last executing test programs: 15m49.207128262s ago: executing program 4 (id=396): sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000440)="5cdd30", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) 15m47.865012344s ago: executing program 4 (id=402): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) io_uring_setup(0x734a, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x1b, &(0x7f0000000200)=ANY=[], 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) r3 = eventfd2(0x2, 0x80001) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000100)={0x0, r3}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000001740)=""/192, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$EVIOCRMFF(r1, 0xc0085508, &(0x7f0000000040)=0x3) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0xff, "d4e9002b2c000000ff00"}) r5 = syz_open_pts(r0, 0x0) r6 = dup(r5) connect$unix(r6, &(0x7f0000000200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) dup3(r0, r6, 0x0) dup3(r5, r0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x1) 15m43.586341302s ago: executing program 4 (id=414): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e12090021", 0x2b}], 0x1}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000480)={0xb0000010}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000080)={@private0}, &(0x7f00000000c0)=0x14) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = dup2(r2, r0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) 15m42.480551163s ago: executing program 4 (id=419): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup\x00', 0x0, 0x2) getdents(r0, 0xfffffffffffffffd, 0x58) 15m41.779699002s ago: executing program 4 (id=421): r0 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x4005, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000180), 0x2ae, 0x0) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x89b8, 0x8, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r7, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 15m39.961343614s ago: executing program 4 (id=427): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20008000) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @local, 0x6}, 0x32) sendto$inet6(r2, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 15m24.745158918s ago: executing program 32 (id=427): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) socket$xdp(0x2c, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20008000) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x8, @local, 0x6}, 0x32) sendto$inet6(r2, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 7m10.497389953s ago: executing program 3 (id=2091): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r1, @ANYBLOB="26003300b0910300ffffffffffff08021100000050505050505457f99eb3c401010003005c0200000600cd000000000004008e00"], 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 7m9.524605607s ago: executing program 3 (id=2095): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() getpid() sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xb, 0x29, 0x1, {0x1}}, 0xb) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_open_dev$MSR(0x0, 0x10001, 0x0) mount$overlay(0x0, &(0x7f0000000480)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00005df000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000300)={[{@redirect_dir_nofollow}, {@nfs_export_on}]}) 7m8.321461189s ago: executing program 3 (id=2100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x9c}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x8}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}, {&(0x7f0000000240)=""/225, 0xe1}], 0x2, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000040)={0x6e, 0x7, r7, 0x0, 0x0, 0x0, 0x4000000000000000, 0x2}) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000e80)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000006000000020000000200000f0300000003000000010000000300000000000000000000000000000044942d000000000000000200000000000000000100000f0100"/98], 0x0, 0x6a, 0x0, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) 7m5.645680507s ago: executing program 3 (id=2105): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x128000, 0x800}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x0, r4}, 0x10) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000540)=0x5000, 0x4) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r6, 0x7, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x9, &(0x7f0000006680)) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0xffffd000) sendmsg$NL80211_CMD_SET_BSS(r9, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x30, r6, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xd, 0x45}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x6}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xfff9}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x48010) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r8, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x20000004) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00'}) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x1fc, 0x0, 0x0, 0x1d, 0x29, 0x5}, 0x20) 7m3.639725837s ago: executing program 3 (id=2114): syz_pidfd_open(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000008c0)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a0000000000006f0000000005001b003a"], 0x2c}}, 0x0) r1 = syz_open_dev$video(&(0x7f00000001c0), 0xa, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x401, 0x6, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x1, "030000000000000023000000debd12ffff00000000000000000020000400", 0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)) dup3(r5, r4, 0x0) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r7) sendmsg$NLBL_CALIPSO_C_ADD(r7, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x9a1ea7263e15feb3) sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r8, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0xc004) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x6}, 0x4) close(r9) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) 6m58.816384677s ago: executing program 3 (id=2117): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc2261c238a5159ea98db9c00aeef644ae98a8cb8da3ff3b7ba14d7971910b559623af829524d83bf19f18628464076329140e0203fc75859185ccd019302afb784e41e16cf2d31db7aba83d0f500ce25fc2d7f524a04cfaa0015ea8a297477a5517f8a4ac167083a321c78070974afc897fb738fbcfeac369844fd7fc11fff502c02b7607007ead2007a18006a6ca8dc2d0119f01d7083c2ab5760ac7b24d7bf26b9030cf455a08385f9e662cbe0c3ca6e6fd4ac0c8566c0fca986c68ef7016a11d3e44253b6f2d07d53505ed58b8ad410f89425046321b4a9b27b5e767bdfa0ebf7abf3d91b319129c48853d8e5cbc4a2c5c560b007eafe03e3332f6017f3164c7f602180aad23dfe5e770fe8855f45925e342b7dfd7ddaa68b65065465cdf4d5b8d995d6e6a7042ebea3d139c6a616232eb4efd1a50d0e6db3188a8e98375fda2a7ebd4cd59b9ea626c13685b05e6cf4d484e32869fd7c7167dbfa48b1529e5dd5f5a02673c", 0x275}], 0x2}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYRES32=r3], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) socket(0x10, 0x80003, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0022058e7e00030000000040fe43bb8369b9a5a24c4d7a813908aaf4332c69991c83f41c846678b0698f72dd9e45ac6eb0b8ed39842e7cdd126cd85a90ce82d6ef59fbecb3282c3b65e003c0068bafa444b9a1d4de3d92"], 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) 6m43.699625626s ago: executing program 33 (id=2117): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="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", 0x1c0}, {&(0x7f0000000a40)="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", 0x275}], 0x2}, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYRES32=r3], 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) socket(0x10, 0x80003, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x44f, 0xb65d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000b80)={0x24, 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0022058e7e00030000000040fe43bb8369b9a5a24c4d7a813908aaf4332c69991c83f41c846678b0698f72dd9e45ac6eb0b8ed39842e7cdd126cd85a90ce82d6ef59fbecb3282c3b65e003c0068bafa444b9a1d4de3d92"], 0x0}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) 10.844675138s ago: executing program 5 (id=3220): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x9831cac58abe3e77, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYRES64=r0, @ANYRESOCT=r2, @ANYBLOB="000000008000000000000000000000000049d513adaa6eb5f6fba6d1bc4cb3472813328e8e876d6809963bdd7746d4fae7a9648a57e306c246d54c81c209d22ffbf9b2a9d9b8de149c090bf32a499c95f028af1592c1e391a40e4f32c908e6151406d467be3300558e3246f0795a2ecaebdc8e916bbb458e41b692b3cdd283a84b40b588b49f5800ddc5f872397fc4020c91eca479ead80e6afaac995338042c89bdae48767006c319223205a3ebe9e649221ed923e90e31e4c15d352dc0d3f187ebf2378a58737de1481ffd2abe80ca05832e4b3ae26c50b22671272eb8ac6673d0dbde03e3dba18c49740f96f03b71e227f0", @ANYBLOB="e7abb169abe8e2ca5bc0ca8949caf5c63c1da0e89b28082e7ccdc5f8e4c719cdcf8ab4a1c3dc3e6389463a6b87efe844045f878ed7e5f5e4052ea0bfba118b5bec4e2b3203331bce9186ed94bfaca811a36efff1333a1664d04ee28a743667aee7ca269a0f62e4520faa0cdc6f5e004d77d76240d0623a148e912cc777c3f72d786c906c05df71aa45e26278a9d4bdc277243d49e03bef4a780e9b9a4fba1a00e8dbc224756c8310cab91ff9865bff071b6fa08f0c20f7bc7623501a038b7c44039fef291ca8e4d26bb42c49f388c8d9b9fb783980b3bc9a47b07b0a14e88599ffee7ff195e7834f889733cfa730797b1fbe3539c3c608f22c"], 0x48) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000080)=""/19, &(0x7f00000000c0)=0x13) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f00000093c0)={0x2020}, 0x2020) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000140)={0x0, @in6={{0xa, 0x0, 0x4, @empty}}, 0x7}, &(0x7f0000000200)=0x90) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) 10.252909501s ago: executing program 6 (id=3222): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, 0x0, 0x4000004) r1 = socket$rxrpc(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r2, 0x4b72, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair(0xb, 0xa, 0x35a0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d40000006c0010002cbd7000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="080000000000010008002e000100000008002300ffffff7f08001f0007000000740016807000018014000a00030000000000000005000000000000000c00030001000000050000002c000c801400010000000000120500004706000088a800001400010003000000fd0b00000100000088a800000c000900080000000100000014000a007f00000000000000030000000000000008001f003e1a000008001b000b000000050011000500000008001d00c39967d81e64a41120000000"], 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x20004040) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, 0x0, 0x0) io_uring_setup(0x3eae, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000000c0)=0xc) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000180)="1140d42235dd2aed198752848235ec770c683706d2ab25b81c7693477b9cea52c9254d", 0x23}, {&(0x7f00000003c0)="18b12b8991241d9230cea1af0778f59562642365bed433ef7c9cb74a35db91b3b0a2dc1599df64532683afbc97bfe7630048be0d2875947eac71d94ffb5c44dd279fa78eb4cd548f52e1cb0c3d5805f2304ba9088607eadb205b4a68ee5fd265eef14cf47f29fe7ab84a440d5008a75ee8272241c60973ce579dcd82d6116fdb971a1eab1d4071d85d7453bed043fae4dd6b94dd0d1078413524126fbba874f8e700460535b6f19b8d91191855cf1b2d57bd1db7f40cbcf4aac84d9aa7edb6e59ebdbe04f1f22dad1d3a0baf3cdbf9405c47fb2af0a3ffeffab0ba9b7e1a483aca270d4e5da587", 0xe7}, {&(0x7f0000000500)="c2395b2b5fb415aebfb209937038d6f9a80991169e859d8f8ed1a72d9c485062831c2d23195446e217c5337cddcd3e742f960c0afc6606fcc473a56e20862447de5795d5aa767b8270d0ed380374723887c9107e151645050ed0645057826ad45e3a37ce0fada51c9e738a52d8f3e7d56322b887861dad2fee21a6c73b050c3d97d722b4cea01b444a37004fdf69b8b84c2df060d7db5a83c9ca30eac1d4b0617365a6b3ccc7c612df718d07d70efcbc0e0c5ec77b2ba7fb3c1bda4f37baf3d62545d0ad3117189f8404", 0xca}, {&(0x7f0000000600)="96905de88ef73d3f63f50779f304d58ec423f015b513851c7133b8a1773bca97e842150d71855049530988f0cce2dad214ee80d646de794d87dea7657ec50f6aa064586f7c7631e6f7a03381026ca82cc9cab49e8b89afc003b2c3c70f9938d723eb0058d37fde1bf98a0b1913e050bd48d6e76cec39c9bc7c136eae60110a44f7a93588b379cbb3d5639409c255706defeb7fa0bfd0e32a3acf617ba117e0ec41d534f9ac59ddb5275fd0a52f98a7e5", 0xb0}, {&(0x7f0000000880)="846a9aae1de982d094acf6d9b6b8a2c487cdb3b4677f42f859e41664a305ec6874e4ecd8c3d7231891f23fc5686e4589b16fc1ea91f4676da0943ee29729efc7c94c6463b9ab775003c223c52b58153d3e13a4a31320096594032d0fe769e1d56a39969f9b278b18483ffd78a3e562f073ecc68360b38b5263beb8ada2f55c96d4deb47f3526be9d", 0x88}], 0x5) writev(r9, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 10.089752252s ago: executing program 0 (id=3223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x1000000}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x20000000}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'veth0_to_bond\x00'}]}]}]}], {0x14, 0x10}}, 0xb4}}, 0x0) 9.268954232s ago: executing program 0 (id=3225): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x2c, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r0}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="99"]}]}, 0x2c}], 0x1}, 0x0) 8.988939062s ago: executing program 6 (id=3226): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) syz_emit_ethernet(0xc9, &(0x7f0000000700)=ANY=[@ANYBLOB="0180c2000000aaaa25bb53411811d78847000000000000000000000000000000000000070000000f006c0044ea24496e20c03ee4800d44a48276060a9ce074bc48ee2941d78c88b2e8c63304834c9eeae32b86e16a4fd29869e15c4af1972e4e3ebdd5f9e60aac8ea145d09e17650e90469371260482c45832d7453a45fd556314ef985513168f5ad451f5c6d397e04b37ddde818c9a3a04e99e29465ad76539263b7c9708bc9850cbc4ff3bdcb14c7fc06f97df5d2350c14e"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r7, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r4, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x5, 0x2963, 0x3, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r8, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000280)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r9, &(0x7f0000000580), &(0x7f0000000180)=""/11, 0x2}, 0x20) shutdown(r7, 0x0) ppoll(&(0x7f0000000280)=[{r7, 0x8088}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x13c}}, 0x20040880) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @mcast1, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 7.942134063s ago: executing program 6 (id=3229): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000111401002cbd7000fedbdf250800030001fc000008004a000200000008004b0013000000"], 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f8a0000008066f30fb3186626660f38826e376464f30f11745a2f660fc73166ba420066edf20f2218ea000000807e00650f1af6653ef081580000000000", 0x3e}], 0x1, 0x11, 0x0, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x4000, 0x1000, &(0x7f0000003000/0x1000)=nil}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2008800, &(0x7f0000000140)={[{@index_off}, {@workdir={'workdir', 0x3d, './file0'}}, {@redirect_dir_off}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/kvm\x00'}}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000111401002cbd7000fedbdf250800030001fc000008004a000200000008004b0013000000"], 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f8a0000008066f30fb3186626660f38826e376464f30f11745a2f660fc73166ba420066edf20f2218ea000000807e00650f1af6653ef081580000000000", 0x3e}], 0x1, 0x11, 0x0, 0x0) (async) dup(r5) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x4000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x2008800, &(0x7f0000000140)={[{@index_off}, {@workdir={'workdir', 0x3d, './file0'}}, {@redirect_dir_off}], [{@smackfstransmute={'smackfstransmute', 0x3d, '/dev/kvm\x00'}}]}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) 7.562838875s ago: executing program 2 (id=3231): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x42}, 0x94) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0xfffb, 0xb, 0x0, 0x0, 0x4, 0x0, 0x80000044, 0x2, 0xe, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000a, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x1}) r2 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xc0}, &(0x7f00000002c0)=0x0, &(0x7f0000000640)=0x0) prctl$PR_SET_MM(0x35, 0x6, &(0x7f0000764000/0x3000)=nil) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000000)={0x8100, 0x1, 0x3}, 0x18, 0x2) r6 = io_uring_setup(0x669, &(0x7f00000002c0)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r6, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x1f, 0x20000002, r7) map_shadow_stack(&(0x7f0000606000/0x8000)=nil, 0x8000, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_FILES_UPDATE={0x14, 0x12, 0x0, 0x0, 0xfb, &(0x7f0000000040)=[r5, r0, r2, r2, r0], 0x5, 0x0, 0x0, {0x0, r7}}) io_uring_enter(r2, 0x47bc, 0x20, 0x0, 0x0, 0x0) 7.083084385s ago: executing program 6 (id=3233): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17a) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) (fail_nth: 5) 6.715053765s ago: executing program 2 (id=3234): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24004044}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c0000001100010000000000000000000700", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a"], 0x3c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.663361423s ago: executing program 1 (id=3235): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x800000000000002, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000d"], 0x48) socket(0x28, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$rds(0x15, 0x5, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7a}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=0x0, @ANYRESOCT=r1], 0x20) 6.45696014s ago: executing program 5 (id=3236): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x9c}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/66, 0x42}, {&(0x7f0000000240)=""/225, 0xe1}], 0x2, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000001c0)={0x28, 0x7, r6, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r5, 0x3ba0, &(0x7f0000000040)={0x6e, 0x7, r7, 0x0, 0x0, 0x0, 0x4000000000000000, 0x2}) writev(0xffffffffffffffff, &(0x7f0000000180), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000e80)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000006000000020000000200000f0300000003000000010000000300000000000000000000000000000044942d000000000000000200000000000000000100000f0100"/98], 0x0, 0x6a, 0x0, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) 6.456091237s ago: executing program 6 (id=3237): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r5, 0x4068aea3, &(0x7f0000000040)) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0xffffffffffffffff, 0x1, 0x100000000005, 0x7, 0x1, 0xff, 0xffffffffffffffff, 0x2000000b, 0xffff, 0x4, 0x0, 0x105, 0x200, 0x409], 0x8000000, 0x141244}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x5, 0x3, 0xb8, 0x0, 0x7, 0x7, 0x9, 0x7, 0x9, 0xc, 0x0, 0xf9, 0x0, 0x53, 0x3, 0x0, 0x81, 0x8, 0x80, '\x00', 0xa, 0x9}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r7) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$sock_netdev_private(r0, 0x89f9, &(0x7f0000000400)="2b7d50e8d2ebffdc647a7e91ba74832cc4a11a978345c297d03b4f21ff98d9eff691175fdb6a60656c2745cab026d6b3a688789ab24e6bab0c721735d305557c7a75dbf9b9c4e0cc549b7b2186f32a77ba57784f44d173b6b57661b6588498da1d086bb3e23a1b3d5800981d06e53b6c170d71cc53708f7acd161fbcd38edde02a9d2303e465522add8440eb") sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r9, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x10) 6.428942075s ago: executing program 1 (id=3238): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000780)={{0x7, 0x1, 0x0, 0x800, 'syz0\x00'}, 0x1, [0x0, 0x80, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x42, 0x0, 0xfffffffffffffffd, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0xd453, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffc, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff, 0x0, 0x0, 0x80000000000, 0x79, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffffffffffd, 0x4000000000000, 0x200, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x34, 0x0, 0x4, 0x0, 0x400, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x20b50d5b]}) rseq(&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x27, [0x6, 0xc95a, 0xfffffff3, 0x8, 0x80, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x0, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x0, 0x80000001, 0x7, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x3, 0xe661, 0x4, 0x1000007, 0x4, 0x8001, 0x5c74, 0x8f00, 0x642, 0x3, 0xa, 0x0, 0x871, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x5, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x10002, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0x2, 0xd, 0x2bf, 0x6c9, 0x1ff, 0xfffffffe, 0x3, 0x0, 0x7, 0x10000005, 0x2f, 0xe, 0x313, 0x78, 0xea4, 0xa, 0x4, 0x4, 0x80, 0x5, 0x400, 0x1, 0x6, 0x400001, 0xff, 0x1005, 0x7ff, 0x5f31, 0x4, 0xffffffff, 0x7, 0x1000004, 0x9, 0x4, 0x9, 0x8, 0x9, 0x7, 0x5, 0x0, 0x3, 0x8000, 0xffff, 0x2, 0x7f, 0x6, 0x8, 0x3, 0xd4a8535, 0x1, 0x7, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x1, 0x0, 0x64e, 0xfffffdfe, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x5, 0x2, 0x40002, 0xf, 0x8, 0x84, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x82, 0x3, 0x4, 0x2, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x4, 0x54fe12da, 0xbf, 0x5, 0x3, 0x400000, 0xfffffff9, 0x0, 0x1, 0x5, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x3, 0xfffffffc, 0x5, 0x938, 0x4, 0x6, 0x51bf, 0x5, 0xce7, 0x1ff, 0x6, 0x7, 0x5, 0x3, 0x104, 0x80000000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x8000014c, 0x60a7, 0x6, 0x2, 0xffffffff, 0x80000003, 0x5, 0x8, 0xff, 0x3, 0x3, 0xffff, 0x3, 0x8, 0x100, 0x9602, 0xa, 0x2, 0x4, 0x6, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0xa1f, 0x8, 0x9, 0x1, 0x6c0b, 0x0, 0x2, 0x5, 0xb1c, 0x1, 0x200, 0xfff, 0xfff]}, 0x45c) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r2, &(0x7f0000000040)="e2", 0x918) write$char_usb(r1, &(0x7f0000000340)="93743c63e02bf2bbdd02dc4939bee426d94993bd91f49a42636efb85d6c857426e244ad2fae2b7825b49e7eb9f", 0x2d) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000000000000000000000000000000080000", 0x18) unshare(0x8000000) epoll_pwait(0xffffffffffffffff, &(0x7f0000000c80)=[{}, {}, {}], 0x3, 0xff, &(0x7f0000000cc0)={[0x1dd]}, 0x8) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e2b, 0xb, @private1={0xfc, 0x1, '\x00', 0x6}, 0x6}, 0x1c) landlock_create_ruleset(0x0, 0x0, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xd, &(0x7f0000000000)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@x}]}, &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 6.254416027s ago: executing program 2 (id=3239): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24004044}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x5, 0xffff}}}, 0x24}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c0000001100010000000000000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a801800058014"], 0x3c}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.637911836s ago: executing program 5 (id=3240): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x2c, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r1}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="99"]}]}, 0x2c}], 0x1}, 0x0) 5.539463281s ago: executing program 2 (id=3241): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x2c, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r1}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="99"]}]}, 0x2c}], 0x1}, 0x0) 4.060863289s ago: executing program 5 (id=3242): openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x7d68c906) r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000540)=""/102400, 0x19000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) mkdir(0x0, 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x80000, 0x0) syz_open_procfs(0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x2200000c) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0xee00, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) capget(&(0x7f0000000080)={0x19980330, r2}, &(0x7f0000000100)={0x9, 0x1, 0xf, 0x5, 0x9, 0x7}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)={0x64, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x1]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}]}]}, 0x64}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000005"], 0x114}], 0x1}, 0x0) r4 = memfd_secret(0x80000) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r4, 0xf505, 0x0) fchownat(r4, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) 4.020722919s ago: executing program 2 (id=3243): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x403, 0xfffffffd, 0x25dfdbfe, {0x0, 0x0, 0x74, r2, 0x19c04, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x0) connect$can_bcm(r0, &(0x7f0000000140)={0x1d, r2}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001800070000000000000000000a800000ff0300060200000014000100fc"], 0x30}}, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x30, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r8, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x57ce, 0x4b}}}}, ["", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x24821) r10 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000900)='./file0\x00', 0x0) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$FICLONE(r10, 0x40049409, r11) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="0500000003000000000000", @ANYRES64=0x0, @ANYBLOB="e0ec"], 0x48}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) 3.895032188s ago: executing program 6 (id=3244): socket$netlink(0x10, 0x3, 0x8000000004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x27, 0x81, '\x00', 0x7f}, {0x1, 0xc, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x8, '\x00', 0xe}, {0x6, 0x8, 0x3, '\x00', 0x8f}, {0xff, 0x10, 0xb1, '\x00', 0x7}, {0xf, 0x3, 0x28, '\x00', 0xaa}, {0x7f, 0x8, 0x1, '\x00', 0x8}, {0x1, 0x3, 0x42, '\x00', 0x63}, {0x2, 0x7, 0x91, '\x00', 0x32}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x3, 0x3, '\x00', 0x8}, {0x6, 0x6, 0x8, '\x00', 0xa6}, {0x8, 0x0, 0xa, '\x00', 0x9}, {0x4, 0x4e, 0x9}, {0x6, 0x62, 0x5, '\x00', 0x3}, {0x5, 0x5, 0x7, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x7, 0x0, 0xb, '\x00', 0x4}, {0x4, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0xf1, 0xb, '\x00', 0x4}, {0x7, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x1, '\x00', 0xa}, {0x2, 0xc, 0x91, '\x00', 0x1}]}}) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES64=0x0, @ANYBLOB="0000000000000000400012800e00010069703665727370616e0000002c0002801400050000000000000000000000000000000001"], 0x60}}, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) open(0x0, 0xe5000, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c0003"], 0x528}}, 0xc000) r4 = socket(0x2a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0xffffffffffffff5b, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002600), 0x101840, 0x0) ioctl$RTC_AIE_ON(r6, 0x7001) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x20, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000014) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2) lsetxattr$security_ima(0x0, &(0x7f0000000000), &(0x7f0000000140)=ANY=[@ANYBLOB="04"], 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3.772192663s ago: executing program 0 (id=3245): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_TMR_STOP(r0, 0x5402) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000080)=@t={0x81, 0x5, 0x0, 0x0, @generic=0xff}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000000c0)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.159820993s ago: executing program 5 (id=3246): syz_emit_ethernet(0x56, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00000d010000a01600002b583200f8b50d307d74af37e4da9707f653e812f340ace5733a33dc5af03aa1939e28153eb8282b1da382161fd80f7757e423f45751fd1dd4"], 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x700, 0x0, 0x14}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0xfd6c) 3.021251816s ago: executing program 1 (id=3247): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x143a82, 0x2) r1 = dup(r0) (async) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000200)="2cad1cb24db0481cba0fe4efcc9b012f9976ea7f782c100ce3", 0x19}], 0x1}}], 0x1, 0x8058) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xdf6, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) (rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffb}, 0x18) (async) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) (async) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x0, 0x2000000000001]}}) (async, rerun: 32) r4 = open(&(0x7f0000000080)='./bus\x00', 0x40d00, 0x0) (rerun: 32) sendfile(r1, r4, 0x0, 0x8000fffffffe) (async) ioctl$SIOCGSTAMPNS(r4, 0x8907, &(0x7f0000000080)) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async) ftruncate(r0, 0x3) (async, rerun: 64) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x4e21, 0x3, @loopback, 0x7}, 0x1c) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) (async) r6 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x0) keyctl$clear(0x3, 0xfffffffffffffffc) (async) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0), 0x0) (async) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000200)=0xf0) ioctl$CEC_S_MODE(r6, 0x40046109, &(0x7f0000000100)=0xd0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0xff, @dev, @local, {[], @ndisc_rs}}}}}, 0x0) (async) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r5, &(0x7f0000000240)=':', 0x1, 0x24008844, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) (rerun: 64) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x230, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x5, 0x7, 0x1, {0x22, 0x31e}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xa, 0x4}}}}}]}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x3e30}}]}) (async) shutdown(r5, 0x1) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000280)={"da38c420", 0xd, 0x7, 0x7, 0x9, 0x0, "9a1515eabd04a1b76ac61817b12a83", "9a3303b4", "eb5f5ed5", "3e7297a6", ["b294994b2ca6b038aa80b420", "4894c76d7d81047ecbb53b31", "18559ba9270faf80a34463f6", "1949a8c37563f052092775c5"]}) (async) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x9800d1, 0x0) 2.893259445s ago: executing program 0 (id=3248): socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x800000000000002, 0x0) socket$kcm(0x2, 0x3, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) socket$inet6(0xa, 0x800000000000002, 0x0) socket(0x28, 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$rds(0x15, 0x5, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x11, &(0x7f00000003c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7a}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r2, @ANYRES64=0x0, @ANYRESOCT=r1], 0x20) 2.85282947s ago: executing program 5 (id=3249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = creat(&(0x7f00000007c0)='./file0\x00', 0x11c) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r5, &(0x7f0000000300)="ca0e808bb35bda", 0x7) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$UHID_INPUT(r4, &(0x7f0000005bc0)={0x8, {"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", 0x1000}}, 0x1006) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) 2.812188936s ago: executing program 2 (id=3250): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000003c0)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) setsockopt$inet_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000240)=@ccm_128={{0x303}, "690ce289fad778da", "af9e6d188ba7d8d9e95df478a021616c", "43f1a00d", "fd33716e8b2075d0"}, 0x28) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000580)={0xb, 0x29, 0x1, {0x1}}, 0xb) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) syz_open_dev$MSR(0x0, 0x10001, 0x0) write$P9_RATTACH(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f00005df000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x1000, 0x1}) chdir(&(0x7f00000001c0)='./bus\x00') utime(&(0x7f0000000000)='./bus\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 2.393463642s ago: executing program 0 (id=3251): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000020b30100000000000700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'vcan0\x00', {}, {0xff}, 0x5c, 0x2, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) (async) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) (async) lsetxattr$security_ima(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), &(0x7f0000000140)=ANY=[@ANYBLOB="0407"], 0x2, 0x1) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2.280593167s ago: executing program 1 (id=3252): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioctl$KVM_SET_MEMORY_ATTRIBUTES(0xffffffffffffffff, 0x4020aed2, &(0x7f0000000080)={0x4, 0x10000, 0x8}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="0206000002"], 0x10}}, 0x890) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5, 0x0, 0xffffffffffffffff}, 0x18) r6 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b000000070000ace50001000900000001000000f4c88bbe746bb186e569b1a3d5267da11d115ea62a23d3e919314ee45f1b3a89164452f7f5dea30aa499cbb4b1ee15ea0007bd955cc1542030a5fbf881e6196976ed48a460f34be06bc33f93948700c9d76653db406ef0995e00"/121, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRESHEX=r1, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000140)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018270000", @ANYRES32=r9, @ANYBLOB="0000000081000000bf91000000000000b7020000000000008500000084000000b7000000000000f288b0de3cc6c6ce00"], &(0x7f0000000300)='GPL\x00', 0x5, 0xffd, &(0x7f0000002840)=""/4093, 0x41100, 0x0, '\x00', 0x0, 0x0, r9}, 0x94) 1.332989956s ago: executing program 1 (id=3253): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)={0x2c, 0x2e, 0x1, 0x70bd2a, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r1}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="99"]}]}, 0x2c}], 0x1}, 0x0) 1.196860233s ago: executing program 0 (id=3254): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000300)=[{0x1, 0x0, 0x6, 0xfffffff7}]}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40044}, 0x4040084) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x6, 0xfffffffffffffffe}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x21004) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) copy_file_range(0xffffffffffffffff, &(0x7f0000000040)=0xc8, 0xffffffffffffffff, 0x0, 0x8000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) dup(r5) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000280)=ANY=[@ANYRES16=r5, @ANYRESHEX=r3]) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) r7 = timerfd_create(0x0, 0x800) r8 = syz_io_uring_setup(0xd3, &(0x7f0000000480)={0x0, 0x6776, 0x8, 0x22, 0x335}, &(0x7f0000000080)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x40, 0x4004, @fd=r6, 0xffffffffffffffff, 0x0, 0x0, 0x10, 0x0, {0x3}}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) io_uring_enter(r8, 0x47ba, 0x0, 0x0, 0x0, 0x0) timerfd_settime(r7, 0x3, &(0x7f000000b000)={{}, {0x0, 0x989680}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) pipe2$watch_queue(&(0x7f0000000340), 0x80) 0s ago: executing program 1 (id=3255): creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0xffffffff80000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000180)={0x3, "d96753a192babd612cdb530d9d5737c8caed7fb85b20b0a28f47db3d439ea0bbdbd04f5c68bfee3fe9598e36911878d17a3e186d28009cd14f0545ff35827dab06e7a98506d8f0d9b2601ee5f604dbcebeaad829080c8c36e852f4dff0344d7a7f32937665ae1d6d6da4002247146356d38aa92a5f62127ff3b5ba69c587f028fe4529a3f09c6198c6efae8996a103cf95244fa1a26cf036abe1"}, 0xa2, 0x800) write$tcp_congestion(r2, &(0x7f00000000c0)='lp\x00', 0xfffffdef) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x2) dup2(r2, r0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) kernel console output (not intermixed with test programs): USB device number 69 using dummy_hcd [ 923.508860][ T8990] usb 1-1: device descriptor read/8, error -71 [ 923.748572][ T8990] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 923.788418][ T8990] usb 1-1: device descriptor read/8, error -71 [ 923.818014][ T8992] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 923.869356][ T8992] usb 6-1: device descriptor read/8, error -71 [ 923.919167][ T8990] usb usb1-port1: unable to enumerate USB device [ 924.187452][ T8992] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 924.230861][ T8992] usb 6-1: device descriptor read/8, error -71 [ 924.359353][ T8992] usb usb6-port1: unable to enumerate USB device [ 924.416203][T15019] IPVS: length: 19 != 8 [ 925.954519][T15031] netlink: 'syz.0.2454': attribute type 1 has an invalid length. [ 928.739042][T15062] overlayfs: missing 'lowerdir' [ 930.819190][ T5828] Bluetooth: hci1: unexpected cc 0x0809 length: 68 > 4 [ 930.826409][ T5828] Bluetooth: hci1: unexpected event for opcode 0x0809 [ 931.302637][T15090] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2472'. [ 931.447695][T15092] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2472'. [ 931.487760][T15092] 9pnet_fd: Insufficient options for proto=fd [ 931.566751][T15097] FAULT_INJECTION: forcing a failure. [ 931.566751][T15097] name failslab, interval 1, probability 0, space 0, times 0 [ 931.587531][T15097] CPU: 0 UID: 0 PID: 15097 Comm: syz.2.2474 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 931.587565][T15097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 931.587579][T15097] Call Trace: [ 931.587589][T15097] [ 931.587599][T15097] dump_stack_lvl+0x189/0x250 [ 931.587638][T15097] ? __pfx____ratelimit+0x10/0x10 [ 931.587669][T15097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 931.587702][T15097] ? __pfx__printk+0x10/0x10 [ 931.587731][T15097] ? __pfx___might_resched+0x10/0x10 [ 931.587763][T15097] ? fs_reclaim_acquire+0x7d/0x100 [ 931.587808][T15097] should_fail_ex+0x414/0x560 [ 931.587841][T15097] should_failslab+0xa8/0x100 [ 931.587871][T15097] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 931.587899][T15097] ? hci_mgmt_cmd+0x4b0/0xef0 [ 931.587923][T15097] ? __alloc_skb+0x112/0x2d0 [ 931.587951][T15097] __alloc_skb+0x112/0x2d0 [ 931.587978][T15097] mgmt_cmd_status+0x41/0x4c0 [ 931.588010][T15097] hci_sock_sendmsg+0x6ca/0xef0 [ 931.588043][T15097] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 931.588076][T15097] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 931.588103][T15097] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 931.588130][T15097] __sock_sendmsg+0x219/0x270 [ 931.588164][T15097] sock_write_iter+0x258/0x330 [ 931.588197][T15097] ? __pfx_sock_write_iter+0x10/0x10 [ 931.588238][T15097] ? bpf_lsm_file_permission+0x9/0x20 [ 931.588265][T15097] ? security_file_permission+0x75/0x290 [ 931.588303][T15097] vfs_write+0x54b/0xa90 [ 931.588334][T15097] ? __pfx_sock_write_iter+0x10/0x10 [ 931.588364][T15097] ? __pfx_vfs_write+0x10/0x10 [ 931.588402][T15097] ? __fget_files+0x2a/0x420 [ 931.588441][T15097] ksys_write+0x145/0x250 [ 931.588470][T15097] ? __pfx_ksys_write+0x10/0x10 [ 931.588492][T15097] ? rcu_is_watching+0x15/0xb0 [ 931.588528][T15097] ? do_syscall_64+0xbe/0x3b0 [ 931.588565][T15097] do_syscall_64+0xfa/0x3b0 [ 931.588597][T15097] ? lockdep_hardirqs_on+0x9c/0x150 [ 931.588627][T15097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.588649][T15097] ? clear_bhb_loop+0x60/0xb0 [ 931.588676][T15097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.588698][T15097] RIP: 0033:0x7f433d98e929 [ 931.588719][T15097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 931.588739][T15097] RSP: 002b:00007f433e7f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 931.588763][T15097] RAX: ffffffffffffffda RBX: 00007f433dbb5fa0 RCX: 00007f433d98e929 [ 931.588780][T15097] RDX: 0000000000000006 RSI: 0000200000000540 RDI: 0000000000000004 [ 931.588803][T15097] RBP: 00007f433e7f5090 R08: 0000000000000000 R09: 0000000000000000 [ 931.588817][T15097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.588831][T15097] R13: 0000000000000000 R14: 00007f433dbb5fa0 R15: 00007ffebc58f708 [ 931.588867][T15097] [ 931.925811][T15100] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 934.672951][T15122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2482'. [ 935.104840][ T5896] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 935.706187][ T5896] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 936.204139][ T5896] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 936.213964][ T5896] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 936.223593][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.279189][ T5896] usb 7-1: config 0 descriptor?? [ 936.909345][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.567795][ T8992] usb 7-1: USB disconnect, device number 11 [ 938.711108][T15150] FAULT_INJECTION: forcing a failure. [ 938.711108][T15150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 938.749173][T15150] CPU: 0 UID: 0 PID: 15150 Comm: syz.2.2491 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 938.749223][T15150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 938.749238][T15150] Call Trace: [ 938.749247][T15150] [ 938.749258][T15150] dump_stack_lvl+0x189/0x250 [ 938.749296][T15150] ? __pfx____ratelimit+0x10/0x10 [ 938.749327][T15150] ? __pfx_dump_stack_lvl+0x10/0x10 [ 938.749360][T15150] ? __pfx__printk+0x10/0x10 [ 938.749381][T15150] ? __might_fault+0xb0/0x130 [ 938.749420][T15150] should_fail_ex+0x414/0x560 [ 938.749451][T15150] _copy_from_iter+0x1db/0x16f0 [ 938.749487][T15150] ? rcu_is_watching+0x15/0xb0 [ 938.749520][T15150] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 938.749549][T15150] ? __pfx__copy_from_iter+0x10/0x10 [ 938.749586][T15150] ? __build_skb_around+0x257/0x3e0 [ 938.749613][T15150] ? netlink_sendmsg+0x642/0xb30 [ 938.749636][T15150] ? skb_put+0x11b/0x210 [ 938.749662][T15150] netlink_sendmsg+0x6b2/0xb30 [ 938.749696][T15150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 938.749728][T15150] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 938.749754][T15150] ? __pfx_netlink_sendmsg+0x10/0x10 [ 938.749778][T15150] __sock_sendmsg+0x219/0x270 [ 938.749813][T15150] ____sys_sendmsg+0x505/0x830 [ 938.749844][T15150] ? __pfx_____sys_sendmsg+0x10/0x10 [ 938.749878][T15150] ? import_iovec+0x74/0xa0 [ 938.749915][T15150] ___sys_sendmsg+0x21f/0x2a0 [ 938.749943][T15150] ? __pfx____sys_sendmsg+0x10/0x10 [ 938.750008][T15150] ? __fget_files+0x2a/0x420 [ 938.750036][T15150] ? __fget_files+0x3a0/0x420 [ 938.750077][T15150] __x64_sys_sendmsg+0x19b/0x260 [ 938.750106][T15150] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 938.750143][T15150] ? __pfx_ksys_write+0x10/0x10 [ 938.750165][T15150] ? rcu_is_watching+0x15/0xb0 [ 938.750211][T15150] ? do_syscall_64+0xbe/0x3b0 [ 938.750246][T15150] do_syscall_64+0xfa/0x3b0 [ 938.750274][T15150] ? lockdep_hardirqs_on+0x9c/0x150 [ 938.750305][T15150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.750327][T15150] ? clear_bhb_loop+0x60/0xb0 [ 938.750353][T15150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 938.750374][T15150] RIP: 0033:0x7f433d98e929 [ 938.750395][T15150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 938.750426][T15150] RSP: 002b:00007f433e7f5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 938.750449][T15150] RAX: ffffffffffffffda RBX: 00007f433dbb5fa0 RCX: 00007f433d98e929 [ 938.750465][T15150] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000008 [ 938.750479][T15150] RBP: 00007f433e7f5090 R08: 0000000000000000 R09: 0000000000000000 [ 938.750493][T15150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 938.750506][T15150] R13: 0000000000000000 R14: 00007f433dbb5fa0 R15: 00007ffebc58f708 [ 938.750538][T15150] [ 940.128661][T15162] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 940.185229][T15155] could not allocate digest TFM handle blake2s-160-generic [ 940.444639][T15170] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2496'. [ 941.023672][T15177] SET target dimension over the limit! [ 941.405355][T15189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 941.787590][ T8987] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 941.817883][T15187] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2504'. [ 941.844332][T15187] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 941.939425][ T8987] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.961175][ T8987] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 941.971381][ T8987] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 942.137337][ T8987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.790718][ T8987] usb 1-1: config 0 descriptor?? [ 943.427542][ T43] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 943.733243][T15204] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 943.777357][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 943.800111][T15205] tmpfs: Unknown parameter 'ÿ/file0' [ 943.823016][ T43] usb 2-1: config 0 has no interfaces? [ 943.866940][ T43] usb 2-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 943.917127][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.958274][ T43] usb 2-1: config 0 descriptor?? [ 944.547974][T15199] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.575930][T15199] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 944.600034][T15199] netlink: 'syz.1.2507': attribute type 21 has an invalid length. [ 944.637138][T15199] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2507'. [ 944.856436][T15216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 944.916867][ T43] usb 1-1: USB disconnect, device number 71 [ 944.935906][T15223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2515'. [ 944.948864][T15216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 945.640961][T15220] xt_hashlimit: max too large, truncated to 1048576 [ 945.698100][T15220] xt_hashlimit: overflow, try lower: 33554673/0 [ 946.977533][ T8986] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 947.727294][ T8986] usb 3-1: Using ep0 maxpacket: 8 [ 947.742799][ T8986] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 947.757955][ T8986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 947.766524][ T8986] usb 3-1: Product: syz [ 947.777556][ T8986] usb 3-1: Manufacturer: syz [ 947.782225][ T8986] usb 3-1: SerialNumber: syz [ 947.818465][ T8986] usb 3-1: config 0 descriptor?? [ 947.824353][ T8990] usb 2-1: USB disconnect, device number 76 [ 947.871245][ T8986] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 947.902696][T15251] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2521'. [ 947.909723][T15250] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 947.934843][T15245] binder: 15244:15245 ioctl c0306201 200000000c40 returned -22 [ 948.498276][T15258] overlayfs: missing 'lowerdir' [ 948.905871][ T8986] gspca_sonixj: reg_r err -71 [ 948.934828][ T8986] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 948.973830][ T8986] usb 3-1: USB disconnect, device number 51 [ 951.739133][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2532'. [ 952.669164][T15292] binder_alloc: binder_alloc_mmap_handler: 15287 200000ffc000-200000ffd000 already mapped failed -16 [ 952.718793][T15293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2534'. [ 952.755455][T15293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2534'. [ 952.781451][T15299] x_tables: ip_tables: owner match: used from hooks PREROUTING, but only valid from OUTPUT/POSTROUTING [ 953.334384][T15301] netlink: 'syz.5.2538': attribute type 10 has an invalid length. [ 953.476923][T15301] team0: Device ipvlan1 failed to register rx_handler [ 953.542549][T15302] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 953.574088][T15307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2540'. [ 953.692600][T15307] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.702403][T15307] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.712122][T15307] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.721529][T15307] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 953.774028][T15307] vxlan0: entered promiscuous mode [ 954.087873][ T5904] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 954.125284][T15320] overlayfs: missing 'lowerdir' [ 954.247634][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 954.275327][ T5904] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 954.295482][ T5904] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 954.306938][ T5904] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 954.346046][ T5904] usb 1-1: Product: syz [ 954.356235][ T5904] usb 1-1: Manufacturer: syz [ 954.366283][ T5904] usb 1-1: SerialNumber: syz [ 955.462671][ T5904] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 955.476998][ T5904] usb 1-1: Handspring Visor / Palm OS: port 116, is for unknown use [ 955.547773][ T5904] usb 1-1: Handspring Visor / Palm OS: port 118, is for unknown use [ 956.227283][ T5904] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 956.254850][ T5904] usb 1-1: palm_os_3_probe - error -71 getting bytes available request [ 956.324622][ T5904] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 956.403261][ T5904] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 956.479759][ T5904] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 956.545733][ T5904] usb 1-1: USB disconnect, device number 72 [ 956.592001][ T5904] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 956.653333][ T5904] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 956.693053][ T5904] visor 1-1:1.0: device disconnected [ 956.761645][T15348] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 958.031999][T15345] binder_alloc: 15344: pid 15344 spamming oneway? 1 buffers allocated for a total size of 4096 [ 958.056254][T15345] binder_alloc: 15344: pid 15344 spamming oneway? 2 buffers allocated for a total size of 5120 [ 958.387620][ T8986] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 959.058202][ T8986] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 959.110230][ T8986] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 959.194127][ T8986] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 959.316809][ T8986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 959.365213][ T8986] usb 2-1: SerialNumber: syz [ 959.751455][T15349] ceph: No mds server is up or the cluster is laggy [ 960.051472][ T8986] usb 2-1: 0:2 : does not exist [ 960.287645][ T8986] usb 2-1: USB disconnect, device number 77 [ 962.114471][T14687] udevd[14687]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 962.690893][ T8986] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 962.816424][T15399] overlayfs: conflicting lowerdir path [ 962.848032][ T8986] usb 6-1: device descriptor read/64, error -71 [ 963.201481][ T8986] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 963.417335][ T8987] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 963.676262][ T8986] usb 6-1: device descriptor read/64, error -71 [ 963.737717][ T8987] usb 1-1: Using ep0 maxpacket: 16 [ 963.843420][ T8987] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 963.858234][ T8987] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 963.869277][ T8987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.930252][ T8987] usb 1-1: config 0 descriptor?? [ 964.730166][ T8986] usb usb6-port1: attempt power cycle [ 964.742848][T15409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 964.882395][T15409] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2566'. [ 964.931955][ T8987] mcp2221 0003:04D8:00DD.0011: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 965.197478][ T8986] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 965.218409][ T8986] usb 6-1: device descriptor read/8, error -71 [ 965.916873][ T8987] usb 1-1: USB disconnect, device number 73 [ 965.959649][ T8986] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 966.141779][T15422] overlayfs: failed to resolve './file1/file0': -2 [ 966.212367][ T8986] usb 6-1: device not accepting address 37, error -71 [ 966.212719][ T8986] usb usb6-port1: unable to enumerate USB device [ 967.535944][T15436] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2576'. [ 969.237942][T15450] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2580'. [ 969.314982][T15450] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 969.324001][T15450] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 969.332871][T15450] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 969.341690][T15450] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 969.396546][T15450] vxlan0: entered promiscuous mode [ 969.698240][T15455] FAULT_INJECTION: forcing a failure. [ 969.698240][T15455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 969.718208][T15455] CPU: 1 UID: 0 PID: 15455 Comm: syz.2.2583 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 969.718243][T15455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 969.718259][T15455] Call Trace: [ 969.718270][T15455] [ 969.718289][T15455] dump_stack_lvl+0x189/0x250 [ 969.718330][T15455] ? __pfx____ratelimit+0x10/0x10 [ 969.718362][T15455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 969.718396][T15455] ? __pfx__printk+0x10/0x10 [ 969.718433][T15455] should_fail_ex+0x414/0x560 [ 969.718466][T15455] _copy_to_user+0x31/0xb0 [ 969.718503][T15455] simple_read_from_buffer+0xe1/0x170 [ 969.718538][T15455] proc_fail_nth_read+0x1df/0x250 [ 969.718574][T15455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 969.718609][T15455] ? rw_verify_area+0x258/0x650 [ 969.718633][T15455] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 969.718666][T15455] vfs_read+0x200/0x980 [ 969.718697][T15455] ? __pfx___mutex_lock+0x10/0x10 [ 969.718730][T15455] ? __pfx_vfs_read+0x10/0x10 [ 969.718757][T15455] ? __fget_files+0x2a/0x420 [ 969.718792][T15455] ? __fget_files+0x3a0/0x420 [ 969.718820][T15455] ? __fget_files+0x2a/0x420 [ 969.718860][T15455] ksys_read+0x145/0x250 [ 969.718888][T15455] ? __pfx_ksys_read+0x10/0x10 [ 969.718919][T15455] ? do_syscall_64+0xbe/0x3b0 [ 969.718957][T15455] do_syscall_64+0xfa/0x3b0 [ 969.718987][T15455] ? lockdep_hardirqs_on+0x9c/0x150 [ 969.719017][T15455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.719040][T15455] ? clear_bhb_loop+0x60/0xb0 [ 969.719067][T15455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.719090][T15455] RIP: 0033:0x7f433d98d33c [ 969.719111][T15455] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 969.719131][T15455] RSP: 002b:00007f433e7f5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 969.719155][T15455] RAX: ffffffffffffffda RBX: 00007f433dbb5fa0 RCX: 00007f433d98d33c [ 969.719172][T15455] RDX: 000000000000000f RSI: 00007f433e7f50a0 RDI: 0000000000000003 [ 969.719187][T15455] RBP: 00007f433e7f5090 R08: 0000000000000000 R09: 0000000000000000 [ 969.719201][T15455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 969.719215][T15455] R13: 0000000000000001 R14: 00007f433dbb5fa0 R15: 00007ffebc58f708 [ 969.719250][T15455] [ 971.037919][T15465] netlink: 'syz.6.2585': attribute type 10 has an invalid length. [ 971.104043][T15465] 8021q: adding VLAN 0 to HW filter on device team0 [ 971.126791][T15465] bond0: (slave team0): Enslaving as an active interface with an up link [ 971.327542][T13746] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 971.537678][T15476] overlayfs: missing 'lowerdir' [ 972.481329][T13746] usb 1-1: not running at top speed; connect to a high speed hub [ 972.493342][T13746] usb 1-1: config 1 interface 0 has no altsetting 0 [ 972.529995][T13746] usb 1-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.40 [ 972.555692][T13746] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.580517][T13746] usb 1-1: Product: syz [ 972.584765][T13746] usb 1-1: Manufacturer: syz [ 972.614796][T13746] usb 1-1: SerialNumber: syz [ 972.743788][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2594'. [ 973.106473][T15501] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 973.786239][T15503] overlayfs: missing 'lowerdir' [ 973.805611][T15505] FAULT_INJECTION: forcing a failure. [ 973.805611][T15505] name failslab, interval 1, probability 0, space 0, times 0 [ 973.818857][T15505] CPU: 0 UID: 0 PID: 15505 Comm: syz.2.2596 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 973.818891][T15505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 973.818906][T15505] Call Trace: [ 973.818919][T15505] [ 973.818927][T15505] dump_stack_lvl+0x189/0x250 [ 973.818976][T15505] ? lockdep_hardirqs_on+0x9c/0x150 [ 973.818999][T15505] ? __pfx_dump_stack_lvl+0x10/0x10 [ 973.819035][T15505] should_fail_ex+0x414/0x560 [ 973.819058][T15505] should_failslab+0xa8/0x100 [ 973.819080][T15505] __kmalloc_noprof+0xcb/0x4f0 [ 973.819098][T15505] ? tomoyo_encode+0x28b/0x550 [ 973.819124][T15505] tomoyo_encode+0x28b/0x550 [ 973.819150][T15505] tomoyo_realpath_from_path+0x58d/0x5d0 [ 973.819182][T15505] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 973.819200][T15505] tomoyo_path_number_perm+0x1e8/0x5a0 [ 973.819224][T15505] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 973.819246][T15505] ? __pfx___schedule+0x10/0x10 [ 973.819265][T15505] ? irqentry_exit+0x74/0x90 [ 973.819295][T15505] ? __lock_acquire+0xab9/0xd20 [ 973.819333][T15505] ? __fget_files+0x2a/0x420 [ 973.819356][T15505] ? __fget_files+0x2a/0x420 [ 973.819375][T15505] ? __fget_files+0x3a0/0x420 [ 973.819395][T15505] ? __fget_files+0x2a/0x420 [ 973.819418][T15505] security_file_ioctl+0xcb/0x2d0 [ 973.819440][T15505] __se_sys_ioctl+0x47/0x170 [ 973.819459][T15505] do_syscall_64+0xfa/0x3b0 [ 973.819484][T15505] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.819499][T15505] ? asm_sysvec_call_function_single+0x1a/0x20 [ 973.819515][T15505] ? clear_bhb_loop+0x60/0xb0 [ 973.819533][T15505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.819549][T15505] RIP: 0033:0x7f433d98e929 [ 973.819564][T15505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 973.819578][T15505] RSP: 002b:00007f433e7d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 973.819595][T15505] RAX: ffffffffffffffda RBX: 00007f433dbb6080 RCX: 00007f433d98e929 [ 973.819606][T15505] RDX: 0000200000000540 RSI: 00000000c4c85513 RDI: 0000000000000004 [ 973.819617][T15505] RBP: 00007f433e7d4090 R08: 0000000000000000 R09: 0000000000000000 [ 973.819627][T15505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.819637][T15505] R13: 0000000000000000 R14: 00007f433dbb6080 R15: 00007ffebc58f708 [ 973.819660][T15505] [ 973.819912][T15505] ERROR: Out of memory at tomoyo_realpath_from_path. [ 974.625482][T13746] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input12 [ 974.704843][ T5174] bcm5974 1-1:1.0: could not read from device [ 974.734785][T13746] usb 1-1: USB disconnect, device number 74 [ 976.878824][T15549] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 977.243368][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2610'. [ 977.391313][T15542] ceph: No mds server is up or the cluster is laggy [ 977.746965][T15559] lo speed is unknown, defaulting to 1000 [ 977.764318][T15557] overlayfs: missing 'lowerdir' [ 977.829472][T15559] vcan0 speed is unknown, defaulting to 1000 [ 979.710318][T15585] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2619'. [ 983.545300][T15655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2627'. [ 983.756239][T15660] loop9: detected capacity change from 0 to 7 [ 983.792786][T14687] Dev loop9: unable to read RDB block 7 [ 983.831882][T14687] loop9: AHDI p1 [ 983.846368][T14687] loop9: partition table partially beyond EOD, truncated [ 983.895192][T15660] Dev loop9: unable to read RDB block 7 [ 983.907540][T15660] loop9: AHDI p1 [ 983.911403][T15660] loop9: partition table partially beyond EOD, truncated [ 987.235734][T15730] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 987.242428][T15730] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 987.360538][T15730] vhci_hcd vhci_hcd.0: Device attached [ 987.859847][T15745] overlayfs: missing 'lowerdir' [ 987.887878][T15746] binder: 15738:15746 ioctl 4020ae46 200000000180 returned -22 [ 988.757298][T13746] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 988.844914][ T8986] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 989.402625][ T8986] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 989.518886][T15732] vhci_hcd: connection reset by peer [ 989.537273][T13860] vhci_hcd: stop threads [ 989.541625][T13860] vhci_hcd: release socket [ 989.557655][T13860] vhci_hcd: disconnect device [ 989.619600][ T8986] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 989.630106][ T8986] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 989.646256][ T8986] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.744607][ T8986] usb 6-1: config 0 descriptor?? [ 990.940424][ T8992] usb 6-1: USB disconnect, device number 38 [ 991.269591][T15769] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2650'. [ 992.457426][T15790] FAULT_INJECTION: forcing a failure. [ 992.457426][T15790] name failslab, interval 1, probability 0, space 0, times 0 [ 992.475586][T15790] CPU: 0 UID: 0 PID: 15790 Comm: syz.6.2658 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 992.475631][T15790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 992.475645][T15790] Call Trace: [ 992.475654][T15790] [ 992.475664][T15790] dump_stack_lvl+0x189/0x250 [ 992.475703][T15790] ? __pfx____ratelimit+0x10/0x10 [ 992.475734][T15790] ? __pfx_dump_stack_lvl+0x10/0x10 [ 992.475767][T15790] ? __pfx__printk+0x10/0x10 [ 992.475796][T15790] ? __pfx___might_resched+0x10/0x10 [ 992.475827][T15790] ? fs_reclaim_acquire+0x7d/0x100 [ 992.475864][T15790] should_fail_ex+0x414/0x560 [ 992.475896][T15790] should_failslab+0xa8/0x100 [ 992.475927][T15790] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 992.475954][T15790] ? __d_alloc+0x31/0x6f0 [ 992.475993][T15790] __d_alloc+0x31/0x6f0 [ 992.476027][T15790] ? __lock_acquire+0xab9/0xd20 [ 992.476062][T15790] d_alloc_parallel+0xe0/0x14e0 [ 992.476102][T15790] ? __d_lookup+0x66/0x780 [ 992.476129][T15790] ? __pfx_d_alloc_parallel+0x10/0x10 [ 992.476157][T15790] ? __raw_spin_lock_init+0x45/0x100 [ 992.476184][T15790] ? __init_waitqueue_head+0xa9/0x150 [ 992.476215][T15790] proc_fill_cache+0x252/0x3d0 [ 992.476245][T15790] ? __pfx_proc_pident_instantiate+0x10/0x10 [ 992.476274][T15790] ? __pfx_proc_fill_cache+0x10/0x10 [ 992.476311][T15790] ? filldir+0x48f/0x6c0 [ 992.476349][T15790] proc_pident_readdir+0x370/0x4b0 [ 992.476385][T15790] iterate_dir+0x5ac/0x770 [ 992.476416][T15790] __se_sys_getdents+0xe4/0x250 [ 992.476444][T15790] ? __pfx___se_sys_getdents+0x10/0x10 [ 992.476467][T15790] ? ksys_write+0x22a/0x250 [ 992.476489][T15790] ? __pfx_filldir+0x10/0x10 [ 992.476515][T15790] ? __pfx_ksys_write+0x10/0x10 [ 992.476559][T15790] ? rcu_is_watching+0x15/0xb0 [ 992.476597][T15790] ? do_syscall_64+0xbe/0x3b0 [ 992.476641][T15790] do_syscall_64+0xfa/0x3b0 [ 992.476675][T15790] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.476697][T15790] ? asm_sysvec_call_function_single+0x1a/0x20 [ 992.476720][T15790] ? clear_bhb_loop+0x60/0xb0 [ 992.476747][T15790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 992.476768][T15790] RIP: 0033:0x7f6624d8e929 [ 992.476790][T15790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 992.476809][T15790] RSP: 002b:00007f6625bbd038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 992.476833][T15790] RAX: ffffffffffffffda RBX: 00007f6624fb5fa0 RCX: 00007f6624d8e929 [ 992.476850][T15790] RDX: 00000000000000b8 RSI: 0000200000001fc0 RDI: 0000000000000004 [ 992.476864][T15790] RBP: 00007f6625bbd090 R08: 0000000000000000 R09: 0000000000000000 [ 992.476877][T15790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 992.476890][T15790] R13: 0000000000000000 R14: 00007f6624fb5fa0 R15: 00007ffdda85d708 [ 992.476924][T15790] [ 993.277332][ T8992] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 993.434923][T15798] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2660'. [ 993.477392][ T8992] usb 2-1: Using ep0 maxpacket: 32 [ 993.485540][ T8992] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 993.493807][ T8992] usb 2-1: can't read configurations, error -61 [ 993.657365][ T8992] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 993.797611][ T8987] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 993.817331][ T8992] usb 2-1: Using ep0 maxpacket: 32 [ 993.830954][ T8992] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 993.839543][ T8992] usb 2-1: can't read configurations, error -61 [ 993.878579][ T8992] usb usb2-port1: attempt power cycle [ 993.907538][T13746] vhci_hcd: vhci_device speed not set [ 993.960454][ T8987] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.993296][ T8987] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 994.008336][ T8987] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 994.026548][ T8987] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.055407][ T8987] usb 7-1: config 0 descriptor?? [ 994.156284][T15817] syzkaller0: entered promiscuous mode [ 994.162754][T15817] syzkaller0: entered allmulticast mode [ 994.227545][ T8992] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 994.262655][ T8992] usb 2-1: Using ep0 maxpacket: 32 [ 994.280419][ T8992] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 994.316373][ T8992] usb 2-1: can't read configurations, error -61 [ 994.477789][ T8992] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 994.508202][ T8992] usb 2-1: Using ep0 maxpacket: 32 [ 994.517471][ T8992] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 994.525462][ T8992] usb 2-1: can't read configurations, error -61 [ 994.533862][ T8992] usb usb2-port1: unable to enumerate USB device [ 995.091199][T15834] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 995.585581][T15841] overlayfs: missing 'lowerdir' [ 996.313607][T15849] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2675'. [ 996.566522][ T43] usb 7-1: USB disconnect, device number 12 [ 996.745089][T15852] xt_TCPMSS: Only works on TCP SYN packets [ 996.891882][T15859] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2679'. [ 996.952203][T15859] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2679'. [ 997.463298][T15859] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2679'. [ 997.489243][T15859] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2679'. [ 998.589225][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.677979][ T8992] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 998.913532][ T8992] usb 6-1: Using ep0 maxpacket: 32 [ 999.018490][ T8992] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 999.026163][ T8992] usb 6-1: can't read configurations, error -61 [ 999.136872][T15892] overlayfs: missing 'lowerdir' [ 999.487584][ T8986] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 999.705863][T15897] tipc: Failed to remove unknown binding: 66,1,1/0:2887706412/2887706414 [ 999.750072][T15897] tipc: Failed to remove unknown binding: 66,1,1/0:2887706412/2887706414 [ 999.759430][T15897] tipc: Failed to remove unknown binding: 66,1,1/0:2887706412/2887706414 [ 999.846564][ T8986] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 999.859655][ T8992] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 999.877319][ T8986] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 999.886383][ T8986] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 999.902736][ T5904] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 999.910624][ T8986] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.928351][ T8986] usb 7-1: config 0 descriptor?? [ 1000.127397][ T8992] usb 6-1: Using ep0 maxpacket: 32 [ 1000.140865][ T8992] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1000.163850][ T8992] usb 6-1: can't read configurations, error -61 [ 1000.181587][ T8992] usb usb6-port1: attempt power cycle [ 1000.291430][T15906] overlayfs: failed to resolve './file1': -2 [ 1000.588038][ T8987] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1000.629016][ T8992] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1000.696916][ T8992] usb 6-1: Using ep0 maxpacket: 32 [ 1000.766827][ T8992] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1000.783707][ T8987] usb 3-1: device descriptor read/64, error -71 [ 1000.816938][ T8992] usb 6-1: can't read configurations, error -61 [ 1001.058923][ T8992] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1001.092572][ T8987] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1001.167358][ T5904] usb 1-1: Using ep0 maxpacket: 8 [ 1001.185374][ T5904] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1001.258563][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.276284][ T8992] usb 6-1: device descriptor read/8, error -71 [ 1001.276741][ T5904] usb 1-1: Product: syz [ 1001.296992][ T5904] usb 1-1: Manufacturer: syz [ 1001.299844][ T8987] usb 3-1: device descriptor read/64, error -71 [ 1001.313995][ T5904] usb 1-1: SerialNumber: syz [ 1001.359407][ T5904] usb 1-1: config 0 descriptor?? [ 1001.376592][ T5904] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1002.076333][ T8992] usb usb6-port1: unable to enumerate USB device [ 1002.086313][ T8987] usb usb3-port1: attempt power cycle [ 1002.156032][T13746] usb 7-1: USB disconnect, device number 13 [ 1002.467694][ T8987] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1002.502594][ T8987] usb 3-1: device descriptor read/8, error -71 [ 1002.556590][T15928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2700'. [ 1002.759973][ T8987] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1002.766898][T15925] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.2699'. [ 1002.814719][ T8987] usb 3-1: device descriptor read/8, error -71 [ 1002.925477][T15936] Cannot find add_set index 0 as target [ 1002.931004][ T8987] usb usb3-port1: unable to enumerate USB device [ 1002.939790][ T5904] gspca_sonixj: reg_r err -71 [ 1003.072865][ T5904] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 1003.089183][ T5904] usb 1-1: USB disconnect, device number 75 [ 1003.192405][T15943] xt_hashlimit: max too large, truncated to 1048576 [ 1003.204945][T15943] fuse: Bad value for 'rootmode' [ 1003.303376][T15943] kvm: user requested TSC rate below hardware speed [ 1003.509375][T15946] overlayfs: missing 'lowerdir' [ 1004.246481][T15949] lo speed is unknown, defaulting to 1000 [ 1004.289865][T15949] vcan0 speed is unknown, defaulting to 1000 [ 1004.979133][T15964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2711'. [ 1005.089498][T13746] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1005.261700][T13746] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1005.286063][T13746] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1005.325907][T13746] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1005.352794][T13746] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.408856][T13746] usb 6-1: config 0 descriptor?? [ 1005.514875][T15977] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 1006.439006][ T8986] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1006.447252][ T8992] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1006.597502][ T8992] usb 2-1: device descriptor read/64, error -71 [ 1006.766778][T15997] FAULT_INJECTION: forcing a failure. [ 1006.766778][T15997] name failslab, interval 1, probability 0, space 0, times 0 [ 1006.780095][T15997] CPU: 0 UID: 0 PID: 15997 Comm: syz.2.2720 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 1006.780127][T15997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1006.780142][T15997] Call Trace: [ 1006.780152][T15997] [ 1006.780162][T15997] dump_stack_lvl+0x189/0x250 [ 1006.780200][T15997] ? __pfx____ratelimit+0x10/0x10 [ 1006.780232][T15997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1006.780265][T15997] ? __pfx__printk+0x10/0x10 [ 1006.780292][T15997] ? __pfx___might_resched+0x10/0x10 [ 1006.780323][T15997] ? fs_reclaim_acquire+0x7d/0x100 [ 1006.780361][T15997] should_fail_ex+0x414/0x560 [ 1006.780403][T15997] should_failslab+0xa8/0x100 [ 1006.780434][T15997] __kmalloc_cache_noprof+0x70/0x3d0 [ 1006.780460][T15997] ? vkms_atomic_crtc_duplicate_state+0x78/0x190 [ 1006.780500][T15997] vkms_atomic_crtc_duplicate_state+0x78/0x190 [ 1006.780536][T15997] drm_atomic_get_crtc_state+0x19a/0x460 [ 1006.780577][T15997] drm_atomic_get_plane_state+0x4c8/0x5a0 [ 1006.780618][T15997] drm_atomic_set_property+0x221/0x30f0 [ 1006.780653][T15997] ? __pfx_drm_atomic_set_property+0x10/0x10 [ 1006.780701][T15997] drm_mode_atomic_ioctl+0x6f9/0xcb0 [ 1006.780723][T15997] ? preempt_schedule_irq+0xb5/0x150 [ 1006.780770][T15997] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1006.780792][T15997] ? preempt_schedule_irq+0xde/0x150 [ 1006.780848][T15997] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1006.780872][T15997] ? drm_ioctl_kernel+0x2ac/0x390 [ 1006.780908][T15997] drm_ioctl_kernel+0x2cf/0x390 [ 1006.780936][T15997] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1006.780959][T15997] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 1006.780998][T15997] drm_ioctl+0x67f/0xb10 [ 1006.781022][T15997] ? smk_tskacc+0x2fc/0x370 [ 1006.781060][T15997] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 1006.781089][T15997] ? __pfx_drm_ioctl+0x10/0x10 [ 1006.781132][T15997] ? __fget_files+0x2a/0x420 [ 1006.781167][T15997] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1006.781197][T15997] ? __pfx_drm_ioctl+0x10/0x10 [ 1006.781223][T15997] __se_sys_ioctl+0xf9/0x170 [ 1006.781250][T15997] do_syscall_64+0xfa/0x3b0 [ 1006.781284][T15997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.781305][T15997] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1006.781327][T15997] ? clear_bhb_loop+0x60/0xb0 [ 1006.781354][T15997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.781376][T15997] RIP: 0033:0x7f433d98e929 [ 1006.781404][T15997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1006.781423][T15997] RSP: 002b:00007f433e7b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1006.781447][T15997] RAX: ffffffffffffffda RBX: 00007f433dbb6160 RCX: 00007f433d98e929 [ 1006.781464][T15997] RDX: 0000200000000180 RSI: 00000000c03864bc RDI: 000000000000000e [ 1006.781479][T15997] RBP: 00007f433e7b3090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.781494][T15997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1006.781507][T15997] R13: 0000000000000000 R14: 00007f433dbb6160 R15: 00007ffebc58f708 [ 1006.781542][T15997] [ 1007.087399][ T8986] usb 7-1: Using ep0 maxpacket: 8 [ 1007.099727][ T8986] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1007.123416][ T8986] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.141401][ T8986] usb 7-1: Product: syz [ 1007.145836][ T8986] usb 7-1: Manufacturer: syz [ 1007.147792][ T8992] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1007.153496][ T8986] usb 7-1: SerialNumber: syz [ 1007.174456][ T8986] usb 7-1: config 0 descriptor?? [ 1007.186272][ T8986] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1007.220752][T15999] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1007.297007][ T8992] usb 2-1: device descriptor read/64, error -71 [ 1007.379017][ T5904] usb 6-1: USB disconnect, device number 43 [ 1007.441730][ T8992] usb usb2-port1: attempt power cycle [ 1007.533645][T16003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2723'. [ 1007.577678][ T43] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1007.750686][ T43] usb 1-1: config 0 has an invalid interface number: 187 but max is 0 [ 1007.774925][ T43] usb 1-1: config 0 has no interface number 0 [ 1007.797596][ T43] usb 1-1: config 0 interface 187 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1007.830402][ T43] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 1007.877748][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.897337][ T8992] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1007.901309][ T43] usb 1-1: Product: syz [ 1007.936703][ T8992] usb 2-1: device descriptor read/8, error -71 [ 1008.177579][ T8992] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1008.346479][ T8992] usb 2-1: device descriptor read/8, error -71 [ 1008.628166][ T8992] usb usb2-port1: unable to enumerate USB device [ 1008.720261][ T8986] gspca_sonixj: reg_r err -71 [ 1008.725108][ T8986] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 1008.732983][ T43] usb 1-1: Manufacturer: syz [ 1008.750022][ T43] usb 1-1: SerialNumber: syz [ 1008.757091][ T8986] usb 7-1: USB disconnect, device number 14 [ 1008.778690][ T43] usb 1-1: config 0 descriptor?? [ 1008.784581][T16001] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1009.028635][ T8986] usb 1-1: USB disconnect, device number 76 [ 1010.120536][T16028] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2732'. [ 1010.367877][T16032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2735'. [ 1010.717331][ T8987] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1010.742012][T16040] FAULT_INJECTION: forcing a failure. [ 1010.742012][T16040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.823343][T16040] CPU: 0 UID: 0 PID: 16040 Comm: syz.5.2737 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 1010.823378][T16040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1010.823393][T16040] Call Trace: [ 1010.823402][T16040] [ 1010.823413][T16040] dump_stack_lvl+0x189/0x250 [ 1010.823453][T16040] ? __pfx____ratelimit+0x10/0x10 [ 1010.823484][T16040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1010.823518][T16040] ? __pfx__printk+0x10/0x10 [ 1010.823540][T16040] ? __might_fault+0xb0/0x130 [ 1010.823580][T16040] should_fail_ex+0x414/0x560 [ 1010.823613][T16040] _copy_from_user+0x2d/0xb0 [ 1010.823648][T16040] memdup_user+0x5e/0xd0 [ 1010.823682][T16040] con_font_op+0x9dd/0x1070 [ 1010.823729][T16040] ? __pfx_con_font_op+0x10/0x10 [ 1010.823769][T16040] ? __might_fault+0xb0/0x130 [ 1010.823833][T16040] vt_ioctl+0x1a8a/0x1f00 [ 1010.823870][T16040] ? __pfx_vt_ioctl+0x10/0x10 [ 1010.823895][T16040] ? __asan_memset+0x22/0x50 [ 1010.823917][T16040] ? smack_file_ioctl+0x24a/0x340 [ 1010.823962][T16040] ? __fget_files+0x3a0/0x420 [ 1010.823991][T16040] ? __fget_files+0x2a/0x420 [ 1010.824023][T16040] tty_ioctl+0x929/0xde0 [ 1010.824059][T16040] ? __pfx_tty_ioctl+0x10/0x10 [ 1010.824092][T16040] __se_sys_ioctl+0xf9/0x170 [ 1010.824119][T16040] do_syscall_64+0xfa/0x3b0 [ 1010.824151][T16040] ? lockdep_hardirqs_on+0x9c/0x150 [ 1010.824182][T16040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.824205][T16040] ? clear_bhb_loop+0x60/0xb0 [ 1010.824232][T16040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.824255][T16040] RIP: 0033:0x7f0f8158e929 [ 1010.824275][T16040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1010.824296][T16040] RSP: 002b:00007f0f824d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1010.824320][T16040] RAX: ffffffffffffffda RBX: 00007f0f817b5fa0 RCX: 00007f0f8158e929 [ 1010.824338][T16040] RDX: 0000200000000080 RSI: 0000000000004b72 RDI: 0000000000000003 [ 1010.824353][T16040] RBP: 00007f0f824d1090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.824371][T16040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.824386][T16040] R13: 0000000000000000 R14: 00007f0f817b5fa0 R15: 00007ffc978aee68 [ 1010.824420][T16040] [ 1011.060006][T16043] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1011.067229][T16043] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1011.145637][ T8987] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.156610][ T8987] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1011.166399][ T8987] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1011.175611][ T8987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.206628][ T8987] usb 3-1: config 0 descriptor?? [ 1012.675062][T14874] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1012.686344][T14874] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1012.695961][T14874] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1012.706392][T14874] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1012.716781][T14874] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1012.815589][ T7369] syz_tun (unregistering): left allmulticast mode [ 1012.827122][ T7369] syz_tun (unregistering): left promiscuous mode [ 1012.833841][ T7369] bridge0: port 3(syz_tun) entered disabled state [ 1012.984879][T16060] lo speed is unknown, defaulting to 1000 [ 1012.992959][T16060] vcan0 speed is unknown, defaulting to 1000 [ 1013.654370][T13746] usb 3-1: USB disconnect, device number 56 [ 1014.446797][T16079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2746'. [ 1014.653675][T16060] chnl_net:caif_netlink_parms(): no params data found [ 1014.717307][T13746] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1014.799327][T14874] Bluetooth: hci0: command tx timeout [ 1014.869452][T13746] usb 3-1: Using ep0 maxpacket: 16 [ 1014.889135][T13746] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 1014.910115][T13746] usb 3-1: config 0 has no interface number 0 [ 1014.916829][T13746] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 1014.938435][T13746] usb 3-1: config 0 interface 35 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 1014.950068][T16091] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0 [ 1014.966392][T13746] usb 3-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 1014.984253][T13746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.094696][T13746] usb 3-1: Product: syz [ 1015.121391][T13746] usb 3-1: Manufacturer: syz [ 1015.167310][T13746] usb 3-1: SerialNumber: syz [ 1015.239174][T16060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.266240][T16060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.292421][T13746] usb 3-1: config 0 descriptor?? [ 1015.301305][T16060] bridge_slave_0: entered allmulticast mode [ 1015.334310][ T30] kauditd_printk_skb: 68 callbacks suppressed [ 1015.334330][ T30] audit: type=1326 audit(1751226273.655:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16100 comm="syz.5.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8158e929 code=0x7ffc0000 [ 1015.368003][T16060] bridge_slave_0: entered promiscuous mode [ 1015.394746][T16060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.690393][T16060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.713340][T16060] bridge_slave_1: entered allmulticast mode [ 1016.118950][ T30] audit: type=1326 audit(1751226273.695:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16100 comm="syz.5.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8158e929 code=0x7ffc0000 [ 1016.151606][T13746] cypress_m8 3-1:0.35: Nokia CA-42 V2 Adapter converter detected [ 1016.238149][T16060] bridge_slave_1: entered promiscuous mode [ 1016.372043][ T30] audit: type=1326 audit(1751226273.705:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16100 comm="syz.5.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0f8158d290 code=0x7ffc0000 [ 1016.406701][ T30] audit: type=1326 audit(1751226273.705:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16100 comm="syz.5.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0f81590157 code=0x7ffc0000 [ 1016.435274][T13746] usb 3-1: Nokia CA-42 V2 Adapter converter now attached to ttyUSB0 [ 1016.466267][T13746] usb 3-1: USB disconnect, device number 57 [ 1016.492599][ T30] audit: type=1326 audit(1751226273.705:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16100 comm="syz.5.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0f8158e929 code=0x7ffc0000 [ 1016.522889][T13746] nokiaca42v2 ttyUSB0: Nokia CA-42 V2 Adapter converter now disconnected from ttyUSB0 [ 1016.533920][T13746] cypress_m8 3-1:0.35: device disconnected [ 1016.540300][ T30] audit: type=1326 audit(1751226273.705:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16100 comm="syz.5.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f0f81590157 code=0x7ffc0000 [ 1016.616022][T16060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.661663][ T30] audit: type=1326 audit(1751226273.705:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16100 comm="syz.5.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f0f8158d58a code=0x7ffc0000 [ 1016.695326][T16060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.701141][ T8992] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1016.723366][ T30] audit: type=1326 audit(1751226273.705:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16100 comm="syz.5.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8158e929 code=0x7ffc0000 [ 1016.748637][ T30] audit: type=1326 audit(1751226273.705:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16100 comm="syz.5.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f8158e929 code=0x7ffc0000 [ 1016.804720][ T30] audit: type=1326 audit(1751226273.715:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16100 comm="syz.5.2753" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0f8158e929 code=0x7ffc0000 [ 1016.836033][T16060] team0: Port device team_slave_0 added [ 1016.847077][T16060] team0: Port device team_slave_1 added [ 1016.878519][T14874] Bluetooth: hci0: command tx timeout [ 1016.893508][ T8992] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.904734][ T8992] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1016.915693][ T8992] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1016.930653][T16060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.935297][ T8992] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.947265][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.998191][ T8992] usb 7-1: config 0 descriptor?? [ 1017.024986][T16060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1017.045865][T16060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1017.053512][T16060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.089552][T16060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.147963][ T8986] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1017.206005][T16060] hsr_slave_0: entered promiscuous mode [ 1017.222310][T16060] hsr_slave_1: entered promiscuous mode [ 1017.381868][ T8986] usb 2-1: Using ep0 maxpacket: 32 [ 1017.389034][T16060] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1017.437398][T16060] Cannot create hsr debugfs directory [ 1017.446256][ T8986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1017.467471][ T8986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.500996][ T8986] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 1017.525445][ T8986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.546829][ T8986] usb 2-1: config 0 descriptor?? [ 1017.783533][T16129] Bluetooth: MGMT ver 1.23 [ 1017.968997][ T8986] macally 0003:060B:0001.0012: unknown main item tag 0x0 [ 1017.976136][ T8986] macally 0003:060B:0001.0012: unknown main item tag 0x0 [ 1017.986650][ T8986] macally 0003:060B:0001.0012: unknown main item tag 0x0 [ 1017.995028][ T8986] macally 0003:060B:0001.0012: unknown main item tag 0x0 [ 1018.034102][ T8986] macally 0003:060B:0001.0012: hidraw0: USB HID vff.ff Device [HID 060b:0001] on usb-dummy_hcd.1-1/input0 [ 1018.153217][T16060] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1018.170985][T16115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1018.180034][T16115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1018.203961][T16060] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.346265][T16060] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1018.358297][T16060] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.463592][T16060] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1018.475436][T16060] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.617768][T16060] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1018.628476][T16060] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.801069][T16060] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1018.813282][T16060] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1018.828265][T16060] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1018.840846][T16060] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1018.958598][T14874] Bluetooth: hci0: command tx timeout [ 1018.988121][T16060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1019.100116][T16060] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.181331][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.188590][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.244227][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.251512][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.412349][T13746] usb 7-1: USB disconnect, device number 15 [ 1019.815101][ T8986] usb 2-1: USB disconnect, device number 86 [ 1020.141451][T16060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1020.249732][T16060] veth0_vlan: entered promiscuous mode [ 1020.282997][T16060] veth1_vlan: entered promiscuous mode [ 1020.328271][ T8986] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1020.376081][T16060] veth0_macvtap: entered promiscuous mode [ 1020.389579][T16060] veth1_macvtap: entered promiscuous mode [ 1020.430844][T16060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1020.455839][T16060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1020.485051][T16060] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.495604][ T8986] usb 2-1: Using ep0 maxpacket: 8 [ 1020.526125][ T8986] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1020.568979][ T8986] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1020.588323][T16060] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.602982][ T8986] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1020.616675][T16060] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.666947][ T8986] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1020.680708][T16060] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1020.737012][ T8986] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1020.793621][ T8986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1020.877045][T16166] FAULT_INJECTION: forcing a failure. [ 1020.877045][T16166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.965787][T16166] CPU: 0 UID: 0 PID: 16166 Comm: syz.5.2767 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 1020.965820][T16166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1020.965835][T16166] Call Trace: [ 1020.965845][T16166] [ 1020.965857][T16166] dump_stack_lvl+0x189/0x250 [ 1020.965896][T16166] ? __pfx____ratelimit+0x10/0x10 [ 1020.965928][T16166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1020.965960][T16166] ? __pfx__printk+0x10/0x10 [ 1020.965983][T16166] ? __might_fault+0xb0/0x130 [ 1020.966023][T16166] should_fail_ex+0x414/0x560 [ 1020.966055][T16166] _copy_from_user+0x2d/0xb0 [ 1020.966090][T16166] kstrtouint_from_user+0xc4/0x170 [ 1020.966123][T16166] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1020.966171][T16166] proc_fail_nth_write+0x88/0x240 [ 1020.966224][T16166] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1020.966263][T16166] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1020.966297][T16166] vfs_write+0x27e/0xa90 [ 1020.966334][T16166] ? __pfx_vfs_write+0x10/0x10 [ 1020.966362][T16166] ? __fget_files+0x2a/0x420 [ 1020.966396][T16166] ? __fget_files+0x3a0/0x420 [ 1020.966424][T16166] ? __fget_files+0x2a/0x420 [ 1020.966464][T16166] ksys_write+0x145/0x250 [ 1020.966488][T16166] ? __fget_files+0x3a0/0x420 [ 1020.966519][T16166] ? __pfx_ksys_write+0x10/0x10 [ 1020.966551][T16166] ? do_syscall_64+0xbe/0x3b0 [ 1020.966588][T16166] do_syscall_64+0xfa/0x3b0 [ 1020.966619][T16166] ? lockdep_hardirqs_on+0x9c/0x150 [ 1020.966650][T16166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.966673][T16166] ? clear_bhb_loop+0x60/0xb0 [ 1020.966700][T16166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.966724][T16166] RIP: 0033:0x7f0f8158d3df [ 1020.966743][T16166] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1020.966764][T16166] RSP: 002b:00007f0f824b0030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1020.966788][T16166] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0f8158d3df [ 1020.966804][T16166] RDX: 0000000000000001 RSI: 00007f0f824b00a0 RDI: 0000000000000005 [ 1020.966818][T16166] RBP: 00007f0f824b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.966833][T16166] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1020.966847][T16166] R13: 0000000000000000 R14: 00007f0f817b6080 R15: 00007ffc978aee68 [ 1020.966903][T16166] [ 1021.078026][T14874] Bluetooth: hci0: command tx timeout [ 1021.248797][ T8986] usb 2-1: GET_CAPABILITIES returned 0 [ 1021.254507][ T8986] usbtmc 2-1:16.0: can't read capabilities [ 1021.475854][ T3510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.520236][ T3510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.764028][ T3510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.774475][ T3510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.780948][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1021.836715][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1021.845913][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1021.855093][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1021.874022][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1021.883474][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1021.892573][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1021.901747][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1021.910832][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1021.919938][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1022.019365][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1022.028727][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1022.037837][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1022.051696][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1022.060819][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1022.069932][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -2 [ 1022.817407][ T43] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1023.583257][T12581] usb 2-1: USB disconnect, device number 87 [ 1023.767389][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 1023.776819][ T43] usb 7-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1023.790336][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.804054][ T43] usb 7-1: Product: syz [ 1023.814148][ T43] usb 7-1: Manufacturer: syz [ 1023.824057][ T43] usb 7-1: SerialNumber: syz [ 1023.849367][ T43] usb 7-1: config 0 descriptor?? [ 1023.869905][ T43] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1024.193665][T16196] overlayfs: missing 'lowerdir' [ 1024.896983][ T43] gspca_sonixj: reg_r err -71 [ 1024.925272][ T43] sonixj 7-1:0.0: probe with driver sonixj failed with error -71 [ 1025.022076][ T43] usb 7-1: USB disconnect, device number 16 [ 1025.730212][T14874] Bluetooth: hci0: SCO packet for unknown connection handle 2096 [ 1028.817362][ T8992] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1029.020074][T16254] overlayfs: missing 'lowerdir' [ 1029.025133][ T8992] usb 1-1: Using ep0 maxpacket: 8 [ 1029.044182][ T8992] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1029.062519][ T8992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1029.079536][ T8992] usb 1-1: Product: syz [ 1029.083870][ T8992] usb 1-1: Manufacturer: syz [ 1029.098658][ T8992] usb 1-1: SerialNumber: syz [ 1029.118772][ T8992] usb 1-1: config 0 descriptor?? [ 1029.131369][ T8992] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1029.760111][ T8992] gspca_sonixj: reg_w1 err -110 [ 1029.765150][ T8992] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 1030.227864][ T43] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1030.397742][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 1030.417832][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1030.436179][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1030.457140][ T43] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1030.483950][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.515014][ T43] usb 7-1: config 0 descriptor?? [ 1030.956687][ T43] savu 0003:1E7D:2D5A.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0 [ 1031.157412][T16264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1031.167468][T13062] usb 2-1: new full-speed USB device number 88 using dummy_hcd [ 1031.209307][T16264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.288539][ T43] usb 7-1: USB disconnect, device number 17 [ 1031.355515][T13062] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1031.385026][T13062] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1031.405592][T13062] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1031.425282][T13062] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.438133][T13062] usb 2-1: Product: syz [ 1031.442458][T13062] usb 2-1: Manufacturer: syz [ 1031.448646][T13062] usb 2-1: SerialNumber: syz [ 1032.016446][ T8992] usb 1-1: USB disconnect, device number 77 [ 1032.180137][T16281] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2801'. [ 1032.234446][T13062] usb 2-1: 0:2 : does not exist [ 1032.265827][T16281] bridge0: entered promiscuous mode [ 1032.272244][T16281] macsec1: entered allmulticast mode [ 1032.290423][T16281] bridge0: entered allmulticast mode [ 1032.297962][T16281] bridge0: port 3(macsec1) entered blocking state [ 1032.305394][T16281] bridge0: port 3(macsec1) entered disabled state [ 1032.479185][T13062] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1032.493050][T16281] bridge0: left allmulticast mode [ 1032.504780][T16281] bridge0: left promiscuous mode [ 1032.545577][T13062] usb 2-1: USB disconnect, device number 88 [ 1033.236989][T14687] udevd[14687]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1035.048050][T13062] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1035.141565][T16313] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2811'. [ 1035.182286][T16313] hub 8-0:1.0: USB hub found [ 1035.191093][T16313] hub 8-0:1.0: 1 port detected [ 1035.877485][ T8992] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1036.047565][ T8992] usb 6-1: Using ep0 maxpacket: 8 [ 1036.059903][ T8992] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1036.075230][ T8992] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1036.088877][ T8992] usb 6-1: Product: syz [ 1036.107249][ T8992] usb 6-1: Manufacturer: syz [ 1036.112012][ T8992] usb 6-1: SerialNumber: syz [ 1036.156424][ T8992] usb 6-1: config 0 descriptor?? [ 1036.167300][T13062] usb 1-1: Using ep0 maxpacket: 32 [ 1036.176075][T13062] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1036.180850][ T8992] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1036.184652][T13062] usb 1-1: can't read configurations, error -61 [ 1036.327536][T13062] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1036.495734][T16321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2814'. [ 1036.514312][T13062] usb 1-1: Using ep0 maxpacket: 32 [ 1036.522658][T13062] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1036.530652][T13062] usb 1-1: can't read configurations, error -61 [ 1036.537858][T13062] usb usb1-port1: attempt power cycle [ 1036.877511][T13062] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1036.939666][T13062] usb 1-1: Using ep0 maxpacket: 32 [ 1036.950059][T13062] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1036.961396][T13062] usb 1-1: can't read configurations, error -61 [ 1037.074985][ T8992] gspca_sonixj: reg_r err -71 [ 1037.079872][ T8992] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 1037.177428][ T8992] usb 6-1: USB disconnect, device number 44 [ 1037.197407][T13062] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1037.237903][T13062] usb 1-1: Using ep0 maxpacket: 32 [ 1037.255166][T13062] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1037.282921][T13062] usb 1-1: can't read configurations, error -61 [ 1037.304456][T13062] usb usb1-port1: unable to enumerate USB device [ 1037.678119][ T5828] Bluetooth: hci4: command 0x1003 tx timeout [ 1037.684801][T14874] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1038.593383][T16340] input: syz0 as /devices/virtual/input/input14 [ 1039.499611][T16343] lo speed is unknown, defaulting to 1000 [ 1039.747622][T16343] vcan0 speed is unknown, defaulting to 1000 [ 1040.567504][ T43] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1040.800240][T16364] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1040.838583][ T43] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 1040.879661][ T43] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1040.978206][ T43] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 1041.017307][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.040088][ T43] usb 6-1: Product: syz [ 1041.044562][ T43] usb 6-1: Manufacturer: syz [ 1041.064643][ T43] usb 6-1: SerialNumber: syz [ 1041.098683][ T43] usb 6-1: config 0 descriptor?? [ 1041.110654][T16356] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1041.145021][T16356] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1041.485438][T16356] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1041.492982][T16356] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1041.627271][ T8987] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1041.818545][ T8987] usb 3-1: Using ep0 maxpacket: 8 [ 1041.904396][ T8987] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1041.917717][ T43] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 1042.012550][ T8987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1042.098859][ T8987] usb 3-1: Product: syz [ 1042.174620][ T8987] usb 3-1: Manufacturer: syz [ 1042.238315][ T8987] usb 3-1: SerialNumber: syz [ 1042.320909][ T8987] usb 3-1: config 0 descriptor?? [ 1042.381462][ T8987] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1042.610930][T16412] nfs: Unknown parameter 'ntext' [ 1043.200728][ T8987] gspca_sonixj: reg_r err -71 [ 1043.240995][ T8987] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1043.416842][ T8987] usb 3-1: USB disconnect, device number 58 [ 1043.486466][ T43] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 1043.530429][ T43] usb 6-1: USB disconnect, device number 45 [ 1044.109460][T16421] overlayfs: missing 'lowerdir' [ 1045.493269][ T8992] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1046.460139][T16435] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2836'. [ 1046.548644][ T8992] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1046.612479][ T8992] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1046.666197][ T8992] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1046.692030][ T8992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.725417][T16426] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1046.780176][ T8992] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1046.823707][T16447] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1047.013011][ T8992] usb 6-1: USB disconnect, device number 46 [ 1047.198135][T16425] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2833'. [ 1047.414635][T16456] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1047.461058][T16453] lo speed is unknown, defaulting to 1000 [ 1047.529101][T16453] vcan0 speed is unknown, defaulting to 1000 [ 1048.277620][T16490] dlm: no locking on control device [ 1048.972601][T16496] overlayfs: missing 'lowerdir' [ 1050.445265][T16516] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1050.601707][T13062] IPVS: starting estimator thread 0... [ 1050.707518][T16522] IPVS: using max 25 ests per chain, 60000 per kthread [ 1052.157990][T12581] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1052.274080][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2858'. [ 1052.434035][T12581] usb 1-1: Using ep0 maxpacket: 16 [ 1052.568719][T12581] usb 1-1: device descriptor read/all, error -71 [ 1052.580146][T14874] Bluetooth: hci5: ACL packet for unknown connection handle 4041 [ 1052.632797][T16548] sctp: [Deprecated]: syz.6.2859 (pid 16548) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1052.632797][T16548] Use struct sctp_sack_info instead [ 1053.217394][T12581] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1054.106865][T12581] usb 1-1: Using ep0 maxpacket: 8 [ 1054.318950][T12581] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1054.328124][T12581] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.336995][T12581] usb 1-1: Product: syz [ 1054.344484][T12581] usb 1-1: Manufacturer: syz [ 1054.404401][T12581] usb 1-1: SerialNumber: syz [ 1054.487003][T12581] usb 1-1: config 0 descriptor?? [ 1054.528758][T12581] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1055.323747][T12581] gspca_sonixj: reg_r err -71 [ 1055.323830][T12581] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 1055.325587][T12581] usb 1-1: USB disconnect, device number 83 [ 1055.767287][T12581] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1055.987276][T12581] usb 2-1: Using ep0 maxpacket: 32 [ 1056.028486][T12581] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1056.087620][T12581] usb 2-1: config 224 has an invalid interface number: 244 but max is 0 [ 1056.136851][T12581] usb 2-1: config 224 has no interface number 0 [ 1056.167315][T12581] usb 2-1: config 224 interface 244 altsetting 4 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 1056.237229][T12581] usb 2-1: config 224 interface 244 has no altsetting 0 [ 1056.333317][T12581] usb 2-1: New USB device found, idVendor=0b95, idProduct=1780, bcdDevice=f6.7a [ 1056.387254][T12581] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.421247][T12581] usb 2-1: Product: syz [ 1056.425555][T12581] usb 2-1: Manufacturer: syz [ 1056.497285][T12581] usb 2-1: SerialNumber: syz [ 1056.547378][ T5904] usb 1-1: new full-speed USB device number 84 using dummy_hcd [ 1056.767524][ T5904] usb 1-1: config 8 has an invalid interface number: 250 but max is 0 [ 1056.796464][ T5904] usb 1-1: config 8 has no interface number 0 [ 1056.837134][ T5904] usb 1-1: config 8 interface 250 has no altsetting 0 [ 1056.894928][ T5904] usb 1-1: New USB device found, idVendor=0545, idProduct=8333, bcdDevice=8f.86 [ 1056.931278][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.977372][ T5904] usb 1-1: Product: syz [ 1057.017223][ T5904] usb 1-1: Manufacturer: syz [ 1057.057205][ T5904] usb 1-1: SerialNumber: syz [ 1057.408934][ T5904] gspca_main: tv8532-2.14.0 probing 0545:8333 [ 1057.446532][T16596] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2872'. [ 1057.937102][ T5904] usb 1-1: USB disconnect, device number 84 [ 1058.887438][T12581] asix 2-1:224.244 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1058.933419][T12581] asix 2-1:224.244: probe with driver asix failed with error -71 [ 1059.004802][T12581] usb 2-1: USB disconnect, device number 89 [ 1059.337353][ T8992] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1059.507698][ T8992] usb 1-1: Using ep0 maxpacket: 8 [ 1059.520940][ T8992] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1059.536276][ T8992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.541555][T16625] binder: 16624:16625 ioctl 541c 200000000c00 returned -22 [ 1059.555752][ T8992] usb 1-1: Product: syz [ 1059.561373][ T8992] usb 1-1: Manufacturer: syz [ 1059.566209][ T8992] usb 1-1: SerialNumber: syz [ 1059.586834][ T8992] usb 1-1: config 0 descriptor?? [ 1059.617754][ T8992] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1059.762645][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.947572][ T8992] gspca_sonixj: reg_r err -110 [ 1060.952648][ T8992] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 1061.639924][T16646] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1061.760464][ T5904] usb 1-1: USB disconnect, device number 85 [ 1061.783044][T16648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2889'. [ 1062.109910][T16655] overlayfs: failed to resolve './file1': -2 [ 1062.427968][T13062] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1063.201136][T16658] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2891'. [ 1063.247467][T13062] usb 6-1: device descriptor read/64, error -71 [ 1063.578171][T13062] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1063.717551][T13062] usb 6-1: device descriptor read/64, error -71 [ 1063.812647][T16670] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2893'. [ 1063.838488][T13062] usb usb6-port1: attempt power cycle [ 1064.303207][T16678] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 1064.483866][T13062] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1064.589093][T13062] usb 6-1: device descriptor read/8, error -71 [ 1067.047414][T13062] usb 7-1: new full-speed USB device number 18 using dummy_hcd [ 1067.933595][T13062] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1067.942644][T16717] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2905'. [ 1068.067514][ T8986] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1068.085982][T13062] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1068.161150][T13062] usb 7-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 1068.204605][T13062] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.298829][ T8986] usb 3-1: Using ep0 maxpacket: 8 [ 1068.369976][T13062] usb 7-1: config 0 descriptor?? [ 1068.404913][ T8986] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1068.474544][ T8986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1068.540894][ T8986] usb 3-1: Product: syz [ 1068.555759][ T8986] usb 3-1: Manufacturer: syz [ 1068.571662][ T8986] usb 3-1: SerialNumber: syz [ 1068.604229][ T8986] usb 3-1: config 0 descriptor?? [ 1068.655244][ T8986] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1068.862414][T13062] logitech-hidpp-device 0003:046D:C262.0014: item fetching failed at offset 0/3 [ 1068.884114][T13062] logitech-hidpp-device 0003:046D:C262.0014: hidpp_probe:parse failed [ 1068.896373][T13062] logitech-hidpp-device 0003:046D:C262.0014: probe with driver logitech-hidpp-device failed with error -22 [ 1069.376965][T16728] overlayfs: failed to resolve './file1': -2 [ 1069.583858][ T8986] gspca_sonixj: reg_w1 err -110 [ 1070.180571][ T8986] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 1070.577546][ T8987] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1070.608472][ T8992] usb 3-1: USB disconnect, device number 59 [ 1070.957963][ T8987] usb 1-1: device descriptor read/64, error -71 [ 1071.457456][ T8987] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1071.482707][T12581] usb 7-1: USB disconnect, device number 18 [ 1071.777450][ T8987] usb 1-1: device descriptor read/64, error -71 [ 1071.888533][ T8987] usb usb1-port1: attempt power cycle [ 1073.404212][ T8986] usb 3-1: new low-speed USB device number 60 using dummy_hcd [ 1073.645243][T16768] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2919'. [ 1073.713785][ T8986] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1073.747379][ T8986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.913751][T16771] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2920'. [ 1073.957598][ T8986] usb 3-1: config 0 descriptor?? [ 1074.381865][ T8986] asix 3-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1074.980548][T16783] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2921'. [ 1074.996918][T16782] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2923'. [ 1076.766175][ T8986] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1076.932494][ T8986] asix 3-1:0.0: probe with driver asix failed with error -61 [ 1077.073314][ T8987] usb 3-1: USB disconnect, device number 60 [ 1077.167813][T16795] input: syz0 as /devices/virtual/input/input15 [ 1078.126646][T16811] overlayfs: failed to resolve './file0': -2 [ 1078.457430][ T5904] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1078.478706][T16814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2932'. [ 1079.361519][ T5904] usb 3-1: device descriptor read/64, error -71 [ 1079.738030][ T5904] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1079.906443][T16825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2935'. [ 1079.907398][ T5904] usb 3-1: device descriptor read/64, error -71 [ 1080.051994][T16828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2936'. [ 1080.141064][ T5904] usb usb3-port1: attempt power cycle [ 1081.001321][T13746] lo speed is unknown, defaulting to 1000 [ 1081.713273][T16847] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1081.725529][T16847] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1082.443998][T16851] overlayfs: failed to resolve './file0': -2 [ 1083.340395][T16856] overlayfs: failed to resolve './file0': -2 [ 1083.383011][T16858] IPVS: length: 19 != 8 [ 1083.399162][T16853] overlayfs: missing 'lowerdir' [ 1083.600073][T16862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2945'. [ 1084.018476][ T5904] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1084.146380][T16872] overlayfs: failed to resolve './file1': -2 [ 1084.297089][ T5904] usb 2-1: config 0 has no interfaces? [ 1084.358590][ T5904] usb 2-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1084.464809][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1084.513037][ T8986] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1084.625195][ T5904] usb 2-1: config 0 descriptor?? [ 1084.748021][ T8986] usb 3-1: device descriptor read/64, error -71 [ 1085.296449][ T8986] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1085.441101][ T8986] usb 3-1: device descriptor read/64, error -71 [ 1085.483517][T16879] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2951'. [ 1085.617522][ T8986] usb usb3-port1: attempt power cycle [ 1085.692257][T16887] xt_NFQUEUE: number of total queues is 0 [ 1085.999861][ T8986] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1086.031614][ T8986] usb 3-1: device descriptor read/8, error -71 [ 1086.288242][ T8986] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1086.334525][ T8986] usb 3-1: device descriptor read/8, error -71 [ 1086.456591][ T8986] usb usb3-port1: unable to enumerate USB device [ 1086.675313][ T8987] usb 2-1: USB disconnect, device number 90 [ 1086.929513][T16901] IPVS: length: 19 != 8 [ 1086.998535][ T8986] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1087.323528][ T8986] usb 6-1: Using ep0 maxpacket: 8 [ 1087.337706][T16907] overlayfs: missing 'lowerdir' [ 1087.916893][T16909] batman_adv: batadv: cannot create tp meter kthread [ 1088.120373][ T8986] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1088.566465][ T8986] usb 6-1: config 11 has an invalid interface number: 244 but max is 0 [ 1088.617229][ T8986] usb 6-1: config 11 has no interface number 0 [ 1088.633786][ T8986] usb 6-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1088.653284][ T8986] usb 6-1: config 11 interface 244 has no altsetting 0 [ 1088.715007][ T8986] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 1088.737931][ T8986] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.766736][ T8986] usb 6-1: Product: syz [ 1088.786274][ T8986] usb 6-1: Manufacturer: syz [ 1088.829222][ T8986] usb 6-1: SerialNumber: syz [ 1089.022012][T16915] netlink: 1908 bytes leftover after parsing attributes in process `syz.2.2965'. [ 1090.028124][ T8986] usb 6-1: USB disconnect, device number 51 [ 1090.362702][T16925] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2966'. [ 1090.959934][T16930] binder: 16929:16930 unknown command 0 [ 1090.965693][T16930] binder: 16929:16930 ioctl c0306201 200000000c40 returned -22 [ 1091.926923][T16946] overlayfs: failed to resolve './file1': -2 [ 1093.297391][ T8986] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1093.437332][ T8986] usb 6-1: device descriptor read/64, error -71 [ 1093.503573][T16950] overlayfs: missing 'lowerdir' [ 1093.528257][ T43] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1093.698467][ T8986] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1093.717607][ T43] usb 7-1: Using ep0 maxpacket: 16 [ 1093.742696][ T43] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1093.867692][ T43] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1093.914793][ T8986] usb 6-1: device descriptor read/64, error -71 [ 1094.919765][ T43] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1094.947283][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.955396][ T43] usb 7-1: Product: syz [ 1094.967234][ T43] usb 7-1: Manufacturer: syz [ 1094.976739][ T43] usb 7-1: SerialNumber: syz [ 1095.000886][ T43] usb 7-1: config 0 descriptor?? [ 1095.017869][ T8986] usb usb6-port1: attempt power cycle [ 1095.039901][ T43] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1095.064726][ T43] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1095.075977][T16968] IPVS: length: 19 != 8 [ 1095.487575][ T8987] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1095.627333][ T43] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1095.652145][ T43] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1095.657315][ T8987] usb 3-1: Using ep0 maxpacket: 16 [ 1095.908615][ T8987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1095.920477][ T8987] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1095.930151][ T8987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.963748][ T8987] usb 3-1: config 0 descriptor?? [ 1096.431095][ T43] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 1096.646848][ T43] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 1096.701790][ T43] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 1096.739061][ T43] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 1096.760345][ T43] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 1096.793937][ T43] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 1096.845538][ T43] usb 7-1: USB disconnect, device number 19 [ 1097.927740][T16994] FAULT_INJECTION: forcing a failure. [ 1097.927740][T16994] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.943644][T16994] CPU: 0 UID: 0 PID: 16994 Comm: syz.0.2989 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 1097.943682][T16994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1097.943697][T16994] Call Trace: [ 1097.943707][T16994] [ 1097.943718][T16994] dump_stack_lvl+0x189/0x250 [ 1097.943757][T16994] ? __pfx____ratelimit+0x10/0x10 [ 1097.943789][T16994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1097.943822][T16994] ? __pfx__printk+0x10/0x10 [ 1097.943852][T16994] ? __pfx___might_resched+0x10/0x10 [ 1097.943890][T16994] should_fail_ex+0x414/0x560 [ 1097.943921][T16994] should_failslab+0xa8/0x100 [ 1097.943952][T16994] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1097.943980][T16994] ? ethnl_bitset32_size+0x3a/0x280 [ 1097.944005][T16994] ? __alloc_skb+0x112/0x2d0 [ 1097.944033][T16994] __alloc_skb+0x112/0x2d0 [ 1097.944059][T16994] ethnl_default_notify+0x4a4/0x990 [ 1097.944093][T16994] ? __pfx_ethnl_default_notify+0x10/0x10 [ 1097.944129][T16994] ? trace_kmalloc+0x1f/0xd0 [ 1097.944152][T16994] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1097.944184][T16994] ? mutex_is_locked+0x17/0x50 [ 1097.944216][T16994] ? rtnl_is_locked+0x15/0x20 [ 1097.944245][T16994] ethnl_default_set_doit+0x64e/0xa20 [ 1097.944284][T16994] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1097.944316][T16994] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 1097.944357][T16994] genl_family_rcv_msg_doit+0x215/0x300 [ 1097.944397][T16994] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1097.944443][T16994] ? bpf_lsm_capable+0x9/0x20 [ 1097.944475][T16994] ? security_capable+0x7e/0x2e0 [ 1097.944515][T16994] genl_rcv_msg+0x60e/0x790 [ 1097.944552][T16994] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1097.944580][T16994] ? ref_tracker_free+0x63a/0x7d0 [ 1097.944613][T16994] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 1097.944641][T16994] ? __pfx_ref_tracker_free+0x10/0x10 [ 1097.944681][T16994] netlink_rcv_skb+0x208/0x470 [ 1097.944707][T16994] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1097.944738][T16994] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1097.944783][T16994] ? down_read+0x1ad/0x2e0 [ 1097.944808][T16994] genl_rcv+0x28/0x40 [ 1097.944834][T16994] netlink_unicast+0x75b/0x8d0 [ 1097.944883][T16994] netlink_sendmsg+0x805/0xb30 [ 1097.944919][T16994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1097.944953][T16994] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1097.944979][T16994] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1097.945005][T16994] __sock_sendmsg+0x219/0x270 [ 1097.945041][T16994] ____sys_sendmsg+0x505/0x830 [ 1097.945074][T16994] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1097.945112][T16994] ? import_iovec+0x74/0xa0 [ 1097.945150][T16994] ___sys_sendmsg+0x21f/0x2a0 [ 1097.945179][T16994] ? __pfx____sys_sendmsg+0x10/0x10 [ 1097.945248][T16994] ? __fget_files+0x2a/0x420 [ 1097.945277][T16994] ? __fget_files+0x3a0/0x420 [ 1097.945319][T16994] __x64_sys_sendmsg+0x19b/0x260 [ 1097.945348][T16994] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1097.945386][T16994] ? __pfx_ksys_write+0x10/0x10 [ 1097.945410][T16994] ? rcu_is_watching+0x15/0xb0 [ 1097.945448][T16994] ? do_syscall_64+0xbe/0x3b0 [ 1097.945486][T16994] do_syscall_64+0xfa/0x3b0 [ 1097.945516][T16994] ? lockdep_hardirqs_on+0x9c/0x150 [ 1097.945546][T16994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.945568][T16994] ? clear_bhb_loop+0x60/0xb0 [ 1097.945603][T16994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.945625][T16994] RIP: 0033:0x7f3abff8e929 [ 1097.945646][T16994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1097.945666][T16994] RSP: 002b:00007f3ac0e42038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1097.945690][T16994] RAX: ffffffffffffffda RBX: 00007f3ac01b5fa0 RCX: 00007f3abff8e929 [ 1097.945706][T16994] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 1097.945721][T16994] RBP: 00007f3ac0e42090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.945735][T16994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1097.945749][T16994] R13: 0000000000000000 R14: 00007f3ac01b5fa0 R15: 00007ffeceb11028 [ 1097.945784][T16994] [ 1098.529950][ T8987] usbhid 3-1:0.0: can't add hid device: -71 [ 1098.538700][ T8987] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1098.567902][ T8987] usb 3-1: USB disconnect, device number 68 [ 1098.858162][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1098.908096][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1098.919353][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1098.929143][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1098.936984][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1099.062671][T17001] lo speed is unknown, defaulting to 1000 [ 1099.122636][T17001] vcan0 speed is unknown, defaulting to 1000 [ 1101.072812][T14874] Bluetooth: hci4: command tx timeout [ 1101.471622][T17032] IPVS: length: 19 != 8 [ 1102.064230][T17048] IPv6: addrconf: prefix option has invalid lifetime [ 1102.144451][T17001] chnl_net:caif_netlink_parms(): no params data found [ 1102.191893][T17052] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1102.429216][T17001] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.438479][T17001] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.445812][T17001] bridge_slave_0: entered allmulticast mode [ 1102.453994][T17001] bridge_slave_0: entered promiscuous mode [ 1102.470756][T17001] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.484059][T17001] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.491541][T17001] bridge_slave_1: entered allmulticast mode [ 1102.508583][T17001] bridge_slave_1: entered promiscuous mode [ 1102.661032][T17001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1103.090123][T17001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1103.117632][T14874] Bluetooth: hci4: command tx timeout [ 1103.738594][T17001] team0: Port device team_slave_0 added [ 1103.769779][T17001] team0: Port device team_slave_1 added [ 1104.311977][T17001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1104.329571][T17001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.360779][T17082] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1104.482659][T17001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1104.515727][T17001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1104.747299][T17001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1104.785539][T17001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1104.800300][T17086] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1105.197504][T14874] Bluetooth: hci4: command tx timeout [ 1105.606267][T17001] hsr_slave_0: entered promiscuous mode [ 1105.615459][T17001] hsr_slave_1: entered promiscuous mode [ 1105.630604][T17001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1105.645301][T17001] Cannot create hsr debugfs directory [ 1107.977269][T14874] Bluetooth: hci4: command tx timeout [ 1108.185090][T17001] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1108.236604][T17117] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3023'. [ 1108.258473][T17118] IPVS: length: 19 != 8 [ 1108.297936][T17001] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.553513][T17001] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1109.593153][T17001] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1109.670602][T17124] hpfs: Bad magic ... probably not HPFS [ 1109.860101][T17001] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1109.909389][T17001] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1110.063852][T17001] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1110.088381][T17001] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1111.207929][T17001] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1111.291540][T17147] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3026'. [ 1111.305710][T17001] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1111.341418][T17001] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1111.396276][T17001] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1111.755031][T17001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.802794][T17001] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.826094][ T4575] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.833416][ T4575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.881611][T13888] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.888986][T13888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.779793][T17001] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1112.816543][T17001] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1113.381481][T17183] netlink: 1053 bytes leftover after parsing attributes in process `syz.0.3037'. [ 1113.761265][T17001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1113.839393][T17189] IPVS: length: 19 != 8 [ 1113.881480][T17001] veth0_vlan: entered promiscuous mode [ 1113.892171][T17191] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3040'. [ 1113.897822][T17001] veth1_vlan: entered promiscuous mode [ 1113.955046][T17001] veth0_macvtap: entered promiscuous mode [ 1113.962036][ T43] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 1113.986635][T17001] veth1_macvtap: entered promiscuous mode [ 1114.055887][T17001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1114.136905][T17001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1114.152350][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1114.185535][T17001] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.195330][ T43] usb 1-1: not running at top speed; connect to a high speed hub [ 1114.220295][T17001] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.230170][ T43] usb 1-1: config 54 has an invalid interface number: 116 but max is 0 [ 1114.257852][T17001] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.266838][ T43] usb 1-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.279909][T17001] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1114.289260][ T43] usb 1-1: config 54 has no interface number 0 [ 1114.295663][ T43] usb 1-1: config 54 interface 116 altsetting 224 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1114.328299][ T43] usb 1-1: config 54 interface 116 has no altsetting 0 [ 1114.358354][ T43] usb 1-1: New USB device found, idVendor=16d5, idProduct=6501, bcdDevice=9f.f4 [ 1114.379162][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.398935][ T43] usb 1-1: Product: syz [ 1114.406615][ T43] usb 1-1: Manufacturer: syz [ 1114.417174][ T43] usb 1-1: SerialNumber: syz [ 1114.643407][T13888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.688668][T13888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.421127][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1115.458946][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1115.959357][T17214] 9pnet_fd: Insufficient options for proto=fd [ 1115.971219][T17216] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3043'. [ 1116.079089][T17220] overlayfs: failed to resolve './file1': -2 [ 1117.498611][ T43] usb-storage 1-1:54.116: USB Mass Storage device detected [ 1118.282128][ T43] usb 1-1: USB disconnect, device number 89 [ 1119.082085][ T43] usb 1-1: new low-speed USB device number 90 using dummy_hcd [ 1119.247491][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1119.298086][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1119.311638][ T43] usb 1-1: New USB device found, idVendor=046d, idProduct=c52f, bcdDevice= 0.00 [ 1119.323828][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.349435][ T43] usb 1-1: config 0 descriptor?? [ 1119.361738][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1119.381080][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1119.392982][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1119.401891][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1119.409849][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1119.440085][ T8992] usb 3-1: new full-speed USB device number 69 using dummy_hcd [ 1119.503548][T17238] lo speed is unknown, defaulting to 1000 [ 1119.522468][T17238] vcan0 speed is unknown, defaulting to 1000 [ 1119.613393][ T8992] usb 3-1: device descriptor read/64, error -71 [ 1119.791853][ T5819] syz_tun (unregistering): left allmulticast mode [ 1119.864129][ T5819] syz_tun (unregistering): left promiscuous mode [ 1119.871220][ T5819] bridge0: port 3(syz_tun) entered disabled state [ 1120.048573][ T8992] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 1120.088435][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 1120.113941][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1120.259309][ T8992] usb 3-1: device descriptor read/64, error -71 [ 1120.265349][ T43] usb 1-1: USB disconnect, device number 90 [ 1120.291501][T17243] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3051'. [ 1120.304322][T17243] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3051'. [ 1120.404499][T17242] netlink: ct family unspecified [ 1120.409827][T17242] openvswitch: netlink: Actions may not be safe on all matching packets [ 1120.427651][ T8992] usb usb3-port1: attempt power cycle [ 1120.777636][ T8992] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 1120.827572][ T8992] usb 3-1: device descriptor read/8, error -71 [ 1121.100987][ T8992] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 1121.153069][T17258] IPVS: length: 19 != 8 [ 1121.172530][ T8992] usb 3-1: device descriptor read/8, error -71 [ 1121.214915][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.305115][ T8992] usb usb3-port1: unable to enumerate USB device [ 1121.320523][T17238] chnl_net:caif_netlink_parms(): no params data found [ 1121.487089][T17238] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.494616][T17238] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.507916][T17238] bridge_slave_0: entered allmulticast mode [ 1121.515990][T17238] bridge_slave_0: entered promiscuous mode [ 1121.523714][T14874] Bluetooth: hci3: command tx timeout [ 1121.541129][T17238] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.564870][T17238] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.580284][T17238] bridge_slave_1: entered allmulticast mode [ 1121.598082][T17238] bridge_slave_1: entered promiscuous mode [ 1121.767068][T17238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.791537][T17238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.879500][T17268] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1121.903322][T17238] team0: Port device team_slave_0 added [ 1121.924418][T17238] team0: Port device team_slave_1 added [ 1122.023917][T17238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1122.047600][T17238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1122.113379][T17238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1122.136388][T17238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1122.146573][T17271] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3057'. [ 1122.164540][T17238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1122.249173][T17238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.530390][T17278] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3060'. [ 1122.691264][T17238] hsr_slave_0: entered promiscuous mode [ 1122.734809][T17238] hsr_slave_1: entered promiscuous mode [ 1122.758461][T17238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1122.782733][T17238] Cannot create hsr debugfs directory [ 1122.886410][T17287] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1122.893750][T17287] IPv6: NLM_F_CREATE should be set when creating new route [ 1122.901043][T17287] IPv6: NLM_F_CREATE should be set when creating new route [ 1122.908306][T17287] IPv6: NLM_F_CREATE should be set when creating new route [ 1123.597470][T14874] Bluetooth: hci3: command tx timeout [ 1123.781939][T17238] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.867408][T17295] netlink: 'syz.5.3066': attribute type 15 has an invalid length. [ 1123.976572][T17238] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.328047][T17305] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3069'. [ 1125.348151][T17238] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.606279][T17238] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1125.688125][T14874] Bluetooth: hci3: command tx timeout [ 1127.212422][T17313] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3072'. [ 1127.757293][T14874] Bluetooth: hci3: command tx timeout [ 1127.834446][T17325] netlink: 292 bytes leftover after parsing attributes in process `syz.0.3073'. [ 1128.548583][T17329] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1128.692951][T17330] syz.5.3075: attempt to access beyond end of device [ 1128.692951][T17330] nbd5: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1128.759422][T17330] XFS (nbd5): SB validate failed with error -5. [ 1129.102940][T17238] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1129.114521][T17238] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1129.164288][T17238] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1129.198012][T17238] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1129.946385][T17238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1130.005592][T17238] 8021q: adding VLAN 0 to HW filter on device team0 [ 1130.086402][T13884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1130.093719][T13884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1130.145999][T13884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1130.153308][T13884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1130.317743][T13746] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1130.487527][T13746] usb 3-1: Using ep0 maxpacket: 8 [ 1130.498057][T17366] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3082'. [ 1130.542600][T13746] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1130.602564][T13746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.667192][T13746] usb 3-1: Product: syz [ 1130.677971][T13746] usb 3-1: Manufacturer: syz [ 1130.697388][T13746] usb 3-1: SerialNumber: syz [ 1130.709782][T13746] usb 3-1: config 0 descriptor?? [ 1130.739612][T13746] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1131.019445][T17238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1131.322481][T17238] veth0_vlan: entered promiscuous mode [ 1131.394212][T13746] gspca_sonixj: reg_r err -71 [ 1131.401226][T17238] veth1_vlan: entered promiscuous mode [ 1131.425141][T13746] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1131.460458][T13746] usb 3-1: USB disconnect, device number 73 [ 1131.546572][T17238] veth0_macvtap: entered promiscuous mode [ 1131.620767][T17238] veth1_macvtap: entered promiscuous mode [ 1131.675002][T17238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1131.714144][T17238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1131.800920][T17238] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.833037][T17238] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.857480][T17238] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1131.883078][T17238] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1132.257933][T17372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3083'. [ 1132.324842][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.360860][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1132.496448][T13875] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1132.543801][T17374] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3084'. [ 1132.567619][T13875] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.266423][T14874] Bluetooth: Wrong link type (-57) [ 1133.661258][T17380] delete_channel: no stack [ 1134.280560][T17394] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3088'. [ 1134.659802][T17399] overlayfs: missing 'lowerdir' [ 1135.483004][T17412] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3096'. [ 1136.779564][T17425] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1138.644051][ T5828] Bluetooth: hci0: command 0x0406 tx timeout [ 1141.281424][T17457] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3108'. [ 1144.024333][T17499] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 1144.519074][T17514] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3122'. [ 1144.641747][T17508] block device autoloading is deprecated and will be removed. [ 1144.852889][T17515] lo speed is unknown, defaulting to 1000 [ 1144.885998][T17515] vcan0 speed is unknown, defaulting to 1000 [ 1148.698133][T13746] usb 3-1: new full-speed USB device number 74 using dummy_hcd [ 1148.943618][T13746] usb 3-1: device descriptor read/64, error -71 [ 1149.217388][T13746] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 1149.368000][T13746] usb 3-1: device descriptor read/64, error -71 [ 1149.480298][T13746] usb usb3-port1: attempt power cycle [ 1149.801538][T17571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3134'. [ 1149.857525][T13746] usb 3-1: new full-speed USB device number 76 using dummy_hcd [ 1149.919276][T13746] usb 3-1: device descriptor read/8, error -71 [ 1150.351462][T13746] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1150.387733][T13746] usb 3-1: device descriptor read/8, error -71 [ 1150.993100][T17586] batman_adv: batadv: cannot create tp meter kthread [ 1151.528946][T13746] usb usb3-port1: unable to enumerate USB device [ 1151.605634][T17581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3136'. [ 1153.071136][T17610] overlayfs: failed to resolve './file1': -2 [ 1153.471173][T17612] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 1153.718201][ T8992] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1154.076721][ T43] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1154.108192][ T8992] usb 7-1: device descriptor read/64, error -71 [ 1154.274375][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1154.317841][ T43] usb 1-1: config 0 has no interfaces? [ 1154.351754][ T43] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1154.367496][ T8992] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1154.383399][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.408915][ T43] usb 1-1: Product: syz [ 1154.414066][ T43] usb 1-1: Manufacturer: syz [ 1154.527813][ T8992] usb 7-1: device descriptor read/64, error -71 [ 1154.592710][T17631] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3148'. [ 1154.638642][ T43] usb 1-1: SerialNumber: syz [ 1154.644760][ T8992] usb usb7-port1: attempt power cycle [ 1154.651804][ T43] usb 1-1: config 0 descriptor?? [ 1154.878851][T17605] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1154.904343][T17637] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3149'. [ 1154.959265][ T43] usb 1-1: USB disconnect, device number 91 [ 1155.033264][ T8992] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1155.101536][ T8992] usb 7-1: device descriptor read/8, error -71 [ 1155.206003][T17646] input: syz1 as /devices/virtual/input/input16 [ 1155.312686][T17646] Bluetooth: MGMT ver 1.23 [ 1155.357790][ T8992] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1155.408803][ T8992] usb 7-1: device descriptor read/8, error -71 [ 1155.532887][ T8992] usb usb7-port1: unable to enumerate USB device [ 1158.580441][T17699] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3161'. [ 1159.667678][ T5904] usb 6-1: new full-speed USB device number 55 using dummy_hcd [ 1159.843574][ T5904] usb 6-1: config 0 has an invalid interface number: 223 but max is 0 [ 1159.881582][ T5904] usb 6-1: config 0 has no interface number 0 [ 1159.914484][ T5904] usb 6-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice=63.f3 [ 1159.953532][ T5904] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.998062][ T5904] usb 6-1: config 0 descriptor?? [ 1160.042544][ T5904] snd-usb-caiaq 6-1:0.223: can't set alt interface. [ 1160.072487][ T5904] usb 6-1: unable to init card! (ret=-5) [ 1160.093206][ T5904] snd-usb-caiaq 6-1:0.223: probe with driver snd-usb-caiaq failed with error -5 [ 1160.283740][T17720] loop2: detected capacity change from 0 to 7 [ 1160.391654][T14687] Dev loop2: unable to read RDB block 7 [ 1160.415770][T14687] loop2: unable to read partition table [ 1160.444638][T14687] loop2: partition table beyond EOD, truncated [ 1160.489966][T17720] Dev loop2: unable to read RDB block 7 [ 1160.564527][T17720] loop2: unable to read partition table [ 1160.669735][T17720] loop2: partition table beyond EOD, truncated [ 1160.736038][T17720] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1161.027526][ T8992] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1161.547937][ T8992] usb 2-1: device descriptor read/64, error -71 [ 1161.820764][ T8992] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1161.874536][ T5189] Dev loop2: unable to read RDB block 7 [ 1161.908044][ T5189] loop2: unable to read partition table [ 1161.923193][ T5189] loop2: partition table beyond EOD, truncated [ 1161.997845][ T8992] usb 2-1: device descriptor read/64, error -71 [ 1162.258724][ T8992] usb usb2-port1: attempt power cycle [ 1162.264807][ T5189] Dev loop2: unable to read RDB block 7 [ 1162.307341][ T5189] loop2: unable to read partition table [ 1162.313320][ T5189] loop2: partition table beyond EOD, truncated [ 1162.628299][ T8992] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1162.696977][ T8992] usb 2-1: device descriptor read/8, error -71 [ 1162.877346][ T5896] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1163.057366][ T5896] usb 7-1: Using ep0 maxpacket: 8 [ 1163.085673][ T5896] usb 7-1: config index 0 descriptor too short (expected 19397, got 36) [ 1163.126261][ T5896] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 1163.147581][ T8992] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1163.733514][ T5896] usb 7-1: can't read configurations, error -22 [ 1163.885082][ T8992] usb 2-1: device descriptor read/8, error -71 [ 1163.887531][ T5896] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1163.997811][ T8992] usb usb2-port1: unable to enumerate USB device [ 1164.128076][T17763] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3175'. [ 1164.298316][ T5896] usb 7-1: Using ep0 maxpacket: 8 [ 1164.324532][ T5896] usb 7-1: config index 0 descriptor too short (expected 19397, got 36) [ 1164.341631][T17765] ip6erspan0: entered allmulticast mode [ 1164.365261][ T5896] usb 7-1: invalid descriptor for config index 0: type = 0x2, length = 41 [ 1164.402149][ T5896] usb 7-1: can't read configurations, error -22 [ 1164.424520][ T5896] usb usb7-port1: attempt power cycle [ 1164.865673][T17776] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3179'. [ 1165.467658][ T5896] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1165.553400][ T5896] usb 7-1: device descriptor read/8, error -71 [ 1168.281685][T17806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3189'. [ 1171.734428][T17843] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3199'. [ 1172.533485][T17860] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3202'. [ 1174.838383][T17877] loop6: detected capacity change from 0 to 7 [ 1174.852990][T17877] Dev loop6: unable to read RDB block 7 [ 1174.859502][T17877] loop6: unable to read partition table [ 1174.867843][T17877] loop6: partition table beyond EOD, truncated [ 1174.907059][T17877] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1175.466924][ T5189] Dev loop6: unable to read RDB block 7 [ 1175.518015][ T5189] loop6: unable to read partition table [ 1175.523972][ T5189] loop6: partition table beyond EOD, truncated [ 1176.791566][T17916] netlink: 'syz.1.3213': attribute type 6 has an invalid length. [ 1177.034004][T17912] syz.1.3213 (17912): attempted to duplicate a private mapping with mremap. This is not supported. [ 1177.156868][T17921] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3215'. [ 1177.776860][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 1177.817240][ T30] audit: type=1326 audit(1751226437.089:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17907 comm="syz.1.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9698e929 code=0x7ffc0000 [ 1177.966984][ T30] audit: type=1326 audit(1751226437.089:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17907 comm="syz.1.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9698e929 code=0x7ffc0000 [ 1178.029542][T17878] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1178.036301][T17878] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1178.064073][ T30] audit: type=1326 audit(1751226437.099:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17907 comm="syz.1.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7fdd9698e929 code=0x7ffc0000 [ 1178.139152][ T30] audit: type=1326 audit(1751226437.239:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17907 comm="syz.1.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9698e929 code=0x7ffc0000 [ 1178.188976][ T30] audit: type=1326 audit(1751226437.239:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17907 comm="syz.1.3213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd9698e929 code=0x7ffc0000 [ 1178.221403][T17878] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1178.236240][T17878] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1178.258426][T17931] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1178.544484][T17878] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1178.570608][T17878] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1178.699086][T17878] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1178.729276][T17878] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1178.931391][T17878] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1178.947348][T17878] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1180.346926][T17960] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3224'. [ 1180.678392][T17965] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3226'. [ 1181.463248][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 1181.540556][T17975] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3229'. [ 1181.849350][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 1182.274653][T17998] FAULT_INJECTION: forcing a failure. [ 1182.274653][T17998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1182.291518][T17998] CPU: 0 UID: 0 PID: 17998 Comm: syz.6.3233 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 1182.291551][T17998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1182.291565][T17998] Call Trace: [ 1182.291575][T17998] [ 1182.291585][T17998] dump_stack_lvl+0x189/0x250 [ 1182.291624][T17998] ? __pfx____ratelimit+0x10/0x10 [ 1182.291655][T17998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1182.291687][T17998] ? __pfx__printk+0x10/0x10 [ 1182.291709][T17998] ? __might_fault+0xb0/0x130 [ 1182.291748][T17998] should_fail_ex+0x414/0x560 [ 1182.291779][T17998] _copy_from_user+0x2d/0xb0 [ 1182.291813][T17998] snd_seq_write+0x300/0x810 [ 1182.291857][T17998] ? __pfx_snd_seq_write+0x10/0x10 [ 1182.291889][T17998] ? bpf_lsm_file_permission+0x9/0x20 [ 1182.291918][T17998] ? security_file_permission+0x75/0x290 [ 1182.291946][T17998] ? rw_verify_area+0x258/0x650 [ 1182.291970][T17998] ? __pfx_snd_seq_write+0x10/0x10 [ 1182.292002][T17998] vfs_write+0x27e/0xa90 [ 1182.292037][T17998] ? __pfx_vfs_write+0x10/0x10 [ 1182.292064][T17998] ? __fget_files+0x2a/0x420 [ 1182.292096][T17998] ? __fget_files+0x2a/0x420 [ 1182.292123][T17998] ? __fget_files+0x3a0/0x420 [ 1182.292150][T17998] ? __fget_files+0x2a/0x420 [ 1182.292189][T17998] ksys_write+0x145/0x250 [ 1182.292216][T17998] ? __pfx_ksys_write+0x10/0x10 [ 1182.292238][T17998] ? rcu_is_watching+0x15/0xb0 [ 1182.292275][T17998] ? do_syscall_64+0xbe/0x3b0 [ 1182.292311][T17998] do_syscall_64+0xfa/0x3b0 [ 1182.292341][T17998] ? lockdep_hardirqs_on+0x9c/0x150 [ 1182.292385][T17998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.292407][T17998] ? clear_bhb_loop+0x60/0xb0 [ 1182.292434][T17998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1182.292455][T17998] RIP: 0033:0x7f6624d8e929 [ 1182.292476][T17998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1182.292495][T17998] RSP: 002b:00007f6625bbd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1182.292518][T17998] RAX: ffffffffffffffda RBX: 00007f6624fb5fa0 RCX: 00007f6624d8e929 [ 1182.292535][T17998] RDX: 000000000000ffc8 RSI: 0000200000000000 RDI: 0000000000000004 [ 1182.292549][T17998] RBP: 00007f6625bbd090 R08: 0000000000000000 R09: 0000000000000000 [ 1182.292563][T17998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1182.292576][T17998] R13: 0000000000000000 R14: 00007f6624fb5fa0 R15: 00007ffdda85d708 [ 1182.292610][T17998] [ 1182.659623][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.579279][T18015] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3239'. [ 1185.728565][T18038] netlink: 240 bytes leftover after parsing attributes in process `syz.5.3242'. [ 1185.999319][T18040] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1186.006611][T18040] IPv6: NLM_F_CREATE should be set when creating new route [ 1186.014323][T18040] IPv6: NLM_F_CREATE should be set when creating new route [ 1187.838213][T18072] xt_CT: No such helper "pptp" [ 1284.427226][T14874] sched: DL replenish lagged too much [ 1294.477086][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1294.484107][ C0] rcu: 1-...!: (1 GPs behind) idle=b7e4/0/0x1 softirq=103299/103300 fqs=289 [ 1294.494395][ C0] rcu: (detected by 0, t=10506 jiffies, g=90349, q=366 ncpus=2) [ 1294.502179][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1294.502222][ C1] NMI backtrace for cpu 1 [ 1294.502239][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 1294.502261][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1294.502274][ C1] RIP: 0010:rb_erase+0xe43/0xe60 [ 1294.502305][ C1] Code: 20 00 48 8b 5c 24 18 74 19 48 89 df e8 76 3c c6 f6 eb 0f 43 80 3c 26 00 74 08 48 89 df e8 65 3c c6 f6 4c 89 2b 48 83 c4 28 5b <41> 5c 41 5d 41 5e 41 5f 5d e9 bf 47 07 00 cc 66 66 66 66 66 2e 0f [ 1294.502322][ C1] RSP: 0018:ffffc90000a08cd8 EFLAGS: 00000092 [ 1294.502339][ C1] RAX: 1ffff110170e4f82 RBX: ffff8880b8727c10 RCX: dffffc0000000000 [ 1294.502354][ C1] RDX: 0000000000010000 RSI: ffff8880b8727c10 RDI: ffff8880582cd348 [ 1294.502368][ C1] RBP: dffffc0000000000 R08: ffffffff8f9fdaf7 R09: 1ffffffff1f3fb5e [ 1294.502382][ C1] R10: dffffc0000000000 R11: fffffbfff1f3fb5f R12: ffff8880582cd340 [ 1294.502397][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 1294.502408][ C1] FS: 0000000000000000(0000) GS:ffff888125d84000(0000) knlGS:0000000000000000 [ 1294.502423][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1294.502435][ C1] CR2: 000000110c3be669 CR3: 000000006066c000 CR4: 00000000003526f0 [ 1294.502452][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1294.502463][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1294.502475][ C1] Call Trace: [ 1294.502484][ C1] [ 1294.502496][ C1] timerqueue_del+0xae/0x100 [ 1294.502518][ C1] __hrtimer_run_queues+0x364/0xc60 [ 1294.502556][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1294.502588][ C1] ? read_tsc+0x9/0x20 [ 1294.502615][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 1294.502656][ C1] __sysvec_apic_timer_interrupt+0x10b/0x410 [ 1294.502687][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1294.502712][ C1] [ 1294.502719][ C1] [ 1294.502726][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1294.502746][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1294.502770][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 55 28 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1294.502786][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 1294.502801][ C1] RAX: a8272585e4803d00 RBX: ffffffff81974c68 RCX: a8272585e4803d00 [ 1294.502816][ C1] RDX: 0000000000000001 RSI: ffffffff8d96e786 RDI: ffffffff8be1b9c0 [ 1294.502829][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 1294.502844][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8f9fdaf0 [ 1294.502859][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003a52b40 [ 1294.502873][ C1] ? do_idle+0x1e8/0x510 [ 1294.502906][ C1] default_idle+0x13/0x20 [ 1294.502922][ C1] default_idle_call+0x74/0xb0 [ 1294.502939][ C1] do_idle+0x1e8/0x510 [ 1294.502968][ C1] ? __pfx_do_idle+0x10/0x10 [ 1294.502993][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1294.503028][ C1] cpu_startup_entry+0x44/0x60 [ 1294.503055][ C1] start_secondary+0x101/0x110 [ 1294.503081][ C1] common_startup_64+0x13e/0x147 [ 1294.503110][ C1] [ 1294.503208][ C0] rcu: rcu_preempt kthread starved for 9025 jiffies! g90349 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1294.826143][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1294.836155][ C0] rcu: RCU grace-period kthread stack dump: [ 1294.842083][ C0] task:rcu_preempt state:R running task stack:26888 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1294.855637][ C0] Call Trace: [ 1294.858943][ C0] [ 1294.861940][ C0] __schedule+0x16a2/0x4cb0 [ 1294.866510][ C0] ? schedule+0x165/0x360 [ 1294.870888][ C0] ? __pfx___schedule+0x10/0x10 [ 1294.875794][ C0] ? schedule+0x91/0x360 [ 1294.880084][ C0] schedule+0x165/0x360 [ 1294.884282][ C0] schedule_timeout+0x12b/0x270 [ 1294.889264][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1294.894667][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1294.900598][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1294.906029][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1294.911618][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1294.916521][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1294.922807][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1294.928128][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1294.933369][ C0] ? finish_swait+0xcd/0x1f0 [ 1294.937998][ C0] rcu_gp_kthread+0x99/0x390 [ 1294.942632][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1294.947866][ C0] ? __kthread_parkme+0x7b/0x200 [ 1294.952844][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1294.957931][ C0] kthread+0x70e/0x8a0 [ 1294.962184][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1294.967530][ C0] ? __pfx_kthread+0x10/0x10 [ 1294.972176][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1294.977418][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1294.982681][ C0] ? __pfx_kthread+0x10/0x10 [ 1294.987304][ C0] ret_from_fork+0x3fc/0x770 [ 1294.991939][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1294.997160][ C0] ? __switch_to_asm+0x39/0x70 [ 1295.001955][ C0] ? __switch_to_asm+0x33/0x70 [ 1295.006752][ C0] ? __pfx_kthread+0x10/0x10 [ 1295.011377][ C0] ret_from_fork_asm+0x1a/0x30 [ 1295.016276][ C0] [ 1295.019325][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1295.025789][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc3-syzkaller-00329-gdfba48a70cb6 #0 PREEMPT(full) [ 1295.037545][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1295.047633][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1295.053480][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 55 28 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1295.073116][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 1295.079223][ C0] RAX: 7bd81c9db99f6900 RBX: ffffffff81974c68 RCX: 7bd81c9db99f6900 [ 1295.087226][ C0] RDX: 0000000000000001 RSI: ffffffff8d96e786 RDI: ffffffff8be1b9c0 [ 1295.095228][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 1295.103235][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8f9fdaf0 [ 1295.111240][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 1295.119249][ C0] FS: 0000000000000000(0000) GS:ffff888125c84000(0000) knlGS:0000000000000000 [ 1295.128203][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1295.134814][ C0] CR2: 0000200000024000 CR3: 0000000033ca6000 CR4: 00000000003526f0 [ 1295.142815][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1295.150814][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1295.158815][ C0] Call Trace: [ 1295.162138][ C0] [ 1295.165097][ C0] default_idle+0x13/0x20 [ 1295.169455][ C0] default_idle_call+0x74/0xb0 [ 1295.174249][ C0] do_idle+0x1e8/0x510 [ 1295.178382][ C0] ? __pfx_do_idle+0x10/0x10 [ 1295.183032][ C0] cpu_startup_entry+0x44/0x60 [ 1295.187837][ C0] rest_init+0x2de/0x300 [ 1295.192113][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1295.197689][ C0] start_kernel+0x47d/0x500 [ 1295.202239][ C0] x86_64_start_reservations+0x24/0x30 [ 1295.207742][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1295.212906][ C0] common_startup_64+0x13e/0x147 [ 1295.217896][ C0]