.005670][ T9240] ? __pfx__printk+0x10/0x10 [ 385.005691][ T9240] ? __pfx___might_resched+0x10/0x10 [ 385.005717][ T9240] should_fail_ex+0x414/0x560 [ 385.005740][ T9240] ? nf_tables_commit+0xaa9/0x8700 [ 385.005757][ T9240] should_failslab+0xa8/0x100 [ 385.005778][ T9240] __kvmalloc_node_noprof+0x161/0x5f0 [ 385.005799][ T9240] ? nf_tables_commit+0xaa9/0x8700 [ 385.005814][ T9240] ? nf_tables_commit+0x79d/0x8700 [ 385.005829][ T9240] nf_tables_commit+0xaa9/0x8700 [ 385.005840][ T9240] ? do_raw_spin_unlock+0x122/0x240 [ 385.005862][ T9240] ? __pfx___folio_put+0x10/0x10 [ 385.005873][ T9240] ? __pfx_nf_tables_commit+0x10/0x10 [ 385.005885][ T9240] ? free_large_kmalloc+0xeb/0x200 [ 385.005898][ T9240] ? free_large_kmalloc+0x145/0x200 [ 385.005911][ T9240] ? nf_tables_newrule+0x23bc/0x2890 [ 385.005931][ T9240] ? __pfx_nf_tables_newrule+0x10/0x10 [ 385.005956][ T9240] nfnetlink_rcv+0x1a4e/0x2520 [ 385.005987][ T9240] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 385.006006][ T9240] ? __lock_acquire+0xab9/0xd20 [ 385.006060][ T9240] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.006070][ T9240] ? netlink_deliver_tap+0x2e/0x1b0 [ 385.006083][ T9240] netlink_unicast+0x75b/0x8d0 [ 385.006098][ T9240] netlink_sendmsg+0x805/0xb30 [ 385.006114][ T9240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.006129][ T9240] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 385.006140][ T9240] ? __pfx_netlink_sendmsg+0x10/0x10 [ 385.006151][ T9240] __sock_sendmsg+0x21c/0x270 [ 385.006170][ T9240] ____sys_sendmsg+0x505/0x830 [ 385.006184][ T9240] ? __pfx_____sys_sendmsg+0x10/0x10 [ 385.006200][ T9240] ? import_iovec+0x74/0xa0 [ 385.006211][ T9240] ___sys_sendmsg+0x21f/0x2a0 [ 385.006223][ T9240] ? __pfx____sys_sendmsg+0x10/0x10 [ 385.006254][ T9240] ? __fget_files+0x2a/0x420 [ 385.006266][ T9240] ? __fget_files+0x3a0/0x420 [ 385.006284][ T9240] __x64_sys_sendmsg+0x19b/0x260 [ 385.006297][ T9240] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 385.006314][ T9240] ? __pfx_ksys_write+0x10/0x10 [ 385.006323][ T9240] ? rcu_is_watching+0x15/0xb0 [ 385.006340][ T9240] ? do_syscall_64+0xbe/0x3b0 [ 385.006357][ T9240] do_syscall_64+0xfa/0x3b0 [ 385.006369][ T9240] ? lockdep_hardirqs_on+0x9c/0x150 [ 385.006383][ T9240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.006392][ T9240] ? clear_bhb_loop+0x60/0xb0 [ 385.006404][ T9240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.006420][ T9240] RIP: 0033:0x7ff644b8e929 [ 385.006430][ T9240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.006439][ T9240] RSP: 002b:00007ff645981038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 385.006449][ T9240] RAX: ffffffffffffffda RBX: 00007ff644db5fa0 RCX: 00007ff644b8e929 [ 385.006456][ T9240] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 385.006462][ T9240] RBP: 00007ff645981090 R08: 0000000000000000 R09: 0000000000000000 [ 385.006468][ T9240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 385.006473][ T9240] R13: 0000000000000000 R14: 00007ff644db5fa0 R15: 00007fffcf751dd8 [ 385.006489][ T9240] [ 386.603015][ T9260] netlink: 76 bytes leftover after parsing attributes in process `syz.3.941'. [ 387.318149][ T9265] Dead loop on virtual device ipvlan1, fix it urgently! [ 388.141965][ T9253] openvswitch: netlink: Message has 4 unknown bytes. [ 388.751370][ T30] audit: type=1326 audit(1750739488.816:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9282 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff644b8e929 code=0x7ffc0000 [ 388.795136][ T9283] netlink: 44 bytes leftover after parsing attributes in process `syz.0.945'. [ 388.894135][ T9279] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 388.907768][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 388.951657][ T30] audit: type=1326 audit(1750739488.816:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9282 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff644b8e929 code=0x7ffc0000 [ 389.096677][ T30] audit: type=1326 audit(1750739488.816:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9282 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff644b8e929 code=0x7ffc0000 [ 389.174843][ T30] audit: type=1326 audit(1750739488.856:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9282 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff644b8d290 code=0x7ffc0000 [ 389.288090][ T30] audit: type=1326 audit(1750739488.866:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9282 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff644b90157 code=0x7ffc0000 [ 389.364460][ T30] audit: type=1326 audit(1750739488.866:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9282 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff644b8e929 code=0x7ffc0000 [ 389.436715][ T30] audit: type=1326 audit(1750739488.866:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9282 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ff644b90157 code=0x7ffc0000 [ 389.517279][ T30] audit: type=1326 audit(1750739488.866:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9282 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7ff644b8d58a code=0x7ffc0000 [ 389.541976][ T9300] FAULT_INJECTION: forcing a failure. [ 389.541976][ T9300] name failslab, interval 1, probability 0, space 0, times 0 [ 389.584479][ T9300] CPU: 1 UID: 0 PID: 9300 Comm: syz.0.951 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 389.584506][ T9300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 389.584515][ T9300] Call Trace: [ 389.584521][ T9300] [ 389.584528][ T9300] dump_stack_lvl+0x189/0x250 [ 389.584548][ T9300] ? __pfx____ratelimit+0x10/0x10 [ 389.584562][ T9300] ? __pfx_dump_stack_lvl+0x10/0x10 [ 389.584576][ T9300] ? __pfx__printk+0x10/0x10 [ 389.584587][ T9300] ? __pfx___might_resched+0x10/0x10 [ 389.584601][ T9300] ? fs_reclaim_acquire+0x7d/0x100 [ 389.584621][ T9300] should_fail_ex+0x414/0x560 [ 389.584637][ T9300] should_failslab+0xa8/0x100 [ 389.584651][ T9300] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 389.584663][ T9300] ? v9fs_session_init+0xfd/0x19a0 [ 389.584681][ T9300] kstrdup+0x42/0x100 [ 389.584696][ T9300] v9fs_session_init+0xfd/0x19a0 [ 389.584723][ T9300] ? __pfx_v9fs_session_init+0x10/0x10 [ 389.584743][ T9300] ? __kasan_kmalloc+0x93/0xb0 [ 389.584755][ T9300] ? v9fs_mount+0xb2/0xa10 [ 389.584767][ T9300] v9fs_mount+0xc8/0xa10 [ 389.584778][ T9300] ? __kasan_kmalloc+0x93/0xb0 [ 389.584789][ T9300] ? __pfx_v9fs_mount+0x10/0x10 [ 389.584800][ T9300] ? rcu_is_watching+0x15/0xb0 [ 389.584814][ T9300] ? cap_capable+0x11f/0x460 [ 389.584826][ T9300] legacy_get_tree+0xfa/0x1a0 [ 389.584839][ T9300] ? __pfx_v9fs_mount+0x10/0x10 [ 389.584850][ T9300] vfs_get_tree+0x92/0x2b0 [ 389.584864][ T9300] do_new_mount+0x24a/0xa40 [ 389.584881][ T9300] __se_sys_mount+0x317/0x410 [ 389.584897][ T9300] ? __pfx___se_sys_mount+0x10/0x10 [ 389.584914][ T9300] ? rcu_is_watching+0x15/0xb0 [ 389.584929][ T9300] ? do_syscall_64+0xbe/0x3b0 [ 389.584943][ T9300] ? __x64_sys_mount+0x20/0xc0 [ 389.584956][ T9300] do_syscall_64+0xfa/0x3b0 [ 389.584969][ T9300] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.584983][ T9300] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.584992][ T9300] ? clear_bhb_loop+0x60/0xb0 [ 389.585003][ T9300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.585012][ T9300] RIP: 0033:0x7ff644b8e929 [ 389.585022][ T9300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.585031][ T9300] RSP: 002b:00007ff645981038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 389.585042][ T9300] RAX: ffffffffffffffda RBX: 00007ff644db5fa0 RCX: 00007ff644b8e929 [ 389.585049][ T9300] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 389.585055][ T9300] RBP: 00007ff645981090 R08: 0000200000000200 R09: 0000000000000000 [ 389.585061][ T9300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 389.585066][ T9300] R13: 0000000000000000 R14: 00007ff644db5fa0 R15: 00007fffcf751dd8 [ 389.585081][ T9300] [ 389.854302][ T30] audit: type=1326 audit(1750739488.866:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9282 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff644b8e929 code=0x7ffc0000 [ 389.876347][ T30] audit: type=1326 audit(1750739488.866:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9282 comm="syz.0.945" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff644b907bc code=0x7ffc0000 [ 389.915070][ T5872] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 389.986706][ T5955] IPVS: starting estimator thread 0... [ 390.080929][ T5872] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 390.096751][ T9303] IPVS: using max 30 ests per chain, 72000 per kthread [ 390.103735][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.336340][ T5872] usb 4-1: config 0 descriptor?? [ 390.350073][ T5872] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 392.214048][ T5872] gspca_sunplus: reg_w_riv err -71 [ 392.224568][ T5872] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 392.243043][ T9326] input: syz0 as /devices/virtual/input/input7 [ 392.248118][ T5872] usb 4-1: USB disconnect, device number 27 [ 392.347987][ T1073] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 392.518363][ T1073] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 392.534908][ T1073] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.555430][ T1073] usb 6-1: config 0 has no interface number 0 [ 392.596753][ T1073] usb 6-1: config 0 interface 69 has no altsetting 0 [ 392.603511][ T1073] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 392.644823][ T1073] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.685070][ T1073] usb 6-1: config 0 descriptor?? [ 392.720695][ T1073] usb 6-1: selecting invalid altsetting 0 [ 393.126850][ T9346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.135481][ T9346] batadv_slave_0: entered promiscuous mode [ 393.602391][ T1073] usb 6-1: USB disconnect, device number 6 [ 394.353744][ T9368] overlayfs: missing 'lowerdir' [ 394.429022][ T9367] netlink: 16 bytes leftover after parsing attributes in process `syz.1.968'. [ 395.183855][ T9372] binder: 9363:9372 ioctl c0046209 0 returned -22 [ 395.341039][ T5984] Dead loop on virtual device ipvlan1, fix it urgently! [ 395.698646][ T9387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.972'. [ 395.994996][ T9364] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 396.248550][ T9383] openvswitch: netlink: Message has 4 unknown bytes. [ 396.939400][ T9400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.975'. [ 399.707207][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 400.948317][ T9440] openvswitch: netlink: Message has 4 unknown bytes. [ 401.016255][ T5955] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 401.194737][ T9428] Can't find ip_set type bitmap:i` [ 401.766614][ T5955] usb 6-1: Using ep0 maxpacket: 8 [ 401.843889][ T5955] usb 6-1: config 8 has an invalid interface number: 125 but max is 0 [ 401.852162][ T5955] usb 6-1: config 8 has no interface number 0 [ 401.860450][ T5955] usb 6-1: config 8 has an invalid interface number: 125 but max is 0 [ 401.869060][ T5955] usb 6-1: config 8 has no interface number 0 [ 401.879147][ T5955] usb 6-1: config 8 has an invalid interface number: 125 but max is 0 [ 401.926585][ T5955] usb 6-1: config 8 has no interface number 0 [ 401.939513][ T5955] usb 6-1: config 8 has an invalid interface number: 125 but max is 0 [ 401.956916][ T5955] usb 6-1: config 8 has no interface number 0 [ 401.966987][ T5955] usb 6-1: config 8 has an invalid interface number: 125 but max is 0 [ 401.984239][ T5955] usb 6-1: config 8 has no interface number 0 [ 401.995942][ T5955] usb 6-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=26.ec [ 402.006373][ T5955] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.017651][ T5955] usb 6-1: Product: syz [ 402.021842][ T5955] usb 6-1: Manufacturer: syz [ 402.026646][ T5955] usb 6-1: SerialNumber: syz [ 402.064687][ T5955] gspca_main: 0402:5602 too many config [ 402.336634][ T1073] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 403.106452][ T9442] netlink: 12 bytes leftover after parsing attributes in process `syz.5.986'. [ 403.301440][ T1073] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 403.354613][ T1073] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.385310][ T9483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.996'. [ 403.394559][ T9483] netlink: 7 bytes leftover after parsing attributes in process `syz.3.996'. [ 403.924651][ T1073] usb 1-1: config 0 has no interface number 0 [ 403.937442][ T1073] usb 1-1: config 0 interface 69 has no altsetting 0 [ 404.076137][ T1073] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 404.090439][ T1073] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.216174][ T1073] usb 1-1: config 0 descriptor?? [ 404.536817][ T1073] usb 1-1: selecting invalid altsetting 0 [ 404.663110][ T9488] batadv_slave_0: entered promiscuous mode [ 405.630468][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 405.630486][ T30] audit: type=1326 audit(1750739505.706:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9486 comm="syz.4.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3178e929 code=0x7fc00000 [ 405.669406][ T5936] usb 6-1: USB disconnect, device number 7 [ 405.845765][ T30] audit: type=1326 audit(1750739505.916:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9486 comm="syz.4.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4c3178e929 code=0x7fc00000 [ 405.979472][ T30] audit: type=1326 audit(1750739505.916:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9486 comm="syz.4.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3178e929 code=0x7fc00000 [ 406.001987][ T30] audit: type=1326 audit(1750739505.916:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9486 comm="syz.4.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3178e929 code=0x7fc00000 [ 406.024157][ T30] audit: type=1326 audit(1750739505.916:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9486 comm="syz.4.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3178e929 code=0x7fc00000 [ 406.736671][ T30] audit: type=1326 audit(1750739505.916:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9486 comm="syz.4.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3178e929 code=0x7fc00000 [ 406.758407][ T30] audit: type=1326 audit(1750739505.916:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9486 comm="syz.4.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3178e929 code=0x7fc00000 [ 406.816483][ T30] audit: type=1326 audit(1750739505.916:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9486 comm="syz.4.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3178e929 code=0x7fc00000 [ 406.923673][ T5936] usb 1-1: USB disconnect, device number 15 [ 407.019037][ T30] audit: type=1326 audit(1750739505.916:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9486 comm="syz.4.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3178e929 code=0x7fc00000 [ 407.051916][ T9508] FAULT_INJECTION: forcing a failure. [ 407.051916][ T9508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.099627][ T9508] CPU: 1 UID: 0 PID: 9508 Comm: syz.1.1004 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 407.099659][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 407.099670][ T9508] Call Trace: [ 407.099677][ T9508] [ 407.099685][ T9508] dump_stack_lvl+0x189/0x250 [ 407.099713][ T9508] ? __pfx____ratelimit+0x10/0x10 [ 407.099736][ T9508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 407.099758][ T9508] ? __pfx__printk+0x10/0x10 [ 407.099774][ T9508] ? __might_fault+0xb0/0x130 [ 407.099804][ T9508] should_fail_ex+0x414/0x560 [ 407.099828][ T9508] _copy_from_user+0x2d/0xb0 [ 407.099845][ T9508] sock_do_ioctl+0x182/0x300 [ 407.099870][ T9508] ? __pfx_sock_do_ioctl+0x10/0x10 [ 407.099889][ T9508] ? __lock_acquire+0xab9/0xd20 [ 407.099912][ T9508] ? __asan_memset+0x22/0x50 [ 407.099928][ T9508] ? smack_file_ioctl+0x24a/0x340 [ 407.099953][ T9508] sock_ioctl+0x576/0x790 [ 407.099976][ T9508] ? __pfx_sock_ioctl+0x10/0x10 [ 407.099998][ T9508] ? __fget_files+0x2a/0x420 [ 407.100017][ T9508] ? __fget_files+0x3a0/0x420 [ 407.100036][ T9508] ? __fget_files+0x2a/0x420 [ 407.100059][ T9508] ? bpf_lsm_file_ioctl+0x9/0x20 [ 407.100079][ T9508] ? __pfx_sock_ioctl+0x10/0x10 [ 407.100100][ T9508] __se_sys_ioctl+0xfc/0x170 [ 407.100120][ T9508] do_syscall_64+0xfa/0x3b0 [ 407.100141][ T9508] ? lockdep_hardirqs_on+0x9c/0x150 [ 407.100163][ T9508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.100179][ T9508] ? clear_bhb_loop+0x60/0xb0 [ 407.100199][ T9508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.100214][ T9508] RIP: 0033:0x7efdf1d8e929 [ 407.100230][ T9508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.100244][ T9508] RSP: 002b:00007efdf2b51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 407.100262][ T9508] RAX: ffffffffffffffda RBX: 00007efdf1fb5fa0 RCX: 00007efdf1d8e929 [ 407.100275][ T9508] RDX: 0000200000000040 RSI: 0000000000008931 RDI: 0000000000000003 [ 407.100285][ T9508] RBP: 00007efdf2b51090 R08: 0000000000000000 R09: 0000000000000000 [ 407.100296][ T9508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.100305][ T9508] R13: 0000000000000000 R14: 00007efdf1fb5fa0 R15: 00007fff1a006c08 [ 407.100333][ T9508] [ 407.151725][ T30] audit: type=1326 audit(1750739505.916:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9486 comm="syz.4.998" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c3178e929 code=0x7fc00000 [ 407.960287][ T9525] ntfs3(nullb0): Primary boot signature is not NTFS. [ 407.967657][ T9525] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 408.746670][ T5955] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 408.747233][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 409.011027][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 409.021323][ T5955] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 409.031666][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 409.047195][ T5955] usb 5-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 409.657258][ T5955] usb 5-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 410.279124][ T9550] FAULT_INJECTION: forcing a failure. [ 410.279124][ T9550] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 410.292832][ T9550] CPU: 1 UID: 0 PID: 9550 Comm: syz.1.1014 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 410.292854][ T9550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 410.292864][ T9550] Call Trace: [ 410.292871][ T9550] [ 410.292878][ T9550] dump_stack_lvl+0x189/0x250 [ 410.292906][ T9550] ? __pfx____ratelimit+0x10/0x10 [ 410.292928][ T9550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.292951][ T9550] ? __pfx__printk+0x10/0x10 [ 410.292970][ T9550] ? fs_reclaim_acquire+0x7d/0x100 [ 410.293000][ T9550] should_fail_ex+0x414/0x560 [ 410.293025][ T9550] prepare_alloc_pages+0x213/0x610 [ 410.293054][ T9550] __alloc_frozen_pages_noprof+0x123/0x370 [ 410.293082][ T9550] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 410.293120][ T9550] alloc_pages_bulk_noprof+0x560/0x710 [ 410.293144][ T9550] ? rcu_is_watching+0x15/0xb0 [ 410.293166][ T9550] ? trace_kmalloc+0x1f/0xd0 [ 410.293182][ T9550] ? __kmalloc_noprof+0x29b/0x4f0 [ 410.293199][ T9550] ? copy_splice_read+0x143/0x9b0 [ 410.293223][ T9550] copy_splice_read+0x173/0x9b0 [ 410.293254][ T9550] ? __pfx_copy_splice_read+0x10/0x10 [ 410.293276][ T9550] ? register_lock_class+0x51/0x320 [ 410.293303][ T9550] ? file_end_write+0xd8/0x250 [ 410.293324][ T9550] ? direct_splice_actor+0x10c/0x160 [ 410.293346][ T9550] ? __pfx_copy_splice_read+0x10/0x10 [ 410.293364][ T9550] splice_direct_to_actor+0x4a9/0xcc0 [ 410.293403][ T9550] ? __pfx_direct_splice_actor+0x10/0x10 [ 410.293422][ T9550] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 410.293459][ T9550] do_splice_direct+0x181/0x270 [ 410.293482][ T9550] ? __pfx_do_splice_direct+0x10/0x10 [ 410.293502][ T9550] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 410.293525][ T9550] ? bpf_lsm_file_permission+0x9/0x20 [ 410.293545][ T9550] ? security_file_permission+0x75/0x290 [ 410.293567][ T9550] ? rw_verify_area+0x258/0x650 [ 410.293589][ T9550] do_sendfile+0x4da/0x7e0 [ 410.293611][ T9550] ? __pfx_vfs_write+0x10/0x10 [ 410.293635][ T9550] ? __pfx_do_sendfile+0x10/0x10 [ 410.293656][ T9550] ? __fget_files+0x3a0/0x420 [ 410.293687][ T9550] __se_sys_sendfile64+0x13e/0x190 [ 410.293711][ T9550] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 410.293730][ T9550] ? rcu_is_watching+0x15/0xb0 [ 410.293757][ T9550] ? do_syscall_64+0xbe/0x3b0 [ 410.293783][ T9550] do_syscall_64+0xfa/0x3b0 [ 410.293804][ T9550] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.293825][ T9550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.293841][ T9550] ? clear_bhb_loop+0x60/0xb0 [ 410.293861][ T9550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.293877][ T9550] RIP: 0033:0x7efdf1d8e929 [ 410.293892][ T9550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.293906][ T9550] RSP: 002b:00007efdf2b0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 410.293924][ T9550] RAX: ffffffffffffffda RBX: 00007efdf1fb6160 RCX: 00007efdf1d8e929 [ 410.293936][ T9550] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000007 [ 410.293946][ T9550] RBP: 00007efdf2b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 410.293956][ T9550] R10: 0000020000023893 R11: 0000000000000246 R12: 0000000000000002 [ 410.293967][ T9550] R13: 0000000000000000 R14: 00007efdf1fb6160 R15: 00007fff1a006c08 [ 410.293994][ T9550] [ 410.296630][ T5955] usb 5-1: Manufacturer: syz [ 410.919940][ T5955] usb 5-1: config 0 descriptor?? [ 410.928206][ T5955] smsusb:smsusb_probe: board id=9, interface number 0 [ 410.935608][ T5955] smsusb:smsusb_probe: Device initialized with return code -19 [ 411.177866][ T9560] FAULT_INJECTION: forcing a failure. [ 411.177866][ T9560] name failslab, interval 1, probability 0, space 0, times 0 [ 411.205090][ T9560] CPU: 1 UID: 0 PID: 9560 Comm: syz.3.1018 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 411.205115][ T9560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.205126][ T9560] Call Trace: [ 411.205133][ T9560] [ 411.205141][ T9560] dump_stack_lvl+0x189/0x250 [ 411.205169][ T9560] ? __pfx____ratelimit+0x10/0x10 [ 411.205191][ T9560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.205214][ T9560] ? __pfx__printk+0x10/0x10 [ 411.205237][ T9560] ? __pfx___might_resched+0x10/0x10 [ 411.205258][ T9560] ? fs_reclaim_acquire+0x7d/0x100 [ 411.205285][ T9560] should_fail_ex+0x414/0x560 [ 411.205310][ T9560] should_failslab+0xa8/0x100 [ 411.205333][ T9560] __kmalloc_cache_noprof+0x70/0x3d0 [ 411.205352][ T9560] ? nf_tables_newchain+0xef1/0x2900 [ 411.205378][ T9560] nf_tables_newchain+0xef1/0x2900 [ 411.205414][ T9560] ? __pfx_nf_tables_newchain+0x10/0x10 [ 411.205467][ T9560] ? nfnl_pernet+0x23/0x240 [ 411.205500][ T9560] ? __nla_parse+0x40/0x60 [ 411.205526][ T9560] nfnetlink_rcv+0x112f/0x2520 [ 411.205581][ T9560] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 411.205620][ T9560] ? ref_tracker_free+0x63a/0x7d0 [ 411.205671][ T9560] ? __netlink_deliver_tap+0x807/0x850 [ 411.205707][ T9560] ? netlink_deliver_tap+0x2e/0x1b0 [ 411.205725][ T9560] ? netlink_deliver_tap+0x2e/0x1b0 [ 411.205748][ T9560] netlink_unicast+0x75b/0x8d0 [ 411.205776][ T9560] netlink_sendmsg+0x805/0xb30 [ 411.205804][ T9560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.205831][ T9560] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.205851][ T9560] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.205870][ T9560] __sock_sendmsg+0x21c/0x270 [ 411.205896][ T9560] ____sys_sendmsg+0x505/0x830 [ 411.205921][ T9560] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.205950][ T9560] ? import_iovec+0x74/0xa0 [ 411.205970][ T9560] ___sys_sendmsg+0x21f/0x2a0 [ 411.205992][ T9560] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.206049][ T9560] ? __fget_files+0x2a/0x420 [ 411.206069][ T9560] ? __fget_files+0x3a0/0x420 [ 411.206100][ T9560] __x64_sys_sendmsg+0x19b/0x260 [ 411.206123][ T9560] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.206153][ T9560] ? __pfx_ksys_write+0x10/0x10 [ 411.206170][ T9560] ? rcu_is_watching+0x15/0xb0 [ 411.206198][ T9560] ? do_syscall_64+0xbe/0x3b0 [ 411.206224][ T9560] do_syscall_64+0xfa/0x3b0 [ 411.206245][ T9560] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.206266][ T9560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.206282][ T9560] ? clear_bhb_loop+0x60/0xb0 [ 411.206302][ T9560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.206318][ T9560] RIP: 0033:0x7fcd5758e929 [ 411.206334][ T9560] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.206349][ T9560] RSP: 002b:00007fcd583a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.206367][ T9560] RAX: ffffffffffffffda RBX: 00007fcd577b5fa0 RCX: 00007fcd5758e929 [ 411.206379][ T9560] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 411.206390][ T9560] RBP: 00007fcd583a9090 R08: 0000000000000000 R09: 0000000000000000 [ 411.206400][ T9560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 411.206410][ T9560] R13: 0000000000000000 R14: 00007fcd577b5fa0 R15: 00007ffee4cc56f8 [ 411.206437][ T9560] [ 412.449963][ T5955] usb 5-1: USB disconnect, device number 28 [ 412.801853][ T9576] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1024'. [ 412.810937][ T9576] netlink: 'syz.0.1024': attribute type 6 has an invalid length. [ 412.818745][ T9576] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1024'. [ 413.439878][ T9586] ceph: No mds server is up or the cluster is laggy [ 413.474736][ T5936] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 413.509701][ T5955] Dead loop on virtual device ipvlan1, fix it urgently! [ 414.011640][ T5936] usb 6-1: config 0 has an invalid interface number: 23 but max is 0 [ 414.026923][ T5936] usb 6-1: config 0 has no interface number 0 [ 414.044304][ T5936] usb 6-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 1.7b [ 414.065817][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.086895][ T5936] usb 6-1: Product: syz [ 414.091093][ T5936] usb 6-1: Manufacturer: syz [ 414.513616][ T5936] usb 6-1: SerialNumber: syz [ 414.521733][ T5936] usb 6-1: config 0 descriptor?? [ 414.538324][ T5936] ftdi_sio 6-1:0.23: FTDI USB Serial Device converter detected [ 414.572297][ T5936] usb 6-1: Detected SIO [ 414.598562][ T5936] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 415.017955][ T9604] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 415.029284][ T9604] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 416.207218][ T5942] usb 6-1: USB disconnect, device number 8 [ 416.248686][ T5942] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 416.294054][ T5942] ftdi_sio 6-1:0.23: device disconnected [ 416.466785][ T9617] FAULT_INJECTION: forcing a failure. [ 416.466785][ T9617] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.509955][ T9617] CPU: 0 UID: 0 PID: 9617 Comm: syz.5.1035 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 416.509981][ T9617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 416.509993][ T9617] Call Trace: [ 416.510000][ T9617] [ 416.510008][ T9617] dump_stack_lvl+0x189/0x250 [ 416.510047][ T9617] ? __pfx____ratelimit+0x10/0x10 [ 416.510070][ T9617] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.510093][ T9617] ? __pfx__printk+0x10/0x10 [ 416.510122][ T9617] should_fail_ex+0x414/0x560 [ 416.510148][ T9617] _copy_to_user+0x31/0xb0 [ 416.510167][ T9617] simple_read_from_buffer+0xe1/0x170 [ 416.510192][ T9617] proc_fail_nth_read+0x1df/0x250 [ 416.510218][ T9617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 416.510243][ T9617] ? rw_verify_area+0x258/0x650 [ 416.510260][ T9617] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 416.510283][ T9617] vfs_read+0x200/0x980 [ 416.510309][ T9617] ? __pfx_vfs_read+0x10/0x10 [ 416.510327][ T9617] ? __get_user_nocheck_8+0x20/0x20 [ 416.510348][ T9617] ? proc_claim_port+0x50/0x150 [ 416.510371][ T9617] ? usbdev_ioctl+0x7f1/0x20c0 [ 416.510399][ T9617] ksys_read+0x145/0x250 [ 416.510419][ T9617] ? __pfx_ksys_read+0x10/0x10 [ 416.510443][ T9617] ? do_syscall_64+0xbe/0x3b0 [ 416.510469][ T9617] do_syscall_64+0xfa/0x3b0 [ 416.510492][ T9617] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.510508][ T9617] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 416.510524][ T9617] ? clear_bhb_loop+0x60/0xb0 [ 416.510545][ T9617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.510561][ T9617] RIP: 0033:0x7f47d058d33c [ 416.510576][ T9617] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 416.510591][ T9617] RSP: 002b:00007f47ce3f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 416.510609][ T9617] RAX: ffffffffffffffda RBX: 00007f47d07b5fa0 RCX: 00007f47d058d33c [ 416.510622][ T9617] RDX: 000000000000000f RSI: 00007f47ce3f60a0 RDI: 0000000000000004 [ 416.510633][ T9617] RBP: 00007f47ce3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 416.510643][ T9617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.510653][ T9617] R13: 0000000000000000 R14: 00007f47d07b5fa0 R15: 00007ffdad8cbc58 [ 416.510681][ T9617] [ 416.731693][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.619440][ T9632] sctp: [Deprecated]: syz.1.1038 (pid 9632) Use of int in max_burst socket option. [ 417.619440][ T9632] Use struct sctp_assoc_value instead [ 417.978115][ T9639] openvswitch: netlink: Message has 4 unknown bytes. [ 418.972414][ T9649] netlink: 'syz.0.1043': attribute type 10 has an invalid length. [ 419.024744][ T9649] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 422.003810][ T9685] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1051'. [ 422.656114][ T9697] Dead loop on virtual device ipvlan1, fix it urgently! [ 422.769603][ T9700] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 423.358846][ T5955] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 423.656689][ T5955] usb 1-1: device descriptor read/64, error -71 [ 423.712792][ T9697] syz.4.1055 (9697) used greatest stack depth: 10312 bytes left [ 424.160350][ T5955] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 424.293496][ T9705] openvswitch: netlink: Message has 4 unknown bytes. [ 424.313264][ T5955] usb 1-1: device descriptor read/64, error -71 [ 424.373046][ T9721] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1063'. [ 424.442388][ T5955] usb usb1-port1: attempt power cycle [ 424.796682][ T5955] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 425.392218][ T5955] usb 1-1: device descriptor read/8, error -71 [ 425.657016][ T5955] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 425.699040][ T5955] usb 1-1: device descriptor read/8, error -71 [ 427.038965][ T5955] usb usb1-port1: unable to enumerate USB device [ 427.208446][ T9732] kvm: kvm [9731]: vcpu2, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x60000000800 [ 427.239255][ T9732] kvm: kvm [9731]: vcpu2, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x60000002201 [ 427.254858][ T9737] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1070'. [ 427.304722][ T9737] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1070'. [ 427.456656][ T5955] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 427.628524][ T5955] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.645499][ T5955] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 427.661069][ T5955] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 427.690718][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.754936][ T5955] usb 1-1: config 0 descriptor?? [ 427.947025][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 427.972081][ T5955] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 428.128986][ T5955] dvb-usb: bulk message failed: -22 (3/0) [ 428.534871][ T5955] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 428.700574][ T5955] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 428.724669][ T5955] usb 1-1: media controller created [ 428.775681][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 428.856264][ T5955] dvb-usb: bulk message failed: -22 (6/0) [ 428.892353][ T5955] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 429.295736][ T5955] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 429.341900][ T5955] dvb-usb: schedule remote query interval to 150 msecs. [ 429.375998][ T5955] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 429.424609][ T5955] usb 1-1: USB disconnect, device number 20 [ 429.460225][ T9769] Dead loop on virtual device ipvlan1, fix it urgently! [ 429.478603][ T9769] syz.1.1078 (9769) used greatest stack depth: 10024 bytes left [ 429.495546][ T9768] pimreg: entered allmulticast mode [ 429.615213][ T5955] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 429.730763][ T9772] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1079'. [ 430.417113][ T9777] tipc: Started in network mode [ 430.422233][ T9777] tipc: Node identity ac14140f, cluster identity 4711 [ 430.429901][ T9777] tipc: New replicast peer: 255.255.255.255 [ 430.436856][ T9777] tipc: Enabled bearer , priority 10 [ 431.137610][ T9772] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1079'. [ 431.428407][ T24] tipc: Node number set to 2886997007 [ 431.763464][ T9776] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 433.719756][ T9807] binder: 9806:9807 ioctl 40046205 0 returned -22 [ 433.854193][ T9811] netlink: 'syz.5.1093': attribute type 10 has an invalid length. [ 433.878877][ T9813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1091'. [ 433.961337][ T9813] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1091'. [ 434.244942][ T9817] netlink: 'syz.5.1094': attribute type 10 has an invalid length. [ 435.592691][ T5936] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 435.600530][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 435.641276][ T9827] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 435.647901][ T9827] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 435.655502][ T9827] vhci_hcd vhci_hcd.0: Device attached [ 435.670673][ T9832] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 435.714012][ T49] vhci_hcd: stop threads [ 435.722099][ T49] vhci_hcd: release socket [ 435.728686][ T49] vhci_hcd: disconnect device [ 435.738450][ T5936] usb 2-1: device descriptor read/64, error -32 [ 436.104179][ T5936] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 437.147726][ T5936] usb 2-1: Using ep0 maxpacket: 32 [ 437.169483][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 437.187168][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 437.197332][ T5936] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 437.212588][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 79, changing to 10 [ 437.225073][ T5936] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 34258, setting to 1024 [ 437.332276][ T9847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.352821][ T5936] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 437.426554][ T9848] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1101'. [ 437.435652][ T9848] netlink: 'syz.5.1101': attribute type 2 has an invalid length. [ 437.443804][ T9848] netlink: 'syz.5.1101': attribute type 1 has an invalid length. [ 437.451658][ T9848] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1101'. [ 437.913909][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.938469][ T5936] usb 2-1: Product: syz [ 437.979386][ T5936] usb 2-1: Manufacturer: syz [ 437.999938][ T5936] usb 2-1: SerialNumber: syz [ 438.022225][ T5936] usb 2-1: config 0 descriptor?? [ 438.039591][ T5936] usb 2-1: can't set config #0, error -71 [ 438.059028][ T5936] usb 2-1: USB disconnect, device number 26 [ 438.247180][ T5942] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 438.557032][ T9852] netlink: 'syz.1.1104': attribute type 10 has an invalid length. [ 438.626664][ T5942] usb 4-1: Using ep0 maxpacket: 16 [ 438.669745][ T5942] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 438.696641][ T5942] usb 4-1: config 0 has no interface number 0 [ 438.702797][ T5942] usb 4-1: config 0 interface 8 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 438.749329][ T5942] usb 4-1: config 0 interface 8 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 438.762578][ T9861] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1107'. [ 438.783490][ T5942] usb 4-1: config 0 interface 8 has no altsetting 0 [ 438.813874][ T5942] usb 4-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 438.837068][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.957843][ T5942] usb 4-1: config 0 descriptor?? [ 440.112790][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.647976][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.090595][ T5942] uclogic 0003:5543:0522.0008: item fetching failed at offset 2/5 [ 441.099688][ T5942] uclogic 0003:5543:0522.0008: parse failed [ 441.105718][ T5942] uclogic 0003:5543:0522.0008: probe with driver uclogic failed with error -22 [ 441.118307][ T5942] usb 4-1: USB disconnect, device number 28 [ 441.215145][ T9885] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1113'. [ 441.400364][ T9890] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1116'. [ 441.477149][ T9892] netlink: 'syz.4.1117': attribute type 10 has an invalid length. [ 443.119512][ T9910] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1121'. [ 445.347140][ T9940] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1128'. [ 445.961027][ T9934] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1129'. [ 445.992529][ T9934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.106163][ T9934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.786688][ T5936] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 446.828248][ T9946] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1131'. [ 446.952678][ T5936] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 447.131024][ T5936] usb 1-1: config 0 has no interface number 0 [ 447.203778][ T9953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1133'. [ 447.401751][ T5936] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 447.413850][ T9950] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1132'. [ 447.454669][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.475238][ T5936] usb 1-1: Product: syz [ 447.488544][ T5936] usb 1-1: Manufacturer: syz [ 447.508681][ T5936] usb 1-1: SerialNumber: syz [ 447.531273][ T5936] usb 1-1: config 0 descriptor?? [ 447.555955][ T9959] kvm: pic: non byte write [ 447.747048][ T5936] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 447.769789][ T5936] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 447.780105][ T5936] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 447.806654][ T5936] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 447.824503][ T5936] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 447.847240][ T5936] usb 1-1: USB disconnect, device number 21 [ 447.884555][ T5936] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 447.933738][ T5936] keyspan 1-1:0.133: device disconnected [ 448.119147][ T9969] openvswitch: netlink: Message has 4 unknown bytes. [ 448.243705][ T5872] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 448.638418][ T5872] usb 5-1: config 0 has an invalid interface number: 178 but max is 0 [ 448.647616][ T5872] usb 5-1: config 0 has no interface number 0 [ 448.760975][ T5872] usb 5-1: config 0 interface 178 altsetting 0 bulk endpoint 0xE has invalid maxpacket 8 [ 448.782265][ T5872] usb 5-1: New USB device found, idVendor=05da, idProduct=00a3, bcdDevice=9d.36 [ 448.798012][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.333916][ T5872] usb 5-1: config 0 descriptor?? [ 449.359122][ T9970] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 449.655391][ T5872] usb 5-1: string descriptor 0 read error: -71 [ 449.692051][ T5872] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 6 is not bulk. [ 450.215476][ T5872] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 11 is not bulk. [ 450.226005][ T5872] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 450.256710][ T5872] usb 5-1: USB disconnect, device number 29 [ 450.486540][ T9988] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1141'. [ 452.476736][ T5918] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 452.734369][ T5918] usb 6-1: config 0 has no interfaces? [ 452.851255][ T5918] usb 6-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 452.862708][ T5918] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.891221][ T5918] usb 6-1: Product: syz [ 452.895404][ T5918] usb 6-1: Manufacturer: syz [ 452.946478][ T5918] usb 6-1: SerialNumber: syz [ 452.965725][ T5918] usb 6-1: config 0 descriptor?? [ 454.077817][T10004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.086420][T10004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.329797][T10027] loop2: detected capacity change from 0 to 524287999 [ 454.417567][T10030] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1152'. [ 454.426897][T10030] netlink: 'syz.3.1152': attribute type 2 has an invalid length. [ 454.434681][T10030] netlink: 'syz.3.1152': attribute type 1 has an invalid length. [ 454.442714][T10030] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1152'. [ 455.171706][ T24] IPVS: starting estimator thread 0... [ 455.276703][T10032] IPVS: using max 38 ests per chain, 91200 per kthread [ 456.248447][T10040] loop8: detected capacity change from 0 to 1 [ 456.429888][T10040] Dev loop8: unable to read RDB block 1 [ 456.464887][T10040] loop8: unable to read partition table [ 456.502572][T10040] loop8: partition table beyond EOD, truncated [ 456.536204][T10047] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1157'. [ 457.021238][T10040] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 457.116659][ T5895] usb 6-1: USB disconnect, device number 9 [ 458.299277][ T5942] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 458.863662][ T5942] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 458.934140][ T5942] usb 5-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 459.022426][ T5942] usb 5-1: Product: syz [ 459.058069][ T5942] usb 5-1: Manufacturer: syz [ 459.134855][ T5942] usb 5-1: SerialNumber: syz [ 459.194450][ T5942] usb 5-1: config 0 descriptor?? [ 459.922352][T10081] openvswitch: netlink: Message has 4 unknown bytes. [ 460.228463][T10084] block device autoloading is deprecated and will be removed. [ 460.247981][T10084] syz.0.1168: attempt to access beyond end of device [ 460.247981][T10084] md2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 460.310586][T10065] mkiss: ax0: crc mode is auto. [ 460.371029][ T5942] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 460.398984][ T5942] asix 5-1:0.0: probe with driver asix failed with error -71 [ 460.422249][ T5942] usb 5-1: USB disconnect, device number 30 [ 460.676649][ T5936] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 460.839845][ T5936] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.851095][ T5936] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 460.862085][ T5936] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 460.872191][ T5936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 460.881035][ T5936] usb 1-1: SerialNumber: syz [ 462.096470][ T5936] usb 1-1: 0:2 : does not exist [ 462.143059][ T5936] usb 1-1: USB disconnect, device number 22 [ 462.440493][ T5938] udevd[5938]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 462.623253][ T5936] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 462.866918][ T5936] usb 4-1: Using ep0 maxpacket: 8 [ 463.007746][ T5936] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 463.202751][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.281453][ T5936] usb 4-1: config 0 descriptor?? [ 464.495343][ T5936] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 464.983593][ T5936] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 465.060236][ T5936] asix 4-1:0.0: probe with driver asix failed with error -71 [ 465.183903][ T5936] usb 4-1: USB disconnect, device number 29 [ 465.197395][T10127] openvswitch: netlink: Message has 4 unknown bytes. [ 465.251867][T10140] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1184'. [ 466.065657][T10148] use of bytesused == 0 is deprecated and will be removed in the future, [ 466.074485][T10148] use the actual size instead. [ 466.347278][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 467.870037][T10171] kvm: emulating exchange as write [ 468.773420][T10179] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1194'. [ 468.960246][ T5872] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 469.378114][ T5872] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 469.423111][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 47999, setting to 64 [ 469.453448][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 469.562244][ T5872] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1040, bcdDevice=b5.b1 [ 469.588487][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.625376][ T5872] usb 1-1: Product: syz [ 469.630127][ T5872] usb 1-1: Manufacturer: syz [ 469.634788][ T5872] usb 1-1: SerialNumber: syz [ 469.662493][ T5872] usb 1-1: config 0 descriptor?? [ 469.700581][T10176] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 469.733375][ T5872] option 1-1:0.0: GSM modem (1-port) converter detected [ 469.847166][ T5872] usb 1-1: USB disconnect, device number 23 [ 469.888458][ T5872] option 1-1:0.0: device disconnected [ 470.906959][T10217] netlink: zone id is out of range [ 470.912390][T10217] netlink: zone id is out of range [ 470.917547][T10217] netlink: zone id is out of range [ 470.922646][T10217] netlink: zone id is out of range [ 470.927858][T10217] netlink: zone id is out of range [ 470.932957][T10217] netlink: zone id is out of range [ 470.938146][T10217] netlink: zone id is out of range [ 470.943234][T10217] netlink: zone id is out of range [ 470.948381][T10217] netlink: zone id is out of range [ 470.953466][T10217] netlink: zone id is out of range [ 471.007645][T10216] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1203'. [ 471.211162][T10210] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1202'. [ 471.547509][T10225] batman_adv: batadv0: Adding interface: dummy0 [ 471.558760][T10225] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.593695][T10225] batman_adv: batadv0: Interface activated: dummy0 [ 472.023567][ T5936] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 472.446646][ T5936] usb 1-1: Using ep0 maxpacket: 16 [ 472.459519][ T5936] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 472.579970][ T5936] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 472.593960][ T5936] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 472.606574][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.620209][ T5936] usb 1-1: Product: syz [ 472.624494][ T5936] usb 1-1: Manufacturer: syz [ 472.630179][ T5936] usb 1-1: SerialNumber: syz [ 472.652531][ T5936] usb 1-1: config 0 descriptor?? [ 473.239176][ T5936] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 473.337459][ T5936] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 474.458216][ T5936] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 474.473006][ T5936] em28xx 1-1:0.0: Config register raw data: 0x00 [ 474.763061][ T5138] Bluetooth: hci5: sending frame failed (-49) [ 474.770718][ T5820] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 474.836791][ T5918] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 474.941689][T10271] 9pnet_fd: Insufficient options for proto=fd [ 474.978285][T10270] can0: slcan on ttyS3. [ 474.997443][ T5918] usb 5-1: Using ep0 maxpacket: 8 [ 475.008371][ T5918] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 475.016020][ T5918] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 475.028844][ T5918] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x36, changing to 0x6 [ 475.115231][ T5918] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 41743, setting to 1024 [ 475.187478][T10270] can0 (unregistered): slcan off ttyS3. [ 475.209868][ T5918] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 475.236413][ T5918] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 475.298888][ T5918] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x36, changing to 0x6 [ 475.316864][ T5918] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 41743, setting to 1024 [ 475.335303][ T5918] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 475.344577][ T5918] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 475.356439][ T5918] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0x36, changing to 0x6 [ 475.369031][ T5918] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 41743, setting to 1024 [ 475.428246][ T5918] usb 5-1: string descriptor 0 read error: -22 [ 475.462850][ T5918] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 475.509835][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.598249][ T5918] adutux 5-1:168.0: interrupt endpoints not found [ 475.755644][ T24] usb 1-1: USB disconnect, device number 24 [ 475.787869][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 475.818457][ T24] em28xx 1-1:0.0: Freeing device [ 475.849256][T10258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.902685][T10258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.956162][ T5918] usb 5-1: USB disconnect, device number 31 [ 477.692279][T10304] ksmbd: Unknown IPC event: 4, ignore. [ 478.021572][T10316] FAULT_INJECTION: forcing a failure. [ 478.021572][T10316] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.092437][T10316] CPU: 1 UID: 0 PID: 10316 Comm: syz.4.1232 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 478.092464][T10316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 478.092475][T10316] Call Trace: [ 478.092482][T10316] [ 478.092490][T10316] dump_stack_lvl+0x189/0x250 [ 478.092520][T10316] ? __pfx____ratelimit+0x10/0x10 [ 478.092543][T10316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.092565][T10316] ? __pfx__printk+0x10/0x10 [ 478.092594][T10316] should_fail_ex+0x414/0x560 [ 478.092621][T10316] _copy_to_user+0x31/0xb0 [ 478.092639][T10316] simple_read_from_buffer+0xe1/0x170 [ 478.092662][T10316] proc_fail_nth_read+0x1df/0x250 [ 478.092687][T10316] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.092711][T10316] ? rw_verify_area+0x258/0x650 [ 478.092727][T10316] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.092747][T10316] vfs_read+0x200/0x980 [ 478.092768][T10316] ? __pfx___mutex_lock+0x10/0x10 [ 478.092792][T10316] ? __pfx_vfs_read+0x10/0x10 [ 478.092809][T10316] ? __fget_files+0x2a/0x420 [ 478.092831][T10316] ? __fget_files+0x3a0/0x420 [ 478.092849][T10316] ? __fget_files+0x2a/0x420 [ 478.092874][T10316] ksys_read+0x145/0x250 [ 478.092891][T10316] ? __pfx_ksys_read+0x10/0x10 [ 478.092904][T10316] ? rcu_is_watching+0x15/0xb0 [ 478.092940][T10316] ? do_syscall_64+0xbe/0x3b0 [ 478.092965][T10316] do_syscall_64+0xfa/0x3b0 [ 478.092983][T10316] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.093003][T10316] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.093017][T10316] ? clear_bhb_loop+0x60/0xb0 [ 478.093036][T10316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.093049][T10316] RIP: 0033:0x7f4c3178d33c [ 478.093063][T10316] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 478.093078][T10316] RSP: 002b:00007f4c326bb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 478.093096][T10316] RAX: ffffffffffffffda RBX: 00007f4c319b5fa0 RCX: 00007f4c3178d33c [ 478.093107][T10316] RDX: 000000000000000f RSI: 00007f4c326bb0a0 RDI: 0000000000000006 [ 478.093116][T10316] RBP: 00007f4c326bb090 R08: 0000000000000000 R09: 0000000000000000 [ 478.093124][T10316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.093131][T10316] R13: 0000000000000000 R14: 00007f4c319b5fa0 R15: 00007ffc5f956d58 [ 478.093157][T10316] [ 478.323663][T10313] netlink: 'syz.0.1231': attribute type 3 has an invalid length. [ 478.333047][T10313] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1231'. [ 478.335465][T10321] FAULT_INJECTION: forcing a failure. [ 478.335465][T10321] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 478.355313][T10321] CPU: 0 UID: 0 PID: 10321 Comm: syz.1.1234 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 478.355333][T10321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 478.355341][T10321] Call Trace: [ 478.355348][T10321] [ 478.355355][T10321] dump_stack_lvl+0x189/0x250 [ 478.355381][T10321] ? __pfx____ratelimit+0x10/0x10 [ 478.355404][T10321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 478.355423][T10321] ? __pfx__printk+0x10/0x10 [ 478.355451][T10321] should_fail_ex+0x414/0x560 [ 478.355477][T10321] _copy_to_user+0x31/0xb0 [ 478.355495][T10321] simple_read_from_buffer+0xe1/0x170 [ 478.355520][T10321] proc_fail_nth_read+0x1df/0x250 [ 478.355546][T10321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.355570][T10321] ? rw_verify_area+0x258/0x650 [ 478.355587][T10321] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 478.355611][T10321] vfs_read+0x200/0x980 [ 478.355639][T10321] ? __pfx___mutex_lock+0x10/0x10 [ 478.355663][T10321] ? __pfx_vfs_read+0x10/0x10 [ 478.355682][T10321] ? __fget_files+0x2a/0x420 [ 478.355706][T10321] ? __fget_files+0x3a0/0x420 [ 478.355721][T10321] ? __fget_files+0x2a/0x420 [ 478.355746][T10321] ksys_read+0x145/0x250 [ 478.355764][T10321] ? __pfx_ksys_read+0x10/0x10 [ 478.355779][T10321] ? fput+0xa0/0xd0 [ 478.355803][T10321] ? do_syscall_64+0xbe/0x3b0 [ 478.355827][T10321] do_syscall_64+0xfa/0x3b0 [ 478.355845][T10321] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.355863][T10321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.355877][T10321] ? clear_bhb_loop+0x60/0xb0 [ 478.355894][T10321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.355908][T10321] RIP: 0033:0x7efdf1d8d33c [ 478.355921][T10321] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 478.355934][T10321] RSP: 002b:00007efdf2b30030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 478.355949][T10321] RAX: ffffffffffffffda RBX: 00007efdf1fb6080 RCX: 00007efdf1d8d33c [ 478.355961][T10321] RDX: 000000000000000f RSI: 00007efdf2b300a0 RDI: 0000000000000006 [ 478.355971][T10321] RBP: 00007efdf2b30090 R08: 0000000000000000 R09: 0000000000000000 [ 478.355981][T10321] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.355991][T10321] R13: 0000000000000000 R14: 00007efdf1fb6080 R15: 00007fff1a006c08 [ 478.356020][T10321] [ 478.584029][ C0] vkms_vblank_simulate: vblank timer overrun [ 478.964642][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1238'. [ 479.680197][T10326] net_ratelimit: 10 callbacks suppressed [ 479.680210][T10326] openvswitch: netlink: Message has 4 unknown bytes. [ 480.424106][T10342] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1241'. [ 480.438909][T10342] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1241'. [ 481.727654][T10356] netlink: 'syz.0.1246': attribute type 2 has an invalid length. [ 481.859623][ T5895] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 482.010628][ T5942] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 482.267752][ T5895] usb 6-1: config 2 has an invalid interface number: 139 but max is 2 [ 482.355607][ T5895] usb 6-1: config 2 has an invalid interface number: 195 but max is 2 [ 482.385584][ T5895] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 482.517297][ T5942] usb 2-1: Using ep0 maxpacket: 32 [ 482.523119][ T5895] usb 6-1: config 2 has 2 interfaces, different from the descriptor's value: 3 [ 482.533892][ T5942] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 482.546596][ T5895] usb 6-1: config 2 has no interface number 0 [ 482.571800][ T5895] usb 6-1: config 2 has no interface number 1 [ 483.144288][ T5942] usb 2-1: config 0 has no interface number 0 [ 483.155207][ T5942] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 483.164797][ T5895] usb 6-1: New USB device found, idVendor=12d1, idProduct=b1d0, bcdDevice=73.d3 [ 483.177336][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.256858][ T5942] usb 2-1: Product: syz [ 483.261459][ T5942] usb 2-1: Manufacturer: syz [ 483.266461][ T5942] usb 2-1: SerialNumber: syz [ 483.283027][ T5895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.295451][ T5942] usb 2-1: config 0 descriptor?? [ 483.310232][ T5895] option 6-1:2.139: GSM modem (1-port) converter detected [ 483.334149][ T5942] smsc95xx v2.0.0 [ 483.421089][T10375] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1250'. [ 483.430219][T10375] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1250'. [ 483.439545][T10375] netlink: 'syz.0.1250': attribute type 21 has an invalid length. [ 483.771090][T10377] netdevsim netdevsim5 : renamed from netdevsim0 (while UP) [ 483.840112][ T5942] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 483.902410][ T5942] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 484.366737][ T1073] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 484.592158][ T1073] usb 1-1: Using ep0 maxpacket: 16 [ 484.647561][ T1073] usb 1-1: config 0 descriptor has 1 excess byte, ignoring [ 484.744240][ T1073] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 484.879660][ T1073] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 484.990270][ T1073] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223 [ 485.124718][ T1073] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 485.197239][ T1073] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.229552][ T5942] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 485.262924][ T1073] usb 1-1: Product: syz [ 485.294335][ T1073] usb 1-1: Manufacturer: syz [ 485.322649][ T5942] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 485.356101][ T1073] usb 1-1: SerialNumber: syz [ 485.517786][ T1073] usb 1-1: config 0 descriptor?? [ 485.610234][T10375] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 485.619045][T10375] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 485.935556][ T5942] usb 6-1: USB disconnect, device number 10 [ 486.177925][T10384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.260805][ T5942] option 6-1:2.139: device disconnected [ 486.384958][T10384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.624258][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 486.644807][ T1073] mcba_usb 1-1:0.0: Microchip CAN BUS Analyzer connected [ 486.644991][ C1] mcba_usb 1-1:0.0 can0: Tx URB aborted (-71) [ 486.705955][T10384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.914482][T10384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.364366][ T1073] usb 1-1: USB disconnect, device number 25 [ 487.398870][ T5936] usb 2-1: USB disconnect, device number 27 [ 487.404075][ T1073] mcba_usb 1-1:0.0 can0: device disconnected [ 487.446159][T10388] Dead loop on virtual device ipvlan1, fix it urgently! [ 488.506872][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 489.016791][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 489.134950][T10391] openvswitch: netlink: Message has 4 unknown bytes. [ 489.190080][T10411] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1258'. [ 489.216984][T10411] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1258'. [ 489.500216][T10416] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 489.506857][T10416] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 489.514468][T10416] vhci_hcd vhci_hcd.0: Device attached [ 489.522221][T10418] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 489.531663][ T1167] vhci_hcd: stop threads [ 489.535957][ T1167] vhci_hcd: release socket [ 489.541083][ T1167] vhci_hcd: disconnect device [ 490.742275][T10442] can0: slcan on ttyS3. [ 490.764194][T10437] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 490.770848][T10437] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 490.779083][T10437] vhci_hcd vhci_hcd.0: Device attached [ 490.798961][T10439] vhci_hcd: connection closed [ 490.799215][ T49] vhci_hcd: stop threads [ 490.809576][ T49] vhci_hcd: release socket [ 490.814060][ T49] vhci_hcd: disconnect device [ 490.989064][ T5918] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 491.381498][ T5918] usb 2-1: Using ep0 maxpacket: 8 [ 491.406555][ T5918] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.437116][ T5918] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 491.456781][ T5918] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 491.469042][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.495507][ T5918] usb 2-1: config 0 descriptor?? [ 491.627034][T10440] can0 (unregistered): slcan off ttyS3. [ 492.990427][ T5918] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 493.828676][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 493.881327][ T5918] usb 1-1: too many configurations: 123, using maximum allowed: 8 [ 493.982641][ T5918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.064235][ T5918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.318033][ T5918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.357454][T10468] openvswitch: netlink: Message has 4 unknown bytes. [ 494.458378][ T5918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.519777][ T5918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.574990][ T5918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 494.661075][ T5918] usb 1-1: unable to read config index 6 descriptor/start: -71 [ 494.690905][ T5918] usb 1-1: can't read configurations, error -71 [ 494.805507][T10491] FAULT_INJECTION: forcing a failure. [ 494.805507][T10491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.852138][T10491] CPU: 1 UID: 0 PID: 10491 Comm: syz.0.1277 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 494.852163][T10491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 494.852173][T10491] Call Trace: [ 494.852180][T10491] [ 494.852188][T10491] dump_stack_lvl+0x189/0x250 [ 494.852216][T10491] ? __pfx____ratelimit+0x10/0x10 [ 494.852239][T10491] ? __pfx_dump_stack_lvl+0x10/0x10 [ 494.852261][T10491] ? __pfx__printk+0x10/0x10 [ 494.852277][T10491] ? __might_fault+0xb0/0x130 [ 494.852307][T10491] should_fail_ex+0x414/0x560 [ 494.852328][T10491] _copy_from_user+0x2d/0xb0 [ 494.852345][T10491] __sys_bpf+0x1ed/0x860 [ 494.852370][T10491] ? __pfx___sys_bpf+0x10/0x10 [ 494.852402][T10491] ? ksys_write+0x22a/0x250 [ 494.852421][T10491] ? __pfx_ksys_write+0x10/0x10 [ 494.852435][T10491] ? rcu_is_watching+0x15/0xb0 [ 494.852465][T10491] __x64_sys_bpf+0x7c/0x90 [ 494.852484][T10491] do_syscall_64+0xfa/0x3b0 [ 494.852504][T10491] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.852525][T10491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.852540][T10491] ? clear_bhb_loop+0x60/0xb0 [ 494.852559][T10491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.852574][T10491] RIP: 0033:0x7ff644b8e929 [ 494.852588][T10491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.852602][T10491] RSP: 002b:00007ff645981038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 494.852617][T10491] RAX: ffffffffffffffda RBX: 00007ff644db5fa0 RCX: 00007ff644b8e929 [ 494.852628][T10491] RDX: 0000000000000070 RSI: 00002000000000c0 RDI: 0000000000000005 [ 494.852638][T10491] RBP: 00007ff645981090 R08: 0000000000000000 R09: 0000000000000000 [ 494.852647][T10491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.852656][T10491] R13: 0000000000000000 R14: 00007ff644db5fa0 R15: 00007fffcf751dd8 [ 494.852684][T10491] [ 495.317972][ T1073] usb 2-1: USB disconnect, device number 28 [ 497.489527][T10505] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 497.496173][T10505] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 497.588434][T10505] vhci_hcd vhci_hcd.0: Device attached [ 498.339739][ T5895] usb 35-1: new low-speed USB device number 5 using vhci_hcd [ 498.364178][T10507] vhci_hcd: connection reset by peer [ 498.395929][ T1167] vhci_hcd: stop threads [ 498.408736][ T1167] vhci_hcd: release socket [ 498.423662][ T1167] vhci_hcd: disconnect device [ 498.728438][ T5936] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 498.773906][ T5936] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 498.811108][ T5955] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 498.833704][T10524] Dead loop on virtual device ipvlan1, fix it urgently! [ 498.852384][ T5955] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 500.032222][T10536] openvswitch: netlink: Flow actions attr not present in new flow. [ 501.286571][ T5918] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 501.547791][ T5918] usb 5-1: Using ep0 maxpacket: 32 [ 501.552151][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.559381][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.559670][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 501.586217][ T5918] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 501.667382][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 502.101045][T10555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1296'. [ 502.663661][T10561] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1297'. [ 502.699386][ T5918] usb 5-1: string descriptor 0 read error: -71 [ 502.717560][ T5918] usb 5-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf [ 502.760301][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.779071][ T5918] usb 5-1: config 0 descriptor?? [ 502.784756][ T5918] usb 5-1: can't set config #0, error -71 [ 502.804609][ T5918] usb 5-1: USB disconnect, device number 32 [ 502.876694][ T5955] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 502.957477][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 502.957494][ T30] audit: type=1326 audit(1750739603.026:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10562 comm="syz.3.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5758e929 code=0x7ffc0000 [ 502.997060][T10568] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 503.047191][T10568] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 503.206681][ T30] audit: type=1326 audit(1750739603.026:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10562 comm="syz.3.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5758e929 code=0x7ffc0000 [ 503.228251][ C0] vkms_vblank_simulate: vblank timer overrun [ 503.238419][ T5955] usb 1-1: Using ep0 maxpacket: 16 [ 503.453830][T10574] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 503.465060][T10574] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 504.034391][T10568] pimreg3: entered allmulticast mode [ 504.229593][ T30] audit: type=1326 audit(1750739603.026:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10562 comm="syz.3.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=151 compat=0 ip=0x7fcd5758e929 code=0x7ffc0000 [ 504.254839][ T5955] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 504.275780][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.284862][ T30] audit: type=1326 audit(1750739603.026:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10562 comm="syz.3.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5758e929 code=0x7ffc0000 [ 504.308928][ T5895] vhci_hcd: vhci_device speed not set [ 504.348479][ T5955] usb 1-1: config 0 descriptor?? [ 504.419917][ T30] audit: type=1326 audit(1750739603.026:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10562 comm="syz.3.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5758e929 code=0x7ffc0000 [ 504.492730][ T30] audit: type=1326 audit(1750739603.026:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10562 comm="syz.3.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fcd5758e929 code=0x7ffc0000 [ 504.514216][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.559719][ T30] audit: type=1326 audit(1750739603.026:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10562 comm="syz.3.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5758e929 code=0x7ffc0000 [ 504.581298][ C0] vkms_vblank_simulate: vblank timer overrun [ 504.590713][T10583] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1304'. [ 504.634322][ T30] audit: type=1326 audit(1750739603.026:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10562 comm="syz.3.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5758e929 code=0x7ffc0000 [ 504.638882][T10583] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1304'. [ 504.685666][ T30] audit: type=1326 audit(1750739603.026:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10562 comm="syz.3.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd5758e929 code=0x7ffc0000 [ 504.720628][ T30] audit: type=1326 audit(1750739603.026:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10562 comm="syz.3.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5758e929 code=0x7ffc0000 [ 504.800354][ T5955] koneplus 0003:1E7D:2E22.000B: unknown main item tag 0x0 [ 504.827071][ T5955] koneplus 0003:1E7D:2E22.000B: unknown main item tag 0x0 [ 504.834293][ T5955] koneplus 0003:1E7D:2E22.000B: unknown main item tag 0x0 [ 504.862668][ T5955] koneplus 0003:1E7D:2E22.000B: unknown main item tag 0x0 [ 504.888102][ T5955] koneplus 0003:1E7D:2E22.000B: unknown main item tag 0x0 [ 504.926068][ T5955] koneplus 0003:1E7D:2E22.000B: hidraw0: USB HID v20.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0 [ 505.175520][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1309'. [ 506.639031][ T5872] usb 1-1: USB disconnect, device number 28 [ 506.841162][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.954200][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.120680][T10608] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 507.236618][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.956655][ T5872] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 507.994012][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.143359][ T5872] usb 1-1: config 0 has no interfaces? [ 508.156757][ T5872] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 508.186334][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.229607][ T5872] usb 1-1: config 0 descriptor?? [ 508.327250][ T5942] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 508.354460][ T5138] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 508.366833][ T5138] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 508.376335][ T5138] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 508.383858][ T67] bridge_slave_1: left allmulticast mode [ 508.392694][ T67] bridge_slave_1: left promiscuous mode [ 508.400799][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.411252][ T5138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 508.427142][ T5138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 508.448742][ T5872] usb 1-1: USB disconnect, device number 29 [ 508.477848][ T5942] usb 6-1: device descriptor read/64, error -71 [ 508.492557][ T67] bridge_slave_0: left allmulticast mode [ 508.505890][ T67] bridge_slave_0: left promiscuous mode [ 508.520464][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.738433][ T5942] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 508.876265][T10633] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1322'. [ 508.876791][ T5942] usb 6-1: device descriptor read/64, error -71 [ 509.074659][ T5942] usb usb6-port1: attempt power cycle [ 509.346960][ T5918] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 509.441651][ T5942] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 509.489942][ T5942] usb 6-1: device descriptor read/8, error -71 [ 509.511719][ T5918] usb 1-1: Using ep0 maxpacket: 8 [ 509.527345][ T5918] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 509.544776][ T5918] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.563849][ T5918] usb 1-1: config 0 has no interface number 0 [ 509.592719][ T5918] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 509.610698][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.619669][ T5918] usb 1-1: Product: syz [ 509.623865][ T5918] usb 1-1: Manufacturer: syz [ 509.637630][ T5918] usb 1-1: SerialNumber: syz [ 509.645728][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.657728][ T5918] usb 1-1: config 0 descriptor?? [ 509.667000][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.670909][ T5918] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 509.686127][ T5918] usb 1-1: No valid video chain found. [ 509.692475][ T67] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 509.720869][ T67] bond0 (unregistering): Released all slaves [ 509.726634][ T5942] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 509.757960][ T5942] usb 6-1: device descriptor read/8, error -71 [ 509.878184][ T5942] usb usb6-port1: unable to enumerate USB device [ 510.010887][T10640] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 510.020463][T10640] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 510.222408][ T67] hsr_slave_0: left promiscuous mode [ 510.228717][ T67] hsr_slave_1: left promiscuous mode [ 510.235637][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.254809][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.262562][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.301131][ T67] veth1_macvtap: left promiscuous mode [ 510.311561][ T67] veth0_macvtap: left promiscuous mode [ 510.320670][ T67] veth1_vlan: left promiscuous mode [ 510.326297][ T67] veth0_vlan: left promiscuous mode [ 510.506858][ T5820] Bluetooth: hci4: command tx timeout [ 510.550729][ T67] pimreg3 (unregistering): left allmulticast mode [ 512.586716][ T5820] Bluetooth: hci4: command tx timeout [ 513.825031][T10674] xt_hashlimit: size too large, truncated to 1048576 [ 514.236568][ T5936] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 514.355803][ T67] team0 (unregistering): Port device team_slave_1 removed [ 514.398666][ T5936] usb 2-1: config 0 has an invalid interface number: 69 but max is 0 [ 514.407705][ T5936] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 514.431394][ T5936] usb 2-1: config 0 has no interface number 0 [ 514.450061][ T5936] usb 2-1: config 0 interface 69 has no altsetting 0 [ 514.459820][T10683] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1334'. [ 514.470813][ T5936] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 514.480432][T10683] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1334'. [ 514.480650][ T67] team0 (unregistering): Port device team_slave_0 removed [ 514.489858][ T5936] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.508713][ T5936] usb 2-1: config 0 descriptor?? [ 514.525766][ T5936] usb 2-1: selecting invalid altsetting 0 [ 514.674630][ T5820] Bluetooth: hci4: command tx timeout [ 515.144146][T10689] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1335'. [ 516.174843][ T5862] usb 1-1: USB disconnect, device number 30 [ 516.236115][T10625] chnl_net:caif_netlink_parms(): no params data found [ 516.607501][ T5872] usb 2-1: USB disconnect, device number 29 [ 516.607648][ T67] IPVS: stop unused estimator thread 0... [ 516.726216][T10625] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.734339][T10625] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.747139][T10625] bridge_slave_0: entered allmulticast mode [ 516.748110][ T5820] Bluetooth: hci4: command tx timeout [ 516.755108][T10625] bridge_slave_0: entered promiscuous mode [ 516.781000][T10629] syz.4.1321: vmalloc error: size 8372224, failed to allocated page array size 16352, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 516.801320][T10625] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.811166][T10625] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.818869][T10625] bridge_slave_1: entered allmulticast mode [ 516.824885][T10629] CPU: 1 UID: 0 PID: 10629 Comm: syz.4.1321 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 516.824900][T10629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 516.824907][T10629] Call Trace: [ 516.824913][T10629] [ 516.824918][T10629] dump_stack_lvl+0x189/0x250 [ 516.824939][T10629] ? __pfx_dump_stack_lvl+0x10/0x10 [ 516.824953][T10629] ? __pfx__printk+0x10/0x10 [ 516.824963][T10629] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 516.824980][T10629] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 516.824996][T10629] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 516.825012][T10629] warn_alloc+0x214/0x310 [ 516.825030][T10629] ? __pfx_warn_alloc+0x10/0x10 [ 516.825047][T10629] ? __get_vm_area_node+0x28f/0x300 [ 516.825060][T10629] ? vb2_vmalloc_alloc+0xef/0x340 [ 516.825072][T10629] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 516.825101][T10629] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 516.825112][T10629] ? vb2_vmalloc_alloc+0xef/0x340 [ 516.825122][T10629] ? __get_vm_area_node+0x28f/0x300 [ 516.825134][T10629] ? vb2_vmalloc_alloc+0xef/0x340 [ 516.825143][T10629] __vmalloc_node_range_noprof+0x56a/0x12f0 [ 516.825156][T10629] ? vb2_vmalloc_alloc+0xef/0x340 [ 516.825180][T10629] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 516.825195][T10629] ? __kasan_kmalloc+0x93/0xb0 [ 516.825208][T10629] vmalloc_user_noprof+0xad/0xf0 [ 516.825221][T10629] ? vb2_vmalloc_alloc+0xef/0x340 [ 516.825230][T10629] vb2_vmalloc_alloc+0xef/0x340 [ 516.825239][T10629] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 516.825248][T10629] __vb2_queue_alloc+0x9bf/0x15a0 [ 516.825277][T10629] vb2_core_create_bufs+0x765/0xde0 [ 516.825298][T10629] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 516.825311][T10629] ? __mutex_trylock_common+0x153/0x260 [ 516.825330][T10629] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 516.825347][T10629] vb2_create_bufs+0x5b9/0xae0 [ 516.825388][T10629] ? __pfx_vb2_create_bufs+0x10/0x10 [ 516.825403][T10629] ? vb2_set_flags_and_caps+0x309/0x5f0 [ 516.825420][T10629] vb2_ioctl_create_bufs+0x285/0x3f0 [ 516.825437][T10629] v4l_create_bufs+0x193/0x2a0 [ 516.825454][T10629] __video_do_ioctl+0xc9b/0xdb0 [ 516.825469][T10629] ? __pfx___video_do_ioctl+0x10/0x10 [ 516.825485][T10629] video_usercopy+0x86e/0x14f0 [ 516.825500][T10629] ? __pfx___video_do_ioctl+0x10/0x10 [ 516.825509][T10629] ? __pfx_video_usercopy+0x10/0x10 [ 516.825517][T10629] ? smack_file_ioctl+0x2a9/0x340 [ 516.825537][T10629] ? __fget_files+0x2a/0x420 [ 516.825550][T10629] ? __fget_files+0x3a0/0x420 [ 516.825564][T10629] v4l2_ioctl+0x18a/0x1e0 [ 516.825573][T10629] ? __pfx_v4l2_ioctl+0x10/0x10 [ 516.825588][T10629] __se_sys_ioctl+0xfc/0x170 [ 516.825599][T10629] do_syscall_64+0xfa/0x3b0 [ 516.825616][T10629] ? lockdep_hardirqs_on+0x9c/0x150 [ 516.825631][T10629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.825640][T10629] ? clear_bhb_loop+0x60/0xb0 [ 516.825652][T10629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.825661][T10629] RIP: 0033:0x7f4c3178e929 [ 516.825675][T10629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.825689][T10629] RSP: 002b:00007f4c3269a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 516.825706][T10629] RAX: ffffffffffffffda RBX: 00007f4c319b6080 RCX: 00007f4c3178e929 [ 516.825718][T10629] RDX: 0000200000000340 RSI: 00000000c100565c RDI: 0000000000000004 [ 516.825728][T10629] RBP: 00007f4c31810b39 R08: 0000000000000000 R09: 0000000000000000 [ 516.825737][T10629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.825747][T10629] R13: 0000000000000000 R14: 00007f4c319b6080 R15: 00007ffc5f956d58 [ 516.825767][T10629] [ 516.825782][T10629] Mem-Info: [ 516.909975][T10625] bridge_slave_1: entered promiscuous mode [ 516.914072][T10629] active_anon:3132 inactive_anon:9453 isolated_anon:0 [ 516.914072][T10629] active_file:15762 inactive_file:35916 isolated_file:0 [ 516.914072][T10629] unevictable:768 dirty:244 writeback:0 [ 516.914072][T10629] slab_reclaimable:5872 slab_unreclaimable:97534 [ 516.914072][T10629] mapped:30697 shmem:4242 pagetables:1507 [ 516.914072][T10629] sec_pagetables:0 bounce:0 [ 516.914072][T10629] kernel_misc_reclaimable:0 [ 516.914072][T10629] free:1185022 free_pcp:18612 free_cma:0 [ 517.301030][T10629] Node 0 active_anon:12524kB inactive_anon:41628kB active_file:62752kB inactive_file:143664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:126732kB dirty:968kB writeback:0kB shmem:19420kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11824kB pagetables:5820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 517.335838][T10629] Node 1 active_anon:0kB inactive_anon:0kB active_file:296kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:56kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 517.340728][T10625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.367389][ C0] vkms_vblank_simulate: vblank timer overrun [ 517.368040][T10629] Node 0 [ 517.380748][T10625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.426896][T10629] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 517.455196][ C0] vkms_vblank_simulate: vblank timer overrun [ 517.476170][T10629] lowmem_reserve[]: [ 517.512366][T10625] team0: Port device team_slave_0 added [ 517.524582][T10629] 0 2501 2503 2503 2503 [ 517.529748][T10629] Node 0 DMA32 free:818632kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:12520kB inactive_anon:48784kB active_file:61000kB inactive_file:143596kB unevictable:1536kB writepending:964kB present:3129332kB managed:2561488kB mlocked:0kB bounce:0kB free_pcp:48864kB local_pcp:31440kB free_cma:0kB [ 517.562324][ C0] vkms_vblank_simulate: vblank timer overrun [ 517.572325][T10625] team0: Port device team_slave_1 added [ 517.583791][T10629] lowmem_reserve[]: 0 0 1 1 1 [ 517.589890][T10629] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1752kB inactive_file:68kB unevictable:0kB writepending:4kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 517.619027][ C0] vkms_vblank_simulate: vblank timer overrun [ 517.631024][T10629] lowmem_reserve[]: 0 0 0 0 0 [ 517.635848][T10629] Node 1 Normal free:3906056kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:296kB inactive_file:0kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14528kB local_pcp:8576kB free_cma:0kB [ 517.667085][ C0] vkms_vblank_simulate: vblank timer overrun [ 517.686739][T10629] lowmem_reserve[]: 0 0 0 0 0 [ 517.691616][T10629] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 517.721590][T10629] Node 0 DMA32: 2*4kB (ME) 6*8kB (UE) 63*16kB (UME) 59*32kB (UME) 35*64kB (E) 49*128kB (ME) 53*256kB (UME) 34*512kB (UME) 20*1024kB (ME) 11*2048kB (UME) 179*4096kB (M) = 818632kB [ 517.740771][T10629] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 517.755524][T10625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.762762][T10625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.788845][T10629] Node 1 Normal: 18*4kB (UME) 12*8kB (UME) 38*16kB (UME) 184*32kB (UME) 58*64kB (UME) 15*128kB (UME) 8*256kB (UME) 7*512kB (UME) 5*1024kB (UME) 6*2048kB (UME) 945*4096kB (M) = 3906056kB [ 517.808706][T10625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.819976][T10629] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 517.832884][T10625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.839955][T10629] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 517.849492][T10625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.879528][T10629] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 517.899705][T10629] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 517.909334][T10629] 55914 total pagecache pages [ 517.914538][T10625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.925255][T10629] 0 pages in swap cache [ 517.929569][T10629] Free swap = 124996kB [ 517.933822][T10629] Total swap = 124996kB [ 517.938866][T10629] 2097051 pages RAM [ 517.942766][T10629] 0 pages HighMem/MovableOnly [ 517.948556][T10629] 424572 pages reserved [ 517.952795][T10629] 0 pages cma reserved [ 518.832564][T10625] hsr_slave_0: entered promiscuous mode [ 518.843739][T10719] Dead loop on virtual device ipvlan1, fix it urgently! [ 518.861166][T10625] hsr_slave_1: entered promiscuous mode [ 518.900711][T10625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 518.919608][T10625] Cannot create hsr debugfs directory [ 519.615365][T10725] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1344'. [ 520.935971][T10739] FAULT_INJECTION: forcing a failure. [ 520.935971][T10739] name failslab, interval 1, probability 0, space 0, times 0 [ 520.994310][T10739] CPU: 1 UID: 0 PID: 10739 Comm: syz.0.1347 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 520.994336][T10739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 520.994345][T10739] Call Trace: [ 520.994352][T10739] [ 520.994360][T10739] dump_stack_lvl+0x189/0x250 [ 520.994389][T10739] ? __pfx____ratelimit+0x10/0x10 [ 520.994412][T10739] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.994434][T10739] ? __pfx__printk+0x10/0x10 [ 520.994456][T10739] ? __pfx___might_resched+0x10/0x10 [ 520.994483][T10739] should_fail_ex+0x414/0x560 [ 520.994507][T10739] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 520.994524][T10739] should_failslab+0xa8/0x100 [ 520.994546][T10739] __kvmalloc_node_noprof+0x161/0x5f0 [ 520.994568][T10739] ? bpf_test_run_xdp_live+0x18e/0x1b10 [ 520.994591][T10739] bpf_test_run_xdp_live+0x18e/0x1b10 [ 520.994619][T10739] ? stack_depot_save_flags+0x40/0x900 [ 520.994651][T10739] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 520.994668][T10739] ? bpf_prog_test_run_xdp+0x37c/0x1000 [ 520.994684][T10739] ? bpf_prog_test_run+0x2c7/0x340 [ 520.994702][T10739] ? __sys_bpf+0x4a4/0x860 [ 520.994718][T10739] ? __x64_sys_bpf+0x7c/0x90 [ 520.994754][T10739] ? __lock_acquire+0xab9/0xd20 [ 520.994785][T10739] ? __might_fault+0xb0/0x130 [ 520.994814][T10739] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 520.994840][T10739] ? _copy_from_user+0x94/0xb0 [ 520.994856][T10739] ? bpf_test_init+0x133/0x170 [ 520.994871][T10739] ? xdp_convert_md_to_buff+0x5b/0x330 [ 520.994890][T10739] bpf_prog_test_run_xdp+0x713/0x1000 [ 520.994922][T10739] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 520.994943][T10739] ? __fget_files+0x2a/0x420 [ 520.994966][T10739] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 520.994983][T10739] bpf_prog_test_run+0x2c7/0x340 [ 520.995005][T10739] __sys_bpf+0x4a4/0x860 [ 520.995026][T10739] ? __pfx___sys_bpf+0x10/0x10 [ 520.995055][T10739] ? ksys_write+0x22a/0x250 [ 520.995075][T10739] ? __pfx_ksys_write+0x10/0x10 [ 520.995091][T10739] ? rcu_is_watching+0x15/0xb0 [ 520.995118][T10739] __x64_sys_bpf+0x7c/0x90 [ 520.995135][T10739] do_syscall_64+0xfa/0x3b0 [ 520.995154][T10739] ? lockdep_hardirqs_on+0x9c/0x150 [ 520.995175][T10739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.995191][T10739] ? clear_bhb_loop+0x60/0xb0 [ 520.995210][T10739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.995226][T10739] RIP: 0033:0x7ff644b8e929 [ 520.995240][T10739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.995254][T10739] RSP: 002b:00007ff645981038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 520.995279][T10739] RAX: ffffffffffffffda RBX: 00007ff644db5fa0 RCX: 00007ff644b8e929 [ 520.995290][T10739] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 520.995301][T10739] RBP: 00007ff645981090 R08: 0000000000000000 R09: 0000000000000000 [ 520.995311][T10739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 520.995320][T10739] R13: 0000000000000000 R14: 00007ff644db5fa0 R15: 00007fffcf751dd8 [ 520.995352][T10739] [ 521.993564][T10625] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 522.012810][T10625] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 522.025978][T10625] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 522.033738][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 522.064346][ T5872] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 522.089751][T10625] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 522.228541][ T5872] usb 6-1: config 0 has an invalid interface number: 69 but max is 0 [ 522.247769][ T5872] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.260251][T10625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.268336][ T5872] usb 6-1: config 0 has no interface number 0 [ 522.275573][ T5872] usb 6-1: config 0 interface 69 has no altsetting 0 [ 522.292711][ T5872] usb 6-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 522.307378][T10625] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.314762][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.331156][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.338358][ T5961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.355813][ T5872] usb 6-1: config 0 descriptor?? [ 522.382414][ T5872] usb 6-1: selecting invalid altsetting 0 [ 522.398911][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.406098][ T5961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.118891][T10625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 523.349661][T10625] veth0_vlan: entered promiscuous mode [ 523.380049][T10625] veth1_vlan: entered promiscuous mode [ 524.019697][T10625] veth0_macvtap: entered promiscuous mode [ 524.053043][T10625] veth1_macvtap: entered promiscuous mode [ 524.129029][T10625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 524.235713][T10625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 524.294211][T10625] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.332391][T10625] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.396673][T10625] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.522107][T10781] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1359'. [ 524.628764][T10625] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.726831][ T5862] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 525.140345][ T5862] usb 1-1: config 0 has an invalid descriptor of length 67, skipping remainder of the config [ 525.164758][ T5862] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 525.205227][ T5862] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 525.236643][ T5862] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.291067][ T5862] usb 1-1: config 0 descriptor?? [ 525.373701][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.417956][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 525.511552][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 525.536699][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.402697][ T5138] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 526.416730][ T5138] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 526.425579][ T5138] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 526.441825][ T5138] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 526.450098][ T5138] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 526.516049][ T5862] usb 6-1: USB disconnect, device number 15 [ 526.558189][T10793] FAULT_INJECTION: forcing a failure. [ 526.558189][T10793] name failslab, interval 1, probability 0, space 0, times 0 [ 526.607335][T10793] CPU: 1 UID: 0 PID: 10793 Comm: syz.1.1362 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 526.607360][T10793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 526.607371][T10793] Call Trace: [ 526.607379][T10793] [ 526.607387][T10793] dump_stack_lvl+0x189/0x250 [ 526.607416][T10793] ? __pfx____ratelimit+0x10/0x10 [ 526.607440][T10793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 526.607462][T10793] ? __pfx__printk+0x10/0x10 [ 526.607485][T10793] ? __pfx___might_resched+0x10/0x10 [ 526.607506][T10793] ? fs_reclaim_acquire+0x7d/0x100 [ 526.607533][T10793] should_fail_ex+0x414/0x560 [ 526.607559][T10793] should_failslab+0xa8/0x100 [ 526.607581][T10793] __kmalloc_noprof+0xcb/0x4f0 [ 526.607600][T10793] ? smk_write_net6addr+0x163/0x13e0 [ 526.607620][T10793] ? _copy_from_user+0x94/0xb0 [ 526.607651][T10793] smk_write_net6addr+0x163/0x13e0 [ 526.607674][T10793] ? __lock_acquire+0xab9/0xd20 [ 526.607707][T10793] ? __pfx_smk_write_net6addr+0x10/0x10 [ 526.607726][T10793] ? rcu_read_lock_any_held+0xb3/0x120 [ 526.607749][T10793] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 526.607783][T10793] ? __pfx_smk_write_net6addr+0x10/0x10 [ 526.607806][T10793] vfs_write+0x27e/0xa90 [ 526.607834][T10793] ? __pfx_vfs_write+0x10/0x10 [ 526.607855][T10793] ? __fget_files+0x2a/0x420 [ 526.607880][T10793] ? __fget_files+0x3a0/0x420 [ 526.607898][T10793] ? __fget_files+0x2a/0x420 [ 526.607928][T10793] ksys_write+0x145/0x250 [ 526.607949][T10793] ? __pfx_ksys_write+0x10/0x10 [ 526.607965][T10793] ? rcu_is_watching+0x15/0xb0 [ 526.607992][T10793] ? do_syscall_64+0xbe/0x3b0 [ 526.608018][T10793] do_syscall_64+0xfa/0x3b0 [ 526.608038][T10793] ? lockdep_hardirqs_on+0x9c/0x150 [ 526.608060][T10793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.608076][T10793] ? clear_bhb_loop+0x60/0xb0 [ 526.608097][T10793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.608112][T10793] RIP: 0033:0x7efdf1d8e929 [ 526.608127][T10793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.608141][T10793] RSP: 002b:00007efdf2b51038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 526.608159][T10793] RAX: ffffffffffffffda RBX: 00007efdf1fb5fa0 RCX: 00007efdf1d8e929 [ 526.608172][T10793] RDX: 00000000000000eb RSI: 0000200000000200 RDI: 0000000000000003 [ 526.608182][T10793] RBP: 00007efdf2b51090 R08: 0000000000000000 R09: 0000000000000000 [ 526.608193][T10793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.608202][T10793] R13: 0000000000000000 R14: 00007efdf1fb5fa0 R15: 00007fff1a006c08 [ 526.608232][T10793] [ 527.788013][ T5826] usb 1-1: USB disconnect, device number 31 [ 527.853454][T10801] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 527.860100][T10801] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 527.867878][T10801] vhci_hcd vhci_hcd.0: Device attached [ 527.875651][T10808] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 527.906098][ T49] vhci_hcd: stop threads [ 527.914719][ T49] vhci_hcd: release socket [ 527.940768][T10813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1367'. [ 527.967100][ T49] vhci_hcd: disconnect device [ 528.144038][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.174474][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1369'. [ 528.184504][T10821] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1369'. [ 528.233412][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 528.233429][ T30] audit: type=1326 audit(1750739628.296:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10815 comm="syz.0.1370" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff644b8e929 code=0x0 [ 528.260709][ C0] vkms_vblank_simulate: vblank timer overrun [ 528.421501][T10790] chnl_net:caif_netlink_parms(): no params data found [ 528.481697][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.523175][ T5138] Bluetooth: hci5: command tx timeout [ 528.748963][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.098223][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.421585][T10790] bridge0: port 1(bridge_slave_0) entered blocking state [ 529.453277][T10790] bridge0: port 1(bridge_slave_0) entered disabled state [ 529.470712][T10790] bridge_slave_0: entered allmulticast mode [ 529.494466][T10790] bridge_slave_0: entered promiscuous mode [ 529.526884][T10790] bridge0: port 2(bridge_slave_1) entered blocking state [ 529.548663][T10790] bridge0: port 2(bridge_slave_1) entered disabled state [ 529.557265][ T5955] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 529.582714][T10790] bridge_slave_1: entered allmulticast mode [ 529.606434][T10790] bridge_slave_1: entered promiscuous mode [ 529.738875][ T5955] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 529.781265][ T5955] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 529.824593][ T5955] usb 1-1: config 0 has no interface number 0 [ 529.859418][ T5955] usb 1-1: config 0 interface 69 has no altsetting 0 [ 529.877339][ T5955] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 529.894000][T10790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.899232][ T5955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.927173][ T5820] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 529.936816][ T5820] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 529.939774][ T5955] usb 1-1: config 0 descriptor?? [ 529.951924][ T5820] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 529.966153][ T5820] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 529.975414][ T5820] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 530.008619][T10790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.018627][ T5955] usb 1-1: selecting invalid altsetting 0 [ 530.600814][ T5138] Bluetooth: hci5: command tx timeout [ 531.301904][ T36] bridge_slave_1: left allmulticast mode [ 531.323868][ T36] bridge_slave_1: left promiscuous mode [ 531.345280][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.373258][ T36] bridge_slave_0: left allmulticast mode [ 531.402880][ T36] bridge_slave_0: left promiscuous mode [ 531.430130][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.931610][T10840] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1373'. [ 532.073316][ T5138] Bluetooth: hci1: command tx timeout [ 532.267558][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 532.679986][ T5138] Bluetooth: hci5: command tx timeout [ 532.711355][ T5862] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 532.724060][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.736399][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.749715][ T36] bond0 (unregistering): Released all slaves [ 532.796145][T10790] team0: Port device team_slave_0 added [ 532.796628][ T5826] usb 1-1: USB disconnect, device number 32 [ 532.867300][ T5862] usb 2-1: Using ep0 maxpacket: 32 [ 532.886222][ T5862] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 532.926890][ T5862] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.930285][T10790] team0: Port device team_slave_1 added [ 532.979518][ T5862] usb 2-1: config 0 interface 0 has no altsetting 0 [ 532.986210][ T5862] usb 2-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 533.060554][T10848] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 533.065404][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.110035][ T5862] usb 2-1: config 0 descriptor?? [ 533.362153][T10790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.406601][T10790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.441617][T10790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.455340][T10790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.469457][T10790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.500614][T10790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.526249][ T5862] dragonrise 0003:0079:0011.000C: unknown main item tag 0x0 [ 533.556886][ T5862] dragonrise 0003:0079:0011.000C: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.1-1/input0 [ 533.924915][ T5872] usb 2-1: USB disconnect, device number 30 [ 534.001189][ T36] hsr_slave_0: left promiscuous mode [ 534.026340][ T36] hsr_slave_1: left promiscuous mode [ 534.048891][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.071478][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.089631][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.105224][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.106705][ T5138] Bluetooth: hci1: command tx timeout [ 534.142407][ T36] veth1_macvtap: left promiscuous mode [ 534.154199][ T36] veth0_macvtap: left promiscuous mode [ 534.160084][ T36] veth1_vlan: left promiscuous mode [ 534.165459][ T36] veth0_vlan: left promiscuous mode [ 534.772729][ T5138] Bluetooth: hci5: command tx timeout [ 534.925903][ T36] team0 (unregistering): Port device team_slave_1 removed [ 534.968411][ T36] team0 (unregistering): Port device team_slave_0 removed [ 535.498293][T10790] hsr_slave_0: entered promiscuous mode [ 535.504955][T10790] hsr_slave_1: entered promiscuous mode [ 535.572210][T10790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 535.600378][T10790] Cannot create hsr debugfs directory [ 535.828363][ T5872] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 536.194045][ T5138] Bluetooth: hci1: command tx timeout [ 536.216969][ T5872] usb 6-1: Using ep0 maxpacket: 32 [ 536.355281][ T5872] usb 6-1: config 0 has an invalid interface number: 35 but max is 0 [ 536.467509][ T5872] usb 6-1: config 0 has no interface number 0 [ 536.527176][ T5872] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 536.536602][ T5872] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.609579][T10875] input: syz1 as /devices/virtual/input/input12 [ 536.633150][ T5872] usb 6-1: Product: syz [ 536.656613][ T5872] usb 6-1: Manufacturer: syz [ 536.672201][ T5872] usb 6-1: SerialNumber: syz [ 536.790380][ T5872] usb 6-1: config 0 descriptor?? [ 536.803901][ T5872] radio-si470x 6-1:0.35: could not find interrupt in endpoint [ 536.813038][ T5872] radio-si470x 6-1:0.35: probe with driver radio-si470x failed with error -5 [ 537.001964][ T5872] radio-raremono 6-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 537.315378][ T5872] radio-raremono 6-1:0.35: raremono_cmd_main failed (-71) [ 537.462169][ T5872] radio-raremono 6-1:0.35: V4L2 device registered as radio48 [ 537.564470][ T5872] usb 6-1: USB disconnect, device number 16 [ 537.620015][ T5872] radio-raremono 6-1:0.35: Thanko's Raremono disconnected [ 537.641802][T10835] chnl_net:caif_netlink_parms(): no params data found [ 537.825058][T10887] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1384'. [ 537.848996][T10887] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1384'. [ 538.277625][ T5138] Bluetooth: hci1: command tx timeout [ 538.493786][T10835] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.513473][T10835] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.536089][T10835] bridge_slave_0: entered allmulticast mode [ 538.564504][T10835] bridge_slave_0: entered promiscuous mode [ 538.606038][T10835] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.622901][T10835] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.640825][T10835] bridge_slave_1: entered allmulticast mode [ 538.655264][T10835] bridge_slave_1: entered promiscuous mode [ 538.730390][T10835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 538.780358][T10835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 538.822347][T10790] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 539.034888][T10790] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 539.280450][T10790] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 539.783742][T10835] team0: Port device team_slave_0 added [ 539.806354][T10835] team0: Port device team_slave_1 added [ 539.813361][T10790] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 540.929621][T10835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.936711][T10835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.138645][T10835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.255409][T10835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.288710][T10835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.444143][T10835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.741570][T10835] hsr_slave_0: entered promiscuous mode [ 541.778226][T10835] hsr_slave_1: entered promiscuous mode [ 541.796080][T10835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 541.806715][T10835] Cannot create hsr debugfs directory [ 542.190271][T10790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.236888][ T5942] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 542.917253][T10952] block nbd0: server does not support multiple connections per device. [ 542.978591][T10952] block nbd0: shutting down sockets [ 543.114502][T10790] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.150608][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.157870][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.170715][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.177866][ T5961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.229500][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 543.276709][ T5942] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 543.285794][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.357534][ T5942] usb 2-1: config 0 descriptor?? [ 543.381807][T10943] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 545.268406][ T5942] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 545.278788][ T5942] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 545.285573][ T5942] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 545.292944][ T5942] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 545.304360][ T5942] elan 0003:04F3:0755.000D: unknown main item tag 0x0 [ 545.327320][ T5942] elan 0003:04F3:0755.000D: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 545.501910][ T5872] usb 2-1: USB disconnect, device number 31 [ 545.604397][T10835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 545.620565][T10835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 545.638160][T10835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 545.666554][ T5942] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 545.670860][T10835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 545.711770][T10790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.799244][T10835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.826616][ T5942] usb 6-1: Using ep0 maxpacket: 8 [ 545.847811][T10835] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.856127][ T5942] usb 6-1: config 0 has an invalid interface number: 175 but max is 3 [ 545.876435][ T5942] usb 6-1: config 0 has an invalid interface number: 17 but max is 3 [ 545.886152][ T5942] usb 6-1: config 0 has an invalid interface number: 189 but max is 3 [ 545.903104][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.910323][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.912149][ T5942] usb 6-1: config 0 has an invalid interface number: 185 but max is 3 [ 545.925995][ T5942] usb 6-1: config 0 has no interface number 0 [ 545.932232][ T5942] usb 6-1: config 0 has no interface number 1 [ 545.938840][ T5942] usb 6-1: config 0 has no interface number 2 [ 545.944935][ T5942] usb 6-1: config 0 has no interface number 3 [ 545.952434][ T5942] usb 6-1: config 0 interface 17 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 545.966323][ T5942] usb 6-1: config 0 interface 17 altsetting 6 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 545.980393][ T5942] usb 6-1: config 0 interface 189 altsetting 7 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 545.994800][ T5942] usb 6-1: config 0 interface 185 altsetting 1 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 546.019318][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.026554][ T5961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 546.026958][ T5942] usb 6-1: config 0 interface 185 altsetting 1 has an endpoint descriptor with address 0x55, changing to 0x5 [ 546.087004][ T5942] usb 6-1: config 0 interface 185 altsetting 1 has a duplicate endpoint with address 0x5, skipping [ 546.174954][ T5942] usb 6-1: config 0 interface 185 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 546.188570][T10835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 546.240286][ T5942] usb 6-1: config 0 interface 185 altsetting 1 has a duplicate endpoint with address 0x6, skipping [ 546.287157][ T5942] usb 6-1: config 0 interface 185 altsetting 1 has 7 endpoint descriptors, different from the interface descriptor's value: 6 [ 546.322859][ T5942] usb 6-1: config 0 interface 175 has no altsetting 0 [ 546.334310][ T5942] usb 6-1: config 0 interface 17 has no altsetting 0 [ 546.345379][ T5942] usb 6-1: config 0 interface 189 has no altsetting 0 [ 546.365274][ T5942] usb 6-1: config 0 interface 185 has no altsetting 0 [ 546.379630][ T5942] usb 6-1: New USB device found, idVendor=08f2, idProduct=00f4, bcdDevice=66.64 [ 546.423841][ T5942] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.475561][ T5942] usb 6-1: Product: syz [ 546.505850][ T5942] usb 6-1: Manufacturer: syz [ 546.529767][ T5942] usb 6-1: SerialNumber: syz [ 547.061874][ T5942] usb 6-1: config 0 descriptor?? [ 547.641583][T11000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1404'. [ 547.889360][ T5942] usb 6-1: USB disconnect, device number 17 [ 547.901802][T10790] veth0_vlan: entered promiscuous mode [ 548.157048][T10790] veth1_vlan: entered promiscuous mode [ 548.539966][T10835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.609195][T10790] veth0_macvtap: entered promiscuous mode [ 548.651083][T10790] veth1_macvtap: entered promiscuous mode [ 549.296584][T11018] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1409'. [ 549.440909][T10790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.746563][T10790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.849596][T10790] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.884933][T10790] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.903822][T10790] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.912905][T10790] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.078439][T10835] veth0_vlan: entered promiscuous mode [ 550.117533][T10835] veth1_vlan: entered promiscuous mode [ 551.374217][T10835] veth0_macvtap: entered promiscuous mode [ 551.395741][ T6145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.419685][ T6145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.422294][T10835] veth1_macvtap: entered promiscuous mode [ 551.543881][T10835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.557351][ T6145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.570853][ T6145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.572741][T10835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.588293][ T5895] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 551.596020][T10835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.605278][T10835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.658558][T10835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.672214][T10835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.771592][ T5895] usb 2-1: config 2 has an invalid interface number: 139 but max is 2 [ 551.807063][ T5895] usb 2-1: config 2 has an invalid interface number: 195 but max is 2 [ 551.815385][ T5895] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 551.890503][ T5895] usb 2-1: config 2 has 2 interfaces, different from the descriptor's value: 3 [ 551.927668][ T5895] usb 2-1: config 2 has no interface number 0 [ 551.941427][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.950200][ T5895] usb 2-1: config 2 has no interface number 1 [ 551.956354][ T5895] usb 2-1: New USB device found, idVendor=12d1, idProduct=b1d0, bcdDevice=73.d3 [ 551.977861][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.994053][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.050251][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.063678][ T5895] option 2-1:2.139: GSM modem (1-port) converter detected [ 552.092799][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.522271][T10989] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 552.778471][T11050] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 552.803551][T10989] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 552.876379][T10989] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.007995][T10989] usb 7-1: config 0 has no interface number 0 [ 553.431216][T10989] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 554.645616][T10989] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.787508][T10989] usb 7-1: Product: syz [ 554.795419][T10989] usb 7-1: Manufacturer: syz [ 554.805682][T11057] netlink: 76 bytes leftover after parsing attributes in process `syz.5.1420'. [ 554.818485][T10989] usb 7-1: SerialNumber: syz [ 554.842351][ T5820] Bluetooth: hci2: command 0x0406 tx timeout [ 554.862709][T10989] usb 7-1: config 0 descriptor?? [ 555.027250][T10855] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 555.039174][T10855] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 555.047575][T10855] CPU: 1 UID: 0 PID: 10855 Comm: kbnepd bnep0 Not tainted 6.16.0-rc3-syzkaller #0 PREEMPT(full) [ 555.058065][T10855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 555.068107][T10855] RIP: 0010:klist_del+0x49/0x110 [ 555.073038][T10855] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 39 3d cc f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 1b 3d cc f6 4d 8b 7e 58 4c 89 f7 e8 9f 5a [ 555.092640][T10855] RSP: 0018:ffffc9000382f708 EFLAGS: 00010202 [ 555.098701][T10855] RAX: 000000000000000b RBX: ffff888056daa460 RCX: ffff888026be8000 [ 555.106661][T10855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 555.114624][T10855] RBP: ffffc9000382f830 R08: ffff8880605950f3 R09: 1ffff1100c0b2a1e [ 555.122582][T10855] R10: dffffc0000000000 R11: ffffed100c0b2a1f R12: dffffc0000000000 [ 555.130537][T10855] R13: 1ffff1100adb548c R14: 0000000000000000 R15: ffff88802851c768 [ 555.138494][T10855] FS: 0000000000000000(0000) GS:ffff888125d85000(0000) knlGS:0000000000000000 [ 555.147410][T10855] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 555.153977][T10855] CR2: 00007f47ce3d4f98 CR3: 0000000031df0000 CR4: 00000000003526f0 [ 555.161942][T10855] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 555.169900][T10855] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 555.177861][T10855] Call Trace: [ 555.181128][T10855] [ 555.184050][T10855] device_del+0x280/0x8e0 [ 555.188370][T10855] ? _raw_spin_unlock_irq+0x2e/0x50 [ 555.193560][T10855] ? pm_runtime_set_memalloc_noio+0x1f4/0x260 [ 555.199611][T10855] ? __pfx_device_del+0x10/0x10 [ 555.204445][T10855] ? netdev_unregister_kobject+0x344/0x450 [ 555.210241][T10855] unregister_netdevice_many_notify+0x1d52/0x2320 [ 555.216650][T10855] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 555.223397][T10855] ? rcu_is_watching+0x15/0xb0 [ 555.228151][T10855] ? trace_contention_end+0x39/0x120 [ 555.233421][T10855] ? __mutex_lock+0x330/0xe80 [ 555.238089][T10855] ? __lock_acquire+0xab9/0xd20 [ 555.242929][T10855] ? __lock_acquire+0xab9/0xd20 [ 555.247770][T10855] unregister_netdevice_queue+0x33c/0x380 [ 555.253480][T10855] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 555.259708][T10855] ? rtnl_net_dev_lock+0x36/0x2f0 [ 555.264718][T10855] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 555.269817][T10855] unregister_netdev+0x1f/0x60 [ 555.274571][T10855] bnep_session+0x294d/0x2b40 [ 555.279250][T10855] ? trace_sched_exit_tp+0x38/0x120 [ 555.284439][T10855] ? __lock_acquire+0xab9/0xd20 [ 555.289294][T10855] ? __pfx_bnep_session+0x10/0x10 [ 555.294312][T10855] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 555.300197][T10855] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 555.306512][T10855] ? __pfx_woken_wake_function+0x10/0x10 [ 555.312135][T10855] ? __kthread_parkme+0x7b/0x200 [ 555.317062][T10855] ? __kthread_parkme+0x1a1/0x200 [ 555.322079][T10855] kthread+0x70e/0x8a0 [ 555.326134][T10855] ? __pfx_bnep_session+0x10/0x10 [ 555.331149][T10855] ? __pfx_kthread+0x10/0x10 [ 555.335729][T10855] ? _raw_spin_unlock_irq+0x23/0x50 [ 555.340917][T10855] ? lockdep_hardirqs_on+0x9c/0x150 [ 555.346104][T10855] ? __pfx_kthread+0x10/0x10 [ 555.350684][T10855] ret_from_fork+0x3fc/0x770 [ 555.355281][T10855] ? __pfx_ret_from_fork+0x10/0x10 [ 555.360402][T10855] ? __switch_to_asm+0x39/0x70 [ 555.365165][T10855] ? __switch_to_asm+0x33/0x70 [ 555.369915][T10855] ? __pfx_kthread+0x10/0x10 [ 555.374491][T10855] ret_from_fork_asm+0x1a/0x30 [ 555.379253][T10855] [ 555.382272][T10855] Modules linked in: [ 555.386797][T10855] ---[ end trace 0000000000000000 ]--- [ 555.396931][T10855] RIP: 0010:klist_del+0x49/0x110 [ 555.401901][T10855] Code: f6 49 89 dd 49 c1 ed 03 43 80 7c 25 00 00 74 08 48 89 df e8 39 3d cc f6 4c 8b 33 49 83 e6 fe 49 8d 7e 58 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 1b 3d cc f6 4d 8b 7e 58 4c 89 f7 e8 9f 5a [ 555.421774][T10855] RSP: 0018:ffffc9000382f708 EFLAGS: 00010202 [ 555.428029][T10855] RAX: 000000000000000b RBX: ffff888056daa460 RCX: ffff888026be8000 [ 555.436006][T10855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000058 [ 555.444200][T10855] RBP: ffffc9000382f830 R08: ffff8880605950f3 R09: 1ffff1100c0b2a1e [ 555.452393][T10855] R10: dffffc0000000000 R11: ffffed100c0b2a1f R12: dffffc0000000000 [ 555.460534][T10855] R13: 1ffff1100adb548c R14: 0000000000000000 R15: ffff88802851c768 [ 555.469167][T10855] FS: 0000000000000000(0000) GS:ffff888125d85000(0000) knlGS:0000000000000000 [ 555.478317][T10855] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 555.484907][T10855] CR2: 00007f47ce3d4f98 CR3: 0000000072ab4000 CR4: 00000000003526f0 [ 555.493551][T10855] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 555.502022][T10855] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 555.510203][T10855] Kernel panic - not syncing: Fatal exception [ 555.516497][T10855] Kernel Offset: disabled [ 555.520807][T10855] Rebooting in 86400 seconds..