last executing test programs:

6m51.87220129s ago: executing program 1 (id=1345):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_GET(r0, 0x0, 0x0)

6m50.145981255s ago: executing program 1 (id=1358):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb3", 0x43}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a497", 0x1a}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x6}, {&(0x7f0000000200)=""/101, 0x61}], 0x2}, 0x2120)

6m46.575221481s ago: executing program 1 (id=1369):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x0)

6m42.174161426s ago: executing program 1 (id=1394):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb3", 0x43}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a497", 0x1a}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x6}, {&(0x7f0000000200)=""/101, 0x61}], 0x2}, 0x2120)

6m41.459056236s ago: executing program 1 (id=1402):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x100000000)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
close(0x3)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, &(0x7f0000000240)={0x3fd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000070000001801000020696c2500000000002020207b1af8ff00000000bfa10000000000000701000003ffffffb702000008000000b70300000e0000008500000006000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001010000850000002d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r4}, 0x10)

6m41.061760396s ago: executing program 1 (id=1407):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xfffffffffffffca1}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1})
io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)

6m26.049659481s ago: executing program 32 (id=1407):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$netlink(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xfffffffffffffca1}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000200)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1})
io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0)

12.292930573s ago: executing program 0 (id=2715):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x19, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'macsec0\x00', {0x2, 0x4e23, @loopback}})
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
r3 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8)
ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)
fcntl$setsig(r4, 0xa, 0x12)
ppoll(&(0x7f0000000100)=[{r5}], 0x1, 0x0, 0x0, 0x0)
dup2(r4, r5)
fcntl$setown(r5, 0x8, r3)
tkill(r3, 0x13)
sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000780)={0x24, r2, 0x20, 0x80, 0x25dfdc01, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x2805}, 0x0)

11.001541051s ago: executing program 2 (id=2721):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000040)={0x3ff, 0x7e7, 0x0, 0x9, 0x1, 0x0, 0x7ffffffb, 0x83f8}, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000120000006d0500000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r2, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r2, &(0x7f00000061c0)="111737fc5a032cb9d8fe196f699e1d54e110579f7ed3a45dace9a1e517c661baeb734dc48d106f960956f0dc5c2268f9a6d4f21fe45c750a7a5d62c385b32a9d478302777d09a6264105c6eefdecb01408d8148646a30765a3bf2f772dc356b581d026b2cc21f6294dcdde1607bd91e3defa7d0b320b4c6f2ab56350d6fb3b83a9401fce111b047968d957c2a60137ececdab2cb1c019b8ab239fb40db652eb4e0a5c34c1878f739a7b12b7088f0df607eba7bc7152b65d6e5c3b961ff5942922d8f4a4b3c33bacc54eb84c9f87565a9b22532d8db300a5c3b6b8a11df0e31ddff085e3a37ceabce951dfaf0a4cb745475ac885c0ae856d0f3ee5db6a92f96141b5e2780e85cede7da4a60cee4b4df83834c8e8c52791226d9e19af734b03954c4e5f47bf7bcf2dc9ccfef4f400b0738b8417af16dea85444422db21d33d54bb6859fcc9ac97f7f49f69f2fe9e223813a798cd7331f888866e8ae4b6f23e02ec65f69a3336246dbfef065c141859943c4573e415e75fe9c49f2c45f21fa0fc73a84b8075c52bea842f7019a9c9d0ecf5603298cb4897b501df0f78891c991e97ea3e242ade81b59abef657d8a1ca868dc9adee1791d4a76043aa2f539728338b88c97a5c51cf5f6f4583a2ba68c1e40a76eb5f2e7d60d35f58bb19dceced340fd0c370a5061368c19edbab824447ac9d2efce3a75573e4bbd045ad63e65df307ffecf5d2288b16f8301a73d5079ffdb23718a139b5fa518ca1ba9e7164dfe9bde6b77c86019a55ae95a53fd640a567f59d35d4f82551b464916ac3dac129f9f1a27c4cea51ab724c9dd309967dff212a5ea36b5fdd807de65f4bc1fd32e28a4a2adf9427775db1618487f94d541093e4fdbc961906db8119a990eb74da7a137fb09237722556f6f21b8f09a214889aa2479b6b65d13a3565e291349f5df46d347863a915d4efbef706a5fe7576ccae2770fec46acee5e7585aee6e859bf87f075def5fbb3988fef42d21c13611290c128505d5ac679e3e8924a9d478b5a3448d4a95ba704982da3b38b07ebfdd23da21e9838f8ca6a19d1afb9a1b86e772fc8d42f249fc204cad8b6dfbb63553c5be72c27bb40bfd8e62fcbbe97c722e4a322b418164dd6d70c6a677268396e7ca889be2189057b70cf7911a1fb61ee4728367fefb6f0cc7d11f49818c5b68a5357e6f9d2bd957d2a77b653bfb89b3c614133d88862353bbca685831c019a6b212660e96b96be7a189848a431f7f2efd8e6457caf1388dd5f9b71ee998e02b7fe2b2ccc12b84a55caa9b3b15f6b1dce0684402fc436418fdc92fd5cfd590d2c2960715cc46d6da0e5d752c81eb5bf1b378b9131e0a31fb8f3ba5d65fb60286de3034c47a4205471a224c9d217313e1d60e9cb55e067a9ad851236efa3e529e49a298a5bfe3600308ff83b94bb0399a59fcbbc45f0dad6e0e5b3c5c105272bd506e00c53a310adad1c7adf0369c4f4d5e8750463b3cd706da5cfda77f5da3e4331254a817a0b0e13e41cf1f62900270841cd9595f53bd966a1fcd966cc5a2fb669110b163e2a3c580ab8df08f2eef41c5993d7d5c93fd01e3e9a0ac80aed19153c3c64a552abfd84e0d560913cf327d869bcf4cc612406c82f6381a3082f5c0d46584018d9fea5ede895d4988ad73a15579d454490e16d550cef7380e1e8d2fdb0193a2a567a242987aaf8f2090d2c2b44de032f4616d4e38bfbefab47b38b001465db6d0b42337d710554e674b2add00f2b0e557b2b42a9e1115672d2a15286970b1e350c96b4cd50eb605002eddb092b6d6110869f935f3c6f68a5e4925af6707242bc224787b54f5b4964a7ed70eb5d0765eb59aec4362cfbcdb12f8d261766b9ad64c10e93ea418e6225054d6598878a09f3ed110fa63187d07cfe050df945e3dc2dceedf6438083ac831884c8a6e631e52a4acdfc4122d37faeb45644306840bfff8109efa9045e55b95fc21ffdb85ee07ccb9082d4815b3ce2f976619480e37b265566af77979875339e7a1da3257cd83fdfdabb12ffed3ded5e31519d7d3e9717f2265e87dcc34323497d25443ee3f1c28c9bb5e0d01d3e04f393784d41a5b76eb5f480ed8bc4a011933a9363f669e27a70842f9318f2e3fe64776aabfb3be7110dc5811d5394c2a5ddf07f590ad73ad27b5e1681504e386da90019f479acca357df44079269f27775ba3bd828201b4236f42007b7f9cc134d4d05b53fe995f0a1bae20766ae6ddd4e26d9a9701320f8dcc6abc290c787e060a3f21ffc201d5f829fd518f9e7d2c8b8097baadc4f239dd0895deebf74644a1aa4459cf86f285984af87b08bbf1d6d973b93c3ca57ca473ccf1778578ded65b939e155122f2e05a87c9b476f1734165f3108ea352168970522ecd5174610f419dce2076b42093065a1c32b5dbdee630dc525dbb2145045057d2448d21d78b4e10529251709399546e8a1096c630ae7af81b7bd20a46721892bcccb0511d67a840ef37d9cc4682cc6926621838ed8b7ec59e9cc249307087f26b2a8e0cc725b49eb0ee2f723501815caf77ae3c5940316ad53b5ed27ccc004c42d7cc75163a7f3ad6a3c1f85d7ebf75a2cf7170d47335e772a06a7efceeca355e480197b159b07644e421a21f771c2471380d047cd870f3e5484d6d23225c97bd4c8dfef713012ddb9e2b2007be6c14805b1e3730aafc9f2b2fa6d6ecddef371f3e980489a30666a9c092e652d1657260ebb913db03eb9909369cdb2ce6cd7b976ff60ec1f04f7af119c4973e44486e58724dd510f417d6566506b8995addd4465d55894b8daa871082c5fbd144956a377b48eb8790db1030504ab0611064f4f16ea1f20323a7e159bffcc5857cc77f42346448d64106125e826d46947652972449620566dae9b0172c09f0d05872ae40f2f7414ffa6f31b3f51d1364078e1d029047cb7a5e33d4e3227d0489eb7204dd3063911527dda9ce4a9a2bdad7ff339535d86464c2d7bd522eab96660dec9fb66bab965a5737a0f5adff08dcf1f26a4b02985b3cda81710de9b1fa27589040d836732d167e6ea4eb6e103cd42b1dae24fbcaaaf8757fccfa7f2e4025f6e98d6785997ee25e9563f130c1d4f5d09dd02e89e83181e10e2acb08f8aea12510cadd16fe632b5d70e725aedec6c10b4cee3d34699429c2ae5c3025ebf94e21a5c64f5f19476014f153b35d3832a0551196d1ccf427b1e324693581734d90cb982ea9685025436916b8700d12034f05def64c93a8d55827eed432d5469dd9aac07ed9ea1530eba7a74c0dd25d4f0520a044e2de24dedc9e1ab1c41575a0bcb866183da9568879e5565f40b52cc376a28e3ed18d917108cd68bce19816d0ae97411595bd6eb5ffe398764a1467ec06ee0057ba447862cc1ee5f88f2510340a6e5e91d1f93ee19b6e4566ac6cbc3eb637a4e328a4ab895785a94558ad667dab93a0b07da67caf1e3e6cf27d54fe1b2ef03c47d5692d5ad892d4da4822e2e14c02051f083b8e5519f2d4e36308661bd10dccce076b05f5763c8b5c7550ced6753d2fdd494b7baa3f2661c98bd6fcd8d72d68c504d76392fa768b9b1456339b0405c772728ad0df2b9d8c2dafc25ca0346e473f9eaf67221582d417d234a45057976427689a78c9c96ffe3539498ddff8b77f16cc2f7350be962ec7cec3ce2e83aa8ae7c02bc9bc7fa7ae4b020ec5d6c111ad5776df9b69ac11d6b01f4d7ab2304e21d06335d667c21edfc74f4eeeab57013e655ef7b2d590d993bfa244153834899c514ab195b86d2b40a9ed9c48843b987b513219b4a94fdf4328892961362a383c72238c35b0b1253f679ff2d931459ac745f6460ae171f5ebcf2118eb64291b8fe2b3710f77a21033ca78473bcfd33e6c50119086cb3fab73e2cd25029d74615e95048a882c63e4d166ca858da30192eb54d913f6642fbef35c48aa2712dfc0bac04a9e5645f18fda7cdbd62b297ba1e5f60c5acc62b029b8473698710dd5452914469d02928f966a09b6a10b756b9475a16bd22ea28c77cc2e5b2532cc019e8dce75e576d375bfe9e21507066e7395315ca4b4537b9f9410e3dc854c66a2694056cfd704dec2b2da46cd3150b9b80f346e641c0b2e9fa0e3129c85ecb8461770084f6438ae7d3825a181ff831a68e4ce7f3f7f80625677ed04bf534cf54c91a0b90a98922e9ea62e83ddb5fce7e8b8771e0fb50d3e8e29e2110fa6d387d886a06cf3550c0ac50a7c25e38904f25239733a372be3cb869808b2ef987b362e21d03e49508212397502204f7963b8c519548749a003efb21d2a2a1421032936a24358fb45b304928ca160a146c546030c08903967e93ee8c66a22afbeb7672b70c0fe218abfe655951d2b5f9ca4421b9213308f5c9288cf0ae2ef5a758780a28b71befcd77c6dc8fe314805480e19e96a5382a5d9787159f15b0e3858920a744b17a3e775837f192bc1b0a6292570d4e998eef627091a61a6caac7b6181a8412c36ad08ece5d49e8dd61c5c1a65d56fc53e4c27b2c4f734ac0fe465402e16c4e3cc9eaaf92c001a04c2ff13853a0e16f9f9279895f24e4065664dd148783d260a88ea43e62ccf5d5de1316fee422a8906fc0f64a63a9ce468ba1e79f8c1397bee8acdebcce450f6d741e64f281ca6dea98302580e09c1e17c9d8b59a0bf9df1019b78037f60c514f184ba2ced6258c40df839aef637250a8e5bc2898caafe6182febc1148ef9b4f1c90e269db7e9a9597c0e28eb845ef81d977da50523a18b36a3717cb0789066d9061bd74e82899138de04ac2e33b9c1ccc4a89f22c5adddaa43aae110c2f7a01247e26e463720dbc5a4113feb3d843a8c163084927370ac60e0def7c08b988b0dba0815d86d6ed4cc6cd927f378f724c6abc31419ee67773fd83a421ae963aa72e8e24fb7bbea1bbf64071530e64bb942ae89f746ffbec676740b90e9d74b4f11aac237f2202204c6a78fd065f14cc6030608dc74ca69842090f4b639d44a7d50a0a4c0e0d132a2e4a6dba3d7c2f3ac8d3dc01498c2d59488f528daafa3c98781ff07b314688a846781f9b3d10bdeeeef7028450f0653aef646aeb9eaaf10c3f76b43f5b8e7efd27e4cd25e7f504763347cf707ae511accc75c61a3310ca7f548409c753b41aff3207e170b7dee74b1397ca75ee78115f4b66d6db9085f7de28ce3cfbc0b7726dd9d33464160a3b08306b571de5abcaad8e7d4872aebe9a3dd8b5fcc294fd79429cd94e8d4c1e917893a3bb0b06e5077978be75ba69fba558608db2c1794fa8dfe1d770398daa1ff03bf23cc67d9d7622fcc39a27f6d67d7de765eb9eb8a9e0c0d5f04646e017b7d66bcbc72794f0da435c730781d9ec23a35a465ccca83d22065d7055370e38848953e4ee7f8c2c23d81dead918a3597c394f8bc2ff86839a345341a6eb239d387cfdde5dd1c3a973bea2df52637169d00b3cd0287272a31afe31db63cf81c947e564e9852e282cc7faeba2a2a8f2cc45fb5d752e1ea8979be0464f782e184ce2abfbf21f536813521c00cd7ff4f01893fc3c9851e76340c0d55d339075d1c7baf25c7490c6787ba5e3f0c89f45bd05a57a14c14dc0f9644660354f6fd72af49e1c1750904d14df162cbcc3e10994c514ff18f5512fe32f7e2b07590948ada597c224ab07a4fdd42d83741c859135ad141114aa291129ff9b328d3dd798dbcf2a264f5a6e34b5ffa4a6ded3efc25fa9a068b20c4d14ae6bee170a1a1586b9695e701e06779e6b8ea495f3e12486d5a4633bb7d209e9eb4acddfce6e6c2c1718151064281b375f826ff1ab940ab5789852398799f1dcf3c5d9c0191bcc58c29626404bad5dffbf193b5d074126d76cd6712cef7f25932b4b46e645496cd02512071edf297677aad5e0d46f98dd231844e55acbfc6d4099f0bba8842068bd05ae0772f34f2ca2e7d87bb039c81f3f20d2c3ea7900b3fc54f778cdc8bdfe873ab18bd8b1e441c8a60b0102d60b69a2e7f573f2901117f4013fde48249e44a8d87c102896e37b3f97f47ec981de2499de9573b0805196d86c6041f766a880abab70b5547c7bc80eccf49d29bfc5b08647760d02ec3c1d03323f4241801d612bd0e122340c6d0743f9b5e556d58fd47f726ec1befdc0d7f0ee045e867d742aa230e594af3de4a87777617dcaa3689653029495fc865fb6d3e1304335f1e1eaeadd207ebe055eb196cdde09263320ada634f63970869879f62ce12f98dd6c78250ff16fc501ddfeb1cf4f1364d11e521029a15b569a92290cfb350a34161673f0b050c1d32919ce30fa1dbf6e77d693ea16e5b944532bb19f55f2d6bd9bad97a0f868b838d40e3edc191cf254706b66e15380bcd95de002fa5031fb47525e2971efdaa16fe4af648017634bdf15a49334c16c784cc0e8daee8068c9dbfd1253f6518997d03521181f44125432c005ee3da140eada25ca3cc1730354d2791faceb7ae58224538c8931e2485bff157116f5f0e5e04b396d8cfa7377d0ecafded882250a20e66a0575c5d50b87c292f305504f5506b9496705c27712a3faf88af172223cbae546f4847cd385d72209d1b44a947d9920ca52636ff2bbf5134048a7671f936657870e26d584c1772379f1e35dd9733d17a71bb7ea0c9d2ee1c33d4a79284eb1cf7eb5d9788f5b26a5d820dbfc99029a597d2af6c1f6d3ddc88a443f56704d25f4f1a11b70a8815fde0eb274f487799597b809916a27600337addd4b8c036a9f9c02d467adc041166ad02f8141c6c5256d5c51f00e80c30bcfff7e6198e2c8ef7b8bed9bb2b70c1903941c5174d9256400e0f91d6d16bce02ce0be8d28ff3d29acbe7782d2cc74163addd2b294d0eed812357b709a61b090809d5a19ff72011e772ea4ad24fef23152cad478a71798cab14800ddd23616f2ee6b239ea0d104a973251175c2b7143c53c0b90148e82f3f97216407c6ac15d7673f6b0d852bc6a1a59dd1a66d15e802caa324c829c5e14254186eff14e9d347e497949424436e126b0c4f833f4b7a57c24a59905d0dce4b482f3599baa8d2912897c31ba92d07c09fa83eb1b490000a10f927ea744cb9cdbc8d6ba74851c81a2d4a86e784e5f73ea765a6bb50b93ac4e4560fed752d6eb13a2e2bd152d2da852c715420319298a85e871a82fa2c302173a68358888e9c1d42974d7ce1a58dc9b4a12bcd49ed816e380f1fd5268a09016098479fd0a9bc06779cc171e314c7bb78990754a26f724eccc1a9fb87fdbd8fa635308eeb6bea5ddf5009932d9dc8ce3e751ecada30bf790fd2502011f48a49c2e459614fe1bbdedf4d51d2e8d61be6a5736d947c2e6a539313aa95ea0f0814ecd85660fe7b0c01db031acc19e4f6d4a2a98ba6ed23e6d7bc699e24c41071a5eae79cf4e3794a275bd202120a41ff65504d4bcbb299b8a3823cb3b26d408ff49b0a4c0da016b6388ae21b9eb47085135a69908f0a07a30144bab4412c09c8eb941f2dd4b0f8131ee5b31d80c7edd81c9821a07915b3ef2e3ff0079460be09806d4d5d40b9442ce215897ddc79de0a08abc7d5e9c8c5a4910ee3b2be2573056bc867262044b383191631a089fc969d40af3dd3d3934b4948194bf46f32242b229ba81a492b7794df9b1ec1a88c5af98d8f2496c961b44b65e9bcfbbc4a39b6cc624ac693a3ff94b059f8ffcd36cee4b73a717172507d1b689d46d034af5cfc56c4783602755b068c890e9435079aaf88b236e245d2ff8983308fb04fcb0c26599f771232ce85eea81fbd37706adb1360110e764dc5e822cd4c7d47d4d91e8e5336094e84b3e1c95fc4f6347a6e8327e7340607d13976b85bc65c8878b4ac735fc68f31ba44eb4a0729a3a9d92b0f51bd7338b352182f0a8e1b35464cdc32359a56f1b20d76e3ff275d6589c24d434f32282068f66dc114bc8a544b327c89e81af1d3b24a268283512e6a9afb0fed8d22a64f5ebb163bf22a8ebcfd0133275b8196bf2b58f0f1fc8366352d57421cb957a3efc85bdbb41fe366a5a1cbd4bc8c7d24127d1f480dc18dfd2739dd61d7f36b7d9e081081256ddccf79ce26574fd0454f7201522c0c8383055ec8b349671864ffdbdcd861f7a9c34e230a2c32c52a45cde2b5cdb1cd5d58e33a12eddd83da54debe41fc637e0efe8a7fdd4964f524d6546a6fc63f81c7020aae4020bae4f523c693adcab31e355c637f8c2e89669804cf9a76f64c3578936ee128a26dab7115f942262eee3bb2f660b7d86df99ca53c95103da6cb624666602d47409ecb9785e792cd74973f9781540127f702dd47ea3c643e091d23f99fae95e30fa2f1ad32849252bc41d983d80be2abc6f4d8c92141d4241fa3394ad7dd9c4db4ef1b43f3b34728410cd0202c837dd99e054b9d16a4f13081a00896356cd4822b99dec538350a0c45e4fcaec071bfd55f406733bbd2a3be5cd4044e741e7003babcf4808f831345a49d7544acdf09bdfae76499a41d0a14f84ff6d734d21fdb86772c42b96a64bc27720d233715def66d1784504caf9551e5fc083e68e77a4d141849ac5f57c5ecc0434afa5448dad2ef8da74bc9ac0ca61315b99abe6b07b493b928ff4a3ba1e049f5d5b8b9131f20e3ae8405109d1b84f4a4dcd3d2b3a82833490d0cc64b1b5e039efe2f92d3a802205f1d1ecd9f36277156608f6c77987b867a3ac47bf03445677fd58fcffc371ea7ac164163b1b65ca7a79be0ad8bb5bbd6d656964c5a05264c3ebdc7661d13e919f724b59ae57544af350c077d920d3026d1447db5470df79e42b4c52089b806fea571f9b70be74432c8784dcd3b1caae53cdd99ea0b215ed498c62ecd211b7136e21876273ebe6c46969a08bae20c50f01790bc3d83d565f0ac6fea3dea83dba043039966dbe7740435439b105e5fbc58350affcddab7b5d31b59e50dd2a5a09453e89eebd1592818dcd6ce0fa3019e2c46961c3b9578d5080abf7ce8e17523e758e36ebd3cf17f9207433eabf3360d0e7788e8d3ceef17e862a3cb5e5280f18d287de35130bae19d9555f02a3123d8bd155440e5613cf0da9f8bbcf2dc03b6f4fd123f8406673a91acf868eea124d97c531d3c4ab5e7d53ad36a9241656413a5738b933b6c97abf1ae85242783646487e59eba9d3db2e9dbeecc9d5b7eb9f44304192eaa29750704c24c5463b67cb7a9f042b47e496e93960c5c4059bfe6d3afce060eebbe3f31020dd3ae0c697ed06042261c296e66ff7926c6c68c38bb9a564bb4a7612eb46705f9429557026caf657f083bde60d83d68f0d4041cc033af0ccf78c6c271991489d759cdf37de6605d88e47811ff26fdb58e2173ad09610c8580d03a2945ba71250ed1f45f08bd0bab139b9cd911e928f19f2a8a547ae9931492c7c5987910c503f0a11cb2d89f9509d6c4cd3b271d8b24d88faa490504035664511dece2175016842a4a280a9097701dec5c6b35e6a1206765b18c0dd2188800582dd9663aec8a17b73d45f98d976cb27041de56ca9b3aefde1807cf8584b395046c49c35534303c6e2914f3fa407e7dc8951eee6eec86da420c40aac51453b041b6763496064b21ed09dc0f7bbdb9f6545268e0e48b7fcfc549bb104288c784f7b1019eb30624852e34589968e27baac969ee6f1652a9babe632f0f096b54e778cf47b5b50b05d14ea13f297b18ebda5952d1e3d06dad400616ff0eff1d42760f0ba6c06b7d945f96ec55a95a6114164d1dce0eabab2d94f90fded2d46d5eaebd0278b095ed5e352a4ad8a42741d82f828590502ef3e05dd5aeef587933f8f265b0ae944f2657fba68f5d5aa32059fc809cb365c71f6ad601132bad2e87f0538ca9896cb588a873a601a4b20ad08000f92bfcb88e234f3de3059fc6eb1acfdaa5d1729938582090dff8492ba8429a17d5f9dd86c43fc3cbf960f518baff3d80ad5cab761900898f3320bd6574416770ec8c7c5e19d0e9a5b43e6f3023212135898fbef09cd62a04f3eccd1f84da7e563f94feb4888ef4f11289b3129dbbe684c9739363761b24f60f22299bc6a35ba79be708a6594b1752219851260d1ad6f1e945011124e27b80ee02706def5f6f6882387a1dcfe4945b1613151143b0acd8cdae3c8265a1a4602a40124b8249ec56da8b6350ee0ede2249371b1c53241140e645073964a8cb3a2bd91cd5c8d6ccdd6a87bfc59204b4796f4398be6728b13a36a9d26de6fc2e3cca501be8a8c99b8bf055cb7285a717d2fdfa8c9e551f6347c681950d8d8223e04a95ee2f6be4e194a7e10880145d20b03b290d5d3f0eb6fb35c2dbe4d6dac3ee06216b95b02b0d19ed188292274977ff30cf3e9f8e0c51cfaec5f2b74a93e8a0e30a27fcd78fd3a17767d6798bc7c6081cfbbc5294386f72c2896853e8b8cb631a377dbd530c29bf29e852024ffcf567025fccfeb02a639d5e022baebca47d046bfda7ccd3b7113b544225f59ca4a230caa922c2f6a6d4672993d72d23f479b29f7ebc7df3bf5b6632bc0d52e51f6c62c3595f1ba6d72155162241285be3d02cd3885086354f0e7aa3c838d7a701f8d1412ae80be30b4cdbe911581b3326644b55c4fce31f8b4f0e4804b88e190481174ca932f055f768488e7906615fe3ec321dd6aea3d02d4ee5dd66e1b3f16de0099f39fe576354e75745468557b66c58c74f8873a08d88fb3787e938a30431b0c50131ce9a1da08e99c37685381acfcd1df0e57139600e0d4afb9b7e70ea89d1cbb672d11307976a8982e9f11ed1bc68a5f0662754a53e40456c90002c93ac74b4c41f4028ac908cd71bd56e7b02d98c3897bfc5413027ab5029ca60358fa64a3142db2dcaee04ec9acb0332b2cbc6a9a62d97b8a79d650d13fc28485fbc18e58c3c42814a39ea4424d9d62f737e0a056b94ecf515cef27ecd4c2ed8aa63734601b524ae6da11c30e7bfa4d95dba1292e6d3c198c76b5273df04632f180fd7717a6e6ad630a3bc541cbc84871e2fcd64bb675ee4b53a325e42d3f1c9f4602e06357938f301d7f17e253ad4a0466ccc980bd2bc0fb72e203241eef51c176c7ae5c81ad846dad94ec331e16a571f9f227e8b152d1a6753a92c7eef8ee91aef22a2bb187d73d658d345d3dc80a8fc030e7a1c6194923cf7f93c027a8b7a156bf27c93cf0dc356535c3976084874e707579a8ae63fa4f053b9aa79ff9e6785c47ac8ccf7c64f434d81e74a162c81aad978472d3b7ac7f55ac1b663f2918cce8a81cec691d9fa5ceffce7cfad647c3118777bffc3b9ffe45653a96e1d3bd86f70736107cb51dba540229fdccf67dd854ed077a1ff6cf18224b2478529d5aa65f26c536d8ff6848f7e3fb99d62db80430c798a00e91ae8d9e00f2286d8c9e77c3d9c303804c67a9b9c6b877465151a25d8404ae9cdd9bf2840e66c11fd63ac4758559de926bac7f2c27afc1b6337105f3dc0b63b8d17cb5656284d0b3699e870242049cb24581d606ecbf1baf7f5e038fedb64c091c721540397c9134abe44aa69e30819565fec0591df508158ffd33081b4c9bc2c32be40ef5e93c16f40fb7928b81cabbca4d9b290d2437de074d672458198c9a2790fbf415adcd2e5849d6c34bb4", 0x2000, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_POLL(0xffffffffffffffff, &(0x7f00000001c0)={0x18}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)

10.95687615s ago: executing program 0 (id=2722):
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000000101010100000000000000000200000606001240000400000c000580050001000000"], 0x44}}, 0x4000)
openat$adsp1(0xffffff9c, &(0x7f0000000040), 0x101a00, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1, 0x0, 0xd}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_emit_ethernet(0x82, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kvm_ack_irq\x00', r2, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$kcm(0x29, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x1005e, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, 0x0, 0x0}, 0x20)

10.777669992s ago: executing program 4 (id=2724):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ptrace$setopts(0x4200, r0, 0x4, 0x1)
futex(0x0, 0x5, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x1)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x14)
connect$inet(r3, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10)
socket$inet_smc(0x2b, 0x1, 0x0)
r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000100)={0x800, 0x300, 0x10, 0x800, 0xbbbe, 0x0, 0x2, 0x4, {0x0, 0x0, 0x1}, {0x7, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {}, 0x2, 0x3f0, 0x0, 0xd613, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2000000})
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x40a00, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000500)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x73)
accept4(r6, 0x0, 0x0, 0x80000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4b, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10)

8.518738431s ago: executing program 4 (id=2726):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
listen(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000580)={[], [], 0x2f})
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x9)
fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000280)=ANY=[@ANYBLOB], 0xfe49, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f00000000c0)='macvlan0\x00', 0x10)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
mount$9p_tcp(&(0x7f00000001c0), &(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000300), 0xc08, &(0x7f00000009c0)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@afid={'afid', 0x3d, 0x7}}, {@uname={'uname', 0x3d, '\xde'}}, {@cache_loose}, {@debug={'debug', 0x3d, 0x2}}, {@version_L}, {@cache_fscache}, {@noxattr}, {@fscache}, {@noextend}, {@version_9p2000}], [{@pcr={'pcr', 0x3d, 0x7}}]}})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'dummy0\x00', <r5=>0x0})
r6 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x9, r5, 0x17}, 0x10)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f0000000180)={0x1, 0x1, 0x1a, 0xb, 0x2c, &(0x7f00000005c0)})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)='\b', 0x1}], 0x1, 0x0, 0x0, 0x60000000}, 0x20000004)
syz_init_net_socket$x25(0x9, 0x5, 0x0)

6.390159195s ago: executing program 3 (id=2728):
socket$kcm(0x29, 0x2, 0x0)
socket$can_j1939(0x1d, 0x2, 0x7)
syz_open_dev$dri(&(0x7f0000000340), 0x8, 0x2c2080)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8)
keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000280)=ANY=[], 0x0}, 0x94)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
add_key(0x0, &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe)
mount_setattr(0xffffffffffffffff, 0x0, 0x800, 0x0, 0x0)
r1 = add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55)
keyctl$read(0xb, r1, &(0x7f0000000380)=""/64, 0x40)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18)
r5 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r5, 0xc1485544, 0x0)
connect$inet(r4, &(0x7f0000003580)={0x2, 0x4e21, @dev}, 0x10)
connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40843, 0x1)

5.521030366s ago: executing program 4 (id=2729):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@enum64={0x9, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x6, 0x3, 0x8}]}]}, {0x0, [0x5f, 0x30, 0x5f, 0x30, 0x30, 0x2e, 0x5f, 0x10, 0x2e]}}, 0x0, 0x3b, 0x0, 0x1, 0x6}, 0x28)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000200)=0x19)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000002c0)=0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', <r3=>0x0})
socketpair(0x1, 0x3, 0x0, 0x0)
r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
landlock_restrict_self(r4, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)={0x98, r1, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x7a, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @initial, {}, @value=@ver_80211n={0x0, 0xf, 0x1, 0x3, 0x0, 0x0, 0x1}}, 0x1, @random, 0x408, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x3, {0x7f, 0x45, 0x2}}, @val={0x25, 0x3, {0x0, 0x7c, 0x1}}, @val={0x2a, 0x1, {0x1}}, @void, @val={0x2d, 0x1a, {0x2, 0x2, 0x4, 0x0, {0x7ff, 0x7, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x800, 0x401, 0x7}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x3, 0x60}}, @void, [{0xdd, 0x6, "00fbc68fbdd3"}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x8090}, 0x20040000)
r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r5, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r6 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(r6, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r6, &(0x7f00000002c0)='./file0\x00', 0x2)

4.813719499s ago: executing program 5 (id=2730):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000300), 0x9)
recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x81}], 0x2, 0x12120, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00')
pread64(r1, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000)
write$UHID_INPUT(r1, &(0x7f0000000340)={0x8, {"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", 0x1000}}, 0x1006)
sendmsg$can_bcm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x11}, 0xc991)

4.807690552s ago: executing program 0 (id=2731):
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, r1)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)

4.607522661s ago: executing program 3 (id=2732):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x105480, 0x0) (fail_nth: 25)

4.600671303s ago: executing program 0 (id=2733):
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000000101010100000000000000000200000606001240000400000c00058005000100000000001c0019"], 0x44}}, 0x4000)
openat$adsp1(0xffffff9c, &(0x7f0000000040), 0x101a00, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_emit_ethernet(0x82, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kvm_ack_irq\x00', r2, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
socket$kcm(0x29, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x1005e, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, 0x0, 0x0}, 0x20)

4.565230634s ago: executing program 2 (id=2734):
socket$xdp(0x2c, 0x3, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000063e000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x0, 0x9f6a364b3fac2a63, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, 0x0)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r3, 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x2, 0x5}}, 0x20)
ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f00000002c0))
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0)
shutdown(r3, 0x0)
ppoll(&(0x7f0000000280)=[{r3, 0x8088}], 0x1, 0x0, 0x0, 0x0)
accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000004cc0), &(0x7f0000004d00)=0x10)
syz_open_dev$sndpcmc(&(0x7f0000004d40), 0x9ef, 0x80000)
r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f00000001c0)=0x7)
r5 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000340)={{0xeffffffe, 0x3, 0xfffffff9, 0x0, 'syz0\x00'}, 0x6, 0x10, 0x2, r5, 0x0, 0x2, 'syz0\x00', 0x0})
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000005500)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'})
ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f00000058c0)={0x7, 0x10, {0xffffffffffffffff}, {}, 0x7, 0x9})
getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000005900)={{{@in6=@local, @in=@private}}, {{}, 0x0, @in6=@local}}, &(0x7f0000005a00)=0xe8)
getgid()
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)

4.07766255s ago: executing program 4 (id=2735):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x505202)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x10011, r0, 0x100000000) (async)
syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') (async)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) (async, rerun: 32)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00'})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3)
syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async)
read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020}, 0x2020)

3.981975666s ago: executing program 3 (id=2736):
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x64, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x3000000}, 0x0)

3.717982601s ago: executing program 0 (id=2737):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x5c, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3.706545704s ago: executing program 4 (id=2738):
r0 = socket$kcm(0x2d, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={<r1=>r0})
r2 = socket$kcm(0x2d, 0x2, 0x0)
r3 = syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=<r4=>0x0, &(0x7f00000000c0)=<r5=>0x0)
semctl$SEM_INFO(0x0, 0x4, 0x13, &(0x7f0000000140)=""/17)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x2d3e, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={<r7=>r2})
bind$xdp(r7, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10)
bind$xdp(r1, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10)
close(r0)

3.565983585s ago: executing program 5 (id=2739):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000440001800c00028005000100000000002c00018014000300ff020000000000000000000000000001140004002001000000000000000000000000000106000342000200000800074000000001"], 0x9c}, 0x1, 0x0, 0x0, 0x4041}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000000001050500000000000000000a000005440002802c00018014000300ff01000000000000000000000000000114000400ff020000000000b70b000000000000010c000280050001000000000006000340000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040020010000000000000000000000000001"], 0xa0}, 0x1, 0x0, 0x0, 0x3a}, 0x0)

3.562186248s ago: executing program 3 (id=2740):
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_dev$vbi(0x0, 0x2, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x1002, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet(0x2, 0x1, 0x0)
read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/87, 0x57)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r6}, 0x10)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
write(r7, &(0x7f0000000340)="18000000010003", 0x7)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x5d3e, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xffff}, 0xe)
close_range(r0, 0xffffffffffffffff, 0x0)

3.528951225s ago: executing program 2 (id=2741):
r0 = mq_open(&(0x7f0000000000)='-\x00', 0x2, 0xb8, &(0x7f0000000040)={0x4, 0xfffffffffffffff7, 0x7, 0x25})
r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x10, 0x40800)
getpeername$llc(r1, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000140)=0x10)
r2 = signalfd(r0, &(0x7f0000000180)={[0x5]}, 0x8)
chmod(&(0x7f00000001c0)='./file0\x00', 0x100)
fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000200))
syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x3e, 0xc9, 0x2}}}, 0x8)
ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000300)={0x2d413781, 0x1a29, {<r3=>0xffffffffffffffff}, {<r4=>0xee00}, 0x6, 0x2})
mount$overlay(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x1002000, &(0x7f0000000340)={[{@verity_off}, {@xino_on}, {@volatile}, {@uuid_auto}, {@redirect_dir_nofollow}, {@redirect_dir_nofollow}, {@xino_off}, {@redirect_dir_nofollow}], [{@euid_eq={'euid', 0x3d, r4}}]})
mknodat$loop(r2, &(0x7f0000000400)='./file0\x00', 0x2000, 0x1)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r2)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000004c0)={'wg2\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r5, 0x10, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4004004}, 0x40c2)
r7 = syz_open_procfs(r3, &(0x7f00000005c0)='comm\x00')
getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000600)={0x0, 0x4, 0x1, 0xff, 0x3, 0x8, 0x2ea3, 0x9, {<r8=>0x0, @in={{0x2, 0x4e22, @multicast1}}, 0x7, 0x1ff, 0x7, 0x3, 0x5}}, &(0x7f00000006c0)=0xb0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000700)={r8, 0x6}, &(0x7f0000000740)=0x8)
ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000780)={'pcm3724\x00', [0xb1f, 0x9, 0x9, 0xfffffffc, 0x7, 0x2, 0x9, 0x2, 0x1, 0x6f7b04d8, 0x5, 0x9, 0xf6, 0x5, 0x4c, 0xc, 0x3, 0x101, 0xfffffffd, 0x8, 0x1, 0x7, 0x5, 0x4, 0x7, 0x33, 0x3, 0x0, 0x2, 0x6, 0x5, 0x1]})
get_mempolicy(&(0x7f0000000840), &(0x7f0000000880), 0x9, &(0x7f0000ffc000/0x3000)=nil, 0x2)
r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000008c0), 0x24000, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000900)={0xc})
ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000940)={0x0, 0x1, 0x2, {0x0, @pix_mp={0x5, 0x7fff, 0x33524742, 0x7, 0x7, [{0x7, 0x70}, {0x80, 0x8}, {0x8, 0x99bf}, {0x3, 0x10001}, {0x5, 0x5}, {0x97, 0x5}, {0x75e, 0xc2}, {0x7, 0xc}], 0x3, 0x5, 0x3, 0x1, 0x3}}, 0x2})
r10 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0x2, &(0x7f0000000a40)=0x16, 0x4)
fcntl$setsig(r10, 0xa, 0x3d)
ioctl$IOCTL_VMCI_SET_NOTIFY(r7, 0x7cb, &(0x7f0000000a80)={0x6, 0x9, 0xfffffc00})
ioctl$BTRFS_IOC_SUBVOL_CREATE(r10, 0x5000940e, &(0x7f0000000ac0)={{r10}, "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"})
r11 = add_key$user(&(0x7f0000001ac0), &(0x7f0000001b00)={'syz', 0x1}, &(0x7f0000001b40)="b69f949c74062e562c064c065719aae5fa6b190fe8ad4d1ba844b1275e8c35cac331772cba62b4c40c274b98b8457c98f1fc98", 0x33, 0xfffffffffffffffe)
r12 = add_key$user(&(0x7f0000001b80), &(0x7f0000001bc0)={'syz', 0x3}, &(0x7f0000001c00)="fc7a8d179921802f57c36bf94c796900ea9dc983f999bf0ce2a83dac1f9bba5c970b56e18b98738011f58fba8ea3b272f6db69582b316383", 0x38, 0x0)
r13 = add_key$user(&(0x7f0000001c40), &(0x7f0000001c80)={'syz', 0x2}, &(0x7f0000001cc0)="b219a87585fada1583008ce86e4152673ebcf405f5b40737a36d53af49e619edb3d1507a", 0x24, 0x0)
keyctl$dh_compute(0x17, &(0x7f0000001d00)={r11, r12, r13}, &(0x7f0000001d40)=""/113, 0x71, &(0x7f0000001e80)={&(0x7f0000001dc0)={'hmac(sha256)\x00'}, &(0x7f0000001e00)="2db68e2dedb74ecc673297f82d2dc110fb3a2103234bc5223a841ad84ac7206ef0baad8baf636457dac5e25c5ea0bbc97526e531ee94649e394156b9372b8a0b273069f867c03980e3fbd3f162a03d626c45c3083e8f1234cd295328a533dc8a088eb611fce7cf7a6db9c07b5d0a7a13d0c6682e19d9fde29eff", 0x7a})

3.440647846s ago: executing program 5 (id=2742):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x10, 0x803, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@delqdisc={0x168, 0x25, 0x10, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xf, 0x10}, {0x5, 0xb}, {0xffff, 0xfff3}}, [@TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x20, 0x6, 0x8, 0x2, 0x73b260e0, 0x3, 0x4}}, {0xc, 0x2, [0x6, 0x7, 0x8, 0x9]}}, {{0x1c, 0x1, {0x1, 0x9, 0x3, 0x7f, 0x2, 0x7, 0x7, 0x6}}, {0x10, 0x2, [0x9, 0x7, 0x5, 0xc, 0x1, 0x6]}}, {{0x1c, 0x1, {0xa, 0xa, 0x2, 0x400, 0x0, 0xa3ab, 0x7, 0x7}}, {0x12, 0x2, [0xeaa8, 0x4, 0xff0c, 0x401, 0x1800, 0x5, 0x8]}}, {{0x1c, 0x1, {0x1, 0x9, 0x1000, 0xb2c, 0x0, 0x7fff, 0x965}}, {0x4}}, {{0x1c, 0x1, {0x7, 0x8, 0xffff, 0xd, 0x1, 0x1, 0xf, 0x2}}, {0x8, 0x2, [0x2, 0x0]}}, {{0x1c, 0x1, {0x4, 0x5, 0x79ea, 0x100, 0x0, 0x5, 0x3, 0x2}}, {0x8, 0x2, [0x2, 0x3]}}, {{0x1c, 0x1, {0x2, 0x4, 0x1000, 0x2, 0x0, 0x9289, 0x7f, 0x7}}, {0x12, 0x2, [0x4, 0x0, 0xffa7, 0x7, 0x4e59, 0xc9fe, 0x0]}}, {{0x1c, 0x1, {0x0, 0x9, 0x10, 0x373, 0x2, 0x8, 0x7, 0x1}}, {0x6, 0x2, [0x7]}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4048810}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001880)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r3, {0xc, 0xfff1}, {}, {0x5, 0xf}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x1}, {0x0, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x20040054)

3.137904014s ago: executing program 2 (id=2743):
socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nfc(0x0, r1)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000f40)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080))
sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRESDEC], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)

2.116593149s ago: executing program 4 (id=2744):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
socket$packet(0x11, 0x2, 0x300)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10)
socket$inet6_sctp(0xa, 0x1, 0x84)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000040)={0x3ff, 0x7e7, 0x0, 0x9, 0x1, 0x0, 0x7ffffffb, 0x83f8}, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000120000006d0500000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(r2, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r2, &(0x7f00000061c0)="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", 0x2000, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_POLL(0xffffffffffffffff, &(0x7f00000001c0)={0x18}, 0x18)
socket$inet_udp(0x2, 0x2, 0x0)
r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)

1.904347777s ago: executing program 3 (id=2745):
r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0)
r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
connect$rxrpc(0xffffffffffffffff, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
socket$inet6(0xa, 0x3, 0xb5e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={0x0, 0xffffffffffffffff, 0x0, 0x417}, 0x18)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='ntfs3\x00', 0x2208004, 0x0)
sendmmsg$sock(r1, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20048857)
landlock_restrict_self(r0, 0x0)
munmap(&(0x7f0000800000/0x800000)=nil, 0x800000)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000006, 0x9132, 0xffffffffffffffff, 0x9aa9b000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000056e000/0xa000)=nil, &(0x7f0000072000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000189000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0, r5}, 0x68)
r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00')
read$FUSE(r7, &(0x7f0000001780)={0x2020}, 0x2020)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0)

1.74574151s ago: executing program 5 (id=2746):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@enum64={0x9, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x6, 0x3, 0x8}]}]}, {0x0, [0x5f, 0x30, 0x5f, 0x30, 0x30, 0x2e, 0x5f, 0x10, 0x2e]}}, 0x0, 0x3b, 0x0, 0x1, 0x6}, 0x28)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)=0x19)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0x1)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'})
socketpair(0x1, 0x3, 0x0, 0x0)
r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x10, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
landlock_restrict_self(r2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r3 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(r4, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2)

1.510283335s ago: executing program 2 (id=2747):
syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x48)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000000101010100000000000000000200000606001240000400000c00058005000100000000001c0019"], 0x44}}, 0x4000)
openat$adsp1(0xffffff9c, &(0x7f0000000040), 0x101a00, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet_smc(0x2b, 0x1, 0x0)
syz_emit_ethernet(0x82, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, 0x0, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kvm_ack_irq\x00', r2, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x48)
socket$kcm(0x29, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x1005e, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r4, 0x0, 0x0}, 0x20)

653.747877ms ago: executing program 3 (id=2748):
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mremap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
mlockall(0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0))
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x80, 0x0, 0xbb15}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
dup(r2)
socket$inet(0x2, 0x2, 0x1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)

376.227395ms ago: executing program 5 (id=2749):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$packet(0x11, 0x2, 0x300) (async)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)={0x2c, 0x5, '\x00', [@ra={0x5, 0x2, 0xd}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}]}, 0x38) (async)
setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000040)={0x2c, 0x5, '\x00', [@ra={0x5, 0x2, 0xd}, @hao={0xc9, 0x10, @mcast1}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}]}, 0x38)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4)
sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x38, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x6, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2801}, 0x0)
getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=<r6=>0x0, &(0x7f0000000280)=0x4)
sendmsg$ETHTOOL_MSG_WOL_SET(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2b165270e080c2ac}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_WOL_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8011}, 0x14044050)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4)
socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r8 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r8, &(0x7f0000000000)="10", 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000040)={0x7, 0xe, 0x9, 0x0, 0x1, 0x8, 0xa7, 0x4, 0x5, 0xf1, 0xb, 0x7, 0x0, 0x7}, 0xe)
poll(&(0x7f0000000080)=[{r8, 0x46a8}], 0x1, 0x400)
shutdown(r8, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)

358.230873ms ago: executing program 2 (id=2750):
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
chown(0x0, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x6)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="140000", 0x3}, {&(0x7f0000000280)}], 0x2}, 0x40050)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1})
socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={0x0, 0xffffdfffffffffff, 0x800, 0x0, 0x1}, 0x20)
ioperm(0x7, 0x449, 0x7ff)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000004095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000880), 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_clone3(0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bpf(0x0, 0x0, 0x0, 0x888a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000008d2808000000000000"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
getpid()

169.745263ms ago: executing program 5 (id=2751):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendto$inet(r0, &(0x7f00000003c0)="62db46276543fdaf44375ff251d08257ae12d43fc5e92e1fc662075857fccd0a3240bb1204f8ee085c234f96e4296e5f58add98ca92202ad7ea963b0e966a7eef7673c74116bebeb90d1c7dc08038a6b5bfe08a81bc3eb13b82a9f9915422193ba9839ad8fc1082fb2771d9286cc030ba3d66c844a5258f3c1c53f237de9c24b9ce3301dc7f5e6e688757975220faec9463dc2ae8e7300a492194d44933adbe995a6d8503d48cb913e521b15e5a09d19a886522b127c1ec0c7fd26da5dc3e1b5e4bd966b8f11568736e63362a2619d6019f6c7508a68baa74a411cde0b6e9cd0dba6cda3c8dc1b832f8a074013e7b0babd7d6305ba", 0xf5, 0x804, &(0x7f00000001c0)={0x2, 0x4e24, @private=0xa010102}, 0x10)
r3 = socket$rxrpc(0x21, 0x2, 0x2)
bind$rxrpc(r3, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24)
listen(r3, 0x0)
listen(r3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="400000001000390400000000000000000000a13b", @ANYRES32=r1, @ANYBLOB="019d000000200000200012800800010067726500140002800800010087a59e1c36f5a3a4677678ba0b340914ca2185ceb564594ffb5afb9057b6e446919003889c446c5cc1a3777c205174bce21a53cd54e0a055300d31be7e1a9639f78bbe7864d306cb8d91d4a265de54ce16fa8f46a442b2b1c0020b1a39302c5d5a4543ee1f794c0a7bccba78b06377dfbbeecea3b9b59a4920c073f6788f30502324445fe933ea2916c1", @ANYRES8=r2, @ANYBLOB="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", @ANYRESOCT=r0, @ANYRES16], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r4 = socket(0x2b, 0x80801, 0x1)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000002c0)={0x0, <r6=>0x0})
ioctl$sock_FIOSETOWN(r4, 0x8901, &(0x7f00000004c0)=r6)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000100)={0x30, r7, 0x1, 0xffffffff, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r4}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000)
r8 = socket(0x10, 0x3, 0x0)
r9 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x88800)
getsockname$packet(r9, &(0x7f00000000c0)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14)
sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}, {0x9, 0x7}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4080)
sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newtfilter={0x30, 0x28, 0xd27, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r10, {0xfff3, 0x9}, {0x0, 0x9}, {0xffff, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x40408c4)

0s ago: executing program 0 (id=2752):
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
unlink(&(0x7f0000000100)='./file0/file1\x00')
setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x1c)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000980)={0x0, 0x45885, 0x80, 0x0, 0x8}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x5836, 0x20000005, 0x8, 0x40, 0x1, 0x5479, 0x1037, 0x100000000a, 0x0, 0x51, 0x0, 0x100000002, 0x1, 0x9, 0x5, 0x800000006a], 0x100000, 0x1c6202})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xfffffffe}}}}}, 0x0)
r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, 0x0)
mount$afs(&(0x7f0000000380)=ANY=[@ANYBLOB="2373797ab03a7379b0302e6261eb3b6a706b757000"], &(0x7f0000000200)='./file1\x00', &(0x7f0000000240), 0x100021, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x167)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x3f46137792f68265)
ioctl$AUTOFS_IOC_ASKUMOUNT(r7, 0xc0089364, 0x0)
getdents64(r7, &(0x7f00000004c0)=""/94, 0x5e)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='proc\x00', 0x1010081, 0x0)
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f00000001c0)=ANY=[@ANYBLOB="f1ffffff", @ANYRESHEX=0x0, @ANYBLOB=','])

kernel console output (not intermixed with test programs):

07] FAULT_INJECTION: forcing a failure.
[  700.197089][T12107] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  700.250899][T12107] CPU: 0 UID: 0 PID: 12107 Comm: syz.0.1984 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  700.250933][T12107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  700.250948][T12107] Call Trace:
[  700.250956][T12107]  <TASK>
[  700.250965][T12107]  dump_stack_lvl+0x189/0x250
[  700.250996][T12107]  ? __pfx____ratelimit+0x10/0x10
[  700.251019][T12107]  ? __pfx_dump_stack_lvl+0x10/0x10
[  700.251045][T12107]  ? __pfx__printk+0x10/0x10
[  700.251073][T12107]  ? __might_fault+0xb0/0x130
[  700.251108][T12107]  should_fail_ex+0x414/0x560
[  700.251136][T12107]  _copy_from_iter+0x1db/0x16f0
[  700.251169][T12107]  ? rcu_is_watching+0x15/0xb0
[  700.251194][T12107]  ? kmem_cache_alloc_node_noprof+0x217/0x3c0
[  700.251220][T12107]  ? __pfx__copy_from_iter+0x10/0x10
[  700.251249][T12107]  ? __build_skb_around+0x257/0x3e0
[  700.251284][T12107]  ? netlink_sendmsg+0x642/0xb30
[  700.251313][T12107]  ? skb_put+0x11b/0x210
[  700.251348][T12107]  netlink_sendmsg+0x6b2/0xb30
[  700.251390][T12107]  ? __pfx_netlink_sendmsg+0x10/0x10
[  700.251450][T12107]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  700.251472][T12107]  ? __pfx_netlink_sendmsg+0x10/0x10
[  700.251504][T12107]  __sock_sendmsg+0x21c/0x270
[  700.251534][T12107]  ____sys_sendmsg+0x52d/0x830
[  700.251575][T12107]  ? __pfx_____sys_sendmsg+0x10/0x10
[  700.251619][T12107]  ? import_iovec+0x74/0xa0
[  700.251658][T12107]  ___sys_sendmsg+0x21f/0x2a0
[  700.251695][T12107]  ? __pfx____sys_sendmsg+0x10/0x10
[  700.251776][T12107]  ? __fget_files+0x2a/0x420
[  700.251800][T12107]  ? __fget_files+0x3a0/0x420
[  700.251837][T12107]  __sys_sendmmsg+0x227/0x430
[  700.251877][T12107]  ? __pfx___sys_sendmmsg+0x10/0x10
[  700.251908][T12107]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  700.251963][T12107]  ? ksys_write+0x22a/0x250
[  700.251986][T12107]  ? __pfx_ksys_write+0x10/0x10
[  700.252015][T12107]  __x64_sys_sendmmsg+0xa0/0xc0
[  700.252052][T12107]  do_syscall_64+0xfa/0x3b0
[  700.252078][T12107]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.252099][T12107]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  700.252123][T12107]  ? clear_bhb_loop+0x60/0xb0
[  700.252149][T12107]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  700.252170][T12107] RIP: 0033:0x7f639bb8ebe9
[  700.252190][T12107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  700.252209][T12107] RSP: 002b:00007f639ca03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  700.252232][T12107] RAX: ffffffffffffffda RBX: 00007f639bdb5fa0 RCX: 00007f639bb8ebe9
[  700.252249][T12107] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000004
[  700.252263][T12107] RBP: 00007f639ca03090 R08: 0000000000000000 R09: 0000000000000000
[  700.252276][T12107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  700.252288][T12107] R13: 00007f639bdb6038 R14: 00007f639bdb5fa0 R15: 00007ffc1c808f98
[  700.252320][T12107]  </TASK>
[  700.900517][ T5954] usb 6-1: Using ep0 maxpacket: 32
[  700.908977][ T5954] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  700.917531][ T5954] usb 6-1: config 0 has no interface number 0
[  700.918151][T12117] syzkaller1: entered promiscuous mode
[  700.930709][T12117] syzkaller1: entered allmulticast mode
[  700.952914][ T5954] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  701.309647][ T5954] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  701.430947][ T5954] usb 6-1: Product: syz
[  701.435472][ T5954] usb 6-1: Manufacturer: syz
[  701.440419][ T5954] usb 6-1: SerialNumber: syz
[  701.880529][ T5954] usb 6-1: config 0 descriptor??
[  701.933767][ T5954] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  701.960515][ T5954] usb 6-1: selecting invalid altsetting 1
[  701.966690][ T5954] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  702.011731][ T5954] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  702.045637][ T5954] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  702.076794][ T5954] usb 6-1: media controller created
[  702.571724][ T5954] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  703.962368][T12147] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1992'.
[  704.162084][T12146] svc: failed to register nfsdv3 RPC service (errno 111).
[  704.188743][T12146] svc: failed to register nfsaclv3 RPC service (errno 111).
[  704.590805][ T5954] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  704.827108][ T5954] zl10353_read_register: readreg error (reg=127, ret==-110)
[  704.854715][ T5954] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  704.975507][ T5954] usb 6-1: USB disconnect, device number 6
[  705.038024][T12162] wg2: entered promiscuous mode
[  705.060061][T12162] wg2: entered allmulticast mode
[  705.407553][T12168] netlink: 'syz.4.1998': attribute type 2 has an invalid length.
[  705.496293][T12168] 9pnet_fd: Insufficient options for proto=fd
[  705.547582][T12170] netlink: 'syz.0.1999': attribute type 15 has an invalid length.
[  705.600039][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2002'.
[  706.491078][T12188] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2005'.
[  706.757452][T12193] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  706.980045][T12193] evm: overlay not supported
[  710.491653][T12212] svc: failed to register nfsdv3 RPC service (errno 111).
[  710.500632][T12212] svc: failed to register nfsaclv3 RPC service (errno 111).
[  712.913266][T12248] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2019'.
[  715.038483][T12269] loop9: detected capacity change from 0 to 7
[  715.046231][T12269] buffer_io_error: 4 callbacks suppressed
[  715.046249][T12269] Buffer I/O error on dev loop9, logical block 0, async page read
[  715.060637][T12269] Buffer I/O error on dev loop9, logical block 0, async page read
[  715.069100][T12269] Buffer I/O error on dev loop9, logical block 0, async page read
[  715.078252][T12269] Buffer I/O error on dev loop9, logical block 0, async page read
[  715.100615][T12269] Buffer I/O error on dev loop9, logical block 0, async page read
[  715.110350][T12269] Buffer I/O error on dev loop9, logical block 0, async page read
[  715.119237][T12269] Buffer I/O error on dev loop9, logical block 0, async page read
[  715.127854][T12269] ldm_validate_partition_table(): Disk read failed.
[  715.153917][T12269] Buffer I/O error on dev loop9, logical block 0, async page read
[  715.162427][T12269] Buffer I/O error on dev loop9, logical block 0, async page read
[  715.170769][T12269] Buffer I/O error on dev loop9, logical block 0, async page read
[  715.178978][T12269] Dev loop9: unable to read RDB block 0
[  715.188464][T12269]  loop9: unable to read partition table
[  715.195299][T12269] loop9: partition table beyond EOD, truncated
[  715.202493][T12269] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  715.202493][T12269] 
) failed (rc=-5)
[  715.410489][ T5842] Bluetooth: hci5: command 0x0405 tx timeout
[  715.511621][T12268] svc: failed to register nfsdv3 RPC service (errno 111).
[  715.521755][T12268] svc: failed to register nfsaclv3 RPC service (errno 111).
[  716.029743][ T5916] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  716.104064][T12291] ip6_vti0: entered promiscuous mode
[  716.132009][T12293] netlink: 324 bytes leftover after parsing attributes in process `syz.2.2032'.
[  716.182898][   T44] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  716.200858][ T5916] usb 1-1: Using ep0 maxpacket: 8
[  716.212193][ T5916] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  716.227273][ T5916] usb 1-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54
[  716.243392][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.251672][ T5916] usb 1-1: Product: syz
[  716.256052][ T5916] usb 1-1: Manufacturer: syz
[  716.261448][ T5916] usb 1-1: SerialNumber: syz
[  716.269594][ T5916] usb 1-1: config 0 descriptor??
[  716.277787][ T5916] cdc_phonet 1-1:0.0: probe with driver cdc_phonet failed with error -22
[  716.312119][T12288] openvswitch: netlink: IP tunnel TTL not specified.
[  716.572975][   T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  716.589820][   T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  716.610181][   T44] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  716.630715][   T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  716.692831][   T44] usb 4-1: config 0 descriptor??
[  716.924792][T12284] lo: Caught tx_queue_len zero misconfig
[  716.932948][T12284] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  717.003667][T12304] xt_HMARK: spi-set and port-set can't be combined
[  717.815987][   T44] usbhid 4-1:0.0: can't add hid device: -71
[  717.863920][   T44] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  717.908084][   T44] usb 4-1: USB disconnect, device number 15
[  718.162647][T12311] FAULT_INJECTION: forcing a failure.
[  718.162647][T12311] name failslab, interval 1, probability 0, space 0, times 0
[  718.183147][T12311] CPU: 0 UID: 0 PID: 12311 Comm: syz.4.2037 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  718.183180][T12311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  718.183194][T12311] Call Trace:
[  718.183203][T12311]  <TASK>
[  718.183213][T12311]  dump_stack_lvl+0x189/0x250
[  718.183244][T12311]  ? __pfx____ratelimit+0x10/0x10
[  718.183276][T12311]  ? __pfx_dump_stack_lvl+0x10/0x10
[  718.183301][T12311]  ? __pfx__printk+0x10/0x10
[  718.183337][T12311]  ? __pfx___might_resched+0x10/0x10
[  718.183367][T12311]  should_fail_ex+0x414/0x560
[  718.183396][T12311]  should_failslab+0xa8/0x100
[  718.183422][T12311]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  718.183444][T12311]  ? __alloc_skb+0x112/0x2d0
[  718.183481][T12311]  __alloc_skb+0x112/0x2d0
[  718.183516][T12311]  netlink_sendmsg+0x5c6/0xb30
[  718.183559][T12311]  ? __pfx_netlink_sendmsg+0x10/0x10
[  718.183599][T12311]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  718.183621][T12311]  ? __pfx_netlink_sendmsg+0x10/0x10
[  718.183654][T12311]  __sock_sendmsg+0x21c/0x270
[  718.183684][T12311]  ____sys_sendmsg+0x52d/0x830
[  718.183725][T12311]  ? __pfx_____sys_sendmsg+0x10/0x10
[  718.183768][T12311]  ? import_iovec+0x74/0xa0
[  718.183804][T12311]  ___sys_sendmsg+0x21f/0x2a0
[  718.183841][T12311]  ? __pfx____sys_sendmsg+0x10/0x10
[  718.183917][T12311]  ? __fget_files+0x2a/0x420
[  718.183943][T12311]  ? __fget_files+0x3a0/0x420
[  718.183979][T12311]  __sys_sendmmsg+0x227/0x430
[  718.184020][T12311]  ? __pfx___sys_sendmmsg+0x10/0x10
[  718.184050][T12311]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  718.184105][T12311]  ? ksys_write+0x22a/0x250
[  718.184129][T12311]  ? __pfx_ksys_write+0x10/0x10
[  718.184146][T12311]  ? rcu_is_watching+0x15/0xb0
[  718.184178][T12311]  __x64_sys_sendmmsg+0xa0/0xc0
[  718.184215][T12311]  do_syscall_64+0xfa/0x3b0
[  718.184238][T12311]  ? lockdep_hardirqs_on+0x9c/0x150
[  718.184268][T12311]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  718.184290][T12311]  ? clear_bhb_loop+0x60/0xb0
[  718.184316][T12311]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  718.184337][T12311] RIP: 0033:0x7f756338ebe9
[  718.184357][T12311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  718.184376][T12311] RSP: 002b:00007f756427c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  718.184399][T12311] RAX: ffffffffffffffda RBX: 00007f75635b5fa0 RCX: 00007f756338ebe9
[  718.184415][T12311] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 000000000000000c
[  718.184430][T12311] RBP: 00007f756427c090 R08: 0000000000000000 R09: 0000000000000000
[  718.184443][T12311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  718.184455][T12311] R13: 00007f75635b6038 R14: 00007f75635b5fa0 R15: 00007fff64674738
[  718.184488][T12311]  </TASK>
[  720.098329][ T5916] usb 1-1: USB disconnect, device number 22
[  720.557262][T12333] 9pnet_fd: Insufficient options for proto=fd
[  720.565696][T12337] netlink: 324 bytes leftover after parsing attributes in process `syz.4.2044'.
[  721.353573][T12349] netlink: 'syz.5.2049': attribute type 1 has an invalid length.
[  721.386274][T12349] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2049'.
[  721.471117][ T5916] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  721.630621][ T5916] usb 1-1: Using ep0 maxpacket: 32
[  721.651748][ T5916] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  721.676818][ T5916] usb 1-1: config 0 has no interface number 0
[  721.699870][ T5916] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  721.712764][ T5916] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  721.738900][ T5916] usb 1-1: Product: syz
[  721.744068][ T5916] usb 1-1: Manufacturer: syz
[  721.748997][ T5916] usb 1-1: SerialNumber: syz
[  721.757177][ T5916] usb 1-1: config 0 descriptor??
[  721.767445][ T5916] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  721.792369][ T5916] usb 1-1: selecting invalid altsetting 1
[  721.799085][ T5916] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  721.815476][ T5916] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  721.830236][ T5916] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  721.845887][ T5916] usb 1-1: media controller created
[  721.906196][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  722.270694][   T44] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  723.280576][   T44] usb 4-1: Using ep0 maxpacket: 8
[  723.286002][ T5916] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  723.304631][   T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  723.316333][ T5916] zl10353_read_register: readreg error (reg=127, ret==-110)
[  723.318335][   T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  723.334893][   T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  723.682529][   T44] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  723.704926][   T44] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  723.724854][   T44] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  723.734394][   T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  723.753089][   T44] usb 4-1: config 0 descriptor??
[  723.773784][T12360] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  724.316783][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.327289][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.337938][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.347231][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.359272][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.368329][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.376343][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.387621][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.401180][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.409298][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.418246][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.426859][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.434436][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.448276][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.456348][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.465422][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.474188][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.483373][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.493783][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.504465][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.512072][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.526026][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.534908][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.543210][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.552046][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.561749][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.569780][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.579936][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.587996][ T5842] Bluetooth: hci2: Received unexpected HCI Event 0x00
[  724.865111][T10212] Bluetooth: hci2: Opcode 0x0c03 failed: -71
[  724.869628][   T44] usb 4-1: USB disconnect, device number 16
[  724.885100][ T5916] usb 1-1: USB disconnect, device number 23
[  725.536918][T12387] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2062'.
[  726.932512][T12401] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2066'.
[  727.232235][T12419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2072'.
[  728.292497][ T5916] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  729.735311][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  729.755595][ T5916] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  729.817618][ T5916] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  729.840635][ T5916] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.859272][ T5916] usb 4-1: config 0 descriptor??
[  731.113275][ T5916] cp2112 0003:10C4:EA90.000A: item fetching failed at offset 5/7
[  731.126974][ T5916] cp2112 0003:10C4:EA90.000A: parse failed
[  731.140736][ T5916] cp2112 0003:10C4:EA90.000A: probe with driver cp2112 failed with error -22
[  731.153006][ T5916] usb 4-1: USB disconnect, device number 17
[  731.489968][T12459] lo: Caught tx_queue_len zero misconfig
[  731.710999][T12459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2084'.
[  732.210099][ T5990] kworker/1:6 (5990) used greatest stack depth: 19688 bytes left
[  732.225742][T12469] tmpfs: Unknown parameter 'grpquota_block_hardlieit'
[  733.322438][T12478] fuse: Bad value for 'fd'
[  734.384035][T12486] netlink: 'syz.4.2094': attribute type 27 has an invalid length.
[  735.680972][T12497] input: syz0 as /devices/virtual/input/input33
[  735.785508][T12494] svc: failed to register nfsdv3 RPC service (errno 111).
[  735.832186][T12494] svc: failed to register nfsaclv3 RPC service (errno 111).
[  735.862526][T12506] FAULT_INJECTION: forcing a failure.
[  735.862526][T12506] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  735.933464][T12506] CPU: 1 UID: 0 PID: 12506 Comm: syz.0.2100 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  735.933493][T12506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  735.933506][T12506] Call Trace:
[  735.933513][T12506]  <TASK>
[  735.933523][T12506]  dump_stack_lvl+0x189/0x250
[  735.933551][T12506]  ? __pfx____ratelimit+0x10/0x10
[  735.933573][T12506]  ? __pfx_dump_stack_lvl+0x10/0x10
[  735.933596][T12506]  ? __pfx__printk+0x10/0x10
[  735.933621][T12506]  ? __might_fault+0xb0/0x130
[  735.933653][T12506]  should_fail_ex+0x414/0x560
[  735.933680][T12506]  _copy_from_user+0x2d/0xb0
[  735.933726][T12506]  __sys_connect+0x123/0x440
[  735.933752][T12506]  ? __fget_files+0x3a0/0x420
[  735.933775][T12506]  ? __pfx___sys_connect+0x10/0x10
[  735.933812][T12506]  ? __pfx_ksys_write+0x10/0x10
[  735.933828][T12506]  ? rcu_is_watching+0x15/0xb0
[  735.933855][T12506]  __x64_sys_connect+0x7a/0x90
[  735.933882][T12506]  do_syscall_64+0xfa/0x3b0
[  735.933903][T12506]  ? lockdep_hardirqs_on+0x9c/0x150
[  735.933923][T12506]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.933942][T12506]  ? clear_bhb_loop+0x60/0xb0
[  735.933964][T12506]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  735.933983][T12506] RIP: 0033:0x7f639bb8ebe9
[  735.933999][T12506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  735.934016][T12506] RSP: 002b:00007f639ca03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  735.934038][T12506] RAX: ffffffffffffffda RBX: 00007f639bdb5fa0 RCX: 00007f639bb8ebe9
[  735.934053][T12506] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003
[  735.934065][T12506] RBP: 00007f639ca03090 R08: 0000000000000000 R09: 0000000000000000
[  735.934078][T12506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  735.934090][T12506] R13: 00007f639bdb6038 R14: 00007f639bdb5fa0 R15: 00007ffc1c808f98
[  735.934122][T12506]  </TASK>
[  736.182400][    C1] vkms_vblank_simulate: vblank timer overrun
[  737.272432][ T5909] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  737.440761][ T5909] usb 6-1: device descriptor read/64, error -71
[  737.458590][T12523] netlink: 'syz.3.2106': attribute type 13 has an invalid length.
[  737.491885][T12523] netlink: 300 bytes leftover after parsing attributes in process `syz.3.2106'.
[  737.561127][   T31] kauditd_printk_skb: 56 callbacks suppressed
[  737.561145][   T31] audit: type=1326 audit(1755622015.531:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12521 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b3f8ebe9 code=0x50000
[  737.589873][    C1] vkms_vblank_simulate: vblank timer overrun
[  737.740820][ T5909] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  738.102293][ T5909] usb 6-1: device descriptor read/64, error -71
[  738.159639][   T31] audit: type=1326 audit(1755622015.531:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12521 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b3f8ebe9 code=0x50000
[  738.236545][   T31] audit: type=1326 audit(1755622015.531:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12521 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b3f8ebe9 code=0x50000
[  738.279639][ T5909] usb usb6-port1: attempt power cycle
[  738.315209][   T31] audit: type=1326 audit(1755622015.531:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12521 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b3f8ebe9 code=0x50000
[  738.337775][    C1] vkms_vblank_simulate: vblank timer overrun
[  738.397429][   T31] audit: type=1326 audit(1755622015.531:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12521 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b3f8ebe9 code=0x50000
[  738.419649][    C1] vkms_vblank_simulate: vblank timer overrun
[  738.462268][   T31] audit: type=1326 audit(1755622015.531:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12521 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b3f8ebe9 code=0x50000
[  738.488723][   T31] audit: type=1326 audit(1755622015.531:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12521 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b3f8ebe9 code=0x50000
[  738.590650][   T31] audit: type=1326 audit(1755622015.531:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12521 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b3f8ebe9 code=0x50000
[  738.641915][ T5909] usb 6-1: new full-speed USB device number 9 using dummy_hcd
[  738.669002][   T31] audit: type=1326 audit(1755622015.531:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12521 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b3f8ebe9 code=0x50000
[  738.702918][ T5909] usb 6-1: device descriptor read/8, error -71
[  738.717765][   T31] audit: type=1326 audit(1755622015.531:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12521 comm="syz.3.2106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b3f8ebe9 code=0x50000
[  738.950039][ T5909] usb 6-1: new full-speed USB device number 10 using dummy_hcd
[  739.023041][ T5909] usb 6-1: device descriptor read/8, error -71
[  739.126859][T12540] input: syz0 as /devices/virtual/input/input34
[  739.145129][ T5909] usb usb6-port1: unable to enumerate USB device
[  739.226273][T12542] FAULT_INJECTION: forcing a failure.
[  739.226273][T12542] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  739.290518][T12542] CPU: 1 UID: 0 PID: 12542 Comm: syz.2.2113 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  739.290549][T12542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  739.290562][T12542] Call Trace:
[  739.290570][T12542]  <TASK>
[  739.290579][T12542]  dump_stack_lvl+0x189/0x250
[  739.290609][T12542]  ? __pfx____ratelimit+0x10/0x10
[  739.290633][T12542]  ? __pfx_dump_stack_lvl+0x10/0x10
[  739.290657][T12542]  ? __pfx__printk+0x10/0x10
[  739.290686][T12542]  ? __might_fault+0xb0/0x130
[  739.290721][T12542]  should_fail_ex+0x414/0x560
[  739.290750][T12542]  _copy_from_user+0x2d/0xb0
[  739.290782][T12542]  ___sys_sendmsg+0x158/0x2a0
[  739.290819][T12542]  ? __pfx____sys_sendmsg+0x10/0x10
[  739.290905][T12542]  ? __might_fault+0xb0/0x130
[  739.290931][T12542]  __sys_sendmmsg+0x227/0x430
[  739.290972][T12542]  ? __pfx___sys_sendmmsg+0x10/0x10
[  739.291003][T12542]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  739.291060][T12542]  ? ksys_write+0x22a/0x250
[  739.291083][T12542]  ? __pfx_ksys_write+0x10/0x10
[  739.291101][T12542]  ? rcu_is_watching+0x15/0xb0
[  739.291133][T12542]  __x64_sys_sendmmsg+0xa0/0xc0
[  739.291181][T12542]  do_syscall_64+0xfa/0x3b0
[  739.291204][T12542]  ? lockdep_hardirqs_on+0x9c/0x150
[  739.291228][T12542]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  739.291256][T12542]  ? clear_bhb_loop+0x60/0xb0
[  739.291283][T12542]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  739.291304][T12542] RIP: 0033:0x7fab0a58ebe9
[  739.291323][T12542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  739.291343][T12542] RSP: 002b:00007fab0b39c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  739.291366][T12542] RAX: ffffffffffffffda RBX: 00007fab0a7b5fa0 RCX: 00007fab0a58ebe9
[  739.291382][T12542] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000004
[  739.291397][T12542] RBP: 00007fab0b39c090 R08: 0000000000000000 R09: 0000000000000000
[  739.291627][T12542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  739.291643][T12542] R13: 00007fab0a7b6038 R14: 00007fab0a7b5fa0 R15: 00007ffd82ab1c28
[  739.291701][T12542]  </TASK>
[  739.528184][    C1] vkms_vblank_simulate: vblank timer overrun
[  740.408591][T12554] FAULT_INJECTION: forcing a failure.
[  740.408591][T12554] name failslab, interval 1, probability 0, space 0, times 0
[  740.435987][T12554] CPU: 1 UID: 0 PID: 12554 Comm: syz.5.2118 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  740.436020][T12554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  740.436034][T12554] Call Trace:
[  740.436042][T12554]  <TASK>
[  740.436065][T12554]  dump_stack_lvl+0x189/0x250
[  740.436096][T12554]  ? __pfx____ratelimit+0x10/0x10
[  740.436120][T12554]  ? __pfx_dump_stack_lvl+0x10/0x10
[  740.436146][T12554]  ? __pfx__printk+0x10/0x10
[  740.436174][T12554]  ? __mutex_trylock_common+0x153/0x260
[  740.436208][T12554]  ? ref_tracker_alloc+0x318/0x460
[  740.436237][T12554]  should_fail_ex+0x414/0x560
[  740.436266][T12554]  should_failslab+0xa8/0x100
[  740.436290][T12554]  kmem_cache_alloc_noprof+0x73/0x3c0
[  740.436312][T12554]  ? skb_clone+0x212/0x3a0
[  740.436339][T12554]  skb_clone+0x212/0x3a0
[  740.436365][T12554]  __netlink_deliver_tap+0x404/0x850
[  740.436413][T12554]  ? netlink_deliver_tap+0x2e/0x1b0
[  740.436446][T12554]  netlink_deliver_tap+0x19c/0x1b0
[  740.436479][T12554]  __netlink_sendskb+0x47/0x90
[  740.436507][T12554]  netlink_dump+0xa62/0xe60
[  740.436553][T12554]  ? __pfx_netlink_dump+0x10/0x10
[  740.436599][T12554]  ? genl_start+0x499/0x6c0
[  740.436632][T12554]  __netlink_dump_start+0x5cb/0x7e0
[  740.436672][T12554]  genl_family_rcv_msg_dumpit+0x1e7/0x2c0
[  740.436701][T12554]  ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10
[  740.436734][T12554]  ? rcu_is_watching+0x15/0xb0
[  740.436757][T12554]  ? __pfx_genl_start+0x10/0x10
[  740.436777][T12554]  ? __pfx_genl_dumpit+0x10/0x10
[  740.436797][T12554]  ? __pfx_genl_done+0x10/0x10
[  740.436825][T12554]  ? bpf_lsm_capable+0x9/0x20
[  740.436854][T12554]  ? security_capable+0x7e/0x2e0
[  740.436891][T12554]  genl_rcv_msg+0x5da/0x790
[  740.436922][T12554]  ? __pfx_genl_rcv_msg+0x10/0x10
[  740.436943][T12554]  ? ref_tracker_free+0x63a/0x7d0
[  740.436966][T12554]  ? __pfx_batadv_mcast_flags_dump+0x10/0x10
[  740.437003][T12554]  ? __pfx_ref_tracker_free+0x10/0x10
[  740.437040][T12554]  netlink_rcv_skb+0x205/0x470
[  740.437080][T12554]  ? __pfx_genl_rcv_msg+0x10/0x10
[  740.437105][T12554]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  740.437157][T12554]  ? down_read+0x1ad/0x2e0
[  740.437187][T12554]  genl_rcv+0x28/0x40
[  740.437208][T12554]  netlink_unicast+0x75c/0x8e0
[  740.437256][T12554]  netlink_sendmsg+0x805/0xb30
[  740.437287][T12554]  ? __lock_acquire+0xab9/0xd20
[  740.437316][T12554]  ? __pfx_netlink_sendmsg+0x10/0x10
[  740.437359][T12554]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  740.437380][T12554]  ? __pfx_netlink_sendmsg+0x10/0x10
[  740.437413][T12554]  __sock_sendmsg+0x21c/0x270
[  740.437444][T12554]  ____sys_sendmsg+0x505/0x830
[  740.437485][T12554]  ? __pfx_____sys_sendmsg+0x10/0x10
[  740.437531][T12554]  ? import_iovec+0x74/0xa0
[  740.437567][T12554]  ___sys_sendmsg+0x21f/0x2a0
[  740.437604][T12554]  ? __pfx____sys_sendmsg+0x10/0x10
[  740.437683][T12554]  ? __fget_files+0x2a/0x420
[  740.437707][T12554]  ? __fget_files+0x3a0/0x420
[  740.437745][T12554]  __x64_sys_sendmsg+0x19b/0x260
[  740.437783][T12554]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  740.437829][T12554]  ? __pfx_ksys_write+0x10/0x10
[  740.437847][T12554]  ? rcu_is_watching+0x15/0xb0
[  740.437877][T12554]  ? do_syscall_64+0xbe/0x3b0
[  740.437907][T12554]  do_syscall_64+0xfa/0x3b0
[  740.437930][T12554]  ? lockdep_hardirqs_on+0x9c/0x150
[  740.437953][T12554]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.437974][T12554]  ? clear_bhb_loop+0x60/0xb0
[  740.438002][T12554]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  740.438024][T12554] RIP: 0033:0x7f8a46d8ebe9
[  740.438043][T12554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  740.438069][T12554] RSP: 002b:00007f8a47bd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  740.438092][T12554] RAX: ffffffffffffffda RBX: 00007f8a46fb5fa0 RCX: 00007f8a46d8ebe9
[  740.438109][T12554] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003
[  740.438123][T12554] RBP: 00007f8a47bd2090 R08: 0000000000000000 R09: 0000000000000000
[  740.438137][T12554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  740.438150][T12554] R13: 00007f8a46fb6038 R14: 00007f8a46fb5fa0 R15: 00007ffd438a6618
[  740.438187][T12554]  </TASK>
[  740.914093][    C1] vkms_vblank_simulate: vblank timer overrun
[  741.842231][T12570] input: syz0 as /devices/virtual/input/input35
[  743.798613][T12589] svc: failed to register nfsdv3 RPC service (errno 111).
[  743.828660][T12589] svc: failed to register nfsaclv3 RPC service (errno 111).
[  743.904650][T12599] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2134'.
[  744.187304][T12603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2133'.
[  744.200981][T12606] veth0_to_team: Caught tx_queue_len zero misconfig
[  745.052353][ T5954] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0
[  745.069112][ T5954] hid-generic 0000:0000:0000.000B: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  745.271597][T12613] wg2: left promiscuous mode
[  745.278240][T12613] bridge0: port 1(bridge_slave_0) entered disabled state
[  745.292532][T12613] bridge0: port 2(bridge_slave_1) entered disabled state
[  746.028157][T12613] bridge1: left promiscuous mode
[  746.079528][T12613] geneve3: left promiscuous mode
[  746.127055][T12613] bridge3: left promiscuous mode
[  746.317539][T12627] svc: failed to register nfsdv3 RPC service (errno 111).
[  746.357538][T12627] svc: failed to register nfsaclv3 RPC service (errno 111).
[  747.431912][T12639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2146'.
[  747.442727][T12641] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2145'.
[  747.527524][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2148'.
[  750.027752][T12653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2149'.
[  750.191171][T12655] syzkaller0: entered promiscuous mode
[  750.209007][T12655] syzkaller0: entered allmulticast mode
[  752.131624][T12682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2159'.
[  752.144842][T12680] input: syz0 as /devices/virtual/input/input36
[  752.678467][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  753.028584][T12693] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2162'.
[  753.329972][T12695] netlink: 'syz.0.2163': attribute type 10 has an invalid length.
[  756.793018][T12706] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2165'.
[  757.401797][T12719] FAULT_INJECTION: forcing a failure.
[  757.401797][T12719] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  757.444971][T12719] CPU: 0 UID: 0 PID: 12719 Comm: syz.0.2167 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  757.445011][T12719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  757.445025][T12719] Call Trace:
[  757.445034][T12719]  <TASK>
[  757.445044][T12719]  dump_stack_lvl+0x189/0x250
[  757.445075][T12719]  ? __pfx____ratelimit+0x10/0x10
[  757.445099][T12719]  ? __pfx_dump_stack_lvl+0x10/0x10
[  757.445124][T12719]  ? __pfx__printk+0x10/0x10
[  757.445167][T12719]  should_fail_ex+0x414/0x560
[  757.445196][T12719]  _copy_to_user+0x31/0xb0
[  757.445229][T12719]  simple_read_from_buffer+0xe1/0x170
[  757.445260][T12719]  proc_fail_nth_read+0x1df/0x250
[  757.445291][T12719]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  757.445321][T12719]  ? rw_verify_area+0x258/0x650
[  757.445355][T12719]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  757.445383][T12719]  vfs_read+0x200/0x980
[  757.445423][T12719]  ? __pfx___mutex_lock+0x10/0x10
[  757.445449][T12719]  ? __pfx_vfs_read+0x10/0x10
[  757.445484][T12719]  ? __fget_files+0x2a/0x420
[  757.445514][T12719]  ? __fget_files+0x3a0/0x420
[  757.445537][T12719]  ? __fget_files+0x2a/0x420
[  757.445572][T12719]  ksys_read+0x145/0x250
[  757.445595][T12719]  ? __pfx_ksys_read+0x10/0x10
[  757.445612][T12719]  ? rcu_is_watching+0x15/0xb0
[  757.445643][T12719]  ? do_syscall_64+0xbe/0x3b0
[  757.445671][T12719]  do_syscall_64+0xfa/0x3b0
[  757.445694][T12719]  ? lockdep_hardirqs_on+0x9c/0x150
[  757.445718][T12719]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  757.445740][T12719]  ? clear_bhb_loop+0x60/0xb0
[  757.445767][T12719]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  757.445789][T12719] RIP: 0033:0x7f639bb8d5fc
[  757.445808][T12719] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  757.445827][T12719] RSP: 002b:00007f639ca03030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  757.445850][T12719] RAX: ffffffffffffffda RBX: 00007f639bdb5fa0 RCX: 00007f639bb8d5fc
[  757.445866][T12719] RDX: 000000000000000f RSI: 00007f639ca030a0 RDI: 0000000000000004
[  757.445880][T12719] RBP: 00007f639ca03090 R08: 0000000000000000 R09: 0000000000000000
[  757.445893][T12719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  757.445906][T12719] R13: 00007f639bdb6038 R14: 00007f639bdb5fa0 R15: 00007ffc1c808f98
[  757.445941][T12719]  </TASK>
[  757.995996][T12725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2170'.
[  758.312989][T12735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2171'.
[  758.324070][T12735] nbd: socks must be embedded in a SOCK_ITEM attr
[  758.694010][T12743] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2176'.
[  758.969907][T12750] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2177'.
[  759.711748][ T5909] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[  760.010653][ T5909] usb 6-1: device descriptor read/64, error -71
[  760.697463][ T5909] usb 6-1: new full-speed USB device number 12 using dummy_hcd
[  761.166226][ T5909] usb 6-1: device descriptor read/64, error -71
[  761.601062][ T5909] usb usb6-port1: attempt power cycle
[  761.724136][T12787] lo: Caught tx_queue_len zero misconfig
[  761.740272][T12787] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  761.783303][T12789] lo: Caught tx_queue_len zero misconfig
[  761.800565][T12789] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  761.846762][T12787] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  761.858358][T12789] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  762.278334][T12800] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2191'.
[  762.623580][ T5909] usb 6-1: new full-speed USB device number 13 using dummy_hcd
[  762.660839][ T5909] usb 6-1: device descriptor read/8, error -71
[  763.014633][T12815] FAULT_INJECTION: forcing a failure.
[  763.014633][T12815] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  763.030898][T12815] CPU: 0 UID: 0 PID: 12815 Comm: syz.5.2197 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  763.030929][T12815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  763.030943][T12815] Call Trace:
[  763.030952][T12815]  <TASK>
[  763.030961][T12815]  dump_stack_lvl+0x189/0x250
[  763.030992][T12815]  ? __pfx____ratelimit+0x10/0x10
[  763.031017][T12815]  ? __pfx_dump_stack_lvl+0x10/0x10
[  763.031042][T12815]  ? __pfx__printk+0x10/0x10
[  763.031071][T12815]  ? __might_fault+0xb0/0x130
[  763.031106][T12815]  should_fail_ex+0x414/0x560
[  763.031135][T12815]  _copy_from_iter+0x1db/0x16f0
[  763.031177][T12815]  ? __pfx__copy_from_iter+0x10/0x10
[  763.031216][T12815]  ? __build_skb_around+0x257/0x3e0
[  763.031252][T12815]  ? netlink_sendmsg+0x642/0xb30
[  763.031282][T12815]  ? skb_put+0x11b/0x210
[  763.031318][T12815]  netlink_sendmsg+0x6b2/0xb30
[  763.031349][T12815]  ? __lock_acquire+0xab9/0xd20
[  763.031378][T12815]  ? __pfx_netlink_sendmsg+0x10/0x10
[  763.031419][T12815]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  763.031441][T12815]  ? __pfx_netlink_sendmsg+0x10/0x10
[  763.031479][T12815]  __sock_sendmsg+0x21c/0x270
[  763.031511][T12815]  ____sys_sendmsg+0x505/0x830
[  763.031552][T12815]  ? __pfx_____sys_sendmsg+0x10/0x10
[  763.031596][T12815]  ? import_iovec+0x74/0xa0
[  763.031632][T12815]  ___sys_sendmsg+0x21f/0x2a0
[  763.031668][T12815]  ? __pfx____sys_sendmsg+0x10/0x10
[  763.031745][T12815]  ? __fget_files+0x2a/0x420
[  763.031769][T12815]  ? __fget_files+0x3a0/0x420
[  763.031807][T12815]  __x64_sys_sendmsg+0x19b/0x260
[  763.031844][T12815]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  763.031890][T12815]  ? __pfx_ksys_write+0x10/0x10
[  763.031909][T12815]  ? rcu_is_watching+0x15/0xb0
[  763.031939][T12815]  ? do_syscall_64+0xbe/0x3b0
[  763.031968][T12815]  do_syscall_64+0xfa/0x3b0
[  763.031992][T12815]  ? lockdep_hardirqs_on+0x9c/0x150
[  763.032014][T12815]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  763.032036][T12815]  ? clear_bhb_loop+0x60/0xb0
[  763.032063][T12815]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  763.032085][T12815] RIP: 0033:0x7f8a46d8ebe9
[  763.032104][T12815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  763.032124][T12815] RSP: 002b:00007f8a47bd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  763.032147][T12815] RAX: ffffffffffffffda RBX: 00007f8a46fb5fa0 RCX: 00007f8a46d8ebe9
[  763.032180][T12815] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  763.032201][T12815] RBP: 00007f8a47bd2090 R08: 0000000000000000 R09: 0000000000000000
[  763.032215][T12815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  763.032228][T12815] R13: 00007f8a46fb6038 R14: 00007f8a46fb5fa0 R15: 00007ffd438a6618
[  763.032264][T12815]  </TASK>
[  763.638022][T12819] mmap: syz.5.2198 (12819): VmData 37597184 exceed data ulimit 13. Update limits or use boot option ignore_rlimit_data.
[  764.011802][T12827] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  764.034993][T12827] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  764.137021][T12831] netlink: 146780 bytes leftover after parsing attributes in process `syz.2.2203'.
[  764.569686][T12835] syzkaller0: entered promiscuous mode
[  764.599514][T12835] syzkaller0: entered allmulticast mode
[  766.839194][   T31] kauditd_printk_skb: 1167 callbacks suppressed
[  766.839215][   T31] audit: type=1326 audit(1755622044.811:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12849 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b3f8ebe9 code=0x7ffc0000
[  766.903675][T12850] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2208'.
[  766.944533][   T31] audit: type=1326 audit(1755622044.811:1253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12849 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b3f8ebe9 code=0x7ffc0000
[  766.968625][    C1] vkms_vblank_simulate: vblank timer overrun
[  767.148096][   T31] audit: type=1326 audit(1755622044.811:1254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12849 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7f37b3f8ebe9 code=0x7ffc0000
[  767.170764][    C1] vkms_vblank_simulate: vblank timer overrun
[  767.240650][   T31] audit: type=1326 audit(1755622044.811:1255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12849 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b3f8ebe9 code=0x7ffc0000
[  767.349673][   T31] audit: type=1326 audit(1755622044.811:1256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12849 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f37b3f8ebe9 code=0x7ffc0000
[  767.446886][   T31] audit: type=1326 audit(1755622044.811:1257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12849 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b3f8ebe9 code=0x7ffc0000
[  767.472214][    C1] vkms_vblank_simulate: vblank timer overrun
[  767.562028][T12868] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  767.620320][T12868] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  767.639107][   T31] audit: type=1326 audit(1755622044.811:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12849 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b3f8ebe9 code=0x7ffc0000
[  767.698894][   T31] audit: type=1326 audit(1755622044.811:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12849 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37b3f8ebe9 code=0x7ffc0000
[  767.759308][   T31] audit: type=1326 audit(1755622044.811:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12849 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37b3f8ebe9 code=0x7ffc0000
[  768.502278][T12873] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2215'.
[  768.675533][   T31] audit: type=1326 audit(1755622044.811:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12849 comm="syz.3.2208" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f37b3f8ebe9 code=0x7ffc0000
[  771.373457][T12890] FAULT_INJECTION: forcing a failure.
[  771.373457][T12890] name failslab, interval 1, probability 0, space 0, times 0
[  771.423601][T12890] CPU: 1 UID: 0 PID: 12890 Comm: syz.4.2221 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  771.423634][T12890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  771.423648][T12890] Call Trace:
[  771.423657][T12890]  <TASK>
[  771.423668][T12890]  dump_stack_lvl+0x189/0x250
[  771.423699][T12890]  ? __pfx____ratelimit+0x10/0x10
[  771.423731][T12890]  ? __pfx_dump_stack_lvl+0x10/0x10
[  771.423757][T12890]  ? __pfx__printk+0x10/0x10
[  771.423793][T12890]  ? __pfx___might_resched+0x10/0x10
[  771.423833][T12890]  should_fail_ex+0x414/0x560
[  771.423862][T12890]  should_failslab+0xa8/0x100
[  771.423889][T12890]  __kmalloc_noprof+0xcb/0x4f0
[  771.423911][T12890]  ? sock_kmalloc+0xd6/0x160
[  771.423938][T12890]  sock_kmalloc+0xd6/0x160
[  771.423962][T12890]  af_alg_alloc_areq+0x8d/0x260
[  771.423987][T12890]  skcipher_recvmsg+0x356/0x11c0
[  771.424019][T12890]  ? __lock_acquire+0xab9/0xd20
[  771.424053][T12890]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  771.424078][T12890]  ? __lock_acquire+0xab9/0xd20
[  771.424099][T12890]  ? bpf_lsm_socket_recvmsg+0x9/0x20
[  771.424120][T12890]  ? security_socket_recvmsg+0x7e/0x2e0
[  771.424141][T12890]  ? __pfx_skcipher_recvmsg+0x10/0x10
[  771.424167][T12890]  sock_recvmsg+0x22c/0x270
[  771.424198][T12890]  ____sys_recvmsg+0x1c9/0x460
[  771.424231][T12890]  ? __pfx_____sys_recvmsg+0x10/0x10
[  771.424271][T12890]  ? import_iovec+0x74/0xa0
[  771.424307][T12890]  ___sys_recvmsg+0x1b5/0x510
[  771.424334][T12890]  ? __pfx____sys_recvmsg+0x10/0x10
[  771.424385][T12890]  ? __fget_files+0x3a0/0x420
[  771.424423][T12890]  __x64_sys_recvmsg+0x198/0x260
[  771.424448][T12890]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[  771.424482][T12890]  ? __pfx_ksys_write+0x10/0x10
[  771.424500][T12890]  ? rcu_is_watching+0x15/0xb0
[  771.424530][T12890]  ? do_syscall_64+0xbe/0x3b0
[  771.424560][T12890]  do_syscall_64+0xfa/0x3b0
[  771.424581][T12890]  ? lockdep_hardirqs_on+0x9c/0x150
[  771.424603][T12890]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  771.424625][T12890]  ? clear_bhb_loop+0x60/0xb0
[  771.424652][T12890]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  771.424673][T12890] RIP: 0033:0x7f756338ebe9
[  771.424692][T12890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  771.424710][T12890] RSP: 002b:00007f756427c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[  771.424733][T12890] RAX: ffffffffffffffda RBX: 00007f75635b5fa0 RCX: 00007f756338ebe9
[  771.424748][T12890] RDX: 0000000000002120 RSI: 0000200000000080 RDI: 0000000000000004
[  771.424761][T12890] RBP: 00007f756427c090 R08: 0000000000000000 R09: 0000000000000000
[  771.424773][T12890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  771.424786][T12890] R13: 00007f75635b6038 R14: 00007f75635b5fa0 R15: 00007fff64674738
[  771.424818][T12890]  </TASK>
[  771.715493][    C1] vkms_vblank_simulate: vblank timer overrun
[  772.276148][T12899] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  772.726129][T12910] netlink: 'syz.4.2226': attribute type 2 has an invalid length.
[  772.848177][T12910] 9pnet_fd: Insufficient options for proto=fd
[  773.070020][T12917] IPVS: set_ctl: invalid protocol: 46 100.1.1.0:20000
[  773.896133][T12921] syz.0.2228 (12921) used greatest stack depth: 16656 bytes left
[  773.917753][T12923] svc: failed to register nfsdv3 RPC service (errno 111).
[  774.158875][T12923] svc: failed to register nfsaclv3 RPC service (errno 111).
[  775.963528][T12943] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2233'.
[  776.407639][T12953] sch_tbf: burst 4398 is lower than device lo mtu (11337746) !
[  776.525175][T12959] svc: failed to register nfsdv3 RPC service (errno 111).
[  776.538991][T12959] svc: failed to register nfsaclv3 RPC service (errno 111).
[  776.655654][T12953] tipc: Enabling of bearer <udp:syz1> rejected, already enabled
[  777.984509][T12978] overlayfs: missing 'lowerdir'
[  778.946555][ T5916] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  779.150672][ T5916] usb 6-1: Using ep0 maxpacket: 16
[  779.197949][ T5916] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  779.221495][ T5916] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  779.238720][ T5916] usb 6-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00
[  779.252290][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  779.265033][ T5916] usb 6-1: config 0 descriptor??
[  779.275641][T12987] netlink: 'syz.3.2246': attribute type 13 has an invalid length.
[  779.582465][T12997] netlink: 'syz.0.2250': attribute type 39 has an invalid length.
[  781.224982][ T5909] usb 6-1: USB disconnect, device number 15
[  781.775364][T13013] =======================================================
[  781.775364][T13013] WARNING: The mand mount option has been deprecated and
[  781.775364][T13013]          and is ignored by this kernel. Remove the mand
[  781.775364][T13013]          option from the mount to silence this warning.
[  781.775364][T13013] =======================================================
[  781.811780][    C1] vkms_vblank_simulate: vblank timer overrun
[  781.818563][T13013] tracefs: Unknown parameter 'u�������?�0x0000000000000000'
[  782.511302][ T5842] Bluetooth: hci2: command 0xfc11 tx timeout
[  782.533490][T10212] Bluetooth: hci2: Entering manufacturer mode failed (-110)
[  784.379707][T13025] svc: failed to register nfsdv3 RPC service (errno 111).
[  784.533015][T13025] svc: failed to register nfsaclv3 RPC service (errno 111).
[  787.644316][T13052] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2263'.
[  787.912602][T13058] veth0_to_bridge: entered promiscuous mode
[  788.001399][T13057] veth0_to_bridge: left promiscuous mode
[  788.661822][T13074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2270'.
[  788.935909][T13083] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2274'.
[  788.951634][ T5909] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  789.132359][ T5909] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  789.146394][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  789.159516][ T5909] usb 6-1: config 0 descriptor??
[  789.174160][ T5909] cp210x 6-1:0.0: cp210x converter detected
[  790.212134][ T5909] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  790.259724][ T5909] usb 6-1: cp210x converter now attached to ttyUSB0
[  790.647081][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803191b000: rx timeout, send abort
[  790.818765][ T5909] usb 6-1: USB disconnect, device number 16
[  790.923849][ T5909] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  791.034013][ T5909] cp210x 6-1:0.0: device disconnected
[  791.147557][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805916dc00: rx timeout, send abort
[  791.158808][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803191b000: abort rx timeout. Force session deactivation
[  791.375214][T13099] team0 (unregistering): Port device team_slave_0 removed
[  791.409538][T13099] team0 (unregistering): Port device team_slave_1 removed
[  791.580365][T13108] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2281'.
[  791.658631][    C0] vcan0: j1939_tp_rxtimer: 0xffff88805916dc00: abort rx timeout. Force session deactivation
[  792.420672][   T31] kauditd_printk_skb: 13 callbacks suppressed
[  792.420690][   T31] audit: type=1326 audit(1755622070.391:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13115 comm="syz.0.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x7ffc0000
[  792.451178][    C1] vkms_vblank_simulate: vblank timer overrun
[  792.495734][T13116] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2284'.
[  792.530575][T13116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2284'.
[  792.540564][   T31] audit: type=1326 audit(1755622070.401:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13115 comm="syz.0.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x7ffc0000
[  792.575227][T13118] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2285'.
[  792.580476][   T31] audit: type=1326 audit(1755622070.461:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13115 comm="syz.0.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f639bb8d550 code=0x7ffc0000
[  792.694521][   T31] audit: type=1326 audit(1755622070.461:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13115 comm="syz.0.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x7ffc0000
[  792.749150][   T31] audit: type=1326 audit(1755622070.461:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13115 comm="syz.0.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x7ffc0000
[  792.827954][   T31] audit: type=1326 audit(1755622070.471:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13115 comm="syz.0.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f639bb8ebe9 code=0x7ffc0000
[  792.909574][   T31] audit: type=1326 audit(1755622070.471:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13115 comm="syz.0.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x7ffc0000
[  792.975182][T13134] netlink: 'syz.3.2288': attribute type 3 has an invalid length.
[  793.035464][   T31] audit: type=1326 audit(1755622070.471:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13115 comm="syz.0.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x7ffc0000
[  793.090061][T13140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2290'.
[  793.120051][   T31] audit: type=1326 audit(1755622070.471:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13115 comm="syz.0.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f639bb8ebe9 code=0x7ffc0000
[  793.142673][   T31] audit: type=1326 audit(1755622070.471:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13115 comm="syz.0.2284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x7ffc0000
[  793.165188][    C1] vkms_vblank_simulate: vblank timer overrun
[  793.213463][T13143] FAULT_INJECTION: forcing a failure.
[  793.213463][T13143] name failslab, interval 1, probability 0, space 0, times 0
[  793.227756][T13143] CPU: 1 UID: 0 PID: 13143 Comm: syz.0.2292 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  793.227784][T13143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  793.227796][T13143] Call Trace:
[  793.227805][T13143]  <TASK>
[  793.227814][T13143]  dump_stack_lvl+0x189/0x250
[  793.227843][T13143]  ? __pfx____ratelimit+0x10/0x10
[  793.227866][T13143]  ? __pfx_dump_stack_lvl+0x10/0x10
[  793.227888][T13143]  ? __pfx__printk+0x10/0x10
[  793.227930][T13143]  should_fail_ex+0x414/0x560
[  793.227967][T13143]  should_failslab+0xa8/0x100
[  793.227990][T13143]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[  793.228011][T13143]  ? __alloc_skb+0x112/0x2d0
[  793.228044][T13143]  __alloc_skb+0x112/0x2d0
[  793.228077][T13143]  create_monitor_ctrl_event+0x38/0x480
[  793.228112][T13143]  mgmt_cmd_complete+0x20f/0x590
[  793.228147][T13143]  stop_discovery+0x18a/0x290
[  793.228175][T13143]  hci_mgmt_cmd+0x9c9/0xef0
[  793.228218][T13143]  hci_sock_sendmsg+0x6ca/0xef0
[  793.228254][T13143]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  793.228288][T13143]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  793.228309][T13143]  ? __pfx_hci_sock_sendmsg+0x10/0x10
[  793.228339][T13143]  __sock_sendmsg+0x21c/0x270
[  793.228366][T13143]  sock_write_iter+0x258/0x330
[  793.228390][T13143]  ? __pfx_sock_write_iter+0x10/0x10
[  793.228425][T13143]  ? bpf_lsm_file_permission+0x9/0x20
[  793.228449][T13143]  ? security_file_permission+0x75/0x290
[  793.228483][T13143]  vfs_write+0x54b/0xa90
[  793.228510][T13143]  ? __pfx_sock_write_iter+0x10/0x10
[  793.228535][T13143]  ? __pfx_vfs_write+0x10/0x10
[  793.228568][T13143]  ? __fget_files+0x2a/0x420
[  793.228606][T13143]  ksys_write+0x145/0x250
[  793.228630][T13143]  ? __pfx_ksys_write+0x10/0x10
[  793.228647][T13143]  ? rcu_is_watching+0x15/0xb0
[  793.228678][T13143]  ? do_syscall_64+0xbe/0x3b0
[  793.228708][T13143]  do_syscall_64+0xfa/0x3b0
[  793.228731][T13143]  ? lockdep_hardirqs_on+0x9c/0x150
[  793.228754][T13143]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  793.228776][T13143]  ? clear_bhb_loop+0x60/0xb0
[  793.228803][T13143]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  793.228822][T13143] RIP: 0033:0x7f639bb8ebe9
[  793.228841][T13143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  793.228859][T13143] RSP: 002b:00007f639ca03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  793.228880][T13143] RAX: ffffffffffffffda RBX: 00007f639bdb5fa0 RCX: 00007f639bb8ebe9
[  793.228895][T13143] RDX: 0000000000000007 RSI: 0000200000000140 RDI: 0000000000000004
[  793.228907][T13143] RBP: 00007f639ca03090 R08: 0000000000000000 R09: 0000000000000000
[  793.228919][T13143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  793.228931][T13143] R13: 00007f639bdb6038 R14: 00007f639bdb5fa0 R15: 00007ffc1c808f98
[  793.228972][T13143]  </TASK>
[  793.522588][    C1] vkms_vblank_simulate: vblank timer overrun
[  794.288234][T13171] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2300'.
[  795.150645][T10212] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  795.305424][T13175] svc: failed to register nfsdv3 RPC service (errno 111).
[  795.313923][T13175] svc: failed to register nfsaclv3 RPC service (errno 111).
[  795.527626][T13186] mkiss: ax0: crc mode is auto.
[  797.374652][T13198] FAULT_INJECTION: forcing a failure.
[  797.374652][T13198] name failslab, interval 1, probability 0, space 0, times 0
[  797.419313][T13198] CPU: 1 UID: 0 PID: 13198 Comm: syz.5.2306 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  797.419345][T13198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  797.419360][T13198] Call Trace:
[  797.419369][T13198]  <TASK>
[  797.419379][T13198]  dump_stack_lvl+0x189/0x250
[  797.419410][T13198]  ? __pfx____ratelimit+0x10/0x10
[  797.419435][T13198]  ? __pfx_dump_stack_lvl+0x10/0x10
[  797.419459][T13198]  ? __pfx__printk+0x10/0x10
[  797.419491][T13198]  ? __pfx___might_resched+0x10/0x10
[  797.419516][T13198]  ? fs_reclaim_acquire+0x7d/0x100
[  797.419548][T13198]  should_fail_ex+0x414/0x560
[  797.419583][T13198]  should_failslab+0xa8/0x100
[  797.419607][T13198]  __kmalloc_cache_noprof+0x70/0x3d0
[  797.419627][T13198]  ? rfkill_fop_open+0x198/0x820
[  797.419659][T13198]  rfkill_fop_open+0x198/0x820
[  797.419697][T13198]  ? __pfx_rfkill_fop_open+0x10/0x10
[  797.419720][T13198]  misc_open+0x2b9/0x330
[  797.419750][T13198]  chrdev_open+0x4c9/0x5e0
[  797.419785][T13198]  ? __pfx_chrdev_open+0x10/0x10
[  797.419819][T13198]  ? __pfx_chrdev_open+0x10/0x10
[  797.419843][T13198]  do_dentry_open+0xdf0/0x1970
[  797.419892][T13198]  vfs_open+0x3b/0x340
[  797.419916][T13198]  ? path_openat+0x2ecd/0x3830
[  797.419951][T13198]  path_openat+0x2ee5/0x3830
[  797.419981][T13198]  ? arch_stack_walk+0xfc/0x150
[  797.420048][T13198]  ? __pfx_path_openat+0x10/0x10
[  797.420090][T13198]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.420133][T13198]  do_filp_open+0x1fa/0x410
[  797.420162][T13198]  ? __lock_acquire+0xab9/0xd20
[  797.420185][T13198]  ? __pfx_do_filp_open+0x10/0x10
[  797.420245][T13198]  ? _raw_spin_unlock+0x28/0x50
[  797.420278][T13198]  ? alloc_fd+0x64c/0x6c0
[  797.420323][T13198]  do_sys_openat2+0x121/0x1c0
[  797.420358][T13198]  ? __pfx_do_sys_openat2+0x10/0x10
[  797.420392][T13198]  ? ksys_write+0x22a/0x250
[  797.420414][T13198]  ? __pfx_ksys_write+0x10/0x10
[  797.420438][T13198]  __x64_sys_openat+0x138/0x170
[  797.420471][T13198]  do_syscall_64+0xfa/0x3b0
[  797.420495][T13198]  ? lockdep_hardirqs_on+0x9c/0x150
[  797.420517][T13198]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.420538][T13198]  ? clear_bhb_loop+0x60/0xb0
[  797.420573][T13198]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  797.420593][T13198] RIP: 0033:0x7f8a46d8ebe9
[  797.420612][T13198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  797.420630][T13198] RSP: 002b:00007f8a47bd2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  797.420653][T13198] RAX: ffffffffffffffda RBX: 00007f8a46fb5fa0 RCX: 00007f8a46d8ebe9
[  797.420668][T13198] RDX: 0000000000105480 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  797.420682][T13198] RBP: 00007f8a47bd2090 R08: 0000000000000000 R09: 0000000000000000
[  797.420695][T13198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  797.420716][T13198] R13: 00007f8a46fb6038 R14: 00007f8a46fb5fa0 R15: 00007ffd438a6618
[  797.420751][T13198]  </TASK>
[  797.720167][    C1] vkms_vblank_simulate: vblank timer overrun
[  798.176917][T13224] svc: failed to register nfsdv3 RPC service (errno 111).
[  798.193093][T13224] svc: failed to register nfsaclv3 RPC service (errno 111).
[  799.565085][T13230] svc: failed to register nfsdv3 RPC service (errno 512).
[  799.632092][T13230] svc: failed to register nfsaclv3 RPC service (errno 512).
[  799.942081][   T31] kauditd_printk_skb: 27 callbacks suppressed
[  799.942101][   T31] audit: type=1326 audit(1755622077.921:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13246 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x7ff00000
[  799.981559][   T31] audit: type=1326 audit(1755622077.951:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13246 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x7ff00000
[  800.018706][   T31] audit: type=1326 audit(1755622077.951:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13246 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x7ff00000
[  800.050073][T13250] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  800.074061][   T31] audit: type=1326 audit(1755622077.951:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13246 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x7ff00000
[  800.097347][    C1] vkms_vblank_simulate: vblank timer overrun
[  800.352758][   T31] audit: type=1326 audit(1755622077.951:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13246 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x7ff00000
[  800.376132][   T31] audit: type=1326 audit(1755622077.951:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13246 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x7ff00000
[  800.394698][T13257] input: syz0 as /devices/virtual/input/input38
[  800.398483][    C1] vkms_vblank_simulate: vblank timer overrun
[  800.425985][   T31] audit: type=1326 audit(1755622077.951:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13246 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x7ff00000
[  800.448841][    C1] vkms_vblank_simulate: vblank timer overrun
[  801.425237][   T31] audit: type=1326 audit(1755622077.951:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13246 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x7ff00000
[  801.468147][   T31] audit: type=1326 audit(1755622077.951:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13246 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x7ff00000
[  801.503478][   T31] audit: type=1326 audit(1755622077.951:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13246 comm="syz.0.2320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x7ff00000
[  802.470655][T13274] FAULT_INJECTION: forcing a failure.
[  802.470655][T13274] name failslab, interval 1, probability 0, space 0, times 0
[  802.640941][T13274] CPU: 1 UID: 0 PID: 13274 Comm: syz.2.2326 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  802.640977][T13274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  802.640993][T13274] Call Trace:
[  802.641001][T13274]  <TASK>
[  802.641012][T13274]  dump_stack_lvl+0x189/0x250
[  802.641043][T13274]  ? __pfx____ratelimit+0x10/0x10
[  802.641067][T13274]  ? __pfx_dump_stack_lvl+0x10/0x10
[  802.641092][T13274]  ? __pfx__printk+0x10/0x10
[  802.641129][T13274]  ? ref_tracker_alloc+0x318/0x460
[  802.641158][T13274]  should_fail_ex+0x414/0x560
[  802.641187][T13274]  should_failslab+0xa8/0x100
[  802.641213][T13274]  kmem_cache_alloc_noprof+0x73/0x3c0
[  802.641234][T13274]  ? skb_clone+0x212/0x3a0
[  802.641261][T13274]  skb_clone+0x212/0x3a0
[  802.641287][T13274]  __netlink_deliver_tap+0x404/0x850
[  802.641333][T13274]  ? netlink_deliver_tap+0x2e/0x1b0
[  802.641366][T13274]  netlink_deliver_tap+0x19c/0x1b0
[  802.641398][T13274]  netlink_unicast+0x730/0x8e0
[  802.641440][T13274]  netlink_sendmsg+0x805/0xb30
[  802.641483][T13274]  ? __pfx_netlink_sendmsg+0x10/0x10
[  802.641525][T13274]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  802.641547][T13274]  ? __pfx_netlink_sendmsg+0x10/0x10
[  802.641579][T13274]  __sock_sendmsg+0x21c/0x270
[  802.641610][T13274]  ____sys_sendmsg+0x52d/0x830
[  802.641650][T13274]  ? __pfx_____sys_sendmsg+0x10/0x10
[  802.641700][T13274]  ? import_iovec+0x74/0xa0
[  802.641735][T13274]  ___sys_sendmsg+0x21f/0x2a0
[  802.641772][T13274]  ? __pfx____sys_sendmsg+0x10/0x10
[  802.641859][T13274]  ? __might_fault+0xb0/0x130
[  802.641892][T13274]  __sys_sendmmsg+0x227/0x430
[  802.641933][T13274]  ? __pfx___sys_sendmmsg+0x10/0x10
[  802.641964][T13274]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  802.642022][T13274]  ? ksys_write+0x22a/0x250
[  802.642045][T13274]  ? __pfx_ksys_write+0x10/0x10
[  802.642062][T13274]  ? rcu_is_watching+0x15/0xb0
[  802.642094][T13274]  __x64_sys_sendmmsg+0xa0/0xc0
[  802.642137][T13274]  do_syscall_64+0xfa/0x3b0
[  802.642160][T13274]  ? lockdep_hardirqs_on+0x9c/0x150
[  802.642183][T13274]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  802.642205][T13274]  ? clear_bhb_loop+0x60/0xb0
[  802.642232][T13274]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  802.642253][T13274] RIP: 0033:0x7fab0a58ebe9
[  802.642272][T13274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  802.642291][T13274] RSP: 002b:00007fab0b39c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  802.642315][T13274] RAX: ffffffffffffffda RBX: 00007fab0a7b5fa0 RCX: 00007fab0a58ebe9
[  802.642331][T13274] RDX: 0400000000000235 RSI: 0000200000000000 RDI: 0000000000000004
[  802.642346][T13274] RBP: 00007fab0b39c090 R08: 0000000000000000 R09: 0000000000000000
[  802.642360][T13274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  802.642373][T13274] R13: 00007fab0a7b6038 R14: 00007fab0a7b5fa0 R15: 00007ffd82ab1c28
[  802.642407][T13274]  </TASK>
[  802.964442][    C1] vkms_vblank_simulate: vblank timer overrun
[  803.203746][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2328'.
[  804.659490][T13290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2332'.
[  805.479312][T13300] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  806.712905][T13322] fuse: Bad value for 'fd'
[  806.812408][T13321] svc: failed to register nfsdv3 RPC service (errno 111).
[  806.825636][T13321] svc: failed to register nfsaclv3 RPC service (errno 111).
[  807.466091][T13335] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2343'.
[  808.729295][T13350] syzkaller0: entered promiscuous mode
[  808.737232][T13350] syzkaller0: entered allmulticast mode
[  808.760735][T10688] kernel write not supported for file /amidi2 (pid: 10688 comm: kworker/0:0)
[  809.007838][T13356] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2350'.
[  809.323065][T13365] FAULT_INJECTION: forcing a failure.
[  809.323065][T13365] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  809.339284][T13365] CPU: 0 UID: 0 PID: 13365 Comm: syz.0.2353 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  809.339315][T13365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  809.339329][T13365] Call Trace:
[  809.339338][T13365]  <TASK>
[  809.339348][T13365]  dump_stack_lvl+0x189/0x250
[  809.339379][T13365]  ? __pfx____ratelimit+0x10/0x10
[  809.339404][T13365]  ? __pfx_dump_stack_lvl+0x10/0x10
[  809.339430][T13365]  ? __pfx__printk+0x10/0x10
[  809.339474][T13365]  should_fail_ex+0x414/0x560
[  809.339503][T13365]  _copy_to_user+0x31/0xb0
[  809.339538][T13365]  simple_read_from_buffer+0xe1/0x170
[  809.339567][T13365]  proc_fail_nth_read+0x1df/0x250
[  809.339600][T13365]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  809.339630][T13365]  ? rw_verify_area+0x258/0x650
[  809.339672][T13365]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  809.339702][T13365]  vfs_read+0x200/0x980
[  809.339743][T13365]  ? __pfx___mutex_lock+0x10/0x10
[  809.339775][T13365]  ? __pfx_vfs_read+0x10/0x10
[  809.339819][T13365]  ? __fget_files+0x2a/0x420
[  809.339850][T13365]  ? __fget_files+0x3a0/0x420
[  809.339878][T13365]  ? __fget_files+0x2a/0x420
[  809.339914][T13365]  ksys_read+0x145/0x250
[  809.339938][T13365]  ? __pfx_ksys_read+0x10/0x10
[  809.339955][T13365]  ? rcu_is_watching+0x15/0xb0
[  809.339986][T13365]  ? do_syscall_64+0xbe/0x3b0
[  809.340016][T13365]  do_syscall_64+0xfa/0x3b0
[  809.340039][T13365]  ? lockdep_hardirqs_on+0x9c/0x150
[  809.340062][T13365]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  809.340085][T13365]  ? clear_bhb_loop+0x60/0xb0
[  809.340112][T13365]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  809.340134][T13365] RIP: 0033:0x7f639bb8d5fc
[  809.340154][T13365] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  809.340174][T13365] RSP: 002b:00007f639ca03030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  809.340197][T13365] RAX: ffffffffffffffda RBX: 00007f639bdb5fa0 RCX: 00007f639bb8d5fc
[  809.340214][T13365] RDX: 000000000000000f RSI: 00007f639ca030a0 RDI: 0000000000000005
[  809.340228][T13365] RBP: 00007f639ca03090 R08: 0000000000000000 R09: 0000000000000000
[  809.340242][T13365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  809.340255][T13365] R13: 00007f639bdb6038 R14: 00007f639bdb5fa0 R15: 00007ffc1c808f98
[  809.340290][T13365]  </TASK>
[  809.444787][ T5909] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  809.563779][    C1] vkms_vblank_simulate: vblank timer overrun
[  809.702318][T13359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  810.048312][T13378] svc: failed to register nfsdv3 RPC service (errno 111).
[  810.067794][T13378] svc: failed to register nfsaclv3 RPC service (errno 111).
[  810.550620][ T5909] usb 6-1: Using ep0 maxpacket: 16
[  810.559887][ T5909] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  810.570698][ T5909] usb 6-1: config 0 interface 0 has no altsetting 0
[  810.580957][ T5909] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[  810.590362][ T5909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.632495][ T5909] usb 6-1: Product: syz
[  810.639622][ T5909] usb 6-1: Manufacturer: syz
[  810.652037][ T5909] usb 6-1: SerialNumber: syz
[  810.800914][ T5909] usb 6-1: config 0 descriptor??
[  810.827581][ T5909] hub 6-1:0.0: bad descriptor, ignoring hub
[  810.842046][ T5909] hub 6-1:0.0: probe with driver hub failed with error -5
[  810.911195][ T5909] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  811.035212][   T12] usb 6-1: Failed to submit usb control message: -71
[  811.045919][   T12] usb 6-1: unable to send the bmi data to the device: -71
[  811.060606][   T12] usb 6-1: unable to get target info from device
[  811.065068][ T5909] usb 6-1: USB disconnect, device number 17
[  811.098491][   T12] usb 6-1: could not get target info (-71)
[  811.129509][   T12] usb 6-1: could not probe fw (-71)
[  811.415691][T13391] overlay: Unknown parameter '/'
[  811.953546][T13403] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2363'.
[  812.516865][T13411] netlink: 'syz.5.2362': attribute type 29 has an invalid length.
[  812.860481][   T24] usb 4-1: new low-speed USB device number 18 using dummy_hcd
[  813.025962][T13416] input: syz0 as /devices/virtual/input/input39
[  813.055936][T13416] FAULT_INJECTION: forcing a failure.
[  813.055936][T13416] name failslab, interval 1, probability 0, space 0, times 0
[  813.093875][T13416] CPU: 1 UID: 0 PID: 13416 Comm: syz.2.2365 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  813.093908][T13416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  813.093922][T13416] Call Trace:
[  813.093931][T13416]  <TASK>
[  813.093942][T13416]  dump_stack_lvl+0x189/0x250
[  813.093973][T13416]  ? __pfx____ratelimit+0x10/0x10
[  813.093998][T13416]  ? __pfx_dump_stack_lvl+0x10/0x10
[  813.094024][T13416]  ? __pfx__printk+0x10/0x10
[  813.094056][T13416]  ? __pfx___might_resched+0x10/0x10
[  813.094082][T13416]  ? fs_reclaim_acquire+0x7d/0x100
[  813.094115][T13416]  should_fail_ex+0x414/0x560
[  813.094145][T13416]  should_failslab+0xa8/0x100
[  813.094171][T13416]  __kmalloc_noprof+0xcb/0x4f0
[  813.094192][T13416]  ? tomoyo_encode+0x28b/0x550
[  813.094227][T13416]  tomoyo_encode+0x28b/0x550
[  813.094263][T13416]  tomoyo_realpath_from_path+0x58d/0x5d0
[  813.094305][T13416]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  813.094337][T13416]  tomoyo_path_number_perm+0x1e8/0x5a0
[  813.094366][T13416]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  813.094411][T13416]  ? __lock_acquire+0xab9/0xd20
[  813.094457][T13416]  ? __fget_files+0x2a/0x420
[  813.094486][T13416]  ? __fget_files+0x2a/0x420
[  813.094509][T13416]  ? __fget_files+0x3a0/0x420
[  813.094532][T13416]  ? __fget_files+0x2a/0x420
[  813.094563][T13416]  security_file_ioctl+0xcb/0x2d0
[  813.094591][T13416]  __se_sys_ioctl+0x47/0x170
[  813.094627][T13416]  do_syscall_64+0xfa/0x3b0
[  813.094651][T13416]  ? lockdep_hardirqs_on+0x9c/0x150
[  813.094674][T13416]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.094697][T13416]  ? clear_bhb_loop+0x60/0xb0
[  813.094725][T13416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  813.094746][T13416] RIP: 0033:0x7fab0a58ebe9
[  813.094767][T13416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  813.094786][T13416] RSP: 002b:00007fab0b39c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  813.094810][T13416] RAX: ffffffffffffffda RBX: 00007fab0a7b5fa0 RCX: 00007fab0a58ebe9
[  813.094826][T13416] RDX: 0000200000000500 RSI: 0000000040304580 RDI: 0000000000000004
[  813.094841][T13416] RBP: 00007fab0b39c090 R08: 0000000000000000 R09: 0000000000000000
[  813.094855][T13416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  813.094867][T13416] R13: 00007fab0a7b6038 R14: 00007fab0a7b5fa0 R15: 00007ffd82ab1c28
[  813.094903][T13416]  </TASK>
[  813.095595][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  813.314821][    C1] vkms_vblank_simulate: vblank timer overrun
[  813.390767][T13416] ERROR: Out of memory at tomoyo_realpath_from_path.
[  813.442869][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  813.453428][   T24] usb 4-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  813.462942][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  813.504479][   T24] usb 4-1: config 0 descriptor??
[  813.980780][   T24] glorious 0003:258A:0036.000C: unknown main item tag 0x1
[  814.043531][   T24] glorious 0003:258A:0036.000C: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.3-1/input0
[  814.121364][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  814.570565][T10688] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  814.762857][T13424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2364'.
[  814.785127][T10688] usb 3-1: device descriptor read/64, error -71
[  814.969855][T13424] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  814.978825][T13424] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  815.990671][T10688] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  816.274440][T10688] usb 3-1: device descriptor read/64, error -71
[  816.463481][T10688] usb usb3-port1: attempt power cycle
[  816.882154][T10688] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  817.009681][T10688] usb 3-1: device descriptor read/8, error -71
[  817.408716][T10688] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  818.971003][ T5954] usb 4-1: USB disconnect, device number 18
[  819.070557][ T5842] Bluetooth: hci5: command 0x0405 tx timeout
[  819.107110][T10688] usb 3-1: device descriptor read/8, error -71
[  819.220866][T10688] usb usb3-port1: unable to enumerate USB device
[  819.332344][T13466] FAULT_INJECTION: forcing a failure.
[  819.332344][T13466] name failslab, interval 1, probability 0, space 0, times 0
[  819.384652][T13466] CPU: 1 UID: 0 PID: 13466 Comm: syz.3.2380 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  819.384685][T13466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  819.384699][T13466] Call Trace:
[  819.384707][T13466]  <TASK>
[  819.384729][T13466]  dump_stack_lvl+0x189/0x250
[  819.384760][T13466]  ? __pfx____ratelimit+0x10/0x10
[  819.384784][T13466]  ? __pfx_dump_stack_lvl+0x10/0x10
[  819.384808][T13466]  ? __pfx__printk+0x10/0x10
[  819.384839][T13466]  ? __pfx___might_resched+0x10/0x10
[  819.384864][T13466]  ? fs_reclaim_acquire+0x7d/0x100
[  819.384895][T13466]  should_fail_ex+0x414/0x560
[  819.384924][T13466]  should_failslab+0xa8/0x100
[  819.384950][T13466]  __kmalloc_cache_noprof+0x70/0x3d0
[  819.384972][T13466]  ? rfkill_fop_open+0x198/0x820
[  819.385003][T13466]  rfkill_fop_open+0x198/0x820
[  819.385042][T13466]  ? __pfx_rfkill_fop_open+0x10/0x10
[  819.385066][T13466]  misc_open+0x2b9/0x330
[  819.385095][T13466]  chrdev_open+0x4c9/0x5e0
[  819.385123][T13466]  ? __pfx_chrdev_open+0x10/0x10
[  819.385157][T13466]  ? __pfx_chrdev_open+0x10/0x10
[  819.385180][T13466]  do_dentry_open+0xdf0/0x1970
[  819.385227][T13466]  vfs_open+0x3b/0x340
[  819.385251][T13466]  ? path_openat+0x2ecd/0x3830
[  819.385286][T13466]  path_openat+0x2ee5/0x3830
[  819.385315][T13466]  ? arch_stack_walk+0xfc/0x150
[  819.385381][T13466]  ? __pfx_path_openat+0x10/0x10
[  819.385409][T13466]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.385456][T13466]  do_filp_open+0x1fa/0x410
[  819.385485][T13466]  ? __lock_acquire+0xab9/0xd20
[  819.385509][T13466]  ? __pfx_do_filp_open+0x10/0x10
[  819.385573][T13466]  ? _raw_spin_unlock+0x28/0x50
[  819.385606][T13466]  ? alloc_fd+0x64c/0x6c0
[  819.385642][T13466]  do_sys_openat2+0x121/0x1c0
[  819.385679][T13466]  ? __pfx_do_sys_openat2+0x10/0x10
[  819.385709][T13466]  ? ksys_write+0x22a/0x250
[  819.385730][T13466]  ? __pfx_ksys_write+0x10/0x10
[  819.385755][T13466]  __x64_sys_openat+0x138/0x170
[  819.385790][T13466]  do_syscall_64+0xfa/0x3b0
[  819.385814][T13466]  ? lockdep_hardirqs_on+0x9c/0x150
[  819.385837][T13466]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.385868][T13466]  ? clear_bhb_loop+0x60/0xb0
[  819.385894][T13466]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  819.385915][T13466] RIP: 0033:0x7f37b3f8ebe9
[  819.385934][T13466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  819.385953][T13466] RSP: 002b:00007f37b4ec8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  819.385976][T13466] RAX: ffffffffffffffda RBX: 00007f37b41b5fa0 RCX: 00007f37b3f8ebe9
[  819.385992][T13466] RDX: 0000000000105480 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  819.386007][T13466] RBP: 00007f37b4ec8090 R08: 0000000000000000 R09: 0000000000000000
[  819.386021][T13466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  819.386035][T13466] R13: 00007f37b41b6038 R14: 00007f37b41b5fa0 R15: 00007ffe6d301d18
[  819.386071][T13466]  </TASK>
[  819.712977][    C1] vkms_vblank_simulate: vblank timer overrun
[  819.900738][T10688] usb 6-1: new low-speed USB device number 18 using dummy_hcd
[  820.105624][T10688] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  820.127491][T10688] usb 6-1: config 1 interface 0 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt
[  820.165649][T10688] usb 6-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  820.225218][T10688] usb 6-1: config 1 interface 0 has no altsetting 0
[  820.248848][T10688] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  820.291414][T10688] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  820.324161][T10688] usb 6-1: Product: ఄ
[  820.329079][T10688] usb 6-1: SerialNumber: ꎯ⥎泜ह폚䗹稘称烠襞廝ｵ᯴展⮋얘⊅㏃డ醬墕™趤滞䚅៖ꌼ씫쐧㘀孬⒡ﰨ辑먴輺巢췓곅ֱᗁ瀚ޔ쟩﬇蔿壌쨣嶒喿藣㱈㐋쉛尗襶鯫㥥陫屹掴ሄ瞧ᲈ紏瀃㫐堔┺
[  820.409990][T13467] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  820.439493][T13467] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  820.709221][T13475] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2382'.
[  821.690042][T13464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  821.777488][T13464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  821.808658][T10688] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  821.829227][T10688] usb 6-1: USB disconnect, device number 18
[  822.428391][T13494] netlink: 'syz.5.2391': attribute type 1 has an invalid length.
[  822.448779][T13494] netlink: 'syz.5.2391': attribute type 1 has an invalid length.
[  822.647150][T13505] ipvlan2: entered promiscuous mode
[  822.655472][T13505] bridge0: port 1(ipvlan2) entered blocking state
[  822.663421][T13505] bridge0: port 1(ipvlan2) entered disabled state
[  822.671041][T13505] ipvlan2: entered allmulticast mode
[  822.676662][T13505] gretap0: entered allmulticast mode
[  822.688354][T13505] ipvlan2: left allmulticast mode
[  822.698732][T13505] gretap0: left allmulticast mode
[  822.733130][T13507] netlink: 'syz.5.2393': attribute type 29 has an invalid length.
[  822.744422][T13508] netlink: 'syz.5.2393': attribute type 29 has an invalid length.
[  822.974750][T13513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2396'.
[  823.087166][T13520] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  823.108418][T13520] comedi comedi3: 8255: I/O port conflict (0x8000006,4)
[  823.117451][T13520] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  823.307766][T13520] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  823.324695][T13520] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  823.390820][T13527] syz.5.2397 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  824.015133][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2400'.
[  824.281797][T13520] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4)
[  824.289570][T13520] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  824.297365][T13520] comedi comedi3: 8255: I/O port conflict (0x3000000,4)
[  825.584574][T13543] netlink: 146780 bytes leftover after parsing attributes in process `syz.5.2403'.
[  826.698396][   T31] kauditd_printk_skb: 57 callbacks suppressed
[  826.698416][   T31] audit: type=1326 audit(1755622104.671:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13550 comm="syz.4.2405" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f756338ebe9 code=0x0
[  826.889754][T13568] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2409'.
[  826.943296][T13568] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  826.976039][T13556] svc: failed to register nfsdv3 RPC service (errno 111).
[  826.994029][T13556] svc: failed to register nfsaclv3 RPC service (errno 111).
[  827.164871][T13571] netlink: 'syz.0.2410': attribute type 10 has an invalid length.
[  827.318225][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2411'.
[  829.280739][ T5916] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  829.440618][ T5916] usb 4-1: Using ep0 maxpacket: 32
[  829.559745][ T5916] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  829.594019][ T5916] usb 4-1: config 0 has no interface number 0
[  829.617453][ T5916] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  829.670305][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  829.714544][ T5916] usb 4-1: Product: syz
[  829.721162][ T5916] usb 4-1: Manufacturer: syz
[  829.729684][ T5916] usb 4-1: SerialNumber: syz
[  829.744515][ T5916] usb 4-1: config 0 descriptor??
[  829.764086][ T5916] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  829.779328][ T5916] usb 4-1: selecting invalid altsetting 1
[  829.796513][ T5916] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  829.813331][ T5916] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  829.828337][ T5916] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  829.855790][ T5916] usb 4-1: media controller created
[  829.932947][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  831.214892][ T5916] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  831.223520][ T5916] zl10353_read_register: readreg error (reg=127, ret==-110)
[  832.411247][T13612] netlink: 'syz.5.2423': attribute type 14 has an invalid length.
[  832.471942][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2423'.
[  832.526759][T13612] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  832.537923][T13612] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  832.548812][T13612] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  832.559559][T13612] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  832.758645][ T5916] usb 4-1: USB disconnect, device number 19
[  832.798785][T13612] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2423'.
[  832.838469][T13612] netlink: 'syz.5.2423': attribute type 14 has an invalid length.
[  832.854465][T13616] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  832.870524][T13612] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2423'.
[  832.887466][T13616] syzkaller0: entered promiscuous mode
[  832.894786][T13616] syzkaller0: entered allmulticast mode
[  833.053401][T13615] tipc: Resetting bearer <eth:syzkaller0>
[  833.187454][T13621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2425'.
[  833.208307][T13615] tipc: Disabling bearer <eth:syzkaller0>
[  834.404635][T13637] svc: failed to register nfsdv3 RPC service (errno 111).
[  834.422492][T13637] svc: failed to register nfsaclv3 RPC service (errno 111).
[  835.253112][T13651] netlink: 'syz.5.2431': attribute type 10 has an invalid length.
[  835.298192][T13651] 8021q: adding VLAN 0 to HW filter on device team0
[  835.326087][T13651] bond0: (slave team0): Enslaving as an active interface with an up link
[  836.049541][T13655] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  836.083264][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2432'.
[  836.363034][T13659] svc: failed to register nfsdv3 RPC service (errno 111).
[  836.386999][T13659] svc: failed to register nfsaclv3 RPC service (errno 111).
[  836.511289][T13668] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  836.521304][T13668] syzkaller0: entered promiscuous mode
[  836.528722][T13668] syzkaller0: entered allmulticast mode
[  836.577843][T13667] tipc: Resetting bearer <eth:syzkaller0>
[  836.623725][T13667] tipc: Disabling bearer <eth:syzkaller0>
[  839.874414][ T5916] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  840.230873][ T5916] usb 4-1: device descriptor read/64, error -71
[  840.521762][ T5916] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  840.742236][ T5916] usb 4-1: device descriptor read/64, error -71
[  841.021893][ T5916] usb usb4-port1: attempt power cycle
[  841.820644][ T5916] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  841.841159][ T5916] usb 4-1: device descriptor read/8, error -71
[  842.061475][T13731] netlink: 80 bytes leftover after parsing attributes in process `syz.4.2455'.
[  842.084891][ T5916] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  842.122066][ T5916] usb 4-1: device descriptor read/8, error -71
[  842.252856][ T5916] usb usb4-port1: unable to enumerate USB device
[  843.040491][ T5916] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  843.115964][T13751] No control pipe specified
[  843.200632][ T5916] usb 4-1: Using ep0 maxpacket: 16
[  843.213491][ T5916] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  843.226646][ T5916] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  843.250223][ T5916] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  843.262422][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  843.282496][ T5916] usb 4-1: Product: syz
[  843.294238][ T5916] usb 4-1: Manufacturer: syz
[  843.305778][ T5916] usb 4-1: SerialNumber: syz
[  844.412280][ T5916] usb 4-1: 0:2 : does not exist
[  844.427886][ T5916] usb 4-1: USB disconnect, device number 24
[  845.743799][ T5916] usb 4-1: new low-speed USB device number 25 using dummy_hcd
[  845.900544][ T5916] usb 4-1: device descriptor read/64, error -71
[  846.169690][ T5916] usb 4-1: new low-speed USB device number 26 using dummy_hcd
[  846.489880][T13801] netlink: 316 bytes leftover after parsing attributes in process `syz.0.2478'.
[  847.460694][ T5916] usb 4-1: device descriptor read/64, error -71
[  847.608133][ T5916] usb usb4-port1: attempt power cycle
[  848.000602][ T5916] usb 4-1: new low-speed USB device number 27 using dummy_hcd
[  848.232528][ T5916] usb 4-1: device descriptor read/8, error -71
[  848.470827][ T5916] usb 4-1: new low-speed USB device number 28 using dummy_hcd
[  849.364454][ T5916] usb 4-1: device descriptor read/8, error -71
[  849.511120][ T5916] usb usb4-port1: unable to enumerate USB device
[  849.821814][ T5916] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  849.926568][T13822] netlink: 146780 bytes leftover after parsing attributes in process `syz.0.2486'.
[  850.006927][ T5916] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[  850.029693][T13821] netlink: 'syz.4.2487': attribute type 39 has an invalid length.
[  850.054262][ T5916] usb 4-1: can't read configurations, error -22
[  850.210550][ T5916] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  850.384758][ T5916] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[  850.401107][ T5916] usb 4-1: can't read configurations, error -22
[  850.418673][ T5916] usb usb4-port1: attempt power cycle
[  851.217667][ T5916] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  851.293580][ T5916] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[  851.310807][ T5916] usb 4-1: can't read configurations, error -22
[  851.461023][ T5916] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  851.503543][ T5916] usb 4-1: config index 0 descriptor too short (expected 9, got 0)
[  851.523074][ T5916] usb 4-1: can't read configurations, error -22
[  851.551037][ T5916] usb usb4-port1: unable to enumerate USB device
[  853.492079][T13873] netlink: 'syz.2.2504': attribute type 21 has an invalid length.
[  853.507165][T13873] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2504'.
[  854.139771][T13884] vlan0: entered allmulticast mode
[  854.146249][T13884] dummy0: entered allmulticast mode
[  854.349618][T13885] syz.3.2505: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  854.365467][T13885] CPU: 0 UID: 0 PID: 13885 Comm: syz.3.2505 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  854.365499][T13885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  854.365515][T13885] Call Trace:
[  854.365536][T13885]  <TASK>
[  854.365547][T13885]  dump_stack_lvl+0x189/0x250
[  854.365580][T13885]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  854.365618][T13885]  ? __pfx_dump_stack_lvl+0x10/0x10
[  854.365645][T13885]  ? __pfx__printk+0x10/0x10
[  854.365676][T13885]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  854.365707][T13885]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  854.365745][T13885]  warn_alloc+0x214/0x310
[  854.365772][T13885]  ? stack_depot_save_flags+0x40/0x900
[  854.365803][T13885]  ? __pfx_warn_alloc+0x10/0x10
[  854.365832][T13885]  ? kasan_save_track+0x4f/0x80
[  854.365869][T13885]  ? xskq_create+0x56/0x170
[  854.365891][T13885]  ? xsk_init_queue+0xb0/0x110
[  854.365910][T13885]  ? xsk_setsockopt+0x43f/0x710
[  854.365951][T13885]  ? do_sock_setsockopt+0x179/0x1b0
[  854.365984][T13885]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  854.366017][T13885]  ? do_syscall_64+0xfa/0x3b0
[  854.366041][T13885]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  854.366075][T13885]  __vmalloc_node_range_noprof+0x125/0x12f0
[  854.366138][T13885]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  854.366172][T13885]  ? __kasan_kmalloc+0x93/0xb0
[  854.366198][T13885]  vmalloc_user_noprof+0xad/0xf0
[  854.366224][T13885]  ? xskq_create+0xbf/0x170
[  854.366249][T13885]  xskq_create+0xbf/0x170
[  854.366276][T13885]  xsk_init_queue+0xb0/0x110
[  854.366302][T13885]  xsk_setsockopt+0x43f/0x710
[  854.366342][T13885]  ? __pfx_xsk_setsockopt+0x10/0x10
[  854.366382][T13885]  ? __pfx_xsk_setsockopt+0x10/0x10
[  854.366415][T13885]  ? __pfx_xsk_setsockopt+0x10/0x10
[  854.366451][T13885]  ? do_sock_setsockopt+0x15e/0x1b0
[  854.366487][T13885]  ? __pfx_xsk_setsockopt+0x10/0x10
[  854.366536][T13885]  do_sock_setsockopt+0x179/0x1b0
[  854.366576][T13885]  __x64_sys_setsockopt+0x13f/0x1b0
[  854.366618][T13885]  do_syscall_64+0xfa/0x3b0
[  854.366646][T13885]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  854.366668][T13885]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[  854.366690][T13885]  ? clear_bhb_loop+0x60/0xb0
[  854.366719][T13885]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  854.366742][T13885] RIP: 0033:0x7f37b3f8ebe9
[  854.366763][T13885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  854.366782][T13885] RSP: 002b:00007f37b4e86038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  854.366807][T13885] RAX: ffffffffffffffda RBX: 00007f37b41b6180 RCX: 00007f37b3f8ebe9
[  854.366825][T13885] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a
[  854.366840][T13885] RBP: 00007f37b4011e19 R08: 0000000000000052 R09: 0000000000000000
[  854.366855][T13885] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  854.366870][T13885] R13: 00007f37b41b6218 R14: 00007f37b41b6180 R15: 00007ffe6d301d18
[  854.366907][T13885]  </TASK>
[  854.366981][T13885] Mem-Info:
[  854.714017][T13885] active_anon:11751 inactive_anon:14189 isolated_anon:0
[  854.714017][T13885]  active_file:6387 inactive_file:35764 isolated_file:0
[  854.714017][T13885]  unevictable:768 dirty:116 writeback:0
[  854.714017][T13885]  slab_reclaimable:10776 slab_unreclaimable:101776
[  854.714017][T13885]  mapped:40312 shmem:15685 pagetables:1313
[  854.714017][T13885]  sec_pagetables:0 bounce:0
[  854.714017][T13885]  kernel_misc_reclaimable:0
[  854.714017][T13885]  free:1305588 free_pcp:10578 free_cma:0
[  854.761855][T13885] Node 0 active_anon:47004kB inactive_anon:56756kB active_file:25340kB inactive_file:143056kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:161248kB dirty:464kB writeback:0kB shmem:61204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB writeback_tmp:0kB kernel_stack:11244kB pagetables:5120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  854.797454][T13885] Node 1 active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  854.830631][T13885] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  854.863869][T13885] lowmem_reserve[]: 0 2500 2502 2502 2502
[  854.870866][T13885] Node 0 DMA32 free:1304352kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46920kB inactive_anon:56744kB active_file:23584kB inactive_file:142988kB unevictable:1536kB writepending:508kB present:3129332kB managed:2560996kB mlocked:0kB bounce:0kB free_pcp:27148kB local_pcp:13164kB free_cma:0kB
[  854.918452][T13885] lowmem_reserve[]: 0 0 1 1 1
[  854.923923][T13885] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1756kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB
[  854.958562][T13885] lowmem_reserve[]: 0 0 0 0 0
[  854.963896][T13885] Node 1 Normal free:3902540kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:208kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14976kB local_pcp:7872kB free_cma:0kB
[  854.998390][T13885] lowmem_reserve[]: 0 0 0 0 0
[  855.003446][T13885] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  855.016938][T13885] Node 0 DMA32: 625*4kB (UM) 308*8kB (UME) 40*16kB (UM) 188*32kB (UE) 38*64kB (UME) 52*128kB (UE) 40*256kB (UE) 37*512kB (UM) 13*1024kB (UE) 4*2048kB (UME) 301*4096kB (M) = 1304292kB
[  855.036250][T13885] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB
[  855.051949][T13885] Node 1 Normal: 213*4kB (UME) 57*8kB (UME) 41*16kB (UME) 239*32kB (UM) 63*64kB (UME) 12*128kB (UME) 5*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 947*4096kB (UM) = 3902540kB
[  855.072879][T13885] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  855.083140][T13885] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  855.092837][T13885] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  855.103668][T13885] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  855.113362][T13885] 57839 total pagecache pages
[  855.118360][T13885] 0 pages in swap cache
[  855.122602][T13885] Free swap  = 124996kB
[  855.126886][T13885] Total swap = 124996kB
[  855.131427][T13885] 2097051 pages RAM
[  855.135693][T13885] 0 pages HighMem/MovableOnly
[  855.140441][T13885] 424695 pages reserved
[  855.144788][T13885] 0 pages cma reserved
[  858.194827][T13931] FAULT_INJECTION: forcing a failure.
[  858.194827][T13931] name failslab, interval 1, probability 0, space 0, times 0
[  858.210117][T13931] CPU: 0 UID: 0 PID: 13931 Comm: syz.0.2521 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  858.210149][T13931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  858.210163][T13931] Call Trace:
[  858.210172][T13931]  <TASK>
[  858.210180][T13931]  dump_stack_lvl+0x189/0x250
[  858.210209][T13931]  ? __pfx____ratelimit+0x10/0x10
[  858.210233][T13931]  ? __pfx_dump_stack_lvl+0x10/0x10
[  858.210258][T13931]  ? __pfx__printk+0x10/0x10
[  858.210287][T13931]  ? __pfx___might_resched+0x10/0x10
[  858.210310][T13931]  ? fs_reclaim_acquire+0x7d/0x100
[  858.210338][T13931]  should_fail_ex+0x414/0x560
[  858.210367][T13931]  should_failslab+0xa8/0x100
[  858.210387][T13931]  __kmalloc_cache_noprof+0x70/0x3d0
[  858.210405][T13931]  ? rfkill_fop_open+0x198/0x820
[  858.210430][T13931]  rfkill_fop_open+0x198/0x820
[  858.210461][T13931]  ? __pfx_rfkill_fop_open+0x10/0x10
[  858.210481][T13931]  misc_open+0x2b9/0x330
[  858.210507][T13931]  chrdev_open+0x4c9/0x5e0
[  858.210533][T13931]  ? __pfx_chrdev_open+0x10/0x10
[  858.210565][T13931]  ? __pfx_chrdev_open+0x10/0x10
[  858.210597][T13931]  do_dentry_open+0xdf0/0x1970
[  858.210645][T13931]  vfs_open+0x3b/0x340
[  858.210669][T13931]  ? path_openat+0x2ecd/0x3830
[  858.210702][T13931]  path_openat+0x2ee5/0x3830
[  858.210730][T13931]  ? arch_stack_walk+0xfc/0x150
[  858.210793][T13931]  ? __pfx_path_openat+0x10/0x10
[  858.210829][T13931]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  858.210873][T13931]  do_filp_open+0x1fa/0x410
[  858.210901][T13931]  ? __lock_acquire+0xab9/0xd20
[  858.210923][T13931]  ? __pfx_do_filp_open+0x10/0x10
[  858.210977][T13931]  ? _raw_spin_unlock+0x28/0x50
[  858.211009][T13931]  ? alloc_fd+0x64c/0x6c0
[  858.211043][T13931]  do_sys_openat2+0x121/0x1c0
[  858.211074][T13931]  ? __pfx_do_sys_openat2+0x10/0x10
[  858.211104][T13931]  ? ksys_write+0x22a/0x250
[  858.211127][T13931]  ? __pfx_ksys_write+0x10/0x10
[  858.211153][T13931]  __x64_sys_openat+0x138/0x170
[  858.211189][T13931]  do_syscall_64+0xfa/0x3b0
[  858.211213][T13931]  ? lockdep_hardirqs_on+0x9c/0x150
[  858.211235][T13931]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  858.211265][T13931]  ? clear_bhb_loop+0x60/0xb0
[  858.211293][T13931]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  858.211315][T13931] RIP: 0033:0x7f639bb8ebe9
[  858.211334][T13931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  858.211354][T13931] RSP: 002b:00007f639ca03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  858.211378][T13931] RAX: ffffffffffffffda RBX: 00007f639bdb5fa0 RCX: 00007f639bb8ebe9
[  858.211394][T13931] RDX: 0000000000105480 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  858.211409][T13931] RBP: 00007f639ca03090 R08: 0000000000000000 R09: 0000000000000000
[  858.211423][T13931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  858.211436][T13931] R13: 00007f639bdb6038 R14: 00007f639bdb5fa0 R15: 00007ffc1c808f98
[  858.211471][T13931]  </TASK>
[  859.389654][T13960] trusted_key: syz.2.2532 sent an empty control message without MSG_MORE.
[  859.840041][T13965] [U] �
[  861.574895][   T31] audit: type=1326 audit(1755622139.551:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13981 comm="syz.0.2539" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x0
[  861.620510][T13986] netlink: 'syz.4.2541': attribute type 3 has an invalid length.
[  862.442001][T14001] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2544'.
[  863.382718][T14021] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2548'.
[  867.546163][T14065] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2561'.
[  867.753436][T14070] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20000
[  867.959706][T14082] netlink: 'syz.3.2565': attribute type 39 has an invalid length.
[  868.319966][T14087] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2567'.
[  870.100066][T14111] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  870.119068][T14111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2575'.
[  871.103648][T14113] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nullb0": -EINTR
[  871.105897][T14114] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  871.397441][T14117] tipc: Resetting bearer <eth:syzkaller0>
[  871.494952][T14110] tipc: Disabling bearer <eth:syzkaller0>
[  871.538948][T14124] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  872.364227][T14143] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2583'.
[  872.615123][T14147] netlink: 146840 bytes leftover after parsing attributes in process `syz.2.2584'.
[  873.821466][T14166] netlink: 344 bytes leftover after parsing attributes in process `syz.3.2590'.
[  874.521855][T14173] vxfs: WRONG superblock magic 00000000 at 1
[  874.531086][T14173] vxfs: WRONG superblock magic 00000000 at 8
[  874.537449][T14173] vxfs: can't find superblock.
[  875.035612][T14172] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR
[  875.557556][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  875.640627][ T5916] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  875.891326][ T5916] usb 6-1: Using ep0 maxpacket: 32
[  875.940563][ T5916] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  875.980283][ T5916] usb 6-1: config 0 has no interface number 0
[  876.034682][ T5916] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  876.084468][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  876.113206][ T5916] usb 6-1: Product: syz
[  876.131106][ T5916] usb 6-1: Manufacturer: syz
[  876.136569][ T5916] usb 6-1: SerialNumber: syz
[  876.177807][ T5916] usb 6-1: config 0 descriptor??
[  876.232083][ T5916] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  876.266761][ T5916] usb 6-1: selecting invalid altsetting 1
[  876.297424][ T5916] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  876.343963][ T5916] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  876.385393][ T5916] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  876.437418][ T5916] usb 6-1: media controller created
[  877.176218][ T5916] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  877.274139][T14189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2596'.
[  879.139077][T14205] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  879.159813][ T5916] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  879.186842][ T5916] zl10353_read_register: readreg error (reg=127, ret==-110)
[  879.212864][ T5916] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  879.288217][T14204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2600'.
[  879.350704][T14205] syzkaller0: entered promiscuous mode
[  879.356787][T14205] syzkaller0: entered allmulticast mode
[  879.401146][T14205] tipc: Resetting bearer <eth:syzkaller0>
[  879.407822][ T5916] usb 6-1: USB disconnect, device number 20
[  879.450913][T14203] tipc: Resetting bearer <eth:syzkaller0>
[  879.473860][T14203] tipc: Disabling bearer <eth:syzkaller0>
[  879.502872][T14209] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2602'.
[  880.374876][T14213] svc: failed to register nfsdv3 RPC service (errno 111).
[  880.387106][T14213] svc: failed to register nfsaclv3 RPC service (errno 111).
[  880.418390][   T31] audit: type=1326 audit(1755622158.391:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14224 comm="syz.0.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x7ffc0000
[  880.482586][T14230] netlink: 288 bytes leftover after parsing attributes in process `syz.5.2605'.
[  880.510931][   T31] audit: type=1326 audit(1755622158.391:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14224 comm="syz.0.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f639bb8ebe9 code=0x7ffc0000
[  880.535069][   T31] audit: type=1326 audit(1755622158.391:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14224 comm="syz.0.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x7ffc0000
[  880.558811][    C1] vkms_vblank_simulate: vblank timer overrun
[  880.581062][   T31] audit: type=1326 audit(1755622158.391:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14224 comm="syz.0.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f639bb8ebe9 code=0x7ffc0000
[  880.603866][   T31] audit: type=1326 audit(1755622158.391:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14224 comm="syz.0.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x7ffc0000
[  880.626238][    C1] vkms_vblank_simulate: vblank timer overrun
[  880.640687][   T31] audit: type=1326 audit(1755622158.391:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14224 comm="syz.0.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f639bb8ebe9 code=0x7ffc0000
[  880.663512][    C1] vkms_vblank_simulate: vblank timer overrun
[  880.671216][   T31] audit: type=1326 audit(1755622158.391:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14224 comm="syz.0.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x7ffc0000
[  880.693330][    C1] vkms_vblank_simulate: vblank timer overrun
[  880.720895][T14226] block nbd5: shutting down sockets
[  880.745149][   T31] audit: type=1326 audit(1755622158.391:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14224 comm="syz.0.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f639bb8ebe9 code=0x7ffc0000
[  880.811270][   T31] audit: type=1326 audit(1755622158.391:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14224 comm="syz.0.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f639bb8ebe9 code=0x7ffc0000
[  880.861519][   T31] audit: type=1326 audit(1755622158.391:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14224 comm="syz.0.2606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f639bb8ebe9 code=0x7ffc0000
[  880.888181][T14220] svc: failed to register nfsdv3 RPC service (errno 111).
[  880.914383][T14237] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2609'.
[  880.919134][T14220] svc: failed to register nfsaclv3 RPC service (errno 111).
[  881.411357][T14245] loop9: detected capacity change from 0 to 7
[  881.421656][T14245] buffer_io_error: 4 callbacks suppressed
[  881.421699][T14245] Buffer I/O error on dev loop9, logical block 0, async page read
[  881.436983][T14245] Buffer I/O error on dev loop9, logical block 0, async page read
[  881.446582][T14245] Buffer I/O error on dev loop9, logical block 0, async page read
[  881.455821][T14245] Buffer I/O error on dev loop9, logical block 0, async page read
[  881.465240][T14245] Buffer I/O error on dev loop9, logical block 0, async page read
[  881.474913][T14245] Buffer I/O error on dev loop9, logical block 0, async page read
[  881.485458][T14245] Buffer I/O error on dev loop9, logical block 0, async page read
[  881.494623][T14245] ldm_validate_partition_table(): Disk read failed.
[  881.503019][T14245] Buffer I/O error on dev loop9, logical block 0, async page read
[  881.512139][T14245] Buffer I/O error on dev loop9, logical block 0, async page read
[  881.521022][T14245] Buffer I/O error on dev loop9, logical block 0, async page read
[  881.530311][T14245] Dev loop9: unable to read RDB block 0
[  881.538529][T14245]  loop9: unable to read partition table
[  881.545976][T14245] loop9: partition table beyond EOD, truncated
[  881.552454][T14245] loop_reread_partitions: partition scan of loop9 (�被x������ڬ��dG�����ݡ�����
[  881.552454][T14245] 
) failed (rc=-5)
[  882.383720][T14249] fuse: Unknown parameter 'root-ode'
[  883.388456][T14267] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2615'.
[  885.237228][T14285] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2620'.
[  885.320777][T14288] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2620'.
[  885.331348][T14288] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2620'.
[  885.956131][T14291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2622'.
[  886.342486][T14297] IPVS: set_ctl: invalid protocol: 29797 111.111.108.0:0
[  886.355425][T14297] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[  886.544341][T14302] input: syz0 as /devices/virtual/input/input45
[  886.859841][T14307] netlink: 316 bytes leftover after parsing attributes in process `syz.0.2626'.
[  890.491278][ T5909] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  890.810619][ T5909] usb 4-1: device descriptor read/64, error -71
[  891.511775][T14333] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2634'.
[  891.729382][ T5909] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  891.893437][T14339] lo speed is unknown, defaulting to 1000
[  891.900893][T14339] lo speed is unknown, defaulting to 1000
[  891.918721][T14339] lo speed is unknown, defaulting to 1000
[  891.975692][T14339] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  892.127962][T14339] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  892.365977][T14339] lo speed is unknown, defaulting to 1000
[  892.396375][T14339] lo speed is unknown, defaulting to 1000
[  892.427004][T14339] lo speed is unknown, defaulting to 1000
[  892.461835][T14339] lo speed is unknown, defaulting to 1000
[  892.490775][T14339] lo speed is unknown, defaulting to 1000
[  892.764247][ T5909] usb 4-1: device descriptor read/64, error -71
[  892.912030][ T5909] usb usb4-port1: attempt power cycle
[  896.200128][T14365] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2640'.
[  896.231235][T14365] netlink: 'syz.5.2640': attribute type 7 has an invalid length.
[  896.249060][T14362] netlink: 116 bytes leftover after parsing attributes in process `syz.5.2640'.
[  896.268518][T14365] netlink: 'syz.5.2640': attribute type 8 has an invalid length.
[  896.362703][T14365] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2640'.
[  898.430635][ T5842] Bluetooth: hci2: Opcode 0x1003 failed: -110
[  898.527315][T14385] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2647'.
[  899.690480][T10688] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[  899.863680][T10688] usb 4-1: device descriptor read/64, error -71
[  900.080623][ T5916] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  900.181088][T10688] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[  900.260648][ T5916] usb 6-1: Using ep0 maxpacket: 32
[  900.340606][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  900.370493][T10688] usb 4-1: device descriptor read/64, error -71
[  900.382192][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  900.415438][ T5916] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  900.437978][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  900.484558][ T5916] usb 6-1: config 0 descriptor??
[  900.513016][T10688] usb usb4-port1: attempt power cycle
[  900.530120][ T5916] hub 6-1:0.0: USB hub found
[  900.870657][T10688] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[  900.915040][T10688] usb 4-1: device descriptor read/8, error -71
[  901.082655][ T5916] hub 6-1:0.0: config failed, can't read hub descriptor (err -22)
[  901.135638][ T5916] usbhid 6-1:0.0: can't add hid device: -71
[  901.320544][ T5916] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  901.551696][ T5916] usb 6-1: USB disconnect, device number 21
[  901.722787][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2655'.
[  901.916534][T14410] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2656'.
[  902.215892][T14421] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2654'.
[  903.568161][T14434] No control pipe specified
[  905.369314][T14453] netlink: 'syz.0.2665': attribute type 9 has an invalid length.
[  906.081184][T14453] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.2665'.
[  906.330557][T14461] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2670'.
[  906.473954][T14467] 9pnet_fd: Insufficient options for proto=fd
[  908.466729][T14480] netlink: 'syz.5.2675': attribute type 29 has an invalid length.
[  908.586497][T14486] netlink: 'syz.2.2674': attribute type 2 has an invalid length.
[  908.606516][T14486] 9pnet_fd: Insufficient options for proto=fd
[  908.622742][T14487] netlink: 'syz.5.2675': attribute type 29 has an invalid length.
[  908.655354][T14484] lo speed is unknown, defaulting to 1000
[  908.657773][T14490] syzkaller1: entered promiscuous mode
[  908.669589][T14490] syzkaller1: entered allmulticast mode
[  908.724714][T14491] No control pipe specified
[  909.196646][T14500] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2682'.
[  909.952277][T14498] netlink: 228 bytes leftover after parsing attributes in process `syz.0.2681'.
[  910.190759][T14514] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2687'.
[  910.360526][T10688] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[  910.533495][T10688] usb 4-1: Using ep0 maxpacket: 32
[  911.383696][T14522] overlayfs: failed to resolve './file1': -2
[  911.402965][T10688] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  911.420417][T10688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  911.430507][T10688] usb 4-1: Product: syz
[  911.434787][T10688] usb 4-1: Manufacturer: syz
[  911.439549][T10688] usb 4-1: SerialNumber: syz
[  911.448881][T10688] usb 4-1: config 0 descriptor??
[  911.910649][T14530] netlink: 'syz.0.2689': attribute type 2 has an invalid length.
[  912.057792][T10688] snd-usb-6fire 4-1:0.0: unable to receive device firmware state.
[  912.081217][T10688] snd-usb-6fire 4-1:0.0: probe with driver snd-usb-6fire failed with error -121
[  912.180673][T14530] 9pnet_fd: Insufficient options for proto=fd
[  912.696764][T14539] No control pipe specified
[  913.223914][T14548] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2695'.
[  913.372441][T14550] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2696'.
[  913.553982][T10688] usb 4-1: USB disconnect, device number 40
[  913.679408][T14555] xt_hashlimit: size too large, truncated to 1048576
[  913.956088][T14565] input: syz1 as /devices/virtual/input/input46
[  914.670896][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  915.509039][T14575] No control pipe specified
[  915.710558][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  916.371879][T14576] netlink: 'syz.5.2703': attribute type 2 has an invalid length.
[  916.402039][T14576] 9pnet_fd: Insufficient options for proto=fd
[  916.645671][T14586] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2707'.
[  916.784510][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  917.154759][   T59] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  917.163804][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  917.790544][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  917.798895][ T1156] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  917.807751][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  917.984848][T14622] No control pipe specified
[  918.737618][T14630] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2719'.
[  918.830584][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  918.926202][T14634] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2722'.
[  918.995036][T10212] Bluetooth: hci5: command 0x0405 tx timeout
[  919.870450][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  920.910435][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  921.950493][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  922.990450][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  923.362272][T14653] Can't find ip_set type ha
[  923.569993][   T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  923.570421][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  924.030440][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  924.292850][ T6187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  924.301486][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.070428][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  925.071174][T14664] No control pipe specified
[  925.299931][T14677] FAULT_INJECTION: forcing a failure.
[  925.299931][T14677] name failslab, interval 1, probability 0, space 0, times 0
[  925.368457][T14677] CPU: 0 UID: 0 PID: 14677 Comm: syz.3.2732 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  925.368482][T14677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  925.368493][T14677] Call Trace:
[  925.368500][T14677]  <TASK>
[  925.368507][T14677]  dump_stack_lvl+0x189/0x250
[  925.368532][T14677]  ? __pfx____ratelimit+0x10/0x10
[  925.368549][T14677]  ? __pfx_dump_stack_lvl+0x10/0x10
[  925.368566][T14677]  ? __pfx__printk+0x10/0x10
[  925.368589][T14677]  ? __pfx___might_resched+0x10/0x10
[  925.368713][T14677]  ? fs_reclaim_acquire+0x7d/0x100
[  925.368736][T14677]  should_fail_ex+0x414/0x560
[  925.368756][T14677]  should_failslab+0xa8/0x100
[  925.368775][T14677]  __kmalloc_cache_noprof+0x70/0x3d0
[  925.368790][T14677]  ? rfkill_fop_open+0x198/0x820
[  925.368812][T14677]  rfkill_fop_open+0x198/0x820
[  925.368839][T14677]  ? __pfx_rfkill_fop_open+0x10/0x10
[  925.368858][T14677]  misc_open+0x2b9/0x330
[  925.368879][T14677]  chrdev_open+0x4c9/0x5e0
[  925.368899][T14677]  ? __pfx_chrdev_open+0x10/0x10
[  925.368923][T14677]  ? __pfx_chrdev_open+0x10/0x10
[  925.368940][T14677]  do_dentry_open+0xdf0/0x1970
[  925.368974][T14677]  vfs_open+0x3b/0x340
[  925.368991][T14677]  ? path_openat+0x2ecd/0x3830
[  925.369016][T14677]  path_openat+0x2ee5/0x3830
[  925.369037][T14677]  ? arch_stack_walk+0xfc/0x150
[  925.369083][T14677]  ? __pfx_path_openat+0x10/0x10
[  925.369103][T14677]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  925.369135][T14677]  do_filp_open+0x1fa/0x410
[  925.369158][T14677]  ? __lock_acquire+0xab9/0xd20
[  925.369175][T14677]  ? __pfx_do_filp_open+0x10/0x10
[  925.369217][T14677]  ? _raw_spin_unlock+0x28/0x50
[  925.369241][T14677]  ? alloc_fd+0x64c/0x6c0
[  925.369267][T14677]  do_sys_openat2+0x121/0x1c0
[  925.369290][T14677]  ? __pfx_do_sys_openat2+0x10/0x10
[  925.369317][T14677]  ? ksys_write+0x22a/0x250
[  925.369333][T14677]  ? __pfx_ksys_write+0x10/0x10
[  925.369346][T14677]  ? rcu_is_watching+0x15/0xb0
[  925.369366][T14677]  __x64_sys_openat+0x138/0x170
[  925.369397][T14677]  do_syscall_64+0xfa/0x3b0
[  925.369413][T14677]  ? lockdep_hardirqs_on+0x9c/0x150
[  925.369429][T14677]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  925.369444][T14677]  ? clear_bhb_loop+0x60/0xb0
[  925.369463][T14677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  925.369478][T14677] RIP: 0033:0x7f37b3f8ebe9
[  925.369493][T14677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  925.369507][T14677] RSP: 002b:00007f37b4ec8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  925.369525][T14677] RAX: ffffffffffffffda RBX: 00007f37b41b5fa0 RCX: 00007f37b3f8ebe9
[  925.369536][T14677] RDX: 0000000000105480 RSI: 0000200000000040 RDI: ffffffffffffff9c
[  925.369547][T14677] RBP: 00007f37b4ec8090 R08: 0000000000000000 R09: 0000000000000000
[  925.369557][T14677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  925.369566][T14677] R13: 00007f37b41b6038 R14: 00007f37b41b5fa0 R15: 00007ffe6d301d18
[  925.369591][T14677]  </TASK>
[  926.110439][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  926.296195][T14695] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2739'.
[  927.150467][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  928.190595][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  928.199321][T14714] No control pipe specified
[  928.368540][T14716] ntfs3(nullb0): Primary boot signature is not NTFS.
[  928.378772][T14716] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00
[  929.070981][T14527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  929.079552][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  929.230448][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  929.666885][T14729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2751'.
[  929.805926][T14729] 
[  929.808329][T14729] ======================================================
[  929.815480][T14729] WARNING: possible circular locking dependency detected
[  929.822733][T14729] 6.16.0-syzkaller #0 Not tainted
[  929.828027][T14729] ------------------------------------------------------
[  929.835173][T14729] syz.5.2751/14729 is trying to acquire lock:
[  929.863355][T14729] ffff888025240988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  929.878759][T14729] 
[  929.878759][T14729] but task is already holding lock:
[  929.886773][T14729] ffff888025240a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0
[  929.897031][T14729] 
[  929.897031][T14729] which lock already depends on the new lock.
[  929.897031][T14729] 
[  929.907738][T14729] 
[  929.907738][T14729] the existing dependency chain (in reverse order) is:
[  929.917327][T14729] 
[  929.917327][T14729] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[  929.925371][T14729]        lock_acquire+0x120/0x360
[  929.930451][T14729]        __mutex_lock+0x182/0xe80
[  929.935605][T14729]        refcount_dec_and_mutex_lock+0x30/0xa0
[  929.942069][T14729]        nbd_config_put+0x2c/0x790
[  929.947289][T14729]        nbd_release+0xfe/0x140
[  929.952163][T14729]        bdev_release+0x533/0x650
[  929.957204][T14729]        blkdev_release+0x15/0x20
[  929.962384][T14729]        __fput+0x449/0xa70
[  929.967079][T14729]        fput_close_sync+0x119/0x200
[  929.972734][T14729]        __x64_sys_close+0x7f/0x110
[  929.978132][T14729]        do_syscall_64+0xfa/0x3b0
[  929.983175][T14729]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  929.991607][T14729] 
[  929.991607][T14729] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[  930.001169][T14729]        lock_acquire+0x120/0x360
[  930.006649][T14729]        __mutex_lock+0x182/0xe80
[  930.012166][T14729]        __del_gendisk+0x129/0x9e0
[  930.017397][T14729]        del_gendisk+0xe8/0x160
[  930.022889][T14729]        loop_remove+0x42/0xc0
[  930.029619][T14729]        loop_control_ioctl+0x4ac/0x5a0
[  930.036010][T14729]        __se_sys_ioctl+0xfc/0x170
[  930.041905][T14729]        do_syscall_64+0xfa/0x3b0
[  930.047154][T14729]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  930.053707][T14729] 
[  930.053707][T14729] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  930.062548][T14729]        validate_chain+0xb9b/0x2140
[  930.068132][T14729]        __lock_acquire+0xab9/0xd20
[  930.073573][T14729]        lock_acquire+0x120/0x360
[  930.079340][T14729]        down_write+0x96/0x1f0
[  930.084318][T14729]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  930.090683][T14729]        nbd_start_device+0x16c/0xac0
[  930.096166][T14729]        nbd_genl_connect+0x135b/0x18f0
[  930.101914][T14729]        genl_family_rcv_msg_doit+0x215/0x300
[  930.108447][T14729]        genl_rcv_msg+0x60e/0x790
[  930.113506][T14729]        netlink_rcv_skb+0x205/0x470
[  930.118991][T14729]        genl_rcv+0x28/0x40
[  930.123601][T14729]        netlink_unicast+0x75c/0x8e0
[  930.129291][T14729]        netlink_sendmsg+0x805/0xb30
[  930.134864][T14729]        __sock_sendmsg+0x21c/0x270
[  930.140436][T14729]        ____sys_sendmsg+0x505/0x830
[  930.146078][T14729]        ___sys_sendmsg+0x21f/0x2a0
[  930.151497][T14729]        __x64_sys_sendmsg+0x19b/0x260
[  930.157259][T14729]        do_syscall_64+0xfa/0x3b0
[  930.162354][T14729]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  930.168798][T14729] 
[  930.168798][T14729] other info that might help us debug this:
[  930.168798][T14729] 
[  930.179662][T14729] Chain exists of:
[  930.179662][T14729]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[  930.179662][T14729] 
[  930.194837][T14729]  Possible unsafe locking scenario:
[  930.194837][T14729] 
[  930.202489][T14729]        CPU0                    CPU1
[  930.208136][T14729]        ----                    ----
[  930.214056][T14729]   lock(&nbd->config_lock);
[  930.218696][T14729]                                lock(&disk->open_mutex);
[  930.225907][T14729]                                lock(&nbd->config_lock);
[  930.233628][T14729]   lock(&set->update_nr_hwq_lock);
[  930.239196][T14729] 
[  930.239196][T14729]  *** DEADLOCK ***
[  930.239196][T14729] 
[  930.247557][T14729] 3 locks held by syz.5.2751/14729:
[  930.252940][T14729]  #0: ffffffff8f5701f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  930.262208][T14729]  #1: ffffffff8f570008 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  930.271206][T14729]  #2: ffff888025240a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x93e/0x18f0
[  930.281695][T14729] 
[  930.281695][T14729] stack backtrace:
[  930.287786][T14729] CPU: 0 UID: 0 PID: 14729 Comm: syz.5.2751 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) 
[  930.287810][T14729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  930.287822][T14729] Call Trace:
[  930.287833][T14729]  <TASK>
[  930.287842][T14729]  dump_stack_lvl+0x189/0x250
[  930.287869][T14729]  ? __pfx_dump_stack_lvl+0x10/0x10
[  930.287888][T14729]  ? __pfx__printk+0x10/0x10
[  930.287913][T14729]  ? print_lock_name+0xde/0x100
[  930.287938][T14729]  print_circular_bug+0x2ee/0x310
[  930.287962][T14729]  check_noncircular+0x134/0x160
[  930.287986][T14729]  validate_chain+0xb9b/0x2140
[  930.288016][T14729]  __lock_acquire+0xab9/0xd20
[  930.288035][T14729]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  930.288059][T14729]  lock_acquire+0x120/0x360
[  930.288074][T14729]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  930.288101][T14729]  ? kernfs_add_one+0xf0/0x520
[  930.288127][T14729]  down_write+0x96/0x1f0
[  930.288148][T14729]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  930.288172][T14729]  ? __pfx_down_write+0x10/0x10
[  930.288194][T14729]  ? kernfs_add_one+0xf0/0x520
[  930.288225][T14729]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  930.288251][T14729]  ? sysfs_add_file_mode_ns+0x238/0x300
[  930.288269][T14729]  ? sysfs_add_file_mode_ns+0x259/0x300
[  930.288290][T14729]  nbd_start_device+0x16c/0xac0
[  930.288315][T14729]  ? __nla_parse+0x40/0x60
[  930.288336][T14729]  ? device_create_file+0xf4/0x1c0
[  930.288362][T14729]  nbd_genl_connect+0x135b/0x18f0
[  930.288388][T14729]  ? __pfx_nbd_genl_connect+0x10/0x10
[  930.288415][T14729]  ? __nla_parse+0x40/0x60
[  930.288436][T14729]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  930.288463][T14729]  genl_family_rcv_msg_doit+0x215/0x300
[  930.288486][T14729]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  930.288515][T14729]  genl_rcv_msg+0x60e/0x790
[  930.288536][T14729]  ? __pfx_genl_rcv_msg+0x10/0x10
[  930.288553][T14729]  ? __pfx_nbd_genl_connect+0x10/0x10
[  930.288580][T14729]  netlink_rcv_skb+0x205/0x470
[  930.288606][T14729]  ? __pfx_genl_rcv_msg+0x10/0x10
[  930.288623][T14729]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  930.288655][T14729]  ? down_read+0x1ad/0x2e0
[  930.288676][T14729]  genl_rcv+0x28/0x40
[  930.288692][T14729]  netlink_unicast+0x75c/0x8e0
[  930.288719][T14729]  netlink_sendmsg+0x805/0xb30
[  930.288748][T14729]  ? __pfx_netlink_sendmsg+0x10/0x10
[  930.288779][T14729]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  930.288800][T14729]  ? __pfx_netlink_sendmsg+0x10/0x10
[  930.288825][T14729]  __sock_sendmsg+0x21c/0x270
[  930.288848][T14729]  ____sys_sendmsg+0x505/0x830
[  930.288878][T14729]  ? __pfx_____sys_sendmsg+0x10/0x10
[  930.288908][T14729]  ? import_iovec+0x74/0xa0
[  930.288934][T14729]  ___sys_sendmsg+0x21f/0x2a0
[  930.288963][T14729]  ? __pfx____sys_sendmsg+0x10/0x10
[  930.289006][T14729]  ? __fget_files+0x2a/0x420
[  930.289026][T14729]  ? __fget_files+0x3a0/0x420
[  930.289050][T14729]  __x64_sys_sendmsg+0x19b/0x260
[  930.289078][T14729]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  930.289110][T14729]  ? rcu_is_watching+0x15/0xb0
[  930.289132][T14729]  ? do_syscall_64+0xbe/0x3b0
[  930.289153][T14729]  do_syscall_64+0xfa/0x3b0
[  930.289172][T14729]  ? lockdep_hardirqs_on+0x9c/0x150
[  930.289189][T14729]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  930.289213][T14729]  ? clear_bhb_loop+0x60/0xb0
[  930.289233][T14729]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  930.289250][T14729] RIP: 0033:0x7f8a46d8ebe9
[  930.289267][T14729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  930.289282][T14729] RSP: 002b:00007f8a47bd2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  930.289302][T14729] RAX: ffffffffffffffda RBX: 00007f8a46fb5fa0 RCX: 00007f8a46d8ebe9
[  930.289315][T14729] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000008
[  930.289327][T14729] RBP: 00007f8a46e11e19 R08: 0000000000000000 R09: 0000000000000000
[  930.289338][T14729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  930.289349][T14729] R13: 00007f8a46fb6038 R14: 00007f8a46fb5fa0 R15: 00007ffd438a6618
[  930.289369][T14729]  </TASK>
[  930.704894][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.720970][ T6187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.729731][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  930.940546][ T5842] block nbd0: Receive control failed (result -107)
[  930.972004][T14729] nbd0: detected capacity change from 0 to 63
[  931.058303][T14738] proc: Unknown parameter '����0x0000000000000000'
[  931.710498][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  932.750511][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  933.790437][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  934.110933][   T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  934.119501][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  934.830465][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  935.870462][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  936.350935][T14527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  936.359859][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  936.910533][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  936.993225][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  937.950452][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  938.990547][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  939.551155][ T6866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  939.560040][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog