last executing test programs: 16m11.715538038s ago: executing program 3 (id=410): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) syz_open_dev$dri(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226}, 0x94) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), 0x0, 0x0, 0xfffffffffffffffd) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0]}}, 0x0, 0x33}, 0x28) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000040)={0x28, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000580)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) 16m11.478900582s ago: executing program 3 (id=412): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aeb2, &(0x7f0000000740)={0x0, 0x12c, @pic={0x0, 0x0, 0x0, 0x0, 0x1}}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0x9c, &(0x7f00000002c0)={0x0, 0x89ba, 0x80, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r7, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4000, @empty=0xfe000000}}) mount$bpf(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540), 0x880, &(0x7f0000000800)={[], [{@smackfshat={'smackfshat', 0x3d, '.'}}]}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @meta={{0x9}, @void}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x39}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x40002e}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) r8 = syz_io_uring_setup(0x5190, &(0x7f0000000780)={0x0, 0xfffffff9, 0x10100, 0x2, 0x4000001}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') syz_io_uring_submit(r9, r10, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r11, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/3, 0x3}], 0x1}) io_uring_enter(r8, 0x567, 0x1000a387, 0x0, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) r12 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) r13 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r13, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r12, 0xc008561c, &(0x7f0000000280)={0xf0f022}) ioctl$vim2m_VIDIOC_S_FMT(r12, 0xc0d05605, &(0x7f00000000c0)={0x2, @win={{0x2, 0xc, 0x40, 0xe0fd}, 0x9, 0x1, 0x0, 0xc, 0x0, 0x6}}) alarm(0x1) 16m9.139947347s ago: executing program 3 (id=417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) 16m8.199422232s ago: executing program 3 (id=418): syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0xfffe, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4062d13c}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000b80)='./file0/file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0xb) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002000000090001"], 0x7c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="94000000120011"], 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000003, 0x12, r3, 0x1000) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x8, 0x2, 0x0, 0x4, 0x0, 0xfffffff7, [{0x4, 0x1}, {0x3, 0x4, 0xffff}]}]}, {0x0, [0x30, 0x0, 0x5f, 0x5f, 0x0, 0x2e, 0x30, 0x5f]}}, 0x0, 0x46, 0x0, 0x1}, 0x28) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@dellinkprop={0x4c, 0x6d, 0x1, 0x70bd24, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, 0x5a7e, 0x2800}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bond_slave_1\x00'}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c0a0}, 0x40000) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000008000094000040"]) 16m7.041680815s ago: executing program 3 (id=421): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x337706, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1e) r2 = fanotify_init(0x8, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) fanotify_mark(r2, 0x22, 0x800101b, r4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb10485f3f4bafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000180)="c4617b1203440f21b6c44261af7f8c66ba410066b8faff66ef0f00d5420f07430f01c826260f01c566b80e000f00d02e2e67650f01df", 0x36}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r8 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x0) r9 = fcntl$dupfd(r7, 0x406, r7) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r8, &(0x7f0000000880)=[{&(0x7f0000003000)=""/4106, 0x100a}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) 16m6.183382846s ago: executing program 3 (id=426): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) close(0xffffffffffffffff) clock_nanosleep(0x1, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0xfffffffffffffd3f, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) 16m5.665817256s ago: executing program 32 (id=426): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) close(0xffffffffffffffff) clock_nanosleep(0x1, 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x4, 0xf0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000a280)="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", 0xfffffffffffffd3f, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xfff1}, {0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) 6m54.415688916s ago: executing program 0 (id=1805): socket$can_j1939(0x1d, 0x2, 0x7) pipe2$9p(0x0, 0x80000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_CONTINUE(r0, 0x8010aa01, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, 0x0, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r4, 0x84, 0x2, &(0x7f0000000040)={0x400, 0x6, 0x10, 0x3}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x7f, 0x221, 0x203, 0xa5, 0x45ae, 0x4, 0xfffffffd, 0xa2f}, 0x20) sendto$inet(r4, &(0x7f0000000100)="ab", 0xfffd, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) bind$inet(r5, 0x0, 0x0) connect$inet(r5, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, 0x0, 0x0) 6m40.221813344s ago: executing program 0 (id=1830): syz_open_dev$evdev(&(0x7f0000000300), 0x3, 0x2) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x32d7, 0x0, 0x46, 0x0, 0x0) 6m37.594948289s ago: executing program 0 (id=1834): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_open_procfs$userns(0x0, &(0x7f00000001c0)) setns(r0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$inet6(0xa, 0x80003, 0xff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0xa, 0x20) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff7}, {0x0, 0xfef2, 0xd, 0x40000000000}, 0x101, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0xfffffffe, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x35ced141}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x0, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x4}}, 0xe8) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48081) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(0x0, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x2000c840}, 0x80) 6m34.440419295s ago: executing program 0 (id=1840): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000140)={0x7, 0x4, 0x40000}, 0x20) (fail_nth: 3) 6m31.909930283s ago: executing program 0 (id=1843): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xa}, 0x18) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdir(0x0, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) tkill(r4, 0xb) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0xe400, 0x0) ioctl$FBIOPUT_CON2FBMAP(r7, 0x4610, &(0x7f0000000080)={0x5}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) ptrace(0x10, r8) r9 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000000)={0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r8], 0x5d}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 6m29.859750534s ago: executing program 0 (id=1852): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='5\x00'/12, @ANYRES32=0x0, @ANYBLOB="1fd2ee3f27"], 0x20) 6m29.456935175s ago: executing program 33 (id=1852): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001600)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='5\x00'/12, @ANYRES32=0x0, @ANYBLOB="1fd2ee3f27"], 0x20) 3m24.401364097s ago: executing program 5 (id=2243): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000140)) getpid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000580)=ANY=[], 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) r6 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xa) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) r7 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r8 = dup(r7) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10) write(0xffffffffffffffff, &(0x7f0000000000)="14000000140005b7ffccca38b9000000010860eb", 0x14) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r8, 0x0) 3m22.779839629s ago: executing program 5 (id=2247): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000008280), r0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, &(0x7f00000084c0)={0x0, 0x0, &(0x7f0000008480)={&(0x7f00000082c0)={0x44, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8001}, {0x6, 0x11, 0x40}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000084}, 0x40080) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440)='overlay\x00', 0x0, &(0x7f0000001480)='y^\\@\\+\\\x00') 3m19.345260798s ago: executing program 5 (id=2251): prlimit64(0x0, 0xf, &(0x7f0000000040)={0xa}, 0x0) r0 = add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000191c0)={0x0, r0, r0}, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond0\x00'}) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r2, &(0x7f0000000100)='reno\x00', 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f00000002c0)={0x24, r5, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fbdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="04002c80"], 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000095f1ffffff000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io(r8, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) unshare(0x2040400) 3m16.331757253s ago: executing program 5 (id=2259): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000300)=0xc) socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000540), &(0x7f0000000400)=0xc) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x3, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x140}}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) open_by_handle_at(r1, &(0x7f0000000500)=ANY=[@ANYRESOCT], 0x480242) write$nbd(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000000000000200ffff0300000082b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700000000000000000000003e078b4ea9373c73f5f0d747c3d5b253355dc62ee6de97639a2541327d2576f482f67452af6c45419d074aedf0d2074848a66ba8f197463c961664"], 0x40) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) socket$inet6(0xa, 0x3, 0x5) io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x22, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000420040014002b8008000800", @ANYRES32, @ANYBLOB="080001", @ANYRES32, @ANYBLOB="14001b0000000000"], 0x3c}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xb, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 3m14.757739253s ago: executing program 5 (id=2264): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, 0x0, 0x0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 3m8.487745545s ago: executing program 5 (id=2273): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x697, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x2, 0x156}, &(0x7f0000000000), &(0x7f0000000100)) 2m53.3533429s ago: executing program 34 (id=2273): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000200)={0x2020}, 0x2020) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x697, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x2, 0x156}, &(0x7f0000000000), &(0x7f0000000100)) 18.065388667s ago: executing program 6 (id=2640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x1ce, 0x0, 0x9, 0x0, 0x7fff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0xfc, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x9, 0xbc000000, 0x200, 0x9, 0x8, 0x401}}}}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0x8, 0x56b, 0x1ce7, 0x30}}}}, @TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x1, 0xb3, 0x6, 0x2, 0xbd80, 0xff, 0x6}}, {0x10, 0x2, [0xfff3, 0x80, 0x4, 0xff, 0x6, 0x291]}}, {{0x1c, 0x1, {0x81, 0x94, 0x2, 0x6, 0x1, 0xdea, 0x800, 0xa}}, {0x18, 0x2, [0x4, 0x1, 0x2, 0x2, 0x6b9, 0x4, 0xe67, 0x101, 0x9, 0x9]}}, {{0x1c, 0x1, {0x9, 0x0, 0x4, 0x7fffffff, 0x2, 0xd40a, 0x1ff, 0x3}}, {0xa, 0x2, [0xfffa, 0x8, 0x40]}}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 14.779936s ago: executing program 6 (id=2645): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r3, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x85}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0xffffffffffffffee, 0x4, 0x1, 0x0, 0x83}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000000010000000000000080001008510000006000000180000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0xe2, &(0x7f0000000180)=""/226, 0x0, 0x8}, 0x94) 14.526472985s ago: executing program 4 (id=2648): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffffff}) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x5, 0x1, 0x6, 0x4}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="680000002b00ffff24bd7000f8fbdf2500000000c97a8e134cd0e3f517dec3b39f29a60fd90b9f80c2420344afe6c302f67479bf259d8a688b1803a2efd2f9b0464987b0b2fb544af8d2288b4a5c30aafd81b641a45873f83658da236c4659acd57ea47e8c812e649ff57d9ac9", @ANYRESOCT=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="14c5d9e7bc02"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x44c01) 13.314681085s ago: executing program 6 (id=2653): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) (async, rerun: 64) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000000)={0x0, 0x40000105, 0x0, 0x0}) (async, rerun: 64) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) (async, rerun: 64) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0x5000, 0x1000, 0x1}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000062102000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00]'], 0x54}, 0x1, 0x0, 0x0, 0x280608c0}, 0x0) 13.251893097s ago: executing program 4 (id=2654): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r3, 0x0, 0xa, &(0x7f00000010c0)=0xd, 0x3) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) rseq(0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r4, 0x1, &(0x7f0000000140)=[&(0x7f0000064000/0x1000)=nil], &(0x7f0000000240)=[0x1], 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f00000009c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x7, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0xfd, 0x100, @val=0x80}}}}}}}, 0x0) r5 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r6, &(0x7f00000004c0)=""/57, 0x39) r7 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0x2000, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000340), 0x88980f, &(0x7f0000000680)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x2000}}) shmctl$IPC_RMID(r5, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="92010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589", @ANYRES8], 0x0) 11.307771927s ago: executing program 1 (id=2656): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20) r5 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r5, 0x2000) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f}}, 0x50) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0xff) r9 = socket(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)) syz_fuse_handle_req(r6, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xa4c81, 0x0) writev(r10, &(0x7f0000000400)=[{&(0x7f0000001580)="03a30aa8", 0x4}], 0x20) mkdir(&(0x7f00000000c0)='./file0\x00', 0x110) syz_fuse_handle_req(r6, &(0x7f00000041c0)="0a44566bd8cd7422e078875d6a98d0a2dcc0a0c7881e44e46c6bf84253a3ba4cba8183c2236313cd49babfb721c547a5caed646bac2f2ea43e134e2a05d84cd813c9e2a96e68352f95c458f6ba48078f1d10fce44d869b4a00c68ca338ff3b877cb434f502cedfe83cbfb33d5233d081ec8ee2ac10e08194f6257183be922fc7203071a2aaf87478d1420237a1516e749623929f0d60f15e536376ba41fbbce034588b60680572f0d1d76ed122dc46252cc143f0e665e3f4e3f56bc454957265bd9a029cf8c7397ca01f95bc0e6601673bb31804c34307725385260df48c32527d74e51e5f26728aaedf9f379f5960f5e6e7146eff3254aaf54eb42834e1f57595a2b0333f5ca1474e07c2447c33dbe8f62f24cd788ac18475493edb813450e917837b125ad6f850e6af93e16828a6741c6ac00a4e25cfcd498f1b857e74a4eb8dce5ffcb3999031f1da13e9e6a973134ec04795a3fe91388fb6b349e668f49bd4c4ffa71a8662916219b4a2075bbfe4892cd1080f662005c1c2030d35999c9637f4836ae5745acae8ff0d745184e58241510d780f8a9aeeccb17b9213527a1b747dd23df6b4ac2ca4bd07fb7de6bb4bf8811e5c2f99f4bbcb3cba79fc483182bb981815a1b1ba5afad464631e6eb940a5da4e73787e9e0103bc7ea59cc8d63f740131a14c3cd034e91e885bd730521ba80c1071f25e0073a44bf8e36cc23a5f433378a13d2e2be7fbb8ca204976651924ae8637b339e883f4d388e239424031e20616341a5d51cd5d574382d518e4824dcdadba86143b4de3ff8126f0be226d1e6526a2af981d11092c428bc699ea208d4d38d63ef525b8da551207397fdb7d57a52c2062182072b017141de1b70bd15c758c88c65f6acffd5b5b0846c2a779660ceef46b22336abf817a24d27c3f66839b5f2f99131898dd372a124d9e5df84b24fa7be045b92fb225a735da1be1972c706120c391ffadf231603ffbb86d38ff2c76202a0f81317a7f790dadcdca1d109e4428f52246b17f6b5822f64d36da71167df86cedf76f4405f320f70a3d6d6307a13e023d9a23985fd9c95793118674346d7977654ed14a121c1bc0b3e8672087245e0721230edc667c1fb6bcdb22b3264b7fffedb589a2899096493ba97ce5fb0ad97821d0a4528465380e086b61f632eb0ce1f89eea2d8336217f51b4085433d426d404431360be55776cbb0f80c33e807732df3d73bf9d9a8e3b1468d2ac7c73a4aa239c96bbeef3965132a02254d887e65fbeaf517e913cc331ed36c3e326163d1a3aef7df9db06f8997668cc35e39813c82a440a73f12011bcc0b2abb993b99e79727d49e6656e8d9ecfb7b65c2c187ca6262361c6a7d3679aba9df764d13485874b1443f47d8caea64963011294082a9d50ed2fb08cdfaaa7dbcf782b7e8f8d8206dbc421bf9807727126b1ea364498f3ae693fe19f5b56af13df090892919c136c201a0d058c1863f136a3ff389cc510c17b1de341ca9a8d6ffd80fd019ac3fd9eeeb845202f2c5f207b1e7e169d57164855b9c3dbdf3c696124136d07a4de6be16b43352567a3e3bab0f73ccdd41255ffeb3ecb2bdf9eedd1d4332f4a7534b01b6331474880d4d07b464bd8c3b18d02fbf1faeeff70c8ae35b4eef002930dfa9a0c9350ffb72c82535a55280ac9c6d5384cf9aa3c66cc918497f51a6dbad608eee21f6085f85990983d0a51e5b41cb69ae52d60fa835045aaa0132be8b4dfdb10f521bc22b0192a4133040453c5a0a8bbb5d4c46ea25f2be5b0e79d71c4a13db6e9cb66db9f2c4804d41b9c26f96fd23c358ee9c8f57322540953224b56072af25b5c7041de560f1d4bde367eb3bbac949d9a9a86123ae62d0f4741446192e85772fb893b64c0e7c44a6e967af906b0f50e32be384027379c8dde251f549f94b16cee199da537d07ae89848da801b43bab3b65651402756cb22d17e602cdc33790ec8a5484a955bc8f487597ac9752166a405bbd7dfc9107af72b46e39d29afd2a0447e53377fd11997ab21db0f740699843a168720377e365caf88fd319dca184cadb8ffb4d288a0045b349be5ecb64561a2bdfa13336ef96aea86c48a5e405330a01c5390d482e6ccf4ebb2cf149d8b6274b2f9e6e1066004172a1a90e0db9838afafcb663bd693b2e5ca35858dcb82c05cbc87ec5cedfbb08daf55c472e250861bf357569342d90a667f3ac7fc2d4e54220444a97810ac14b0af6b043a07c1d791182635b983492f21db4a6ffee2d686238869e50b9bb73d75ec26087c0c8cb92ff25740b3995e4d771469b8474efef04d8d75f3544aaf84f02ad977948764d4c1bce36aa4198d6f22091b263d9eae96f1096fe3d8045949f189f33ec713101fea26ea043fe98b987542e33ab372058c64205e90a0e1f52d04b2c5ba7a5572ddb95f7d2b04f22e2e987c5d0f879db65718d8979da2a45cd333a5aacf96081977a9eb3dcee4afb44443ad37528c5a314d1ea08d1c3f0a36d4bdf77fc0caaeaa1eb2746a26683561b62d22f4e166192892e2ec1597f8bf6e89cd53840c8d7baea220e1b5e17df52a05017363727b0cc77ee61577a79b3de2ed364f3419a30d23701044b45ed3ba44b01804750bacf5bc959cffba86619f3331cc939fecadb5cba1edfe28952e0f70d2d99ce696dab9411aa2f7e7ca6207a3b16fc36a70e339aa5a618f6bcb0272968eba6edd95242825fe6e47cf1d50d229d4b1676aad0e9410aa1f2d6d2fcb9c4ec8e06c83faefbc2143de2367123bdb7669bd959782cf64def3a601c596611ac98d76df33e1fe340829340ba0a582d014ffacf9a9394300ab7efd60222cf96a99e42dae6e1ff1fcad1e3280ca07de5ea7e08b264a60015ffb76cc72d70ded58a1e2f59906f3c76433e4353a94a2a49f91103e2b5491ac7f66d54ae2a0e82099c4c9bd683971c2d3dd51601bf5e94f7660158bc6fdc1b2ce3d689a3aa64c29810ad7d9e91e49b72e6f97230a2a966434bf5cdb339556e6452e6b446766f55df45219fc02192cb73076285e74eb848229bffd812f6058782b3f5d0efa4d7b0d3c120931aa8b679e318ecc5ea539e3dcaf87473e2573189ce500b616957d88a09a014baffbd66990e41a3432891279cb82d9c4b50675ff067b76503535631aab9a29ee7e274eded1cd542c801bf519e1119fbab84f57c7686209c9e5177545bf0f403609c81fe6d8f2979d886c43fa3053b38b6e21ec3632011c97451d8409f169f71d226e61fdd206ec5f962b0277eee286a694ba5381493941ed44b3659994d3cd2a8c9c3bdb2f63d77eaee180428d7d6df86f6738cf7adb4b863c9ee9da9904bba4c2c3188a1ce31c5b082857e5566055c8cf58a9e9f7624d220b8d3093cbc6eaed7fcf15fc700ed711575aff5fb5cb7e206c810ea7a766d2960a1356687aad2ec171e4a1db6540a9257385a1e8b9f029485866c32e74c1a19e1113040c9d215f9f4bb4311f0d587b9cb6d11cdf28d4cbcdde4ee7831e5c8608335a1e41883b55b3609b9c4fb8489619481dffc6224e4c98b1e89831187b28b6bcebe7f78c779f5a2896e47bef8e607811b435c517e8e3f19d74752d7ae99cb7caf69c0f977f1b94f8f11bdbf35444fabaac2fc0e568d3b5b3b9f13162b1fa92615bc16492b870fc85c79c51b6516276f8e559e769a8d37a2335d67edbdbe2d4ded10e79ad26629ba6de862acb27fa7d0607a5c83840e446ca0d231ae9175ae9cddf35443ef8434a61d54b704d2b46835ca030d4325dd62918d361c27bd6e422f3f8431ff979953c88a5f3d07a84b733b2fffda5dedbc2ba876ea653aaa2a8446019d2cb69c4c7023177af7b5de358c4a93ba969415c7e3bd3e10a17653cc4c0031dc779d47bedc8d0f77b9fb39484e47d1edfa16a4839d7e3c1f4147bf7a5a41395980d0234577d433c4f3663a648865cf5cfc4a713bfde809cae8161f044770d8f3dd65f183392ed73dd0512951dce40dd6f68927144d09a6df1225769a47a2f1dc7da5a0e5651dc0198c2feb7de7aae5675a3753272294cdc8f05b4bf1b478d6e2a18f6a9dfdc42421bae7072786a4122cb3fcc61b2d0bc9314b92be8be3f9b8b109631305e06b52c0bf621d577f014d0572327c49fd705b45794aa8f198b37c139c4a8008763c654af912552549203733ad09c667104a3c1756dacc50af3d19bd996a99a7f857d9ff8c337c6feb16cb7fe282cbf8c975bdb60a7ddaa056352d9cf752f2b49fd0ae9dd7a263c4e1c1a027c7d45529b5a49de9f2306862b8ef8d386594f9909aabc849c5955241d192ab57d52fd2c7db0e4066bc3f70445599a60016de606b30a92b1bcbcd9dc8cfb492a6e66aa2be612e1d5f7fc61989d51285f1ef8a4e724a46c36bdaa6bed82ec972fe3e929a7a708397432b13e266d9a66954e011a158c9bc031587f9315382dfcc2334100d99b7d50b87096970d294261dd3263bee8f5aac2d86f070d70e278ecca4cf6ff05e511c0a65d6da81b68d94cd635e9dc98c1259fa2060de60d05117090a9a36d7b7aab999cd28a6c0727336312ede8f7fe0118e22aeb4094a64311fa766412d68ee04a93a1b9e2da91afcc91a1fc3c216f0aed6da74baed3242e620482ae01d3055562d16cab58500a5f41145d2275f6da8e24003cae19a7bdb9de8ef57965341253901962d846fcfd687e32fc81e716c42fae279382c8a750c9ef9543c942ca644287ec9cc921f99e9c901810a342e198f3b60a5c75aa91e67c1a6f08008841ddbe0766604b38a211929682303ce61e8024ea4589aa955886adc98f365af515daf30c376eb2b96fd78d46bc3999935a336c89f02ebe822bb5db6a1fd145c4d403b88f17b3fac670b2eb1296b3a5a7055556c21259695c248696162fc179aa1b4ec10e022ea7bacd0255937f9aa89f4d4c58bdedb54b43fde47268552f51b949a9cfbdabf6e3172853e6de9d0b0d9643349595769e98dab85282c49ce8c52301c04710a2c43cf63decaf65243d4756015b681bb680fdd1aba59d63b54e2ebedc68df32e575a95adfb2b18a79688b23ffb498d03012250f0dfaaed5353025aea7a35c8a89873b5f73adb41cc864b9f86e14624d70c917f05e47bab793958de9957cf23c94a9807b30bd7574edf66250224b887a8c02baa05cc02abd4c008339129b3109f1b04da29a9edf472991a440fcc8e586bef32b8c95fcd3d6702b9f43bf41454d5fe72a1f1ac80604c93dc9e9abf9a824c6d45e65b4f39f8341799dce4eac5e9036450ba7829221fdac7ec394c0a8e9813f5aad3ad0052f5156b3dca979e9c9a8755d4be2502727d346889210a13e5391951afef1880bcbd2a9ea020c9b2946563cd40c40f6202bce9bd1d2a1bbc3e5e6b2a9d2220343fd1ff5cde1b4d27c0601b8890b6ad8d3d80075a23725bddd81c15cd1b63e0123c4ac01de7b62b1e0fe2b72eaf400a1bcc63f76316d471eb191c931d5350e83a110b89e77668cfdc47734b91c2268fbbd89ce15b50b84c423a1f27943c32739e99b046a665c966275dba2dd6449b69ec53e5cb9cde89afe4149589c7378f5f3648d748bf3d46fa53f50d1228714252a328cebe7146d81dbb2f850aad492bc0697e2760dc9c60bc76a010e85110c0076478a21b47e5fbc4f7397a319e1db642e305bb1330674d96eb4b421f0f2131d125d4cec8aef4637dce572bad633e076972c9147a48b4c67135ace6a4490e16fa4731d62864e910762f1eb58afa63031c78c375a90147ceef07cd1e8155a649f2558d67dba9d6d2e012a3af4b603cd094e4a3b2e30c65c80cf8d9b2cb840e9df91e70162b80e74be96467574ca0ac5ad52238163283c556f0865c2338d6dcc73fa330634f6e5ce68e766df2db5b7edce0d98203e1d4374e7eda3558667229ea2daeb74156cf5895c4afb460cb4037456b14d9b748ddf7b8f3d5accd3e0d8d2eca2a78056d945eb4383078cc09a3a77736ce4e91f8174fe03fdceef8df92a50c2797b0cd06c6f1ae95650e48d103fb269c0a004d62237b77257807c8954678476030d788543d84770a1533a72141c7ea919e533bc182a3306782233d1a20153fa3e9e315a856e75f760bb7f943ea2f5956243f75fdb241ddfb4c081219ebb4eb3c3e989e3d953a93d96dafe1142c29434a554a92d319747e618cbd3af5202e51d30761e81b6c2d6febf221e3147b63171ea5dbaab4cba1b0fe7dc9cb249d74bbbcd7ef11c35fade1132ee4b74dc6090cfb6f852fb01d79aa0e5ee6897b7c021c6a1e69995e0546932c56e65b2581d619fc59f9775f3e8573b3c4926b8f6a9041512788d11a6fb279941ce24fea916e6568db25f1fcd3fd1e907fb3c45ddbca37230f5b3ffd48cf9c2269ec068d0bc528aac14807636c9067c5e32f2c2f259f6502ffffdbea40ad1b6b4a1d819fccc5c77da908204781747ecb0f2245dfa2941a9dba5d11ad186ab0eb87173dda634bd5a9221143e244c793d6262c904a64ba36cdced65abdd3be06d534b649b03791f7ce41e9abdea4d2c17f14bfbee0455dfa791f241341c78ce24cb8b86a9e332787d4ac1bdc20d022ae9588e8d63c22925d5e507bf41faddc17e01d3354c597908124705d88131b2e8ce8d04d660ce4100b5288d750d996e069bca1fe21f9b84c97011dd14c95c3cd538bf619b1df241fcf286c7014f8467a7ee81b2bef1c3bc56573894dbb54efb6a2fff0302b26c7589e08993e755059ba8b94fe728f1fdcb8ab10a5133d0434973e6667c25288b6e5e2d75202aec6bc0255177a53ea7c666afa79dca738a9d20990f118075b9f1cfb8ff1e5be75b49635bcbf43cb3bf97719dae8ec5c5528fcf89a9dda8fe6c08f7f737d69ef181ad3e35cf8e46efd94358b4640de1c387e295ae38edd0d5b80287f022895ca4dd9532bece6b2bbe100a83fef98dc5af595f4f7e4747ff5d28ab372db71b7c1c423183fa8ba4d823cc05b7be8819dd669b6517bd753e83f4d407a72dcbfcd0e9b2d5daef7fa88c1618236375a50ad2baa6a5e0551e679dce352181a1f9e72f5fca8c323b945bdd92e2d424b3e75041734d099f778fcb1e6407c80e7724d52ab110b02c0c9d1d4b78df12fc443fd8dc8fe82d9f3c8da7b87fdfb11e912c97a4e61425ac7b3954cb2e7e46ed0e24cc0c961dd5c2fc619a9e5e3550ca7bc21f2adc1a85c5b9dade357f1ecfd72646b27e7ab59b1b4d63c63082907b3be4cda341c49ade8992af489d11cf285b81a34c5614284ab4bb94018009e2333aa8e4630a9f6792b44b62d9c6e9d1855ffecab30c611cf5dc1e6ec09088b83a4c2cda9e5ee080df0b5e36b9badc035d6991bfd82fbb408faac15ced6ddcc917a9249b767f8844d6458411c1a31ff84e272311ea968ed3ff02f2e0caa47b1a6e030b07984c07d71e740420a9ed47b26799feecbba4f26dcdb61c9422e940550bfafa99ef0f826d2bcb1d7862016abe81d021be29adabe2c399fb9aa2f3ac472012b26ccd4eea2957343b06ac8ad71a637b8fa209ab6d4351fae53a9af0e920c043df94eccd5c1a847cb17d13589021f1a621b457fbe02a16f0f4b9dee0e7eb9358b8afd999d47f5143d49d4aef227f5b06ecef1ed71207e3526ff82b6ec69d3e8788f6c476437fe96f0533394027cf48e3e146aed7943d872bc35de34f7fdba13e5e1c259a68aa8050a813aa734f202ad7faba9f64b16f5068b43bdfb726e5fa54a1675dcab0697fc47a4fa3dd472022cc0d317d39076ad9847e72e1965b227f3e49ad6e8e742305bdd05d0c88b5859d6cfc98cc47a566269dbc4c200615f3e995511a69d8e724f0c842c06c46b5460dca83137656aae785e8415cfb57d57265af9c1d8f126081bcb218a427b80ccfaa95b8bd3f87f58f09ac52a2a47bbff99b057576d26876fa758c8e41172dd2bd45742a30d55f1b65bafc0c7c9c785f583069caf6de080c9057238e110456c0f9e8d898918b6981011f8dd17c55caced49eed32839305ec37b45e8cc4c35aec0c8a4cac54035a941842e5d19fd298757799c4a501718bf21a024106a292626d4eb3c784119b9f5003c6cdb36e442c04ca5b0ea59efb63fe90f9e218fdd9f0864f407cf8edbe71f3fb1d3a587ccfadbf7a5acbb0713b1ca1991e25e75738ca68e1817d08fdbacfab6900242b91ed9541efd2ca469bf7acc7857185d47506fd0a735d7b542949241976cfb1252f2e490fcdef3166f993ff9a812d0af902001a4f239989c087b41de65f83af93e349a2d37ad3b59c5009465e14030ecdfc8fec2d27939af2311bc5d544b19220b12a5782deb83f0e193f57cc4631d8746e7d0736e1295128f3a48aeacf2952be3005b09de00c9a4565e07692d8355a947d072de4324f2e8f3b2f01483d31999826b4ac7bad4f6ae099225f751995f463e5f762b9671ebb79fdfc51b5080af6fae4837a4e00a76b775eaa6f1fa1479b6afe5d66ac5fd148fdc4750d6ae1e268da446ba08dc4d7c872bd6401f1dd6b226e91bcf77c085e3c115f49d05a29c4e282caa7b8a60a1fe09a2e98227a2cbaa838d6053cb56bc7cc84e6ffa81c18ee26c1b32c2ce205c8fee3b2f4fa8d983b4901c80d766a3299fd62e3339a697305ab7cda995b3cce61e3372f152841ec1d540c9f6cfe2871e7cf4e6997afac85b1c05bed03a5e017bce4b45b0903e9c60cf3538df7df9d8fa93b53856fe93f522f723470c553799c90c56fb705040ba78141f7e5e9117f4876c45884edd5059c8588fc39f9c6268038c4a462a4a5fbbecac0daaf54876ac0217a9ab6f83ec52f15a170005e57baead0e8b1570508e10d2c9808ff3a437436d93ffd02c72c703e2e1917c0c82c3a4b4c03cb91c961451e3f6e2d9d9e58ac1810831d7618f81a34c23cc14029326f16cd043e82ea3bea5c6bcb84152d140659d1a4f135cee82640f96e177c030907117a6c6a8049fd3815fa06249ba4b37c2381c0eca124e7f5abd393c6d175ccf0c5fd4a6e9e00d5338899ed03b5a5023dbe4c6ae1f1ffc192411049e6fa34adeefa3b2e6b45165f341e0b853561ea0d183d93100efe80237ab878312281d607ac8dc10f34e6840a6b6d5c2975348a15761326504c24d5ec648f5714254087bd8c53fe131461ca4cea09ab52848b2526edb91a2bf6c0287aeaac51eb720507d66522ff2f94d90ec584f6088910ee079538e43cf8db55e2f0d70a60eac90eafd82480d11ea5dd795a05a698c2961eedad5f8a79dc3ffa92129f76b8d795e24a1905fc82f11c40d68d11af282621b9a2e39a8dd146013bd3a044f55366af078f7c15adc548029ba4ed896ddb646d74e3af69d8597831e08eb4df1b7ed54b8f3b327753ebf47d50a215c461cd422483c8f2d54f010fa9b76e5afef86b1bb8aa6d4b0c5c9ee798791379ed4dea481feb37ea18b5c7c0146aed32772245cc39628ecc13e03b76c302f80ebcb50279fa2ff74139468a23f36881ee7e7119d8040f90c7e3d8f75d80624d17d881e363b4913eb02e73224c7dac1077d19cc9063f8831053eaa9ecf87ffc31140f6a0a47869e5a5660e5d53b404c34e17b4693df9d5418131c8aaabb0e15aee98594c57cfb2202f209a4529a293b37ef68a2e95fb8fe5142e974f1d3fe3a08ed169379387e96ab5d927771ca7157e9bbd2650992680105dcd6a75829e0643b5ad708e5c65ea4b04b3eeedc24bcac8152cb887f32436a11efab6dc2509fa42d3d31e8aac73e9e8e84a88d7096b9549bc4a879d8f824eb63809a253409294f359b76ac3f031e6bf74a4de018f1c666239bae7bb01c523f53efc922232415d68264872296967dd150af095a12717e7eaeeb98f48c84a70fce8063790f9c2f43db477175e1c8da911ce853042d84e7f24df59e8caca5ee93e2daa6aa18e92930b4495dc22ff6729964942d1baaccd07233dcab828c2254f719132271e9239390e2ebb74ddde7284ebb8955719f7d086cdbe7eef6d7298576fac821eae5a8b6ddf9d88a1dcb32121b6d3ce49c245dd675e8a3b2254a9998ec0d0d7d9570bf6b6db0392c5b060872e154841096351d880f71bc00e5a576b14c26f85840c93a0c424cdbbc57b1d1212e300a874921c1f9c0de14a8cf61f8ebd03eee5cc79f34a41235b6c72aebf48243250c6dae8547b6634374e0bd073f7c162d4226a26032bc154eba7964b2975a8d35f17560a5312cf124741c74774f9a30f8d5ddc891e78bafdaf4f86d16d4c1363d23708463ab1314e3bade23316c7fbf51d2a2417da5162f9112c4331eab695d457e3712bb5f880c68367dba95b61f6f6a9297e477eaec615dff2cd3222f21d90abd8bd4b12fabb278c9fd44ce1ed024ccf908cb4995a1d9da53f62532203d7079e20a46b2b069be4b13a52a81c3b5227f57d6c184945a1799e80dbc7cd137e3427df352c0c0fba04f3b7fb02aa36c9af4611ebb51333326f8f750d662a0a8b43e30acaaeaf2653431b57e95a77adf8261298f791d200c02bdf4b821f7d09f972dd165ce92109c8dce081bd0bd53f598200bb3c5d875bbf1be2a7dc68355e42c515c20f2d72cef3d680a42e8a705f17c6ce15f47b144e55a3e566cb73ba5ee18c5a1535e5f4b4c1774736ed1654bc024b6c748b48d9cea48a06a571d264fc876f9afb2bb43441b39bb3f9e844f70dabd4d0ea06a46c1361a60ef5914411397600e63ecaa65f6598b4ce6f3a967c93ef0697e268b70d0637709ea3fef1da8afed0d2ffd36503197efcf68e0a2cb10b4104b209c133fdbe11e07a8d5c511045d19b69c63818e55168de4357a99eed1d8410664efdc866451de9bf6794d9742e2182449e2ae3869a01f1ed7ee37ffe817a38c502b8243a1c05f1ccbd349c7b9864cbf45b5a3c6f395e4a6602a02bb80ccac94ab66d67dfd8e5cc6fa6321e930354a2c40a1e8d360752dbdcf00134d34a21b24b9acfa2cd37f3c191461f4c9d8243176f42a8109bb05c37ee715ceb027861cf71268f283035d71ce4bae4ac5f79ee5211475ddfc33f02dcd91276e5ca265e5b9104222fdff5969f434a4412ba9fe00aec27f559b63c25a9e8d53c063db549035ec2c8e91e1a6247045541a7e28ff6c13e9f29a3683e55731d80d714b9d5801cfbf617aeb6651290293ac0f4e246df99e72434772b7d8494485537b7b2063c7bc5e80eb6c7ab6647d01189cc910aae2fe8249a0fc3226caa8994b476c6777bf113d153c43da337a6304fd10582d58919596a6de42ad500b62c1e6550d8cdc059496073a48110b2fccb42c96e3e3640f1a87fe379779adcd8836aa8dc545db39bb3afc032c16977e150e9572c3e5f8e04bc15497ec8217a0e187ba097fa95a855af66d47a105bdc3c837091daf5fbeb3ee5ce10b132f912b89ea1c6b9ecb8fbee0e4ea4e43b835ae583b67aab430dec741ea03195fed3cc164472d4b571d166ae20e0a309a80ce00b0fb349f7641f41a31993a8bd9ee092aa7ef16c9563e4db6236c9e702710dc95b198f533b1140441a1827aa4bef6a01c689127eb7028d1bb083edc8a08b8d239389d99948f1290623ba908e6e1c606035b70ba7065f8011451151dca715fb920b4d87858f01c5484df0e63656", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.65610217s ago: executing program 6 (id=2658): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xa}, 0x18) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdir(0x0, 0x0) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000340)={{{@in6=@private2, @in6=@mcast1}}, {{@in6=@local}, 0x0, @in6=@loopback}}, &(0x7f00000000c0)=0xe8) r3 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) tkill(r3, 0xb) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000040)=0x8, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0xe400, 0x0) ioctl$FBIOPUT_CON2FBMAP(r6, 0x4610, &(0x7f0000000080)={0x5}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000140)=0x0) ptrace(0x10, r7) r8 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000000)={0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r7], 0x5d}) ioctl$KVM_RUN(r8, 0xae80, 0x0) 10.655761754s ago: executing program 2 (id=2659): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2a500}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x2}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x80000000}]}}}]}, 0x44}}, 0x0) (fail_nth: 3) 10.245249438s ago: executing program 2 (id=2660): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x1e, 0x0, 0x0, 0x0, 0xffffffffffffff92}, 0x9}], 0x1, 0x40002030, 0x0) syz_usb_connect$uac1(0x1, 0x71, &(0x7f0000000300)=ANY=[@ANYBLOB="12011003000000086b1d010140000102030109025f0003017828020904000000010100000224"], &(0x7f0000000a80)={0x0, 0x0, 0x53, &(0x7f0000000c00)=ANY=[], 0x1, [{0x0, 0x0}]}) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0xfffffffffffffc72}], 0x1) syz_usb_connect(0x4, 0x3d, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x25, 0xa7, 0xb6, 0x20, 0xe8d, 0xa4, 0x8580, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x2, 0x3, 0x60, 0x5, [{{0x9, 0x4, 0xb4, 0x9, 0x0, 0xff, 0x0, 0x0, 0xb3, [@cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "8ed7"}, {0x5, 0x24, 0x0, 0xd571}, {0xd, 0x24, 0xf, 0x1, 0x80000000, 0x3ff, 0x10}}]}}]}}]}}, 0x0) 10.22728556s ago: executing program 7 (id=2661): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000002800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000000004"], 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0200000004000000080000000162000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0000000001"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "2e20cb5922405d2b0ed7c8729548014700bdc1229e2d9a0b6002a38c4590b7b6", "70dd7d02e84babe45bd05d343a339dedd14c54f4d2f554799a09c7c256d6f061", "c50d2abf3165b9e7d620f0e3df116caeaa76d18e5e786a3a0cd313577dcdb7fb", "504fb8f6245be4989b5ebef3e7c2775f741959c7dd21cc4e1c8d657671b43cef", "93679acb84092946a1a81ee8d8afdf231fa01792631c12a2ba65e45bb2feccb3", "cbca73085d806a78916b08c1", 0x3, 0x81, 0x8, 0x81, 0x7}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 9.838683407s ago: executing program 6 (id=2662): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000002800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0200000004000000080000000162000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000001"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "2e20cb5922405d2b0ed7c8729548014700bdc1229e2d9a0b6002a38c4590b7b6", "70dd7d02e84babe45bd05d343a339dedd14c54f4d2f554799a09c7c256d6f061", "c50d2abf3165b9e7d620f0e3df116caeaa76d18e5e786a3a0cd313577dcdb7fb", "504fb8f6245be4989b5ebef3e7c2775f741959c7dd21cc4e1c8d657671b43cef", "93679acb84092946a1a81ee8d8afdf231fa01792631c12a2ba65e45bb2feccb3", "cbca73085d806a78916b08c1", 0x3, 0x81, 0x8, 0x81, 0x7}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 8.657702517s ago: executing program 4 (id=2663): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x22402, 0x0) r0 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) close(0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) 6.795175774s ago: executing program 7 (id=2664): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x28, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x2c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x85}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0xffffffffffffffee, 0x4, 0x1, 0x0, 0x83}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="18080000000010000000000000080001008510000006000000180000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0xe2, &(0x7f0000000180)=""/226, 0x0, 0x8}, 0x94) 6.794325154s ago: executing program 4 (id=2665): r0 = socket(0x23, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000012c0)=ANY=[@ANYBLOB="12010000c6700610f71400058544010203010902120001000000000904"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r3, 0xc0305602, &(0x7f0000000100)={0x0, 0x9, 0x200b, 0x1}) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x8000080) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000008850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_io_uring_setup(0x4baa, &(0x7f0000000240)={0x0, 0x0, 0x8000, 0x2, 0x29c}, &(0x7f0000000380)=0x0, &(0x7f0000000300)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4c, 0x4000, @fd_index=0x4, 0x3, 0x0, 0x0, 0xa, 0x0, {0x1}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r10 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r11 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000000c0)={'rose0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1, 0x0, 0x80}}) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x3fa1dc947ffe4b82}) 6.632504127s ago: executing program 6 (id=2666): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x200002, 0x0) listen(r2, 0x8) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000000)=0x2, 0x4) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r5}, 0x38) syz_open_procfs(0x0, 0x0) 6.579423245s ago: executing program 2 (id=2667): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) shmget$private(0x0, 0x1000, 0x4, &(0x7f0000cac000/0x1000)=nil) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = socket(0x1e, 0x1, 0x0) connect$tipc(r5, &(0x7f0000000040)=@id, 0x10) shutdown(r5, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x0) ioctl$BLKPG(r6, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x200000000, 0x40007}}) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x81, 0x660804850a118895) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000000)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6c, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000100), &(0x7f0000000280), 0x8, 0x28, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) 6.579133503s ago: executing program 1 (id=2668): sched_setscheduler(0x0, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000040)=0x2) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0x4, 0x2, 0x0, 0x932, {[@window={0x3, 0x3, 0x3}, @timestamp={0x8, 0xa, 0x2, 0xb}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 6.414229115s ago: executing program 7 (id=2669): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}]}}}]}, 0x50}}, 0x0) 6.049872769s ago: executing program 1 (id=2670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x38}, 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)=ANY=[@ANYBLOB="1c00000034000701fffffffffeffffff037c0000080004"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e653b00300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x20000040) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x20200, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000300), &(0x7f0000000340)='%-5lx \x00'}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r5, &(0x7f0000000040)={0x24, @short={0x2, 0x0, 0xaaa2}}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) getdents(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(r4, 0xffffffb3, &(0x7f0000000240)=0x2) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x7204, &(0x7f0000000000)={0x0, 0x77ae, 0x10, 0x2, 0x2bc, 0x0, r3}, &(0x7f00000001c0), 0x0) 5.992075495s ago: executing program 7 (id=2671): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8043, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$alg(0x26, 0x5, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x12) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x22, 0x2, 0x24) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000080)={'sit0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) rmdir(&(0x7f0000000040)='./file0\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x4e, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYRES64=r5], 0x20) 5.688802651s ago: executing program 1 (id=2672): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000200)={0x48}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x4126, &(0x7f00000007c0)={0x0, 0x0, 0x800, 0x0, 0x1000000}) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0xaa000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r4, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x80, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_9p2000}]}}) 5.615637651s ago: executing program 2 (id=2673): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x337706, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1e) r2 = fanotify_init(0x8, 0x0) r3 = epoll_create1(0x0) r4 = fcntl$dupfd(r2, 0x0, r3) fanotify_mark(r2, 0x22, 0x800101b, r4, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb10485f3f4bafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000180)="c4617b1203440f21b6c44261af7f8c66ba410066b8faff66ef0f00d5420f07430f01c826260f01c566b80e000f00d02e2e67650f01df", 0x36}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$set_reqkey_keyring(0xe, 0x4) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r8 = syz_open_dev$usbmon(&(0x7f0000000040), 0x3, 0x0) r9 = fcntl$dupfd(r7, 0x406, r7) ioctl$USBDEVFS_SUBMITURB(r9, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0x8, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) readv(r8, &(0x7f0000000880)=[{&(0x7f0000003000)=""/4106, 0x100a}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x20000, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 4.337792732s ago: executing program 1 (id=2674): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_group_source_req(r1, 0x29, 0x3, &(0x7f00000001c0)={0x10001, {{0xa, 0x4e24, 0x9, @empty, 0x81}}, {{0xa, 0x4e22, 0x8, @loopback, 0x81}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000340)=@assoc_value, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000100)={0x0, 0x4, 0x2b}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xffb) r3 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x1009, 0x2, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x0, 0x1, r3, 0x0, 0x8, 'syz1\x00', 0x0}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000001, 0x32, 0xffffffffffffffff, 0x0) modify_ldt$write2(0x11, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x10) dup(r2) socket$alg(0x26, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r4, 0x0, 0xd}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 4.077041307s ago: executing program 7 (id=2675): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xd, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x84c, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x4, 0x7f, 0x2, 0x7, {0x9, 0x2, 0x5, 0x4, 0x2, 0xa}, {0x3, 0x1, 0x8, 0x1, 0x3, 0x9}, 0x2fb8, 0x5, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffffff, 0xad4, 0x10000, 0x5, 0xb60b, 0x2, 0x8, 0x1, 0x7, 0x8, 0x5, 0x4, 0xb2, 0x3, 0xcb9, 0x7, 0x7, 0x8000, 0x9, 0x10, 0xce3, 0x9, 0x7, 0x414b, 0x4603, 0x7, 0xff, 0x1, 0x5, 0x10, 0x5, 0x1ff, 0x100, 0x80002, 0x639d, 0x0, 0x2, 0x9, 0x15b, 0x9, 0x0, 0x80, 0x40, 0x1, 0x29, 0x3ff, 0x542, 0x3, 0x3, 0x4, 0x6, 0x4, 0x6, 0x6, 0x15e6, 0xc, 0x4, 0x7f, 0x9, 0x0, 0x83c, 0x0, 0x8, 0x52, 0x2, 0xa7ac, 0x7, 0xfffffffa, 0x4, 0x3, 0x2, 0x0, 0x9, 0x8, 0x9, 0x34b, 0x2, 0x0, 0xcd, 0x40, 0x4, 0x6, 0x44, 0x8, 0x1, 0x80, 0x3, 0xffff, 0x0, 0x4, 0x2, 0xd, 0x1, 0x8, 0x5, 0x100, 0x0, 0x7, 0x6, 0xfffffff7, 0x5, 0x2c000000, 0x64454b99, 0x1, 0x2, 0x3, 0x401, 0x4, 0x447, 0x0, 0x5c58, 0x0, 0x8001, 0x80000001, 0x169, 0x3, 0x4, 0xfffffff8, 0x584b, 0x7a498270, 0x7, 0x2, 0x3ec, 0x8, 0x1ff, 0xbc5f, 0x0, 0x7b685e6b, 0x9, 0x0, 0x7, 0x6, 0x8001, 0x9, 0x0, 0x5, 0x400, 0x0, 0xfff, 0x9, 0x6, 0x10000, 0x9cd, 0xff, 0x4, 0x7, 0x6, 0xb1, 0x7, 0x7, 0x80, 0x2, 0x4, 0x6, 0xf0, 0x8, 0x8, 0x3, 0x8, 0x3, 0x0, 0x9, 0x2, 0x1ff, 0x10001, 0x2, 0x6, 0xfffffffe, 0x4, 0xfffffff8, 0x3, 0x5, 0x8, 0x6, 0x3, 0x0, 0xffffffff, 0x1, 0x4, 0x7, 0x4, 0x5, 0x4, 0x1ff, 0xfffffffc, 0x5, 0x952, 0x0, 0x7f, 0x3, 0x326, 0x5, 0x3, 0x0, 0x5, 0x0, 0x1, 0x6, 0x100, 0x4, 0x5, 0xe87b, 0x2, 0x8, 0x7fff, 0x9, 0x4, 0x2, 0x6, 0x7fff, 0x1, 0x2, 0xa, 0xf, 0x800, 0x0, 0x2e, 0x4, 0x100, 0x6, 0x2, 0x5d6, 0x0, 0x2, 0xee4, 0x9, 0x3, 0x7, 0x0, 0x4, 0x30e73fe0, 0x7, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x400000, 0x96c3, 0x1000, 0x0, 0x322c, 0x10001, 0x3, 0x94b, 0x4, 0x2, 0x2, 0x5, 0x8, 0x4, 0x3, 0x2, 0x9, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0x0, 0x2, 0x400, 0xb94, 0x1000, 0x9, 0x1, 0x1, 0xfffffffd, 0x3ff, 0x5, 0xe0ff, 0x3, 0x38, 0x101, 0x1, 0x8, 0x517, 0x3, 0x240, 0x80000001, 0x401, 0x5, 0x2, 0x200, 0x10, 0x1, 0x66, 0x7, 0x0, 0x9c, 0x7, 0x9, 0x46047eae, 0x6, 0xe, 0x2, 0x5, 0x6, 0x8c, 0x3b0, 0xffffffff, 0x10000, 0x3, 0x8, 0x0, 0xfffffffc, 0x2, 0x4, 0x8, 0x8, 0xd675, 0xf, 0x8, 0x8001, 0xfff, 0x6, 0x5, 0xfffffffa, 0x80000001, 0xe, 0x0, 0x0, 0x100, 0x100, 0x205f800, 0x7fff, 0x3, 0xfc73, 0x2, 0x10001, 0xa473, 0xfffffffd, 0x11, 0x1, 0x9, 0x5, 0x73ec, 0x4, 0xffffffff, 0xffffffff, 0xffffffff, 0x7, 0x8, 0x0, 0xbb, 0x1, 0x3, 0x7, 0x3ff, 0x9, 0x1, 0xf9bb, 0x13, 0x81, 0x7, 0x7, 0x9, 0x7, 0x1, 0xb7, 0x4, 0x1, 0x92b, 0x1, 0x7, 0x8, 0x10, 0x85, 0x5a07f1ff, 0xc, 0x1ff, 0xfffffff7, 0x6, 0xc, 0x0, 0x8, 0xfffffffb, 0x1, 0x8, 0x8, 0x9, 0xa8, 0xb, 0x2, 0x1, 0x3, 0x401, 0x7f, 0x9, 0xe0, 0xffff751a, 0x2, 0x0, 0x7, 0x9, 0x6, 0x8, 0x8, 0x8, 0x6, 0xc, 0x0, 0x8, 0x3, 0x8, 0xbff1f336, 0x7, 0x5, 0x7, 0x1, 0x8, 0x0, 0x2, 0x4, 0x5, 0x8, 0x5f8381a, 0xa, 0x1fe0000, 0x10, 0xfffffffd, 0x7, 0x2, 0x8, 0x1, 0x9, 0x8000, 0x200, 0x8, 0xfffffffe, 0x6, 0x80, 0x9, 0x7, 0x5, 0x6, 0x4, 0x3, 0x0, 0x9, 0xa, 0x0, 0xce, 0x10000, 0x1000, 0xff, 0xe2, 0x7, 0x7f, 0x4, 0x2e3e, 0x6, 0x5, 0xf, 0x9, 0x5170, 0x6, 0x6, 0xffff, 0x9, 0xffffff1e, 0xe, 0x7d12, 0x0, 0xff, 0x2, 0x8000, 0x400, 0xf3, 0xd8fb, 0x5, 0x4, 0x3f8, 0x9, 0x9, 0x1, 0xe23, 0x6, 0x9, 0x7ff, 0x2, 0x80000000, 0xb, 0x3, 0x9, 0x7, 0xf, 0x128, 0x7, 0xd, 0x4, 0x9, 0x101, 0x1c00, 0x0, 0x7, 0x2, 0x3, 0x8, 0x400, 0x3, 0x0, 0x1, 0x100, 0x2, 0x5, 0x2cf, 0x6, 0xff, 0x1, 0x794, 0x8a43bf80, 0x2444, 0x8]}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x8c8}, 0x20004804) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000071000100000000000000000007000000", @ANYRES32=r5, @ANYBLOB="0c000180080001000300010020"], 0x44}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@mpls_delroute={0x48, 0x19, 0x3b2, 0x6bb, 0x25dfdbfc, {0x1c, 0x80, 0x14, 0x81, 0x0, 0x4, 0xc8, 0x3, 0x400}, [@RTA_DST={0x8, 0x1, {0x6}}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x19, 0x3}}, @RTA_MULTIPATH={0xc, 0x9, {0x4, 0x0, 0x5, r3}}, @RTA_MULTIPATH={0xc, 0x9, {0xfff, 0x4, 0x6, r5}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x40) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x400, 0x70bd2e, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x37}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xf01d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x4880}, 0x20008844) 3.129888627s ago: executing program 2 (id=2676): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000002800)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6c, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004080000000000000003000000000000000000000002000000000000000000000000000002000000000000000000"], 0x0, 0x56}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0200000004000000080000000162000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYBLOB="0000000001"], 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000140)=@ethtool_drvinfo={0x3, "2e20cb5922405d2b0ed7c8729548014700bdc1229e2d9a0b6002a38c4590b7b6", "70dd7d02e84babe45bd05d343a339dedd14c54f4d2f554799a09c7c256d6f061", "c50d2abf3165b9e7d620f0e3df116caeaa76d18e5e786a3a0cd313577dcdb7fb", "504fb8f6245be4989b5ebef3e7c2775f741959c7dd21cc4e1c8d657671b43cef", "93679acb84092946a1a81ee8d8afdf231fa01792631c12a2ba65e45bb2feccb3", "cbca73085d806a78916b08c1", 0x3, 0x81, 0x8, 0x81, 0x7}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 2.023981002s ago: executing program 4 (id=2677): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x22402, 0x0) r0 = syz_io_uring_setup(0x234, 0x0, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) close(0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) 755.962273ms ago: executing program 2 (id=2678): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x22900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xaece, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r2, 0xc1105511, &(0x7f0000000040)={0x6, 0x3, 0x40, 0x6, '\x00', 0x4000040}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0xc1105511, &(0x7f0000000040)) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r4 = socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg(r4, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="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", 0x1000}], 0x1}}], 0x1, 0x20000000) r5 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x5, 0x9) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r7, 0x400, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x1000000) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, 0x7, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x14000000) 641.327792ms ago: executing program 7 (id=2679): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r2, 0x1, 0x4, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x40000) bind$inet(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4040000) r6 = socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x5, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1a9}, [@map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3}]}, &(0x7f00000001c0)='GPL\x00', 0x4f7, 0x4, &(0x7f00000004c0)=""/4, 0x40f00, 0x8, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[r0, r6, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r8, {0x10, 0xffe0}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ARP_SIP={0x8, 0x39, @broadcast}, @TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@dev, 0x0}, &(0x7f0000000240)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x29, 0x30, 0x4, 0x8081, 0x44, @loopback, @empty, 0x7800, 0x7, 0x7129, 0x80}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)={0x16c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x80}, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='westwood\x00', 0x9) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) ioctl$PPPIOCSMRU1(0xffffffffffffffff, 0x80047458, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 640.105133ms ago: executing program 1 (id=2680): sched_setscheduler(0x0, 0x2, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000040)=0x2) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) syz_emit_ethernet(0x46, &(0x7f0000000100)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0xfffe, 0x0, 0xfd, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x9, 0x4, 0x2, 0x0, 0x932, {[@window={0x3, 0x3, 0x3}, @timestamp={0x8, 0xa, 0x2, 0xb}, @sack={0x5, 0x2}]}}}}}}}, 0x0) 0s ago: executing program 4 (id=2681): ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f00000000c0)=0x8) kernel console output (not intermixed with test programs): 5][T13638] should_fail_ex+0x414/0x560 [ 927.809050][T13638] should_failslab+0xa8/0x100 [ 927.809072][T13638] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 927.809092][T13638] ? __alloc_skb+0x112/0x2d0 [ 927.809123][T13638] __alloc_skb+0x112/0x2d0 [ 927.809152][T13638] alloc_skb_with_frags+0xca/0x890 [ 927.809180][T13638] ? __might_fault+0xb0/0x130 [ 927.809210][T13638] sock_alloc_send_pskb+0x857/0x990 [ 927.809248][T13638] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 927.809278][T13638] ? iov_iter_advance+0x8b/0x1c0 [ 927.809304][T13638] tun_get_user+0x9c3/0x3ce0 [ 927.809344][T13638] ? __might_fault+0xb0/0x130 [ 927.809365][T13638] ? __pfx_tun_get_user+0x10/0x10 [ 927.809396][T13638] ? __lock_acquire+0xab9/0xd20 [ 927.809419][T13638] ? ref_tracker_alloc+0x318/0x460 [ 927.809438][T13638] ? __lock_acquire+0xab9/0xd20 [ 927.809457][T13638] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 927.809484][T13638] ? tun_get+0x1c/0x2f0 [ 927.809512][T13638] ? tun_get+0x1c/0x2f0 [ 927.809534][T13638] ? tun_get+0x1c/0x2f0 [ 927.809561][T13638] tun_chr_write_iter+0x113/0x200 [ 927.809587][T13638] vfs_write+0x54b/0xa90 [ 927.809610][T13638] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 927.809641][T13638] ? __pfx_vfs_write+0x10/0x10 [ 927.809669][T13638] ? __fget_files+0x2a/0x420 [ 927.809699][T13638] ksys_write+0x145/0x250 [ 927.809719][T13638] ? __pfx_ksys_write+0x10/0x10 [ 927.809734][T13638] ? rcu_is_watching+0x15/0xb0 [ 927.809760][T13638] ? do_syscall_64+0xbe/0x3b0 [ 927.809786][T13638] do_syscall_64+0xfa/0x3b0 [ 927.809805][T13638] ? lockdep_hardirqs_on+0x9c/0x150 [ 927.809825][T13638] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.809844][T13638] ? clear_bhb_loop+0x60/0xb0 [ 927.809866][T13638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.809885][T13638] RIP: 0033:0x7fdba858e9a9 [ 927.809901][T13638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 927.809918][T13638] RSP: 002b:00007fdba94e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 927.809938][T13638] RAX: ffffffffffffffda RBX: 00007fdba87b5fa0 RCX: 00007fdba858e9a9 [ 927.809952][T13638] RDX: 000000000000002a RSI: 0000200000001700 RDI: 0000000000000004 [ 927.809964][T13638] RBP: 00007fdba94e2090 R08: 0000000000000000 R09: 0000000000000000 [ 927.809975][T13638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.809987][T13638] R13: 0000000000000000 R14: 00007fdba87b5fa0 R15: 00007ffe9f0fcba8 [ 927.810015][T13638] [ 928.169127][T13640] syzkaller1: entered promiscuous mode [ 928.174753][T13640] syzkaller1: entered allmulticast mode [ 930.380280][T13660] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2027'. [ 931.081846][T13685] FAULT_INJECTION: forcing a failure. [ 931.081846][T13685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 931.145286][T13685] CPU: 1 UID: 0 PID: 13685 Comm: syz.1.2035 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 931.145318][T13685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 931.145331][T13685] Call Trace: [ 931.145341][T13685] [ 931.145351][T13685] dump_stack_lvl+0x189/0x250 [ 931.145380][T13685] ? __pfx____ratelimit+0x10/0x10 [ 931.145403][T13685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 931.145427][T13685] ? __pfx__printk+0x10/0x10 [ 931.145474][T13685] should_fail_ex+0x414/0x560 [ 931.145502][T13685] _copy_to_user+0x31/0xb0 [ 931.145533][T13685] simple_read_from_buffer+0xe1/0x170 [ 931.145568][T13685] proc_fail_nth_read+0x1df/0x250 [ 931.145598][T13685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 931.145627][T13685] ? rw_verify_area+0x258/0x650 [ 931.145659][T13685] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 931.145686][T13685] vfs_read+0x200/0x980 [ 931.145722][T13685] ? __pfx_genl_unbind+0x10/0x10 [ 931.145743][T13685] ? __pfx_vfs_read+0x10/0x10 [ 931.145764][T13685] ? __wake_up_common_lock+0x190/0x1f0 [ 931.145788][T13685] ? __pfx_genl_unbind+0x10/0x10 [ 931.145804][T13685] ? netlink_setsockopt+0x6e9/0x770 [ 931.145843][T13685] ksys_read+0x145/0x250 [ 931.145865][T13685] ? __pfx_ksys_read+0x10/0x10 [ 931.145890][T13685] ? do_syscall_64+0xbe/0x3b0 [ 931.145918][T13685] do_syscall_64+0xfa/0x3b0 [ 931.145947][T13685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.145966][T13685] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 931.145980][T13685] ? clear_bhb_loop+0x60/0xb0 [ 931.145998][T13685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.146013][T13685] RIP: 0033:0x7fdba858d3bc [ 931.146026][T13685] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 931.146042][T13685] RSP: 002b:00007fdba94e2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 931.146058][T13685] RAX: ffffffffffffffda RBX: 00007fdba87b5fa0 RCX: 00007fdba858d3bc [ 931.146070][T13685] RDX: 000000000000000f RSI: 00007fdba94e20a0 RDI: 0000000000000004 [ 931.146097][T13685] RBP: 00007fdba94e2090 R08: 0000000000000000 R09: 0000000000000000 [ 931.146106][T13685] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 931.146116][T13685] R13: 0000000000000000 R14: 00007fdba87b5fa0 R15: 00007ffe9f0fcba8 [ 931.146139][T13685] [ 931.577576][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.584399][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.579812][T13678] delete_channel: no stack [ 934.953912][T13708] FAULT_INJECTION: forcing a failure. [ 934.953912][T13708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.972034][T13708] CPU: 0 UID: 0 PID: 13708 Comm: syz.6.2039 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 934.972067][T13708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 934.972081][T13708] Call Trace: [ 934.972090][T13708] [ 934.972100][T13708] dump_stack_lvl+0x189/0x250 [ 934.972129][T13708] ? __pfx____ratelimit+0x10/0x10 [ 934.972153][T13708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 934.972177][T13708] ? __pfx__printk+0x10/0x10 [ 934.972224][T13708] should_fail_ex+0x414/0x560 [ 934.972252][T13708] _copy_to_user+0x31/0xb0 [ 934.972284][T13708] sk_getsockopt+0x19dd/0x2530 [ 934.972322][T13708] ? __pfx_sk_getsockopt+0x10/0x10 [ 934.972351][T13708] ? do_syscall_64+0x20/0x3b0 [ 934.972388][T13708] ? __lock_acquire+0xab9/0xd20 [ 934.972420][T13708] ? __might_fault+0xb0/0x130 [ 934.972464][T13708] do_sock_getsockopt+0x237/0x450 [ 934.972495][T13708] ? do_syscall_64+0x20/0x3b0 [ 934.972522][T13708] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 934.972554][T13708] ? do_syscall_64+0x20/0x3b0 [ 934.972576][T13708] ? __fget_files+0x3a0/0x420 [ 934.972599][T13708] ? __fget_files+0x2a/0x420 [ 934.972631][T13708] __x64_sys_getsockopt+0x1a5/0x250 [ 934.972662][T13708] ? do_syscall_64+0x20/0x3b0 [ 934.972688][T13708] ? do_syscall_64+0x20/0x3b0 [ 934.972715][T13708] do_syscall_64+0xfa/0x3b0 [ 934.972737][T13708] ? lockdep_hardirqs_on+0x9c/0x150 [ 934.972758][T13708] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.972779][T13708] ? clear_bhb_loop+0x60/0xb0 [ 934.972805][T13708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.972825][T13708] RIP: 0033:0x7fc8ac98e9a9 [ 934.972844][T13708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.972863][T13708] RSP: 002b:00007fc8ad76f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 934.972885][T13708] RAX: ffffffffffffffda RBX: 00007fc8acbb5fa0 RCX: 00007fc8ac98e9a9 [ 934.972901][T13708] RDX: 0000000000000023 RSI: 0000000000000001 RDI: 0000000000000003 [ 934.972914][T13708] RBP: 00007fc8ad76f090 R08: 0000200000002940 R09: 0000000000000000 [ 934.972928][T13708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.972941][T13708] R13: 0000000000000000 R14: 00007fc8acbb5fa0 R15: 00007ffd20aa5d98 [ 934.972973][T13708] [ 936.608916][T13726] FAULT_INJECTION: forcing a failure. [ 936.608916][T13726] name failslab, interval 1, probability 0, space 0, times 0 [ 936.722449][T13726] CPU: 0 UID: 0 PID: 13726 Comm: syz.2.2045 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 936.722482][T13726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 936.722496][T13726] Call Trace: [ 936.722504][T13726] [ 936.722514][T13726] dump_stack_lvl+0x189/0x250 [ 936.722543][T13726] ? __pfx____ratelimit+0x10/0x10 [ 936.722567][T13726] ? __pfx_dump_stack_lvl+0x10/0x10 [ 936.722591][T13726] ? __pfx__printk+0x10/0x10 [ 936.722625][T13726] ? __pfx___might_resched+0x10/0x10 [ 936.722654][T13726] should_fail_ex+0x414/0x560 [ 936.722682][T13726] should_failslab+0xa8/0x100 [ 936.722708][T13726] kmem_cache_alloc_noprof+0x73/0x3c0 [ 936.722728][T13726] ? getname_flags+0xb8/0x540 [ 936.722758][T13726] getname_flags+0xb8/0x540 [ 936.722796][T13726] __x64_sys_renameat2+0xba/0xe0 [ 936.722823][T13726] do_syscall_64+0xfa/0x3b0 [ 936.722847][T13726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.722867][T13726] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 936.722889][T13726] ? clear_bhb_loop+0x60/0xb0 [ 936.722915][T13726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.722936][T13726] RIP: 0033:0x7f52ac98e9a9 [ 936.722955][T13726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.722973][T13726] RSP: 002b:00007f52ad7e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 936.722996][T13726] RAX: ffffffffffffffda RBX: 00007f52acbb5fa0 RCX: 00007f52ac98e9a9 [ 936.723011][T13726] RDX: ffffffffffffffff RSI: 0000200000000180 RDI: ffffffffffffff9c [ 936.723028][T13726] RBP: 00007f52ad7e3090 R08: 0000000000000000 R09: 0000000000000000 [ 936.723041][T13726] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.723055][T13726] R13: 0000000000000000 R14: 00007f52acbb5fa0 R15: 00007ffe81affe08 [ 936.723089][T13726] [ 937.148558][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 937.350870][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 938.496673][ T10] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 938.506105][ T10] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 938.516860][ T10] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 938.630773][ T10] usb 7-1: config 1 has no interface number 0 [ 938.640291][ T10] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 938.652029][ T10] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 938.665223][ T10] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 938.674609][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.385827][ T10] usb 7-1: can't set config #1, error -71 [ 940.449936][ T10] usb 7-1: USB disconnect, device number 4 [ 943.064496][T13789] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2058'. [ 943.136198][T13791] x_tables: unsorted underflow at hook 3 [ 943.272162][T13795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2057'. [ 943.366287][T13797] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.396835][T13789] tmpfs: Bad value for 'mpol' [ 943.417883][T13797] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 943.660226][T13797] bridge0: port 4(gretap0) entered blocking state [ 943.674020][T13797] bridge0: port 4(gretap0) entered disabled state [ 943.707085][T13797] gretap0: entered allmulticast mode [ 943.720791][T13797] gretap0: entered promiscuous mode [ 943.834447][T13800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 943.910889][T13800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.007399][T13797] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2059'. [ 944.372315][ T5907] libceph: connect (1)[c::]:6789 error -101 [ 944.402954][ T5907] libceph: mon0 (1)[c::]:6789 connect error [ 944.415145][T13808] ceph: No mds server is up or the cluster is laggy [ 945.110819][T13816] FAULT_INJECTION: forcing a failure. [ 945.110819][T13816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 945.252473][T13816] CPU: 1 UID: 0 PID: 13816 Comm: syz.6.2062 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 945.252503][T13816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 945.252517][T13816] Call Trace: [ 945.252525][T13816] [ 945.252533][T13816] dump_stack_lvl+0x189/0x250 [ 945.252562][T13816] ? __pfx____ratelimit+0x10/0x10 [ 945.252584][T13816] ? __pfx_dump_stack_lvl+0x10/0x10 [ 945.252607][T13816] ? __pfx__printk+0x10/0x10 [ 945.252637][T13816] ? __might_fault+0xb0/0x130 [ 945.252665][T13816] should_fail_ex+0x414/0x560 [ 945.252691][T13816] _copy_from_user+0x2d/0xb0 [ 945.252721][T13816] video_usercopy+0x354/0x14f0 [ 945.252756][T13816] ? smk_tskacc+0x2fc/0x370 [ 945.252787][T13816] ? __pfx___video_do_ioctl+0x10/0x10 [ 945.252816][T13816] ? __pfx_video_usercopy+0x10/0x10 [ 945.252844][T13816] ? smack_file_ioctl+0x2a9/0x340 [ 945.252878][T13816] ? __fget_files+0x2a/0x420 [ 945.252901][T13816] ? __fget_files+0x3a0/0x420 [ 945.252926][T13816] v4l2_ioctl+0x18d/0x1e0 [ 945.252956][T13816] ? __pfx_v4l2_ioctl+0x10/0x10 [ 945.252983][T13816] __se_sys_ioctl+0xfc/0x170 [ 945.253016][T13816] do_syscall_64+0xfa/0x3b0 [ 945.253037][T13816] ? lockdep_hardirqs_on+0x9c/0x150 [ 945.253059][T13816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.253078][T13816] ? clear_bhb_loop+0x60/0xb0 [ 945.253103][T13816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.253123][T13816] RIP: 0033:0x7fc8ac98e9a9 [ 945.253140][T13816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.253158][T13816] RSP: 002b:00007fc8ad76f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 945.253180][T13816] RAX: ffffffffffffffda RBX: 00007fc8acbb5fa0 RCX: 00007fc8ac98e9a9 [ 945.253195][T13816] RDX: 0000200000000180 RSI: 00000000c0205647 RDI: 0000000000000003 [ 945.253208][T13816] RBP: 00007fc8ad76f090 R08: 0000000000000000 R09: 0000000000000000 [ 945.253227][T13816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.253239][T13816] R13: 0000000000000000 R14: 00007fc8acbb5fa0 R15: 00007ffd20aa5d98 [ 945.253270][T13816] [ 949.156294][T13824] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 950.809520][ T5907] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 951.425995][ T5907] usb 7-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac [ 951.439380][ T5907] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.448891][ T5907] usb 7-1: Product: syz [ 951.457629][ T5907] usb 7-1: Manufacturer: syz [ 951.471227][ T5907] usb 7-1: SerialNumber: syz [ 951.631421][T13848] delete_channel: no stack [ 951.665171][ T5907] usb 7-1: config 0 descriptor?? [ 951.949920][ T5907] usb 7-1: interface 1 not found [ 952.308684][ T5907] usb 7-1: USB disconnect, device number 5 [ 952.528256][ T5948] libceph: connect (1)[c::]:6789 error -101 [ 952.538977][ T5948] libceph: mon0 (1)[c::]:6789 connect error [ 952.552906][T13858] ceph: No mds server is up or the cluster is laggy [ 952.838848][ T5949] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 953.030559][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 953.185497][ T5949] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 953.196946][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.228075][ T5949] usb 6-1: config 0 descriptor?? [ 954.268581][ T5948] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 954.344350][ T5949] usbhid 6-1:0.0: can't add hid device: -71 [ 954.590918][ T5949] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 954.684647][ T5949] usb 6-1: USB disconnect, device number 17 [ 954.698957][ T5948] usb 3-1: device descriptor read/64, error -71 [ 954.938825][ T5948] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 955.078606][ T5949] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 955.111508][ T5948] usb 3-1: device descriptor read/64, error -71 [ 955.217980][T13905] delete_channel: no stack [ 955.229278][ T5948] usb usb3-port1: attempt power cycle [ 955.288598][ T5949] usb 6-1: Using ep0 maxpacket: 32 [ 955.337430][ T5949] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.366470][ T5949] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 955.396444][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.447907][ T5949] usb 6-1: config 0 descriptor?? [ 955.490501][ T5949] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 955.532250][ T5949] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 955.610726][ T5948] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 955.679401][ T5948] usb 3-1: device descriptor read/8, error -71 [ 955.722339][ T5956] usb 6-1: USB disconnect, device number 18 [ 955.787088][ T5956] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 955.932653][T13920] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 955.942470][ T5948] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 956.119623][ T5948] usb 3-1: device descriptor read/8, error -71 [ 956.949080][T13928] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 956.994986][ T5948] usb usb3-port1: unable to enumerate USB device [ 957.025202][T13928] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 957.413742][T13940] xt_CT: You must specify a L4 protocol and not use inversions on it [ 957.518758][ T5948] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 958.009574][T13932] FAULT_INJECTION: forcing a failure. [ 958.009574][T13932] name fail_futex, interval 1, probability 0, space 0, times 1 [ 958.158551][T13932] CPU: 0 UID: 0 PID: 13932 Comm: syz.5.2092 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 958.158583][T13932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 958.158598][T13932] Call Trace: [ 958.158606][T13932] [ 958.158616][T13932] dump_stack_lvl+0x189/0x250 [ 958.158642][T13932] ? __pfx____ratelimit+0x10/0x10 [ 958.158665][T13932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 958.158689][T13932] ? __pfx__printk+0x10/0x10 [ 958.158719][T13932] ? up_write+0x1c4/0x420 [ 958.158755][T13932] should_fail_ex+0x414/0x560 [ 958.158783][T13932] get_futex_key+0xfd9/0x1640 [ 958.158832][T13932] ? __pfx_get_futex_key+0x10/0x10 [ 958.158857][T13932] ? __lock_acquire+0xab9/0xd20 [ 958.158889][T13932] futex_wake+0xf8/0x500 [ 958.158923][T13932] ? __pfx_futex_wake+0x10/0x10 [ 958.158946][T13932] ? __lock_acquire+0xab9/0xd20 [ 958.158965][T13932] do_futex+0x395/0x420 [ 958.158987][T13932] ? __pfx_do_futex+0x10/0x10 [ 958.159007][T13932] ? __might_fault+0xb0/0x130 [ 958.159022][T13932] mm_release+0x188/0x390 [ 958.159039][T13932] ? __pfx_mm_release+0x10/0x10 [ 958.159053][T13932] ? lockdep_hardirqs_on+0x9c/0x150 [ 958.159076][T13932] exit_mm+0xa8/0x2c0 [ 958.159096][T13932] ? __pfx_exit_mm+0x10/0x10 [ 958.159117][T13932] ? rcu_is_watching+0x15/0xb0 [ 958.159135][T13932] do_exit+0x648/0x22e0 [ 958.159158][T13932] ? do_raw_spin_lock+0x121/0x290 [ 958.159178][T13932] ? __pfx_do_exit+0x10/0x10 [ 958.159207][T13932] do_group_exit+0x21c/0x2d0 [ 958.159226][T13932] ? lockdep_hardirqs_on+0x9c/0x150 [ 958.159242][T13932] get_signal+0x125e/0x1310 [ 958.159271][T13932] arch_do_signal_or_restart+0x9a/0x750 [ 958.159294][T13932] ? __pfx___x64_sys_wait4+0x10/0x10 [ 958.159317][T13932] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 958.159348][T13932] ? exit_to_user_mode_loop+0x40/0x110 [ 958.159364][T13932] exit_to_user_mode_loop+0x75/0x110 [ 958.159377][T13932] do_syscall_64+0x2bd/0x3b0 [ 958.159392][T13932] ? lockdep_hardirqs_on+0x9c/0x150 [ 958.159406][T13932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.159420][T13932] ? clear_bhb_loop+0x60/0xb0 [ 958.159436][T13932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.159450][T13932] RIP: 0033:0x7f4f3238e9a9 [ 958.159462][T13932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.159475][T13932] RSP: 002b:00007f4f33130038 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 958.159490][T13932] RAX: fffffffffffffe00 RBX: 00007f4f325b5fa0 RCX: 00007f4f3238e9a9 [ 958.159500][T13932] RDX: 0000000040000000 RSI: 0000000000000000 RDI: 0000000000000358 [ 958.159508][T13932] RBP: 00007f4f33130090 R08: 0000000000000000 R09: 0000000000000000 [ 958.159517][T13932] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 958.159526][T13932] R13: 0000000000000000 R14: 00007f4f325b5fa0 R15: 00007ffe56ca60c8 [ 958.159546][T13932] [ 958.496195][ T5841] Bluetooth: hci1: link tx timeout [ 958.502340][ T5841] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 958.551701][ T5948] usb 3-1: Using ep0 maxpacket: 32 [ 958.738850][ T5907] IPVS: starting estimator thread 0... [ 958.828938][T13954] IPVS: using max 25 ests per chain, 60000 per kthread [ 958.858340][ T5948] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 959.047600][ T5948] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 959.318615][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.326689][ T5948] usb 3-1: Product: syz [ 959.359636][ T5948] usb 3-1: Manufacturer: syz [ 959.368877][ T5948] usb 3-1: SerialNumber: syz [ 959.390926][ T5948] usb 3-1: config 0 descriptor?? [ 959.433048][ T5948] cdc_ether 3-1:0.0: skipping garbage [ 959.451415][ T5948] usb 3-1: bad CDC descriptors [ 959.457686][ T5948] usb 3-1: unsupported MDLM descriptors [ 959.618042][T13929] 8021q: VLANs not supported on vxcan0 [ 959.632615][ T5907] usb 3-1: USB disconnect, device number 40 [ 960.708965][T13950] Bluetooth: hci1: command 0x0406 tx timeout [ 962.038872][ T5956] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 962.085050][T13987] netlink: 'syz.5.2099': attribute type 12 has an invalid length. [ 962.093206][T13987] netlink: 'syz.5.2099': attribute type 29 has an invalid length. [ 962.209000][T13987] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2099'. [ 962.218107][T13987] netlink: 'syz.5.2099': attribute type 1 has an invalid length. [ 962.268767][ T5956] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 962.307103][ T5956] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 962.352868][T13987] netlink: 47 bytes leftover after parsing attributes in process `syz.5.2099'. [ 962.366000][ T5956] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 962.529348][ T5956] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.542664][T13978] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 962.561578][ T5956] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 963.517603][ T9] usb 5-1: USB disconnect, device number 18 [ 963.918903][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2106'. [ 963.973992][T14022] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2106'. [ 963.984662][T14024] FAULT_INJECTION: forcing a failure. [ 963.984662][T14024] name failslab, interval 1, probability 0, space 0, times 0 [ 964.015259][T14024] CPU: 1 UID: 0 PID: 14024 Comm: syz.1.2107 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 964.015288][T14024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 964.015301][T14024] Call Trace: [ 964.015309][T14024] [ 964.015318][T14024] dump_stack_lvl+0x189/0x250 [ 964.015347][T14024] ? __pfx____ratelimit+0x10/0x10 [ 964.015369][T14024] ? __pfx_dump_stack_lvl+0x10/0x10 [ 964.015393][T14024] ? __pfx__printk+0x10/0x10 [ 964.015422][T14024] ? __pfx___might_resched+0x10/0x10 [ 964.015447][T14024] ? fs_reclaim_acquire+0x7d/0x100 [ 964.015477][T14024] should_fail_ex+0x414/0x560 [ 964.015505][T14024] should_failslab+0xa8/0x100 [ 964.015530][T14024] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 964.015552][T14024] ? __alloc_skb+0x112/0x2d0 [ 964.015586][T14024] __alloc_skb+0x112/0x2d0 [ 964.015619][T14024] alloc_skb_with_frags+0xca/0x890 [ 964.015649][T14024] ? __might_fault+0xb0/0x130 [ 964.015683][T14024] sock_alloc_send_pskb+0x857/0x990 [ 964.015725][T14024] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 964.015752][T14024] ? dev_get_by_index+0x22/0x2e0 [ 964.015775][T14024] ? dev_get_by_index+0x22/0x2e0 [ 964.015805][T14024] packet_sendmsg+0x3383/0x5060 [ 964.015854][T14024] ? __might_fault+0xb0/0x130 [ 964.015875][T14024] ? _parse_integer_limit+0x1ae/0x1f0 [ 964.015910][T14024] ? smack_socket_sendmsg+0x1fa/0x520 [ 964.015939][T14024] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 964.015968][T14024] ? __lock_acquire+0xab9/0xd20 [ 964.015988][T14024] ? __pfx_packet_sendmsg+0x10/0x10 [ 964.016047][T14024] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 964.016113][T14024] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 964.016135][T14024] ? __pfx_packet_sendmsg+0x10/0x10 [ 964.016168][T14024] __sock_sendmsg+0x219/0x270 [ 964.016196][T14024] __sys_sendto+0x3bd/0x520 [ 964.016230][T14024] ? __pfx___sys_sendto+0x10/0x10 [ 964.016258][T14024] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 964.016303][T14024] ? __fget_files+0x3a0/0x420 [ 964.016340][T14024] ? ksys_write+0x22a/0x250 [ 964.016363][T14024] ? __pfx_ksys_write+0x10/0x10 [ 964.016381][T14024] ? rcu_is_watching+0x15/0xb0 [ 964.016411][T14024] __x64_sys_sendto+0xde/0x100 [ 964.016446][T14024] do_syscall_64+0xfa/0x3b0 [ 964.016470][T14024] ? lockdep_hardirqs_on+0x9c/0x150 [ 964.016493][T14024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.016514][T14024] ? clear_bhb_loop+0x60/0xb0 [ 964.016541][T14024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.016562][T14024] RIP: 0033:0x7fdba858e9a9 [ 964.016581][T14024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 964.016600][T14024] RSP: 002b:00007fdba94e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 964.016622][T14024] RAX: ffffffffffffffda RBX: 00007fdba87b5fa0 RCX: 00007fdba858e9a9 [ 964.016639][T14024] RDX: 00000000000100a6 RSI: 0000200000000180 RDI: 0000000000000003 [ 964.016653][T14024] RBP: 00007fdba94e2090 R08: 0000200000000140 R09: 0000000000000014 [ 964.016667][T14024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 964.016680][T14024] R13: 0000000000000000 R14: 00007fdba87b5fa0 R15: 00007ffe9f0fcba8 [ 964.016713][T14024] [ 967.102626][T14051] FAULT_INJECTION: forcing a failure. [ 967.102626][T14051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 967.102662][T14051] CPU: 0 UID: 0 PID: 14051 Comm: syz.2.2114 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 967.102686][T14051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 967.102697][T14051] Call Trace: [ 967.102705][T14051] [ 967.102713][T14051] dump_stack_lvl+0x189/0x250 [ 967.102740][T14051] ? __pfx____ratelimit+0x10/0x10 [ 967.102762][T14051] ? __pfx_dump_stack_lvl+0x10/0x10 [ 967.102783][T14051] ? __pfx__printk+0x10/0x10 [ 967.102817][T14051] should_fail_ex+0x414/0x560 [ 967.102842][T14051] _copy_to_user+0x31/0xb0 [ 967.102869][T14051] simple_read_from_buffer+0xe1/0x170 [ 967.102893][T14051] proc_fail_nth_read+0x1df/0x250 [ 967.102919][T14051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 967.102945][T14051] ? rw_verify_area+0x258/0x650 [ 967.102971][T14051] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 967.103003][T14051] vfs_read+0x200/0x980 [ 967.103035][T14051] ? __pfx___mutex_lock+0x10/0x10 [ 967.103058][T14051] ? __pfx_vfs_read+0x10/0x10 [ 967.103086][T14051] ? __fget_files+0x2a/0x420 [ 967.103111][T14051] ? __fget_files+0x3a0/0x420 [ 967.103130][T14051] ? __fget_files+0x2a/0x420 [ 967.103158][T14051] ksys_read+0x145/0x250 [ 967.103173][T14051] ? __fget_files+0x3a0/0x420 [ 967.103194][T14051] ? __pfx_ksys_read+0x10/0x10 [ 967.103217][T14051] ? do_syscall_64+0xbe/0x3b0 [ 967.103241][T14051] do_syscall_64+0xfa/0x3b0 [ 967.103259][T14051] ? lockdep_hardirqs_on+0x9c/0x150 [ 967.103278][T14051] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.103296][T14051] ? clear_bhb_loop+0x60/0xb0 [ 967.103318][T14051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.103335][T14051] RIP: 0033:0x7f52ac98d3bc [ 967.103351][T14051] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 967.103368][T14051] RSP: 002b:00007f52ad7e3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 967.103387][T14051] RAX: ffffffffffffffda RBX: 00007f52acbb5fa0 RCX: 00007f52ac98d3bc [ 967.103401][T14051] RDX: 000000000000000f RSI: 00007f52ad7e30a0 RDI: 0000000000000004 [ 967.103413][T14051] RBP: 00007f52ad7e3090 R08: 0000000000000000 R09: 0000000000000000 [ 967.103424][T14051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.103435][T14051] R13: 0000000000000000 R14: 00007f52acbb5fa0 R15: 00007ffe81affe08 [ 967.103463][T14051] [ 968.910469][T14086] random: crng reseeded on system resumption [ 968.918675][ T5949] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 969.080855][ T5949] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 969.101865][ T5949] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 969.123976][ T5949] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.139415][ T5956] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 969.151425][ T5949] usb 3-1: config 0 descriptor?? [ 969.228901][ T44] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 969.328809][ T5956] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 969.369043][ T5956] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 969.398975][ T5956] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 969.408999][ T44] usb 7-1: Using ep0 maxpacket: 8 [ 969.428826][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.471916][ T44] usb 7-1: config 14 has an invalid interface number: 32 but max is 3 [ 969.512727][T14084] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 969.524848][ T44] usb 7-1: config 14 has an invalid interface association descriptor of length 5, skipping [ 969.575124][ T5956] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 969.579185][ T5949] hid (null): usage index exceeded [ 969.592958][ T44] usb 7-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 969.608143][ T5949] hid (null): usage index exceeded [ 969.634122][ T44] usb 7-1: config 14 has 1 interface, different from the descriptor's value: 4 [ 969.682407][ T5949] itetech 0003:258A:6A88.0008: ignoring exceeding usage max [ 969.702198][ T44] usb 7-1: config 14 has no interface number 0 [ 969.777310][T14075] overlay: Unknown parameter 'context' [ 969.839439][ T44] usb 7-1: config 14 interface 32 altsetting 19 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 970.054250][ T44] usb 7-1: config 14 interface 32 has no altsetting 0 [ 970.392811][ T44] usb 7-1: New USB device found, idVendor=1b75, idProduct=7733, bcdDevice=43.95 [ 970.513555][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.560002][ T5949] itetech 0003:258A:6A88.0008: usage index exceeded [ 970.566673][ T5949] itetech 0003:258A:6A88.0008: item 0 4 2 0 parsing failed [ 970.582475][ T44] usb 7-1: Product: 藞먎ࢸ룴絞ꫛ缇퇎ἂ驮ᓾ焨컇懗襑쭺殫桵脓ᓖﱢ驩Ⱈี糐瞰諂㫁ꏇ䅕⚟䩻䦟锣碑轍ຂ皨㯎弞솹눂ࠏ댄예剆ⴋ靬렘ᤡ⁻ೕ똻蹶瓎ꇁ㰜竵秂ꁑ [ 970.636435][ T5956] usb 6-1: USB disconnect, device number 19 [ 970.967986][ T44] usb 7-1: Manufacturer: ㆋ幻署㊩嶝顋 [ 971.051054][ T5949] itetech 0003:258A:6A88.0008: probe with driver itetech failed with error -22 [ 971.064028][ T5949] usb 3-1: USB disconnect, device number 41 [ 971.072037][ T44] usb 7-1: SerialNumber: Х [ 971.274754][T14059] udevd[14059]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 973.167216][ T44] usb 7-1: USB disconnect, device number 6 [ 973.170476][ T30] audit: type=1326 audit(1753449602.286:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.2.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ac98e9a9 code=0x7ffc0000 [ 973.448563][ T30] audit: type=1326 audit(1753449602.306:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.2.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f52ac98e9a9 code=0x7ffc0000 [ 973.472507][ T30] audit: type=1326 audit(1753449602.306:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.2.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ac98e9a9 code=0x7ffc0000 [ 973.494208][ T30] audit: type=1326 audit(1753449602.306:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.2.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ac98e9a9 code=0x7ffc0000 [ 974.472786][ T30] audit: type=1326 audit(1753449602.306:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.2.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7f52ac98e9a9 code=0x7ffc0000 [ 974.533756][ T30] audit: type=1326 audit(1753449602.316:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.2.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ac98e9a9 code=0x7ffc0000 [ 975.177718][ T30] audit: type=1326 audit(1753449602.316:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14133 comm="syz.2.2129" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ac98e9a9 code=0x7ffc0000 [ 977.302270][T14160] binder: 14156:14160 ioctl c010f508 200000000e00 returned -22 [ 977.317875][ T5841] Bluetooth: hci2: connection err: -111 [ 977.542436][T14166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2137'. [ 980.701489][T14186] ceph: No mds server is up or the cluster is laggy [ 983.072820][T14219] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 983.907394][T14232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2151'. [ 985.567489][T14240] netlink: 'syz.6.2153': attribute type 12 has an invalid length. [ 985.576634][T14240] netlink: 'syz.6.2153': attribute type 29 has an invalid length. [ 985.848379][T14240] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2153'. [ 985.918954][T14240] netlink: 'syz.6.2153': attribute type 1 has an invalid length. [ 985.980827][T14240] netlink: 47 bytes leftover after parsing attributes in process `syz.6.2153'. [ 987.337291][T14261] FAULT_INJECTION: forcing a failure. [ 987.337291][T14261] name failslab, interval 1, probability 0, space 0, times 0 [ 987.350682][T14261] CPU: 1 UID: 0 PID: 14261 Comm: syz.6.2157 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 987.350701][T14261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 987.350710][T14261] Call Trace: [ 987.350716][T14261] [ 987.350723][T14261] dump_stack_lvl+0x189/0x250 [ 987.350743][T14261] ? __pfx____ratelimit+0x10/0x10 [ 987.350758][T14261] ? __pfx_dump_stack_lvl+0x10/0x10 [ 987.350774][T14261] ? __pfx__printk+0x10/0x10 [ 987.350796][T14261] ? __pfx___might_resched+0x10/0x10 [ 987.350811][T14261] ? fs_reclaim_acquire+0x7d/0x100 [ 987.350831][T14261] should_fail_ex+0x414/0x560 [ 987.350850][T14261] should_failslab+0xa8/0x100 [ 987.350866][T14261] __kmalloc_cache_noprof+0x70/0x3d0 [ 987.350880][T14261] ? unix_autobind+0xec/0x730 [ 987.350903][T14261] unix_autobind+0xec/0x730 [ 987.350923][T14261] ? __pfx_process_measurement+0x10/0x10 [ 987.350939][T14261] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 987.350958][T14261] ? smack_socket_getpeersec_dgram+0x320/0x430 [ 987.350982][T14261] unix_dgram_sendmsg+0x3d6/0x17d0 [ 987.351009][T14261] ? __lock_acquire+0xab9/0xd20 [ 987.351025][T14261] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 987.351052][T14261] ? __lock_acquire+0xab9/0xd20 [ 987.351064][T14261] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 987.351094][T14261] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 987.351108][T14261] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 987.351129][T14261] __sock_sendmsg+0x219/0x270 [ 987.351149][T14261] ____sys_sendmsg+0x52d/0x830 [ 987.351176][T14261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 987.351204][T14261] ? import_iovec+0x74/0xa0 [ 987.351226][T14261] ___sys_sendmsg+0x21f/0x2a0 [ 987.351273][T14261] ? __pfx____sys_sendmsg+0x10/0x10 [ 987.351345][T14261] ? __fget_files+0x2a/0x420 [ 987.351370][T14261] ? __fget_files+0x3a0/0x420 [ 987.351396][T14261] __sys_sendmmsg+0x227/0x430 [ 987.351424][T14261] ? __pfx___sys_sendmmsg+0x10/0x10 [ 987.351445][T14261] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 987.351482][T14261] ? ksys_write+0x22a/0x250 [ 987.351497][T14261] ? __pfx_ksys_write+0x10/0x10 [ 987.351510][T14261] ? rcu_is_watching+0x15/0xb0 [ 987.351531][T14261] __x64_sys_sendmmsg+0xa0/0xc0 [ 987.351556][T14261] do_syscall_64+0xfa/0x3b0 [ 987.351572][T14261] ? lockdep_hardirqs_on+0x9c/0x150 [ 987.351587][T14261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.351602][T14261] ? clear_bhb_loop+0x60/0xb0 [ 987.351620][T14261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.351634][T14261] RIP: 0033:0x7fc8ac98e9a9 [ 987.351647][T14261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 987.351660][T14261] RSP: 002b:00007fc8ad74e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 987.351676][T14261] RAX: ffffffffffffffda RBX: 00007fc8acbb6080 RCX: 00007fc8ac98e9a9 [ 987.351687][T14261] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 987.351697][T14261] RBP: 00007fc8ad74e090 R08: 0000000000000000 R09: 0000000000000000 [ 987.351706][T14261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.351715][T14261] R13: 0000000000000000 R14: 00007fc8acbb6080 R15: 00007ffd20aa5d98 [ 987.351739][T14261] [ 988.683066][T14264] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2160'. [ 990.844940][T14287] netlink: 'syz.4.2165': attribute type 4 has an invalid length. [ 990.903742][T14287] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2165'. [ 991.085164][T14287] : renamed from bond0 (while UP) [ 991.386558][T14302] input: syz0 as /devices/virtual/input/input14 [ 991.459261][T14301] netlink: 'syz.6.2167': attribute type 12 has an invalid length. [ 991.477492][T14301] netlink: 'syz.6.2167': attribute type 29 has an invalid length. [ 991.560281][T14301] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2167'. [ 991.884913][T14301] netlink: 'syz.6.2167': attribute type 1 has an invalid length. [ 992.942943][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.949749][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.750702][T14301] netlink: 47 bytes leftover after parsing attributes in process `syz.6.2167'. [ 994.009795][T14316] ceph: No mds server is up or the cluster is laggy [ 995.931315][T14330] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2172'. [ 997.826321][T14371] input: syz0 as /devices/virtual/input/input15 [ 998.203178][T14357] ceph: No mds server is up or the cluster is laggy [ 998.236344][T14359] ceph: No mds server is up or the cluster is laggy [ 999.247068][T14381] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2186'. [ 1001.368886][T14381] hsr_slave_1 (unregistering): left promiscuous mode [ 1004.849228][ T3550] libceph: connect (1)[c::]:6789 error -101 [ 1004.855353][ T3550] libceph: mon0 (1)[c::]:6789 connect error [ 1005.139034][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1005.892858][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1005.936909][T14427] ceph: No mds server is up or the cluster is laggy [ 1006.477610][T14437] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2200'. [ 1006.508827][T14437] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2200'. [ 1013.028677][T14478] syzkaller1: entered promiscuous mode [ 1013.051806][T14478] syzkaller1: entered allmulticast mode [ 1015.362683][T14478] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2212'. [ 1015.539268][T14478] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1016.789617][T14497] blktrace: Concurrent blktraces are not allowed on sg0 [ 1020.342009][T14543] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.349792][T14543] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.954807][T14550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1023.958346][T14558] blktrace: Concurrent blktraces are not allowed on sg0 [ 1024.830904][T14562] netlink: 'syz.5.2233': attribute type 12 has an invalid length. [ 1024.848599][T14562] netlink: 'syz.5.2233': attribute type 29 has an invalid length. [ 1024.868038][T14562] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2233'. [ 1025.677841][T14562] netlink: 'syz.5.2233': attribute type 1 has an invalid length. [ 1025.742509][ T30] audit: type=1326 audit(1753449654.836:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14566 comm="syz.2.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ac98e9a9 code=0x7fc00000 [ 1025.749768][T14562] netlink: 47 bytes leftover after parsing attributes in process `syz.5.2233'. [ 1026.074761][T14572] tmpfs: Bad value for 'mpol' [ 1027.520685][ T30] audit: type=1326 audit(1753449656.616:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14566 comm="syz.2.2234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f52ac92ab89 code=0x7fc00000 [ 1031.998258][T14640] overlay: Unknown parameter 'y^\@\+\' [ 1035.268746][T14654] xt_connbytes: Forcing CT accounting to be enabled [ 1035.275782][T14654] Cannot find set identified by id 0 to match [ 1035.892163][ T30] audit: type=1326 audit(1753449664.996:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14657 comm="syz.2.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ac98e9a9 code=0x7fc00000 [ 1035.942015][ T5949] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1036.131655][T14660] tmpfs: Bad value for 'mpol' [ 1036.549385][ T5949] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1036.572440][ T5949] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.600649][ T5949] usb 6-1: config 0 descriptor?? [ 1036.894645][ T5949] udl 6-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1036.918893][T14669] FAULT_INJECTION: forcing a failure. [ 1036.918893][T14669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1036.947109][T14669] CPU: 0 UID: 0 PID: 14669 Comm: syz.1.2255 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1036.947142][T14669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1036.947156][T14669] Call Trace: [ 1036.947165][T14669] [ 1036.947175][T14669] dump_stack_lvl+0x189/0x250 [ 1036.947206][T14669] ? __pfx____ratelimit+0x10/0x10 [ 1036.947234][T14669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1036.947258][T14669] ? __pfx__printk+0x10/0x10 [ 1036.947288][T14669] ? __might_fault+0xb0/0x130 [ 1036.947334][T14669] should_fail_ex+0x414/0x560 [ 1036.947372][T14669] _copy_from_user+0x2d/0xb0 [ 1036.947401][T14669] do_fb_ioctl+0x329/0x750 [ 1036.947425][T14669] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1036.947464][T14669] ? __asan_memset+0x22/0x50 [ 1036.947498][T14669] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1036.947530][T14669] ? __fget_files+0x3a0/0x420 [ 1036.947552][T14669] ? __fget_files+0x2a/0x420 [ 1036.947578][T14669] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1036.947602][T14669] ? __pfx_fb_ioctl+0x10/0x10 [ 1036.947620][T14669] __se_sys_ioctl+0xfc/0x170 [ 1036.947653][T14669] do_syscall_64+0xfa/0x3b0 [ 1036.947674][T14669] ? lockdep_hardirqs_on+0x9c/0x150 [ 1036.947694][T14669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.947714][T14669] ? clear_bhb_loop+0x60/0xb0 [ 1036.947738][T14669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.947758][T14669] RIP: 0033:0x7fdba858e9a9 [ 1036.947775][T14669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1036.947792][T14669] RSP: 002b:00007fdba94e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1036.947813][T14669] RAX: ffffffffffffffda RBX: 00007fdba87b5fa0 RCX: 00007fdba858e9a9 [ 1036.947828][T14669] RDX: 0000200000000040 RSI: 0000000000004601 RDI: 0000000000000003 [ 1036.947841][T14669] RBP: 00007fdba94e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.947863][T14669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.947876][T14669] R13: 0000000000000000 R14: 00007fdba87b5fa0 R15: 00007ffe9f0fcba8 [ 1036.947907][T14669] [ 1037.647992][ T30] audit: type=1326 audit(1753449666.746:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14657 comm="syz.2.2252" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f52ac92ab89 code=0x7fc00000 [ 1037.895184][ T5956] libceph: connect (1)[c::]:6789 error -101 [ 1037.901376][ T5956] libceph: mon0 (1)[c::]:6789 connect error [ 1037.919547][ T5949] [drm:udl_init] *ERROR* Selecting channel failed [ 1037.938909][T14674] ceph: No mds server is up or the cluster is laggy [ 1038.259517][T14679] ceph: No mds server is up or the cluster is laggy [ 1038.543370][ T5949] [drm] Initialized udl 0.0.1 for 6-1:0.0 on minor 2 [ 1038.687542][ T5949] [drm] Initialized udl on minor 2 [ 1038.876740][ T5949] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1038.981358][ T5949] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1038.991148][ T3550] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1039.096626][ T3550] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1039.138152][ T5949] usb 6-1: USB disconnect, device number 20 [ 1039.205631][T14690] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2259'. [ 1039.236539][ T3550] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 1043.307217][T14723] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1045.750678][T14728] ceph: No mds server is up or the cluster is laggy [ 1045.762257][ T5956] libceph: connect (1)[c::]:6789 error -101 [ 1045.768315][ T5956] libceph: mon0 (1)[c::]:6789 connect error [ 1046.013233][T14735] ceph: No mds server is up or the cluster is laggy [ 1046.031406][ T30] audit: type=1326 audit(1753449675.146:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14739 comm="syz.2.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ac98e9a9 code=0x7ffc0000 [ 1046.057530][T14740] netlink: 'syz.2.2272': attribute type 15 has an invalid length. [ 1046.059743][ T30] audit: type=1326 audit(1753449675.146:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14739 comm="syz.2.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ac98e9a9 code=0x7ffc0000 [ 1046.144780][ T30] audit: type=1326 audit(1753449675.166:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14739 comm="syz.2.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f52ac98e9a9 code=0x7ffc0000 [ 1046.178503][ T30] audit: type=1326 audit(1753449675.166:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14739 comm="syz.2.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ac98e9a9 code=0x7ffc0000 [ 1046.209285][ T30] audit: type=1326 audit(1753449675.166:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14739 comm="syz.2.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ac98e9a9 code=0x7ffc0000 [ 1046.498531][ T3550] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1046.658726][ T30] audit: type=1326 audit(1753449675.166:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14739 comm="syz.2.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ac98e9a9 code=0x7ffc0000 [ 1048.186059][ T3550] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1050.160820][ T30] audit: type=1326 audit(1753449675.166:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14739 comm="syz.2.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f52ac98e9a9 code=0x7ffc0000 [ 1050.235321][ T3550] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1050.305904][ T30] audit: type=1326 audit(1753449675.166:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14739 comm="syz.2.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ac98e9a9 code=0x7ffc0000 [ 1050.328269][ T30] audit: type=1326 audit(1753449675.166:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14739 comm="syz.2.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f52ac98e9a9 code=0x7ffc0000 [ 1050.350891][ T30] audit: type=1326 audit(1753449675.196:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14739 comm="syz.2.2272" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ac98e9a9 code=0x7ffc0000 [ 1050.569736][ T3550] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1050.598510][ T3550] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.727403][ T3550] usb 5-1: can't set config #27, error -71 [ 1055.169111][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.175463][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.590866][ T3550] usb 5-1: USB disconnect, device number 19 [ 1059.183269][T14800] binder: 14792:14800 ioctl 4018620d 0 returned -22 [ 1059.206035][ T3550] libceph: connect (1)[c::]:6789 error -101 [ 1059.238619][ T3550] libceph: mon0 (1)[c::]:6789 connect error [ 1059.259605][T14803] ceph: No mds server is up or the cluster is laggy [ 1061.042710][T14821] ceph: No mds server is up or the cluster is laggy [ 1061.243407][T14826] netlink: 'syz.1.2290': attribute type 12 has an invalid length. [ 1061.266375][T14826] netlink: 'syz.1.2290': attribute type 29 has an invalid length. [ 1061.290498][T14826] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2290'. [ 1061.323512][T14826] netlink: 'syz.1.2290': attribute type 1 has an invalid length. [ 1061.358941][T14826] netlink: 47 bytes leftover after parsing attributes in process `syz.1.2290'. [ 1061.368543][ T5843] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1061.535726][ T5843] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1061.559809][ T5948] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1061.586967][ T5843] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1061.612050][ T5843] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1061.665443][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.705866][T14829] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1061.744282][ T5948] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1061.761854][ T5843] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1061.783692][ T5948] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1061.805327][ T5948] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1062.409883][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.737827][T14833] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1062.779348][ T5843] usb 5-1: USB disconnect, device number 20 [ 1062.793295][ T5948] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1063.199169][ T5948] usb 3-1: USB disconnect, device number 42 [ 1063.294549][T13950] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1063.312652][T13950] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1063.344352][T13950] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1063.354222][T13950] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1063.373735][T13950] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1064.483117][T14857] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2295'. [ 1065.280735][T14746] syz_tun (unregistering): left allmulticast mode [ 1065.374989][T14746] syz_tun (unregistering): left promiscuous mode [ 1065.413435][T14746] bridge0: port 3(syz_tun) entered disabled state [ 1065.666182][ T5841] Bluetooth: hci5: command tx timeout [ 1068.464292][ T5841] Bluetooth: hci5: command tx timeout [ 1068.533121][T14545] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.589350][T14875] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2303'. [ 1068.714068][T14545] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.788592][ T5843] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1068.792363][T14545] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.817433][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1068.817451][ T30] audit: type=1326 audit(1753449697.926:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14900 comm="syz.4.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5a678e9a9 code=0x7fc00000 [ 1068.866365][T14904] tmpfs: Bad value for 'mpol' [ 1068.981559][ T5843] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1069.008518][ T5843] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1069.046974][ T5843] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1069.072980][T14902] netlink: 'syz.1.2309': attribute type 12 has an invalid length. [ 1069.100232][T14902] netlink: 'syz.1.2309': attribute type 29 has an invalid length. [ 1069.100269][ T5843] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.163455][T14902] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2309'. [ 1069.166015][T14896] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1069.184503][T14902] netlink: 'syz.1.2309': attribute type 1 has an invalid length. [ 1069.193512][T14902] netlink: 47 bytes leftover after parsing attributes in process `syz.1.2309'. [ 1069.211469][ T5843] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1069.285957][T14545] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.461070][ T5843] usb 7-1: USB disconnect, device number 7 [ 1070.347360][ T30] audit: type=1326 audit(1753449699.446:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14900 comm="syz.4.2308" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff5a672ab89 code=0x7fc00000 [ 1070.548312][ T5841] Bluetooth: hci5: command tx timeout [ 1070.695421][T14849] chnl_net:caif_netlink_parms(): no params data found [ 1071.300638][ T5948] libceph: connect (1)[c::]:6789 error -101 [ 1071.355530][ T5948] libceph: mon0 (1)[c::]:6789 connect error [ 1071.422158][T14924] ceph: No mds server is up or the cluster is laggy [ 1071.464081][ T5948] libceph: connect (1)[c::]:6789 error -101 [ 1071.565323][ T5948] libceph: mon0 (1)[c::]:6789 connect error [ 1071.833224][T14936] netlink: 'syz.1.2315': attribute type 6 has an invalid length. [ 1072.154187][ T5948] libceph: connect (1)[c::]:6789 error -101 [ 1072.160366][ T5948] libceph: mon0 (1)[c::]:6789 connect error [ 1072.618571][ T5841] Bluetooth: hci5: command tx timeout [ 1074.948926][T14545] vxlan0: left allmulticast mode [ 1075.012215][T14545] vxlan0: left promiscuous mode [ 1075.048318][T14545] bridge0: port 4(vxlan0) entered disabled state [ 1075.296038][T14545] bridge_slave_1: left allmulticast mode [ 1075.302649][T14545] bridge_slave_1: left promiscuous mode [ 1075.310648][T14545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1075.382875][T14545] bridge_slave_0: left allmulticast mode [ 1075.412339][T14545] bridge_slave_0: left promiscuous mode [ 1075.449202][T14545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.786352][T14962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.813363][T14962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.690900][T14545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1076.793851][T14545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1076.844881][T14545] bond0 (unregistering): Released all slaves [ 1076.871177][T14950] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2318'. [ 1076.984102][T14849] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.022219][T14849] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.042310][T14849] bridge_slave_0: entered allmulticast mode [ 1077.064120][T14849] bridge_slave_0: entered promiscuous mode [ 1077.090115][T14849] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.306885][T14849] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.349543][T14849] bridge_slave_1: entered allmulticast mode [ 1078.330951][T14849] bridge_slave_1: entered promiscuous mode [ 1078.408979][T14545] tipc: Left network mode [ 1081.207492][ T5949] libceph: connect (1)[c::]:6789 error -22 [ 1081.215930][ T5949] libceph: mon0 (1)[c::]:6789 connect error [ 1081.235783][T14985] ceph: No mds server is up or the cluster is laggy [ 1082.277631][T14849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.361660][T13950] Bluetooth: hci1: command 0x0406 tx timeout [ 1083.448963][T14849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1083.958939][ T5843] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1084.415697][ T5843] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.481579][ T5843] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1084.496628][T15020] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2333'. [ 1084.579810][ T5843] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1084.603475][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1084.628761][ T5843] usb 5-1: SerialNumber: syz [ 1084.896161][ T5843] usb 5-1: 0:2 : does not exist [ 1084.902199][T14849] team0: Port device team_slave_0 added [ 1084.913937][ T5843] usb 5-1: unit 48 not found! [ 1085.210853][T14849] team0: Port device team_slave_1 added [ 1085.371634][ T5843] usb 5-1: USB disconnect, device number 21 [ 1085.889529][T14545] hsr_slave_0: left promiscuous mode [ 1086.025772][T14545] hsr_slave_1: left promiscuous mode [ 1086.074774][T14545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1086.168721][T14545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.210893][T14545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.218362][T14545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1086.240077][T14983] udevd[14983]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1086.502983][T14545] veth1_macvtap: left promiscuous mode [ 1086.508910][T14545] veth0_macvtap: left promiscuous mode [ 1086.515560][T14545] veth1_vlan: left promiscuous mode [ 1086.521817][T14545] veth0_vlan: left promiscuous mode [ 1086.879583][ T5843] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1087.091881][ T5843] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1087.191500][ T5843] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1087.324814][ T5843] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1087.334483][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.354322][T15048] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1087.382993][ T5843] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1087.430240][T15061] FAULT_INJECTION: forcing a failure. [ 1087.430240][T15061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1087.477679][T15061] CPU: 1 UID: 0 PID: 15061 Comm: syz.1.2341 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1087.477710][T15061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1087.477723][T15061] Call Trace: [ 1087.477732][T15061] [ 1087.477742][T15061] dump_stack_lvl+0x189/0x250 [ 1087.477772][T15061] ? __pfx____ratelimit+0x10/0x10 [ 1087.477796][T15061] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1087.477820][T15061] ? __pfx__printk+0x10/0x10 [ 1087.477860][T15061] ? __might_fault+0xb0/0x130 [ 1087.477893][T15061] should_fail_ex+0x414/0x560 [ 1087.477921][T15061] _copy_from_user+0x2d/0xb0 [ 1087.477951][T15061] ___sys_sendmsg+0x158/0x2a0 [ 1087.477985][T15061] ? __pfx____sys_sendmsg+0x10/0x10 [ 1087.478040][T15061] ? __fget_files+0x2a/0x420 [ 1087.478059][T15061] ? __fget_files+0x3a0/0x420 [ 1087.478087][T15061] __x64_sys_sendmsg+0x19b/0x260 [ 1087.478118][T15061] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1087.478153][T15061] ? __pfx_ksys_write+0x10/0x10 [ 1087.478166][T15061] ? rcu_is_watching+0x15/0xb0 [ 1087.478190][T15061] ? do_syscall_64+0xbe/0x3b0 [ 1087.478212][T15061] do_syscall_64+0xfa/0x3b0 [ 1087.478230][T15061] ? lockdep_hardirqs_on+0x9c/0x150 [ 1087.478248][T15061] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.478265][T15061] ? clear_bhb_loop+0x60/0xb0 [ 1087.478296][T15061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1087.478312][T15061] RIP: 0033:0x7fdba858e9a9 [ 1087.478326][T15061] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1087.478341][T15061] RSP: 002b:00007fdba94e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1087.478359][T15061] RAX: ffffffffffffffda RBX: 00007fdba87b5fa0 RCX: 00007fdba858e9a9 [ 1087.478371][T15061] RDX: 0000000000000800 RSI: 0000200000000d40 RDI: 0000000000000005 [ 1087.478382][T15061] RBP: 00007fdba94e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1087.478392][T15061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1087.478402][T15061] R13: 0000000000000000 R14: 00007fdba87b5fa0 R15: 00007ffe9f0fcba8 [ 1087.478433][T15061] [ 1088.704809][ T30] audit: type=1800 audit(1753449717.816:236): pid=15080 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.2345" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 1089.203300][T15077] kAFS: No cell specified [ 1089.391648][T15077] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1089.542157][T14545] team0 (unregistering): Port device virt_wifi0 removed [ 1090.581995][T15092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.595684][T15092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.762949][T14545] team0 (unregistering): Port device team_slave_1 removed [ 1090.803903][T14545] team0 (unregistering): Port device team_slave_0 removed [ 1091.289206][T15074] netlink: 'syz.6.2343': attribute type 12 has an invalid length. [ 1091.297483][T15074] netlink: 'syz.6.2343': attribute type 29 has an invalid length. [ 1091.309654][T15074] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2343'. [ 1091.325172][T15074] netlink: 'syz.6.2343': attribute type 1 has an invalid length. [ 1091.349803][ T5956] usb 5-1: USB disconnect, device number 22 [ 1091.357018][T15074] netlink: 47 bytes leftover after parsing attributes in process `syz.6.2343'. [ 1093.637204][T15103] IPv6: Can't replace route, no match found [ 1094.156890][T14849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.168552][T14849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1095.067164][T14849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.280295][T14849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.453782][T14849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1095.539121][T14849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.688180][T15125] blktrace: Concurrent blktraces are not allowed on sg0 [ 1095.771770][T15132] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2357'. [ 1095.784344][T15131] FAULT_INJECTION: forcing a failure. [ 1095.784344][T15131] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.825693][T15131] CPU: 0 UID: 0 PID: 15131 Comm: syz.4.2359 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1095.825724][T15131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1095.825738][T15131] Call Trace: [ 1095.825747][T15131] [ 1095.825757][T15131] dump_stack_lvl+0x189/0x250 [ 1095.825787][T15131] ? __pfx____ratelimit+0x10/0x10 [ 1095.825811][T15131] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1095.825835][T15131] ? __pfx__printk+0x10/0x10 [ 1095.825869][T15131] ? __pfx___might_resched+0x10/0x10 [ 1095.825893][T15131] ? fs_reclaim_acquire+0x7d/0x100 [ 1095.825925][T15131] should_fail_ex+0x414/0x560 [ 1095.825953][T15131] should_failslab+0xa8/0x100 [ 1095.825980][T15131] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1095.826000][T15131] ? ep_insert+0x51a/0x19e0 [ 1095.826026][T15131] ep_insert+0x51a/0x19e0 [ 1095.826064][T15131] ? __pfx_ep_insert+0x10/0x10 [ 1095.826084][T15131] ? __pfx___mutex_lock+0x10/0x10 [ 1095.826122][T15131] ? __fget_files+0x2a/0x420 [ 1095.826151][T15131] ? __fget_files+0x2a/0x420 [ 1095.826193][T15131] ? __fget_files+0x3a0/0x420 [ 1095.826217][T15131] ? __fget_files+0x2a/0x420 [ 1095.826250][T15131] do_epoll_ctl+0x7f4/0xe90 [ 1095.826280][T15131] __x64_sys_epoll_ctl+0x163/0x1a0 [ 1095.826306][T15131] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1095.826326][T15131] ? rcu_is_watching+0x15/0xb0 [ 1095.826356][T15131] ? do_syscall_64+0xbe/0x3b0 [ 1095.826387][T15131] do_syscall_64+0xfa/0x3b0 [ 1095.826411][T15131] ? lockdep_hardirqs_on+0x9c/0x150 [ 1095.826434][T15131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.826457][T15131] ? clear_bhb_loop+0x60/0xb0 [ 1095.826484][T15131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.826506][T15131] RIP: 0033:0x7ff5a678e9a9 [ 1095.826526][T15131] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1095.826545][T15131] RSP: 002b:00007ff5a75fb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1095.826569][T15131] RAX: ffffffffffffffda RBX: 00007ff5a69b6080 RCX: 00007ff5a678e9a9 [ 1095.826585][T15131] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 1095.826599][T15131] RBP: 00007ff5a75fb090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.826614][T15131] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1095.826628][T15131] R13: 0000000000000000 R14: 00007ff5a69b6080 R15: 00007ffe93c73db8 [ 1095.826662][T15131] [ 1096.198940][ T5843] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1096.215143][T14849] hsr_slave_0: entered promiscuous mode [ 1096.235858][T14849] hsr_slave_1: entered promiscuous mode [ 1096.255870][T14849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1096.342655][T14849] Cannot create hsr debugfs directory [ 1096.364008][ T5843] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1096.380318][ T5843] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1096.428845][ T5843] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1096.448762][ T5843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.458902][T15143] netlink: 'syz.6.2362': attribute type 12 has an invalid length. [ 1096.466922][T15143] netlink: 'syz.6.2362': attribute type 29 has an invalid length. [ 1096.482881][T15135] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1096.495591][T15143] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2362'. [ 1096.506249][ T5843] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1096.526395][T15143] netlink: 'syz.6.2362': attribute type 1 has an invalid length. [ 1096.592941][T15143] netlink: 47 bytes leftover after parsing attributes in process `syz.6.2362'. [ 1097.355763][ T5843] usb 3-1: USB disconnect, device number 43 [ 1098.736928][T15173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2368'. [ 1101.264155][T14849] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1101.315649][T14849] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1101.434849][T15192] ceph: No mds server is up or the cluster is laggy [ 1101.508334][T15198] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2371'. [ 1101.519705][T14849] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1102.302158][T14849] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1103.459803][T15221] FAULT_INJECTION: forcing a failure. [ 1103.459803][T15221] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.472940][T15221] CPU: 1 UID: 0 PID: 15221 Comm: syz.6.2374 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1103.472967][T15221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1103.472980][T15221] Call Trace: [ 1103.472990][T15221] [ 1103.473000][T15221] dump_stack_lvl+0x189/0x250 [ 1103.473028][T15221] ? __pfx____ratelimit+0x10/0x10 [ 1103.473051][T15221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1103.473074][T15221] ? __pfx__printk+0x10/0x10 [ 1103.473108][T15221] ? __pfx___might_resched+0x10/0x10 [ 1103.473130][T15221] ? fs_reclaim_acquire+0x7d/0x100 [ 1103.473161][T15221] should_fail_ex+0x414/0x560 [ 1103.473188][T15221] should_failslab+0xa8/0x100 [ 1103.473212][T15221] __kmalloc_noprof+0xcb/0x4f0 [ 1103.473231][T15221] ? tls_get_rec+0xbf/0x670 [ 1103.473254][T15221] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1103.473281][T15221] tls_get_rec+0xbf/0x670 [ 1103.473313][T15221] tls_sw_sendmsg+0x4ae/0x23d0 [ 1103.473341][T15221] ? is_bpf_text_address+0x26/0x2b0 [ 1103.473393][T15221] ? __pfx_tls_sw_sendmsg+0x10/0x10 [ 1103.473414][T15221] ? _parse_integer_limit+0x1ae/0x1f0 [ 1103.473439][T15221] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 1103.473466][T15221] ? sock_rps_record_flow+0x19/0x410 [ 1103.473494][T15221] ? inet_send_prepare+0x57/0x270 [ 1103.473527][T15221] ? inet6_sendmsg+0x101/0x120 [ 1103.473554][T15221] __sock_sendmsg+0xe5/0x270 [ 1103.473583][T15221] sock_write_iter+0x258/0x330 [ 1103.473608][T15221] ? __pfx_sock_write_iter+0x10/0x10 [ 1103.473643][T15221] ? bpf_lsm_file_permission+0x9/0x20 [ 1103.473666][T15221] ? security_file_permission+0x75/0x290 [ 1103.473698][T15221] vfs_write+0x54b/0xa90 [ 1103.473724][T15221] ? __pfx_sock_write_iter+0x10/0x10 [ 1103.473747][T15221] ? __pfx_vfs_write+0x10/0x10 [ 1103.473778][T15221] ? __fget_files+0x2a/0x420 [ 1103.473811][T15221] ksys_write+0x145/0x250 [ 1103.473834][T15221] ? __pfx_ksys_write+0x10/0x10 [ 1103.473850][T15221] ? rcu_is_watching+0x15/0xb0 [ 1103.473879][T15221] ? do_syscall_64+0xbe/0x3b0 [ 1103.473906][T15221] do_syscall_64+0xfa/0x3b0 [ 1103.473928][T15221] ? lockdep_hardirqs_on+0x9c/0x150 [ 1103.473950][T15221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.473970][T15221] ? clear_bhb_loop+0x60/0xb0 [ 1103.473996][T15221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.474016][T15221] RIP: 0033:0x7fc8ac98e9a9 [ 1103.474034][T15221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1103.474053][T15221] RSP: 002b:00007fc8ad72d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1103.474075][T15221] RAX: ffffffffffffffda RBX: 00007fc8acbb6160 RCX: 00007fc8ac98e9a9 [ 1103.474091][T15221] RDX: 000000000000000b RSI: 0000200000000500 RDI: 0000000000000004 [ 1103.474104][T15221] RBP: 00007fc8ad72d090 R08: 0000000000000000 R09: 0000000000000000 [ 1103.474117][T15221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1103.474129][T15221] R13: 0000000000000000 R14: 00007fc8acbb6160 R15: 00007ffd20aa5d98 [ 1103.474162][T15221] [ 1104.083984][T14849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1104.493624][T14849] 8021q: adding VLAN 0 to HW filter on device team0 [ 1105.471598][T15235] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1105.672944][ T6344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.680156][ T6344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1105.684008][T15228] delete_channel: no stack [ 1105.732060][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.739287][ T6344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1106.481421][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2380'. [ 1106.953130][T15258] ceph: No mds server is up or the cluster is laggy [ 1107.129858][T14849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1108.353391][T15282] FAULT_INJECTION: forcing a failure. [ 1108.353391][T15282] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1108.405221][T15282] CPU: 1 UID: 0 PID: 15282 Comm: syz.4.2388 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1108.405251][T15282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1108.405263][T15282] Call Trace: [ 1108.405272][T15282] [ 1108.405281][T15282] dump_stack_lvl+0x189/0x250 [ 1108.405307][T15282] ? __pfx____ratelimit+0x10/0x10 [ 1108.405329][T15282] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1108.405351][T15282] ? __pfx__printk+0x10/0x10 [ 1108.405375][T15282] ? __might_fault+0xb0/0x130 [ 1108.405405][T15282] should_fail_ex+0x414/0x560 [ 1108.405430][T15282] _copy_from_user+0x2d/0xb0 [ 1108.405457][T15282] do_ip6t_get_ctl+0x47c/0x1180 [ 1108.405494][T15282] ? __pfx_do_ip6t_get_ctl+0x10/0x10 [ 1108.405531][T15282] ? __mutex_trylock_common+0x153/0x260 [ 1108.405558][T15282] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1108.405585][T15282] ? rcu_is_watching+0x15/0xb0 [ 1108.405615][T15282] ? nf_getsockopt+0x224/0x290 [ 1108.405649][T15282] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1108.405675][T15282] ? __pfx___mutex_lock+0x10/0x10 [ 1108.405697][T15282] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1108.405724][T15282] ? __might_fault+0xb0/0x130 [ 1108.405752][T15282] nf_getsockopt+0x26e/0x290 [ 1108.405788][T15282] ipv6_getsockopt+0x1ed/0x290 [ 1108.405811][T15282] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 1108.405834][T15282] ? sock_common_getsockopt+0x2d/0xb0 [ 1108.405857][T15282] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1108.405883][T15282] do_sock_getsockopt+0x372/0x450 [ 1108.405915][T15282] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1108.405946][T15282] ? do_syscall_64+0x20/0x3b0 [ 1108.405969][T15282] ? ksys_write+0x1e1/0x250 [ 1108.405993][T15282] __x64_sys_getsockopt+0x1a5/0x250 [ 1108.406026][T15282] ? do_syscall_64+0x20/0x3b0 [ 1108.406049][T15282] ? do_syscall_64+0x20/0x3b0 [ 1108.406073][T15282] do_syscall_64+0xfa/0x3b0 [ 1108.406095][T15282] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.406113][T15282] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1108.406132][T15282] ? clear_bhb_loop+0x60/0xb0 [ 1108.406171][T15282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.406193][T15282] RIP: 0033:0x7ff5a678e9a9 [ 1108.406213][T15282] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1108.406232][T15282] RSP: 002b:00007ff5a761c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1108.406256][T15282] RAX: ffffffffffffffda RBX: 00007ff5a69b5fa0 RCX: 00007ff5a678e9a9 [ 1108.406274][T15282] RDX: 0000000000000041 RSI: 0000000000000029 RDI: 0000000000000003 [ 1108.406288][T15282] RBP: 00007ff5a761c090 R08: 0000200000000080 R09: 0000000000000000 [ 1108.406303][T15282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1108.406317][T15282] R13: 0000000000000000 R14: 00007ff5a69b5fa0 R15: 00007ffe93c73db8 [ 1108.406353][T15282] [ 1109.543003][T15293] delete_channel: no stack [ 1109.693256][T15292] pim6reg: entered allmulticast mode [ 1109.811445][T15291] pim6reg: left allmulticast mode [ 1110.099391][T14849] veth0_vlan: entered promiscuous mode [ 1110.151541][T14849] veth1_vlan: entered promiscuous mode [ 1110.326910][T14849] veth0_macvtap: entered promiscuous mode [ 1110.459807][T14849] veth1_macvtap: entered promiscuous mode [ 1110.478864][ T5948] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1110.571531][T14849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1110.643234][ T5948] usb 3-1: Using ep0 maxpacket: 32 [ 1110.664847][ T5948] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1110.693197][T14849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1110.719643][ T5948] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1110.811969][ T5948] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1110.917648][ T5948] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1111.046998][ T5948] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1111.121797][T14849] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.136023][ T5948] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1111.159138][T14849] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.168193][ T5948] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1111.177713][T14849] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.204953][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1111.225522][T14849] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1111.274431][ T5948] usb 3-1: config 0 descriptor?? [ 1111.361748][T15321] ceph: No mds server is up or the cluster is laggy [ 1111.491189][T15328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2398'. [ 1111.527639][ T5948] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 44 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1111.608833][ T5949] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1111.611551][ T5948] usb 3-1: USB disconnect, device number 44 [ 1111.647193][ T6344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.686234][ T6344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.698238][ T5948] usblp0: removed [ 1111.768501][ T5949] usb 7-1: Using ep0 maxpacket: 16 [ 1111.916047][ T5949] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1111.924965][ T5949] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.935557][ T5949] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1111.964005][ T5949] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1111.984147][ T5949] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.998499][ T5949] usb 7-1: Product: syz [ 1112.002770][ T5949] usb 7-1: Manufacturer: syz [ 1112.015582][ T5949] usb 7-1: SerialNumber: syz [ 1112.224731][ T6348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.225913][ T5948] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1113.353194][ T6348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.470773][ T5949] usb 7-1: 0:2 : does not exist [ 1114.063428][T15351] delete_channel: no stack [ 1114.807226][ T5949] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 1114.852859][ T5949] usb 7-1: USB disconnect, device number 8 [ 1114.938989][T15369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2404'. [ 1116.439711][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.446145][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.467636][T14983] udevd[14983]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1119.781426][T15388] FAULT_INJECTION: forcing a failure. [ 1119.781426][T15388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1119.997510][T15388] CPU: 0 UID: 0 PID: 15388 Comm: syz.6.2407 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1119.997545][T15388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1119.997560][T15388] Call Trace: [ 1119.997573][T15388] [ 1119.997583][T15388] dump_stack_lvl+0x189/0x250 [ 1119.997611][T15388] ? __pfx____ratelimit+0x10/0x10 [ 1119.997637][T15388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1119.997663][T15388] ? __pfx__printk+0x10/0x10 [ 1119.997692][T15388] ? __might_fault+0xb0/0x130 [ 1119.997727][T15388] should_fail_ex+0x414/0x560 [ 1119.997757][T15388] _copy_from_user+0x2d/0xb0 [ 1119.997790][T15388] __sys_bpf+0x1ed/0x860 [ 1119.997826][T15388] ? __pfx___sys_bpf+0x10/0x10 [ 1119.997889][T15388] ? ksys_write+0x22a/0x250 [ 1119.997909][T15388] ? __pfx_ksys_write+0x10/0x10 [ 1119.997924][T15388] ? rcu_is_watching+0x15/0xb0 [ 1119.997951][T15388] __x64_sys_bpf+0x7c/0x90 [ 1119.997976][T15388] do_syscall_64+0xfa/0x3b0 [ 1119.997996][T15388] ? lockdep_hardirqs_on+0x9c/0x150 [ 1119.998016][T15388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.998034][T15388] ? clear_bhb_loop+0x60/0xb0 [ 1119.998056][T15388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.998074][T15388] RIP: 0033:0x7fc8ac98e9a9 [ 1119.998091][T15388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1119.998108][T15388] RSP: 002b:00007fc8ad76f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1119.998128][T15388] RAX: ffffffffffffffda RBX: 00007fc8acbb5fa0 RCX: 00007fc8ac98e9a9 [ 1119.998142][T15388] RDX: 000000000000000c RSI: 0000200000000080 RDI: 0000000000000023 [ 1119.998154][T15388] RBP: 00007fc8ad76f090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.998167][T15388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1119.998178][T15388] R13: 0000000000000000 R14: 00007fc8acbb5fa0 R15: 00007ffd20aa5d98 [ 1119.998207][T15388] [ 1122.017142][T15418] trusted_key: encrypted_key: insufficient parameters specified [ 1122.564491][T15415] delete_channel: no stack [ 1123.105369][T15428] FAULT_INJECTION: forcing a failure. [ 1123.105369][T15428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1123.172434][T15428] CPU: 1 UID: 0 PID: 15428 Comm: syz.6.2417 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1123.172465][T15428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1123.172478][T15428] Call Trace: [ 1123.172487][T15428] [ 1123.172497][T15428] dump_stack_lvl+0x189/0x250 [ 1123.172527][T15428] ? __pfx____ratelimit+0x10/0x10 [ 1123.172552][T15428] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1123.172577][T15428] ? __pfx__printk+0x10/0x10 [ 1123.172613][T15428] ? __might_fault+0xb0/0x130 [ 1123.172648][T15428] should_fail_ex+0x414/0x560 [ 1123.172676][T15428] _copy_from_user+0x2d/0xb0 [ 1123.172708][T15428] ___sys_sendmsg+0x158/0x2a0 [ 1123.172745][T15428] ? __pfx____sys_sendmsg+0x10/0x10 [ 1123.172818][T15428] ? __fget_files+0x2a/0x420 [ 1123.172842][T15428] ? __fget_files+0x3a0/0x420 [ 1123.172877][T15428] __x64_sys_sendmsg+0x19b/0x260 [ 1123.172913][T15428] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1123.172957][T15428] ? __pfx_ksys_write+0x10/0x10 [ 1123.172976][T15428] ? rcu_is_watching+0x15/0xb0 [ 1123.173005][T15428] ? do_syscall_64+0xbe/0x3b0 [ 1123.173034][T15428] do_syscall_64+0xfa/0x3b0 [ 1123.173056][T15428] ? lockdep_hardirqs_on+0x9c/0x150 [ 1123.173079][T15428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.173101][T15428] ? clear_bhb_loop+0x60/0xb0 [ 1123.173127][T15428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1123.173148][T15428] RIP: 0033:0x7fc8ac98e9a9 [ 1123.173167][T15428] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1123.173185][T15428] RSP: 002b:00007fc8ad76f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1123.173208][T15428] RAX: ffffffffffffffda RBX: 00007fc8acbb5fa0 RCX: 00007fc8ac98e9a9 [ 1123.173224][T15428] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1123.173238][T15428] RBP: 00007fc8ad76f090 R08: 0000000000000000 R09: 0000000000000000 [ 1123.173251][T15428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1123.173264][T15428] R13: 0000000000000000 R14: 00007fc8acbb5fa0 R15: 00007ffd20aa5d98 [ 1123.173297][T15428] [ 1125.331865][T15445] FAULT_INJECTION: forcing a failure. [ 1125.331865][T15445] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1125.363506][T15445] CPU: 0 UID: 0 PID: 15445 Comm: syz.6.2421 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1125.363537][T15445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1125.363551][T15445] Call Trace: [ 1125.363560][T15445] [ 1125.363569][T15445] dump_stack_lvl+0x189/0x250 [ 1125.363599][T15445] ? __pfx____ratelimit+0x10/0x10 [ 1125.363622][T15445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1125.363647][T15445] ? __pfx__printk+0x10/0x10 [ 1125.363677][T15445] ? fs_reclaim_acquire+0x7d/0x100 [ 1125.363713][T15445] should_fail_ex+0x414/0x560 [ 1125.363742][T15445] prepare_alloc_pages+0x213/0x610 [ 1125.363777][T15445] __alloc_frozen_pages_noprof+0x123/0x370 [ 1125.363810][T15445] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1125.363850][T15445] ? policy_nodemask+0x27c/0x720 [ 1125.363869][T15445] ? do_raw_spin_lock+0x121/0x290 [ 1125.363904][T15445] alloc_pages_mpol+0x232/0x4a0 [ 1125.363933][T15445] alloc_pages_noprof+0xa9/0x190 [ 1125.363959][T15445] __pmd_alloc+0x3a/0x3b0 [ 1125.363986][T15445] __handle_mm_fault+0xa63/0x5620 [ 1125.364031][T15445] ? mt_find+0x46f/0x5f0 [ 1125.364061][T15445] ? __pfx___handle_mm_fault+0x10/0x10 [ 1125.364119][T15445] ? find_vma+0xe7/0x160 [ 1125.364139][T15445] ? __pfx_find_vma+0x10/0x10 [ 1125.364162][T15445] handle_mm_fault+0x2d5/0x7f0 [ 1125.364209][T15445] do_user_addr_fault+0x764/0x1390 [ 1125.364260][T15445] exc_page_fault+0x76/0xf0 [ 1125.364286][T15445] asm_exc_page_fault+0x26/0x30 [ 1125.364306][T15445] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 1125.364336][T15445] Code: c4 10 e9 14 01 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e [ 1125.364361][T15445] RSP: 0018:ffffc90002e87cb8 EFLAGS: 00050202 [ 1125.364381][T15445] RAX: 00007ffffffff001 RBX: 0000000000000004 RCX: 0000000000000004 [ 1125.364395][T15445] RDX: 0000000000000001 RSI: 0000200000000200 RDI: ffffc90002e87db0 [ 1125.364410][T15445] RBP: ffffc90002e87e48 R08: ffffc90002e87db3 R09: 1ffff920005d0fb6 [ 1125.364426][T15445] R10: dffffc0000000000 R11: fffff520005d0fb7 R12: 0000000000000004 [ 1125.364442][T15445] R13: 0000000000000001 R14: ffffc90002e87db0 R15: 0000200000000200 [ 1125.364477][T15445] _copy_from_user+0x7a/0xb0 [ 1125.364508][T15445] mptcp_setsockopt+0x1f8e/0x3460 [ 1125.364538][T15445] ? __lock_acquire+0xab9/0xd20 [ 1125.364566][T15445] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 1125.364617][T15445] ? __fget_files+0x2a/0x420 [ 1125.364643][T15445] ? sock_common_setsockopt+0x36/0xc0 [ 1125.364669][T15445] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1125.364697][T15445] do_sock_setsockopt+0x179/0x1b0 [ 1125.364732][T15445] __x64_sys_setsockopt+0x13f/0x1b0 [ 1125.364765][T15445] do_syscall_64+0xfa/0x3b0 [ 1125.364787][T15445] ? lockdep_hardirqs_on+0x9c/0x150 [ 1125.364808][T15445] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.364828][T15445] ? clear_bhb_loop+0x60/0xb0 [ 1125.364853][T15445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1125.364872][T15445] RIP: 0033:0x7fc8ac98e9a9 [ 1125.364889][T15445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1125.364907][T15445] RSP: 002b:00007fc8ad76f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1125.364926][T15445] RAX: ffffffffffffffda RBX: 00007fc8acbb5fa0 RCX: 00007fc8ac98e9a9 [ 1125.364941][T15445] RDX: 0000000000000041 RSI: 0000000000000001 RDI: 0000000000000003 [ 1125.364964][T15445] RBP: 00007fc8ad76f090 R08: 0000000000000004 R09: 0000000000000000 [ 1125.364976][T15445] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1125.364988][T15445] R13: 0000000000000000 R14: 00007fc8acbb5fa0 R15: 00007ffd20aa5d98 [ 1125.365018][T15445] [ 1125.869475][T15450] FAULT_INJECTION: forcing a failure. [ 1125.869475][T15450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1125.983745][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2420'. [ 1126.158293][T15450] CPU: 1 UID: 0 PID: 15450 Comm: syz.7.2422 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1126.158322][T15450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1126.158334][T15450] Call Trace: [ 1126.158342][T15450] [ 1126.158351][T15450] dump_stack_lvl+0x189/0x250 [ 1126.158382][T15450] ? __pfx____ratelimit+0x10/0x10 [ 1126.158403][T15450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1126.158425][T15450] ? __pfx__printk+0x10/0x10 [ 1126.158450][T15450] ? __might_fault+0xb0/0x130 [ 1126.158481][T15450] should_fail_ex+0x414/0x560 [ 1126.158506][T15450] _copy_from_user+0x2d/0xb0 [ 1126.158534][T15450] xsk_setsockopt+0x378/0x710 [ 1126.158567][T15450] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1126.158600][T15450] ? __fget_files+0x2a/0x420 [ 1126.158625][T15450] ? __fget_files+0x2a/0x420 [ 1126.158645][T15450] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1126.158664][T15450] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1126.158696][T15450] do_sock_setsockopt+0x179/0x1b0 [ 1126.158748][T15450] __x64_sys_setsockopt+0x13f/0x1b0 [ 1126.158784][T15450] do_syscall_64+0xfa/0x3b0 [ 1126.158805][T15450] ? lockdep_hardirqs_on+0x9c/0x150 [ 1126.158828][T15450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.158848][T15450] ? clear_bhb_loop+0x60/0xb0 [ 1126.158873][T15450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.158893][T15450] RIP: 0033:0x7fed9a58e9a9 [ 1126.158911][T15450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1126.158928][T15450] RSP: 002b:00007fed9b436038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1126.158950][T15450] RAX: ffffffffffffffda RBX: 00007fed9a7b6080 RCX: 00007fed9a58e9a9 [ 1126.158965][T15450] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 1126.158978][T15450] RBP: 00007fed9b436090 R08: 0000000000000020 R09: 0000000000000000 [ 1126.158991][T15450] R10: 0000200000000740 R11: 0000000000000246 R12: 0000000000000001 [ 1126.159004][T15450] R13: 0000000000000001 R14: 00007fed9a7b6080 R15: 00007ffe92ee1d18 [ 1126.159034][T15450] [ 1127.390788][T15465] trusted_key: encrypted_key: insufficient parameters specified [ 1128.251470][T15475] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1130.930416][T15491] delete_channel: no stack [ 1131.381453][T15506] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2436'. [ 1134.888757][ T10] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1135.538269][ T10] usb 3-1: device descriptor read/64, error -71 [ 1135.659519][ T3550] libceph: connect (1)[c::]:6789 error -101 [ 1135.668053][ T3550] libceph: mon0 (1)[c::]:6789 connect error [ 1135.675923][T15556] ceph: No mds server is up or the cluster is laggy [ 1135.868951][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1135.888713][T15552] delete_channel: no stack [ 1140.148858][T15589] Cannot find set identified by id 0 to match [ 1140.207363][T15593] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.2453'. [ 1142.710075][T15607] delete_channel: no stack [ 1143.304763][T15622] ceph: No mds server is up or the cluster is laggy [ 1143.319317][T15621] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(10) [ 1143.326120][T15621] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1143.340618][T15621] vhci_hcd vhci_hcd.0: Device attached [ 1144.163512][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1144.336748][ T5949] usb 42-1: SetAddress Request (2) to port 0 [ 1144.413920][ T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 1144.537907][ T44] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1145.285946][ T5949] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1145.293839][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1145.318579][ T10] usb 5-1: Product: syz [ 1145.328081][ T10] usb 5-1: Manufacturer: syz [ 1145.871233][ T44] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1145.882948][ T44] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1145.903307][ T44] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1145.908454][ T10] usb 5-1: SerialNumber: syz [ 1145.912533][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.940018][T15635] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1145.960386][ T44] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1145.984108][ T10] usb 5-1: config 0 descriptor?? [ 1146.005400][ T10] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 1146.223607][T15631] vhci_hcd: connection reset by peer [ 1146.308881][ T10] sonixb 5-1:0.0: Error reading register 00: -71 [ 1146.318811][ T10] usb 5-1: USB disconnect, device number 23 [ 1146.322954][ T44] usb 3-1: USB disconnect, device number 48 [ 1146.341800][ T6193] vhci_hcd: stop threads [ 1146.346741][ T6193] vhci_hcd: release socket [ 1146.495268][ T30] audit: type=1800 audit(1753449775.476:237): pid=15651 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2470" name="bus" dev="overlay" ino=598 res=0 errno=0 [ 1147.333964][ T6193] vhci_hcd: disconnect device [ 1148.970723][T15662] delete_channel: no stack [ 1149.045231][T15671] tipc: Enabled bearer , priority 0 [ 1149.433962][T15671] syzkaller0: entered promiscuous mode [ 1149.489388][T15671] syzkaller0: entered allmulticast mode [ 1149.497994][T15677] netlink: 'syz.7.2479': attribute type 66 has an invalid length. [ 1149.751633][ T44] libceph: connect (1)[c::]:6789 error -101 [ 1149.758025][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 1149.968761][T15670] tipc: Resetting bearer [ 1150.160697][T15670] tipc: Disabling bearer [ 1150.712399][T15684] ceph: No mds server is up or the cluster is laggy [ 1150.944534][ T5949] usb 42-1: device descriptor read/8, error -110 [ 1151.399189][T15693] ceph: No mds server is up or the cluster is laggy [ 1151.495202][ T30] audit: type=1800 audit(1753449780.596:238): pid=15701 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.2484" name="bus" dev="overlay" ino=109 res=0 errno=0 [ 1151.572507][ T5949] usb usb42-port1: attempt power cycle [ 1152.189494][ T5949] usb usb42-port1: unable to enumerate USB device [ 1152.730388][T15704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1152.837100][T15704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.448637][ T44] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1153.608545][ T44] usb 7-1: Using ep0 maxpacket: 16 [ 1154.062673][ T44] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1154.161598][ T44] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1154.201180][ T44] usb 7-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1154.236926][ T44] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1154.263060][ T44] usb 7-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1154.273181][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.282614][ T44] usb 7-1: Product: syz [ 1154.291863][ T44] usb 7-1: Manufacturer: syz [ 1154.296821][ T44] usb 7-1: SerialNumber: syz [ 1154.314988][ T44] usb 7-1: config 0 descriptor?? [ 1155.193392][ T44] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input16 [ 1155.577905][ T5190] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1155.659475][ T5190] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 1155.690931][T15735] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2493'. [ 1155.839179][ T5948] usb 7-1: USB disconnect, device number 9 [ 1155.859406][ T5190] synaptics_usb 7-1:0.0: synusb_open - usb_submit_urb failed, error: -19 [ 1156.017076][ T30] audit: type=1800 audit(1753449785.126:239): pid=15743 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.2496" name="bus" dev="overlay" ino=3032 res=0 errno=0 [ 1156.178485][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1157.354952][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1157.488804][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1157.505256][T15757] 9pnet_fd: Insufficient options for proto=fd [ 1157.511787][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1157.526936][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.568988][T15739] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1157.593806][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1158.148802][ T3550] usb 3-1: USB disconnect, device number 49 [ 1160.625667][ T3550] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1161.582517][ T3550] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1161.598280][ T3550] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1161.618489][ T3550] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1161.627578][ T3550] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.659998][T15778] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1161.734602][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2507'. [ 1161.776094][ T3550] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1162.110152][ T30] audit: type=1800 audit(1753449791.226:240): pid=15791 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2510" name="bus" dev="overlay" ino=663 res=0 errno=0 [ 1162.177850][T15793] 9pnet_fd: Insufficient options for proto=fd [ 1162.187771][ T44] usb 3-1: USB disconnect, device number 50 [ 1162.337182][T15795] 9pnet_fd: Insufficient options for proto=fd [ 1166.017979][T15812] ceph: No mds server is up or the cluster is laggy [ 1166.034093][T15823] sctp: [Deprecated]: syz.4.2519 (pid 15823) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1166.034093][T15823] Use struct sctp_sack_info instead [ 1166.052286][ T3550] libceph: connect (1)[c::]:6789 error -22 [ 1166.058293][ T3550] libceph: mon0 (1)[c::]:6789 connect error [ 1166.141053][T15817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2517'. [ 1166.425658][ T3550] libceph: connect (1)[c::]:6789 error -22 [ 1166.454832][T15823] fuse: Unknown parameter '184467440737095516150x000000000000000a' [ 1166.517776][ T3550] libceph: mon0 (1)[c::]:6789 connect error [ 1167.387382][T15836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2522'. [ 1167.846434][T15826] delete_channel: no stack [ 1168.232120][ T30] audit: type=1800 audit(1753449797.326:241): pid=15841 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.2525" name="bus" dev="overlay" ino=2935 res=0 errno=0 [ 1169.184492][ T44] libceph: connect (1)[c::]:6789 error -101 [ 1169.191107][ T44] libceph: mon0 (1)[c::]:6789 connect error [ 1169.201084][T15848] ceph: No mds server is up or the cluster is laggy [ 1171.314824][T15865] trusted_key: encrypted_key: insufficient parameters specified [ 1173.054182][ T30] audit: type=1326 audit(1753449802.166:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15869 comm="syz.1.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdba858e9a9 code=0x7fc00000 [ 1173.631545][T15875] 9pnet_fd: Insufficient options for proto=fd [ 1173.856314][ T30] audit: type=1326 audit(1753449802.936:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15869 comm="syz.1.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdba852ab89 code=0x7fc00000 [ 1174.300850][ T30] audit: type=1326 audit(1753449802.936:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15869 comm="syz.1.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fdba852ac4f code=0x7fc00000 [ 1174.304923][ T3550] libceph: connect (1)[c::]:6789 error -101 [ 1174.323098][ T30] audit: type=1326 audit(1753449802.936:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15869 comm="syz.1.2534" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fdba858e9a9 code=0x7fc00000 [ 1174.352491][T15884] ceph: No mds server is up or the cluster is laggy [ 1174.384506][ T3550] libceph: mon0 (1)[c::]:6789 connect error [ 1174.414535][T15892] 9pnet_fd: Insufficient options for proto=fd [ 1175.793196][ T3550] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1176.158673][ T3550] usb 5-1: Using ep0 maxpacket: 16 [ 1176.166271][ T3550] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7 [ 1176.202850][ T3550] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1176.256316][ T3550] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1176.342666][ T3550] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.406944][ T3550] usb 5-1: Product: syz [ 1176.445842][ T3550] usb 5-1: Manufacturer: syz [ 1176.497492][ T3550] usb 5-1: SerialNumber: syz [ 1177.298575][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.310558][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.856616][T15916] delete_channel: no stack [ 1179.140087][T15923] trusted_key: encrypted_key: insufficient parameters specified [ 1179.455984][ T3550] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1179.520035][ T3550] usb 5-1: USB disconnect, device number 24 [ 1179.602632][T14983] udevd[14983]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1179.687134][ T30] audit: type=1326 audit(1753449808.796:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15932 comm="syz.7.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9a58e9a9 code=0x7fc00000 [ 1179.734644][T15938] FAULT_INJECTION: forcing a failure. [ 1179.734644][T15938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1179.803591][ T30] audit: type=1326 audit(1753449808.796:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15932 comm="syz.7.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed9a58e9a9 code=0x7fc00000 [ 1179.803898][T15938] CPU: 0 UID: 0 PID: 15938 Comm: syz.1.2551 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1179.803929][T15938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1179.803945][T15938] Call Trace: [ 1179.803954][T15938] [ 1179.803964][T15938] dump_stack_lvl+0x189/0x250 [ 1179.803997][T15938] ? __pfx____ratelimit+0x10/0x10 [ 1179.804042][T15938] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1179.804067][T15938] ? __pfx__printk+0x10/0x10 [ 1179.804095][T15938] ? __might_fault+0xb0/0x130 [ 1179.804130][T15938] should_fail_ex+0x414/0x560 [ 1179.804160][T15938] _copy_from_user+0x2d/0xb0 [ 1179.804193][T15938] core_sys_select+0x604/0xa20 [ 1179.804230][T15938] ? __pfx_core_sys_select+0x10/0x10 [ 1179.804281][T15938] ? __pfx_set_user_sigmask+0x10/0x10 [ 1179.804318][T15938] __se_sys_pselect6+0x27a/0x300 [ 1179.804350][T15938] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1179.804374][T15938] ? __pfx_ksys_write+0x10/0x10 [ 1179.804393][T15938] ? rcu_is_watching+0x15/0xb0 [ 1179.804424][T15938] ? __x64_sys_pselect6+0x21/0xf0 [ 1179.804451][T15938] do_syscall_64+0xfa/0x3b0 [ 1179.804476][T15938] ? lockdep_hardirqs_on+0x9c/0x150 [ 1179.804499][T15938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.804523][T15938] ? clear_bhb_loop+0x60/0xb0 [ 1179.804555][T15938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1179.804582][T15938] RIP: 0033:0x7fdba858e9a9 [ 1179.804601][T15938] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1179.804620][T15938] RSP: 002b:00007fdba94e2038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1179.804645][T15938] RAX: ffffffffffffffda RBX: 00007fdba87b5fa0 RCX: 00007fdba858e9a9 [ 1179.804662][T15938] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1179.804677][T15938] RBP: 00007fdba94e2090 R08: 0000000000000000 R09: 0000000000000000 [ 1179.804692][T15938] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1179.804705][T15938] R13: 0000000000000000 R14: 00007fdba87b5fa0 R15: 00007ffe9f0fcba8 [ 1179.804741][T15938] [ 1180.100631][T15929] block nbd2: shutting down sockets [ 1180.542401][T15949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1180.596479][ T30] audit: type=1800 audit(1753449809.706:248): pid=15950 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.6.2553" name="bus" dev="overlay" ino=702 res=0 errno=0 [ 1180.628627][T15949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1180.843743][ T30] audit: type=1326 audit(1753449809.946:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15932 comm="syz.7.2549" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fed9a52ab89 code=0x7fc00000 [ 1182.607975][ T5843] libceph: connect (1)[c::]:6789 error -101 [ 1182.621569][ T5843] libceph: mon0 (1)[c::]:6789 connect error [ 1182.636895][T15969] ceph: No mds server is up or the cluster is laggy [ 1183.910289][T15990] FAULT_INJECTION: forcing a failure. [ 1183.910289][T15990] name failslab, interval 1, probability 0, space 0, times 0 [ 1184.104989][T15990] CPU: 1 UID: 0 PID: 15990 Comm: syz.6.2564 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1184.105021][T15990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1184.105036][T15990] Call Trace: [ 1184.105044][T15990] [ 1184.105054][T15990] dump_stack_lvl+0x189/0x250 [ 1184.105083][T15990] ? __pfx____ratelimit+0x10/0x10 [ 1184.105107][T15990] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1184.105131][T15990] ? __pfx__printk+0x10/0x10 [ 1184.105164][T15990] ? __pfx___might_resched+0x10/0x10 [ 1184.105199][T15990] should_fail_ex+0x414/0x560 [ 1184.105227][T15990] should_failslab+0xa8/0x100 [ 1184.105256][T15990] __kmalloc_noprof+0xcb/0x4f0 [ 1184.105276][T15990] ? sock_kmalloc+0xd6/0x160 [ 1184.105302][T15990] sock_kmalloc+0xd6/0x160 [ 1184.105326][T15990] __ipv6_sock_mc_join+0x439/0x7b0 [ 1184.105366][T15990] ipv6_mcast_join_leave+0x177/0x1f0 [ 1184.105403][T15990] ? __pfx_ipv6_mcast_join_leave+0x10/0x10 [ 1184.105454][T15990] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1184.105477][T15990] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1184.105511][T15990] do_ipv6_setsockopt+0x18e5/0x2fb0 [ 1184.105559][T15990] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 1184.105599][T15990] ? rcu_read_lock_any_held+0xb3/0x120 [ 1184.105625][T15990] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 1184.105653][T15990] ? vfs_write+0x8d8/0xa90 [ 1184.105690][T15990] ? __lock_acquire+0xab9/0xd20 [ 1184.105731][T15990] ? __fget_files+0x2a/0x420 [ 1184.105760][T15990] ipv6_setsockopt+0x59/0x170 [ 1184.105796][T15990] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1184.105827][T15990] do_sock_setsockopt+0x179/0x1b0 [ 1184.105865][T15990] __x64_sys_setsockopt+0x13f/0x1b0 [ 1184.105904][T15990] do_syscall_64+0xfa/0x3b0 [ 1184.105927][T15990] ? lockdep_hardirqs_on+0x9c/0x150 [ 1184.105950][T15990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.105972][T15990] ? clear_bhb_loop+0x60/0xb0 [ 1184.106000][T15990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.106021][T15990] RIP: 0033:0x7fc8ac98e9a9 [ 1184.106040][T15990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1184.106060][T15990] RSP: 002b:00007fc8ad76f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1184.106084][T15990] RAX: ffffffffffffffda RBX: 00007fc8acbb5fa0 RCX: 00007fc8ac98e9a9 [ 1184.106100][T15990] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0000000000000004 [ 1184.106114][T15990] RBP: 00007fc8ad76f090 R08: 0000000000000108 R09: 0000000000000000 [ 1184.106128][T15990] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 1184.106142][T15990] R13: 0000000000000000 R14: 00007fc8acbb5fa0 R15: 00007ffd20aa5d98 [ 1184.106177][T15990] [ 1184.636706][ T30] audit: type=1800 audit(1753449813.666:250): pid=15995 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.2566" name="bus" dev="overlay" ino=2980 res=0 errno=0 [ 1187.029292][T16012] ceph: No mds server is up or the cluster is laggy [ 1187.039169][ T5843] libceph: connect (1)[c::]:6789 error -22 [ 1187.058717][ T5843] libceph: mon0 (1)[c::]:6789 connect error [ 1187.169369][T16022] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2570'. [ 1187.372622][T16024] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2570'. [ 1188.488520][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 1188.710024][ T5948] libceph: connect (1)[c::]:6789 error -101 [ 1188.716166][ T5948] libceph: mon0 (1)[c::]:6789 connect error [ 1188.760513][T16036] ceph: No mds server is up or the cluster is laggy [ 1189.012773][ T30] audit: type=1800 audit(1753449818.126:251): pid=16046 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.1.2580" name="bus" dev="overlay" ino=3154 res=0 errno=0 [ 1189.051508][ T5948] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1189.303476][ T5948] usb 3-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55 [ 1189.316063][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.384371][ T5948] usb 3-1: Product: syz [ 1189.620992][T14852] Bluetooth: hci5: command 0x0406 tx timeout [ 1189.627160][ T5948] usb 3-1: Manufacturer: syz [ 1189.631875][ T5948] usb 3-1: SerialNumber: syz [ 1190.400513][ T5948] usb 3-1: config 0 descriptor?? [ 1190.739251][ T5948] gspca_main: sonixb-2.14.0 probing 0c45:60a8 [ 1191.203330][ T5948] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input17 [ 1191.455286][T16068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.499836][T16068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.252130][ T5956] usb 3-1: USB disconnect, device number 51 [ 1193.838235][ T30] audit: type=1800 audit(1753449822.946:252): pid=16086 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.2593" name="bus" dev="overlay" ino=225 res=0 errno=0 [ 1196.338932][ T5948] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1196.872269][ T5948] usb 3-1: config index 0 descriptor too short (expected 60476, got 36) [ 1196.893102][ T5948] usb 3-1: config 217 has too many interfaces: 37, using maximum allowed: 32 [ 1196.902404][ T5948] usb 3-1: config 217 has an invalid descriptor of length 168, skipping remainder of the config [ 1196.918734][ T5948] usb 3-1: config 217 has 0 interfaces, different from the descriptor's value: 37 [ 1197.641563][ T5948] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 1197.662886][ T5948] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.872790][T16111] delete_channel: no stack [ 1198.960984][ T5948] usb 3-1: string descriptor 0 read error: -71 [ 1199.010648][ T5948] usb 3-1: USB disconnect, device number 52 [ 1199.032164][T16117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1199.169398][T16117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1200.556683][T16126] tipc: Failed to obtain node identity [ 1200.562883][T16126] tipc: Enabling of bearer rejected, failed to enable media [ 1200.580879][T16126] tipc: Failed to obtain node identity [ 1200.595523][T16126] tipc: Enabling of bearer rejected, failed to enable media [ 1200.604964][T16126] tipc: Failed to obtain node identity [ 1200.611482][T16126] tipc: Enabling of bearer rejected, failed to enable media [ 1200.620758][T16126] tipc: Failed to obtain node identity [ 1200.629517][T16126] tipc: Enabling of bearer rejected, failed to enable media [ 1200.640990][T16126] tipc: Failed to obtain node identity [ 1200.646606][T16126] tipc: Enabling of bearer rejected, failed to enable media [ 1200.678651][T16126] tipc: Failed to obtain node identity [ 1200.695697][ T30] audit: type=1800 audit(1753449829.806:253): pid=16133 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.2605" name="bus" dev="overlay" ino=3024 res=0 errno=0 [ 1200.718140][T16126] tipc: Enabling of bearer rejected, failed to enable media [ 1200.727514][T16126] tipc: Failed to obtain node identity [ 1200.733762][T16126] tipc: Enabling of bearer rejected, failed to enable media [ 1200.766538][T16126] tipc: Failed to obtain node identity [ 1200.784246][T16126] tipc: Enabling of bearer rejected, failed to enable media [ 1200.813323][T16126] tipc: Failed to obtain node identity [ 1200.833964][T16126] tipc: Enabling of bearer rejected, failed to enable media [ 1200.860263][T16126] tipc: Failed to obtain node identity [ 1200.875538][T16126] tipc: Enabling of bearer rejected, failed to enable media [ 1200.908304][T16126] tipc: Failed to obtain node identity [ 1200.964826][T16126] tipc: Enabling of bearer rejected, failed to enable media [ 1204.097026][ T5843] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1204.132552][T16157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2611'. [ 1204.268869][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 1204.553832][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1204.566042][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1204.598931][ T5843] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1205.346408][ T5843] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1205.378494][ T5843] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.414218][ T5843] usb 5-1: config 0 descriptor?? [ 1205.644305][T16158] delete_channel: no stack [ 1206.905530][T16172] ceph: No mds server is up or the cluster is laggy [ 1207.797922][ T5843] HID 045e:07da: Invalid code 65791 type 1 [ 1207.987238][ T5843] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0009/input/input18 [ 1208.365380][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1208.391975][ T5843] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1208.497802][T16190] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2620'. [ 1208.586478][ T5843] usb 5-1: USB disconnect, device number 25 [ 1208.602022][ T9] usb 8-1: Using ep0 maxpacket: 16 [ 1208.659067][ T9] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1208.698985][ T9] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1208.755925][ T9] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1208.782652][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1208.985647][T16192] fido_id[16192]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1208.993146][ T9] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1209.088008][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.106542][ T9] usb 8-1: Product: syz [ 1209.111070][ T9] usb 8-1: Manufacturer: syz [ 1209.475377][ T9] usb 8-1: SerialNumber: syz [ 1209.549393][ T9] usb 8-1: config 0 descriptor?? [ 1209.778172][ T9] usb 8-1: Can not set alternate setting to 1, error: -71 [ 1209.886487][ T9] synaptics_usb 8-1:0.0: probe with driver synaptics_usb failed with error -71 [ 1210.170436][ T9] usb 8-1: USB disconnect, device number 2 [ 1213.006186][T16214] delete_channel: no stack [ 1214.130478][T16233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1214.140890][T16233] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1214.712411][T16241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2634'. [ 1216.108791][ T5843] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1216.130413][T16246] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1216.165338][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2636'. [ 1216.398508][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 1216.420186][ T5843] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1216.517497][ T5843] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1216.728629][ T5843] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1216.889538][T16255] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1217.159415][ T5843] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1217.202046][ T5843] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1217.216917][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.249362][ T30] audit: type=1326 audit(1753449846.026:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16253 comm="syz.2.2639" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52ac98e9a9 code=0x0 [ 1217.688549][ T5843] usb 5-1: Product: syz [ 1217.718612][ T5843] usb 5-1: Manufacturer: syz [ 1217.754089][ T5843] usb 5-1: SerialNumber: syz [ 1217.853764][ T5843] usb 5-1: config 0 descriptor?? [ 1218.153147][ T5843] usb 5-1: Can not set alternate setting to 1, error: -71 [ 1218.224027][ T5843] synaptics_usb 5-1:0.0: probe with driver synaptics_usb failed with error -71 [ 1218.325098][ T5843] usb 5-1: USB disconnect, device number 26 [ 1218.498047][T16261] tipc: Started in network mode [ 1218.520839][T16261] tipc: Node identity 2621d377a4ba, cluster identity 4711 [ 1218.528162][T16261] tipc: Enabled bearer , priority 0 [ 1218.596658][T16262] syzkaller0: entered promiscuous mode [ 1218.605545][T16262] syzkaller0: entered allmulticast mode [ 1219.064084][T16275] ceph: No mds server is up or the cluster is laggy [ 1219.175788][T16262] tipc: Resetting bearer [ 1219.291879][T16262] tipc: Disabling bearer [ 1219.449943][ T3550] libceph: connect (1)[c::]:6789 error -101 [ 1219.469264][T16282] ceph: No mds server is up or the cluster is laggy [ 1219.517388][ T3550] libceph: mon0 (1)[c::]:6789 connect error [ 1219.610450][T16274] delete_channel: no stack [ 1221.968557][T16307] 9pnet: p9_errstr2errno: server reported unknown error 1844674407370955 [ 1222.427297][T16327] /dev/nullb0: Can't open blockdev [ 1222.738488][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1223.028254][T16315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2652'. [ 1223.289814][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1223.299889][ T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1223.341629][ T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1223.361481][ T9] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1223.386758][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1223.594099][ T9] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1223.638722][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.652314][ T9] usb 5-1: Product: syz [ 1223.663519][ T9] usb 5-1: Manufacturer: syz [ 1223.823089][ T9] usb 5-1: SerialNumber: syz [ 1223.952528][ T9] usb 5-1: config 0 descriptor?? [ 1223.987500][T16332] delete_channel: no stack [ 1224.245228][ T5907] libceph: connect (1)[c::]:6789 error -22 [ 1224.256935][ T5907] libceph: mon0 (1)[c::]:6789 connect error [ 1224.346016][T16345] ceph: No mds server is up or the cluster is laggy [ 1224.520111][ T5907] usb 3-1: new low-speed USB device number 53 using dummy_hcd [ 1225.574127][ T9] usb 5-1: Can not set alternate setting to 1, error: -71 [ 1225.581434][ T9] synaptics_usb 5-1:0.0: probe with driver synaptics_usb failed with error -71 [ 1225.596233][ T9] usb 5-1: USB disconnect, device number 27 [ 1225.710820][ T5907] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1226.687721][ T5907] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.697949][ T5907] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1226.719623][ T5907] usb 3-1: string descriptor 0 read error: -22 [ 1226.726208][ T5907] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1227.665465][ T5907] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.720671][ T5907] usb 3-1: can't set config #1, error -71 [ 1227.743741][ T5907] usb 3-1: USB disconnect, device number 53 [ 1228.012255][T16374] netlink: 'syz.7.2669': attribute type 8 has an invalid length. [ 1228.080651][ T9] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1229.214390][ T9] usb 5-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 1229.223729][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1229.232246][ T9] usb 5-1: Product: syz [ 1229.236462][ T9] usb 5-1: Manufacturer: syz [ 1229.244454][ T9] usb 5-1: SerialNumber: syz [ 1229.314276][ T9] usb 5-1: config 0 descriptor?? [ 1229.736588][T16381] delete_channel: no stack [ 1229.779150][ T9] usb 5-1: selecting invalid altsetting 1 [ 1229.784908][ T9] technisat-usb2: could not set alternate setting to 0 [ 1229.796183][ T9] technisat-usb2: firmware version: 0.0 [ 1229.801875][ T9] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 1229.823276][T16391] 9pnet: p9_errstr2errno: server reported unknown error 184467440737095 [ 1230.856033][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1230.870587][ T9] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) error while loading driver (-19) [ 1230.880280][T16397] veth0_to_team: entered promiscuous mode [ 1230.886058][T16397] veth0_to_team: entered allmulticast mode [ 1230.980307][T16401] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2675'. [ 1231.128613][T16401] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2675'. [ 1232.226089][ T5948] usb 5-1: USB disconnect, device number 28 [ 1239.861730][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.884392][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.890688][ C1] sched: DL replenish lagged too much [ 1300.291455][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.312091][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1357.508327][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1357.515450][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16370/1:b..l [ 1357.524049][ C0] rcu: (detected by 0, t=10502 jiffies, g=73693, q=985007 ncpus=2) [ 1357.532061][ C0] task:syz.6.2666 state:R running task stack:23688 pid:16370 tgid:16368 ppid:12920 task_flags:0x2040044c flags:0x00004002 [ 1357.546931][ C0] Call Trace: [ 1357.550249][ C0] [ 1357.553208][ C0] __schedule+0x16aa/0x4c90 [ 1357.557771][ C0] ? preempt_schedule_irq+0xb5/0x150 [ 1357.563106][ C0] ? __pfx___schedule+0x10/0x10 [ 1357.568049][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1357.573378][ C0] preempt_schedule_irq+0xb5/0x150 [ 1357.578530][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1357.584297][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1357.590148][ C0] irqentry_exit+0x6f/0x90 [ 1357.594598][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1357.600606][ C0] RIP: 0010:lock_acquire+0x175/0x360 [ 1357.605931][ C0] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 6b 55 fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 1357.625570][ C0] RSP: 0018:ffffc900047eeb98 EFLAGS: 00000206 [ 1357.631668][ C0] RAX: b6a295ba3b1f0700 RBX: 0000000000000000 RCX: b6a295ba3b1f0700 [ 1357.639684][ C0] RDX: 0000000000000000 RSI: ffffffff8db6fcfe RDI: ffffffff8be1ba80 [ 1357.647684][ C0] RBP: ffffffff8172aae5 R08: 0000000000000000 R09: ffffffff8172aae5 [ 1357.655686][ C0] R10: ffffc900047eed58 R11: ffffffff81acfd40 R12: 0000000000000002 [ 1357.663691][ C0] R13: ffffffff8e13f0e0 R14: 0000000000000000 R15: 0000000000000246 [ 1357.671701][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1357.676852][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1357.683057][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1357.688237][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1357.693387][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1357.699059][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1357.704205][ C0] unwind_next_frame+0xc2/0x2390 [ 1357.709182][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1357.714334][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1357.719483][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 1357.724548][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1357.730757][ C0] arch_stack_walk+0x11c/0x150 [ 1357.735562][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1357.741237][ C0] stack_trace_save+0x9c/0xe0 [ 1357.745950][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1357.751376][ C0] ? bdev_release+0x192/0x650 [ 1357.756093][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1357.762292][ C0] ? __lock_acquire+0xab9/0xd20 [ 1357.767183][ C0] kasan_save_track+0x3e/0x80 [ 1357.771997][ C0] ? kasan_save_track+0x3e/0x80 [ 1357.776898][ C0] ? kasan_save_free_info+0x46/0x50 [ 1357.782146][ C0] ? __kasan_slab_free+0x62/0x70 [ 1357.787117][ C0] ? kfree+0x18e/0x440 [ 1357.791319][ C0] ? __free_slab+0xb9/0x1c0 [ 1357.795852][ C0] ? __put_partials+0x161/0x1c0 [ 1357.800742][ C0] ? put_cpu_partial+0x17c/0x250 [ 1357.805724][ C0] ? __slab_free+0x2f7/0x400 [ 1357.810351][ C0] ? qlist_free_all+0x97/0x140 [ 1357.815150][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 1357.820819][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 1357.825876][ C0] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1357.831588][ C0] kasan_save_free_info+0x46/0x50 [ 1357.836653][ C0] __kasan_slab_free+0x62/0x70 [ 1357.841451][ C0] ? __free_slab+0xb9/0x1c0 [ 1357.845984][ C0] kfree+0x18e/0x440 [ 1357.849926][ C0] __free_slab+0xb9/0x1c0 [ 1357.854288][ C0] __put_partials+0x161/0x1c0 [ 1357.859006][ C0] put_cpu_partial+0x17c/0x250 [ 1357.863812][ C0] ? put_cpu_partial+0x6d/0x250 [ 1357.868708][ C0] __slab_free+0x2f7/0x400 [ 1357.873186][ C0] ? __phys_addr+0xd3/0x180 [ 1357.877741][ C0] qlist_free_all+0x97/0x140 [ 1357.882382][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1357.887885][ C0] __kasan_slab_alloc+0x22/0x80 [ 1357.892771][ C0] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 1357.898272][ C0] ? alloc_buffer_head+0x2a/0x270 [ 1357.903373][ C0] alloc_buffer_head+0x2a/0x270 [ 1357.908264][ C0] ? folio_alloc_buffers+0x30f/0x640 [ 1357.913587][ C0] folio_alloc_buffers+0x32d/0x640 [ 1357.918746][ C0] create_empty_buffers+0x3a/0x530 [ 1357.923917][ C0] __block_write_full_folio+0xc5/0xe10 [ 1357.929421][ C0] ? __pfx_blkdev_get_block+0x10/0x10 [ 1357.934842][ C0] blkdev_writepages+0xd1/0x170 [ 1357.939731][ C0] ? __pfx_blkdev_writepages+0x10/0x10 [ 1357.945239][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1357.950484][ C0] ? __pfx_blkdev_writepages+0x10/0x10 [ 1357.955989][ C0] do_writepages+0x32b/0x550 [ 1357.960646][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 1357.965904][ C0] filemap_write_and_wait_range+0x217/0x310 [ 1357.971868][ C0] ? __pfx_filemap_write_and_wait_range+0x10/0x10 [ 1357.978385][ C0] ? __pfx___fsnotify_parent+0x10/0x10 [ 1357.983878][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1357.988948][ C0] bdev_release+0x192/0x650 [ 1357.993506][ C0] ? __pfx_blkdev_release+0x10/0x10 [ 1357.998748][ C0] blkdev_release+0x15/0x20 [ 1358.003288][ C0] __fput+0x449/0xa70 [ 1358.007347][ C0] task_work_run+0x1d1/0x260 [ 1358.011984][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1358.017151][ C0] do_exit+0x6b5/0x22e0 [ 1358.021364][ C0] ? do_raw_spin_lock+0x121/0x290 [ 1358.026433][ C0] ? __pfx_do_exit+0x10/0x10 [ 1358.031090][ C0] do_group_exit+0x21c/0x2d0 [ 1358.035718][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1358.040965][ C0] get_signal+0x125e/0x1310 [ 1358.045529][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 1358.051136][ C0] ? count_memcg_event_mm+0x21/0x260 [ 1358.056484][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1358.062708][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 1358.068206][ C0] exit_to_user_mode_loop+0x75/0x110 [ 1358.073537][ C0] do_syscall_64+0x2bd/0x3b0 [ 1358.078178][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1358.083431][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.089534][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1358.094260][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.100191][ C0] RIP: 0033:0x7fc8ac98e9a9 [ 1358.104639][ C0] RSP: 002b:00007fc8ad74e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1358.113105][ C0] RAX: 0000000000010106 RBX: 00007fc8acbb6080 RCX: 00007fc8ac98e9a9 [ 1358.121122][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1358.129132][ C0] RBP: 00007fc8aca10d69 R08: 0000000000000000 R09: 0000000000000000 [ 1358.137141][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1358.145151][ C0] R13: 0000000000000001 R14: 00007fc8acbb6080 R15: 00007ffd20aa5d98 [ 1358.153225][ C0] [ 1358.156288][ C0] rcu: rcu_preempt kthread starved for 1118 jiffies! g73693 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1358.167465][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1358.177461][ C0] rcu: RCU grace-period kthread stack dump: [ 1358.183377][ C0] task:rcu_preempt state:R running task stack:27168 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1358.197106][ C0] Call Trace: [ 1358.200418][ C0] [ 1358.203382][ C0] __schedule+0x16aa/0x4c90 [ 1358.207937][ C0] ? schedule+0x165/0x360 [ 1358.212302][ C0] ? __pfx___schedule+0x10/0x10 [ 1358.217211][ C0] ? schedule+0x91/0x360 [ 1358.221497][ C0] schedule+0x165/0x360 [ 1358.225688][ C0] schedule_timeout+0x12b/0x270 [ 1358.230594][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1358.236014][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1358.241958][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1358.247296][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1358.252908][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1358.257805][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1358.263992][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1358.269323][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1358.274573][ C0] rcu_gp_kthread+0x99/0x390 [ 1358.279209][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1358.284440][ C0] ? __kthread_parkme+0x7b/0x200 [ 1358.289405][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1358.294458][ C0] kthread+0x70e/0x8a0 [ 1358.298569][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1358.303796][ C0] ? __pfx_kthread+0x10/0x10 [ 1358.308429][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1358.313657][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1358.318891][ C0] ? __pfx_kthread+0x10/0x10 [ 1358.323518][ C0] ret_from_fork+0x3fc/0x770 [ 1358.328139][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1358.333278][ C0] ? __switch_to_asm+0x39/0x70 [ 1358.338083][ C0] ? __switch_to_asm+0x33/0x70 [ 1358.342883][ C0] ? __pfx_kthread+0x10/0x10 [ 1358.347534][ C0] ret_from_fork_asm+0x1a/0x30 [ 1358.352349][ C0] [ 1358.355398][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1358.361743][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1358.366983][ C1] NMI backtrace for cpu 1 [ 1358.367000][ C1] CPU: 1 UID: 0 PID: 3492 Comm: kworker/u8:6 Not tainted 6.16.0-rc7-syzkaller-00105-g2942242dde89 #0 PREEMPT(full) [ 1358.367024][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1358.367037][ C1] Workqueue: bat_events batadv_tt_purge [ 1358.367059][ C1] RIP: 0010:unwind_next_frame+0x12ee/0x2390 [ 1358.367082][ C1] Code: 89 de e8 55 dc b4 ff e9 43 06 00 00 49 89 d5 48 89 d5 48 89 d8 48 29 e8 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe <4c> 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 [ 1358.367099][ C1] RSP: 0018:ffffc90000a07d38 EFLAGS: 00000202 [ 1358.367114][ C1] RAX: 0000000000000004 RBX: ffffffff90114f70 RCX: 0000000000000004 [ 1358.367128][ C1] RDX: ffffffff90114f60 RSI: ffffffff90bb4eac RDI: ffffffff8be1ba20 [ 1358.367142][ C1] RBP: ffffffff90114f60 R08: 0000000000000005 R09: ffffffff8172aae5 [ 1358.367156][ C1] R10: ffffc90000a07e58 R11: ffffffff81acfd40 R12: ffffffff89a9240c [ 1358.367170][ C1] R13: ffffffff90114f60 R14: ffffc90000a07e08 R15: 000000000008a924 [ 1358.367184][ C1] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 1358.367200][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1358.367213][ C1] CR2: 00007fc82c4434ac CR3: 000000003376e000 CR4: 00000000003526f0 [ 1358.367230][ C1] Call Trace: [ 1358.367237][ C1] [ 1358.367248][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1358.367268][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 1358.367289][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1358.367320][ C1] arch_stack_walk+0x11c/0x150 [ 1358.367345][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 1358.367364][ C1] stack_trace_save+0x9c/0xe0 [ 1358.367387][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1358.367422][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 1358.367446][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 1358.367474][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 1358.367489][ C1] ? nft_do_chain+0x409/0x1920 [ 1358.367506][ C1] ? __lock_acquire+0xab9/0xd20 [ 1358.367522][ C1] kasan_save_track+0x3e/0x80 [ 1358.367547][ C1] ? kasan_save_track+0x3e/0x80 [ 1358.367571][ C1] ? kasan_save_free_info+0x46/0x50 [ 1358.367592][ C1] ? __kasan_slab_free+0x62/0x70 [ 1358.367606][ C1] ? kmem_cache_free+0x18f/0x400 [ 1358.367622][ C1] ? skb_release_data+0x62d/0x7c0 [ 1358.367648][ C1] ? consume_skb+0x9e/0xf0 [ 1358.367670][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 1358.367686][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 1358.367701][ C1] ? nft_do_chain+0x409/0x1920 [ 1358.367715][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 1358.367753][ C1] ? skb_release_data+0x62d/0x7c0 [ 1358.367779][ C1] kasan_save_free_info+0x46/0x50 [ 1358.367800][ C1] __kasan_slab_free+0x62/0x70 [ 1358.367815][ C1] kmem_cache_free+0x18f/0x400 [ 1358.367835][ C1] skb_release_data+0x62d/0x7c0 [ 1358.367865][ C1] consume_skb+0x9e/0xf0 [ 1358.367890][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 1358.367910][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1358.367929][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1358.367958][ C1] nft_synproxy_do_eval+0x345/0x570 [ 1358.367997][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1358.368014][ C1] ? queue_work_on+0x115/0x270 [ 1358.368034][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1358.368054][ C1] ? queue_work_on+0x1ed/0x270 [ 1358.368081][ C1] nft_do_chain+0x409/0x1920 [ 1358.368097][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1358.368116][ C1] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1358.368135][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1358.368158][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1358.368193][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 1358.368213][ C1] nft_do_chain_inet+0x25d/0x340 [ 1358.368230][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1358.368248][ C1] ? ipt_do_table+0x2a3/0x1630 [ 1358.368273][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 1358.368298][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1358.368330][ C1] nf_hook_slow+0xc2/0x220 [ 1358.368357][ C1] NF_HOOK+0x206/0x3a0 [ 1358.368382][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1358.368407][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1358.368429][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1358.368451][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1358.368478][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1358.368504][ C1] ? skb_dst+0x4f/0xd0 [ 1358.368527][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 1358.368553][ C1] NF_HOOK+0x30c/0x3a0 [ 1358.368577][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1358.368601][ C1] ? NF_HOOK+0x9a/0x3a0 [ 1358.368623][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1358.368645][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 1358.368669][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1358.368698][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 1358.368721][ C1] __netif_receive_skb+0x143/0x380 [ 1358.368745][ C1] ? process_backlog+0x2d5/0x14f0 [ 1358.368769][ C1] process_backlog+0x60e/0x14f0 [ 1358.368802][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1358.368831][ C1] __napi_poll+0xc4/0x480 [ 1358.368862][ C1] ? net_rx_action+0x46d/0xe30 [ 1358.368886][ C1] net_rx_action+0x707/0xe30 [ 1358.368917][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1358.368957][ C1] handle_softirqs+0x283/0x870 [ 1358.368976][ C1] ? do_softirq+0xec/0x180 [ 1358.368996][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1358.369016][ C1] ? batadv_tt_local_purge+0x2a7/0x340 [ 1358.369033][ C1] do_softirq+0xec/0x180 [ 1358.369049][ C1] [ 1358.369054][ C1] [ 1358.369062][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1358.369097][ C1] ? __lock_acquire+0xab9/0xd20 [ 1358.369118][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 1358.369148][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 1358.369167][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1358.369200][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1358.369223][ C1] ? batadv_tt_local_purge+0x2a7/0x340 [ 1358.369240][ C1] batadv_tt_local_purge+0x2a7/0x340 [ 1358.369263][ C1] batadv_tt_purge+0x35/0x9e0 [ 1358.369280][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1358.369295][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1358.369318][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1358.369337][ C1] process_scheduled_works+0xade/0x17b0 [ 1358.369370][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1358.369396][ C1] worker_thread+0x8a0/0xda0 [ 1358.369428][ C1] kthread+0x70e/0x8a0 [ 1358.369451][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1358.369468][ C1] ? __pfx_kthread+0x10/0x10 [ 1358.369491][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1358.369506][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1358.369522][ C1] ? __pfx_kthread+0x10/0x10 [ 1358.369545][ C1] ret_from_fork+0x3fc/0x770 [ 1358.369562][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1358.369581][ C1] ? __switch_to_asm+0x39/0x70 [ 1358.369602][ C1] ? __switch_to_asm+0x33/0x70 [ 1358.369621][ C1] ? __pfx_kthread+0x10/0x10 [ 1358.369644][ C1] ret_from_fork_asm+0x1a/0x30 [ 1358.369673][ C1]