last executing test programs: 5m19.699905151s ago: executing program 4 (id=721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, &(0x7f0000000140)={0x21, {{0x29, 0x3, 0x2000000, @empty, 0x8000005}}}, 0xefd1081208756ae9) r3 = bpf$PROG_LOAD(0xff8d, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x42}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x47, 0x0}}, 0x3d) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x24060400) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) syncfs(r6) recvmmsg(r5, &(0x7f0000000e40), 0x0, 0x40014000, &(0x7f0000000ec0)={0x0, 0x989680}) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r7, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) 5m18.584615961s ago: executing program 4 (id=723): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) r2 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') syz_fuse_handle_req(r2, &(0x7f000000a280)="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", 0x2000, 0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4048aecb, &(0x7f0000001440)={{0x5, 0x0, 0x80, {0xffffffffffffffff, 0x1, 0x1}}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156fb4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c4ad8c81d77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d475bd5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95f3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641f9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33201f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49d2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a34313315836bb7291764b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc245e748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2dbed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3ad34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33dff5ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc1016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e02000000be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c0851800c6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e400000f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e51600"}) openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) syz_io_uring_setup(0x3aec, &(0x7f0000000240)={0x0, 0x0, 0x10000}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}) 5m16.023247924s ago: executing program 4 (id=725): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040000000c0", @ANYRES8=r0, @ANYBLOB="010000000000a6f6d6d8ff507381b315ac68d8c3", @ANYRES32=0x0, @ANYRES32, @ANYRESOCT=r0], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102378, 0x18fea) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r1}, 0x38) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getxattr(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)=@known='security.apparmor\x00', &(0x7f0000000380)=""/126, 0x7e) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014000240"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) mount(0x0, 0x0, &(0x7f0000000200)='nilfs2\x00', 0x410, 0x0) sendfile(r6, r4, 0x0, 0x80008) 5m14.572229242s ago: executing program 4 (id=728): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = shmget(0x0, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil) lseek(r0, 0x1ff, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) r3 = geteuid() getgroups(0x5, &(0x7f0000000080)=[0xee00, 0xee00, 0xee01, 0xee01, 0xee00]) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r5, &(0x7f0000000400)=@ceph_nfs_fh={0x8, 0x1, {0x4}}, 0x480041) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0xffffffff, 0x9ebd, 0x1, 0x0, 0xffffffffffffffff}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)=0x0) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000480)={{0x2, r2, 0x0, r3, r4, 0x1, 0x7}, 0x2, 0x2, 0x3, 0x8000000000000001, r6, r7, 0x4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) (async) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x4f}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) shmget(0x0, 0x4000, 0x100, &(0x7f0000ff9000/0x4000)=nil) (async) lseek(r0, 0x1ff, 0x2) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000380)={{{@in=@private, @in6=@dev}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f0000000040)=0xe8) (async) geteuid() (async) getgroups(0x5, &(0x7f0000000080)=[0xee00, 0xee00, 0xee01, 0xee01, 0xee00]) (async) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) (async) open_by_handle_at(r5, &(0x7f0000000400)=@ceph_nfs_fh={0x8, 0x1, {0x4}}, 0x480041) (async) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000180)={'\x00', 0x0, 0xffffffff, 0x9ebd, 0x1, 0x0, 0xffffffffffffffff}) (async) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000200)) (async) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000480)={{0x2, r2, 0x0, r3, r4, 0x1, 0x7}, 0x2, 0x2, 0x3, 0x8000000000000001, r6, r7, 0x4}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x88, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000340)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) (async) 5m11.673630113s ago: executing program 4 (id=735): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000300)={0x805813, 0x4}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa, 0x4, @multicast}]}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x48010) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f00000000c0)={0x0, 0x1, 0x3}, &(0x7f0000000100)={'enc=', 'oaep', ' hash=', {'sha512-avx\x00'}}, &(0x7f0000000240)='L', &(0x7f0000000280)=""/3) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x8, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) getsockopt(r3, 0x111, 0x6, 0x0, &(0x7f0000000080)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000003, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) move_pages(0x0, 0x1, &(0x7f0000002600)=[&(0x7f0000ffc000/0x1000)=nil], &(0x7f0000002640)=[0x1], &(0x7f0000000000), 0x0) munlock(&(0x7f0000a65000/0x4000)=nil, 0x4000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r4, 0x0, 0x8}, 0x18) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001e0089282ebd7000fbdbdf250a003f00", @ANYRES32=0x0, @ANYBLOB="0300200008000200010000000800020005000000140001002001000000000000000000000000000108000200040009000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x15}, 0x40080) 5m10.2717376s ago: executing program 4 (id=739): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {0x0, 0x1}, 0x0, 0x40, 0x4, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 5m9.10867547s ago: executing program 32 (id=739): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)={0x400, 0x30, 0xf0, 0x0, 0x0, 0x1f, 0x0, 0x0, {}, {}, {}, {0x0, 0x1}, 0x0, 0x40, 0x4, 0x7, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffc}]}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) 2m55.186747737s ago: executing program 0 (id=1025): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4}}, 0x48) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x80c0, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000002840)={0x2, 0x0, {0x0, 0x0, 0x0, 0x2, 0x2}}, 0x48) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000004c0)={0x0, @null, @netrom={'nr', 0x0}, 0xfffffe4c, 'syz1\x00', @bcast, 0x5, 0x1, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000005a80)={0x2, 0x0, {&(0x7f00000003c0)=""/110, 0x6e, 0x0, 0x1, 0x2}}, 0x48) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000040)=@id, 0x10) recvmmsg(r4, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)=""/2, 0x2}], 0x1, &(0x7f0000000e40)=""/120, 0x78}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x5cb1, 0x2, 0x3, 0xfffffffd}, &(0x7f0000000140)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ip_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) 2m53.391822815s ago: executing program 0 (id=1028): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10042008) ioctl$FITHAW(r0, 0xc0045878) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = getpid() r3 = syz_open_procfs(r2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c19078005001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x54}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r7, r6}, 0x6) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r3, &(0x7f0000000000)='./file0\x00') ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000280)={0x17}) 2m51.097326832s ago: executing program 0 (id=1033): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x86}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a80)={0x10, 0x1418, 0x1}, 0x10}, 0x1, 0x0, 0x0, 0x4008885}, 0x810) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r3, 0x117, 0x5, 0x0, 0x5) clock_gettime(0x0, 0x0) ioctl$VIDIOC_ENCODER_CMD(r2, 0xc028564d, &(0x7f00000000c0)={0x0, 0x0, [0x9d, 0x3, 0x15, 0x5, 0x0, 0x8000, 0x7, 0x9]}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000001c0)) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040), &(0x7f0000000100)=0x10) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x4, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5}, 0xe) shutdown(r5, 0x1) ioctl$SIOCGSTAMPNS(r5, 0x8907, 0x0) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140), &(0x7f0000000240)=0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) 2m49.004011603s ago: executing program 0 (id=1036): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(0xffffffffffffffff, 0xc0045540, &(0x7f0000000100)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8002, 0x0) read$msr(r0, &(0x7f0000019540)=""/102400, 0x19000) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, 0x0, 0x0) r2 = syz_open_dev$vim2m(0x0, 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000300)=0x793c, 0x4) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r3, 0x0, 0x0, 0x12020, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x3}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket(0x11, 0xa, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004800}, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r4, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8, 0x0, 0x0, 0x40000}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x58, r5, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x80, 0x49}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x2, 0x0, 0x0, 0x0, {0xd1, 0x3, 0x0, 0x2a4, 0x0, 0x1, 0x1, 0x2}, 0x0, 0x9, 0x3}}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x58}, 0x1, 0x0, 0x0, 0x41}, 0x4008000) 2m46.472414849s ago: executing program 0 (id=1040): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) msgctl$MSG_STAT_ANY(0x0, 0xd, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @bcast, @bpq0, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x8004) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x4) 2m43.467372227s ago: executing program 0 (id=1049): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000008000000040000000004000000010100", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0300000003000000050000000e0000316da168aa46a393ed5c208f52b7b79387dc7e060e59585b00", @ANYRES32=r2, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x2) 2m28.263323856s ago: executing program 33 (id=1049): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'batadv_slave_1\x00', 0x0}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000008000000040000000004000000010100", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0300000003000000050000000e0000316da168aa46a393ed5c208f52b7b79387dc7e060e59585b00", @ANYRES32=r2, @ANYBLOB], 0x50) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x22002, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x2) 15.625988683s ago: executing program 2 (id=1363): syz_emit_vhci(0x0, 0x7) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_tables_targets\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3, 0x2, 0x80008}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) r6 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) read$FUSE(r0, 0x0, 0x0) move_mount(0xffffffffffffff9c, 0x0, r0, &(0x7f00000000c0)='./file1\x00', 0x21) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000), 0x111, 0xa}}, 0x20) 15.50904334s ago: executing program 6 (id=1364): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xfffffffe}) write$bt_hci(r1, &(0x7f0000000080)=ANY=[], 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f0000000400)=0x13) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0xd) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000000)={0x10, 0x1, 0x8c, 0x8, 0x19, "007de521ec070ef4f834bbeda7f6647bbfdef7"}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000a800200000008500000036000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) unshare(0x22020600) r6 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r7, r8, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r10, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(0xffffffffffffffff, 0x46f3, 0x0, 0x14, 0x0, 0x0) write(r9, 0x0, 0x0) r11 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r11, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, 0x0, 0x25, 0x1c, @val=@tcx={@void, @value=r5}}, 0x1c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r4, 0x0, 0x25, 0x14, @val=@tracing}, 0x20) syz_emit_ethernet(0x11dc0, &(0x7f0000000380)=ANY=[@ANYBLOB="073202aeff99b64c21185992c26ac89a9d3c76e06680b6e4e59db988ccfaac36d0322b8638e92ab35ebfd64a69cb6b52f996f21d17b7407044b3a1ec7f37a2a9abfef8b59ca0b8f081a36a0796b23656eccc", @ANYRESHEX=r11, @ANYRES8=r11, @ANYRES16=r6], 0x0) r12 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) mmap$binder(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1, 0x11, r12, 0x8000000000000000) r13 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r14 = dup(r13) write$6lowpan_enable(r14, &(0x7f0000000000)='0', 0xfffffd2c) 13.251090099s ago: executing program 6 (id=1366): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10042008) ioctl$FITHAW(r0, 0xc0045878) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = getpid() r3 = syz_open_procfs(r2, &(0x7f0000000080)='net/ip_tables_names\x00') openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x4c}}, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c19078005001500090000000500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x54}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000800"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r7, r6}, 0x6) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x224e, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r3, &(0x7f0000000000)='./file0\x00') ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, &(0x7f0000000280)={0x17}) 12.525351871s ago: executing program 2 (id=1369): r0 = socket$inet_sctp(0x2, 0x5, 0x84) timer_create(0x9, 0x0, &(0x7f0000000400)=0x0) timer_delete(r1) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000340)={r4, 0x87, 0x30, 0x10}, &(0x7f0000000400)=0x18) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r5, 0x65, 0x4, 0xfffffffffffffffe, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x418000) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYRESHEX=r0], 0x0) 11.116280074s ago: executing program 6 (id=1372): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000f00", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={0x0, &(0x7f0000000300)=""/153, &(0x7f0000000480), &(0x7f0000000780), 0x4, r3}, 0x38) (async) r4 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) (async) ptrace$getregset(0x4205, r4, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) (async) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) (async) openat$sequencer(0xffffffffffffff9c, 0x0, 0x8002, 0x0) (async) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x880, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) (async) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f00000001c0)=[{0x3, 0x0, {0x2, 0xff, 0x1}, {0x2, 0xff}, 0x2, 0xff}, {0x0, 0x3, {0x1, 0xf0, 0x3}, {0x2, 0x1, 0x1}, 0xff, 0xfe}, {0x2, 0x1, {0x0, 0xf0}, {0x1, 0xff, 0x3}, 0xff}, {0x1, 0x1, {0x1, 0x1, 0x3}, {0x1, 0xff, 0x1}, 0xfd, 0x1}, {0x3, 0x2, {0x0, 0x0, 0x4}, {0x0, 0x1, 0x4}, 0x1, 0xff}, {0x1, 0x1, {0x0, 0xff, 0x1}, {0x2, 0xff, 0x1}, 0x2, 0xfd}, {0x1, 0x2, {0x2, 0x1, 0x4}, {0x1, 0x0, 0x4}, 0x1, 0x1}], 0xe0) (async) r9 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r7, 0xc018aec0, &(0x7f0000000000)={0x1000a, 0x380, 0x2c0, 0x0}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r9, 0x4090ae82, 0x0) 10.033844882s ago: executing program 3 (id=1375): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file1\x00') 9.852240947s ago: executing program 3 (id=1377): mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)="1876d433b8c266f9be2253e7c12fc9ea10343a19c358547a9357a174911e926c57b51eab3d0a", 0x26}], 0x1) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r2 = accept$alg(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f0000000140)=0x1) 9.704611588s ago: executing program 5 (id=1378): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) openat$ppp(0xffffffffffffff9c, 0x0, 0x88801, 0x0) r5 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndctrl(&(0x7f00000001c0), 0x1, 0x88100) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000240)={{0x9, 0x3, 0x29e4, 0x21ff, '\x00', 0x4}, 0x5, 0x20, 0x25, 0x0, 0x0, 0x5, 'syz1\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) 9.072381271s ago: executing program 3 (id=1379): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000380)) setrlimit(0xb, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000000)={0x2, @pix_mp={0x7, 0xf05, 0x3234564e, 0x4, 0xa, [{0x4, 0x52b}, {0x1, 0x7}, {0x4, 0x4}, {0x495b, 0x7ff}, {0x8, 0xcdc}, {0x80000000}, {0xdb, 0x1}, {0x80, 0xa}], 0x7, 0x80, 0x6, 0x0, 0x3}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x30, 0x3e, 0x1, 0x80000, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0xb}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c841}, 0x4008094) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 8.841736926s ago: executing program 6 (id=1380): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[]) r6 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x250942, 0x1cd) fchown(0xffffffffffffffff, 0x0, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r6, 0xffffffff80000901, 0xee00, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'bridge0\x00', @random="142b243c16b6"}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', @broadcast}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x14, 0x0, 0xb31, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x40) 6.613596518s ago: executing program 3 (id=1381): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) exit(0x0) syz_usb_connect(0x0, 0x118, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x82, 0x9b, 0x48, 0x20, 0x582, 0x27, 0xd3c5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb8, 0x1, 0x0, 0x63, 0x0, 0x9a, [{{0x9, 0x4, 0x17, 0x0, 0x2, 0x69, 0xf, 0x79, 0x0, [@uac_control={{0xa, 0x24, 0x1, 0x1ff, 0xff}, [@selector_unit={0x0, 0x24, 0x5, 0x1, 0x8, "857d2e93c33c"}]}], [{{0x9, 0x5, 0x7, 0x2, 0x10, 0x0, 0x8, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x2}, @generic={0x70, 0x7, "1d693b4e2009688dc7437e8c8c3722529afcf30127e4ad148d6de80ced29d7dff6ef7d2f194273b2899719e9ab8a786582165c97d69ea6e2e768e1d16b9e5184ceec6df4f15e64e571b0accbeb12d0f86db86c416e0d3f55d023e029b91e0050bb563d156832e42a79eb9fe9e1d2"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x8, 0x7, 0xa, 0x8, [@uac_iso={0x0, 0x25, 0x1, 0x82, 0xee, 0x200}]}}]}}]}}]}}, 0x0) 6.612750129s ago: executing program 5 (id=1382): ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x4, 0xffffffffffffffff, 0x80000}) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f000000c180)=ANY=[@ANYBLOB="b07d2ce9"]) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f0000000240)="0f20c06635080000000f22c0260fe87200660fc77506653e6567625852baa100edba4300b08bee0f1c41491b82df11baa000b00dee0f7e858b4f", 0x3a}], 0x1, 0x10, &(0x7f00000002c0)=[@cr0={0x0, 0x60000000}], 0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @quota={{0x7}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x0, 0x0, 0xcbf, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x8, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2={0xff, 0x5}, 0x0, 0x10, 0x0, 0x5}}) r3 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x20) 6.601974533s ago: executing program 1 (id=1383): syz_open_dev$sg(0x0, 0x0, 0x8002) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x101001) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000003c0)={0x0, &(0x7f0000000440), 0x0, 0x0, 0xeeeeeeee}) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/comedi1\x00', 0x48041, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) wait4(0xffffffffffffffff, 0x0, 0x20000000, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x20493859, 0x0, 0x0, 0x0, 0x5, 0xfeedcafe, 0x3, 0x7}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) socket(0x2a, 0x2, 0x0) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, &(0x7f0000000100)={0x0, 0xea60}) close(0x3) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=0x0, @ANYRES8=r2, @ANYRES32=r1], 0x50) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) 6.55721715s ago: executing program 2 (id=1384): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r4, 0x0, 0x3}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x40, 0x10, 0x503, 0x0, 0xfffffffc, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_REMOTE={0x8, 0x5, @rand_addr=0x64010100}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (fail_nth: 3) 5.553103029s ago: executing program 6 (id=1385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1, 0x8, 0x0, 0x401}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) ioctl$sock_ifreq(r0, 0xadc6cfde43449db2, &(0x7f0000000040)={'bridge0\x00', @ifru_map={0x8, 0x10, 0x200, 0x80, 0x1, 0xfb}}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x38415261, 0x0, 0x0, [{0x3}, {}, {0x0, 0xffffffff}, {}, {}, {0x0, 0x10000}, {0xfffffffc, 0x10000}, {0xfffffffc}], 0x0, 0x3, 0x2}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0xa, 0x2) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000b00)={0x0, 0x5}, &(0x7f0000000b40)=0x8) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000001c0)={0x2, @pix={0x0, 0x2, 0x34324241, 0x0, 0x101, 0x0, 0xa, 0x0, 0x0, 0x6, 0x0, 0x6}}) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a340000001200000900020073797a31000000000900010073797a300000000008000340000000013400000000000000020000000900010073797a300000000008000340000000010900020073797a3100000000140000001100010000000000000000000000000a"], 0x90}}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socket$key(0xf, 0x3, 0x2) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CHANINFO(r6, 0x80306403, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r7, 0x1, 0x10000000000009, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007801800018014616d8bc26f56bd731c2e8aaf033f38c7323c0942ece7eb49bf4eb10a32e3901fa088216f42afe5e5b7061f80f4a34ee1090ca814b56bf5225e926ea4a55edecb11c27e88c8551a2c2f523542166b681fe51935c5a08c0a71957af193d5c7075b92c5fa37714f71ee3ebdb9c279d1c730fd27a9339c330d477bde87dec66d9feb6e85de3c112b7c30e3f4893977a1e79ef0f1245378284aa46b056d21bdb50ab03d6ccd80228182e139e0000b7dc78db5ae61c197ca5ea6591bc19a5e7296f37f11fbe6a0"], 0x44}, 0x1, 0x0, 0x0, 0x34008803}, 0x4000084) 4.623498542s ago: executing program 1 (id=1386): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001a000100fdffffff090000000272ba"], 0x38}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x8, 0x2007, @fd_index=0x8, 0x8, &(0x7f0000002680)=[{0x0}], 0x1, 0xd, 0x1, {0x2}}) r1 = syz_open_dev$sg(&(0x7f00000013c0), 0x0, 0x48202) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5393, &(0x7f0000000000)) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 4.612115377s ago: executing program 5 (id=1387): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) 4.511775008s ago: executing program 2 (id=1388): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x121602, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setgroups(0x4000000000000097, &(0x7f0000000080)=[0x0]) keyctl$chown(0x4, 0x0, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x2, {0x7, 0x29, 0x1, 0x6a542793, 0x681d, 0x0, 0x3, 0x1, 0x0, 0x0, 0x100, 0x82}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1, 0x0, 0x5}}, 0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x14, r6, 0x121, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x400c884) 4.365163787s ago: executing program 5 (id=1389): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x101000, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socket$igmp(0x2, 0x3, 0x2) r1 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440), 0x1) 3.83204037s ago: executing program 1 (id=1390): socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESHEX=r2]) syz_fuse_handle_req(r2, &(0x7f0000004140)="a1af56567af19ce4706948d30f35abf6494690656d554e6190797369db23a302f328aa47a2e54509379ba2e477e6e0461d2e45920d509fa49de04732cd2f4a4e34d73eb464d09605a698ad2219a2175ebcc560f740fe531ba46ded4232d273d1865282844f5a3b54d7f154c21a8a82228e27b2c1af662a92e53d81cae3ea68707ce43f89c3321797039a0a39e24b83035dbfb1ac9668b5f87c4ae50250e92c8b113ed58f60015d9c1990253e6646c02901b08a2ec0acceb7ac1e28f59b1e22663432bd5435083b604934bda5f4897467677ac5609bb6e1d1f938a1a8238d2df6db69fcffa48a08ef9231830ceb045a999a9ba43b4d605ce7bb4736ee8bdaac3399576ad3d434c12f1ae8fc5e06dbbfac985d7105c3b7f431854465b6f732e1397e4647e88e86b0a3b01c1ef689a4bd3963deb3b06190576c690ab257b9845b4d412f248184e124b5228f4236d020d4b80ff0772d9515685918c41cad06498a6833d591c191916067759bfeceec176d582621bf23b8d827e2c8977822d64ca19c168fa8a4ea90a60ed60854342e7c42ce11f414dcff1fff715d10ed263d305e5c563ee13a1527795b012e01b8442026032a761cf5104f00dc28a761596d8393e3750be1a8788fa7152a3cd8e051a963120417af9bd3e659bbaac6406a70ba347641aeffac9436fc2352bf7822dabd7a4911a5b947f9c07f805e67ec8c7d787ff358b426494b87aaac46c2d4061ccf3d19201d8d099dddf2b257cacbba656cb7626b0d3fa11881e99799b92f0a07813eac359a64a61a03d6527a24a4fee8e6cbd74932adba5ad3a865788e874b796cc8555522b19f76676646f21f31fad8c360982ce2b23fd4aec43bff16e0f3f1e1e804daf28f236081d0686108fde25f7e6a7bef08b793beca5b21b5f4893543ef1e3a216378cb76a54fa879ad9624a60a0b3306c8548e1a22b735213969421dc9ef70338bb780ad55adfb6b4f4ca3d8ce7c697ce3f0a6210a27cc900ea2218c52ac06bbcbb91adff643f1a3b93db67d7902f23eb89ab2f892970551127b39e7bb9f37c62adb8abed20c8c84531d143c6be2b8b05766e248a94aae400b36a3399ba174ffe14ffd354f508ce30ea991f57018a3534e0eac9cb49d0e6085f93b367d817ee83b24c11f9d38044a9739f4fd41b6a8129fda808bb930beba6223dfe154b23d7c39ac4fb6656169275c31e15d37d3d96b0aaa13637f1c28178f5fc4ebbe1af6acc985c783a30dffde8d7eb0c8863e3481caf2606a4b6930c234736404d4eeefdda697193f57d332540a423831db671d7d3e8e15ef3d6a26b83a5053bdc2f0b378c6b39ad0b8b9c7bd5c4bf81018ce15d0b344772f6c6f469e40c9848cbcb1b3ccb721b4b1f895a6e034380d882bd30a20f1c2b8ae138e6728306e16f6093774d21b798cd73a16bc577be751deb434ef019dd454fa3ce3cc3b2634ea4957548bf226d0b24bce757382c639dae891e55dcb24ffc9dc2c08acfafabd4565dbcad34e1a8e781c56e9144f0e85a5cf6c79a5d1a8b3479cdc178215f05081eebdc03607798c66fd043824756e896c2b69fe5e843e0eb26c86a37a8944e93a7f3b2a863136d56579d0377f9424cf00dd6da7b19066f990ce05e1b93479f125cbcc5c91aea56ef04950164079f5e22ebfd77d54676b2de392ab20298876bce1ae9941ae109d7088edb29d02539aec8f276b862bb28fa6a68bb1a0bda1b0ec6e5891e93777d9b126d6add7eb36a7f75c435618d368c04156f8a116d0c843ad04842d7b7c84cd87e75fb81ec16ef184fd3119c16c950b84bca9a12a86f0e333d9fe34622f5a51e9772dc8b94c491e16db0c537e211b01c9f13f9e7a7b2f4d8053baded5d6018561b547562efbeab2946f3ef872d0256196c75fd7f520da7aea0f63a278052925c6c88307bed0336c5632ca98086e7712af309f99a6adb3ec4417eaa9aefe3fd43c4402bc13868832d6dfaa97de7ed43fe3711917de97058d60067d5eeb90ecb428182d07092c516e6eef6781756e308926faa9796dd1a29dd4c3827115fa8e14bbe449f4144785b9581a198273adb8bab0d4080adbb592b25fd74d426233f537562a4a98b07f4b2060b4f496c66a0169391b713fdd991fa90cfc313245f57900d980adcbd46ada0a7bdfdfec4bf8ba12e37724c9dfd7fbbe4541bf21cc393249a555746268e7e33bdb43f2cd4932e39fc818e49d0e588d12a3a297be074ad83db57be9d4455ab0685b087e8ee9f5c7c33e10c9d6be572b58c88b79756c45eb9eed6d0275944d9cc1cbc8c498917aa2fd79c00567d4f9f768579f891e23fa9548c5fbff150d2873ecc72da8d0077a223f9d18700b690d8046783bba756a2c9863b7ffc7022b2da68a332f72f704bc38a0fcc4f445891f1ca1ef5dad28b87ce8bdef23ffe29ee23f2c0a002c80cf99399dc7276aec6f9d8b6ff3d7554409a4e38d2029a43f8a70da62b33c44f5f4f299eec825302c52e5f83d462b81512775107059826c8880578f01d8cb53af86ad61a7e36c2ccdf55ce197ec2a78219a5b952a9bd12ac2cc3271e84e6dad464c7ec9d9f0310614200a98cfa933d5db05c00c95c59fc5bb8844ff856ee7f9b091700b1a93ae1c00a40d9e5e6ce036f90a6dc34faa9dc8e8972c49b055f9a43ae10251705a960f2cfc8430cf9bcafc26c8eccc8b75a788beb41d180d4364f3083f3ffb5e39049979903c76f440810b7ea608ff84f5e56f9e0653bf15b6b6332d458f8d2e2b17d7bd2305a8909996d2ebfc2ee2ff697fccb215bd8c73d4b9f5b597308f98ed8fbda58f52cf8443f5a9db7f0f6e75e1c9e47d73f8d0624e9e6f33c2dee3c6ff394082d78ffd3a68309b3085e1a7c106f62c3959a353672cadadf6c058fe366b03fcd95a23f564c55a3ce9a914c11c8b2d6040147a1539b106adecce531646fea4db06775fe5d1bf9cb0107941b620043ac9b7936b2af9849eca9c46062945b137dfa355a7ee0c81a0193fa60a70e59b407af06a7f181a3e4ccc81f2c580a6c6cf67a8bf93eb8ff2151b7074144bf7c5cff97814e0c00c138d984559ac8b95a45a4497174130bbb0db22fa53187db1d923d9ded441a4d2fcbe0ff5736ecc3d94bfbb2df632ac88a02f2c9f73312e7a9c2d8d6c0bbfc774595e2e63669f2b5bbf6ee6a1ab0c25e313d819b02c785494eda4cace033e96b1ecc5b155a14e0c8d51d54d8bf33e499d0913d9605a419bc6c73c6bb07d1a306adb27dfedbe81a386fb3bb659764442c4d9d66673a916ee5a6ae59abc994fff64f2db0c83e2b18944f619cfdea0ea0911064ab690b2e03670a3e3667651c1980d0491a40312307e4534671c9c8ca8712506eff211577783c81dc05ffae4a9c6d7554f9fec07b25451c70e6f4d4b160544b66d66dd88ef1c77f09133db317c39fca05b68ef3eee3c28cbe31982adb0693fe9699d06654150346915ccdb17c69ea3aa8bb36b5f321060f6237dec73a011b233b81a6337bd77da5da753593fe30282456a0da2c4a18911ab5a8af13c8f623e5684f74f322ba103482d9abec31a684707671759ac8bb2592d66350745f77f18bd6a6cba542644f1fdf0dca14a08f4ffd1365969ee896cb39e845f71590eb4c73cc624cdcfbdea2352ad5173e5e919fcb98f6d960341047d181075ec8b1e92f40ecd5a1bf157925329748cc7af0239a7803a0c947479e070b026baf6738c29c9a8351685abd43775726ec0bfeff4d51fd3fcb04b108de286c5f61a82ef496e20133ef8b4ae243e81b20822ea6285c70bf1a33cb9f4ceeec053f60992c0023bd5acb0d4a9a55ef377f2837784ada634070a85b0a42fabf288130d6b74ca23473fbce932bedb44cd51dae78efd058dde5d7eb4aadfe3dd8346420567e745ced5189db6df22edbc66580a236f6ab148a3efd69bdea3dac7cffb47df44dbef7fcb436902bb30d65d65d5320c3b76ac17f43d27b2deda8692ba03ac2ae60e4ed2a9232c71a98b9869259a410b901f38cd6712f69f2dc3f92b7c5909f3595e99c9fc77d4d33f9a0e57d5f121e2de782b22cf7fb9bf22fc6afde5e42876ff8005f8a042bb5a9b67d60f40a7ad1cd73810a4f704f14823d4074e5a32b028c8360432b8aff539705961fee84d6c60b2b4d2efad60fb20c1da653869349b81e6c3d56c96ce56a833ee9a2b3e92a4b96c5a545910406751b4e7da24a328de0e20042d1ecc3bf7fd97071bb2740f497307501d90fa9c8e5cd63a703096955f4934d9140ad295cae59232cf005574d875e098637ecb757305a51d102ae5323b23a61c1a1b888c5974a243e42bfc391114ba5ba28e2375cf1d6d1a63e6bd5cf9aff9af16bdc927f642151597fe6d18ab008426f25054ee8e39136e2c217ad1f4cbfccdaf9a0cbd97edef5fef9b2ec486a4b21d79021103deec2ceb26c0b0035856ea2370aa3a8de925797722aeeee2d504184988f9f8727915c389f043c3de2b0d8e3046c46b33cb1615f291f272ade0029cad1f1d2e723e62cf739b667b005de14c3ed265e3bc2d553bb232f88b92a8284996c50e141608623ca7677a9cefb85fb0e0e77e23b9767dd65fbc119a15969ecd10f8033d9f37a748a895fd39390563f5f7998bb10eda8610855eaeb2499d8234975edb16c438069e8701bec0a86ae108a19b9f54782648af4b7b04a1d7b6b3a853c24f2393120918d1eed7b40f467c88857ee9cddf5f01db495f3138984387adfe3cf51a47dca021f9f31b44af1d1ae7c9f4c768f2a46d5c012a937985f56436ae15528ae3597590c927be9676a4ca80a19d44457b06991c02488c96e31094cd963b64e8623fc7000009ddb29b0dbb13671c321d24e322a05cf215dd04eabc2cc6fdaed762d3f9da0f1e0e4b7ba13a6036771c9403457dfddecb71579de33c597860a2e49d7b5052a6b018ddb409a7a84f8f6651d070a4c913b7a721490c8f97c085de8315019952deae16434a3e5fd5d242b1b333d8a801aaa67e4aa599b818c8e747ecac2e9c6176bec7e34ecb84450903f5aa6c6c6bf539b240506562d73c5dfbacdfbcc9db3089701f2c7fe6d6b8d6728f8a1b90a911338463e6fd824ecda51578865b3c363b4b79f6c698e27760c1090f8ae52d6fd3f0f9488f1c25feab4b48c03ddcf74a8b6d2b0fc6b5a89b8051c99edee357fcb875f523f7a88a5f25222fc0ba159873b47fe906e88f920943e453048cdea455dd98fe77f55d9c92e205b87120ac5ef791cd7d6ce7d2cfe689db61096c6e4fc359c9aa4dd3d1205358da38882073ef7268239f7c74b0f3cd60ca239b2fcdc3f5c774559ffbb2b821f1314987d8cbe5342db9567a864d569abfde85f1124e2b178be4d020c4244ddb0cf4ef7124f295a81b9c10227ea886e6f6ea2dca031a026a4f946f49598b76141a0b18170bb3cfa9136c49c69d71732aa223db1e65553aa03bec9b0a35c31eb4e6b0dab02ec2c2d851a731be9cec6078456631c68761e14dbc9afa2c3f631a160ebf9d1fd3c2ecccf6d4aebaf0fafe2e9f47ea9d386425a7950671cde77c6951ef43a1ed32f0ed6fcda74ca9333d2513e4a40cfca01a17bfbc13b0229e2b16400880d96e4c687fc54ed0b34326126f845bd7cd2063c51abbf8bb61f6f1dc3606959f2dececc6e3e08d808841c4779ca0f5f51e7e03260d0b75b1b0355f8544c1639b2f0bfd6f95c4f6d151073a086ecc890d6366acbcee869020cf347e700a8361bd8d5c53e6480526aaf31c9c655eae11831184746a709387e60d68c062e5e05e578d11687f6a5411ffac4cfd62331f63a9726ae77c5799bcca05d6983c985cd23d025e3367ef8c7ee903de557322f38629628ee3076ac483f8257c6335a478412cad1d73b6fd43c37a62dd7a0ae7601f12b4478c3f2ee105a915ff2052d23a8b9af3ca59013f553006259d4cce52212862d22c08c29affa3520b33a6b68cf2b9f91d9258dc5052bf360977ba81a37701118f635379d852b6481843604c111bcfa4970afd5a0fa52824cb27ac9a77b7575e3e0cd043c29c5682a47fe94fd6c2c225b6d9939b99c18b5fb898c5f28e87a5b6a0bbeaa2c4725cf5494765d79a50d2417e84130bb37f540e8db7064e57935ec3c6f9caa2a9a1ced0f8c6eebcb9b688490b31f864dcd9b726628218b42f45aa82f2bcdf2c7532c9669ea7ffb6842451ac314a35cdb0855312448c24efd6583a582e15ad5e7f7b714f0ac703a24e2ee8769a868079af8660931ba325ea1c9b636ef7b13766204dd733c3bc69f11e026c382ac0fa5ce8413fb9f84408e4648a5e66b8592093a17a42cb105b616b8239d2031200eecb9beca6d411a71f072fd159eac0a4f4392a0cedb96248dad497b2379f3162254045ce276503093e5e7ab062b942cf6f2302a5ab9af1b3a315ec67faf84b70fdbdb39044a22cd7bd0f62ba66ce2257f3aa0f56d53c8157c4db3297087e25ec24696813430f386f5ad55bf6289f62e1492dc6ac3bb5047e933d54ec338cafb3bfae8336215611bc3e8a5cafaca7c70f580570518a675cc2075c7593e1d98ef02b74f06b041b6ed9b06e820d32b413de06235441a52346c3fd2e723816c7b481fbf564a525646ba62c615060b2f9fb0ff0f00c376c6dfcdb060aca7af2f07f6030a2ca324c8380c11f9c1182acdea2123c52f5a40b44909180a14037c760c4ecc10f20206445aa65cf835f09633491f608598f1fe5cb5175ddc48070fe0608335af27ded864f97dd52c235b7c4ece6bda153224b773c64235c1099054a55849cd1af7832abd1383e82f63715c9cc24543397bd56e34fd5d28e49021bb483617a3444fdcf8cdeb33bd8675334a897e17966fcbc1e5c5c5399bb6bf02a9bbfaa5f3c58d2efd007dcb1190af4ab4b71987ff7824bd9b9c6d6fb0b144c1fd462805aabf2c7fbb043ff22b496e41a4a81957892efe74d614d62d4b04bbf544fb03826e9baa2a84f32da4d1154c1d0fbdcc17f24a49633761d2b5962e618d8a9be2bf373cdc9c45ecff0148f355075fde5ad5e8da5d59498eb2b7f77a4c0622edd29d7dfedd748b750d0b48057fa7b8ff575714a408a926f6e0cad081eb24780fdbb116fb8dfefb2006f765ff95fe4def6b83fa97b3f54204a0c00cf71c4a1efeface1198a94610570816d08c19af76b03afa42f722abbfebb2c99a905300918dbcd131fce84632bf4f7f5dabd1b5b05742755b45e50eb89ee278e0f6f1a8ad3d9f907b9accbe4845f6591f8361b52e4dd8f19823efd7e89c2ba80c70671eea397e1953daa12907ce59d940a6dcfb3eef7ba7405bb489c38319ac4fee62dec986f4f0975dc1b9f576ebdbca90c42e7f3b1928154af66de5e54b16d8b6541f55daa90812ea7dab78a87d969e4bf95c47f70ce84f9e41e542bbb91f77105c8314e8bd5d8d37e11d9af07c5dcedfab1f21642bb30fb332f7c6bfe13cde2f28f104344777066afe5b0f6db14390f587e64417b0dab027cef4c5daedc75812a7452d45e57e8e274ad8cd8a10b2b9ce0f371809101e9340f2fa0a59501020e48f862572fef70b350938e00a921fb1c080e933eaad2d56daeed692e7d69d4b95a2d1a620da88247314bd73a20cc7a504427df77ba969b5adbf74321e982c2a1913b66a8687960c8fb71a850c1003c76fe1c3bbbc8eb142dfa01f5df52b72bde0c8884374f72eeb8038ad57beb6c732c511bd5847ae8d4b69e195f87b03379279936dda69e11cfda279f37e53a05cb787f118d66f62a87037981937d6083e47e31de6a2700cb7976c0dfcf972bdd458e561f13b3e30368c8bacb722611db7627ad4e00a34f69a5eb9edc7eae464b2422a4c38bed04c49b15fce25ccd22347720273127236d6e8178cb414d1b4dc36cabd19f713782bde48db7094577042083cf5d42224eaa69e0d70b57e6f1764a825909c48858cda13ab13ee203fd0d57291acf588f91f9bc428d4c9ea06a9df3c9ce183e0c101a4d52fd87866c2146219beb15e616ce239cb025ef3dfdb3a2568a833c88a66a580ca9d3f2b770647d5baa42a707351688dc0be3b15d2cead64792e9f9688ef95ea5274c08ee13c4a3797ce346dceeaf7d81a18181839ebeed412baf43ec1abb35b7930ed7a528f9a0bbccd1ea6eb525488c6731150afe791bf58e524de4cc62e174d134bf5d170132efdb2cbb42b882219de563cbe6280ce4cd8482699442b236d1bd54517c3ad25fb3d68a649920357d85f343f0b46ce4a78b1836b6ecb198f1f1686597206c09ad4534717402eefc0d5a90639f91b84d3de00e7d815059640ada64140687c3e404432c74e91907cdcf3e07e997eed9de114767829833920a9fa5bebf7d99fc4f461375f3426b136b680230c7aa135f0d2d72be7bdf8667a8cf0dd0bf5490e393b5a465d37b9ee0d659c8c0f96681b71a867978b3503a45dfe95e49b9d11b8ca953ab01ec1714ca9ca1e1ed5998e02934901dcac10a2553a94618db7d79c4a48741afe3bceaa994833595808f8080f6eafadd31caee252a7d115db962320be9503147d39adbd11b1cd4cf2cd4bf94d9036ea61b2d4791c6326af653847d2b6dd83f5df51eb9473ae0c305abe5f3896175d82a2b569bf100166004886dc58432cd678c0a4a152013b2646a68284567b898e6f3d38a9187b6d10075234b2e11b7c929b308bbcb82f4a8ceafc503f18536092f2965d13875060c926b5404ccf3bcfb1389688fb4bf57ff79201d8a00cbb54a12b3be4693b4a295284c90e7d0f08b632eb0411bbd01d51112afe5db173a8159dd38fe6e9804f6ae779479ffdc697ec572b0934704dfcc3e9b2bec95587285299d1d79192b2324e4eaf4de74df050170562c08e0a821f47745f63ecbbb767846ddcc331f459013ec90de697346f1e57345a51fd9d2233cb3591c406bc25ff5c098c331cd026aca7ac1fb1c35c3d3597c7deb89620a364044b30c77d5071bea5b196a0c380ad40370985713838b1c830130a5fc15c5501748a2c8369e77c3fd4ec2f5de572ee183f526359f28865d68eb87c21f8fcd4a09d76ee6d9ef31561d9c97ae3672500e342a798b04177f2c5896bd06b4c96a58aa839185ae44b838d763872bbf1e7b665848f1e186b5ab6cd4628f4725324981b0aff0b9af2f78883dc8433d2dc26c1766e0ec77c4eb63da1f859c09ace8889fd2c5ec7f7e11eeb547900dd9332b7b96ea6be35aea692e54c1cc3d1211bc843f8e8ce71abb88873e132fe214a7e7670fcac38516b6935b9e0a2eeb43a0aebd25676db551d8cff4fe0b6cecbd59701317022511a2d612864c09496c99af48e1cd066c5bae55b415ec08e99947ac94885ddf875d8f8af199aba32c0bfc27f6e19e57380618e7940481077edf6270ea3befce28a55c2a68a961142e959690ba294afd57c5530a5fbd5f60d791a3f06720947c74cec26a571a9f2e5cf98cccefba8beff72f2570f8a0e1a130c0e85d4fbb6a6f0b881af274c9eb063ef09176d43f8f18bdb35a0acb1c6305ba5563d1b6baff53b1251305de413052667c4cf9f94460bf348fb27ab5719ae44faf02dae55d8eab643040834b04aab15a197568e8ebd296638b01e5ea34e39ed47ffb58a47027d4b7d978028b7812a141df233065e93c20dc736af1cdcedcf7e766eab238b3b4d3df022f50b43973c47d1c80055e4fdf569e50fd382e840b76a6db6c06b1f0603a2234b9175c5e15a22855b57cd5257d9b5a456712f281f83e1c6c87f58be8166f8b2e85e9f54d24fe3b420d77a22745dfc7ebc89e21acf1c6649324f4c5bf53e188ce3216dbdec21a06fa9e61d830814697727305fb48c705c4d6c4bdfb874e43a8fb1423e2d2d6bdfe22a0d2b211d3beb86937c639c934cfe9a4b6c2853ff353829028854e8d7d75f29f01c4d7c297fe0236345ecce914b3be4907788a39c093c9f9e2c930a15563cc453d08123deadf853c83db0e3986d993e44e441a874411b7905708462e1ba42ea22521d7c57089a77b14b6dbe57f0ce69c7c4f1c0d53385655a8ed6294f113d33ad8867ac05e80403e6a8103d1574fab80f43a4a3af93a67678346d7b3b977a1381afb93990b1cc3aa73cc463f72bd898f647f3f5a3b342fb5e37140ddc499edda92ee624039ef3f802c9055e20b7d6e4f5a109cb4ca1bf84d37d1e78d45a10f45602b61216ea8969eba3a0075256faf8e577de835bf0b37311d16310645effca6751cf502a035d7ac7d1ca2c23547a739116efb586dfe2762ca4bf5ce5fc48913efb41a4a93fdb240f0895cdf306ddd13337d38a58402561dd663bbc675e1a378d4f770ba5e308c6ada84faf18ab2b387b0ac139a57dc534e278a1afecafcaed3746701cee14edce6c85cc39c91ed5be8a178d2fcd97567e8ab661d573278062bfc3c83acbfcdeec7f08d3c1197ccf830c883eaaa01e2cc44e91cdc1c47c03797528a9dd63cde259b4b211b57af121b125fefb26c110da83bbc150e2663a22273cc855cb3c52d02fd92db59a7c876d1a18e66cd64708aa478f3f10e726210dbbe2fb1afedb2034a7d59ad774e73f97d7b4b121cc25b90dd4fb5179816174dc4650b2da366d11a519f4310972944625c839b01040c712c635d967269c6c07189b5b1b496403e35e9ef01ecf7e795c357ae08b4736d2c1bcbe556cc671ffa37677b740baebaeb1b74c922d1ac83cb3ab86735d07ebffe072ca08ebd56d0ae89d5535a63bee75810468b1560534ecdb4a16495f9a7f42164df055942e94011848c5dac783a69fbdcac9c477850320af0c10da48775434088c7d090202f927463123639dbc1d48a871e4f20f75563f6dba586db6d12e2e7f36e7da4915037fcddb4413336b423f6b888bcf297fb8d33493e9fc2e992afeb1b83aaeaf46f4aba9bb0aa2708272ce5b0c90ef9f6c366c20e90d0f87aeba828196acdc4306131c515319776dfab27de1e3a501cfc560bd3a1dd29e54b87de9a01d0351184ed5cc3323cef72fd423dfbb0ac90eeec5474432ec1e4c64d68605c378320c0e97a3d89a409b7d969d6e116c2ba861f57418d8eaac5bff85c416ec5224d92df53d8f272c7e02e832bd21ef4d6b4a9bd307f8c1756c3e6c155bb2ce5807311d60b2fb31357c89119af443af2d3a4d08fb6221aaeee97bfdae51ebf6c51f98300033ec513ad6996041441d474ccf3a2548a11b94527ebc2e24d7519b1ded645da3af62060a4ae19eddc3bf331c4c762d9672de22558c655ba05338d985da134230fef2d0639743bdb4695517dd9e3733827050617b3cc792d12b3280e0000b22ad5130b27f9a5e25b965028874db5b5efdf881043e1279187294bbc35865af7662b23b9adf614a9af41fe4d0c9cfe62106a2bb6d294d3ca554062b2c7a0299f82fd5eb6841fedf096753b1a63a6b4dcce3837ee36062055c9f52b3272f411709db86d59db530fd1ed9cc2138817c290a2777d1d54cf4b7b2f8737444b58334a1c26f63ffda10b749b5796fa61ce6f74fecef2c4766a05d0468c1d7056beb8fa9cf7d51d5115690bcb889f09dbe01b1c55ac860a00cc159f6683d33fdca16d815fab5bbf00", 0x2000, 0x0) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') syz_fuse_handle_req(r2, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000500)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x2, {0x7, 0x2b, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r3, 0xc0045520, &(0x7f0000000040)=0x1) fsetxattr$smack_xattr_label(0xffffffffffffffff, &(0x7f0000000100)='security.SMACK64MMAP\x00', &(0x7f0000000240)={'%sw%n\'#'}, 0x8, 0x2) r4 = accept(r1, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f1", 0x17}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18}], 0x1, 0x0) 3.755574337s ago: executing program 6 (id=1391): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) recvmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x40002002) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1fd}, 0xe) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) mmap(&(0x7f0000475000/0x3000)=nil, 0x3000, 0x1000007, 0x38011, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$KDFONTOP_GET(r2, 0x4b72, &(0x7f0000000400)={0x1, 0x0, 0x25, 0x7, 0x15f, &(0x7f0000000a40)}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[], 0x48}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x2000000000c0, 0x2000000000f0, 0x200000000120], 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000d00000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) r5 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r6 = dup(r5) write$6lowpan_enable(r6, &(0x7f0000000000)='0', 0xfffffd2c) bind$unix(r6, &(0x7f0000000200)=@abs={0x1, 0x0, 0x4e23}, 0x6e) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r6, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x4, {0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xffffffff}, r7}}, 0x38) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0xa3) 3.555224792s ago: executing program 2 (id=1392): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x127, 0x40000) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0x100}, {r0, 0x40}], 0x3, &(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)={[0x6]}, 0x8) ppoll(&(0x7f0000000100)=[{r0, 0xaae8}], 0x1, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000180)={[0x7]}, 0x8) ioctl$RTC_AIE_OFF(r0, 0x7002) newfstatat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@local}}, &(0x7f00000003c0)=0xe8) statx(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x6000, 0x200, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000600)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000680)={{0x1, 0x1, 0x18, r0, {0xee01, 0xffffffffffffffff}}, './file0\x00'}) r9 = getegid() fstat(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000800)={{}, {0x1, 0x1}, [{0x2, 0x0, r1}, {0x2, 0xc130882070eaf8b4, r3}, {0x2, 0x1, r4}], {0x4, 0x1}, [{0x8, 0x2, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r8}, {0x8, 0x3, 0xffffffffffffffff}, {0x8, 0x7, r9}, {0x8, 0x0, r10}, {0x8, 0x2, 0xee00}, {0x8, 0x0, r11}], {0x10, 0x1}}, 0x7c, 0x0) symlinkat(&(0x7f0000000880)='./file0/file0\x00', r7, &(0x7f00000008c0)='./file0\x00') pivot_root(&(0x7f0000000900)='./file0/file0\x00', &(0x7f0000000940)='./file0\x00') syz_open_dev$MSR(&(0x7f0000000980), 0x100000001, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f00000009c0)=@raw=[@generic={0x6, 0xf, 0x2, 0x4, 0x40}, @map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x3ff}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], &(0x7f0000000a40)='GPL\x00', 0xf, 0x5f, &(0x7f0000000a80)=""/95, 0x0, 0x0, '\x00', r2, @fallback=0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000b40)={0x3, 0x4, 0x7fffffff, 0x7}, 0x10, 0xffffffffffffffff, r7, 0x3, &(0x7f0000000b80)=[r0, r7, r7, r7], &(0x7f0000000bc0)=[{0x1, 0x5, 0xe, 0x6}, {0x1, 0x1, 0x9, 0x5}, {0x4, 0x2, 0xf, 0x2}], 0x10, 0x1}, 0x94) open$dir(&(0x7f0000000cc0)='./file0/file0\x00', 0x40002, 0x20) lsetxattr$trusted_overlay_opaque(&(0x7f0000000d00)='./file0\x00', &(0x7f0000000d40), &(0x7f0000000d80), 0x2, 0x3) lsetxattr$trusted_overlay_redirect(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000e00), &(0x7f0000000e40)='./file0\x00', 0x8, 0x2) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000f00)={'sit0\x00', &(0x7f0000000e80)={'syztnl2\x00', r2, 0x10, 0x10, 0xf9, 0x3ff, {{0xa, 0x4, 0x2, 0x3, 0x28, 0x68, 0x0, 0x4, 0x2f, 0x0, @multicast2, @remote, {[@generic={0x94, 0x11, "9ea1a6d3eca643207504af718fd506"}]}}}}}) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000f40)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast1, 0x4e21, 0x1, 0x4e24, 0xdfe3, 0x2, 0xe0, 0xa0, 0x1, r13, r3}, {0x9, 0xb28, 0x0, 0x8, 0x3, 0x8000000000000000, 0x1, 0x1ff}, {0x6, 0x1, 0x80, 0x120000000}, 0x9, 0x6e6bbb, 0x3, 0x1, 0x1, 0x1}, {{@in6=@remote, 0x4d2, 0x2b}, 0xa, @in=@private=0xa010100, 0x3500, 0x1, 0x1, 0x6, 0x7, 0x341, 0x1}}, 0xe8) r14 = syz_open_dev$sg(&(0x7f0000001040), 0x100, 0x0) ioctl$SG_IO(r14, 0x2285, &(0x7f0000001340)={0x0, 0x6, 0xea, 0x7, @buffer={0x0, 0xbc, &(0x7f0000001080)=""/188}, &(0x7f0000001140)="ce206daea8ba275d7e78f351bf25727ba5225bc8b68bff37a4ebe59303101b4bd593123388f6011b5b906f37303efdc5a74bad858a7a3e34d11b3d0d9ab2e5adc81b97c03369c36d0618d2482f73cef22a790276d33523e54a323cff713dc5a8cd4472f33f54a46b2e2195757f12e984f2f362ebf0ec34950bf5d87ea9095bff28fa6f6fb34192ed2cffb18d33d21dbe0f00dd3c4eb33941800672162ddce7f8742aa20c303c330111548c7978b804488180e838b616fc42ef3c9c0096497cde27a1f3f51343495ac7eea5646e5360d4840601e8895c4730633a04cc1f9c3b8d0f0d12cd88b8c100d113", &(0x7f0000001240)=""/161, 0x5, 0x1, 0x3, &(0x7f0000001300)}) syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001440)={&(0x7f0000001400)='qgroup_meta_free_all_pertrans\x00', r12}, 0x18) truncate(&(0x7f0000001480)='./file0/file0\x00', 0x4) socket$kcm(0x29, 0x5, 0x0) ioctl$COMEDI_BUFCONFIG(0xffffffffffffffff, 0x8020640d, &(0x7f0000001500)={0x8001, 0x80, 0x8, 0x7}) 2.043144965s ago: executing program 3 (id=1393): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01030000000000000000340000000800020000006900110002"], 0x30}}, 0x0) 2.037754209s ago: executing program 5 (id=1394): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r2, 0x0) 1.116568121s ago: executing program 2 (id=1395): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x65c, 0x80000) r3 = eventfd2(0x4000, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x7, 0x2, r3}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r5 = eventfd2(0x65c, 0x80000) r6 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r5, 0x9, 0x2, r6}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0xf, 0x4, 0x3, 0x41, 0x3, 0x58, 0x90, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x7, 0x10, 0x0, 0x0, 0x7fffffffffffb, 0xc6, 0x0, 0x9, 0x1, 0x7, 0x0, 0xbdb], 0x1, 0x3c4210}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 609.823904ms ago: executing program 3 (id=1396): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x92, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x2c95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x8, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xb, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x100, 0x1, 0x4, 0x4, 0x7, 0x1, 0x8, 0x4c75, 0x80000000, 0xfffffffe, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x40017, 0x1, 0x7, 0x5, 0x3e, 0x3, 0x6, 0xffff, 0x0, 0x6, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8, 0x5, 0xfffffff3, 0x129432e6, 0x40c8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x8, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0xc6e8, 0x5, 0xea4, 0x0, 0xb94, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x200006, 0x3, 0xff, 0x5, 0x1000005, 0x5f2e, 0x2d, 0x4e2, 0x5, 0x4, 0xb, 0x2000004, 0x9, 0x80000001, 0x9, 0x6, 0x3, 0x8000, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x4, 0x3, 0x8000, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8000, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x4000000, 0x1eb, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0xfffffffe, 0x3, 0x20000008, 0xa, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x8000004, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x4005, 0x4291, 0xac8, 0xca, 0x6, 0x3, 0x7ff, 0xbe, 0x4, 0x7, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x4, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x8, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x58, 0x9, 0x2, 0x101, 0x10000, 0x5, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x6, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xffffffd9, 0xfffff000, 0x10010000, 0x0, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x2, 0x7, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x80000000, 0x201, 0xffff3441, 0xfff]}, 0x45c) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x4) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x61, 0x0, 0x0) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f00000000c0)=ANY=[]) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x2, 0x0) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x311, 0x7, 0x1, 0x2, 0x8, 0x1e24, 0xd8f8, 0xd164, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x7, 0x3, 0x20, 0x3, [{{0x9, 0x4, 0x1b, 0x0, 0x0, 0x1e, 0x82, 0x30, 0x1, [@hid_hid={0x9, 0x21, 0x6, 0xe8, 0x1, {0x22, 0x1da}}]}}]}}]}}, &(0x7f00000005c0)={0x0, 0x0, 0xc, &(0x7f0000000340)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1e, 0x7, 0x4, 0x2}]}, 0x1, [{0x62, &(0x7f0000000380)=@string={0x62, 0x3, "7b6a6a9e642b87b93a868636c2c3f4bbc7f4f30db00614ed21954a6bf61e03f1691a6fd38bca636714a3051989aa44c168c522a4ef6c1be0acef9693fae4319d1474141270428f2779ab56d971503afb3d2159c55669c05adc3b2b1c8643cdae"}}]}) syz_usb_ep_write(r3, 0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 572.062513ms ago: executing program 1 (id=1397): mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x400000f, 0x80031, 0xffffffffffffffff, 0x0) 391.604796ms ago: executing program 5 (id=1398): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x90, 0x5, 0x9, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0xc7c6, 0x5, 0x7, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x5000, 0x3c4210}) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x4000)=nil, r3, 0x2000003, 0x12, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 173.758646ms ago: executing program 1 (id=1399): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001e00090002000000ffdbdf2507000000110001"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 0s ago: executing program 1 (id=1400): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x200a, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x80000000) kernel console output (not intermixed with test programs): il_ex+0x414/0x560 [ 389.100112][ T8518] _copy_from_iter+0x1db/0x16f0 [ 389.100144][ T8518] ? rcu_is_watching+0x15/0xb0 [ 389.100169][ T8518] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 389.100193][ T8518] ? __pfx__copy_from_iter+0x10/0x10 [ 389.100221][ T8518] ? __build_skb_around+0x257/0x3e0 [ 389.100254][ T8518] ? netlink_sendmsg+0x642/0xb30 [ 389.100280][ T8518] ? skb_put+0x11b/0x210 [ 389.100314][ T8518] netlink_sendmsg+0x6b2/0xb30 [ 389.100341][ T8518] ? irqentry_exit+0x74/0x90 [ 389.100372][ T8518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.100419][ T8518] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 389.100440][ T8518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.100470][ T8518] __sock_sendmsg+0x21c/0x270 [ 389.100498][ T8518] ____sys_sendmsg+0x505/0x830 [ 389.100537][ T8518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 389.100579][ T8518] ? import_iovec+0x74/0xa0 [ 389.100613][ T8518] ___sys_sendmsg+0x21f/0x2a0 [ 389.100646][ T8518] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.100720][ T8518] ? __fget_files+0x2a/0x420 [ 389.100743][ T8518] ? __fget_files+0x3a0/0x420 [ 389.100779][ T8518] __x64_sys_sendmsg+0x19b/0x260 [ 389.100814][ T8518] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 389.100857][ T8518] ? __pfx_ksys_write+0x10/0x10 [ 389.100884][ T8518] ? do_syscall_64+0xbe/0x3b0 [ 389.100913][ T8518] do_syscall_64+0xfa/0x3b0 [ 389.100934][ T8518] ? lockdep_hardirqs_on+0x9c/0x150 [ 389.100955][ T8518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.100975][ T8518] ? clear_bhb_loop+0x60/0xb0 [ 389.101001][ T8518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.101020][ T8518] RIP: 0033:0x7fcff958e9a9 [ 389.101040][ T8518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.101059][ T8518] RSP: 002b:00007fcffa430038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.101082][ T8518] RAX: ffffffffffffffda RBX: 00007fcff97b6160 RCX: 00007fcff958e9a9 [ 389.101097][ T8518] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 000000000000000a [ 389.101111][ T8518] RBP: 00007fcffa430090 R08: 0000000000000000 R09: 0000000000000000 [ 389.101124][ T8518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.101136][ T8518] R13: 0000000000000000 R14: 00007fcff97b6160 R15: 00007fff8dee6e38 [ 389.101170][ T8518] [ 389.379640][ C0] vkms_vblank_simulate: vblank timer overrun [ 390.256731][ T8529] Bluetooth: MGMT ver 1.23 [ 391.904673][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'. [ 392.541875][ T5841] Bluetooth: hci2: command 0x0401 tx timeout [ 392.624824][ T5838] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 393.674055][ T8549] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.681417][ T8549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.689453][ T8549] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.696779][ T8549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.713900][ T5829] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 396.317100][ T5829] usb 5-1: config 5 has an invalid interface number: 123 but max is 0 [ 396.331397][ T5829] usb 5-1: config 5 has no interface number 0 [ 396.358531][ T5829] usb 5-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B [ 396.401908][ T5829] usb 5-1: config 5 interface 123 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 396.442401][ T5829] usb 5-1: config 5 interface 123 has no altsetting 0 [ 396.468652][ T5829] usb 5-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 396.497232][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.654962][ T5829] usb 5-1: Product: syz [ 396.659202][ T5829] usb 5-1: Manufacturer: syz [ 396.680627][ T5829] usb 5-1: SerialNumber: syz [ 396.772810][ T8575] FAULT_INJECTION: forcing a failure. [ 396.772810][ T8575] name failslab, interval 1, probability 0, space 0, times 0 [ 396.786044][ T8575] CPU: 1 UID: 0 PID: 8575 Comm: syz.1.700 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 396.786071][ T8575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 396.786083][ T8575] Call Trace: [ 396.786091][ T8575] [ 396.786100][ T8575] dump_stack_lvl+0x189/0x250 [ 396.786130][ T8575] ? __pfx____ratelimit+0x10/0x10 [ 396.786154][ T8575] ? __pfx_dump_stack_lvl+0x10/0x10 [ 396.786178][ T8575] ? __pfx__printk+0x10/0x10 [ 396.786212][ T8575] ? __pfx___might_resched+0x10/0x10 [ 396.786234][ T8575] ? fs_reclaim_acquire+0x7d/0x100 [ 396.786263][ T8575] should_fail_ex+0x414/0x560 [ 396.786291][ T8575] should_failslab+0xa8/0x100 [ 396.786316][ T8575] __kmalloc_noprof+0xcb/0x4f0 [ 396.786339][ T8575] ? kfree+0x4d/0x440 [ 396.786366][ T8575] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 396.786401][ T8575] tomoyo_realpath_from_path+0xe3/0x5d0 [ 396.786430][ T8575] ? tomoyo_domain+0xda/0x130 [ 396.786463][ T8575] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 396.786486][ T8575] tomoyo_path_number_perm+0x1e8/0x5a0 [ 396.786521][ T8575] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 396.786540][ T8575] ? rcu_is_watching+0x15/0xb0 [ 396.786566][ T8575] ? __pfx___schedule+0x10/0x10 [ 396.786584][ T8575] ? __schedule+0x16c8/0x4c90 [ 396.786615][ T8575] ? __lock_acquire+0xab9/0xd20 [ 396.786661][ T8575] ? __fget_files+0x2a/0x420 [ 396.786689][ T8575] ? __fget_files+0x2a/0x420 [ 396.786710][ T8575] ? __fget_files+0x3a0/0x420 [ 396.786731][ T8575] ? __fget_files+0x2a/0x420 [ 396.786759][ T8575] security_file_ioctl+0xcb/0x2d0 [ 396.786786][ T8575] __se_sys_ioctl+0x47/0x170 [ 396.786819][ T8575] do_syscall_64+0xfa/0x3b0 [ 396.786844][ T8575] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.786863][ T8575] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 396.786883][ T8575] ? clear_bhb_loop+0x60/0xb0 [ 396.786908][ T8575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.786928][ T8575] RIP: 0033:0x7f3f33d8e9a9 [ 396.786947][ T8575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.786964][ T8575] RSP: 002b:00007f3f34b11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.786987][ T8575] RAX: ffffffffffffffda RBX: 00007f3f33fb6160 RCX: 00007f3f33d8e9a9 [ 396.787002][ T8575] RDX: 00002000000004c0 RSI: 0000000040085112 RDI: 0000000000000008 [ 396.787016][ T8575] RBP: 00007f3f34b11090 R08: 0000000000000000 R09: 0000000000000000 [ 396.787029][ T8575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 396.787041][ T8575] R13: 0000000000000000 R14: 00007f3f33fb6160 R15: 00007fff5c718c28 [ 396.787077][ T8575] [ 397.047521][ T8575] ERROR: Out of memory at tomoyo_realpath_from_path. [ 397.093580][ T8562] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 397.382475][ T5829] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'. [ 397.440834][ T5829] usb 5-1: USB disconnect, device number 12 [ 397.656354][ T8583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.702'. [ 398.431751][ T8586] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 401.932133][ T8591] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 404.868144][ T8623] netlink: 28 bytes leftover after parsing attributes in process `syz.2.715'. [ 405.028653][ T8606] syz.0.711: vmalloc error: size 67108864, failed to allocated page array size 131072, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 405.104998][ T8606] CPU: 0 UID: 0 PID: 8606 Comm: syz.0.711 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 405.105019][ T8606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 405.105027][ T8606] Call Trace: [ 405.105032][ T8606] [ 405.105038][ T8606] dump_stack_lvl+0x189/0x250 [ 405.105059][ T8606] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 405.105079][ T8606] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.105092][ T8606] ? __pfx__printk+0x10/0x10 [ 405.105108][ T8606] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 405.105124][ T8606] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 405.105162][ T8606] warn_alloc+0x214/0x310 [ 405.105181][ T8606] ? __pfx_warn_alloc+0x10/0x10 [ 405.105202][ T8606] ? __get_vm_area_node+0x28f/0x300 [ 405.105215][ T8606] ? translate_table+0x198/0x2000 [ 405.105234][ T8606] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 405.105267][ T8606] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 405.105284][ T8606] ? rcu_is_watching+0x15/0xb0 [ 405.105298][ T8606] ? translate_table+0x198/0x2000 [ 405.105312][ T8606] ? translate_table+0x198/0x2000 [ 405.105332][ T8606] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 405.105355][ T8606] ? translate_table+0x198/0x2000 [ 405.105377][ T8606] ? xt_alloc_table_info+0x3b/0xa0 [ 405.105394][ T8606] translate_table+0x198/0x2000 [ 405.105425][ T8606] ? __lock_acquire+0xab9/0xd20 [ 405.105441][ T8606] ? __pfx_translate_table+0x10/0x10 [ 405.105457][ T8606] ? __might_fault+0xb0/0x130 [ 405.105482][ T8606] ? _copy_from_user+0x94/0xb0 [ 405.105502][ T8606] do_ipt_set_ctl+0x967/0xcd0 [ 405.105523][ T8606] ? rcu_is_watching+0x15/0xb0 [ 405.105536][ T8606] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 405.105564][ T8606] ? __pfx___mutex_lock+0x10/0x10 [ 405.105578][ T8606] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 405.105605][ T8606] nf_setsockopt+0x26c/0x290 [ 405.105624][ T8606] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 405.105641][ T8606] do_sock_setsockopt+0x179/0x1b0 [ 405.105662][ T8606] __x64_sys_setsockopt+0x13f/0x1b0 [ 405.105683][ T8606] do_syscall_64+0xfa/0x3b0 [ 405.105696][ T8606] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.105709][ T8606] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.105720][ T8606] ? clear_bhb_loop+0x60/0xb0 [ 405.105735][ T8606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.105746][ T8606] RIP: 0033:0x7f0befb8e9a9 [ 405.105759][ T8606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.105770][ T8606] RSP: 002b:00007f0bf0a4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 405.105796][ T8606] RAX: ffffffffffffffda RBX: 00007f0befdb5fa0 RCX: 00007f0befb8e9a9 [ 405.105811][ T8606] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000008 [ 405.105825][ T8606] RBP: 00007f0befc10d69 R08: 0000000000000268 R09: 0000000000000000 [ 405.105837][ T8606] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.105851][ T8606] R13: 0000000000000000 R14: 00007f0befdb5fa0 R15: 00007ffdf8100ed8 [ 405.105885][ T8606] [ 405.472929][ T8606] Mem-Info: [ 405.483114][ T8606] active_anon:281 inactive_anon:5163 isolated_anon:0 [ 405.483114][ T8606] active_file:14136 inactive_file:39822 isolated_file:0 [ 405.483114][ T8606] unevictable:768 dirty:194 writeback:0 [ 405.483114][ T8606] slab_reclaimable:10443 slab_unreclaimable:99563 [ 405.483114][ T8606] mapped:30887 shmem:1393 pagetables:1163 [ 405.483114][ T8606] sec_pagetables:0 bounce:0 [ 405.483114][ T8606] kernel_misc_reclaimable:0 [ 405.483114][ T8606] free:1314431 free_pcp:14663 free_cma:0 [ 405.546132][ T8606] Node 0 active_anon:1124kB inactive_anon:20652kB active_file:56340kB inactive_file:159288kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123548kB dirty:776kB writeback:0kB shmem:4036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11812kB pagetables:4608kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 405.581287][ T8606] Node 1 active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 405.614082][ T8606] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 405.643963][ T8606] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 405.649975][ T8606] Node 0 DMA32 free:1341740kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1120kB inactive_anon:20608kB active_file:54580kB inactive_file:159220kB unevictable:1536kB writepending:776kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:41004kB local_pcp:19996kB free_cma:0kB [ 405.683720][ T8606] lowmem_reserve[]: 0 0 1 1 1 [ 405.688730][ T8606] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1760kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 405.731707][ T8606] lowmem_reserve[]: 0 0 0 0 0 [ 405.741131][ T8606] Node 1 Normal free:3900856kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:204kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18048kB local_pcp:7584kB free_cma:0kB [ 405.834106][ T8606] lowmem_reserve[]: 0 0 0 0 0 [ 405.887956][ T8606] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 405.907519][ T8606] Node 0 DMA32: 1538*4kB (UME) 872*8kB (UME) 585*16kB (ME) 1191*32kB (UME) 359*64kB (UME) 215*128kB (UME) 89*256kB (UME) 61*512kB (UME) 23*1024kB (UM) 9*2048kB (UM) 277*4096kB (M) = 1341688kB [ 406.026029][ T8606] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 406.098061][ T8606] Node 1 Normal: 202*4kB (UE) 44*8kB (UME) 43*16kB (UME) 92*32kB (UME) 32*64kB (UME) 8*128kB (UME) 5*256kB (UM) 5*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3900856kB [ 406.246325][ T8606] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 407.193189][ T8606] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 407.213997][ T8606] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 407.225393][ T8606] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 407.239668][ T8606] 55600 total pagecache pages [ 407.281312][ T8606] 0 pages in swap cache [ 407.296465][ T8606] Free swap = 124996kB [ 407.303001][ T8606] Total swap = 124996kB [ 407.315566][ T8606] 2097051 pages RAM [ 407.325330][ T8606] 0 pages HighMem/MovableOnly [ 407.338796][ T8606] 424695 pages reserved [ 407.354340][ T8606] 0 pages cma reserved [ 412.507219][ T5914] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 412.787412][ T5914] usb 5-1: Using ep0 maxpacket: 32 [ 412.805336][ T5914] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 412.824937][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.848087][ T5914] usb 5-1: config 0 descriptor?? [ 412.869056][ T5914] gspca_main: sunplus-2.14.0 probing 041e:400b [ 413.867113][ T5914] gspca_sunplus: reg_w_riv err -110 [ 413.872402][ T5914] sunplus 5-1:0.0: probe with driver sunplus failed with error -110 [ 414.069030][ T5914] usb 5-1: USB disconnect, device number 13 [ 415.450407][ T5839] syz_tun (unregistering): left promiscuous mode [ 415.595201][ T8701] netlink: 32 bytes leftover after parsing attributes in process `syz.0.737'. [ 417.059691][ T8725] netlink: 32 bytes leftover after parsing attributes in process `syz.2.746'. [ 418.056636][ T49] bridge_slave_1: left allmulticast mode [ 418.093563][ T49] bridge_slave_1: left promiscuous mode [ 418.176154][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.718004][ T49] bridge_slave_0: left allmulticast mode [ 418.724019][ T49] bridge_slave_0: left promiscuous mode [ 418.753378][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.313088][ T8747] xt_CT: You must specify a L4 protocol and not use inversions on it [ 419.535301][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 419.545964][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 419.556758][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 419.567105][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 419.583777][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 419.817457][ T49] team0: Port device geneve0 removed [ 420.115593][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.231576][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.331949][ T49] bond0 (unregistering): Released all slaves [ 421.360515][ T8761] xt_bpf: check failed: parse error [ 421.533273][ T8761] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.754'. [ 421.748509][ T5838] Bluetooth: hci1: command tx timeout [ 423.254991][ T8761] netlink: 3696 bytes leftover after parsing attributes in process `syz.2.754'. [ 423.311106][ T8769] tipc: Started in network mode [ 423.316056][ T8769] tipc: Node identity 4, cluster identity 4711 [ 423.322390][ T8769] tipc: Node number set to 4 [ 423.829113][ T5838] Bluetooth: hci1: command tx timeout [ 424.824140][ T49] tipc: Left network mode [ 425.915590][ T5838] Bluetooth: hci1: command tx timeout [ 425.962870][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 425.963027][ T30] audit: type=1400 audit(1753705176.313:49): lsm=SMACK fn=smack_key_permission action=denied subject="y" object="_" requested=w pid=8787 comm="syz.3.762" key_serial=526453429 key_desc="_uid_ses.0" [ 426.007272][ T30] audit: type=1400 audit(1753705176.313:50): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=8787 comm="syz.3.762" name="/" dev="mqueue" ino=16299 [ 426.873034][ T30] audit: type=1400 audit(1753705176.323:51): lsm=SMACK fn=smack_file_receive action=denied subject="y" object="_" requested=w pid=8787 comm="syz.3.762" path="pipe:[15353]" dev="pipefs" ino=15353 [ 427.879646][ T8799] overlayfs: conflicting lowerdir path [ 428.013974][ T5838] Bluetooth: hci1: command tx timeout [ 428.771975][ T8748] chnl_net:caif_netlink_parms(): no params data found [ 428.808455][ T8812] netlink: 104 bytes leftover after parsing attributes in process `syz.3.767'. [ 429.009174][ T8811] netlink: 8 bytes leftover after parsing attributes in process `syz.3.767'. [ 430.054809][ T49] batadv_slave_0: left promiscuous mode [ 430.163089][ T49] hsr_slave_0: left promiscuous mode [ 430.207481][ T49] hsr_slave_1: left promiscuous mode [ 431.161568][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.231668][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.266391][ T8838] netlink: 'syz.0.771': attribute type 10 has an invalid length. [ 431.274774][ T8838] netlink: 40 bytes leftover after parsing attributes in process `syz.0.771'. [ 433.923717][ T49] team0 (unregistering): Port device team_slave_1 removed [ 434.091482][ T49] team0 (unregistering): Port device team_slave_0 removed [ 436.142462][ T8835] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 436.173135][ T8838] dummy0: entered promiscuous mode [ 436.200497][ T8838] bridge0: port 3(dummy0) entered blocking state [ 436.215048][ T8838] bridge0: port 3(dummy0) entered disabled state [ 436.243944][ T8838] dummy0: entered allmulticast mode [ 436.268538][ T8838] bridge0: port 3(dummy0) entered blocking state [ 436.275031][ T8838] bridge0: port 3(dummy0) entered forwarding state [ 436.346361][ T8860] netlink: 8 bytes leftover after parsing attributes in process `syz.2.779'. [ 436.523649][ T8748] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.810039][ T8748] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.931080][ T8748] bridge_slave_0: entered allmulticast mode [ 437.175505][ T8748] bridge_slave_0: entered promiscuous mode [ 437.308182][ T8748] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.325348][ T8748] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.383172][ T8748] bridge_slave_1: entered allmulticast mode [ 437.504161][ T8748] bridge_slave_1: entered promiscuous mode [ 438.138492][ T8884] overlayfs: failed to resolve './file0': -2 [ 438.700915][ T8880] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 439.510345][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 439.516560][ T5838] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 440.565898][ T8748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.590552][ T8748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.719484][ T8907] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 441.128498][ T8900] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 441.364874][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.402636][ T8907] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 442.156558][ T8748] team0: Port device team_slave_0 added [ 442.498962][ T8914] netlink: 44 bytes leftover after parsing attributes in process `syz.2.791'. [ 442.616904][ T8748] team0: Port device team_slave_1 added [ 442.631673][ T5841] Bluetooth: hci5: command 0x1003 tx timeout [ 442.638298][ T5838] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 443.144682][ T8748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.170972][ T8748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.232555][ T8748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.249441][ T8748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.256657][ T8748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.288548][ T8748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.443234][ T8924] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 444.147305][ T8919] overlay: Unknown parameter '\ÿÿÿ' [ 445.121386][ T8931] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 445.386832][ T8935] kvm: user requested TSC rate below hardware speed [ 445.495796][ T8748] hsr_slave_0: entered promiscuous mode [ 445.619181][ T8748] hsr_slave_1: entered promiscuous mode [ 445.626737][ T8748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 445.637711][ T8748] Cannot create hsr debugfs directory [ 446.831910][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 447.238968][ T30] audit: type=1800 audit(1753705197.620:52): pid=8947 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.801" name="/" dev="9p" ino=2 res=0 errno=0 [ 447.304053][ T8748] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 447.337749][ T8748] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 447.379043][ T8748] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 447.407022][ T8748] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 447.603447][ T8748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.640269][ T8748] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.665274][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.672527][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.695387][ T7366] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.702767][ T7366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.055075][ T8961] tmpfs: Invalid gid '0x00000000ffffffff' [ 448.872263][ T5838] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 449.506069][ T8748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.807594][ T8979] netlink: 44 bytes leftover after parsing attributes in process `syz.2.806'. [ 450.927338][ T8988] FAULT_INJECTION: forcing a failure. [ 450.927338][ T8988] name failslab, interval 1, probability 0, space 0, times 0 [ 450.961326][ T8988] CPU: 0 UID: 0 PID: 8988 Comm: syz.0.809 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 450.961357][ T8988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.961369][ T8988] Call Trace: [ 450.961377][ T8988] [ 450.961385][ T8988] dump_stack_lvl+0x189/0x250 [ 450.961416][ T8988] ? __pfx____ratelimit+0x10/0x10 [ 450.961438][ T8988] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.961461][ T8988] ? __pfx__printk+0x10/0x10 [ 450.961494][ T8988] ? __pfx___might_resched+0x10/0x10 [ 450.961516][ T8988] ? fs_reclaim_acquire+0x7d/0x100 [ 450.961546][ T8988] should_fail_ex+0x414/0x560 [ 450.961575][ T8988] should_failslab+0xa8/0x100 [ 450.961597][ T8988] __kmalloc_noprof+0xcb/0x4f0 [ 450.961614][ T8988] ? kfree+0x4d/0x440 [ 450.961645][ T8988] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 450.961677][ T8988] tomoyo_realpath_from_path+0xe3/0x5d0 [ 450.961704][ T8988] ? tomoyo_domain+0xda/0x130 [ 450.961736][ T8988] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 450.961759][ T8988] tomoyo_path_number_perm+0x1e8/0x5a0 [ 450.961785][ T8988] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 450.961827][ T8988] ? __lock_acquire+0xab9/0xd20 [ 450.961882][ T8988] ? __fget_files+0x2a/0x420 [ 450.961909][ T8988] ? __fget_files+0x2a/0x420 [ 450.961930][ T8988] ? __fget_files+0x3a0/0x420 [ 450.961951][ T8988] ? __fget_files+0x2a/0x420 [ 450.961979][ T8988] security_file_ioctl+0xcb/0x2d0 [ 450.962006][ T8988] __se_sys_ioctl+0x47/0x170 [ 450.962038][ T8988] do_syscall_64+0xfa/0x3b0 [ 450.962062][ T8988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.962080][ T8988] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 450.962098][ T8988] ? clear_bhb_loop+0x60/0xb0 [ 450.962123][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.962142][ T8988] RIP: 0033:0x7f0befb8e9a9 [ 450.962162][ T8988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.962179][ T8988] RSP: 002b:00007f0bf0a4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.962201][ T8988] RAX: ffffffffffffffda RBX: 00007f0befdb5fa0 RCX: 00007f0befb8e9a9 [ 450.962217][ T8988] RDX: 0000200000000080 RSI: 00000000000089f1 RDI: 0000000000000003 [ 450.962229][ T8988] RBP: 00007f0bf0a4b090 R08: 0000000000000000 R09: 0000000000000000 [ 450.962242][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.962254][ T8988] R13: 0000000000000000 R14: 00007f0befdb5fa0 R15: 00007ffdf8100ed8 [ 450.962288][ T8988] [ 451.282174][ T8988] ERROR: Out of memory at tomoyo_realpath_from_path. [ 453.613524][ T8748] veth0_vlan: entered promiscuous mode [ 453.641082][ T8748] veth1_vlan: entered promiscuous mode [ 453.774646][ T8748] veth0_macvtap: entered promiscuous mode [ 453.851906][ T8748] veth1_macvtap: entered promiscuous mode [ 453.875792][ T8748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 453.888368][ T8748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.901233][ T8748] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.992982][ T8748] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.001827][ T8748] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.011107][ T8748] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.421761][ T6033] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.493973][ T6033] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.713083][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 455.747126][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 455.778720][ T9029] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 455.973154][ T9033] netlink: 44 bytes leftover after parsing attributes in process `syz.3.820'. [ 456.540584][ T9036] : left allmulticast mode [ 456.552991][ T9036] : left promiscuous mode [ 456.568880][ T9036] bridge0: port 1() entered disabled state [ 456.825204][ T9036] bridge_slave_1: left allmulticast mode [ 456.964554][ T9036] bridge_slave_1: left promiscuous mode [ 456.983285][ T9036] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.245538][ T9036] bond0: (slave bond_slave_0): Releasing backup interface [ 458.503786][ T9036] bond0: (slave bond_slave_1): Releasing backup interface [ 459.200532][ T9036] team0: Port device team_slave_0 removed [ 459.236717][ T9036] team0: Port device team_slave_1 removed [ 459.261631][ T9036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 459.293090][ T9036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.341774][ T9036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 459.403131][ T9036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.496663][ T9058] comedi comedi3: aio_iiro_16: I/O port conflict (0x4f27,8) [ 460.407402][ T9065] netlink: 32 bytes leftover after parsing attributes in process `syz.3.826'. [ 461.605969][ T9073] bridge0: entered promiscuous mode [ 461.611380][ T9073] bridge0: entered allmulticast mode [ 461.625922][ T9072] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.633318][ T9072] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.664613][ T9078] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 462.171730][ T9080] comedi: valid board names for 8255 driver are: [ 462.263171][ T9080] 8255 [ 462.266034][ T9080] comedi: valid board names for vmk80xx driver are: [ 462.273857][ T9080] vmk80xx [ 462.288965][ T9080] comedi: valid board names for usbduxsigma driver are: [ 462.310804][ T9080] usbduxsigma [ 462.693352][ T9080] comedi: valid board names for usbduxfast driver are: [ 462.700373][ T9080] usbduxfast [ 462.730069][ T9080] comedi: valid board names for usbdux driver are: [ 462.736858][ T9080] usbdux [ 462.740558][ T9080] comedi: valid board names for ni6501 driver are: [ 462.777767][ T9089] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 462.944435][ T9080] ni6501 [ 463.305028][ T9080] comedi: valid board names for dt9812 driver are: [ 463.319009][ T9080] dt9812 [ 463.321981][ T9080] comedi: valid board names for ni_labpc_cs driver are: [ 463.427889][ T9080] ni_labpc_cs [ 463.457629][ T9098] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input13 [ 464.397822][ T9080] comedi: valid board names for ni_daq_700 driver are: [ 464.418207][ T9080] ni_daq_700 [ 464.424955][ T9080] comedi: valid board names for labpc_pci driver are: [ 464.432783][ T9080] labpc_pci [ 464.437071][ T9080] comedi: valid board names for adl_pci9118 driver are: [ 464.444262][ T9080] pci9118dg [ 464.447628][ T9080] pci9118hg [ 464.450922][ T9080] pci9118hr [ 464.454253][ T9080] comedi: valid board names for 8255_pci driver are: [ 464.462113][ T9080] 8255_pci [ 464.466285][ T9080] comedi: valid board names for s526 driver are: [ 464.473017][ T9080] s526 [ 464.477773][ T9080] comedi: valid board names for multiq3 driver are: [ 464.487743][ T9080] multiq3 [ 464.491039][ T9080] comedi: valid board names for pcmuio driver are: [ 464.497871][ T9080] pcmuio48 [ 464.501224][ T9080] pcmuio96 [ 464.507042][ T9080] comedi: valid board names for pcmmio driver are: [ 464.515397][ T9080] pcmmio [ 464.518564][ T9080] comedi: valid board names for pcmda12 driver are: [ 464.528581][ T9080] pcmda12 [ 464.532098][ T9080] comedi: valid board names for pcmad driver are: [ 464.539028][ T9080] pcmad12 [ 464.542228][ T9080] pcmad16 [ 464.558318][ T9080] comedi: valid board names for ni_labpc driver are: [ 464.581565][ T9080] lab-pc-1200 [ 464.688149][ T9080] lab-pc-1200ai [ 464.691784][ T9080] lab-pc+ [ 464.832154][ T9080] comedi: valid board names for atmio16 driver are: [ 464.862537][ T9080] atmio16 [ 465.003824][ T9080] atmio16d [ 465.014163][ T9080] comedi: valid board names for ni_at_ao driver are: [ 465.037421][ T9080] at-ao-6 [ 465.044787][ T9104] binder: 9103:9104 unknown command 0 [ 465.071327][ T9080] at-ao-10 [ 465.075924][ T9104] binder: 9103:9104 ioctl c0306201 2000000003c0 returned -22 [ 465.090262][ T9080] comedi: valid board names for ni_at_a2150 driver are: [ 465.125484][ T9080] ni_at_a2150 [ 465.129086][ T9080] comedi: valid board names for adq12b driver are: [ 465.136998][ T9080] adq12b [ 465.140226][ T9080] comedi: valid board names for mpc624 driver are: [ 465.148219][ T9080] mpc624 [ 465.151846][ T9080] comedi: valid board names for c6xdigio driver are: [ 465.164098][ T9080] c6xdigio [ 465.168051][ T9080] comedi: valid board names for aio_iiro_16 driver are: [ 465.234514][ T9080] aio_iiro_16 [ 465.247748][ T9080] comedi: valid board names for aio_aio12_8 driver are: [ 465.249715][ T9123] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 465.289849][ T9080] aio_aio12_8 [ 465.306447][ T9080] aio_ai12_8 [ 465.317294][ T9080] aio_ao12_4 [ 465.330270][ T9080] comedi: valid board names for fl512 driver are: [ 465.355063][ T9080] fl512 [ 465.363339][ T9080] comedi: valid board names for dmm32at driver are: [ 465.374706][ T9080] dmm32at [ 465.378303][ T9080] comedi: valid board names for dt282x driver are: [ 465.383712][ T9125] netlink: 32 bytes leftover after parsing attributes in process `syz.1.844'. [ 465.392641][ T9080] dt2821 [ 465.402602][ T9080] dt2821-f [ 465.406712][ T9080] dt2821-g [ 465.411613][ T9080] dt2823 [ 465.414889][ T9080] dt2824-pgh [ 465.418636][ T9080] dt2824-pgl [ 465.422132][ T9080] dt2825 [ 465.452671][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.844'. [ 465.540652][ T9125] bond2: entered promiscuous mode [ 465.546085][ T9125] bond2: entered allmulticast mode [ 465.579236][ T9080] dt2827 [ 465.582817][ T10] IPVS: starting estimator thread 0... [ 465.582913][ T9125] 8021q: adding VLAN 0 to HW filter on device bond2 [ 465.596269][ T9080] dt2828 [ 465.599295][ T9080] dt2829 [ 465.602305][ T9080] dt21-ez [ 465.638452][ T9080] dt23-ez [ 465.641552][ T9080] dt24-ez [ 465.673929][ T9131] IPVS: using max 31 ests per chain, 74400 per kthread [ 465.722500][ T9080] dt24-ez-pgl [ 465.751202][ T9080] comedi: valid board names for dt2817 driver are: [ 465.788940][ T9080] dt2817 [ 465.803142][ T9080] comedi: valid board names for dt2815 driver are: [ 465.893368][ T9080] dt2815 [ 465.914365][ T9080] comedi: valid board names for dt2814 driver are: [ 465.957043][ T9080] dt2814 [ 465.960434][ T9080] comedi: valid board names for dt2811 driver are: [ 466.015009][ T9080] dt2811-pgh [ 466.019846][ T9080] dt2811-pgl [ 466.043375][ T9080] comedi: valid board names for dt2801 driver are: [ 466.092441][ T9080] dt2801 [ 466.121558][ T9080] comedi: valid board names for das6402 driver are: [ 466.260148][ T9080] das6402-12 [ 466.263510][ T9080] das6402-16 [ 466.341811][ T9140] Cannot find del_set index 286 as target [ 466.393681][ T9080] comedi: valid board names for das1800 driver are: [ 466.415664][ T9080] das-1701st [ 466.419019][ T9080] das-1701st-da [ 466.422595][ T9080] das-1702st [ 466.531421][ T9080] das-1702st-da [ 467.065708][ T9080] das-1702hr [ 467.069079][ T9080] das-1702hr-da [ 467.072671][ T9080] das-1701ao [ 467.154167][ T9080] das-1702ao [ 467.192336][ T9080] das-1801st [ 467.207334][ T9145] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 467.248228][ T9080] das-1801st-da [ 467.287142][ T9080] das-1802st [ 467.333454][ T9080] das-1802st-da [ 467.370247][ T9080] das-1802hr [ 467.415753][ T9080] das-1802hr-da [ 467.449848][ T9080] das-1801hc [ 467.498135][ T9080] das-1802hc [ 467.529753][ T9080] das-1801ao [ 467.566852][ T9080] das-1802ao [ 467.615073][ T9080] comedi: valid board names for das800 driver are: [ 467.694113][ T9080] das-800 [ 467.729304][ T9080] cio-das800 [ 467.759708][ T9080] das-801 [ 467.796593][ T9080] cio-das801 [ 467.846008][ T9080] das-802 [ 467.878750][ T9080] cio-das802 [ 467.923337][ T9080] cio-das802/16 [ 467.958703][ T9080] comedi: valid board names for isa-das08 driver are: [ 467.985815][ T9080] isa-das08 [ 467.989137][ T9080] das08-pgm [ 467.992430][ T9080] das08-pgh [ 467.996159][ T9080] das08-pgl [ 467.999449][ T9080] das08-aoh [ 468.002721][ T9080] das08-aol [ 468.006054][ T9080] das08-aom [ 468.009434][ T9080] das08/jr-ao [ 468.012881][ T9080] das08jr-16-ao [ 468.016831][ T9080] pc104-das08 [ 468.020397][ T9080] das08jr/16 [ 468.023771][ T9080] comedi: valid board names for das16m1 driver are: [ 468.030637][ T9080] das16m1 [ 468.033766][ T9080] comedi: valid board names for dac02 driver are: [ 468.040391][ T9080] dac02 [ 468.043429][ T9080] comedi: valid board names for rti802 driver are: [ 468.050227][ T9080] rti802 [ 468.053249][ T9080] comedi: valid board names for rti800 driver are: [ 468.060104][ T9080] rti800 [ 468.063117][ T9080] rti815 [ 468.066171][ T9080] comedi: valid board names for pcm3724 driver are: [ 468.072952][ T9080] pcm3724 [ 468.084004][ T9080] comedi: valid board names for pcl818 driver are: [ 468.091211][ T9080] pcl818l [ 468.096551][ T9080] pcl818h [ 468.096606][ T6033] Bluetooth: hci5: Frame reassembly failed (-84) [ 468.099641][ T9080] pcl818hd [ 468.099653][ T9080] pcl818hg [ 468.099669][ T9080] pcl818 [ 468.099678][ T9080] pcl718 [ 468.099686][ T9080] pcm3718 [ 468.099695][ T9080] comedi: valid board names for pcl816 driver are: [ 468.099706][ T9080] pcl816 [ 468.099715][ T9080] pcl814b [ 468.099723][ T9080] comedi: valid board names for pcl812 driver are: [ 468.099734][ T9080] pcl812 [ 468.099741][ T9080] pcl812pg [ 468.099750][ T9080] acl8112pg [ 468.099758][ T9080] acl8112dg [ 468.099766][ T9080] acl8112hg [ 468.099774][ T9080] a821pgl [ 468.099782][ T9080] a821pglnda [ 468.099791][ T9080] a821pgh [ 468.099799][ T9080] a822pgl [ 468.099808][ T9080] a822pgh [ 468.099817][ T9080] a823pgl [ 468.099825][ T9080] a823pgh [ 468.099833][ T9080] pcl813 [ 468.099842][ T9080] pcl813b [ 468.099851][ T9080] acl8113 [ 468.099859][ T9080] iso813 [ 468.099867][ T9080] acl8216 [ 468.099876][ T9080] a826pg [ 468.099884][ T9080] comedi: valid board names for pcl730 driver are: [ 468.099896][ T9080] pcl730 [ 468.099904][ T9080] iso730 [ 468.099912][ T9080] acl7130 [ 468.099920][ T9080] pcm3730 [ 468.099929][ T9080] pcl725 [ 468.099937][ T9080] p8r8dio [ 468.099945][ T9080] acl7225b [ 468.099952][ T9080] p16r16dio [ 468.099960][ T9080] pcl733 [ 468.099968][ T9080] pcl734 [ 468.099976][ T9080] opmm-1616-xt [ 468.099984][ T9080] pearl-mm-p [ 468.099992][ T9080] ir104-pbf [ 468.100001][ T9080] comedi: valid board names for pcl726 driver are: [ 468.100012][ T9080] pcl726 [ 468.100020][ T9080] pcl727 [ 468.100028][ T9080] pcl728 [ 468.100037][ T9080] acl6126 [ 468.100044][ T9080] acl6128 [ 468.290330][ T9080] comedi: valid board names for pcl724 driver are: [ 468.651684][ T9080] pcl724 [ 468.744045][ T9080] pcl722 [ 468.753286][ T9080] pcl731 [ 468.786044][ T9080] acl7122 [ 468.908195][ T9080] acl7124 [ 468.911270][ T9080] pet48dio [ 468.921808][ T9080] pcmio48 [ 468.925272][ T9080] onyx-mm-dio [ 468.934618][ T9080] comedi: valid board names for pcl711 driver are: [ 468.941189][ T9080] pcl711 [ 468.944332][ T9080] pcl711b [ 468.947386][ T9080] acl8112hg [ 468.950907][ T9080] acl8112dg [ 468.962356][ T9080] comedi: valid board names for amplc_pc263 driver are: [ 468.976140][ T9080] pc263 [ 468.979059][ T9080] comedi: valid board names for amplc_pc236 driver are: [ 469.003979][ T9080] pc36at [ 469.021481][ T9080] comedi: valid board names for amplc_dio200 driver are: [ 469.044352][ T9080] pc212e [ 469.075078][ T9080] pc214e [ 469.080729][ T9080] pc215e [ 469.083756][ T9080] pc218e [ 469.094095][ T9080] pc272e [ 469.097174][ T9080] comedi: valid board names for comedi_parport driver are: [ 469.115360][ T9080] comedi_parport [ 469.119050][ T9080] comedi: valid board names for comedi_test driver are: [ 469.128326][ T9080] comedi_test [ 469.131747][ T9080] comedi: valid board names for comedi_bond driver are: [ 469.140362][ T9080] comedi_bond [ 470.201745][ T5841] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 470.202694][ T5838] Bluetooth: hci5: command 0x1003 tx timeout [ 471.991985][ T9197] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.000005][ T9197] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.008515][ T9197] bridge0: entered promiscuous mode [ 472.013856][ T9197] bridge0: entered allmulticast mode [ 472.027155][ T9197] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.034473][ T9197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.042215][ T9197] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.049536][ T9197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.292761][ T9194] loop6: detected capacity change from 0 to 2098 [ 472.953443][ T9211] openvswitch: netlink: IP tunnel dst address not specified [ 475.667123][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.870'. [ 476.167148][ T9242] IPv6: Can't replace route, no match found [ 476.182462][ T9242] kAFS: No cell specified [ 477.165967][ T9238] netlink: 'syz.1.875': attribute type 3 has an invalid length. [ 477.173773][ T9238] netlink: 'syz.1.875': attribute type 3 has an invalid length. [ 477.200295][ T9238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.875'. [ 480.487288][ T9] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 481.001678][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.039802][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 481.074969][ T9] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 481.098380][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.107749][ T9] usb 6-1: Product: áŒíŠ¯âŠ•è¨‘ï²³ãŽ±ëšãŽšã¨³é™£ê·±á›ê»¿î€³ç‡­á¯’칌蔙׀滊èªá˜¢ãŽ´á¯·î©™â…ªÈ¯å«–ÝŽç°‡î‚±ï¾ƒî“ዧ敢㥡贗茞䓉磭ꮪ⺩⽌뽿sä³—í‚ꃨ⧺⫽᳠[ 481.436522][ T9272] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.443828][ T9272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.451641][ T9272] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.458927][ T9272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.619312][ T9] usb 6-1: Manufacturer: 㬗㕿ǎâ™ï›†Î¤ã—€ï­…æ§’î•ì•笣耜箊汾敓îŸä îŸ¤à¶ƒî­ì¯¡ã»šä­¼ [ 481.619312][ T9] 辡牞鄻ꂄ骧梧╃Êꓲʥȱᠦメ鉄蛆釶è“ﻰ璯䆫啴혢ᓱ摬⦚䘟뎭䀡橞⌨㬌쟡艀숬ꦷ礃檦푒眙㾵ä…鸕æ–鯞ä¥åˆ å„Šç‹¡êšãˆ³ [ 481.646484][ T9] usb 6-1: SerialNumber: Щ [ 482.326655][ T9] usb 6-1: 0:2 : does not exist [ 482.355574][ T9278] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.363068][ T9278] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.382549][ T9278] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.389725][ T9278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.397270][ T9278] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.404445][ T9278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.555495][ T9] usb 6-1: USB disconnect, device number 2 [ 482.682732][ T9019] udevd[9019]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 482.724635][ T9286] netlink: 'syz.3.889': attribute type 1 has an invalid length. [ 482.770486][ T9286] netlink: 224 bytes leftover after parsing attributes in process `syz.3.889'. [ 482.789137][ T9286] FAULT_INJECTION: forcing a failure. [ 482.789137][ T9286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 482.808928][ T9286] CPU: 0 UID: 0 PID: 9286 Comm: syz.3.889 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 482.808955][ T9286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 482.808966][ T9286] Call Trace: [ 482.808975][ T9286] [ 482.808984][ T9286] dump_stack_lvl+0x189/0x250 [ 482.809015][ T9286] ? __pfx____ratelimit+0x10/0x10 [ 482.809039][ T9286] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.809064][ T9286] ? __pfx__printk+0x10/0x10 [ 482.809107][ T9286] should_fail_ex+0x414/0x560 [ 482.809136][ T9286] _copy_to_user+0x31/0xb0 [ 482.809169][ T9286] simple_read_from_buffer+0xe1/0x170 [ 482.809196][ T9286] proc_fail_nth_read+0x1df/0x250 [ 482.809225][ T9286] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 482.809255][ T9286] ? rw_verify_area+0x258/0x650 [ 482.809284][ T9286] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 482.809309][ T9286] vfs_read+0x200/0x980 [ 482.809346][ T9286] ? __pfx___mutex_lock+0x10/0x10 [ 482.809369][ T9286] ? __pfx_vfs_read+0x10/0x10 [ 482.809400][ T9286] ? __fget_files+0x2a/0x420 [ 482.809428][ T9286] ? __fget_files+0x3a0/0x420 [ 482.809447][ T9286] ? __fget_files+0x2a/0x420 [ 482.809480][ T9286] ksys_read+0x145/0x250 [ 482.809503][ T9286] ? __pfx_ksys_read+0x10/0x10 [ 482.809519][ T9286] ? rcu_is_watching+0x15/0xb0 [ 482.809544][ T9286] ? do_syscall_64+0xbe/0x3b0 [ 482.809571][ T9286] do_syscall_64+0xfa/0x3b0 [ 482.809591][ T9286] ? lockdep_hardirqs_on+0x9c/0x150 [ 482.809612][ T9286] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.809641][ T9286] ? clear_bhb_loop+0x60/0xb0 [ 482.809665][ T9286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.809684][ T9286] RIP: 0033:0x7f5f0578d3bc [ 482.809703][ T9286] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 482.809719][ T9286] RSP: 002b:00007f5f0662f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 482.809742][ T9286] RAX: ffffffffffffffda RBX: 00007f5f059b5fa0 RCX: 00007f5f0578d3bc [ 482.809756][ T9286] RDX: 000000000000000f RSI: 00007f5f0662f0a0 RDI: 0000000000000003 [ 482.809769][ T9286] RBP: 00007f5f0662f090 R08: 0000000000000000 R09: 0000000000000000 [ 482.809781][ T9286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.809792][ T9286] R13: 0000000000000000 R14: 00007f5f059b5fa0 R15: 00007ffc5782d148 [ 482.809827][ T9286] [ 483.256709][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 483.400237][ T9292] IPv6: Can't replace route, no match found [ 483.406433][ T24] usb 3-1: device descriptor read/64, error -71 [ 483.431581][ T9292] kAFS: No cell specified [ 484.099301][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 484.533745][ T24] usb 3-1: device descriptor read/64, error -71 [ 484.901110][ T24] usb usb3-port1: attempt power cycle [ 485.631858][ T5958] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 485.686844][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 485.822749][ T5958] usb 2-1: Using ep0 maxpacket: 32 [ 485.866713][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.880155][ T24] usb 3-1: device descriptor read/8, error -71 [ 485.967784][ T5958] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 486.041875][ T5958] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 486.125472][ T5958] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.609954][ T5958] usb 2-1: config 0 descriptor?? [ 486.685108][ T5958] hub 2-1:0.0: USB hub found [ 486.701428][ T9309] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input14 [ 487.285869][ T5958] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 487.730259][ T9316] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.737627][ T9316] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.750732][ T9316] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.757977][ T9316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.765503][ T9316] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.772721][ T9316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.990292][ T5958] usbhid 2-1:0.0: can't add hid device: -71 [ 488.005281][ T5958] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 488.060240][ T5958] usb 2-1: USB disconnect, device number 9 [ 494.182750][ T9368] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.190186][ T9368] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.203475][ T9368] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.210809][ T9368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 494.218450][ T9368] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.225752][ T9368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.160757][ T9408] openvswitch: netlink: IP tunnel dst address not specified [ 499.446093][ T9415] Invalid logical block size (48858) [ 500.221864][ T9420] Cannot find del_set index 286 as target [ 501.600335][ T3501] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.659176][ T3501] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.823316][ T9438] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 502.281112][ T3501] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 502.339214][ T3501] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.415630][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.899682][ T9457] Invalid logical block size (301989888) [ 503.984828][ T3501] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.004841][ T3501] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.036780][ T9454] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 504.940931][ T3501] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 504.961502][ T3501] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.972861][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 504.983689][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 504.992556][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 505.067525][ T9460] tipc: Started in network mode [ 505.072893][ T9460] tipc: Node identity 4, cluster identity 4711 [ 505.079494][ T9460] tipc: Node number set to 4 [ 505.248050][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 505.276527][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 505.910060][ T9473] Cannot find del_set index 286 as target [ 507.075940][ T9479] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.083284][ T9479] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.093630][ T9483] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.100885][ T9483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.108241][ T9483] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.115389][ T9483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.419962][ T5841] Bluetooth: hci0: command tx timeout [ 508.813238][ T3501] dummy0: left allmulticast mode [ 508.839539][ T3501] bridge0: port 3(dummy0) entered disabled state [ 508.928072][ T3501] bridge_slave_1: left allmulticast mode [ 508.934050][ T3501] bridge_slave_1: left promiscuous mode [ 508.941731][ T3501] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.965168][ T3501] bridge_slave_0: left allmulticast mode [ 508.972144][ T3501] bridge_slave_0: left promiscuous mode [ 508.978196][ T3501] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.088463][ T9504] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input15 [ 509.788914][ T5841] Bluetooth: hci0: command tx timeout [ 510.709688][ T5899] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 511.369514][ T5899] usb 6-1: Invalid ep0 maxpacket: 16 [ 511.514691][ T5899] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 511.615575][ T3501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.632325][ T3501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.646719][ T3501] bond0 (unregistering): Released all slaves [ 511.679469][ T5899] usb 6-1: Invalid ep0 maxpacket: 16 [ 511.698358][ T5899] usb usb6-port1: attempt power cycle [ 511.850386][ T5841] Bluetooth: hci0: command tx timeout [ 511.968079][ T3501] tipc: Left network mode [ 512.339892][ T5898] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 512.755209][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 512.967877][ T9462] chnl_net:caif_netlink_parms(): no params data found [ 512.976228][ T5898] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 512.987947][ T5898] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 513.790959][ T5898] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 513.809877][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.818332][ T5898] usb 2-1: Product: syz [ 513.875003][ T5898] usb 2-1: Manufacturer: syz [ 513.886492][ T5898] usb 2-1: SerialNumber: syz [ 513.921752][ T5841] Bluetooth: hci0: command tx timeout [ 514.587121][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.952'. [ 514.981404][ T9547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.956'. [ 515.043055][ T9546] IPv6: Can't replace route, no match found [ 515.079460][ T9546] kAFS: No cell specified [ 516.368257][ T9522] bridge0: port 1(macvlan2) entered blocking state [ 516.430283][ T9522] bridge0: port 1(macvlan2) entered disabled state [ 516.471116][ T9522] macvlan2: entered allmulticast mode [ 516.504347][ T9522] macvlan2: left allmulticast mode [ 516.881620][ T5841] Bluetooth: hci0: command tx timeout [ 517.941750][ T9462] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.948968][ T9462] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.990425][ T9462] bridge_slave_0: entered allmulticast mode [ 518.052716][ T5898] usb 2-1: 0:2 : does not exist [ 518.054011][ T9462] bridge_slave_0: entered promiscuous mode [ 518.134581][ T9557] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.141988][ T9557] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.158408][ T9558] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.165749][ T9558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 518.173377][ T9558] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.180605][ T9558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 518.236567][ T3501] hsr_slave_0: left promiscuous mode [ 518.322486][ T5898] usb 2-1: USB disconnect, device number 10 [ 518.675309][ T3501] hsr_slave_1: left promiscuous mode [ 518.860227][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.962580][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.104906][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.273062][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.804465][ T3501] veth1_macvtap: left promiscuous mode [ 519.833471][ T3501] veth0_macvtap: left promiscuous mode [ 519.865292][ T3501] veth1_vlan: left promiscuous mode [ 519.872037][ T3501] veth0_vlan: left promiscuous mode [ 519.874198][ T8797] udevd[8797]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.611561][ T9591] overlayfs: workdir and upperdir must be separate subtrees [ 521.720213][ T9592] IPv6: Can't replace route, no match found [ 521.736005][ T9592] kAFS: No cell specified [ 523.158370][ T3501] team0 (unregistering): Port device team_slave_1 removed [ 523.210507][ T3501] team0 (unregistering): Port device team_slave_0 removed [ 523.758516][ T9462] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.772784][ T9462] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.780546][ T9462] bridge_slave_1: entered allmulticast mode [ 523.794265][ T9462] bridge_slave_1: entered promiscuous mode [ 523.967337][ T9462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.055198][ T9462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.394391][ T9605] IPv6: Can't replace route, no match found [ 525.418451][ T9605] kAFS: No cell specified [ 526.068917][ T9462] team0: Port device team_slave_0 added [ 526.473413][ T9462] team0: Port device team_slave_1 added [ 526.718165][ T9614] overlayfs: workdir and upperdir must be separate subtrees [ 526.825510][ T3501] IPVS: stop unused estimator thread 0... [ 526.845765][ T9462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.871866][ T9462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.947752][ T9621] netlink: 'syz.3.978': attribute type 3 has an invalid length. [ 526.991420][ T9621] netlink: 'syz.3.978': attribute type 3 has an invalid length. [ 527.012792][ T9462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.033544][ T9621] netlink: 8 bytes leftover after parsing attributes in process `syz.3.978'. [ 527.075760][ T9462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.086290][ T9462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 527.143897][ T9462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.422304][ T9462] hsr_slave_0: entered promiscuous mode [ 528.432635][ T9462] hsr_slave_1: entered promiscuous mode [ 528.439587][ T9462] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.451933][ T9462] Cannot create hsr debugfs directory [ 530.197847][ T9649] fuse: Bad value for 'user_id' [ 530.202969][ T9649] fuse: Bad value for 'user_id' [ 535.522208][ T9662] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.529487][ T9662] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.539606][ T9666] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.546966][ T9666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.554509][ T9666] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.561701][ T9666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.715855][ T9462] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 535.746080][ T9462] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 535.817397][ T9462] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 535.865326][ T9462] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 535.879349][ T9672] overlayfs: workdir and upperdir must be separate subtrees [ 536.240021][ T9462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.306770][ T9462] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.361482][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.368968][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.396637][ T9682] netlink: 'syz.3.992': attribute type 3 has an invalid length. [ 536.431464][ T9682] netlink: 'syz.3.992': attribute type 3 has an invalid length. [ 536.472884][ T9682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.992'. [ 536.514627][ T1144] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.521989][ T1144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.615133][ T9684] Cannot find del_set index 286 as target [ 536.627320][ T9687] Bluetooth: MGMT ver 1.23 [ 536.708831][ T9462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 537.733164][ T9694] dlm: no local IP address has been set [ 537.738974][ T9694] dlm: cannot start dlm midcomms -107 [ 539.198629][ T9462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.729617][ T9711] i2c i2c-0: Invalid block write size 34 [ 539.747888][ T9715] netlink: 'syz.1.1000': attribute type 1 has an invalid length. [ 539.879574][ T9715] 8021q: adding VLAN 0 to HW filter on device bond3 [ 540.339257][ T5841] Bluetooth: hci2: command 0x0401 tx timeout [ 540.605267][ T9462] veth0_vlan: entered promiscuous mode [ 540.729080][ T9462] veth1_vlan: entered promiscuous mode [ 541.139199][ T9718] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.146780][ T9718] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.159432][ T9718] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.166757][ T9718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.174393][ T9718] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.181679][ T9718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.736759][ T9462] veth0_macvtap: entered promiscuous mode [ 541.787286][ T9462] veth1_macvtap: entered promiscuous mode [ 542.391291][ T9462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.507300][ T9462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.536654][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 542.563917][ T9462] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.627879][ T9462] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.677347][ T9462] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.862413][ T9734] Cannot find del_set index 286 as target [ 542.925654][ T9462] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.989360][ T9740] FAULT_INJECTION: forcing a failure. [ 543.989360][ T9740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 544.065632][ T9422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.080459][ T9422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.098424][ T9740] CPU: 0 UID: 0 PID: 9740 Comm: syz.1.1007 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 544.098451][ T9740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 544.098463][ T9740] Call Trace: [ 544.098472][ T9740] [ 544.098481][ T9740] dump_stack_lvl+0x189/0x250 [ 544.098511][ T9740] ? __pfx____ratelimit+0x10/0x10 [ 544.098534][ T9740] ? __pfx_dump_stack_lvl+0x10/0x10 [ 544.098556][ T9740] ? __pfx__printk+0x10/0x10 [ 544.098582][ T9740] ? __might_fault+0xb0/0x130 [ 544.098618][ T9740] should_fail_ex+0x414/0x560 [ 544.098646][ T9740] _copy_from_user+0x2d/0xb0 [ 544.098676][ T9740] comedi_unlocked_ioctl+0x3a9/0xfc0 [ 544.098710][ T9740] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 544.098751][ T9740] ? __pfx_smack_log+0x10/0x10 [ 544.098780][ T9740] ? smk_access+0x14c/0x4e0 [ 544.098817][ T9740] ? smk_tskacc+0x2fc/0x370 [ 544.098851][ T9740] ? smack_file_ioctl+0x24a/0x340 [ 544.098874][ T9740] ? __pfx_smack_file_ioctl+0x10/0x10 [ 544.098906][ T9740] ? __fget_files+0x2a/0x420 [ 544.098928][ T9740] ? __fget_files+0x3a0/0x420 [ 544.098948][ T9740] ? __fget_files+0x2a/0x420 [ 544.098974][ T9740] ? bpf_lsm_file_ioctl+0x9/0x20 [ 544.098998][ T9740] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 544.099018][ T9740] __se_sys_ioctl+0xfc/0x170 [ 544.099049][ T9740] do_syscall_64+0xfa/0x3b0 [ 544.099071][ T9740] ? lockdep_hardirqs_on+0x9c/0x150 [ 544.099092][ T9740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.099112][ T9740] ? clear_bhb_loop+0x60/0xb0 [ 544.099146][ T9740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.099165][ T9740] RIP: 0033:0x7f3f33d8e9a9 [ 544.099183][ T9740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.099200][ T9740] RSP: 002b:00007f3f34b53038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.099222][ T9740] RAX: ffffffffffffffda RBX: 00007f3f33fb5fa0 RCX: 00007f3f33d8e9a9 [ 544.099237][ T9740] RDX: 0000200000000300 RSI: 0000000040946400 RDI: 0000000000000003 [ 544.099250][ T9740] RBP: 00007f3f34b53090 R08: 0000000000000000 R09: 0000000000000000 [ 544.099262][ T9740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 544.099274][ T9740] R13: 0000000000000000 R14: 00007f3f33fb5fa0 R15: 00007fff5c718c28 [ 544.099309][ T9740] [ 544.121799][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 544.355837][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.473610][ T5914] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 544.563531][ T5838] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 544.564016][ T5841] Bluetooth: hci5: command 0x1003 tx timeout [ 544.734938][ T5914] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 544.995486][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.159786][ T5914] usb 3-1: config 0 descriptor?? [ 545.315227][ T5914] cp210x 3-1:0.0: cp210x converter detected [ 545.674744][ T9756] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.682152][ T9756] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.694825][ T9756] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.702152][ T9756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.709805][ T9756] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.717118][ T9756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 546.618534][ T5914] cp210x 3-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 546.646791][ T5914] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 546.667277][ T5914] usb 3-1: cp210x converter now attached to ttyUSB0 [ 546.707669][ T5914] usb 3-1: USB disconnect, device number 15 [ 546.837186][ T5914] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 546.950690][ T5914] cp210x 3-1:0.0: device disconnected [ 547.681836][ T9774] overlayfs: conflicting lowerdir path [ 547.895760][ T9779] Cannot find del_set index 286 as target [ 547.965697][ T9780] overlayfs: workdir and upperdir must be separate subtrees [ 550.673264][ T3501] Bluetooth: hci5: Frame reassembly failed (-84) [ 551.817730][ T9807] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.825195][ T9807] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.850249][ T9807] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.857584][ T9807] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.865276][ T9807] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.872546][ T9807] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.554286][ T9813] IPv6: Can't replace route, no match found [ 552.569273][ T9813] kAFS: No cell specified [ 553.454059][ T5841] Bluetooth: hci5: command 0x1003 tx timeout [ 553.462198][ T5838] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 554.203081][ T9821] overlayfs: conflicting lowerdir path [ 554.704409][ T9830] Cannot find del_set index 286 as target [ 556.132630][ T9841] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input16 [ 557.503434][ T9852] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.510793][ T9852] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.539302][ T9852] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.546663][ T9852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.554217][ T9852] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.561433][ T9852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.389157][ T9859] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input17 [ 559.612480][ T3501] Bluetooth: hci5: Frame reassembly failed (-84) [ 559.945890][ T9877] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1042'. [ 559.955133][ T9877] nbd: must specify at least one socket [ 560.146993][ T9883] FAULT_INJECTION: forcing a failure. [ 560.146993][ T9883] name failslab, interval 1, probability 0, space 0, times 0 [ 560.341201][ T9883] CPU: 1 UID: 0 PID: 9883 Comm: syz.3.1044 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 560.341231][ T9883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 560.341244][ T9883] Call Trace: [ 560.341252][ T9883] [ 560.341261][ T9883] dump_stack_lvl+0x189/0x250 [ 560.341289][ T9883] ? __pfx____ratelimit+0x10/0x10 [ 560.341311][ T9883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 560.341334][ T9883] ? __pfx__printk+0x10/0x10 [ 560.341363][ T9883] ? __pfx___might_resched+0x10/0x10 [ 560.341386][ T9883] ? fs_reclaim_acquire+0x7d/0x100 [ 560.341416][ T9883] should_fail_ex+0x414/0x560 [ 560.341442][ T9883] should_failslab+0xa8/0x100 [ 560.341467][ T9883] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 560.341488][ T9883] ? __alloc_skb+0x112/0x2d0 [ 560.341522][ T9883] __alloc_skb+0x112/0x2d0 [ 560.341553][ T9883] alloc_skb_with_frags+0xca/0x890 [ 560.341584][ T9883] ? process_measurement+0x1640/0x1a40 [ 560.341622][ T9883] sock_alloc_send_pskb+0x857/0x990 [ 560.341666][ T9883] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 560.341693][ T9883] ? dev_getfirstbyhwtype+0x24/0x280 [ 560.341716][ T9883] ? dev_getfirstbyhwtype+0x24/0x280 [ 560.341737][ T9883] ? dev_getfirstbyhwtype+0x24/0x280 [ 560.341762][ T9883] ? dev_getfirstbyhwtype+0x240/0x280 [ 560.341789][ T9883] dgram_sendmsg+0x3fe/0xd80 [ 560.341823][ T9883] ? __pfx_dgram_sendmsg+0x10/0x10 [ 560.341846][ T9883] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 560.341885][ T9883] ? __lock_acquire+0xab9/0xd20 [ 560.341908][ T9883] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 560.342009][ T9883] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 560.342040][ T9883] __sock_sendmsg+0x21c/0x270 [ 560.342068][ T9883] ____sys_sendmsg+0x52d/0x830 [ 560.342106][ T9883] ? __pfx_____sys_sendmsg+0x10/0x10 [ 560.342147][ T9883] ? import_iovec+0x74/0xa0 [ 560.342178][ T9883] ___sys_sendmsg+0x21f/0x2a0 [ 560.342210][ T9883] ? __pfx____sys_sendmsg+0x10/0x10 [ 560.342283][ T9883] ? __fget_files+0x2a/0x420 [ 560.342304][ T9883] ? __fget_files+0x3a0/0x420 [ 560.342339][ T9883] __sys_sendmmsg+0x227/0x430 [ 560.342376][ T9883] ? __pfx___sys_sendmmsg+0x10/0x10 [ 560.342402][ T9883] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 560.342457][ T9883] ? ksys_write+0x22a/0x250 [ 560.342478][ T9883] ? __pfx_ksys_write+0x10/0x10 [ 560.342506][ T9883] __x64_sys_sendmmsg+0xa0/0xc0 [ 560.342541][ T9883] do_syscall_64+0xfa/0x3b0 [ 560.342562][ T9883] ? lockdep_hardirqs_on+0x9c/0x150 [ 560.342583][ T9883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.342602][ T9883] ? clear_bhb_loop+0x60/0xb0 [ 560.342627][ T9883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.342646][ T9883] RIP: 0033:0x7f5f0578e9a9 [ 560.342665][ T9883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 560.342682][ T9883] RSP: 002b:00007f5f0660e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 560.342705][ T9883] RAX: ffffffffffffffda RBX: 00007f5f059b6080 RCX: 00007f5f0578e9a9 [ 560.342720][ T9883] RDX: 0000000000000002 RSI: 0000200000003b00 RDI: 0000000000000004 [ 560.342733][ T9883] RBP: 00007f5f0660e090 R08: 0000000000000000 R09: 0000000000000000 [ 560.342745][ T9883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 560.342757][ T9883] R13: 0000000000000001 R14: 00007f5f059b6080 R15: 00007ffc5782d148 [ 560.342789][ T9883] [ 561.091319][ T9887] Cannot find del_set index 286 as target [ 561.650650][ T5838] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 562.425177][ T9901] openvswitch: netlink: IP tunnel dst address not specified [ 563.235955][ T30] audit: type=1326 audit(1753705313.605:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9902 comm="syz.3.1051" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5f0578e9a9 code=0x0 [ 563.749524][ T9906] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.756954][ T9906] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.781610][ T9906] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.788928][ T9906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.796622][ T9906] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.803912][ T9906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.850017][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.613782][ T9929] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1056'. [ 568.684681][ T9943] openvswitch: netlink: IP tunnel dst address not specified [ 569.227667][ T9939] openvswitch: netlink: IP tunnel dst address not specified [ 569.641790][ T30] audit: type=1326 audit(1753705319.765:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9946 comm="syz.2.1062" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcff958e9a9 code=0x0 [ 570.584431][ T9960] dlm: no local IP address has been set [ 570.590419][ T9960] dlm: cannot start dlm midcomms -107 [ 570.716236][ T9962] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1065'. [ 572.322490][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 572.810779][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 572.820200][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.073758][ T10] usb 4-1: Product: syz [ 573.099852][ T10] usb 4-1: Manufacturer: syz [ 573.115110][ T10] usb 4-1: SerialNumber: syz [ 573.341850][ T10] usb 4-1: config 0 descriptor?? [ 573.359463][ T10] gspca_main: sonixb-2.14.0 probing 0c45:608f [ 574.237487][ T10] sonixb 4-1:0.0: Error writing register 01: -110 [ 574.244001][ T10] sonixb 4-1:0.0: probe with driver sonixb failed with error -110 [ 575.836405][ T10] usb 4-1: USB disconnect, device number 10 [ 576.259818][ T30] audit: type=1326 audit(1753705326.634:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9996 comm="syz.2.1075" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcff958e9a9 code=0x0 [ 577.710979][T10005] dlm: no local IP address has been set [ 577.716666][T10005] dlm: cannot start dlm midcomms -107 [ 577.799776][T10006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1079'. [ 578.212566][ T30] audit: type=1400 audit(1753705328.084:56): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=10002 comm="syz.5.1078" name="/" dev="mqueue" ino=20495 [ 578.653168][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 578.671910][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 578.687353][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 578.701445][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 578.711248][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 578.814030][T10016] IPv6: Can't replace route, no match found [ 579.986560][T10020] kvm: user requested TSC rate below hardware speed [ 580.824551][ T5841] Bluetooth: hci5: command tx timeout [ 582.888336][ T5841] Bluetooth: hci5: command tx timeout [ 583.034352][T10034] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.041652][T10034] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.050982][T10037] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.058200][T10037] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.065630][T10037] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.072853][T10037] bridge0: port 1(bridge_slave_0) entered forwarding state [ 583.961295][T10014] chnl_net:caif_netlink_parms(): no params data found [ 584.207094][ T9422] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.528954][ T30] audit: type=1400 audit(1753705334.903:57): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="_" requested=wx pid=10055 comm="syz.2.1091" name="/" dev="mqueue" ino=3851 [ 584.558228][ T30] audit: type=1400 audit(1753705334.923:58): lsm=SMACK fn=smack_inode_permission action=denied subject="y" object="sched_switch" requested=x pid=10055 comm="syz.2.1091" name="/" dev="tmpfs" ino=1 [ 584.587098][T10058] dlm: no local IP address has been set [ 584.592740][T10058] dlm: cannot start dlm midcomms -107 [ 584.613319][ T9422] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.746050][T10059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1092'. [ 584.968663][ T5841] Bluetooth: hci5: command tx timeout [ 585.275863][T10014] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.312880][T10014] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.347346][T10014] bridge_slave_0: entered allmulticast mode [ 585.364450][T10014] bridge_slave_0: entered promiscuous mode [ 585.436869][ T9422] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.460072][T10014] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.467456][T10014] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.489385][T10014] bridge_slave_1: entered allmulticast mode [ 585.518746][T10014] bridge_slave_1: entered promiscuous mode [ 585.574748][T10065] mac80211_hwsim hwsim6 syzkaller0: left promiscuous mode [ 585.593923][T10065] mac80211_hwsim hwsim6 syzkaller0: left allmulticast mode [ 585.650535][ T9422] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.727607][T10014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.762658][T10014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.875071][T10014] team0: Port device team_slave_0 added [ 585.911732][T10014] team0: Port device team_slave_1 added [ 586.982214][T10079] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.989599][T10079] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.000107][T10080] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.007416][T10080] bridge0: port 2(bridge_slave_1) entered forwarding state [ 587.014983][T10080] bridge0: port 1(bridge_slave_0) entered blocking state [ 587.022297][T10080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 587.298864][ T5838] Bluetooth: hci5: command tx timeout [ 587.448921][ T5838] Bluetooth: hci0: command 0x1003 tx timeout [ 587.559141][ T5841] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 591.223252][T10014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 591.247468][T10014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.313176][T10014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 591.377249][T10014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 591.399251][T10089] kvm: user requested TSC rate below hardware speed [ 591.430654][T10014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 591.799732][T10014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.523974][T10103] IPv6: Can't replace route, no match found [ 592.531223][T10103] kAFS: No cell specified [ 594.084853][T10014] hsr_slave_0: entered promiscuous mode [ 594.288561][T10014] hsr_slave_1: entered promiscuous mode [ 594.324222][T10014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 594.342472][T10014] Cannot create hsr debugfs directory [ 594.358633][ T9422] bridge_slave_1: left allmulticast mode [ 594.366934][ T9422] bridge_slave_1: left promiscuous mode [ 594.376814][ T9422] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.397745][ T9422] bridge_slave_0: left allmulticast mode [ 594.405624][ T9422] bridge_slave_0: left promiscuous mode [ 594.420820][ T9422] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.527326][T10118] netlink: 'syz.2.1110': attribute type 3 has an invalid length. [ 594.562267][T10118] netlink: 'syz.2.1110': attribute type 3 has an invalid length. [ 594.587359][T10118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1110'. [ 596.300632][ T9422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.338934][ T9422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.360419][ T9422] bond0 (unregistering): Released all slaves [ 597.695400][T10145] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.702873][T10145] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.775528][T10141] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.782892][T10141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.790627][T10141] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.797955][T10141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.061004][ T30] audit: type=1326 audit(1753705348.431:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10150 comm="syz.2.1118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcff958e9a9 code=0x0 [ 598.093605][T10153] Cannot find del_set index 286 as target [ 598.890989][ T9422] hsr_slave_0: left promiscuous mode [ 598.903041][ T9422] hsr_slave_1: left promiscuous mode [ 598.913201][ T9422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 598.921484][ T9422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 598.957956][ T9422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 598.966519][ T9422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 599.515895][ T9422] veth1_macvtap: left promiscuous mode [ 599.524120][ T9422] veth0_macvtap: left promiscuous mode [ 599.567925][ T9422] veth1_vlan: left promiscuous mode [ 599.585505][ T9422] veth0_vlan: left promiscuous mode [ 601.121066][ T5899] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 601.303679][ T5899] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 601.315255][ T5899] usb 2-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 601.325385][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.338099][ T5899] usb 2-1: config 0 descriptor?? [ 601.349047][T10184] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 601.515681][ T9422] team0 (unregistering): Port device team_slave_1 removed [ 601.570839][ T9422] team0 (unregistering): Port device team_slave_0 removed [ 601.775886][ T5899] belkin 0003:050D:3201.0003: unbalanced collection at end of report description [ 601.796575][ T5899] belkin 0003:050D:3201.0003: parse failed [ 601.808071][ T5899] belkin 0003:050D:3201.0003: probe with driver belkin failed with error -22 [ 601.976605][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1126'. [ 601.997221][ T5926] usb 2-1: USB disconnect, device number 11 [ 602.132233][T10173] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.139521][T10173] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.149927][T10174] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.157196][T10174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 602.164817][T10174] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.172146][T10174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 602.920481][T10191] netlink: 'syz.2.1127': attribute type 3 has an invalid length. [ 602.960332][T10191] netlink: 'syz.2.1127': attribute type 3 has an invalid length. [ 602.997155][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1127'. [ 604.065602][T10198] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input18 [ 604.497043][T10014] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 604.596053][ T30] audit: type=1326 audit(1753705354.960:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10201 comm="syz.5.1131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f719478e9a9 code=0x0 [ 604.659042][T10014] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 604.718161][T10014] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 604.791650][T10014] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 605.041601][ T30] audit: type=1326 audit(1753705355.400:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10204 comm="syz.1.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f33d8e9a9 code=0x7ffc0000 [ 605.239081][ T30] audit: type=1326 audit(1753705355.400:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10204 comm="syz.1.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f33d8e9a9 code=0x7ffc0000 [ 605.276700][ T30] audit: type=1326 audit(1753705355.400:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10204 comm="syz.1.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3f33d8e9a9 code=0x7ffc0000 [ 605.310985][ T30] audit: type=1326 audit(1753705355.400:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10204 comm="syz.1.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f33d8e9a9 code=0x7ffc0000 [ 605.515168][ T30] audit: type=1326 audit(1753705355.400:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10204 comm="syz.1.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f33d8e9a9 code=0x7ffc0000 [ 607.277963][ T30] audit: type=1326 audit(1753705355.400:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10204 comm="syz.1.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f3f33d8e9a9 code=0x7ffc0000 [ 607.469607][T10223] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.478349][T10223] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.481050][ T30] audit: type=1326 audit(1753705355.400:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10204 comm="syz.1.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f33d8e9a9 code=0x7ffc0000 [ 607.490178][T10229] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.514182][T10229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.521716][T10229] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.529025][T10229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.661407][ T30] audit: type=1326 audit(1753705355.400:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10204 comm="syz.1.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f33d8e9a9 code=0x7ffc0000 [ 607.692267][T10014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.711581][ T30] audit: type=1326 audit(1753705355.400:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10204 comm="syz.1.1132" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3f33d8e9a9 code=0x7ffc0000 [ 607.798561][T10014] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.819259][T10236] netlink: 'syz.5.1139': attribute type 4 has an invalid length. [ 607.830918][T10236] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1139'. [ 607.874085][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.881343][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.983568][T10240] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input19 [ 608.399198][ T6033] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.406539][ T6033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.477037][T10267] overlayfs: failed to resolve './file1': -2 [ 609.558152][T10263] 9pnet: Could not find request transport: f_q‹à\Ó_!)* ÚÛ» d [ 611.886489][T10014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 612.089982][T10284] netlink: 'syz.2.1151': attribute type 3 has an invalid length. [ 612.163634][T10284] netlink: 'syz.2.1151': attribute type 3 has an invalid length. [ 612.236005][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1151'. [ 615.606543][T10307] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 615.785305][T10312] IPv6: Can't replace route, no match found [ 615.790356][T10312] kAFS: No cell specified [ 617.351505][T10309] Cannot find del_set index 286 as target [ 617.634643][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 619.435244][T10014] veth0_vlan: entered promiscuous mode [ 619.477756][ T9422] Bluetooth: hci0: Frame reassembly failed (-84) [ 619.499645][T10014] veth1_vlan: entered promiscuous mode [ 619.610992][T10332] sp0: Synchronizing with TNC [ 619.661681][T10014] veth0_macvtap: entered promiscuous mode [ 619.738980][T10014] veth1_macvtap: entered promiscuous mode [ 619.795472][T10014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.822376][T10014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 619.888051][T10014] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.897999][T10014] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.912801][T10014] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.921683][T10014] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.962901][T10344] netlink: 'syz.1.1166': attribute type 3 has an invalid length. [ 620.003977][T10345] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 1, id = 0 [ 620.014774][T10344] netlink: 'syz.1.1166': attribute type 3 has an invalid length. [ 620.023298][T10344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1166'. [ 620.182440][T10348] vivid-000: disconnect [ 620.835463][T10337] vivid-000: reconnect [ 620.953789][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.961766][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.081124][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.098720][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.126642][T10357] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1168'. [ 621.156164][T10357] 9pnet_fd: Insufficient options for proto=fd [ 621.533112][ T5849] Bluetooth: hci0: command 0x1003 tx timeout [ 621.539703][ T5841] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 621.554864][T10363] Cannot find del_set index 286 as target [ 621.632638][T10368] openvswitch: netlink: IP tunnel dst address not specified [ 622.446974][T10369] usb usb8: usbfs: process 10369 (syz.1.1169) did not claim interface 0 before use [ 625.033741][T10382] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.041060][T10382] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.070774][T10382] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.078012][T10382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.085813][T10382] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.093078][T10382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 625.384010][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.494433][T10413] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1181'. [ 627.594690][T10412] syz_tun: entered promiscuous mode [ 627.761145][T10421] Cannot find del_set index 286 as target [ 627.763524][T10412] syz_tun: left promiscuous mode [ 627.868315][T10419] dlm: no local IP address has been set [ 627.874144][T10419] dlm: cannot start dlm midcomms -107 [ 629.385131][T10431] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.393052][T10431] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.404664][T10431] bridge0: entered promiscuous mode [ 629.410079][T10431] bridge0: entered allmulticast mode [ 629.446427][T10434] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.453711][T10434] bridge0: port 2(bridge_slave_1) entered forwarding state [ 629.461350][T10434] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.468676][T10434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.704770][T10453] FAULT_INJECTION: forcing a failure. [ 632.704770][T10453] name failslab, interval 1, probability 0, space 0, times 0 [ 632.717780][T10453] CPU: 0 UID: 0 PID: 10453 Comm: syz.2.1191 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 632.717808][T10453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 632.717821][T10453] Call Trace: [ 632.717831][T10453] [ 632.717839][T10453] dump_stack_lvl+0x189/0x250 [ 632.717860][T10453] ? __pfx____ratelimit+0x10/0x10 [ 632.717874][T10453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.717888][T10453] ? __pfx__printk+0x10/0x10 [ 632.717907][T10453] ? __pfx___might_resched+0x10/0x10 [ 632.717920][T10453] ? fs_reclaim_acquire+0x7d/0x100 [ 632.717938][T10453] should_fail_ex+0x414/0x560 [ 632.717955][T10453] should_failslab+0xa8/0x100 [ 632.717969][T10453] __kmalloc_noprof+0xcb/0x4f0 [ 632.717980][T10453] ? kfree+0x4d/0x440 [ 632.717995][T10453] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 632.718015][T10453] tomoyo_realpath_from_path+0xe3/0x5d0 [ 632.718032][T10453] ? tomoyo_domain+0xda/0x130 [ 632.718051][T10453] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 632.718064][T10453] tomoyo_path_number_perm+0x1e8/0x5a0 [ 632.718079][T10453] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 632.718097][T10453] ? rcu_is_watching+0x15/0xb0 [ 632.718116][T10453] ? __lock_acquire+0xab9/0xd20 [ 632.718141][T10453] ? __fget_files+0x2a/0x420 [ 632.718157][T10453] ? __fget_files+0x2a/0x420 [ 632.718169][T10453] ? __fget_files+0x3a0/0x420 [ 632.718181][T10453] ? __fget_files+0x2a/0x420 [ 632.718196][T10453] security_file_ioctl+0xcb/0x2d0 [ 632.718212][T10453] __se_sys_ioctl+0x47/0x170 [ 632.718231][T10453] do_syscall_64+0xfa/0x3b0 [ 632.718246][T10453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.718258][T10453] ? asm_sysvec_call_function_single+0x1a/0x20 [ 632.718270][T10453] ? clear_bhb_loop+0x60/0xb0 [ 632.718284][T10453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.718296][T10453] RIP: 0033:0x7fcff958e9a9 [ 632.718309][T10453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.718320][T10453] RSP: 002b:00007fcffa451038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 632.718334][T10453] RAX: ffffffffffffffda RBX: 00007fcff97b6080 RCX: 00007fcff958e9a9 [ 632.718343][T10453] RDX: 0000200000000300 RSI: 00000000c00c642e RDI: 0000000000000005 [ 632.718351][T10453] RBP: 00007fcffa451090 R08: 0000000000000000 R09: 0000000000000000 [ 632.718358][T10453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.718365][T10453] R13: 0000000000000000 R14: 00007fcff97b6080 R15: 00007fff8dee6e38 [ 632.718385][T10453] [ 632.718415][T10453] ERROR: Out of memory at tomoyo_realpath_from_path. [ 633.919265][T10460] openvswitch: netlink: IP tunnel dst address not specified [ 634.690777][T10465] Cannot find del_set index 286 as target [ 635.395117][T10469] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.403983][T10469] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.413185][T10469] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 635.422018][T10469] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 636.993020][T10487] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.000625][T10487] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.021660][T10487] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.028987][T10487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 637.036661][T10487] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.043926][T10487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.318220][T10498] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input21 [ 640.923137][T10512] openvswitch: netlink: IP tunnel dst address not specified [ 641.778278][T10509] ieee802154 phy0 wpan0: encryption failed: -22 [ 642.224466][T10524] Cannot find del_set index 286 as target [ 643.549695][T10532] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.557053][T10532] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.576975][T10532] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.584227][T10532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 643.591799][T10532] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.599022][T10532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 647.684118][T10569] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1222'. [ 647.798808][T10571] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1220'. [ 649.725931][T10583] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input22 [ 650.346954][T10592] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1228'. [ 653.059639][T10624] FAULT_INJECTION: forcing a failure. [ 653.059639][T10624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.073349][T10624] CPU: 0 UID: 0 PID: 10624 Comm: syz.3.1237 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 653.073377][T10624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 653.073389][T10624] Call Trace: [ 653.073397][T10624] [ 653.073406][T10624] dump_stack_lvl+0x189/0x250 [ 653.073434][T10624] ? __pfx____ratelimit+0x10/0x10 [ 653.073455][T10624] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.073475][T10624] ? __pfx__printk+0x10/0x10 [ 653.073513][T10624] ? __might_fault+0xb0/0x130 [ 653.073548][T10624] should_fail_ex+0x414/0x560 [ 653.073575][T10624] _copy_from_user+0x2d/0xb0 [ 653.073606][T10624] ___sys_sendmsg+0x158/0x2a0 [ 653.073641][T10624] ? __pfx____sys_sendmsg+0x10/0x10 [ 653.073715][T10624] ? __fget_files+0x2a/0x420 [ 653.073750][T10624] ? __fget_files+0x3a0/0x420 [ 653.073786][T10624] __x64_sys_sendmsg+0x19b/0x260 [ 653.073820][T10624] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 653.073881][T10624] do_syscall_64+0xfa/0x3b0 [ 653.073906][T10624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.073926][T10624] ? asm_sysvec_call_function_single+0x1a/0x20 [ 653.073946][T10624] ? clear_bhb_loop+0x60/0xb0 [ 653.073971][T10624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.073991][T10624] RIP: 0033:0x7f5f0578e9a9 [ 653.074010][T10624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 653.074028][T10624] RSP: 002b:00007f5f065a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.074050][T10624] RAX: ffffffffffffffda RBX: 00007f5f059b6080 RCX: 00007f5f0578e9a9 [ 653.074065][T10624] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000c [ 653.074078][T10624] RBP: 00007f5f065a9090 R08: 0000000000000000 R09: 0000000000000000 [ 653.074090][T10624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.074101][T10624] R13: 0000000000000000 R14: 00007f5f059b6080 R15: 00007ffc5782d148 [ 653.074134][T10624] [ 654.563243][T10635] IPv6: Can't replace route, no match found [ 654.577828][T10635] kAFS: No cell specified [ 654.610043][ T5958] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 654.923510][ T5958] usb 3-1: device descriptor read/64, error -71 [ 655.408693][ T5958] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 655.520230][T10645] openvswitch: netlink: IP tunnel dst address not specified [ 656.237700][ T5958] usb 3-1: device descriptor read/64, error -71 [ 656.368032][ T5958] usb usb3-port1: attempt power cycle [ 656.514993][T10649] batadv1: entered promiscuous mode [ 656.840697][T10651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1246'. [ 656.855215][T10651] random: crng reseeded on system resumption [ 656.888675][ T5958] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 657.127403][ T5958] usb 3-1: device not accepting address 18, error -71 [ 657.773814][T10667] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 657.849539][T10672] netlink: 'syz.2.1251': attribute type 1 has an invalid length. [ 657.857697][T10672] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 658.247778][ T5898] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 658.425369][ T5898] usb 2-1: config 0 has an invalid interface number: 207 but max is 0 [ 658.436107][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.471970][ T5898] usb 2-1: config 0 has no interface number 0 [ 658.488794][ T5898] usb 2-1: New USB device found, idVendor=12d1, idProduct=ed56, bcdDevice=46.dd [ 658.538849][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.548122][ T5898] usb 2-1: Product: syz [ 658.552577][ T5898] usb 2-1: Manufacturer: syz [ 658.569014][ T5898] usb 2-1: SerialNumber: syz [ 658.588411][ T5898] usb 2-1: config 0 descriptor?? [ 658.598408][ T5898] qmi_wwan 2-1:0.207: probe with driver qmi_wwan failed with error -22 [ 659.792044][T10686] kAFS: No cell specified [ 660.877471][T10691] openvswitch: netlink: IP tunnel dst address not specified [ 661.849874][ T9] usb 2-1: USB disconnect, device number 12 [ 662.440196][T10702] Cannot find del_set index 286 as target [ 662.597967][ T9] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 663.114835][ T9] usb 4-1: No LPM exit latency info found, disabling LPM. [ 663.263045][ T9] usb 4-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 663.486842][ T9] usb 4-1: config 1 interface 0 has no altsetting 0 [ 663.730603][T10717] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 664.292638][ T9] usb 4-1: string descriptor 0 read error: -22 [ 664.585114][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.40 [ 664.718270][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.870161][T10720] kvm: user requested TSC rate below hardware speed [ 666.570452][ T9] usbhid 4-1:1.0: can't add hid device: -71 [ 666.579030][ T9] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 667.440896][ T9] usb 4-1: USB disconnect, device number 11 [ 667.833565][T10742] openvswitch: netlink: IP tunnel dst address not specified [ 668.317523][T10744] 9pnet_fd: Insufficient options for proto=fd [ 668.493855][T10749] Cannot find del_set index 286 as target [ 668.659759][T10752] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 669.129725][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 669.369196][ T9] usb 4-1: device descriptor read/64, error -71 [ 669.458760][T10758] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 669.469913][T10758] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 669.639157][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 670.308981][ T9] usb 4-1: device descriptor read/64, error -71 [ 670.496670][ T9] usb usb4-port1: attempt power cycle [ 671.339072][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 671.458897][ T9] usb 4-1: device descriptor read/8, error -71 [ 671.561756][T10776] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input23 [ 672.193967][ T5841] Bluetooth: hci5: link tx timeout [ 672.200817][ T5841] Bluetooth: hci5: killing stalled connection 10:aa:aa:aa:aa:aa [ 672.216825][ T5841] Bluetooth: hci5: link tx timeout [ 672.222277][ T5841] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 672.725316][T10788] openvswitch: netlink: IP tunnel dst address not specified [ 673.457734][T10793] Cannot find del_set index 286 as target [ 673.899041][T10792] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.906479][T10792] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.931693][T10792] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.939000][T10792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.946664][T10792] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.953982][T10792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.263324][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 677.900124][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 678.227674][T10835] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1297'. [ 678.973902][T10840] Cannot find del_set index 286 as target [ 679.915398][T10856] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.922824][T10856] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.935667][T10856] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.943001][T10856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.950737][T10856] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.958005][T10856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.858531][T10859] netlink: 'syz.6.1305': attribute type 3 has an invalid length. [ 680.879665][T10859] netlink: 'syz.6.1305': attribute type 3 has an invalid length. [ 680.931079][T10859] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1305'. [ 682.903431][T10874] FAULT_INJECTION: forcing a failure. [ 682.903431][T10874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 682.916857][T10874] CPU: 1 UID: 0 PID: 10874 Comm: syz.5.1309 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 682.916875][T10874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 682.916882][T10874] Call Trace: [ 682.916887][T10874] [ 682.916893][T10874] dump_stack_lvl+0x189/0x250 [ 682.916911][T10874] ? __pfx____ratelimit+0x10/0x10 [ 682.916925][T10874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 682.916938][T10874] ? __pfx__printk+0x10/0x10 [ 682.916954][T10874] ? __might_fault+0xb0/0x130 [ 682.916984][T10874] should_fail_ex+0x414/0x560 [ 682.917001][T10874] _copy_from_user+0x2d/0xb0 [ 682.917018][T10874] vmci_host_unlocked_ioctl+0xdc9/0x2650 [ 682.917038][T10874] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 682.917058][T10874] ? do_vfs_ioctl+0xf37/0x1990 [ 682.917077][T10874] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 682.917098][T10874] ? kasan_quarantine_put+0xdd/0x220 [ 682.917123][T10874] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 682.917137][T10874] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 682.917150][T10874] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 682.917161][T10874] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 682.917175][T10874] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 682.917198][T10874] ? __lock_acquire+0xab9/0xd20 [ 682.917213][T10874] ? __asan_memset+0x22/0x50 [ 682.917229][T10874] ? smack_file_ioctl+0x24a/0x340 [ 682.917242][T10874] ? __pfx_smack_file_ioctl+0x10/0x10 [ 682.917260][T10874] ? __fget_files+0x2a/0x420 [ 682.917273][T10874] ? __fget_files+0x3a0/0x420 [ 682.917285][T10874] ? __fget_files+0x2a/0x420 [ 682.917300][T10874] ? bpf_lsm_file_ioctl+0x9/0x20 [ 682.917314][T10874] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 682.917330][T10874] __se_sys_ioctl+0xfc/0x170 [ 682.917348][T10874] do_syscall_64+0xfa/0x3b0 [ 682.917361][T10874] ? lockdep_hardirqs_on+0x9c/0x150 [ 682.917374][T10874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.917385][T10874] ? clear_bhb_loop+0x60/0xb0 [ 682.917400][T10874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.917411][T10874] RIP: 0033:0x7f719478e9a9 [ 682.917424][T10874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.917434][T10874] RSP: 002b:00007f71955be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 682.917448][T10874] RAX: ffffffffffffffda RBX: 00007f71949b5fa0 RCX: 00007f719478e9a9 [ 682.917458][T10874] RDX: 0000200000000180 RSI: 00000000000007a4 RDI: 0000000000000005 [ 682.917466][T10874] RBP: 00007f71955be090 R08: 0000000000000000 R09: 0000000000000000 [ 682.917473][T10874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 682.917480][T10874] R13: 0000000000000000 R14: 00007f71949b5fa0 R15: 00007ffcee865c68 [ 682.917500][T10874] [ 683.491939][T10882] Cannot find del_set index 286 as target [ 683.930324][T10897] openvswitch: netlink: IP tunnel dst address not specified [ 684.901821][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 685.439679][T10905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.512002][T10905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.670732][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 685.841846][T10915] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.849391][T10915] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.862974][T10915] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.870327][T10915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.877999][T10915] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.885368][T10915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.152047][T10912] netlink: 'syz.1.1320': attribute type 3 has an invalid length. [ 686.159847][T10912] netlink: 'syz.1.1320': attribute type 3 has an invalid length. [ 686.181336][T10912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1320'. [ 686.921186][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.950887][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 686.959614][ T9] usb 6-1: config 0 has an invalid interface number: 31 but max is 0 [ 686.968363][ T9] usb 6-1: config 0 has no interface number 0 [ 687.182084][ T9] usb 6-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 687.221355][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.678119][ T9] usb 6-1: Product: syz [ 687.682774][ T9] usb 6-1: Manufacturer: syz [ 687.687412][ T9] usb 6-1: SerialNumber: syz [ 687.705557][ T9] usb 6-1: config 0 descriptor?? [ 687.896353][T10927] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 689.277289][T10929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1323'. [ 689.316888][ T9] usb 6-1: USB disconnect, device number 6 [ 689.578184][T10940] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 692.970721][T10961] tmpfs: Unknown parameter 'quot' [ 692.981021][T10961] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.988324][T10961] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.016513][T10961] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.023745][T10961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 693.031268][T10961] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.038469][T10961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 693.600361][T10969] netlink: 'syz.6.1334': attribute type 3 has an invalid length. [ 693.621869][T10969] netlink: 'syz.6.1334': attribute type 3 has an invalid length. [ 693.641866][T10969] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1334'. [ 696.742394][T10996] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1341'. [ 699.339125][T11007] tmpfs: Unknown parameter 'quo' [ 699.351512][T11007] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.358916][T11007] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.391906][T11007] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.399202][T11007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 699.406908][T11007] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.414181][T11007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 701.260715][T11023] netlink: 'syz.2.1349': attribute type 3 has an invalid length. [ 701.318569][T11023] netlink: 'syz.2.1349': attribute type 3 has an invalid length. [ 701.355010][T11023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1349'. [ 701.379312][ T5958] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 702.225070][ T5958] usb 6-1: Using ep0 maxpacket: 8 [ 702.413030][ T5958] usb 6-1: unable to get BOS descriptor or descriptor too short [ 702.595563][ T5958] usb 6-1: config 11 has an invalid interface number: 244 but max is 0 [ 702.934431][ T5958] usb 6-1: config 11 has no interface number 0 [ 703.385503][ T5958] usb 6-1: config 11 interface 244 altsetting 5 endpoint 0x3 has invalid wMaxPacketSize 0 [ 703.586499][ T5958] usb 6-1: config 11 interface 244 has no altsetting 0 [ 703.703954][ T5958] usb 6-1: string descriptor 0 read error: -71 [ 703.778731][ T5958] usb 6-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=57.8a [ 703.926301][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.497933][ T5958] usb 6-1: can't set config #11, error -71 [ 704.556909][T11038] FAULT_INJECTION: forcing a failure. [ 704.556909][T11038] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 704.570283][T11038] CPU: 0 UID: 0 PID: 11038 Comm: syz.5.1353 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 704.570312][T11038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 704.570323][T11038] Call Trace: [ 704.570332][T11038] [ 704.570338][T11038] dump_stack_lvl+0x189/0x250 [ 704.570357][T11038] ? __pfx____ratelimit+0x10/0x10 [ 704.570371][T11038] ? __pfx_dump_stack_lvl+0x10/0x10 [ 704.570385][T11038] ? __pfx__printk+0x10/0x10 [ 704.570408][T11038] should_fail_ex+0x414/0x560 [ 704.570429][T11038] _copy_to_user+0x31/0xb0 [ 704.570458][T11038] simple_read_from_buffer+0xe1/0x170 [ 704.570484][T11038] proc_fail_nth_read+0x1df/0x250 [ 704.570506][T11038] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.570522][T11038] ? rw_verify_area+0x258/0x650 [ 704.570540][T11038] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 704.570555][T11038] vfs_read+0x200/0x980 [ 704.570577][T11038] ? __pfx___mutex_lock+0x10/0x10 [ 704.570591][T11038] ? __pfx_vfs_read+0x10/0x10 [ 704.570610][T11038] ? __fget_files+0x2a/0x420 [ 704.570628][T11038] ? __fget_files+0x3a0/0x420 [ 704.570640][T11038] ? __fget_files+0x2a/0x420 [ 704.570659][T11038] ksys_read+0x145/0x250 [ 704.570672][T11038] ? __pfx_ksys_read+0x10/0x10 [ 704.570687][T11038] ? do_syscall_64+0xbe/0x3b0 [ 704.570703][T11038] do_syscall_64+0xfa/0x3b0 [ 704.570717][T11038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.570728][T11038] ? asm_sysvec_call_function_single+0x1a/0x20 [ 704.570740][T11038] ? clear_bhb_loop+0x60/0xb0 [ 704.570754][T11038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.570772][T11038] RIP: 0033:0x7f719478d3bc [ 704.570784][T11038] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 704.570795][T11038] RSP: 002b:00007f719559d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 704.570809][T11038] RAX: ffffffffffffffda RBX: 00007f71949b6080 RCX: 00007f719478d3bc [ 704.570822][T11038] RDX: 000000000000000f RSI: 00007f719559d0a0 RDI: 0000000000000006 [ 704.570833][T11038] RBP: 00007f719559d090 R08: 0000000000000000 R09: 0000000000000000 [ 704.570846][T11038] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 704.570858][T11038] R13: 0000000000000000 R14: 00007f71949b6080 R15: 00007ffcee865c68 [ 704.570892][T11038] [ 704.866910][ T5958] usb 6-1: USB disconnect, device number 7 [ 705.024711][ T5926] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 705.088510][ T5926] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 706.111098][T11047] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.118505][T11047] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.144326][T11047] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.151637][T11047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.159293][T11047] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.166667][T11047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.981157][T11055] netlink: 'syz.2.1357': attribute type 10 has an invalid length. [ 706.989500][T11055] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1357'. [ 708.900217][T11064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1359'. [ 709.574619][T11068] openvswitch: netlink: IP tunnel dst address not specified [ 712.014303][T11083] dlm: no local IP address has been set [ 712.019959][T11083] dlm: cannot start dlm midcomms -107 [ 713.278558][T11088] netlink: 'syz.3.1367': attribute type 3 has an invalid length. [ 713.354262][T11088] netlink: 'syz.3.1367': attribute type 3 has an invalid length. [ 713.362255][T11088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 714.367416][T11100] FAULT_INJECTION: forcing a failure. [ 714.367416][T11100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 714.414519][T11100] CPU: 1 UID: 0 PID: 11100 Comm: syz.1.1370 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 714.414549][T11100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 714.414561][T11100] Call Trace: [ 714.414569][T11100] [ 714.414578][T11100] dump_stack_lvl+0x189/0x250 [ 714.414613][T11100] ? __pfx____ratelimit+0x10/0x10 [ 714.414635][T11100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 714.414658][T11100] ? __pfx__printk+0x10/0x10 [ 714.414700][T11100] should_fail_ex+0x414/0x560 [ 714.414729][T11100] _copy_to_user+0x31/0xb0 [ 714.414769][T11100] simple_read_from_buffer+0xe1/0x170 [ 714.414797][T11100] proc_fail_nth_read+0x1df/0x250 [ 714.414825][T11100] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 714.414854][T11100] ? rw_verify_area+0x258/0x650 [ 714.414881][T11100] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 714.414903][T11100] vfs_read+0x200/0x980 [ 714.414937][T11100] ? __pfx___mutex_lock+0x10/0x10 [ 714.414959][T11100] ? __pfx_vfs_read+0x10/0x10 [ 714.414988][T11100] ? __fget_files+0x2a/0x420 [ 714.415016][T11100] ? __fget_files+0x3a0/0x420 [ 714.415035][T11100] ? __fget_files+0x2a/0x420 [ 714.415066][T11100] ksys_read+0x145/0x250 [ 714.415087][T11100] ? __pfx_ksys_read+0x10/0x10 [ 714.415103][T11100] ? fput+0xa0/0xd0 [ 714.415133][T11100] ? do_syscall_64+0xbe/0x3b0 [ 714.415159][T11100] do_syscall_64+0xfa/0x3b0 [ 714.415179][T11100] ? lockdep_hardirqs_on+0x9c/0x150 [ 714.415198][T11100] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.415217][T11100] ? clear_bhb_loop+0x60/0xb0 [ 714.415239][T11100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.415253][T11100] RIP: 0033:0x7f3f33d8d3bc [ 714.415265][T11100] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 714.415276][T11100] RSP: 002b:00007f3f34b53030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 714.415291][T11100] RAX: ffffffffffffffda RBX: 00007f3f33fb5fa0 RCX: 00007f3f33d8d3bc [ 714.415300][T11100] RDX: 000000000000000f RSI: 00007f3f34b530a0 RDI: 0000000000000004 [ 714.415308][T11100] RBP: 00007f3f34b53090 R08: 0000000000000000 R09: 0000000000000000 [ 714.415315][T11100] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 714.415322][T11100] R13: 0000000000000000 R14: 00007f3f33fb5fa0 R15: 00007fff5c718c28 [ 714.415342][T11100] [ 714.924272][ T5899] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 715.054508][ T5899] usb 3-1: device descriptor read/64, error -71 [ 715.679297][ T5899] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 715.860861][ T5899] usb 3-1: device descriptor read/64, error -71 [ 716.004944][ T5899] usb usb3-port1: attempt power cycle [ 716.297849][T11125] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 716.374531][ T5899] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 716.925404][ T5899] usb 3-1: device descriptor read/8, error -71 [ 718.024764][ T5899] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 718.671715][T11133] openvswitch: netlink: IP tunnel dst address not specified [ 719.225772][ T5899] usb 3-1: device descriptor read/8, error -71 [ 719.410959][ T30] kauditd_printk_skb: 27 callbacks suppressed [ 719.410981][ T30] audit: type=1326 audit(1753705469.766:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11138 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f33d8e9a9 code=0x7ffc0000 [ 719.502881][ T5899] usb usb3-port1: unable to enumerate USB device [ 719.753524][T11136] bridge0: port 2(bridge_slave_1) entered disabled state [ 719.760933][T11136] bridge0: port 1(bridge_slave_0) entered disabled state [ 719.782077][T11136] bridge0: port 2(bridge_slave_1) entered blocking state [ 719.789444][T11136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.797212][T11136] bridge0: port 1(bridge_slave_0) entered blocking state [ 719.804511][T11136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.233996][T11142] netlink: 'syz.5.1382': attribute type 3 has an invalid length. [ 720.243023][ T30] audit: type=1326 audit(1753705469.766:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11138 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f33d8e9a9 code=0x7ffc0000 [ 720.267392][T11151] netlink: 'syz.2.1384': attribute type 1 has an invalid length. [ 720.280956][ T30] audit: type=1326 audit(1753705469.796:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11138 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f3f33d8e9a9 code=0x7ffc0000 [ 720.302892][ T5914] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 720.435437][ T30] audit: type=1326 audit(1753705470.696:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11138 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f33d2ab89 code=0x7ffc0000 [ 720.460516][ T30] audit: type=1326 audit(1753705470.766:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11138 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f33d8e9a9 code=0x7ffc0000 [ 720.494987][T11142] netlink: 'syz.5.1382': attribute type 3 has an invalid length. [ 720.503416][T11142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1382'. [ 721.085112][ T30] audit: type=1326 audit(1753705470.766:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11138 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f33d8e9a9 code=0x7ffc0000 [ 721.165229][ T5914] usb 4-1: Using ep0 maxpacket: 32 [ 721.170670][ T30] audit: type=1326 audit(1753705470.796:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11138 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f3f33d8e9a9 code=0x7ffc0000 [ 721.224756][ T5914] usb 4-1: config 0 has an invalid interface number: 23 but max is 0 [ 721.235018][ T5914] usb 4-1: config 0 has an invalid descriptor of length 199, skipping remainder of the config [ 721.255400][ T5914] usb 4-1: config 0 has no interface number 0 [ 721.261660][ T30] audit: type=1326 audit(1753705470.796:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11138 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f33d8e9a9 code=0x7ffc0000 [ 721.293840][ T5914] usb 4-1: config 0 interface 23 altsetting 0 endpoint 0x1 has invalid maxpacket 32133, setting to 64 [ 721.338394][ T5914] usb 4-1: config 0 interface 23 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 721.359322][ T30] audit: type=1326 audit(1753705470.796:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11138 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f33d8e9a9 code=0x7ffc0000 [ 721.389043][ T30] audit: type=1326 audit(1753705470.796:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11138 comm="syz.1.1383" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3f33d8e9a9 code=0x7ffc0000 [ 721.420276][ T5914] usb 4-1: New USB device found, idVendor=0582, idProduct=0027, bcdDevice=d3.c5 [ 721.431694][ T5914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.976787][ T5914] usb 4-1: Product: syz [ 721.997532][ T5914] usb 4-1: Manufacturer: syz [ 722.002223][ T5914] usb 4-1: SerialNumber: syz [ 722.068000][ T5914] usb 4-1: config 0 descriptor?? [ 723.128154][T11172] fuse: Unknown parameter 'use00000000000000000000' [ 723.415289][ T5926] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 723.750830][ T5914] usb 4-1: USB disconnect, device number 16 [ 723.946588][ T5926] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 723.956086][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.964087][ T5926] usb 2-1: Product: syz [ 723.979104][ T5926] usb 2-1: Manufacturer: syz [ 724.399886][ T5926] usb 2-1: SerialNumber: syz [ 724.407894][ T5926] usb 2-1: config 0 descriptor?? [ 724.623483][ T5898] usb 2-1: USB disconnect, device number 13 [ 725.102231][ T8797] udevd[8797]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 725.677997][ T5898] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 725.828380][T11196] ------------[ cut here ]------------ [ 725.834286][T11196] WARNING: CPU: 0 PID: 11196 at ./include/linux/memcontrol.h:371 folio_memcg+0x1a8/0x310 [ 725.844667][T11196] Modules linked in: [ 725.849099][T11196] CPU: 0 UID: 0 PID: 11196 Comm: syz.5.1398 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 725.859171][T11196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 725.869983][T11196] RIP: 0010:folio_memcg+0x1a8/0x310 [ 725.875249][T11196] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 725.895127][T11196] RSP: 0018:ffffc90003e3f250 EFLAGS: 00010283 [ 725.901665][T11196] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 725.909721][T11196] RDX: ffffc9000c86c000 RSI: 0000000000001de2 RDI: 0000000000001de3 [ 725.910586][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 725.917748][T11196] RBP: 0000000000000000 R08: ffffea0001748f07 R09: 1ffffd40002e91e0 [ 725.917792][T11196] R10: dffffc0000000000 R11: fffff940002e91e1 R12: ffffea0001748f30 [ 725.917812][T11196] R13: dffffc0000000000 R14: ffff88805b372c80 R15: 0000000000000002 [ 725.917829][T11196] FS: 00007f71955be6c0(0000) GS:ffff888125c57000(0000) knlGS:0000000000000000 [ 725.917849][T11196] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 725.917865][T11196] CR2: 0000000000000000 CR3: 0000000078ae4000 CR4: 00000000003526f0 [ 725.917885][T11196] Call Trace: [ 725.917895][T11196] [ 725.917910][T11196] workingset_activation+0x5f/0x4a0 [ 725.917943][T11196] ? folio_mark_accessed+0x361/0x4a0 [ 725.949095][ T5898] usb 4-1: config 7 has an invalid interface number: 27 but max is 0 [ 725.956695][T11196] folio_mark_accessed+0x3b5/0x4a0 [ 725.956750][T11196] kvm_release_page_clean+0x9a/0xe0 [ 725.956782][T11196] kvm_tdp_page_fault+0x2dd/0x370 [ 725.956817][T11196] kvm_mmu_do_page_fault+0x2c5/0x640 [ 725.956855][T11196] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 725.956900][T11196] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 725.965027][ T5898] usb 4-1: config 7 has no interface number 0 [ 725.971564][T11196] kvm_mmu_page_fault+0x22f/0xb70 [ 725.991850][ T5898] usb 4-1: New USB device found, idVendor=1e24, idProduct=d8f8, bcdDevice=d1.64 [ 725.996631][T11196] ? __pfx_handle_ept_violation+0x10/0x10 [ 725.996674][T11196] vmx_handle_exit+0x1090/0x18a0 [ 725.996703][T11196] ? vcpu_run+0x361c/0x6f70 [ 725.996732][T11196] ? rcu_is_watching+0x15/0xb0 [ 725.996771][T11196] vcpu_run+0x432e/0x6f70 [ 725.996822][T11196] ? vcpu_run+0x361c/0x6f70 [ 726.003432][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.007375][T11196] ? __pfx_vcpu_run+0x10/0x10 [ 726.013411][ T5898] usb 4-1: Product: syz [ 726.017815][T11196] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 726.017906][T11196] ? rcu_is_watching+0x15/0xb0 [ 726.024455][ T5898] usb 4-1: Manufacturer: syz [ 726.029422][T11196] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 726.029479][T11196] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 726.038262][ T5898] usb 4-1: SerialNumber: syz [ 726.040624][T11196] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 726.040665][T11196] ? rcu_is_watching+0x15/0xb0 [ 726.040692][T11196] ? look_up_lock_class+0x74/0x170 [ 726.143214][T11196] ? register_lock_class+0x51/0x320 [ 726.148588][T11196] ? __lock_acquire+0xab9/0xd20 [ 726.153519][T11196] kvm_vcpu_ioctl+0x95c/0xe90 [ 726.158334][T11196] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 726.163581][T11196] ? __lock_acquire+0xab9/0xd20 [ 726.168540][T11196] ? __asan_memset+0x22/0x50 [ 726.173182][T11196] ? smack_file_ioctl+0x302/0x340 [ 726.178330][T11196] ? __pfx_smack_file_ioctl+0x10/0x10 [ 726.183758][T11196] ? __fget_files+0x2a/0x420 [ 726.188471][T11196] ? __fget_files+0x3a0/0x420 [ 726.193188][T11196] ? __fget_files+0x2a/0x420 [ 726.197886][T11196] ? bpf_lsm_file_ioctl+0x9/0x20 [ 726.202874][T11196] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 726.208213][T11196] __se_sys_ioctl+0xfc/0x170 [ 726.212964][T11196] do_syscall_64+0xfa/0x3b0 [ 726.217590][T11196] ? lockdep_hardirqs_on+0x9c/0x150 [ 726.222847][T11196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.229364][T11196] ? clear_bhb_loop+0x60/0xb0 [ 726.234096][T11196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.240191][T11196] RIP: 0033:0x7f719478e9a9 [ 726.244647][T11196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.264375][T11196] RSP: 002b:00007f71955be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 726.272968][T11196] RAX: ffffffffffffffda RBX: 00007f71949b5fa0 RCX: 00007f719478e9a9 [ 726.281078][T11196] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 726.286603][ T5898] usb 4-1: USB disconnect, device number 17 [ 726.289154][T11196] RBP: 00007f7194810d69 R08: 0000000000000000 R09: 0000000000000000 [ 726.289176][T11196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.311278][T11196] R13: 0000000000000000 R14: 00007f71949b5fa0 R15: 00007ffcee865c68 [ 726.319391][T11196] [ 726.322455][T11196] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 726.329776][T11196] CPU: 0 UID: 0 PID: 11196 Comm: syz.5.1398 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 726.339813][T11196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 726.349893][T11196] Call Trace: [ 726.353192][T11196] [ 726.356138][T11196] dump_stack_lvl+0x99/0x250 [ 726.360747][T11196] ? __asan_memcpy+0x40/0x70 [ 726.365358][T11196] ? __pfx_dump_stack_lvl+0x10/0x10 [ 726.370571][T11196] ? __pfx__printk+0x10/0x10 [ 726.375199][T11196] panic+0x2db/0x790 [ 726.379119][T11196] ? __pfx_panic+0x10/0x10 [ 726.383564][T11196] __warn+0x31b/0x4b0 [ 726.387657][T11196] ? folio_memcg+0x1a8/0x310 [ 726.392262][T11196] ? folio_memcg+0x1a8/0x310 [ 726.396869][T11196] report_bug+0x2be/0x4f0 [ 726.401210][T11196] ? folio_memcg+0x1a8/0x310 [ 726.405822][T11196] ? folio_memcg+0x1a8/0x310 [ 726.410426][T11196] ? folio_memcg+0x1aa/0x310 [ 726.415038][T11196] handle_bug+0x84/0x160 [ 726.419301][T11196] exc_invalid_op+0x1a/0x50 [ 726.423910][T11196] asm_exc_invalid_op+0x1a/0x20 [ 726.428770][T11196] RIP: 0010:folio_memcg+0x1a8/0x310 [ 726.433988][T11196] Code: 80 3c 28 00 74 08 4c 89 f7 e8 74 ca 1b 00 4d 8b 36 4c 89 f0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 7f 20 65 09 cc e8 19 e3 bb ff 90 <0f> 0b 90 eb c5 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff [ 726.453705][T11196] RSP: 0018:ffffc90003e3f250 EFLAGS: 00010283 [ 726.459786][T11196] RAX: ffffffff820442a7 RBX: 0000000000000000 RCX: 0000000000080000 [ 726.467766][T11196] RDX: ffffc9000c86c000 RSI: 0000000000001de2 RDI: 0000000000001de3 [ 726.475769][T11196] RBP: 0000000000000000 R08: ffffea0001748f07 R09: 1ffffd40002e91e0 [ 726.483749][T11196] R10: dffffc0000000000 R11: fffff940002e91e1 R12: ffffea0001748f30 [ 726.491814][T11196] R13: dffffc0000000000 R14: ffff88805b372c80 R15: 0000000000000002 [ 726.499805][T11196] ? folio_memcg+0x1a7/0x310 [ 726.504425][T11196] workingset_activation+0x5f/0x4a0 [ 726.509657][T11196] ? folio_mark_accessed+0x361/0x4a0 [ 726.514961][T11196] folio_mark_accessed+0x3b5/0x4a0 [ 726.520092][T11196] kvm_release_page_clean+0x9a/0xe0 [ 726.525307][T11196] kvm_tdp_page_fault+0x2dd/0x370 [ 726.530354][T11196] kvm_mmu_do_page_fault+0x2c5/0x640 [ 726.535662][T11196] ? __pfx_kvm_mmu_do_page_fault+0x10/0x10 [ 726.541501][T11196] ? vmx_handle_exit_irqoff+0x29e/0xad0 [ 726.547070][T11196] kvm_mmu_page_fault+0x22f/0xb70 [ 726.552120][T11196] ? __pfx_handle_ept_violation+0x10/0x10 [ 726.557857][T11196] vmx_handle_exit+0x1090/0x18a0 [ 726.562804][T11196] ? vcpu_run+0x361c/0x6f70 [ 726.567327][T11196] ? rcu_is_watching+0x15/0xb0 [ 726.572111][T11196] vcpu_run+0x432e/0x6f70 [ 726.576474][T11196] ? vcpu_run+0x361c/0x6f70 [ 726.581037][T11196] ? __pfx_vcpu_run+0x10/0x10 [ 726.585738][T11196] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 726.591474][T11196] ? rcu_is_watching+0x15/0xb0 [ 726.596257][T11196] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 726.601827][T11196] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 726.607561][T11196] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 726.613567][T11196] ? rcu_is_watching+0x15/0xb0 [ 726.618352][T11196] ? look_up_lock_class+0x74/0x170 [ 726.623474][T11196] ? register_lock_class+0x51/0x320 [ 726.628711][T11196] ? __lock_acquire+0xab9/0xd20 [ 726.633605][T11196] kvm_vcpu_ioctl+0x95c/0xe90 [ 726.638304][T11196] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 726.643513][T11196] ? __lock_acquire+0xab9/0xd20 [ 726.648373][T11196] ? __asan_memset+0x22/0x50 [ 726.652980][T11196] ? smack_file_ioctl+0x302/0x340 [ 726.658101][T11196] ? __pfx_smack_file_ioctl+0x10/0x10 [ 726.663493][T11196] ? __fget_files+0x2a/0x420 [ 726.668096][T11196] ? __fget_files+0x3a0/0x420 [ 726.672781][T11196] ? __fget_files+0x2a/0x420 [ 726.677385][T11196] ? bpf_lsm_file_ioctl+0x9/0x20 [ 726.682335][T11196] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 726.687546][T11196] __se_sys_ioctl+0xfc/0x170 [ 726.692168][T11196] do_syscall_64+0xfa/0x3b0 [ 726.696686][T11196] ? lockdep_hardirqs_on+0x9c/0x150 [ 726.701986][T11196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.708071][T11196] ? clear_bhb_loop+0x60/0xb0 [ 726.712767][T11196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.718762][T11196] RIP: 0033:0x7f719478e9a9 [ 726.723187][T11196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 726.742805][T11196] RSP: 002b:00007f71955be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 726.751234][T11196] RAX: ffffffffffffffda RBX: 00007f71949b5fa0 RCX: 00007f719478e9a9 [ 726.759302][T11196] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 726.767290][T11196] RBP: 00007f7194810d69 R08: 0000000000000000 R09: 0000000000000000 [ 726.775268][T11196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.783247][T11196] R13: 0000000000000000 R14: 00007f71949b5fa0 R15: 00007ffcee865c68 [ 726.791242][T11196] [ 726.794413][T11196] Kernel Offset: disabled [ 726.798752][T11196] Rebooting in 86400 seconds..