last executing test programs: 3m40.579621001s ago: executing program 3 (id=845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000804) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800c0001007061796c6f6164002c0002800800024000000000080008400005000008000340000000ba080005400000000d080003400000005d0900010073797a30000000000900020073797a32"], 0x94}}, 0x4048010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$binder_debug(0xffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@multicast2, 0x0, 0x0, 0x20, 0x4, 0x0, 0x20, 0x80, 0xc}, {@in6=@mcast1, 0x0, 0x33}, @in=@multicast2, {0x3ff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x1, 0xfffffffc}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x40}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24040021}, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r3, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x1, 0x1001, &(0x7f00000006c0)=[{0x0, 0x4}]}, &(0x7f0000000240)='\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x2, 0x0}) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) 3m40.56840616s ago: executing program 3 (id=847): ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x3}) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r0, 0x8b32, &(0x7f0000000040)) (async, rerun: 32) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async, rerun: 32) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x0, 0x0) 3m40.544225894s ago: executing program 3 (id=848): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x1) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) listen(r3, 0x9) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) sendfile(r2, r4, 0x0, 0x20000023896) setsockopt$ax25_int(r1, 0x101, 0x2, &(0x7f0000000040)=0x1000, 0x4) 3m40.379370815s ago: executing program 3 (id=849): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271d, 0x0, &(0x7f0000000180)) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006b", 0x7}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[], 0x34c}}, 0x44) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) r5 = dup3(r4, r2, 0x0) ioctl$HIDIOCGUSAGES(r5, 0xd01c4813, &(0x7f0000002a80)={{0x3, 0x2, 0x5, 0x9, 0x7, 0x6}, 0x355, [0x3, 0x5, 0x6, 0xd5a, 0x81, 0x0, 0xff, 0x7, 0x80000000, 0x6, 0x455, 0xcbc, 0x1, 0x40, 0x0, 0xbe0, 0xffffffff, 0x400, 0x7, 0xda016b81, 0x0, 0x81, 0x5, 0x10000, 0xfffffff7, 0x2, 0x7, 0x9, 0x8, 0x40, 0xf, 0x2, 0xff2, 0x401, 0xa, 0x6, 0x828, 0x1, 0x4, 0x6, 0x9688, 0x6000, 0x200, 0x9, 0x40, 0x1, 0x1, 0x1, 0x4, 0x5, 0x3, 0x6, 0x9, 0x10001, 0x8, 0x51, 0x5, 0x7fff, 0x7, 0x1, 0x5, 0xfffffffd, 0xbde, 0x8, 0x6, 0x1, 0x0, 0x3, 0x20000, 0x4e9b, 0x2, 0x2, 0x4, 0x2, 0x5, 0xffff8000, 0x5, 0x1b1, 0x80, 0x81, 0x401, 0x4, 0x2, 0x100, 0x9, 0x0, 0xfe, 0x80000001, 0x7, 0x6, 0x4, 0x8, 0x1, 0x81, 0x0, 0xc0e, 0x7, 0x82c, 0x8, 0x1, 0x260, 0x6, 0x7, 0x6, 0x3, 0x3, 0x0, 0xfff, 0x3, 0x7, 0x7, 0x3, 0xfffffff8, 0x5, 0x4, 0xff, 0x4, 0xfffffffd, 0x1, 0x401, 0xb, 0x2, 0x80000000, 0x7, 0x4, 0x7, 0x7, 0x3, 0x2, 0x1, 0x8001, 0x6, 0x800, 0x7fff, 0xfffffffd, 0xfff, 0x1ff, 0x4, 0x5, 0x6, 0x7, 0x2, 0x8, 0xfffffffa, 0xc, 0x9, 0x1ff, 0xf56, 0xffffffff, 0xee1, 0xcb0, 0x81, 0xfdf, 0x1c0c, 0x5, 0x0, 0x8, 0x2, 0xfffffffa, 0x9, 0x6, 0x4, 0x813, 0x0, 0x7f, 0x7f, 0x0, 0xf, 0x2, 0x1, 0x6, 0x2, 0x38, 0x3ff, 0x3826, 0x5, 0x9, 0x6, 0x2, 0x0, 0x1, 0x1, 0x3ff, 0x9, 0x4, 0x7, 0x7f, 0x4, 0x92f, 0x7, 0x9, 0x5, 0x9, 0xa14, 0x2, 0x9, 0x4, 0x16db, 0x4, 0xc, 0x3, 0x80000000, 0xffffff38, 0x13406d50, 0x7, 0x7fff, 0x7, 0x7, 0x3, 0x2, 0x8b7, 0xd1, 0x7fffffff, 0x2, 0x400, 0x10000, 0x80000001, 0x5, 0x8001, 0x0, 0x7f, 0x10001, 0x8, 0x1, 0x80000000, 0x2, 0x5, 0xfffffff0, 0x7, 0xe0, 0x1, 0x101, 0x8, 0x1, 0x1f9, 0x5, 0x0, 0x9, 0x5, 0x200, 0x800, 0x1, 0x80000000, 0xc, 0x3, 0x7, 0x43fd, 0x4, 0xd6a3, 0xb7, 0x0, 0x1, 0x4, 0x497, 0xb71, 0x1, 0xf, 0x4, 0x4, 0x2, 0x4, 0x9, 0x8, 0x5, 0x2, 0xfffffff8, 0xc54, 0x1000, 0x400, 0x8, 0x2a72, 0x0, 0x5, 0x8, 0x6, 0x56363a8c, 0xe2, 0x2, 0xfff, 0x2, 0x10, 0x3, 0x42, 0x8, 0x8001, 0x2, 0x0, 0x7fff, 0x30a, 0xfffffffb, 0xa6, 0xfffffffe, 0x100, 0x6, 0x6, 0x6, 0x3, 0x80, 0x2, 0x6, 0x5, 0xffffffff, 0x0, 0x5, 0x81, 0x1, 0x9, 0x6, 0x3, 0x5, 0x4, 0x3, 0x2, 0x4d, 0x9, 0x200000, 0x48f, 0x6, 0x1, 0x7, 0x2, 0x6, 0xffffffff, 0xb, 0x2, 0x8, 0x7fff, 0x8, 0x8, 0x10000, 0xff, 0x3, 0x2, 0xb78a, 0x0, 0xfffffffb, 0x4, 0xee0, 0x512, 0x0, 0x8, 0x1, 0x7d, 0x3, 0x6, 0x6, 0x9, 0x8, 0x3, 0xd, 0x400, 0x101, 0x95, 0xd59d, 0x897, 0x101, 0x4, 0x1000, 0xf3, 0x528ca5e3, 0x401, 0x8, 0xdc, 0x4, 0x6, 0x9, 0x3, 0x401, 0x2, 0x800, 0x0, 0x1, 0x8, 0x80000000, 0x8, 0xb, 0x8001, 0x800, 0x7, 0x95, 0x553e, 0x0, 0x5, 0x3, 0xb, 0x40, 0x18140809, 0x2, 0x9, 0x9, 0x2, 0x9, 0x9, 0x1, 0x8, 0x6efa, 0x0, 0xdb, 0x4, 0x0, 0x2, 0x5, 0xffffffff, 0x1, 0x81, 0x3, 0x7fff, 0x4000, 0xfffffffc, 0x4, 0x200, 0x8, 0x9, 0x0, 0x8, 0x3, 0x6, 0x401, 0x8, 0x7, 0x2, 0x3, 0x7, 0x4, 0x6, 0xa, 0x7, 0x200, 0x59, 0x1, 0x7ff, 0xfffffff9, 0x7cb, 0x3, 0x101, 0x4a54, 0x30e1, 0x6, 0x2, 0x7, 0x34546093, 0xfffff2bd, 0x2, 0x400, 0x4, 0x0, 0xff, 0x5, 0x2, 0x6, 0x0, 0x4, 0x7fff, 0x81, 0x3ff, 0x4, 0x5, 0xff, 0x5, 0xa, 0x877f, 0x5, 0xfffffff4, 0x8, 0x9, 0xffffff6b, 0x9, 0x2, 0x3, 0x6, 0x3, 0x9, 0xfffffffb, 0x5, 0xe, 0x9a3, 0x2, 0x8, 0x1, 0xff, 0x2, 0x7fab, 0x8, 0x0, 0x1, 0x7, 0x9, 0x4, 0x7, 0x5, 0x46c, 0x7fffffff, 0x7, 0x7ff, 0xe, 0xff, 0x5, 0x6, 0x63, 0x80000001, 0x5, 0xb8a, 0xb, 0xc50, 0x4, 0xc, 0x9, 0x2, 0x0, 0x0, 0x6, 0x3, 0x1, 0x9, 0x6, 0xa, 0x5, 0x0, 0x4, 0x2, 0x57, 0x90e, 0x3, 0x0, 0xffff, 0x1, 0x2, 0x6, 0x7, 0x81, 0x1, 0x310e, 0x7f2cf3b7, 0x1, 0x6, 0x101, 0x81, 0x80, 0xfffc0000, 0x33c2, 0x7f, 0x6, 0x0, 0x5, 0x8000, 0x7, 0x9d5, 0x2, 0x3, 0x5, 0x3, 0x7, 0x3, 0x7, 0xfff, 0x10001, 0x401, 0x7, 0x5, 0x44, 0x2, 0x6, 0x5e, 0x7, 0x100, 0x80000001, 0x9d, 0x5, 0x9, 0xff, 0x61e, 0x200, 0x80, 0x0, 0x3, 0x7, 0xffffffc1, 0x5, 0x100, 0xfffffff1, 0x1ff, 0x0, 0x9, 0x273389be, 0x7, 0x5, 0xa, 0x4, 0x7, 0x3, 0x1000, 0x6, 0xfffffffe, 0x1, 0x10001, 0x3ff, 0x5, 0x0, 0x80, 0x7, 0xf6, 0x3, 0x0, 0x6, 0x2, 0x81, 0x40d1, 0x4, 0x9, 0x6, 0x8, 0x7fff, 0x4, 0x6, 0x1, 0xe0, 0xfffffffa, 0xf5, 0x3ff, 0x7, 0xd3, 0xffffffff, 0x3, 0x65e2, 0x5, 0x3, 0x15, 0x3, 0x72e, 0xb, 0x5, 0x8001, 0x3, 0x7, 0xffffffff, 0xc, 0x800, 0x28e, 0x5, 0x2, 0x2, 0x3, 0x8, 0x2, 0x7, 0x8, 0x6, 0x80, 0xa, 0xd, 0x7f, 0x3, 0x5, 0x9, 0x9, 0x7fe, 0x4, 0x7, 0x7f, 0xcc6c, 0x100, 0x3, 0x6, 0x7, 0x8, 0x44, 0xf2a7, 0x9, 0xdf, 0x6, 0x3, 0x2cbd, 0x60, 0xd, 0x7, 0x2, 0x26, 0x9, 0xc, 0x40, 0x0, 0x7, 0x0, 0x8001, 0x2, 0x8, 0x4, 0x2, 0x0, 0x0, 0x7, 0xffff0000, 0xb4, 0x1, 0xcc6, 0x6d, 0x2, 0x6, 0xb8, 0x6, 0x3, 0x6, 0x3, 0x6, 0x9, 0x7, 0x1, 0x5e, 0x7, 0x81, 0x6, 0x5, 0x74, 0x8001, 0x8, 0x7, 0x1, 0x6, 0x9, 0x10001, 0xffffffff, 0x6, 0x7dfe, 0x0, 0x6, 0x1, 0x9, 0x989, 0x7, 0x6, 0xfffffffe, 0xd7, 0x700000, 0x6, 0xd44, 0x9, 0x96d, 0xc9, 0xd9, 0x7, 0x8, 0x5, 0xfffffff9, 0x2, 0xa8a9, 0x1, 0x8d1, 0x0, 0x8, 0x8, 0x8, 0x5, 0xea3, 0x10100, 0x48b, 0x73ea, 0x1, 0x6, 0xd9, 0x9, 0x7, 0x6, 0x5, 0x9, 0x2, 0x6, 0x96b, 0x4, 0x7ff, 0x7f, 0x4ec, 0x8, 0x4, 0x47b0, 0x4, 0xa, 0x4, 0x6c0, 0x7, 0x5, 0x0, 0x4, 0x1, 0xffffffff, 0x745, 0x9, 0x6, 0xfffff257, 0x4, 0x6, 0x0, 0x8, 0x26dc, 0x6, 0x6, 0x6, 0xeb, 0x4, 0x7f, 0x8001, 0xd, 0x0, 0x9, 0x7, 0x5, 0xb, 0x1, 0x7, 0x6, 0x7, 0x8, 0xdf2c, 0x2, 0x40, 0x9, 0x81, 0x8, 0x40, 0x632, 0x9, 0x60, 0x5, 0x3, 0x7d4, 0x9, 0x3, 0x610, 0x7, 0x30, 0x6, 0x2, 0xfffffe01, 0x9, 0x2, 0xd5, 0x6, 0x16b, 0x1, 0x9, 0x0, 0x3, 0x7, 0xfffffffa, 0x8, 0x5, 0x0, 0x7, 0x3, 0x103, 0x0, 0x3, 0x4000, 0x7, 0x118, 0x9, 0x6, 0x6, 0x40, 0xe, 0x1, 0x2, 0x7, 0x3, 0x16b1, 0x9, 0x2, 0x7, 0x7, 0x40, 0x6e76, 0x1, 0x2, 0x7ff, 0x8, 0x4, 0x800, 0xfff, 0x1, 0x9, 0x8, 0x4, 0x5, 0x6, 0x1, 0x2, 0x0, 0x99de, 0x1ff, 0x80000000, 0x1, 0x2e, 0x7, 0x6, 0x0, 0x8, 0x5, 0x9, 0x4, 0x9b, 0x3, 0x79, 0x10000, 0x0, 0x205, 0x8000, 0x6, 0x3, 0x4, 0x7, 0x4, 0xfffffe01, 0x21e, 0xf, 0x8, 0x8, 0x14b7, 0x9, 0x6, 0x8, 0x0, 0x7, 0x0, 0x802, 0x10000, 0x6, 0x8001, 0x0, 0xd, 0x0, 0x2, 0x7fffffff, 0x80000000, 0x3, 0x1000, 0x8ca, 0xfffffffd, 0x2000000, 0x1000, 0x9, 0x52, 0x10000, 0x14, 0x3, 0x9, 0x8001, 0x5, 0x96bf, 0x81, 0x1ff, 0x4, 0x80000001, 0x100000, 0x9, 0x8, 0x2, 0xca46, 0x2e5d9054, 0x2, 0x5ed2, 0x9, 0x8001, 0xd797, 0x7, 0x0, 0x3, 0x3, 0x40, 0xb, 0x8001, 0xfffffff9, 0x3, 0x10, 0x7, 0xd, 0x0, 0xfffffffa, 0x5, 0x0, 0x6, 0x4, 0x1, 0x1f23, 0x4, 0x1, 0x4, 0x1, 0x98, 0xfffffff0, 0xcca, 0xc, 0x1, 0x8dd, 0x3ff, 0x5, 0x7, 0x40, 0x6, 0x1ff, 0x3, 0x4, 0x9, 0x81, 0xa1, 0xffffffff, 0x7, 0x3, 0x7, 0x2, 0x7, 0x9, 0x7ff, 0x3, 0xb, 0x0, 0x10000, 0x6, 0x1, 0xfffffff8, 0xfffffffc, 0x34e6, 0x0, 0x0, 0x4e, 0xad13]}) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x482, 0x0) r7 = syz_clone(0xa0000280, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$PTRACE_SETSIGMASK(0x420b, r7, 0x8, &(0x7f0000000080)={[0x5]}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f00000001c0)={{0x6, 0x7}, {0x0, 0x9}, 0xffff, 0x2, 0x20}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r6, 0x45809000) r8 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$lock(r8, 0x5, &(0x7f0000000000)={0x0, 0x3, 0x0, 0x100000000}) open_tree(0xffffffffffffffff, 0x0, 0x9001) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 3m40.112194021s ago: executing program 3 (id=854): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f000000c800)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002d40)=""/190, 0xbe}, {&(0x7f0000000940)=""/132, 0x84}, {&(0x7f0000000a00)=""/4116, 0x1014}, {&(0x7f0000000340)=""/240, 0xf0}], 0x4}, 0xc}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0x68}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x1}], 0x4, 0x40000000, 0x0) 3m39.41374001s ago: executing program 3 (id=858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080012400003000008001140000000000500010006000000050005000200000005000400000000000900020073797a310000000015000300686173683a6970"], 0x64}}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000f00)={0x2, 0x0, 0x2, 0xa}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r3 = timerfd_create(0x7, 0x80800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @private2, 0x4}, 0x1c) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000680)=0x200) 3m39.413452781s ago: executing program 32 (id=858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="640000000206010800000000000000000000000014000780080012400003000008001140000000000500010006000000050005000200000005000400000000000900020073797a310000000015000300686173683a6970"], 0x64}}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000f00)={0x2, 0x0, 0x2, 0xa}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r1, 0x45809000) r3 = timerfd_create(0x7, 0x80800) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @private2, 0x4}, 0x1c) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, &(0x7f0000000680)=0x200) 8.749592061s ago: executing program 1 (id=2309): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @private}, &(0x7f0000000380)=0x10) r1 = accept$inet(r0, 0x0, &(0x7f0000000480)=0xfffffe99) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r1, 0x8002f515, &(0x7f00000000c0)) r2 = creat(&(0x7f0000001380)='./file0\x00', 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f00000000c0)=0x6, 0x4) (async, rerun: 64) sendmsg$netlink(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1700000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) (async, rerun: 64) socket$inet6(0xa, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5, 0x8031, 0xffffffffffffffff, 0x4000) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r4, &(0x7f0000000040)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default, @default]}, 0x40) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) socket$packet(0x11, 0x3, 0x300) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f00000000c0)=0x1, 0x4) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x32600) (async) ioprio_set$uid(0x3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="84000000", @ANYRES16=r8, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x84}}, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (rerun: 64) accept4$nfc_llcp(r2, &(0x7f0000000240), &(0x7f0000000100)=0x60, 0x0) (async, rerun: 32) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x3131000, &(0x7f00000004c0)=ANY=[@ANYBLOB="66643d4943b832310d5bc0f2509278925c018dc66dfccb72938502879f5b4b8bdc36f040caca8d40371b0faf044e2cf9511cc204a7bb68e6c524cb00dd8aa77092c4306c2b3867e0a3ebe3f83164b1033db6792a27548c9b87f4d7394cf68a85c5441dae6db4b3971122937eba101779632717d6f0695ba49be6288fbe34de55af38f32b5cddb689645f345f2f6d1d6ca38795f3f9f365f2f3caa45c86df10f44a3b3399ffee2a381b1c640deed1f96ff0a1e6ce61", @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',max_read=0x0000000000000005,allow_other,default_permissions,\x00']) (async) ioctl$FUSE_DEV_IOC_CLONE(r9, 0x8004e500, &(0x7f0000000000)=r9) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r10, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) write$cgroup_devices(r10, &(0x7f0000000000)={'a', ' *:* ', 'm\x00'}, 0x8) 8.627916711s ago: executing program 1 (id=2310): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) (fail_nth: 89) creat(&(0x7f0000000080)='./bus\x00', 0x19a) openat$dir(0xffffffffffffff9c, 0x0, 0x800, 0x129) 8.191546042s ago: executing program 1 (id=2312): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x4200) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f00000000c0)={0x0, 0xff}) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x14) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x200010, 0x0) 8.05837137s ago: executing program 1 (id=2315): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) r0 = socket(0x2, 0x80f, 0x3c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x3a, 0xd2, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x80) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="28000000000701010000000000000000010000080900010073797a300000080008000540000088b43d0007"], 0x28}, 0x1, 0x0, 0x0, 0x24044084}, 0x44050) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x3}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="38000000d269637e36e6eb152bee26516dc7df1e64ef2a424ee0f315ebf73368169782b4e8479a1e4b675ce0430b917e034ad4a25825805107536fb614233b48153353f43a064da9a29b3bb2178e22a01a79d73f5895a053e79b2a9e6a5341ce589ca57a3266d5c7bf0bb4d8d1a16efe5430a983b6e8c0f45631fbb2542137ef449bacef350bb0f29a6d091b8d03aae0", @ANYRES16=r7, @ANYRESHEX=r1, @ANYRES32=r8, @ANYRES64=r7], 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0x400c) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r10 = dup(r9) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0, 0xfffffffffffffef7}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x6, 0x0) ioctl$KVM_SET_MSRS(r10, 0xc008ae88, &(0x7f0000000580)=ANY=[@ANYRES16=r6]) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0xff) r12 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000280)='syz', &(0x7f00000002c0)='/dev/dri/card#\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 7.862997149s ago: executing program 1 (id=2319): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020700000a00000000000000000000000500051f000000000a00000000002d00fc02000000000000000000000000000000eaff0000000000030005000000000002004e24"], 0x50}}, 0x20000) 6.991363417s ago: executing program 1 (id=2328): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = gettid() setpriority(0x2, r1, 0x3) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0200"]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000040)={0x3, r7, 0x10000000, 0x80000001, 0xb, 0x1fd, 0x1}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000300)={{0x16, @local, 0x4e23, 0x2, 'dh\x00', 0x20, 0x7, 0xc}, {@remote, 0x4e24, 0x4, 0x9, 0x1, 0x38}}, 0x44) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r10, 0x4048aecb, &(0x7f0000000080)) r11 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r12 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r12, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r11, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @private=0xa010102}}}, &(0x7f0000000000)=0x84) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 3.42368232s ago: executing program 2 (id=2355): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa8300, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x0) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "2474794233890da1", "d830005894bf527ae179a740634a1236f3678de8ea2d0d661607e24300", "5615d9f5", "7c5cec21691a43fe"}, 0x38) r5 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x40d00, 0x0) ioctl$KDSETMODE(r5, 0x4b3a, 0x1) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 2.520012972s ago: executing program 2 (id=2359): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) (fail_nth: 94) creat(&(0x7f0000000080)='./bus\x00', 0x19a) openat$dir(0xffffffffffffff9c, 0x0, 0x800, 0x129) 2.519596761s ago: executing program 4 (id=2360): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8905, &(0x7f0000000340)={'pim6reg0\x00', @remote}) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f00000000c0)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r2 = socket$inet(0x2, 0x802, 0x1) write(r2, &(0x7f0000000440)="08008edf773c8000", 0x8) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000300)=ANY=[], 0x0) fsetxattr$trusted_overlay_redirect(r1, &(0x7f0000000000), &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xfe, 0x1) syz_usb_ep_write(r3, 0x8d, 0x0, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r1, 0x7dfff000) 2.500320434s ago: executing program 0 (id=2361): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) writev(r0, &(0x7f0000003500)=[{&(0x7f00000035c0)="34325a3ec95335e2316325bc217474e55486f13461aa6d72f8ad90ba36f13758495616c22692c9888acd74c8141f760b360d963b2ea9defa4e0d04a1b08b1e9bca95a6fe", 0x44}], 0x1) (async) r1 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) (async) r2 = creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x20) (async) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000040)=0x6) gettid() (async) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x101000, 0x3, 0x9}, 0x18) linkat(r2, &(0x7f0000000040)='./file1\x00', r4, &(0x7f0000000100)='./file0\x00', 0x0) 2.327739143s ago: executing program 2 (id=2362): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020700000a00000000000000000000000500051f000000000a00000000feff00fc02000000000000000000000000000000eaff0000000000030005000000000002004e24"], 0x50}}, 0x20000) 2.019694696s ago: executing program 0 (id=2363): r0 = openat$nullb(0xffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000040)={0x3, 0x0, 0x98, &(0x7f0000000140)={0x1f400000, 0x1000, 0x1}}) ioprio_set$pid(0x1, 0x0, 0x0) (async) ioprio_set$pid(0x1, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)=0xfffffffb) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)=0xfffffffb) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="6ed1aa9df489", 'bond0\x00'}}, 0x1e) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) (async) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r3, 0x4, 0x42000) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r4, 0x4, 0x42000) (async) fcntl$setstatus(r4, 0x4, 0x42000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xe000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000040)) (async) ioctl$TIOCL_PASTESEL(r5, 0x541c, &(0x7f0000000040)) socket$rds(0x15, 0x5, 0x0) (async) r6 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$PPPOEIOCSFWD(r2, 0x40047452, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, 0x0) (async) setpgid(r7, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000100)={0x1fd, 0x0, 0xddddd000, 0x2000, &(0x7f00001c3000/0x2000)=nil}) setpgid(0x0, r7) ptrace$ARCH_SHSTK_ENABLE(0x1e, r7, 0x3, 0x5001) r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) pidfd_getfd(r8, r2, 0x0) (async) pidfd_getfd(r8, r2, 0x0) r9 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r9, 0x7dfff000) 1.385877958s ago: executing program 4 (id=2364): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r1, 0xc0045009, &(0x7f0000000140)=0x1) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000000)) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000000c0)={0x0, 0x0, {0x57, 0xffff, 0x4, {0x4}, {0x0, 0xe0f}, @rumble={0x7, 0x800}}, {0x53, 0xa, 0xfff8, {0xb, 0xfff}, {0x2b, 0x3}, @cond=[{0x48, 0xf, 0x2, 0x3, 0x38, 0xfce8}, {0x3ff, 0x4, 0xb89d, 0x2, 0x3, 0x7ff}]}}) r2 = semget$private(0x0, 0x20000000102, 0x0) semop(r2, &(0x7f0000000240)=[{0x3, 0x0, 0x1800}, {0x1, 0x800, 0x1800}, {0x1, 0xe65b}], 0x3) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000680)=[0x7, 0x7f, 0x1, 0x9d]) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 1.069312614s ago: executing program 2 (id=2365): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x2}) write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1f0a5566230aafe960cfdd2578e5523f71573ef545a1a536b013696e1cf5cb18a49a5838e8ee1002fd5294f156f4381ac9633b23e926531918254e90f2a54a7a0afc88deed3faf4b9a089a4c54b41d90e961ca6b3e1bbaede709d6e378990928ff05d4b389d70da64c062efb2213e3ff1d01a6fe42165eb715159a1f238db324055a095beb332b5ee052652f2d51cac2001854c8a10837fb3f604e718b58bdbffbb0e20c76834e0263a53149856908d59e617e8e944ab4f8b3f5bba6c0b4540eefaed0ad77e62e8b05888c1bf63b4986f15b050127cd334d6a59"], 0x8) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x4400, 0x0) 947.820283ms ago: executing program 0 (id=2366): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) (async) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}, {&(0x7f0000000300)=""/127, 0x7f}], 0x2}}], 0x2, 0x11, 0x0) (async) recvmmsg(r1, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001e00)=""/229, 0xe5}, {&(0x7f0000000300)=""/127, 0x7f}], 0x2}}], 0x2, 0x11, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000000c0)={{0x80}, 'port0\x00', 0xd3, 0x140043, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 947.701361ms ago: executing program 4 (id=2367): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x1, 0x0) 879.422544ms ago: executing program 2 (id=2368): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000004140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) dup3(r1, r2, 0x6700000000000000) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, 0x0, 0x5c) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/meminfo\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x1, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet6(r1, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="fe06861ae6ae96c7b781ee11d7e7af197cdc3875785ffab008b197738a0198d91073f829cc629c5dd2f7bb8317f3abd73a1c29ce3afed17bc4ac48566efe594b007ceedd88cbbae248482dd7ab67e380b9d6d3766ce6a219e753ef4be15c5e7f34417f6051", 0x65}, {&(0x7f0000000080)="e468964131d3a79f3c5c89939af51c0677b1fd36ac1937d5c2b80efb94956404a19247e7a8e37e9d92c6b6cb6e41c6fb0453b79a9df84122", 0x38}, {&(0x7f0000000180)="58cf7d881ca026c2f57d16c653a859497ff7bbb9c1e40562732c6fdab1946904a7c0365eaf6bd052640780bd15a416b25fc303d0d541bd33f403b366521717014fe5a82414e4d51e57d483f5a34ce9d2bfa6ac6a6e6bc228745ec465bb1a53f13a995d7bafb5bfaaf081", 0x6a}, {&(0x7f0000000200)}, {&(0x7f0000000240)="a207f583eccb5997ff27197b9a2355a0acfabfc7c684cc07d261cc3080890b6707f81d3bef51ea9d7c2e14fac881bae2d2dda7f327f3d4019c6fdf1091949d3126015be778d453d9607bac4f9deff437a3d5e2d6d0b2e2718e4af108261b9b7d362e32688c50ee5f73419a13dbcfcb3b25ede4dff4c348f40e6065deb6669213fe54127cae2106aba8aefdb61162402e5da356e08bf6e2be09dccf7bb450dd009eba7e3cf7c7d7b76334cb750a", 0xad}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000000300)="2a9310aef0586a03c66a77252eebbb9303f5aa0fd66b1c07f0f2237e43cae05800fa7884dab977064efd730e3c64c832cfbbc4877d0b991a77795bbd28a1b92a9381160fc92ddf08b21e0138e0f893cd8f5b8768ba5cd9fd9308a3597da2da5cc7085edd3bd157d724ceae63aa21a89f672593913c889f7291259bbc83f8b810f5a7bf53268a0766860a182b18a0f1a28b7dd97db5acb73ea3313f0dd9bd9361c8cf15", 0xa3}], 0x7, &(0x7f0000000440)=[@hopopts={{0x38, 0x29, 0x36, {0x3a, 0x3, '\x00', [@padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @jumbo={0xc2, 0x4, 0x700000}, @ra={0x5, 0x2, 0x2}, @ra={0x5, 0x2, 0xab}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7fffffff}}], 0x50}}, {{&(0x7f00000004c0)={0xa, 0x4e21, 0x1, @loopback, 0x8}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000500)="0e889d9c894f37de2b6c33a6e7a4bb2953881198e0894cf56910fc30531711504028ffc0b96267c68ef05906bbfc4e9824df955761a6bc1053ffbb45256c89fd52f3a68352668279e0db4c82fc582c8f7e36a4d3e74e004d50d848e565887f8d413169c0e159847c4547c5a7a4ec46e92443fba355cbcabd00ef4c4241c6b6db528eaa959ae5ca814a0a236f42aed4f98cb38fd3885cfd7ece1fd8497c55d7105ba368d17c", 0xa5}], 0x1, &(0x7f0000001840)=[@hopopts={{0x20, 0x29, 0x36, {0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0x5}]}}}, @hopopts_2292={{0x270, 0x29, 0x36, {0x33, 0x4a, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @generic={0x9, 0x8b, "7874ef1329a6218e0920fe846fef056ab037ecc5c2d48bce1784aa37c525cba2e5ec8288bdca587d4997635427771e12cfde7307ae6557c36a29a211ecaa4c50680fcc79f514d747f0af0f785f51ea8287473a37444f1a9546906ace837088a52ed2fe752cf265a78543bc677818d54c2aab4782a2451b88c9c3ce1934a7527ce424cc194a519f703f4a88"}, @generic={0x80, 0xe4, "4435033c9aa47cedd7e3911f743e481b05cb92c89546ecbd94b52a1f496b0cfaaaeff8451890707c35f1ebfbbfcf902878147a2dfc59bad1fd9d8100b7ecbb746e89663a2306d5f404376a8cff634c7b412e15ae4587a7cc1f2ae6dc1628b786ca695d3a0431a20468870ac61f967340758b5adfadf1b8f74da50791647507f7b78323c46865e806e24c2ad6c2885bbb74267fac76b6ecd0cb57615442577da8237a4d5135598c0b137a9da81a35647d1fd97df8b40db420eb6a5ff908a7b2fdb903ed95da5278df8e9a737296978e86d715c49d52602c0a65a84e5dfa8acb4d3b878672"}, @jumbo={0xc2, 0x4, 0x401}, @generic={0x7f, 0xc8, "cee5698833af7bcae13fd959497c375231e45810551a3c8c200f002818eb1da7f7c4f704ff6fc41b6c6aa85818361ea9dae68615bd546e8d870ff9fc53b1aaf493b0b44f118d5392b8d02290e4bd3ae7b7f9acad7780f0e78331cd96c0f185bf66b2850c99d81fb88d4cb324c427949e2dd2c9d935df0b3f60926dfe4c720e4a80ed56e5ff0cdcd691dd96638cb8cc2096884446a2e33fec5ce6c0121b26c5d29862f19c95b6d587d440567b94bea3d48387118f399cd46e944fc72addbcc45360b9ac054dadba2b"}]}}}, @hopopts_2292={{0x2d8, 0x29, 0x36, {0x87, 0x57, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x84, 0xdc, "a4db91f6b6d8d6e7ce940524aa835d515a62e3db21fd97f230314b33497c1289179405d00a908dd85611538786c77d2561637a0ef271f656328000e4daadb8ce6e20c32702405db7613f9cc4d35a4745783380633861927b748715f3ee6ae0d44b7edea3ed964dfe2d93a19938ce929c426f3973b762c9e9f6640937b784ea6de1832d79313fb22b61b36922bd3f1512ccc32d2063e29f5cef2bf894f7d568b9ef56ef2ae41a905d8f60ff54aa6d8c18ee44b726daf06a8cd7eb089ca521050f7806e6c979505a41e423e4f7d9175a2e9b8160e8d86d56f6d30042d4"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x5}, @generic={0x7, 0xea, "964bd591933bf6c88502bd158c5874dac2dd7c1f4351e69f94d948229674b15a4e75ef7260c89ff95c9edfb934f86bc7ad063fd177d90f59920dce624a91858d8bc725360364e53b2a979ca052f3ba6dbceb459dffde5b2e1ca692e2c09279088b8dab72d25bb59e797a20ec52d4b2325b61e01f5a3dd0d3c3656cf824c3e4107dbab71b5cd2f10bdc9d75413ee63bf510b0c99f53e537085821ebfd99722feb7691de33e919d65e5e894f08459e3f8932bd682efde96b25e55be79eccb44664fea02e81ef0d00c9106a2f4eb2fded8664a36ae0c998384bd68e3f7b192a7ec06dc8b2eaccb2ee9dc326"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @generic={0x1, 0xc7, "9b5e79f0cef3b9d0219e4480c03e479abb24048911c55eda7d044a2104a28576b6dbe8bd22682e05b7594108d710717c28d81fea06d6610d410e870a99269a385b4d3a757009803f070382d3901aad92e0a39d07fe1e001adc52f102f3c8b846f4d79ce94d0d1f24a966a33da3f1817c7ff198ff01b56ae6004769504d63526b775062ef8157f95db6b8b23b823d19f1d15b589c296ff72e8d9043ceb062a3fb9b6975cb52926dc2bd8ed62b03cdf42a7a4f771d7d995609992e5f4c53ac41d89fbc41b148e262"}, @ra={0x5, 0x2, 0x1}]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x87, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x40}, @jumbo={0xc2, 0x4, 0x100}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x8, 0xc, 0x0, 0xb, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x1e}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x608}}, {{&(0x7f0000000600)={0xa, 0x4e23, 0x5a2d, @private0, 0x7f}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000640)="bdd9ebcc821a040debcd3b259b3c23", 0xf}, {&(0x7f0000000680)="73a5b2430e75b3de6a60c49c2c7dfd", 0xf}, {&(0x7f0000001e80)="34d5562678099666b2e4853ee9913d49b2ed2841c1e7e1022686e68e8a911556c8132f74b310b85befb9ca18ed5dae0a560a96e7ec1fa663f58a2a159196abff9fbda22eaefc83f5b2c64733969dcd92380ac8bf0cff2aad032bd50a5ffc11d00c3137aff6a1e19644a131a8094abb53c0a99486fa15bd75c5995c1e31511109f370fb200bf324ef86fad14cf1d88e8bd59fa8431d49a7d61e969392870c6411989d11a80f0ed8c7248a1ead44588aa92c7d97fdc4b62985106cb6644b72", 0xbe}, {&(0x7f0000001f40)="d9871d622b8551d30b4742d77a7996e49a3391d8967eacb1eae6d19f069feea79c82ea27eb729dd9a8346bfd5b9c12cb54ddd91853f6e1d3b75c44cdc1aad11ea212022e830008a5445d6bc597be2dc2bee61c8552869bb1d4e827c36047193170109170c79f3a432e5ef60006baee76b21906d6c151c6e3f952f0b325b8fc45cb7b9f682c27aae5c81a44c324774f9ca6", 0x91}, {&(0x7f00000006c0)="c8d9d5e7b5ba0febdc92a52f2157d5de31a9915040cfc68bdc7c02690c33ed19dda2290094ee95fa75c10cb5af2a", 0x2e}], 0x5, &(0x7f0000002000)=[@flowinfo={{0x14, 0x29, 0xb, 0xd3}}], 0x18}}, {{&(0x7f0000002040)={0xa, 0x4e24, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c, &(0x7f00000031c0)=[{&(0x7f0000002080)="df0735ad499a6186b186b388b61aabfe19a7072771decbef1cf847ebdec5795fd79aa388f1ce34b1eff9a0d7ee006ac597fa64c54d0b15f4c5dad8ff417b8728ffeb75ec5d3aeadd8fb43f67dd7da54c5d31c9d26d162e971d3812642ad909d0e1fb349a4e96a987726ce58c88beda89df288a60d91b0ed4f14c0aaf56a9f6358e9a90b8ea3aa3ef23c86882f1193b9644ee5da2fc3e1cd0ebd33d097ac004d311e6ed0306854cff26ca6b4054412e7ed2", 0xb1}, {&(0x7f0000002140)="12461747cce2ac24f3cd35cac52e8bba6cf3a3a128254592576219bdc034cf1736cf5958a13244169881e6fed23891e2caaddcf2a97f18174b96170c25bbc0005216ad30e322", 0x46}, {&(0x7f00000021c0)="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", 0x1000}], 0x3, &(0x7f0000003200)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @tclass={{0x14, 0x29, 0x43, 0x941e}}], 0x30}}], 0x4, 0x4) fcntl$getflags(r1, 0x40a) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000700)="b7f2288a911993f08d3aaea2bc0000de", 0x10) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) 816.723426ms ago: executing program 0 (id=2369): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) (fail_nth: 95) creat(&(0x7f0000000080)='./bus\x00', 0x19a) openat$dir(0xffffffffffffff9c, 0x0, 0x800, 0x129) 756.098427ms ago: executing program 4 (id=2370): r0 = socket(0x10, 0x3, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000140)={0x21201, 0x0, 0x5}, 0x18) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x44, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x28, 0x12, 0x0, 0x1, [@nested={0x24, 0xf8, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}, @typed={0xc, 0xaf, 0x0, 0x0, @u64=0x407}]}]}, @typed={0x8, 0x1a, 0x0, 0x0, @fd=r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x45}, 0x0) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) 360.590233ms ago: executing program 2 (id=2371): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000240)={0x0, 0xd, 0x6, 0x8, 0x2, [0x0, 0x0, 0x0], [0x1, 0x11, 0xf9, 0x9], [0x0, 0x2, 0xa58f, 0x2], [0x10001, 0x1000, 0x4, 0x1000]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r2, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x0, [r3, 0x0, 0x0, r4], [0x800, 0x4, 0x0, 0xfffff7d7], [0x0, 0x0, 0x80000000], [0x5, 0xffffffff00000000, 0x0, 0x20000000]}) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/246, 0xf6, 0x0, 0x0, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r6, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x20, 0x0, 0x20) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x2860890, 0x0) 261.361696ms ago: executing program 0 (id=2372): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000340)={0x14, 0x33, 0x1, 0x70bd28, 0x25dfdbfb, "", [@typed={0x4, 0x8d, 0x0, 0x0, @binary}]}, 0x14}], 0x1, 0x0, 0x0, 0x4040}, 0x14) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x0, 0x0) 147.218426ms ago: executing program 0 (id=2373): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020700000a00000000000000000000000500051f000000000a00000000002000fc02000000000000000000000000000000eaff0000000000030005000000000002004e24"], 0x50}}, 0x20000) 95.226647ms ago: executing program 4 (id=2374): landlock_create_ruleset(&(0x7f0000000040)={0x2408, 0x3, 0x1}, 0x18, 0x0) (async) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2408, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) (async) bind$unix(r2, &(0x7f0000003000)=@file={0x1}, 0x6e) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) getpid() (async) getpid() ioctl$KDFONTOP_COPY(r3, 0x4b72, &(0x7f0000000000)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$unix(r1, &(0x7f0000000640)=@file={0x1}, 0x6e) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) 0s ago: executing program 4 (id=2375): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x12) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) read$FUSE(r3, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) close(r1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="1400089a65ffffffff7f0000000050323030302e75"], 0x15) r7 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r7, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES16]) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x143600, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = socket$xdp(0x2c, 0x3, 0x0) set_mempolicy(0x4003, &(0x7f0000000080)=0x7, 0x404) setsockopt$XDP_UMEM_FILL_RING(r10, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) r11 = dup(r6) write$FUSE_BMAP(r11, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r11, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x803}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r11, @ANYBLOB="2c706f73697861636c2c64656275673d3078303030303038bf1330303030303030303030365c0800006d653d2c6e6f6465766d6170"]) openat$cgroup_ro(r11, &(0x7f0000000200)='blkio.bfq.dequeue\x00', 0x0, 0x0) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f00000001c0)={0x28, 0x5, r4, 0x0, &(0x7f0000000380)="0a8d4783ab8f94cf668f7793039682a830fb5f06c669f2c27ea788297a2def2dd4e2bd611a395ea654986e0c3cdf445ef1af287d1685895235c0b8790b3ac355bfb8e941cec3742af6d6ef675f6a925619984ce256", 0x55, 0x63}) r12 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000300), 0x424001, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r12, 0x3b85, &(0x7f0000000340)={0x28, 0x1, 0x0, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x800}) ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000080)={0xa8, 0x300}) mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x848002, 0x0) kernel console output (not intermixed with test programs): kdev [ 388.515119][T13771] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.2037'. [ 388.558649][T13768] vxfs: WRONG superblock magic 00000000 at 1 [ 388.566214][T13768] vxfs: WRONG superblock magic 00000000 at 8 [ 388.576374][T13768] vxfs: can't find superblock. [ 388.592053][ T43] hid-generic 0000:0000:0000.0050: unknown main item tag 0x0 [ 388.604213][ T9] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 388.621019][ T43] hid-generic 0000:0000:0000.0050: hidraw0: HID v0.00 Device [syz1] on syz0 [ 388.773137][T13779] fido_id[13779]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 388.822949][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.861747][ T9] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 388.914648][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.931325][ T9] usb 3-1: config 0 descriptor?? [ 389.106155][T13798] tmpfs: Bad value for 'mpol' [ 389.359585][T13810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.374827][ T9] keytouch 0003:0926:3333.0051: fixing up Keytouch IEC report descriptor [ 389.387244][T13810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.400544][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0051/input/input40 [ 389.418342][T13810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.438716][T13810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.635039][T13820] XFS (rnullb0): Invalid superblock magic number [ 389.673483][ T9] keytouch 0003:0926:3333.0051: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 389.824216][T13828] netlink: 'syz.0.2048': attribute type 1 has an invalid length. [ 389.858810][T13828] netlink: 'syz.0.2048': attribute type 101 has an invalid length. [ 389.874217][T13828] netlink: 564 bytes leftover after parsing attributes in process `syz.0.2048'. [ 389.891313][ T5902] hid-generic 0000:0000:0000.0052: unknown main item tag 0x0 [ 389.926983][ T5902] hid-generic 0000:0000:0000.0052: hidraw1: HID v0.00 Device [syz1] on syz0 [ 389.939404][ T9] usb 3-1: USB disconnect, device number 108 [ 390.043404][T13833] fido_id[13833]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 390.270469][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 390.270497][ T30] audit: type=1800 audit(1750860626.691:86): pid=13842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2053" name="file1" dev="overlay" ino=2781 res=0 errno=0 [ 390.515165][T13850] FAULT_INJECTION: forcing a failure. [ 390.515165][T13850] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 390.533152][T13850] CPU: 1 UID: 0 PID: 13850 Comm: syz.1.2056 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 390.533181][T13850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 390.533194][T13850] Call Trace: [ 390.533203][T13850] [ 390.533217][T13850] dump_stack_lvl+0x189/0x250 [ 390.533244][T13850] ? __pfx____ratelimit+0x10/0x10 [ 390.533266][T13850] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.533288][T13850] ? __pfx__printk+0x10/0x10 [ 390.533312][T13850] ? fs_reclaim_acquire+0x7d/0x100 [ 390.533345][T13850] should_fail_ex+0x414/0x560 [ 390.533381][T13850] prepare_alloc_pages+0x213/0x610 [ 390.533414][T13850] __alloc_frozen_pages_noprof+0x123/0x370 [ 390.533443][T13850] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 390.533484][T13850] alloc_pages_mpol+0x232/0x4a0 [ 390.533512][T13850] alloc_pages_noprof+0xa9/0x190 [ 390.533536][T13850] folio_alloc_noprof+0x1e/0x30 [ 390.533558][T13850] filemap_alloc_folio_noprof+0xdf/0x470 [ 390.533585][T13850] ? filemap_get_read_batch+0xc4/0x7b0 [ 390.533615][T13850] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 390.533636][T13850] ? __up_read+0x280/0x680 [ 390.533663][T13850] ? page_cache_sync_ra+0x2d6/0xb10 [ 390.533694][T13850] filemap_get_pages+0xa90/0x1ea0 [ 390.533726][T13850] ? __pfx_lru_add+0x10/0x10 [ 390.533769][T13850] ? __pfx_filemap_get_pages+0x10/0x10 [ 390.533796][T13850] ? folios_put_refs+0x560/0x640 [ 390.533825][T13850] ? __pfx___might_resched+0x10/0x10 [ 390.533862][T13850] filemap_splice_read+0x4fc/0xbc0 [ 390.533909][T13850] ? __pfx_filemap_splice_read+0x10/0x10 [ 390.533960][T13850] ? __pfx_iter_file_splice_write+0x10/0x10 [ 390.533985][T13850] ? file_end_write+0x156/0x250 [ 390.534010][T13850] ? direct_splice_actor+0x10c/0x160 [ 390.534036][T13850] ? __pfx_filemap_splice_read+0x10/0x10 [ 390.534061][T13850] splice_direct_to_actor+0x4a6/0xcc0 [ 390.534105][T13850] ? __pfx_direct_splice_actor+0x10/0x10 [ 390.534129][T13850] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 390.534164][T13850] do_splice_direct+0x181/0x270 [ 390.534191][T13850] ? __pfx_do_splice_direct+0x10/0x10 [ 390.534222][T13850] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 390.534254][T13850] ? rw_verify_area+0x258/0x650 [ 390.534284][T13850] do_sendfile+0x4da/0x7e0 [ 390.534312][T13850] ? __pfx_vfs_write+0x10/0x10 [ 390.534338][T13850] ? __pfx_do_sendfile+0x10/0x10 [ 390.534365][T13850] ? __fget_files+0x3a0/0x420 [ 390.534401][T13850] __se_sys_sendfile64+0x13e/0x190 [ 390.534429][T13850] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 390.534453][T13850] ? rcu_is_watching+0x15/0xb0 [ 390.534478][T13850] ? do_syscall_64+0xbe/0x3b0 [ 390.534503][T13850] do_syscall_64+0xfa/0x3b0 [ 390.534524][T13850] ? lockdep_hardirqs_on+0x9c/0x150 [ 390.534545][T13850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.534565][T13850] ? clear_bhb_loop+0x60/0xb0 [ 390.534589][T13850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.534608][T13850] RIP: 0033:0x7fd91a38e929 [ 390.534626][T13850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.534644][T13850] RSP: 002b:00007fd91b14c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 390.534666][T13850] RAX: ffffffffffffffda RBX: 00007fd91a5b5fa0 RCX: 00007fd91a38e929 [ 390.534682][T13850] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 390.534694][T13850] RBP: 00007fd91b14c090 R08: 0000000000000000 R09: 0000000000000000 [ 390.534706][T13850] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000002 [ 390.534720][T13850] R13: 0000000000000000 R14: 00007fd91a5b5fa0 R15: 00007ffefeac2398 [ 390.534750][T13850] [ 391.082873][ T9] hid-generic 0000:0000:0000.0053: unknown main item tag 0x0 [ 391.102967][T13864] nvme_fabrics: unknown parameter or missing value 'Aa!]FÎÚÀÎËPáFeUIWÙÇQå\Kü¸cíëËE_K‰$VÅR΋ŇIHÆS:5®F䔸' in ctrl creation request [ 391.118181][ T9] hid-generic 0000:0000:0000.0053: hidraw0: HID v0.00 Device [syz1] on syz0 [ 391.133665][T13861] tmpfs: Bad value for 'size' [ 391.236984][T13865] fido_id[13865]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 391.266307][ T979] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 391.356858][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 391.363412][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.462631][ T979] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 391.474531][ T979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.491600][ T979] usb 1-1: Product: syz [ 391.495806][ T979] usb 1-1: Manufacturer: syz [ 391.511258][ T979] usb 1-1: SerialNumber: syz [ 391.524871][ T979] usb 1-1: config 0 descriptor?? [ 391.548418][ T979] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 391.571346][T13883] syz.1.2066: attempt to access beyond end of device [ 391.571346][T13883] nbd1: rw=0, sector=2, nr_sectors = 2 limit=0 [ 391.597695][T13883] MINIX-fs: unable to read superblock [ 391.697731][T13888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.711905][T13888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.926924][T13896] FAULT_INJECTION: forcing a failure. [ 391.926924][T13896] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 391.945120][T13896] CPU: 1 UID: 0 PID: 13896 Comm: syz.1.2069 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 391.945155][T13896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 391.945168][T13896] Call Trace: [ 391.945177][T13896] [ 391.945186][T13896] dump_stack_lvl+0x189/0x250 [ 391.945214][T13896] ? __pfx____ratelimit+0x10/0x10 [ 391.945235][T13896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.945257][T13896] ? __pfx__printk+0x10/0x10 [ 391.945280][T13896] ? fs_reclaim_acquire+0x7d/0x100 [ 391.945313][T13896] should_fail_ex+0x414/0x560 [ 391.945348][T13896] prepare_alloc_pages+0x213/0x610 [ 391.945380][T13896] __alloc_frozen_pages_noprof+0x123/0x370 [ 391.945409][T13896] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 391.945452][T13896] alloc_pages_mpol+0x232/0x4a0 [ 391.945478][T13896] alloc_pages_noprof+0xa9/0x190 [ 391.945501][T13896] folio_alloc_noprof+0x1e/0x30 [ 391.945523][T13896] filemap_alloc_folio_noprof+0xdf/0x470 [ 391.945549][T13896] ? filemap_get_read_batch+0xc4/0x7b0 [ 391.945578][T13896] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 391.945599][T13896] ? __up_read+0x280/0x680 [ 391.945626][T13896] ? page_cache_sync_ra+0x2d6/0xb10 [ 391.945658][T13896] filemap_get_pages+0xa90/0x1ea0 [ 391.945689][T13896] ? __pfx_lru_add+0x10/0x10 [ 391.945732][T13896] ? __pfx_filemap_get_pages+0x10/0x10 [ 391.945759][T13896] ? folios_put_refs+0x560/0x640 [ 391.945788][T13896] ? __pfx___might_resched+0x10/0x10 [ 391.945825][T13896] filemap_splice_read+0x4fc/0xbc0 [ 391.945873][T13896] ? __pfx_filemap_splice_read+0x10/0x10 [ 391.945924][T13896] ? __pfx_iter_file_splice_write+0x10/0x10 [ 391.945950][T13896] ? file_end_write+0x156/0x250 [ 391.945975][T13896] ? direct_splice_actor+0x10c/0x160 [ 391.946000][T13896] ? __pfx_filemap_splice_read+0x10/0x10 [ 391.946025][T13896] splice_direct_to_actor+0x4a6/0xcc0 [ 391.946069][T13896] ? __pfx_direct_splice_actor+0x10/0x10 [ 391.946093][T13896] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 391.946131][T13896] do_splice_direct+0x181/0x270 [ 391.946163][T13896] ? __pfx_do_splice_direct+0x10/0x10 [ 391.946188][T13896] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 391.946220][T13896] ? rw_verify_area+0x258/0x650 [ 391.946245][T13896] do_sendfile+0x4da/0x7e0 [ 391.946271][T13896] ? __pfx_vfs_write+0x10/0x10 [ 391.946298][T13896] ? __pfx_do_sendfile+0x10/0x10 [ 391.946325][T13896] ? __fget_files+0x3a0/0x420 [ 391.946361][T13896] __se_sys_sendfile64+0x13e/0x190 [ 391.946389][T13896] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 391.946413][T13896] ? rcu_is_watching+0x15/0xb0 [ 391.946438][T13896] ? do_syscall_64+0xbe/0x3b0 [ 391.946464][T13896] do_syscall_64+0xfa/0x3b0 [ 391.946485][T13896] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.946505][T13896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.946525][T13896] ? clear_bhb_loop+0x60/0xb0 [ 391.946549][T13896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.946568][T13896] RIP: 0033:0x7fd91a38e929 [ 391.946585][T13896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.946603][T13896] RSP: 002b:00007fd91b14c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 391.946625][T13896] RAX: ffffffffffffffda RBX: 00007fd91a5b5fa0 RCX: 00007fd91a38e929 [ 391.946641][T13896] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 391.946653][T13896] RBP: 00007fd91b14c090 R08: 0000000000000000 R09: 0000000000000000 [ 391.946666][T13896] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000002 [ 391.946680][T13896] R13: 0000000000000000 R14: 00007fd91a5b5fa0 R15: 00007ffefeac2398 [ 391.946710][T13896] [ 392.343260][ T979] gspca_sunplus: reg_w_riv err -110 [ 392.353133][ T979] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 392.503375][T13901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.513126][T13901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.602577][ T5902] usb 1-1: USB disconnect, device number 110 [ 392.617411][T13913] FAULT_INJECTION: forcing a failure. [ 392.617411][T13913] name failslab, interval 1, probability 0, space 0, times 0 [ 392.657057][T13907] tracefs: Unknown parameter 'xid' [ 392.683875][T13913] CPU: 0 UID: 0 PID: 13913 Comm: syz.1.2072 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 392.683905][T13913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.683918][T13913] Call Trace: [ 392.683926][T13913] [ 392.683936][T13913] dump_stack_lvl+0x189/0x250 [ 392.683964][T13913] ? __pfx____ratelimit+0x10/0x10 [ 392.683986][T13913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.684008][T13913] ? __pfx__printk+0x10/0x10 [ 392.684037][T13913] ? __pfx___might_resched+0x10/0x10 [ 392.684075][T13913] should_fail_ex+0x414/0x560 [ 392.684117][T13913] should_failslab+0xa8/0x100 [ 392.684139][T13913] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 392.684161][T13913] ? __get_vm_area_node+0x13f/0x300 [ 392.684184][T13913] __get_vm_area_node+0x13f/0x300 [ 392.684208][T13913] __vmalloc_node_range_noprof+0x301/0x12f0 [ 392.684228][T13913] ? copy_process+0x54b/0x3c00 [ 392.684257][T13913] ? percpu_ref_get_many+0x19/0x140 [ 392.684279][T13913] ? percpu_ref_get_many+0x19/0x140 [ 392.684313][T13913] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 392.684338][T13913] ? memcpy_and_pad+0x48/0x80 [ 392.684365][T13913] __vmalloc_node_noprof+0xc2/0x110 [ 392.684388][T13913] ? copy_process+0x54b/0x3c00 [ 392.684406][T13913] ? copy_process+0x54b/0x3c00 [ 392.684429][T13913] dup_task_struct+0x3e7/0x860 [ 392.684455][T13913] copy_process+0x54b/0x3c00 [ 392.684503][T13913] ? __pfx_copy_process+0x10/0x10 [ 392.684537][T13913] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 392.684562][T13913] vhost_task_create+0x1c4/0x290 [ 392.684586][T13913] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 392.684611][T13913] ? __pfx_vhost_task_create+0x10/0x10 [ 392.684640][T13913] ? __pfx_vhost_task_fn+0x10/0x10 [ 392.684672][T13913] ? kasan_save_track+0x4f/0x80 [ 392.684687][T13913] ? kasan_save_track+0x3e/0x80 [ 392.684709][T13913] kvm_mmu_post_init_vm+0x147/0x2b0 [ 392.684739][T13913] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 392.684770][T13913] ? __mutex_trylock_common+0x153/0x260 [ 392.684794][T13913] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 392.684820][T13913] ? rcu_is_watching+0x15/0xb0 [ 392.684837][T13913] ? look_up_lock_class+0x74/0x170 [ 392.684859][T13913] ? register_lock_class+0x51/0x320 [ 392.684891][T13913] ? __lock_acquire+0xab9/0xd20 [ 392.684943][T13913] kvm_vcpu_ioctl+0x95c/0xe90 [ 392.684972][T13913] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 392.684991][T13913] ? __lock_acquire+0xab9/0xd20 [ 392.685033][T13913] ? __fget_files+0x2a/0x420 [ 392.685088][T13913] ? __fget_files+0x2a/0x420 [ 392.685110][T13913] ? __fget_files+0x3a0/0x420 [ 392.685133][T13913] ? __fget_files+0x2a/0x420 [ 392.685159][T13913] ? bpf_lsm_file_ioctl+0x9/0x20 [ 392.685188][T13913] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 392.685208][T13913] __se_sys_ioctl+0xfc/0x170 [ 392.685229][T13913] do_syscall_64+0xfa/0x3b0 [ 392.685251][T13913] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.685272][T13913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.685291][T13913] ? clear_bhb_loop+0x60/0xb0 [ 392.685312][T13913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.685330][T13913] RIP: 0033:0x7fd91a38e929 [ 392.685347][T13913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.685364][T13913] RSP: 002b:00007fd91b12b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 392.685384][T13913] RAX: ffffffffffffffda RBX: 00007fd91a5b6080 RCX: 00007fd91a38e929 [ 392.685398][T13913] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 392.685410][T13913] RBP: 00007fd91b12b090 R08: 0000000000000000 R09: 0000000000000000 [ 392.685422][T13913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.685434][T13913] R13: 0000000000000001 R14: 00007fd91a5b6080 R15: 00007ffefeac2398 [ 392.685463][T13913] [ 392.685688][T13913] syz.1.2072: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 393.125756][T13913] CPU: 1 UID: 0 PID: 13913 Comm: syz.1.2072 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 393.125784][T13913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 393.125796][T13913] Call Trace: [ 393.125805][T13913] [ 393.125814][T13913] dump_stack_lvl+0x189/0x250 [ 393.125841][T13913] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 393.125870][T13913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 393.125892][T13913] ? __pfx__printk+0x10/0x10 [ 393.125914][T13913] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 393.125937][T13913] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 393.125978][T13913] warn_alloc+0x214/0x310 [ 393.126008][T13913] ? __pfx_warn_alloc+0x10/0x10 [ 393.126033][T13913] ? __get_vm_area_node+0x13f/0x300 [ 393.126057][T13913] ? __get_vm_area_node+0x2b5/0x300 [ 393.126085][T13913] __vmalloc_node_range_noprof+0x326/0x12f0 [ 393.126118][T13913] ? percpu_ref_get_many+0x19/0x140 [ 393.126145][T13913] ? percpu_ref_get_many+0x19/0x140 [ 393.126182][T13913] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 393.126207][T13913] ? memcpy_and_pad+0x48/0x80 [ 393.126233][T13913] __vmalloc_node_noprof+0xc2/0x110 [ 393.126252][T13913] ? copy_process+0x54b/0x3c00 [ 393.126271][T13913] ? copy_process+0x54b/0x3c00 [ 393.126292][T13913] dup_task_struct+0x3e7/0x860 [ 393.126316][T13913] copy_process+0x54b/0x3c00 [ 393.126363][T13913] ? __pfx_copy_process+0x10/0x10 [ 393.126396][T13913] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 393.126421][T13913] vhost_task_create+0x1c4/0x290 [ 393.126446][T13913] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 393.126473][T13913] ? __pfx_vhost_task_create+0x10/0x10 [ 393.126505][T13913] ? __pfx_vhost_task_fn+0x10/0x10 [ 393.126539][T13913] ? kasan_save_track+0x4f/0x80 [ 393.126556][T13913] ? kasan_save_track+0x3e/0x80 [ 393.126579][T13913] kvm_mmu_post_init_vm+0x147/0x2b0 [ 393.126611][T13913] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 393.126644][T13913] ? __mutex_trylock_common+0x153/0x260 [ 393.126668][T13913] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 393.126695][T13913] ? rcu_is_watching+0x15/0xb0 [ 393.126715][T13913] ? look_up_lock_class+0x74/0x170 [ 393.126739][T13913] ? register_lock_class+0x51/0x320 [ 393.126773][T13913] ? __lock_acquire+0xab9/0xd20 [ 393.126833][T13913] kvm_vcpu_ioctl+0x95c/0xe90 [ 393.126862][T13913] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 393.126883][T13913] ? __lock_acquire+0xab9/0xd20 [ 393.126933][T13913] ? __fget_files+0x2a/0x420 [ 393.126962][T13913] ? __fget_files+0x2a/0x420 [ 393.126994][T13913] ? __fget_files+0x3a0/0x420 [ 393.127017][T13913] ? __fget_files+0x2a/0x420 [ 393.127045][T13913] ? bpf_lsm_file_ioctl+0x9/0x20 [ 393.127075][T13913] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 393.127098][T13913] __se_sys_ioctl+0xfc/0x170 [ 393.127122][T13913] do_syscall_64+0xfa/0x3b0 [ 393.127143][T13913] ? lockdep_hardirqs_on+0x9c/0x150 [ 393.127164][T13913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.127184][T13913] ? clear_bhb_loop+0x60/0xb0 [ 393.127209][T13913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.127227][T13913] RIP: 0033:0x7fd91a38e929 [ 393.127245][T13913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.127262][T13913] RSP: 002b:00007fd91b12b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.127283][T13913] RAX: ffffffffffffffda RBX: 00007fd91a5b6080 RCX: 00007fd91a38e929 [ 393.127298][T13913] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 393.127310][T13913] RBP: 00007fd91b12b090 R08: 0000000000000000 R09: 0000000000000000 [ 393.127323][T13913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.127335][T13913] R13: 0000000000000001 R14: 00007fd91a5b6080 R15: 00007ffefeac2398 [ 393.127366][T13913] [ 393.515710][T13913] Mem-Info: [ 393.518866][T13913] active_anon:6922 inactive_anon:0 isolated_anon:0 [ 393.518866][T13913] active_file:15910 inactive_file:41736 isolated_file:0 [ 393.518866][T13913] unevictable:789 dirty:46 writeback:0 [ 393.518866][T13913] slab_reclaimable:11451 slab_unreclaimable:97485 [ 393.518866][T13913] mapped:25229 shmem:1377 pagetables:1361 [ 393.518866][T13913] sec_pagetables:0 bounce:0 [ 393.518866][T13913] kernel_misc_reclaimable:0 [ 393.518866][T13913] free:1325484 free_pcp:13277 free_cma:0 [ 393.670031][T13913] Node 0 active_anon:27888kB inactive_anon:0kB active_file:63640kB inactive_file:166744kB unevictable:1620kB isolated(anon):0kB isolated(file):0kB mapped:100916kB dirty:184kB writeback:0kB shmem:4072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11936kB pagetables:5516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 393.736145][T13913] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 393.798309][T13913] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 393.827183][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.836606][T13913] lowmem_reserve[]: 0 2497 2498 2498 2498 [ 393.842407][T13913] Node 0 DMA32 free:1397612kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34716kB inactive_anon:0kB active_file:63640kB inactive_file:165448kB unevictable:1620kB writepending:228kB present:3129332kB managed:2557024kB mlocked:84kB bounce:0kB free_pcp:28112kB local_pcp:13136kB free_cma:0kB [ 393.875871][T13913] lowmem_reserve[]: 0 0 1 1 1 [ 393.880621][T13913] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1304kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 393.910886][T13913] lowmem_reserve[]: 0 0 0 0 0 [ 393.915635][T13913] Node 1 Normal free:3888904kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18048kB local_pcp:9984kB free_cma:0kB [ 393.957959][T13913] lowmem_reserve[]: 0 0 0 0 0 [ 393.968740][T13913] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 394.003189][T13913] Node 0 DMA32: 1411*4kB (UME) 730*8kB (UME) 745*16kB (UM) 749*32kB (UME) 272*64kB (UME) 71*128kB (UM) 53*256kB (UME) 21*512kB (UM) 17*1024kB (UME) 9*2048kB (UME) 308*4096kB (UM) = 1395596kB [ 394.022991][T13913] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 394.043939][T13913] Node 1 Normal: 226*4kB (UME) 52*8kB (UME) 32*16kB (UME) 167*32kB (UME) 56*64kB (UME) 10*128kB (UM) 4*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3888904kB [ 394.063627][T13913] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 394.092363][T13913] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 394.106855][T13913] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 394.113926][T13937] FAULT_INJECTION: forcing a failure. [ 394.113926][T13937] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 394.127442][T13913] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 394.152688][T13913] 62892 total pagecache pages [ 394.157487][T13913] 0 pages in swap cache [ 394.164237][T13937] CPU: 1 UID: 0 PID: 13937 Comm: syz.4.2080 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 394.164263][T13937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 394.164276][T13937] Call Trace: [ 394.164284][T13937] [ 394.164293][T13937] dump_stack_lvl+0x189/0x250 [ 394.164320][T13937] ? __pfx____ratelimit+0x10/0x10 [ 394.164342][T13937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.164364][T13937] ? __pfx__printk+0x10/0x10 [ 394.164389][T13937] ? fs_reclaim_acquire+0x7d/0x100 [ 394.164421][T13937] should_fail_ex+0x414/0x560 [ 394.164456][T13937] prepare_alloc_pages+0x213/0x610 [ 394.164488][T13937] __alloc_frozen_pages_noprof+0x123/0x370 [ 394.164518][T13937] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 394.164560][T13937] alloc_pages_mpol+0x232/0x4a0 [ 394.164587][T13937] alloc_pages_noprof+0xa9/0x190 [ 394.164609][T13937] folio_alloc_noprof+0x1e/0x30 [ 394.164630][T13937] filemap_alloc_folio_noprof+0xdf/0x470 [ 394.164655][T13937] ? filemap_get_read_batch+0xc4/0x7b0 [ 394.164685][T13937] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 394.164706][T13937] ? __up_read+0x280/0x680 [ 394.164733][T13937] ? page_cache_sync_ra+0x2d6/0xb10 [ 394.164765][T13937] filemap_get_pages+0xa90/0x1ea0 [ 394.164797][T13937] ? __pfx_lru_add+0x10/0x10 [ 394.164841][T13937] ? __pfx_filemap_get_pages+0x10/0x10 [ 394.164867][T13937] ? folios_put_refs+0x560/0x640 [ 394.164904][T13937] ? __pfx___might_resched+0x10/0x10 [ 394.164942][T13937] filemap_splice_read+0x4fc/0xbc0 [ 394.164990][T13937] ? __pfx_filemap_splice_read+0x10/0x10 [ 394.165039][T13937] ? __pfx_iter_file_splice_write+0x10/0x10 [ 394.165065][T13937] ? file_end_write+0x156/0x250 [ 394.165090][T13937] ? direct_splice_actor+0x10c/0x160 [ 394.165115][T13937] ? __pfx_filemap_splice_read+0x10/0x10 [ 394.165139][T13937] splice_direct_to_actor+0x4a6/0xcc0 [ 394.165183][T13937] ? __pfx_direct_splice_actor+0x10/0x10 [ 394.165206][T13937] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 394.165241][T13937] do_splice_direct+0x181/0x270 [ 394.165269][T13937] ? __pfx_do_splice_direct+0x10/0x10 [ 394.165294][T13937] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 394.165326][T13937] ? rw_verify_area+0x258/0x650 [ 394.165350][T13937] do_sendfile+0x4da/0x7e0 [ 394.165384][T13937] ? __pfx_vfs_write+0x10/0x10 [ 394.165411][T13937] ? __pfx_do_sendfile+0x10/0x10 [ 394.165437][T13937] ? __fget_files+0x3a0/0x420 [ 394.165472][T13937] __se_sys_sendfile64+0x13e/0x190 [ 394.165500][T13937] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 394.165523][T13937] ? rcu_is_watching+0x15/0xb0 [ 394.165548][T13937] ? do_syscall_64+0xbe/0x3b0 [ 394.165571][T13937] do_syscall_64+0xfa/0x3b0 [ 394.165590][T13937] ? lockdep_hardirqs_on+0x9c/0x150 [ 394.165610][T13937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.165629][T13937] ? clear_bhb_loop+0x60/0xb0 [ 394.165653][T13937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.165672][T13937] RIP: 0033:0x7f020598e929 [ 394.165691][T13937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.165708][T13937] RSP: 002b:00007f02037f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 394.165727][T13937] RAX: ffffffffffffffda RBX: 00007f0205bb5fa0 RCX: 00007f020598e929 [ 394.165741][T13937] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 394.165753][T13937] RBP: 00007f02037f6090 R08: 0000000000000000 R09: 0000000000000000 [ 394.165766][T13937] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000002 [ 394.165778][T13937] R13: 0000000000000000 R14: 00007f0205bb5fa0 R15: 00007ffc4d667158 [ 394.165807][T13937] [ 394.172639][T13913] Free swap = 124996kB [ 394.532555][ T9] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 394.542096][T13913] Total swap = 124996kB [ 394.546559][T13913] 2097051 pages RAM [ 394.551171][T13913] 0 pages HighMem/MovableOnly [ 394.558838][T13913] 425817 pages reserved [ 394.563008][T13913] 0 pages cma reserved [ 394.729941][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 394.787978][ T9] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 394.805870][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.818460][ T9] usb 1-1: Product: syz [ 394.827331][T13953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.829901][ T9] usb 1-1: Manufacturer: syz [ 394.856162][ T9] usb 1-1: SerialNumber: syz [ 394.867269][T13953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.888755][T13956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 394.897283][ T9] usb 1-1: config 0 descriptor?? [ 394.916983][ T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 395.569765][ T979] usb 3-1: new full-speed USB device number 109 using dummy_hcd [ 395.760620][ T979] usb 3-1: unable to get BOS descriptor or descriptor too short [ 395.780697][ T979] usb 3-1: not running at top speed; connect to a high speed hub [ 395.800460][ T979] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 395.820409][ T979] usb 3-1: config 0 has no interface number 0 [ 395.826632][ T979] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 395.843259][ T979] usb 3-1: config 0 interface 88 has no altsetting 0 [ 395.856480][ T979] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 395.856544][T13977] syz.1.2089: attempt to access beyond end of device [ 395.856544][T13977] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 395.870365][ T979] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 395.906540][T13977] syz.1.2089: attempt to access beyond end of device [ 395.906540][T13977] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 395.927320][T13977] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 395.949561][T13977] syz.1.2089: attempt to access beyond end of device [ 395.949561][T13977] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 396.003484][T13977] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 396.031726][T13977] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 396.042527][T13977] UDF-fs: Scanning with blocksize 512 failed [ 396.057053][T13977] syz.1.2089: attempt to access beyond end of device [ 396.057053][T13977] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 396.099343][T13977] syz.1.2089: attempt to access beyond end of device [ 396.099343][T13977] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 396.132982][T13977] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 396.163442][T13977] syz.1.2089: attempt to access beyond end of device [ 396.163442][T13977] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 396.190080][T13977] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 396.221350][T13977] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 396.235370][T13977] UDF-fs: Scanning with blocksize 1024 failed [ 396.248365][ T43] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 396.268013][T13977] syz.1.2089: attempt to access beyond end of device [ 396.268013][T13977] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 396.301895][T13977] syz.1.2089: attempt to access beyond end of device [ 396.301895][T13977] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 396.331908][T13977] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 396.359110][T13977] syz.1.2089: attempt to access beyond end of device [ 396.359110][T13977] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 396.394050][T13977] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 396.415316][T13977] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 396.435840][T13977] UDF-fs: Scanning with blocksize 2048 failed [ 396.445487][ T979] usb 3-1: Product: syz [ 396.449845][ T9] gspca_topro: Sensor soi763a [ 396.468437][T13977] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 396.472460][ T979] usb 3-1: Manufacturer: syz [ 396.493632][ T979] usb 3-1: SerialNumber: syz [ 396.516284][ T979] usb 3-1: config 0 descriptor?? [ 396.548938][ T43] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 396.562059][T13977] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 396.579426][T13977] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 396.587269][T13977] UDF-fs: Scanning with blocksize 4096 failed [ 396.590198][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.600763][T13977] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 396.632662][ T43] usb 2-1: Product: syz [ 396.643554][ T43] usb 2-1: Manufacturer: syz [ 396.648180][ T43] usb 2-1: SerialNumber: syz [ 396.676800][ T43] usb 2-1: config 0 descriptor?? [ 396.697542][T13931] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 396.704726][T13931] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 396.740590][ T9] usb 1-1: USB disconnect, device number 111 [ 396.780209][ T979] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input41 [ 396.857670][ C1] usb_acecad 3-1:0.88: can't resubmit intr, dummy_hcd.2-1/input0, status -19 [ 396.857702][ T979] usb 3-1: USB disconnect, device number 109 [ 396.904601][ T43] usb-storage 2-1:0.0: USB Mass Storage device detected [ 397.025564][ T43] usb 2-1: USB disconnect, device number 115 [ 397.494696][T14002] hpfs: Bad magic ... probably not HPFS [ 397.570114][T14005] input: syz1 as /devices/virtual/input/input42 [ 397.800154][T14015] can: request_module (can-proto-4) failed. [ 398.054800][ T43] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 398.097493][ T5902] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 398.097610][ T979] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 398.251523][ T43] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.265702][ T5902] usb 3-1: Using ep0 maxpacket: 32 [ 398.271048][ T43] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 398.274040][ T979] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 398.284024][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.299905][ T5902] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 398.301031][ T979] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 398.320938][ T5902] usb 3-1: config 0 has no interface number 0 [ 398.326898][ T979] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 398.336580][ T979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.344179][ T43] usb 1-1: config 0 descriptor?? [ 398.359586][ T5902] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 398.360534][ T979] usb 2-1: Product: syz [ 398.374109][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.383804][ T979] usb 2-1: Manufacturer: syz [ 398.385918][ T5902] usb 3-1: Product: syz [ 398.396446][ T5902] usb 3-1: Manufacturer: syz [ 398.397089][ T979] usb 2-1: SerialNumber: syz [ 398.401331][ T5902] usb 3-1: SerialNumber: syz [ 398.418774][ T5902] usb 3-1: config 0 descriptor?? [ 398.434202][ T5902] smsc95xx v2.0.0 [ 398.439136][ T979] usb 2-1: config 0 descriptor?? [ 398.451578][T14022] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 398.458811][T14022] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 398.556251][T14031] vim2m vim2m.0: Fourcc format (0x47524247) invalid. [ 398.671999][T14033] /dev/rnullb0: Can't open blockdev [ 398.687671][T14022] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 398.704470][T14022] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 398.821014][T14037] /dev/rnullb0: Can't open blockdev [ 398.862612][ T5902] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 398.882876][T14017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.892539][T14017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.893644][ T5902] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 398.921781][T14040] tmpfs: Unknown parameter 'nrbblocks' [ 398.928798][T14040] /dev/rnullb0: Can't open blockdev [ 398.933993][T14022] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 399.366799][ T979] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 399.590134][T14022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.601397][T14022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.626047][ T979] usb 2-1: USB disconnect, device number 116 [ 399.749475][T14059] overlay: ./file0 is not a directory [ 400.202910][ T5902] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 400.225028][ T5902] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 400.238880][ T5902] usb 3-1: USB disconnect, device number 110 [ 400.430788][T14073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.446051][T14073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 400.950326][T14085] Can't find a SQUASHFS superblock on rnullb0 [ 401.037802][ T43] usbhid 1-1:0.0: can't add hid device: -71 [ 401.066713][ T43] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 401.110889][ T43] usb 1-1: USB disconnect, device number 112 [ 401.836154][T14124] /dev/rnullb0: Can't open blockdev [ 401.898234][T14128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.910517][T14128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.930167][T14128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.932859][T14130] /dev/rnullb0: Can't open blockdev [ 401.941665][T14128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.021403][ T43] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 402.056622][T14134] cgroup: No subsys list or none specified [ 402.061928][T14127] 9pnet_fd: Insufficient options for proto=fd [ 402.192070][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 402.201496][ T43] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 402.210803][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.219432][ T43] usb 2-1: Product: syz [ 402.223674][ T43] usb 2-1: Manufacturer: syz [ 402.228363][ T43] usb 2-1: SerialNumber: syz [ 402.240593][ T43] usb 2-1: config 0 descriptor?? [ 402.464246][ T43] airspy 2-1:0.0: Board ID: 00 [ 402.469053][ T43] airspy 2-1:0.0: Firmware version: [ 402.574022][T14140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.588609][T14140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.905153][T14145] /dev/rnullb0: Can't open blockdev [ 402.918417][ T43] airspy 2-1:0.0: usb_control_msg() failed -71 request 12 [ 402.945886][ T43] airspy 2-1:0.0: Registered as swradio24 [ 402.972408][ T43] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 403.030030][ T43] usb 2-1: USB disconnect, device number 117 [ 403.076520][T14147] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 403.085528][T14147] VFS: Can't find a romfs filesystem on dev rnullb0. [ 403.085528][T14147] [ 403.539137][ T43] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 403.720821][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 403.735108][ T43] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 403.750020][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.760398][ T43] usb 1-1: Product: syz [ 403.767547][ T43] usb 1-1: Manufacturer: syz [ 403.772401][ T43] usb 1-1: SerialNumber: syz [ 403.780251][ T43] usb 1-1: config 0 descriptor?? [ 403.793092][ T43] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 404.243964][T14198] FAULT_INJECTION: forcing a failure. [ 404.243964][T14198] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.259092][T14198] CPU: 0 UID: 0 PID: 14198 Comm: syz.2.2149 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 404.259121][T14198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 404.259135][T14198] Call Trace: [ 404.259143][T14198] [ 404.259151][T14198] dump_stack_lvl+0x189/0x250 [ 404.259178][T14198] ? __pfx____ratelimit+0x10/0x10 [ 404.259201][T14198] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.259222][T14198] ? __pfx__printk+0x10/0x10 [ 404.259245][T14198] ? __might_fault+0xb0/0x130 [ 404.259276][T14198] should_fail_ex+0x414/0x560 [ 404.259312][T14198] _copy_from_iter+0x1db/0x16f0 [ 404.259345][T14198] ? rcu_is_watching+0x15/0xb0 [ 404.259367][T14198] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 404.259390][T14198] ? __pfx__copy_from_iter+0x10/0x10 [ 404.259425][T14198] ? __local_bh_enable_ip+0x12d/0x1c0 [ 404.259445][T14198] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.259470][T14198] skb_copy_datagram_from_iter+0xf5/0x720 [ 404.259502][T14198] ? __lock_acquire+0xab9/0xd20 [ 404.259534][T14198] ? iov_iter_single_seg_count+0xc9/0x2f0 [ 404.259568][T14198] tun_get_user+0x15c3/0x3ce0 [ 404.259610][T14198] ? aa_file_perm+0x13e/0x11b0 [ 404.259637][T14198] ? aa_file_perm+0x3ed/0x11b0 [ 404.259664][T14198] ? __pfx_tun_get_user+0x10/0x10 [ 404.259701][T14198] ? __lock_acquire+0xab9/0xd20 [ 404.259736][T14198] ? ref_tracker_alloc+0x318/0x460 [ 404.259755][T14198] ? __lock_acquire+0xab9/0xd20 [ 404.259785][T14198] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 404.259812][T14198] ? tun_get+0x1c/0x2f0 [ 404.259846][T14198] ? tun_get+0x1c/0x2f0 [ 404.259871][T14198] ? tun_get+0x1c/0x2f0 [ 404.259902][T14198] tun_chr_write_iter+0x113/0x200 [ 404.259933][T14198] vfs_write+0x548/0xa90 [ 404.259959][T14198] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 404.259993][T14198] ? __pfx_vfs_write+0x10/0x10 [ 404.260027][T14198] ? __fget_files+0x2a/0x420 [ 404.260062][T14198] ksys_write+0x145/0x250 [ 404.260086][T14198] ? __pfx_ksys_write+0x10/0x10 [ 404.260114][T14198] ? do_syscall_64+0xbe/0x3b0 [ 404.260140][T14198] do_syscall_64+0xfa/0x3b0 [ 404.260159][T14198] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.260178][T14198] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.260195][T14198] ? clear_bhb_loop+0x60/0xb0 [ 404.260218][T14198] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.260236][T14198] RIP: 0033:0x7f06df58e929 [ 404.260248][T14198] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 404.260258][T14198] RSP: 002b:00007f06e04e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 404.260270][T14198] RAX: ffffffffffffffda RBX: 00007f06df7b5fa0 RCX: 00007f06df58e929 [ 404.260278][T14198] RDX: 0000000000000043 RSI: 00002000000001c0 RDI: 0000000000000003 [ 404.260285][T14198] RBP: 00007f06e04e2090 R08: 0000000000000000 R09: 0000000000000000 [ 404.260292][T14198] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.260298][T14198] R13: 0000000000000000 R14: 00007f06df7b5fa0 R15: 00007ffe715e4b78 [ 404.260314][T14198] [ 404.560827][ C0] vkms_vblank_simulate: vblank timer overrun [ 404.628132][T14200] raw_sendmsg: syz.1.2150 forgot to set AF_INET. Fix it! [ 404.702763][T14202] sp0: Synchronizing with TNC [ 404.711145][ T30] audit: type=1326 audit(1750860640.198:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14201 comm="syz.2.2151" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f06df58e929 code=0x0 [ 404.885433][ T43] gspca_ov534_9: reg_w failed -71 [ 405.206766][ T43] gspca_ov534_9: Unknown sensor 0000 [ 405.206856][ T43] ov534_9 1-1:0.0: probe with driver ov534_9 failed with error -22 [ 405.223964][ T43] usb 1-1: USB disconnect, device number 113 [ 405.563333][T14201] [U] è [ 406.229438][T14243] FAULT_INJECTION: forcing a failure. [ 406.229438][T14243] name failslab, interval 1, probability 0, space 0, times 0 [ 406.242591][T14243] CPU: 0 UID: 0 PID: 14243 Comm: syz.0.2160 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 406.242619][T14243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 406.242632][T14243] Call Trace: [ 406.242640][T14243] [ 406.242649][T14243] dump_stack_lvl+0x189/0x250 [ 406.242677][T14243] ? __pfx____ratelimit+0x10/0x10 [ 406.242698][T14243] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.242720][T14243] ? __pfx__printk+0x10/0x10 [ 406.242757][T14243] should_fail_ex+0x414/0x560 [ 406.242792][T14243] should_failslab+0xa8/0x100 [ 406.242826][T14243] kmem_cache_alloc_noprof+0x73/0x3c0 [ 406.242845][T14243] ? dst_alloc+0x105/0x170 [ 406.242877][T14243] dst_alloc+0x105/0x170 [ 406.242909][T14243] ip_route_input_rcu+0x138c/0x2ff0 [ 406.242946][T14243] ? ipt_do_table+0x13dd/0x1640 [ 406.242969][T14243] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 406.243003][T14243] ? __lock_acquire+0xab9/0xd20 [ 406.243039][T14243] ? ip_route_input_noref+0x98/0x250 [ 406.243066][T14243] ? ip_route_input_noref+0x98/0x250 [ 406.243093][T14243] ? ipt_do_table+0x2a3/0x1640 [ 406.243118][T14243] ? ip_route_input_noref+0x98/0x250 [ 406.243148][T14243] ip_route_input_noref+0x167/0x250 [ 406.243179][T14243] ? __pfx_ip_route_input_noref+0x10/0x10 [ 406.243213][T14243] ? nf_hook_slow_list+0x2af/0x390 [ 406.243233][T14243] ? ip_sublist_rcv+0x74c/0x9b0 [ 406.243260][T14243] ip_rcv_finish_core+0x5af/0x1c00 [ 406.243296][T14243] ip_sublist_rcv+0x397/0x9b0 [ 406.243333][T14243] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 406.243356][T14243] ? skb_orphan+0xaf/0xd0 [ 406.243389][T14243] ? __pfx_ip_rcv_finish+0x10/0x10 [ 406.243423][T14243] ip_list_rcv+0x3e2/0x430 [ 406.243455][T14243] ? __pfx_ip_list_rcv+0x10/0x10 [ 406.243480][T14243] ? kasan_save_track+0x4f/0x80 [ 406.243500][T14243] ? __pfx_ip_list_rcv+0x10/0x10 [ 406.243524][T14243] __netif_receive_skb_list_core+0x7d2/0x800 [ 406.243564][T14243] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 406.243596][T14243] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 406.243615][T14243] netif_receive_skb_list_internal+0x975/0xcc0 [ 406.243633][T14243] ? inet_gro_receive+0x904/0xcc0 [ 406.243654][T14243] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 406.243677][T14243] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 406.243695][T14243] ? dev_gro_receive+0x10f4/0x23b0 [ 406.243715][T14243] ? dev_gro_receive+0x1050/0x23b0 [ 406.243735][T14243] ? eth_type_trans+0x3a8/0x760 [ 406.243770][T14243] napi_complete_done+0x2f2/0x7c0 [ 406.243796][T14243] ? __pfx_napi_complete_done+0x10/0x10 [ 406.243812][T14243] ? rcu_is_watching+0x15/0xb0 [ 406.243836][T14243] ? napi_gro_frags+0x975/0x1030 [ 406.243866][T14243] ? tun_get_user+0x2549/0x3ce0 [ 406.243890][T14243] tun_get_user+0x27be/0x3ce0 [ 406.243917][T14243] ? tun_get_user+0x2549/0x3ce0 [ 406.243949][T14243] ? aa_file_perm+0x13e/0x11b0 [ 406.243973][T14243] ? aa_file_perm+0x3ed/0x11b0 [ 406.243999][T14243] ? __pfx_tun_get_user+0x10/0x10 [ 406.244036][T14243] ? __lock_acquire+0xab9/0xd20 [ 406.244069][T14243] ? ref_tracker_alloc+0x318/0x460 [ 406.244087][T14243] ? __lock_acquire+0xab9/0xd20 [ 406.244115][T14243] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 406.244142][T14243] ? tun_get+0x1c/0x2f0 [ 406.244176][T14243] ? tun_get+0x1c/0x2f0 [ 406.244202][T14243] ? tun_get+0x1c/0x2f0 [ 406.244234][T14243] tun_chr_write_iter+0x113/0x200 [ 406.244264][T14243] vfs_write+0x548/0xa90 [ 406.244288][T14243] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 406.244315][T14243] ? __pfx_vfs_write+0x10/0x10 [ 406.244345][T14243] ? __fget_files+0x2a/0x420 [ 406.244381][T14243] ksys_write+0x145/0x250 [ 406.244405][T14243] ? __pfx_ksys_write+0x10/0x10 [ 406.244423][T14243] ? rcu_is_watching+0x15/0xb0 [ 406.244449][T14243] ? do_syscall_64+0xbe/0x3b0 [ 406.244476][T14243] do_syscall_64+0xfa/0x3b0 [ 406.244496][T14243] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.244514][T14243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.244535][T14243] ? clear_bhb_loop+0x60/0xb0 [ 406.244558][T14243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.244576][T14243] RIP: 0033:0x7f249678e929 [ 406.244595][T14243] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.244613][T14243] RSP: 002b:00007f2497520038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 406.244635][T14243] RAX: ffffffffffffffda RBX: 00007f24969b5fa0 RCX: 00007f249678e929 [ 406.244651][T14243] RDX: 0000000000000043 RSI: 00002000000001c0 RDI: 0000000000000003 [ 406.244664][T14243] RBP: 00007f2497520090 R08: 0000000000000000 R09: 0000000000000000 [ 406.244677][T14243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.244687][T14243] R13: 0000000000000000 R14: 00007f24969b5fa0 R15: 00007ffeaaeca568 [ 406.244719][T14243] [ 406.703194][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.727152][T14247] FAULT_INJECTION: forcing a failure. [ 406.727152][T14247] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 406.743929][T14247] CPU: 1 UID: 0 PID: 14247 Comm: syz.2.2161 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 406.743946][T14247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 406.743954][T14247] Call Trace: [ 406.743962][T14247] [ 406.743971][T14247] dump_stack_lvl+0x189/0x250 [ 406.743997][T14247] ? __pfx____ratelimit+0x10/0x10 [ 406.744025][T14247] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.744047][T14247] ? __pfx__printk+0x10/0x10 [ 406.744065][T14247] ? fs_reclaim_acquire+0x7d/0x100 [ 406.744082][T14247] should_fail_ex+0x414/0x560 [ 406.744101][T14247] prepare_alloc_pages+0x213/0x610 [ 406.744118][T14247] __alloc_frozen_pages_noprof+0x123/0x370 [ 406.744133][T14247] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 406.744155][T14247] alloc_pages_mpol+0x232/0x4a0 [ 406.744169][T14247] alloc_pages_noprof+0xa9/0x190 [ 406.744181][T14247] folio_alloc_noprof+0x1e/0x30 [ 406.744192][T14247] filemap_alloc_folio_noprof+0xdf/0x470 [ 406.744206][T14247] ? filemap_get_read_batch+0xc4/0x7b0 [ 406.744222][T14247] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 406.744232][T14247] ? stack_trace_save+0x9c/0xe0 [ 406.744248][T14247] ? page_cache_sync_ra+0x2d6/0xb10 [ 406.744264][T14247] filemap_get_pages+0xa90/0x1ea0 [ 406.744277][T14247] ? __kasan_slab_free+0x62/0x70 [ 406.744287][T14247] ? iter_file_splice_write+0xe55/0x1000 [ 406.744299][T14247] ? splice_direct_to_actor+0x5a5/0xcc0 [ 406.744313][T14247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.744333][T14247] ? __pfx_filemap_get_pages+0x10/0x10 [ 406.744350][T14247] ? __pfx___might_resched+0x10/0x10 [ 406.744364][T14247] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.744379][T14247] filemap_splice_read+0x4fc/0xbc0 [ 406.744403][T14247] ? __pfx_filemap_splice_read+0x10/0x10 [ 406.744440][T14247] ? __pfx_iter_file_splice_write+0x10/0x10 [ 406.744464][T14247] ? file_end_write+0x156/0x250 [ 406.744487][T14247] ? direct_splice_actor+0x10c/0x160 [ 406.744508][T14247] ? __pfx_filemap_splice_read+0x10/0x10 [ 406.744521][T14247] splice_direct_to_actor+0x4a6/0xcc0 [ 406.744543][T14247] ? __pfx_direct_splice_actor+0x10/0x10 [ 406.744555][T14247] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 406.744573][T14247] do_splice_direct+0x181/0x270 [ 406.744586][T14247] ? __pfx_do_splice_direct+0x10/0x10 [ 406.744599][T14247] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 406.744616][T14247] ? rw_verify_area+0x258/0x650 [ 406.744629][T14247] do_sendfile+0x4da/0x7e0 [ 406.744642][T14247] ? __pfx_vfs_write+0x10/0x10 [ 406.744656][T14247] ? __pfx_do_sendfile+0x10/0x10 [ 406.744670][T14247] ? __fget_files+0x3a0/0x420 [ 406.744689][T14247] __se_sys_sendfile64+0x13e/0x190 [ 406.744703][T14247] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 406.744715][T14247] ? rcu_is_watching+0x15/0xb0 [ 406.744728][T14247] ? do_syscall_64+0xbe/0x3b0 [ 406.744742][T14247] do_syscall_64+0xfa/0x3b0 [ 406.744752][T14247] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.744767][T14247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.744781][T14247] ? clear_bhb_loop+0x60/0xb0 [ 406.744798][T14247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.744808][T14247] RIP: 0033:0x7f06df58e929 [ 406.744818][T14247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.744828][T14247] RSP: 002b:00007f06e04e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 406.744840][T14247] RAX: ffffffffffffffda RBX: 00007f06df7b5fa0 RCX: 00007f06df58e929 [ 406.744848][T14247] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 406.744855][T14247] RBP: 00007f06e04e2090 R08: 0000000000000000 R09: 0000000000000000 [ 406.744861][T14247] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000002 [ 406.744869][T14247] R13: 0000000000000000 R14: 00007f06df7b5fa0 R15: 00007ffe715e4b78 [ 406.744884][T14247] [ 407.311948][T14252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.347937][T14252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.361039][T14252] QAT: Invalid ioctl 21531 [ 407.399289][T14259] XFS (rnullb0): Invalid superblock magic number [ 407.810024][T14284] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2172'. [ 408.062744][T14301] Invalid source name [ 408.068957][T14301] UBIFS error (pid: 14301): cannot open "/dev/rnullb0", error -22 [ 408.116000][T14302] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 408.175182][T14306] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 408.419515][T14313] netlink: 'syz.0.2179': attribute type 17 has an invalid length. [ 408.432176][T14313] netlink: 'syz.0.2179': attribute type 16 has an invalid length. [ 408.441526][ T1633] hid-generic 0000:0000:0000.0054: unknown main item tag 0x0 [ 408.450868][T14313] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2179'. [ 408.456419][ T1633] hid-generic 0000:0000:0000.0054: hidraw0: HID v0.00 Device [syz1] on syz0 [ 408.481616][T14317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2180'. [ 408.571285][T14322] Mount JFS Failure: -22 [ 408.583072][T14324] Mount JFS Failure: -22 [ 408.800386][T14332] vxfs: WRONG superblock magic 00000000 at 1 [ 408.814648][T14332] vxfs: WRONG superblock magic 00000000 at 8 [ 408.822720][T14332] vxfs: can't find superblock. [ 409.032043][T14347] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 409.039567][T14350] FAULT_INJECTION: forcing a failure. [ 409.039567][T14350] name failslab, interval 1, probability 0, space 0, times 0 [ 409.041363][T14348] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 409.052858][T14350] CPU: 1 UID: 0 PID: 14350 Comm: syz.4.2190 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 409.052880][T14350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 409.052892][T14350] Call Trace: [ 409.052902][T14350] [ 409.052911][T14350] dump_stack_lvl+0x189/0x250 [ 409.052939][T14350] ? __pfx____ratelimit+0x10/0x10 [ 409.052960][T14350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.052982][T14350] ? __pfx__printk+0x10/0x10 [ 409.053009][T14350] ? __pfx_call_rcu+0x10/0x10 [ 409.053037][T14350] should_fail_ex+0x414/0x560 [ 409.053072][T14350] should_failslab+0xa8/0x100 [ 409.053097][T14350] __kmalloc_noprof+0xcb/0x4f0 [ 409.053115][T14350] ? metadata_dst_alloc+0x2c/0x3d0 [ 409.053140][T14350] metadata_dst_alloc+0x2c/0x3d0 [ 409.053161][T14350] __ipgre_rcv+0x465/0xa20 [ 409.053191][T14350] gre_rcv+0xc13/0x13f0 [ 409.053233][T14350] ? __pfx_gre_rcv+0x10/0x10 [ 409.053262][T14350] ? gre_rcv+0xdb/0x470 [ 409.053287][T14350] ? gre_rcv+0xdb/0x470 [ 409.053323][T14350] ? gre_rcv+0xdb/0x470 [ 409.053346][T14350] gre_rcv+0x1f4/0x470 [ 409.053369][T14350] ? __pfx_gre_rcv+0x10/0x10 [ 409.053395][T14350] ip_protocol_deliver_rcu+0x2dd/0x440 [ 409.053420][T14350] ? ip_local_deliver_finish+0x1fa/0x580 [ 409.053444][T14350] ip_local_deliver_finish+0x2fb/0x580 [ 409.053474][T14350] NF_HOOK+0x309/0x3a0 [ 409.053495][T14350] ? __pfx_ip_route_input_noref+0x10/0x10 [ 409.053522][T14350] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 409.053544][T14350] ? NF_HOOK+0x9a/0x3a0 [ 409.053564][T14350] ? __pfx_NF_HOOK+0x10/0x10 [ 409.053587][T14350] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 409.053615][T14350] ? ip_local_deliver+0x12a/0x1b0 [ 409.053641][T14350] ip_sublist_rcv_finish+0x21d/0x2a0 [ 409.053670][T14350] ip_sublist_rcv+0x6e7/0x9b0 [ 409.053706][T14350] ? __pfx_ip_sublist_rcv+0x10/0x10 [ 409.053729][T14350] ? skb_orphan+0xaf/0xd0 [ 409.053753][T14350] ? __pfx_ip_rcv_finish+0x10/0x10 [ 409.053788][T14350] ip_list_rcv+0x3e2/0x430 [ 409.053826][T14350] ? __pfx_ip_list_rcv+0x10/0x10 [ 409.053851][T14350] ? kasan_save_track+0x4f/0x80 [ 409.053870][T14350] ? __pfx_ip_list_rcv+0x10/0x10 [ 409.053893][T14350] __netif_receive_skb_list_core+0x7d2/0x800 [ 409.053929][T14350] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 409.053961][T14350] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 409.053981][T14350] netif_receive_skb_list_internal+0x975/0xcc0 [ 409.053999][T14350] ? inet_gro_receive+0x904/0xcc0 [ 409.054022][T14350] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 409.054046][T14350] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 409.054065][T14350] ? dev_gro_receive+0x10f4/0x23b0 [ 409.054088][T14350] ? dev_gro_receive+0x1050/0x23b0 [ 409.054110][T14350] ? eth_type_trans+0x3a8/0x760 [ 409.054148][T14350] napi_complete_done+0x2f2/0x7c0 [ 409.054174][T14350] ? __pfx_napi_complete_done+0x10/0x10 [ 409.054192][T14350] ? rcu_is_watching+0x15/0xb0 [ 409.054211][T14350] ? napi_gro_frags+0x975/0x1030 [ 409.054245][T14350] ? tun_get_user+0x2549/0x3ce0 [ 409.054272][T14350] tun_get_user+0x27be/0x3ce0 [ 409.054302][T14350] ? tun_get_user+0x2549/0x3ce0 [ 409.054336][T14350] ? aa_file_perm+0x13e/0x11b0 [ 409.054361][T14350] ? aa_file_perm+0x3ed/0x11b0 [ 409.054387][T14350] ? __pfx_tun_get_user+0x10/0x10 [ 409.054423][T14350] ? __lock_acquire+0xab9/0xd20 [ 409.054457][T14350] ? ref_tracker_alloc+0x318/0x460 [ 409.054475][T14350] ? __lock_acquire+0xab9/0xd20 [ 409.054505][T14350] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 409.054531][T14350] ? tun_get+0x1c/0x2f0 [ 409.054564][T14350] ? tun_get+0x1c/0x2f0 [ 409.054588][T14350] ? tun_get+0x1c/0x2f0 [ 409.054620][T14350] tun_chr_write_iter+0x113/0x200 [ 409.054650][T14350] vfs_write+0x548/0xa90 [ 409.054676][T14350] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 409.054703][T14350] ? __pfx_vfs_write+0x10/0x10 [ 409.054736][T14350] ? __fget_files+0x2a/0x420 [ 409.054770][T14350] ksys_write+0x145/0x250 [ 409.054794][T14350] ? __pfx_ksys_write+0x10/0x10 [ 409.054813][T14350] ? rcu_is_watching+0x15/0xb0 [ 409.054845][T14350] ? do_syscall_64+0xbe/0x3b0 [ 409.054872][T14350] do_syscall_64+0xfa/0x3b0 [ 409.054892][T14350] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.054912][T14350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.054932][T14350] ? clear_bhb_loop+0x60/0xb0 [ 409.054956][T14350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.054975][T14350] RIP: 0033:0x7f020598e929 [ 409.054993][T14350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.055010][T14350] RSP: 002b:00007f02037f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 409.055030][T14350] RAX: ffffffffffffffda RBX: 00007f0205bb5fa0 RCX: 00007f020598e929 [ 409.055045][T14350] RDX: 0000000000000043 RSI: 00002000000001c0 RDI: 0000000000000003 [ 409.055058][T14350] RBP: 00007f02037f6090 R08: 0000000000000000 R09: 0000000000000000 [ 409.055071][T14350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.055083][T14350] R13: 0000000000000000 R14: 00007f0205bb5fa0 R15: 00007ffc4d667158 [ 409.055118][T14350] [ 409.928502][T14368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.951472][T14368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.965930][T14371] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2195'. [ 409.990973][T14373] FAULT_INJECTION: forcing a failure. [ 409.990973][T14373] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 410.011398][T14373] CPU: 1 UID: 0 PID: 14373 Comm: syz.1.2194 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 410.011427][T14373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 410.011440][T14373] Call Trace: [ 410.011448][T14373] [ 410.011457][T14373] dump_stack_lvl+0x189/0x250 [ 410.011533][T14373] ? __pfx____ratelimit+0x10/0x10 [ 410.011553][T14373] ? __pfx_dump_stack_lvl+0x10/0x10 [ 410.011573][T14373] ? __pfx__printk+0x10/0x10 [ 410.011595][T14373] ? fs_reclaim_acquire+0x7d/0x100 [ 410.011625][T14373] should_fail_ex+0x414/0x560 [ 410.011658][T14373] prepare_alloc_pages+0x213/0x610 [ 410.011688][T14373] __alloc_frozen_pages_noprof+0x123/0x370 [ 410.011716][T14373] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 410.011756][T14373] alloc_pages_mpol+0x232/0x4a0 [ 410.011784][T14373] alloc_pages_noprof+0xa9/0x190 [ 410.011806][T14373] folio_alloc_noprof+0x1e/0x30 [ 410.011826][T14373] filemap_alloc_folio_noprof+0xdf/0x470 [ 410.011852][T14373] ? filemap_get_read_batch+0xc4/0x7b0 [ 410.011882][T14373] ? folios_put_refs+0x560/0x640 [ 410.011907][T14373] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 410.011935][T14373] ? page_cache_sync_ra+0x2d6/0xb10 [ 410.011967][T14373] filemap_get_pages+0xa90/0x1ea0 [ 410.011996][T14373] ? __pfx_lru_add+0x10/0x10 [ 410.012036][T14373] ? __pfx_filemap_get_pages+0x10/0x10 [ 410.012060][T14373] ? folios_put_refs+0x560/0x640 [ 410.012087][T14373] ? __pfx___might_resched+0x10/0x10 [ 410.012114][T14373] ? mlock_drain_local+0x79/0x490 [ 410.012136][T14373] ? mlock_drain_local+0x28e/0x490 [ 410.012165][T14373] filemap_splice_read+0x4fc/0xbc0 [ 410.012209][T14373] ? __pfx_filemap_splice_read+0x10/0x10 [ 410.012256][T14373] ? __pfx_iter_file_splice_write+0x10/0x10 [ 410.012281][T14373] ? file_end_write+0x156/0x250 [ 410.012304][T14373] ? direct_splice_actor+0x10c/0x160 [ 410.012329][T14373] ? __pfx_filemap_splice_read+0x10/0x10 [ 410.012350][T14373] splice_direct_to_actor+0x4a6/0xcc0 [ 410.012391][T14373] ? __pfx_direct_splice_actor+0x10/0x10 [ 410.012414][T14373] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 410.012448][T14373] do_splice_direct+0x181/0x270 [ 410.012474][T14373] ? __pfx_do_splice_direct+0x10/0x10 [ 410.012506][T14373] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 410.012538][T14373] ? rw_verify_area+0x258/0x650 [ 410.012563][T14373] do_sendfile+0x4da/0x7e0 [ 410.012589][T14373] ? __pfx_vfs_write+0x10/0x10 [ 410.012617][T14373] ? __pfx_do_sendfile+0x10/0x10 [ 410.012643][T14373] ? __fget_files+0x3a0/0x420 [ 410.012679][T14373] __se_sys_sendfile64+0x13e/0x190 [ 410.012707][T14373] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 410.012731][T14373] ? rcu_is_watching+0x15/0xb0 [ 410.012751][T14373] ? do_syscall_64+0xbe/0x3b0 [ 410.012777][T14373] do_syscall_64+0xfa/0x3b0 [ 410.012798][T14373] ? lockdep_hardirqs_on+0x9c/0x150 [ 410.012818][T14373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.012838][T14373] ? clear_bhb_loop+0x60/0xb0 [ 410.012862][T14373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.012882][T14373] RIP: 0033:0x7fd91a38e929 [ 410.012900][T14373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.012918][T14373] RSP: 002b:00007fd91b14c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 410.012939][T14373] RAX: ffffffffffffffda RBX: 00007fd91a5b5fa0 RCX: 00007fd91a38e929 [ 410.012954][T14373] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 410.012967][T14373] RBP: 00007fd91b14c090 R08: 0000000000000000 R09: 0000000000000000 [ 410.012979][T14373] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000002 [ 410.012993][T14373] R13: 0000000000000000 R14: 00007fd91a5b5fa0 R15: 00007ffefeac2398 [ 410.013022][T14373] [ 410.614905][T14385] bio_check_eod: 3 callbacks suppressed [ 410.614918][T14385] syz.2.2197: attempt to access beyond end of device [ 410.614918][T14385] nbd2: rw=0, sector=2, nr_sectors = 1 limit=0 [ 410.741826][ T979] hid-generic 0000:0000:0000.0055: unknown main item tag 0x0 [ 410.773178][ T979] hid-generic 0000:0000:0000.0055: hidraw0: HID v0.00 Device [syz1] on syz0 [ 410.838450][ T77] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.024897][T14409] FAT-fs (rnullb0): bogus number of reserved sectors [ 411.032077][T14409] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 411.102630][T14413] FAULT_INJECTION: forcing a failure. [ 411.102630][T14413] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 411.130102][T14413] CPU: 0 UID: 0 PID: 14413 Comm: syz.2.2205 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 411.130129][T14413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.130140][T14413] Call Trace: [ 411.130147][T14413] [ 411.130156][T14413] dump_stack_lvl+0x189/0x250 [ 411.130183][T14413] ? __pfx____ratelimit+0x10/0x10 [ 411.130202][T14413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 411.130241][T14413] ? __pfx__printk+0x10/0x10 [ 411.130264][T14413] ? fs_reclaim_acquire+0x7d/0x100 [ 411.130295][T14413] should_fail_ex+0x414/0x560 [ 411.130330][T14413] prepare_alloc_pages+0x213/0x610 [ 411.130369][T14413] __alloc_frozen_pages_noprof+0x123/0x370 [ 411.130397][T14413] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 411.130433][T14413] alloc_pages_mpol+0x232/0x4a0 [ 411.130456][T14413] alloc_pages_noprof+0xa9/0x190 [ 411.130479][T14413] folio_alloc_noprof+0x1e/0x30 [ 411.130498][T14413] filemap_alloc_folio_noprof+0xdf/0x470 [ 411.130523][T14413] ? filemap_get_read_batch+0xc4/0x7b0 [ 411.130550][T14413] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 411.130569][T14413] ? __up_read+0x280/0x680 [ 411.130594][T14413] ? page_cache_sync_ra+0x2d6/0xb10 [ 411.130621][T14413] filemap_get_pages+0xa90/0x1ea0 [ 411.130649][T14413] ? __pfx_lru_add+0x10/0x10 [ 411.130690][T14413] ? __pfx_filemap_get_pages+0x10/0x10 [ 411.130713][T14413] ? folios_put_refs+0x560/0x640 [ 411.130740][T14413] ? __pfx___might_resched+0x10/0x10 [ 411.130775][T14413] filemap_splice_read+0x4fc/0xbc0 [ 411.130816][T14413] ? __pfx_filemap_splice_read+0x10/0x10 [ 411.130861][T14413] ? __pfx_iter_file_splice_write+0x10/0x10 [ 411.130885][T14413] ? file_end_write+0x156/0x250 [ 411.130910][T14413] ? direct_splice_actor+0x10c/0x160 [ 411.130933][T14413] ? __pfx_filemap_splice_read+0x10/0x10 [ 411.130956][T14413] splice_direct_to_actor+0x4a6/0xcc0 [ 411.130998][T14413] ? __pfx_direct_splice_actor+0x10/0x10 [ 411.131022][T14413] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 411.131054][T14413] do_splice_direct+0x181/0x270 [ 411.131079][T14413] ? __pfx_do_splice_direct+0x10/0x10 [ 411.131101][T14413] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 411.131130][T14413] ? rw_verify_area+0x258/0x650 [ 411.131154][T14413] do_sendfile+0x4da/0x7e0 [ 411.131181][T14413] ? __pfx_vfs_write+0x10/0x10 [ 411.131207][T14413] ? __pfx_do_sendfile+0x10/0x10 [ 411.131234][T14413] ? __fget_files+0x3a0/0x420 [ 411.131268][T14413] __se_sys_sendfile64+0x13e/0x190 [ 411.131295][T14413] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 411.131326][T14413] ? do_syscall_64+0xbe/0x3b0 [ 411.131361][T14413] do_syscall_64+0xfa/0x3b0 [ 411.131379][T14413] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.131398][T14413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.131416][T14413] ? clear_bhb_loop+0x60/0xb0 [ 411.131439][T14413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.131458][T14413] RIP: 0033:0x7f06df58e929 [ 411.131476][T14413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.131495][T14413] RSP: 002b:00007f06e04e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 411.131516][T14413] RAX: ffffffffffffffda RBX: 00007f06df7b5fa0 RCX: 00007f06df58e929 [ 411.131531][T14413] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 411.131544][T14413] RBP: 00007f06e04e2090 R08: 0000000000000000 R09: 0000000000000000 [ 411.131558][T14413] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000002 [ 411.131571][T14413] R13: 0000000000000000 R14: 00007f06df7b5fa0 R15: 00007ffe715e4b78 [ 411.131600][T14413] [ 411.579008][T14419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2208'. [ 411.596483][T14419] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 411.611409][T14421] ubi0: attaching mtd0 [ 411.615731][T14421] ubi0 error: ubi_attach_mtd_dev: bad VID header (1) or data offsets (65) [ 411.851561][T14435] /dev/rnullb0: Can't open blockdev [ 412.138768][T14449] /dev/rnullb0: Can't open blockdev [ 412.237598][ T1633] hid-generic 0000:0000:0000.0056: unknown main item tag 0x0 [ 412.254897][ T1633] hid-generic 0000:0000:0000.0056: hidraw0: HID v0.00 Device [syz1] on syz0 [ 412.298921][T14461] FAULT_INJECTION: forcing a failure. [ 412.298921][T14461] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 412.335908][T14461] CPU: 1 UID: 0 PID: 14461 Comm: syz.0.2220 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 412.335937][T14461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 412.335951][T14461] Call Trace: [ 412.335960][T14461] [ 412.335969][T14461] dump_stack_lvl+0x189/0x250 [ 412.335996][T14461] ? __pfx____ratelimit+0x10/0x10 [ 412.336018][T14461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.336040][T14461] ? __pfx__printk+0x10/0x10 [ 412.336063][T14461] ? fs_reclaim_acquire+0x7d/0x100 [ 412.336093][T14461] should_fail_ex+0x414/0x560 [ 412.336127][T14461] prepare_alloc_pages+0x213/0x610 [ 412.336157][T14461] __alloc_frozen_pages_noprof+0x123/0x370 [ 412.336185][T14461] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 412.336225][T14461] alloc_pages_mpol+0x232/0x4a0 [ 412.336248][T14461] alloc_pages_noprof+0xa9/0x190 [ 412.336268][T14461] folio_alloc_noprof+0x1e/0x30 [ 412.336284][T14461] filemap_alloc_folio_noprof+0xdf/0x470 [ 412.336311][T14461] ? filemap_get_read_batch+0xc4/0x7b0 [ 412.336339][T14461] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 412.336359][T14461] ? __up_read+0x280/0x680 [ 412.336384][T14461] ? page_cache_sync_ra+0x2d6/0xb10 [ 412.336414][T14461] filemap_get_pages+0xa90/0x1ea0 [ 412.336444][T14461] ? __pfx_lru_add+0x10/0x10 [ 412.336493][T14461] ? __pfx_filemap_get_pages+0x10/0x10 [ 412.336517][T14461] ? folios_put_refs+0x560/0x640 [ 412.336546][T14461] ? __pfx___might_resched+0x10/0x10 [ 412.336581][T14461] filemap_splice_read+0x4fc/0xbc0 [ 412.336626][T14461] ? __pfx_filemap_splice_read+0x10/0x10 [ 412.336673][T14461] ? __pfx_iter_file_splice_write+0x10/0x10 [ 412.336697][T14461] ? file_end_write+0x156/0x250 [ 412.336722][T14461] ? direct_splice_actor+0x10c/0x160 [ 412.336747][T14461] ? __pfx_filemap_splice_read+0x10/0x10 [ 412.336771][T14461] splice_direct_to_actor+0x4a6/0xcc0 [ 412.336814][T14461] ? __pfx_direct_splice_actor+0x10/0x10 [ 412.336836][T14461] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 412.336868][T14461] do_splice_direct+0x181/0x270 [ 412.336895][T14461] ? __pfx_do_splice_direct+0x10/0x10 [ 412.336919][T14461] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 412.336951][T14461] ? rw_verify_area+0x258/0x650 [ 412.336976][T14461] do_sendfile+0x4da/0x7e0 [ 412.337002][T14461] ? __pfx_vfs_write+0x10/0x10 [ 412.337028][T14461] ? __pfx_do_sendfile+0x10/0x10 [ 412.337054][T14461] ? __fget_files+0x3a0/0x420 [ 412.337091][T14461] __se_sys_sendfile64+0x13e/0x190 [ 412.337118][T14461] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 412.337140][T14461] ? rcu_is_watching+0x15/0xb0 [ 412.337168][T14461] ? do_syscall_64+0xbe/0x3b0 [ 412.337194][T14461] do_syscall_64+0xfa/0x3b0 [ 412.337215][T14461] ? lockdep_hardirqs_on+0x9c/0x150 [ 412.337234][T14461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.337254][T14461] ? clear_bhb_loop+0x60/0xb0 [ 412.337275][T14461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.337291][T14461] RIP: 0033:0x7f249678e929 [ 412.337308][T14461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.337324][T14461] RSP: 002b:00007f2497520038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 412.337344][T14461] RAX: ffffffffffffffda RBX: 00007f24969b5fa0 RCX: 00007f249678e929 [ 412.337359][T14461] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 412.337369][T14461] RBP: 00007f2497520090 R08: 0000000000000000 R09: 0000000000000000 [ 412.337382][T14461] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000002 [ 412.337395][T14461] R13: 0000000000000000 R14: 00007f24969b5fa0 R15: 00007ffeaaeca568 [ 412.337422][T14461] [ 412.358781][ T30] audit: type=1800 audit(1750860647.335:88): pid=14458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2219" name="file1" dev="overlay" ino=3029 res=0 errno=0 [ 412.418834][T14465] ./cgroup: Can't lookup blockdev [ 412.590542][T14466] ./cgroup: Can't lookup blockdev [ 413.458961][T14500] FAULT_INJECTION: forcing a failure. [ 413.458961][T14500] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 413.476907][T14500] CPU: 1 UID: 0 PID: 14500 Comm: syz.0.2231 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 413.476936][T14500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 413.476949][T14500] Call Trace: [ 413.476958][T14500] [ 413.476967][T14500] dump_stack_lvl+0x189/0x250 [ 413.476994][T14500] ? __pfx____ratelimit+0x10/0x10 [ 413.477016][T14500] ? __pfx_dump_stack_lvl+0x10/0x10 [ 413.477039][T14500] ? __pfx__printk+0x10/0x10 [ 413.477063][T14500] ? fs_reclaim_acquire+0x7d/0x100 [ 413.477096][T14500] should_fail_ex+0x414/0x560 [ 413.477132][T14500] prepare_alloc_pages+0x213/0x610 [ 413.477164][T14500] __alloc_frozen_pages_noprof+0x123/0x370 [ 413.477203][T14500] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 413.477246][T14500] alloc_pages_mpol+0x232/0x4a0 [ 413.477273][T14500] alloc_pages_noprof+0xa9/0x190 [ 413.477297][T14500] folio_alloc_noprof+0x1e/0x30 [ 413.477322][T14500] filemap_alloc_folio_noprof+0xdf/0x470 [ 413.477349][T14500] ? filemap_get_read_batch+0xc4/0x7b0 [ 413.477378][T14500] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 413.477400][T14500] ? __up_read+0x280/0x680 [ 413.477426][T14500] ? page_cache_sync_ra+0x2d6/0xb10 [ 413.477458][T14500] filemap_get_pages+0xa90/0x1ea0 [ 413.477490][T14500] ? __pfx_lru_add+0x10/0x10 [ 413.477534][T14500] ? __pfx_filemap_get_pages+0x10/0x10 [ 413.477561][T14500] ? folios_put_refs+0x560/0x640 [ 413.477590][T14500] ? __pfx___might_resched+0x10/0x10 [ 413.477628][T14500] filemap_splice_read+0x4fc/0xbc0 [ 413.477676][T14500] ? __pfx_filemap_splice_read+0x10/0x10 [ 413.477725][T14500] ? __pfx_iter_file_splice_write+0x10/0x10 [ 413.477751][T14500] ? file_end_write+0x156/0x250 [ 413.477775][T14500] ? direct_splice_actor+0x10c/0x160 [ 413.477800][T14500] ? __pfx_filemap_splice_read+0x10/0x10 [ 413.477824][T14500] splice_direct_to_actor+0x4a6/0xcc0 [ 413.477867][T14500] ? __pfx_direct_splice_actor+0x10/0x10 [ 413.477890][T14500] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 413.477926][T14500] do_splice_direct+0x181/0x270 [ 413.477953][T14500] ? __pfx_do_splice_direct+0x10/0x10 [ 413.477978][T14500] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 413.478009][T14500] ? rw_verify_area+0x258/0x650 [ 413.478034][T14500] do_sendfile+0x4da/0x7e0 [ 413.478061][T14500] ? __pfx_vfs_write+0x10/0x10 [ 413.478089][T14500] ? __pfx_do_sendfile+0x10/0x10 [ 413.478115][T14500] ? __fget_files+0x3a0/0x420 [ 413.478151][T14500] __se_sys_sendfile64+0x13e/0x190 [ 413.478187][T14500] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 413.478219][T14500] ? do_syscall_64+0xbe/0x3b0 [ 413.478245][T14500] do_syscall_64+0xfa/0x3b0 [ 413.478266][T14500] ? lockdep_hardirqs_on+0x9c/0x150 [ 413.478288][T14500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.478307][T14500] ? clear_bhb_loop+0x60/0xb0 [ 413.478331][T14500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.478351][T14500] RIP: 0033:0x7f249678e929 [ 413.478368][T14500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.478386][T14500] RSP: 002b:00007f2497520038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 413.478408][T14500] RAX: ffffffffffffffda RBX: 00007f24969b5fa0 RCX: 00007f249678e929 [ 413.478424][T14500] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 413.478435][T14500] RBP: 00007f2497520090 R08: 0000000000000000 R09: 0000000000000000 [ 413.478448][T14500] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000002 [ 413.478459][T14500] R13: 0000000000000000 R14: 00007f24969b5fa0 R15: 00007ffeaaeca568 [ 413.478488][T14500] [ 413.479972][T14502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.866614][T14502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.910818][T14502] hfs: can't find a HFS filesystem on dev rnullb0 [ 414.026326][T14519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.035943][T14519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.066150][T14522] cgroup: none used incorrectly [ 414.120296][T14525] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 414.128304][T14525] UDF-fs: Scanning with blocksize 4096 failed [ 414.328194][T14536] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 414.365233][T14535] syzkaller0: entered promiscuous mode [ 414.370786][T14535] syzkaller0: entered allmulticast mode [ 414.378046][ T77] syzkaller0: tun_net_xmit 48 [ 414.384507][T14535] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 414.390510][T14535] syzkaller0: Linktype set failed because interface is up [ 414.397669][T14536] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 414.403781][T14536] syzkaller0: Linktype set failed because interface is up [ 414.539650][ T5885] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 414.705226][ T5885] usb 1-1: config 1 interface 0 has no altsetting 0 [ 414.714388][ T5885] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 414.724088][ T5885] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.733524][ T5885] usb 1-1: Product: syz [ 414.737788][ T5885] usb 1-1: Manufacturer: syz [ 414.742444][ T5885] usb 1-1: SerialNumber: syz [ 414.900985][T14550] FAULT_INJECTION: forcing a failure. [ 414.900985][T14550] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 414.917730][T14550] CPU: 1 UID: 0 PID: 14550 Comm: syz.1.2243 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 414.917758][T14550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 414.917771][T14550] Call Trace: [ 414.917778][T14550] [ 414.917787][T14550] dump_stack_lvl+0x189/0x250 [ 414.917816][T14550] ? __pfx____ratelimit+0x10/0x10 [ 414.917838][T14550] ? __pfx_dump_stack_lvl+0x10/0x10 [ 414.917859][T14550] ? __pfx__printk+0x10/0x10 [ 414.917882][T14550] ? fs_reclaim_acquire+0x7d/0x100 [ 414.917914][T14550] should_fail_ex+0x414/0x560 [ 414.917949][T14550] prepare_alloc_pages+0x213/0x610 [ 414.917981][T14550] __alloc_frozen_pages_noprof+0x123/0x370 [ 414.918010][T14550] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 414.918048][T14550] alloc_pages_mpol+0x232/0x4a0 [ 414.918074][T14550] alloc_pages_noprof+0xa9/0x190 [ 414.918098][T14550] folio_alloc_noprof+0x1e/0x30 [ 414.918118][T14550] filemap_alloc_folio_noprof+0xdf/0x470 [ 414.918143][T14550] ? filemap_get_read_batch+0xc4/0x7b0 [ 414.918173][T14550] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 414.918194][T14550] ? __up_read+0x280/0x680 [ 414.918220][T14550] ? page_cache_sync_ra+0x2d6/0xb10 [ 414.918252][T14550] filemap_get_pages+0xa90/0x1ea0 [ 414.918289][T14550] ? __pfx_lru_add+0x10/0x10 [ 414.918333][T14550] ? __pfx_filemap_get_pages+0x10/0x10 [ 414.918360][T14550] ? folios_put_refs+0x560/0x640 [ 414.918389][T14550] ? __pfx___might_resched+0x10/0x10 [ 414.918426][T14550] filemap_splice_read+0x4fc/0xbc0 [ 414.918473][T14550] ? __pfx_filemap_splice_read+0x10/0x10 [ 414.918521][T14550] ? __pfx_iter_file_splice_write+0x10/0x10 [ 414.918547][T14550] ? file_end_write+0x156/0x250 [ 414.918571][T14550] ? direct_splice_actor+0x10c/0x160 [ 414.918598][T14550] ? __pfx_filemap_splice_read+0x10/0x10 [ 414.918622][T14550] splice_direct_to_actor+0x4a6/0xcc0 [ 414.918663][T14550] ? __pfx_direct_splice_actor+0x10/0x10 [ 414.918686][T14550] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 414.918723][T14550] do_splice_direct+0x181/0x270 [ 414.918749][T14550] ? __pfx_do_splice_direct+0x10/0x10 [ 414.918773][T14550] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 414.918804][T14550] ? rw_verify_area+0x258/0x650 [ 414.918828][T14550] do_sendfile+0x4da/0x7e0 [ 414.918854][T14550] ? __pfx_vfs_write+0x10/0x10 [ 414.918880][T14550] ? __pfx_do_sendfile+0x10/0x10 [ 414.918905][T14550] ? __fget_files+0x3a0/0x420 [ 414.918940][T14550] __se_sys_sendfile64+0x13e/0x190 [ 414.918966][T14550] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 414.918989][T14550] ? rcu_is_watching+0x15/0xb0 [ 414.919010][T14550] ? do_syscall_64+0xbe/0x3b0 [ 414.919035][T14550] do_syscall_64+0xfa/0x3b0 [ 414.919055][T14550] ? lockdep_hardirqs_on+0x9c/0x150 [ 414.919077][T14550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.919096][T14550] ? clear_bhb_loop+0x60/0xb0 [ 414.919120][T14550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.919139][T14550] RIP: 0033:0x7fd91a38e929 [ 414.919157][T14550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.919174][T14550] RSP: 002b:00007fd91b14c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 414.919195][T14550] RAX: ffffffffffffffda RBX: 00007fd91a5b5fa0 RCX: 00007fd91a38e929 [ 414.919211][T14550] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 414.919223][T14550] RBP: 00007fd91b14c090 R08: 0000000000000000 R09: 0000000000000000 [ 414.919237][T14550] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000002 [ 414.919251][T14550] R13: 0000000000000000 R14: 00007fd91a5b5fa0 R15: 00007ffefeac2398 [ 414.919287][T14550] [ 415.184385][T14533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.288369][T14533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.300614][T14558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.316011][T14558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.342632][T14533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.374759][T14533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.530072][T14568] No control pipe specified [ 416.418673][T14579] block device autoloading is deprecated and will be removed. [ 416.791390][T14594] FAULT_INJECTION: forcing a failure. [ 416.791390][T14594] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 416.804787][T14594] CPU: 0 UID: 0 PID: 14594 Comm: syz.1.2252 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 416.804815][T14594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 416.804828][T14594] Call Trace: [ 416.804836][T14594] [ 416.804844][T14594] dump_stack_lvl+0x189/0x250 [ 416.804872][T14594] ? __pfx____ratelimit+0x10/0x10 [ 416.804897][T14594] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.804919][T14594] ? __pfx__printk+0x10/0x10 [ 416.804943][T14594] ? fs_reclaim_acquire+0x7d/0x100 [ 416.804982][T14594] should_fail_ex+0x414/0x560 [ 416.805017][T14594] prepare_alloc_pages+0x213/0x610 [ 416.805049][T14594] __alloc_frozen_pages_noprof+0x123/0x370 [ 416.805078][T14594] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 416.805119][T14594] alloc_pages_mpol+0x232/0x4a0 [ 416.805147][T14594] alloc_pages_noprof+0xa9/0x190 [ 416.805170][T14594] folio_alloc_noprof+0x1e/0x30 [ 416.805191][T14594] filemap_alloc_folio_noprof+0xdf/0x470 [ 416.805217][T14594] ? filemap_get_read_batch+0xc4/0x7b0 [ 416.805247][T14594] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 416.805267][T14594] ? __up_read+0x280/0x680 [ 416.805294][T14594] ? page_cache_sync_ra+0x2d6/0xb10 [ 416.805326][T14594] filemap_get_pages+0xa90/0x1ea0 [ 416.805357][T14594] ? __pfx_lru_add+0x10/0x10 [ 416.805400][T14594] ? __pfx_filemap_get_pages+0x10/0x10 [ 416.805427][T14594] ? folios_put_refs+0x560/0x640 [ 416.805455][T14594] ? __pfx___might_resched+0x10/0x10 [ 416.805492][T14594] filemap_splice_read+0x4fc/0xbc0 [ 416.805539][T14594] ? __pfx_filemap_splice_read+0x10/0x10 [ 416.805589][T14594] ? __pfx_iter_file_splice_write+0x10/0x10 [ 416.805614][T14594] ? file_end_write+0x156/0x250 [ 416.805639][T14594] ? direct_splice_actor+0x10c/0x160 [ 416.805663][T14594] ? __pfx_filemap_splice_read+0x10/0x10 [ 416.805686][T14594] splice_direct_to_actor+0x4a6/0xcc0 [ 416.805727][T14594] ? __pfx_direct_splice_actor+0x10/0x10 [ 416.805744][T14594] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 416.805761][T14594] do_splice_direct+0x181/0x270 [ 416.805775][T14594] ? __pfx_do_splice_direct+0x10/0x10 [ 416.805788][T14594] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 416.805804][T14594] ? rw_verify_area+0x258/0x650 [ 416.805818][T14594] do_sendfile+0x4da/0x7e0 [ 416.805836][T14594] ? __pfx_do_sendfile+0x10/0x10 [ 416.805849][T14594] ? handle_softirqs+0x717/0x870 [ 416.805861][T14594] ? __irq_exit_rcu+0xca/0x1f0 [ 416.805874][T14594] __se_sys_sendfile64+0x13e/0x190 [ 416.805888][T14594] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 416.805914][T14594] ? do_syscall_64+0xbe/0x3b0 [ 416.805940][T14594] do_syscall_64+0xfa/0x3b0 [ 416.805980][T14594] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.805997][T14594] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 416.806017][T14594] ? clear_bhb_loop+0x60/0xb0 [ 416.806041][T14594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.806059][T14594] RIP: 0033:0x7fd91a38e929 [ 416.806076][T14594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.806094][T14594] RSP: 002b:00007fd91b14c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 416.806113][T14594] RAX: ffffffffffffffda RBX: 00007fd91a5b5fa0 RCX: 00007fd91a38e929 [ 416.806128][T14594] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 416.806139][T14594] RBP: 00007fd91b14c090 R08: 0000000000000000 R09: 0000000000000000 [ 416.806151][T14594] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000002 [ 416.806162][T14594] R13: 0000000000000000 R14: 00007fd91a5b5fa0 R15: 00007ffefeac2398 [ 416.806190][T14594] [ 420.788918][ T5885] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 114 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 427.188910][ T24] usb 1-1: USB disconnect, device number 114 [ 427.213155][ T24] usblp0: removed [ 427.444259][T14638] /dev/rnullb0: Can't open blockdev [ 428.060088][T14658] /dev/rnullb0: Can't open blockdev [ 428.070581][T14658] /dev/rnullb0: Can't open blockdev [ 429.593077][T14708] can0: slcan on ptm0. [ 429.793371][T14723] netlink: 'syz.4.2281': attribute type 10 has an invalid length. [ 429.806073][T14703] can0 (unregistered): slcan off ptm0. [ 430.177959][T14742] gfs2: not a GFS2 filesystem [ 430.736257][ T1633] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 430.752329][T14766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.768496][T14766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.907008][ T1633] usb 3-1: Using ep0 maxpacket: 8 [ 430.914982][ T1633] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 430.953080][ T1633] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.972946][ T1633] usb 3-1: config 0 descriptor?? [ 430.991665][T14777] gfs2: not a GFS2 filesystem [ 431.019875][T14777] gfs2: not a GFS2 filesystem [ 431.057944][T14777] gfs2: not a GFS2 filesystem [ 431.063933][T14777] gfs2: not a GFS2 filesystem [ 431.084506][T14777] gfs2: not a GFS2 filesystem [ 431.096952][T14777] gfs2: not a GFS2 filesystem [ 431.121497][T14777] /dev/rnullb0: Can't open blockdev [ 431.127654][T14777] /dev/rnullb0: Can't open blockdev [ 431.168785][T14777] gfs2: not a GFS2 filesystem [ 431.201217][T14777] gfs2: not a GFS2 filesystem [ 431.218840][T14777] gfs2: not a GFS2 filesystem [ 431.235787][T14777] gfs2: not a GFS2 filesystem [ 431.256988][T14777] gfs2: not a GFS2 filesystem [ 431.265961][T14777] gfs2: not a GFS2 filesystem [ 431.278720][T14777] gfs2: not a GFS2 filesystem [ 431.287373][T14777] gfs2: not a GFS2 filesystem [ 431.298073][T14777] gfs2: not a GFS2 filesystem [ 431.304509][T14777] gfs2: not a GFS2 filesystem [ 431.310906][T14777] gfs2: not a GFS2 filesystem [ 431.322247][T14777] gfs2: not a GFS2 filesystem [ 431.329064][T14777] gfs2: not a GFS2 filesystem [ 431.337134][T14777] gfs2: not a GFS2 filesystem [ 431.343562][T14777] gfs2: not a GFS2 filesystem [ 431.358069][T14777] gfs2: not a GFS2 filesystem [ 431.370818][T14777] gfs2: not a GFS2 filesystem [ 431.377146][T14777] gfs2: not a GFS2 filesystem [ 431.389457][T14777] gfs2: not a GFS2 filesystem [ 431.407549][T14777] gfs2: not a GFS2 filesystem [ 431.434227][T14777] gfs2: not a GFS2 filesystem [ 431.461906][T14777] gfs2: not a GFS2 filesystem [ 431.482624][T14777] gfs2: not a GFS2 filesystem [ 431.489327][T14777] gfs2: not a GFS2 filesystem [ 431.499668][T14777] gfs2: not a GFS2 filesystem [ 431.512524][T14777] gfs2: not a GFS2 filesystem [ 431.528044][T14777] gfs2: not a GFS2 filesystem [ 431.538917][T14777] gfs2: not a GFS2 filesystem [ 431.549627][T14777] gfs2: not a GFS2 filesystem [ 431.580628][T14777] gfs2: not a GFS2 filesystem [ 431.590606][T14777] gfs2: not a GFS2 filesystem [ 431.599341][T14777] gfs2: not a GFS2 filesystem [ 431.609446][T14777] gfs2: not a GFS2 filesystem [ 431.618840][T14777] gfs2: not a GFS2 filesystem [ 431.641400][T14777] gfs2: not a GFS2 filesystem [ 431.655670][T14777] gfs2: not a GFS2 filesystem [ 431.662245][T14777] gfs2: not a GFS2 filesystem [ 431.672331][T14777] gfs2: not a GFS2 filesystem [ 431.678526][T14777] gfs2: not a GFS2 filesystem [ 431.684669][T14777] gfs2: not a GFS2 filesystem [ 431.699829][T14777] gfs2: not a GFS2 filesystem [ 431.713203][T14777] gfs2: not a GFS2 filesystem [ 431.731608][T14777] gfs2: not a GFS2 filesystem [ 431.744069][T14777] gfs2: not a GFS2 filesystem [ 431.755816][T14777] gfs2: not a GFS2 filesystem [ 431.764970][T14777] gfs2: not a GFS2 filesystem [ 431.771617][T14777] gfs2: not a GFS2 filesystem [ 431.777826][T14777] gfs2: not a GFS2 filesystem [ 431.788083][T14777] gfs2: not a GFS2 filesystem [ 431.794151][T14777] gfs2: not a GFS2 filesystem [ 431.801886][T14777] gfs2: not a GFS2 filesystem [ 431.809465][T14777] gfs2: not a GFS2 filesystem [ 431.819256][T14777] gfs2: not a GFS2 filesystem [ 431.832947][T14777] gfs2: not a GFS2 filesystem [ 431.842613][T14777] gfs2: not a GFS2 filesystem [ 431.850699][T14755] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 431.857839][T14755] /dev/rnullb0: Can't open blockdev [ 431.865318][ T1633] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 431.880449][ T1633] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 431.913342][ T1633] asix 3-1:0.0: probe with driver asix failed with error -71 [ 431.940973][ T1633] usb 3-1: USB disconnect, device number 111 [ 432.041334][T14810] NILFS (rnullb0): couldn't find nilfs on the device [ 432.155621][T14815] FAULT_INJECTION: forcing a failure. [ 432.155621][T14815] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 432.172100][T14815] CPU: 1 UID: 0 PID: 14815 Comm: syz.4.2298 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 432.172126][T14815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 432.172139][T14815] Call Trace: [ 432.172147][T14815] [ 432.172156][T14815] dump_stack_lvl+0x189/0x250 [ 432.172181][T14815] ? __pfx____ratelimit+0x10/0x10 [ 432.172203][T14815] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.172224][T14815] ? __pfx__printk+0x10/0x10 [ 432.172246][T14815] ? fs_reclaim_acquire+0x7d/0x100 [ 432.172277][T14815] should_fail_ex+0x414/0x560 [ 432.172313][T14815] prepare_alloc_pages+0x213/0x610 [ 432.172345][T14815] __alloc_frozen_pages_noprof+0x123/0x370 [ 432.172374][T14815] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 432.172417][T14815] alloc_pages_mpol+0x232/0x4a0 [ 432.172443][T14815] alloc_pages_noprof+0xa9/0x190 [ 432.172472][T14815] folio_alloc_noprof+0x1e/0x30 [ 432.172494][T14815] filemap_alloc_folio_noprof+0xdf/0x470 [ 432.172520][T14815] ? filemap_get_read_batch+0xc4/0x7b0 [ 432.172548][T14815] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 432.172569][T14815] ? __up_read+0x280/0x680 [ 432.172594][T14815] ? page_cache_sync_ra+0x2d6/0xb10 [ 432.172624][T14815] filemap_get_pages+0xa90/0x1ea0 [ 432.172653][T14815] ? __pfx_lru_add+0x10/0x10 [ 432.172697][T14815] ? __pfx_filemap_get_pages+0x10/0x10 [ 432.172722][T14815] ? folios_put_refs+0x560/0x640 [ 432.172748][T14815] ? __pfx___might_resched+0x10/0x10 [ 432.172785][T14815] filemap_splice_read+0x4fc/0xbc0 [ 432.172830][T14815] ? __pfx_filemap_splice_read+0x10/0x10 [ 432.172882][T14815] ? __pfx_iter_file_splice_write+0x10/0x10 [ 432.172907][T14815] ? file_end_write+0x156/0x250 [ 432.172932][T14815] ? direct_splice_actor+0x10c/0x160 [ 432.172957][T14815] ? __pfx_filemap_splice_read+0x10/0x10 [ 432.172981][T14815] splice_direct_to_actor+0x4a6/0xcc0 [ 432.173021][T14815] ? __pfx_direct_splice_actor+0x10/0x10 [ 432.173044][T14815] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 432.173074][T14815] do_splice_direct+0x181/0x270 [ 432.173101][T14815] ? __pfx_do_splice_direct+0x10/0x10 [ 432.173125][T14815] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 432.173156][T14815] ? rw_verify_area+0x258/0x650 [ 432.173181][T14815] do_sendfile+0x4da/0x7e0 [ 432.173208][T14815] ? __pfx_vfs_write+0x10/0x10 [ 432.173235][T14815] ? __pfx_do_sendfile+0x10/0x10 [ 432.173262][T14815] ? __fget_files+0x3a0/0x420 [ 432.173298][T14815] __se_sys_sendfile64+0x13e/0x190 [ 432.173326][T14815] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 432.173351][T14815] ? rcu_is_watching+0x15/0xb0 [ 432.173373][T14815] ? do_syscall_64+0xbe/0x3b0 [ 432.173399][T14815] do_syscall_64+0xfa/0x3b0 [ 432.173418][T14815] ? lockdep_hardirqs_on+0x9c/0x150 [ 432.173437][T14815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.173456][T14815] ? clear_bhb_loop+0x60/0xb0 [ 432.173487][T14815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.173505][T14815] RIP: 0033:0x7f020598e929 [ 432.173524][T14815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.173542][T14815] RSP: 002b:00007f02037f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 432.173562][T14815] RAX: ffffffffffffffda RBX: 00007f0205bb5fa0 RCX: 00007f020598e929 [ 432.173578][T14815] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 432.173590][T14815] RBP: 00007f02037f6090 R08: 0000000000000000 R09: 0000000000000000 [ 432.173601][T14815] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000002 [ 432.173613][T14815] R13: 0000000000000000 R14: 00007f0205bb5fa0 R15: 00007ffc4d667158 [ 432.173640][T14815] [ 432.191552][T14808] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 432.774714][T14833] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 432.834647][T14833] Mount JFS Failure: -22 [ 432.842417][T14833] jfs_mount failed w/return code = -22 [ 432.849316][ T30] audit: type=1800 audit(1750860666.520:89): pid=14835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2304" name="bus" dev="overlay" ino=2812 res=0 errno=0 [ 433.185664][ T24] usb 3-1: new low-speed USB device number 112 using dummy_hcd [ 433.289090][ T30] audit: type=1326 audit(1750860666.922:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14853 comm="syz.0.2308" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f249678e929 code=0x0 [ 433.344406][ T24] usb 3-1: device descriptor read/64, error -71 [ 433.489744][T14866] FAULT_INJECTION: forcing a failure. [ 433.489744][T14866] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 433.519147][T14866] CPU: 1 UID: 0 PID: 14866 Comm: syz.1.2310 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 433.519175][T14866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 433.519187][T14866] Call Trace: [ 433.519196][T14866] [ 433.519203][T14866] dump_stack_lvl+0x189/0x250 [ 433.519228][T14866] ? __pfx____ratelimit+0x10/0x10 [ 433.519250][T14866] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.519268][T14866] ? __pfx__printk+0x10/0x10 [ 433.519291][T14866] ? fs_reclaim_acquire+0x7d/0x100 [ 433.519323][T14866] should_fail_ex+0x414/0x560 [ 433.519364][T14866] prepare_alloc_pages+0x213/0x610 [ 433.519394][T14866] __alloc_frozen_pages_noprof+0x123/0x370 [ 433.519421][T14866] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 433.519459][T14866] alloc_pages_mpol+0x232/0x4a0 [ 433.519485][T14866] alloc_pages_noprof+0xa9/0x190 [ 433.519508][T14866] folio_alloc_noprof+0x1e/0x30 [ 433.519522][T14866] filemap_alloc_folio_noprof+0xdf/0x470 [ 433.519536][T14866] ? filemap_get_read_batch+0xc4/0x7b0 [ 433.519551][T14866] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 433.519562][T14866] ? __up_read+0x280/0x680 [ 433.519577][T14866] ? page_cache_sync_ra+0x2d6/0xb10 [ 433.519593][T14866] filemap_get_pages+0xa90/0x1ea0 [ 433.519612][T14866] ? __pfx_lru_add+0x10/0x10 [ 433.519634][T14866] ? __pfx_filemap_get_pages+0x10/0x10 [ 433.519648][T14866] ? folios_put_refs+0x560/0x640 [ 433.519663][T14866] ? __pfx___might_resched+0x10/0x10 [ 433.519682][T14866] filemap_splice_read+0x4fc/0xbc0 [ 433.519706][T14866] ? __pfx_filemap_splice_read+0x10/0x10 [ 433.519731][T14866] ? __pfx_iter_file_splice_write+0x10/0x10 [ 433.519745][T14866] ? file_end_write+0x156/0x250 [ 433.519759][T14866] ? direct_splice_actor+0x10c/0x160 [ 433.519782][T14866] ? __pfx_filemap_splice_read+0x10/0x10 [ 433.519806][T14866] splice_direct_to_actor+0x4a6/0xcc0 [ 433.519846][T14866] ? __pfx_direct_splice_actor+0x10/0x10 [ 433.519860][T14866] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 433.519878][T14866] do_splice_direct+0x181/0x270 [ 433.519891][T14866] ? __pfx_do_splice_direct+0x10/0x10 [ 433.519904][T14866] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 433.519922][T14866] ? rw_verify_area+0x258/0x650 [ 433.519935][T14866] do_sendfile+0x4da/0x7e0 [ 433.519949][T14866] ? __pfx_vfs_write+0x10/0x10 [ 433.519973][T14866] ? __pfx_do_sendfile+0x10/0x10 [ 433.519998][T14866] ? __fget_files+0x3a0/0x420 [ 433.520027][T14866] __se_sys_sendfile64+0x13e/0x190 [ 433.520056][T14866] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 433.520088][T14866] ? do_syscall_64+0xbe/0x3b0 [ 433.520113][T14866] do_syscall_64+0xfa/0x3b0 [ 433.520134][T14866] ? lockdep_hardirqs_on+0x9c/0x150 [ 433.520156][T14866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.520175][T14866] ? clear_bhb_loop+0x60/0xb0 [ 433.520197][T14866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.520217][T14866] RIP: 0033:0x7fd91a38e929 [ 433.520236][T14866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.520254][T14866] RSP: 002b:00007fd91b14c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 433.520275][T14866] RAX: ffffffffffffffda RBX: 00007fd91a5b5fa0 RCX: 00007fd91a38e929 [ 433.520291][T14866] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 433.520303][T14866] RBP: 00007fd91b14c090 R08: 0000000000000000 R09: 0000000000000000 [ 433.520316][T14866] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000002 [ 433.520329][T14866] R13: 0000000000000000 R14: 00007fd91a5b5fa0 R15: 00007ffefeac2398 [ 433.520366][T14866] [ 433.971876][ T24] usb 3-1: new low-speed USB device number 113 using dummy_hcd [ 434.020474][T14872] gfs2: not a GFS2 filesystem [ 434.022354][T14877] /dev/rnullb0: Can't open blockdev [ 434.106405][T14882] binder: BINDER_SET_CONTEXT_MGR already set [ 434.115561][ T24] usb 3-1: device descriptor read/64, error -71 [ 434.122517][T14882] binder: 14880:14882 ioctl 4018620d 2000000000c0 returned -16 [ 434.130332][T14882] binder: BINDER_SET_CONTEXT_MGR already set [ 434.136395][T14882] binder: 14880:14882 ioctl 4018620d 2000000000c0 returned -16 [ 434.232041][ T24] usb usb3-port1: attempt power cycle [ 434.335689][T14896] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 434.348680][T14896] MTD: Couldn't look up './file0': -15 [ 434.408746][T14899] FAULT_INJECTION: forcing a failure. [ 434.408746][T14899] name failslab, interval 1, probability 0, space 0, times 0 [ 434.421541][T14899] CPU: 1 UID: 0 PID: 14899 Comm: syz.0.2321 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 434.421570][T14899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 434.421583][T14899] Call Trace: [ 434.421592][T14899] [ 434.421601][T14899] dump_stack_lvl+0x189/0x250 [ 434.421629][T14899] ? __pfx____ratelimit+0x10/0x10 [ 434.421652][T14899] ? __pfx_dump_stack_lvl+0x10/0x10 [ 434.421674][T14899] ? __pfx__printk+0x10/0x10 [ 434.421702][T14899] ? __pfx___might_resched+0x10/0x10 [ 434.421722][T14899] ? fs_reclaim_acquire+0x7d/0x100 [ 434.421751][T14899] should_fail_ex+0x414/0x560 [ 434.421787][T14899] should_failslab+0xa8/0x100 [ 434.421811][T14899] __kmalloc_noprof+0xcb/0x4f0 [ 434.421830][T14899] ? iter_file_splice_write+0x1cb/0x1000 [ 434.421858][T14899] iter_file_splice_write+0x1cb/0x1000 [ 434.421906][T14899] ? __pfx_iter_file_splice_write+0x10/0x10 [ 434.421934][T14899] ? rcu_read_lock_any_held+0xb3/0x120 [ 434.421957][T14899] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 434.421990][T14899] ? __pfx_iter_file_splice_write+0x10/0x10 [ 434.422015][T14899] direct_splice_actor+0x101/0x160 [ 434.422044][T14899] splice_direct_to_actor+0x5a5/0xcc0 [ 434.422088][T14899] ? __pfx_direct_splice_actor+0x10/0x10 [ 434.422112][T14899] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 434.422148][T14899] do_splice_direct+0x181/0x270 [ 434.422175][T14899] ? __pfx_do_splice_direct+0x10/0x10 [ 434.422200][T14899] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 434.422233][T14899] ? rw_verify_area+0x258/0x650 [ 434.422258][T14899] do_sendfile+0x4da/0x7e0 [ 434.422297][T14899] ? __pfx_vfs_write+0x10/0x10 [ 434.422324][T14899] ? __pfx_do_sendfile+0x10/0x10 [ 434.422350][T14899] ? __fget_files+0x3a0/0x420 [ 434.422386][T14899] __se_sys_sendfile64+0x13e/0x190 [ 434.422415][T14899] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 434.422439][T14899] ? rcu_is_watching+0x15/0xb0 [ 434.422465][T14899] ? do_syscall_64+0xbe/0x3b0 [ 434.422492][T14899] do_syscall_64+0xfa/0x3b0 [ 434.422513][T14899] ? lockdep_hardirqs_on+0x9c/0x150 [ 434.422534][T14899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.422553][T14899] ? clear_bhb_loop+0x60/0xb0 [ 434.422577][T14899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.422597][T14899] RIP: 0033:0x7f249678e929 [ 434.422615][T14899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.422633][T14899] RSP: 002b:00007f2497520038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 434.422655][T14899] RAX: ffffffffffffffda RBX: 00007f24969b5fa0 RCX: 00007f249678e929 [ 434.422670][T14899] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 434.422681][T14899] RBP: 00007f2497520090 R08: 0000000000000000 R09: 0000000000000000 [ 434.422695][T14899] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000002 [ 434.422708][T14899] R13: 0000000000000000 R14: 00007f24969b5fa0 R15: 00007ffeaaeca568 [ 434.422739][T14899] [ 434.788923][ T24] usb 3-1: new low-speed USB device number 114 using dummy_hcd [ 434.809711][ T24] usb 3-1: device descriptor read/8, error -71 [ 435.062486][T14922] /dev/rnullb0: Can't open blockdev [ 435.076537][ T24] usb 3-1: new low-speed USB device number 115 using dummy_hcd [ 435.110861][ T24] usb 3-1: device descriptor read/8, error -71 [ 435.247709][ T24] usb usb3-port1: unable to enumerate USB device [ 435.249961][T14935] FAULT_INJECTION: forcing a failure. [ 435.249961][T14935] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 435.271423][T14935] CPU: 0 UID: 0 PID: 14935 Comm: syz.4.2330 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 435.271452][T14935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 435.271465][T14935] Call Trace: [ 435.271473][T14935] [ 435.271482][T14935] dump_stack_lvl+0x189/0x250 [ 435.271510][T14935] ? __pfx____ratelimit+0x10/0x10 [ 435.271532][T14935] ? __pfx_dump_stack_lvl+0x10/0x10 [ 435.271554][T14935] ? __pfx__printk+0x10/0x10 [ 435.271577][T14935] ? fs_reclaim_acquire+0x7d/0x100 [ 435.271610][T14935] should_fail_ex+0x414/0x560 [ 435.271646][T14935] prepare_alloc_pages+0x213/0x610 [ 435.271677][T14935] __alloc_frozen_pages_noprof+0x123/0x370 [ 435.271707][T14935] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 435.271749][T14935] alloc_pages_mpol+0x232/0x4a0 [ 435.271776][T14935] alloc_pages_noprof+0xa9/0x190 [ 435.271800][T14935] folio_alloc_noprof+0x1e/0x30 [ 435.271821][T14935] filemap_alloc_folio_noprof+0xdf/0x470 [ 435.271847][T14935] ? filemap_get_read_batch+0xc4/0x7b0 [ 435.271875][T14935] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 435.271896][T14935] ? stack_trace_save+0x9c/0xe0 [ 435.271923][T14935] ? page_cache_sync_ra+0x2d6/0xb10 [ 435.271953][T14935] filemap_get_pages+0xa90/0x1ea0 [ 435.271975][T14935] ? __kasan_slab_free+0x62/0x70 [ 435.271994][T14935] ? iter_file_splice_write+0xe55/0x1000 [ 435.272016][T14935] ? splice_direct_to_actor+0x5a5/0xcc0 [ 435.272041][T14935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.272081][T14935] ? __pfx_filemap_get_pages+0x10/0x10 [ 435.272112][T14935] ? __pfx___might_resched+0x10/0x10 [ 435.272139][T14935] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.272188][T14935] filemap_splice_read+0x4fc/0xbc0 [ 435.272235][T14935] ? __pfx_filemap_splice_read+0x10/0x10 [ 435.272284][T14935] ? __pfx_iter_file_splice_write+0x10/0x10 [ 435.272309][T14935] ? file_end_write+0x156/0x250 [ 435.272334][T14935] ? direct_splice_actor+0x10c/0x160 [ 435.272359][T14935] ? __pfx_filemap_splice_read+0x10/0x10 [ 435.272383][T14935] splice_direct_to_actor+0x4a6/0xcc0 [ 435.272426][T14935] ? __pfx_direct_splice_actor+0x10/0x10 [ 435.272448][T14935] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 435.272483][T14935] do_splice_direct+0x181/0x270 [ 435.272509][T14935] ? __pfx_do_splice_direct+0x10/0x10 [ 435.272532][T14935] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 435.272564][T14935] ? rw_verify_area+0x258/0x650 [ 435.272589][T14935] do_sendfile+0x4da/0x7e0 [ 435.272615][T14935] ? __pfx_vfs_write+0x10/0x10 [ 435.272642][T14935] ? __pfx_do_sendfile+0x10/0x10 [ 435.272669][T14935] ? __fget_files+0x3a0/0x420 [ 435.272705][T14935] __se_sys_sendfile64+0x13e/0x190 [ 435.272734][T14935] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 435.272757][T14935] ? rcu_is_watching+0x15/0xb0 [ 435.272782][T14935] ? do_syscall_64+0xbe/0x3b0 [ 435.272807][T14935] do_syscall_64+0xfa/0x3b0 [ 435.272828][T14935] ? lockdep_hardirqs_on+0x9c/0x150 [ 435.272848][T14935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.272868][T14935] ? clear_bhb_loop+0x60/0xb0 [ 435.272891][T14935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.272910][T14935] RIP: 0033:0x7f020598e929 [ 435.272927][T14935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.272945][T14935] RSP: 002b:00007f02037f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 435.272966][T14935] RAX: ffffffffffffffda RBX: 00007f0205bb5fa0 RCX: 00007f020598e929 [ 435.272981][T14935] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 435.272992][T14935] RBP: 00007f02037f6090 R08: 0000000000000000 R09: 0000000000000000 [ 435.273003][T14935] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000002 [ 435.273015][T14935] R13: 0000000000000000 R14: 00007f0205bb5fa0 R15: 00007ffc4d667158 [ 435.273041][T14935] [ 435.275774][T14933] loop2: detected capacity change from 0 to 7 [ 435.418393][T14936] IPVS: set_ctl: invalid protocol: 22 172.20.20.170:20003 [ 435.441750][T14629] Dev loop2: unable to read RDB block 7 [ 435.668984][T14629] loop2: unable to read partition table [ 435.696547][T14629] loop2: partition table beyond EOD, truncated [ 435.715846][T14933] Dev loop2: unable to read RDB block 7 [ 435.725652][T14933] loop2: unable to read partition table [ 435.736743][T14933] loop2: partition table beyond EOD, truncated [ 435.767746][T14933] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 436.800023][T14979] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 436.809522][T14979] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 436.817635][T14979] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 436.828365][T14979] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 436.837016][T14979] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 436.861954][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 436.870339][ T5152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 436.878145][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 436.899217][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 436.923145][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 437.732545][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.820354][T15016] pimreg: entered allmulticast mode [ 437.832913][T15012] pimreg: left allmulticast mode [ 437.978797][T15023] FAULT_INJECTION: forcing a failure. [ 437.978797][T15023] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 437.996891][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.997182][T15023] CPU: 0 UID: 0 PID: 15023 Comm: syz.4.2351 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 437.997207][T15023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.997221][T15023] Call Trace: [ 437.997229][T15023] [ 437.997237][T15023] dump_stack_lvl+0x189/0x250 [ 437.997264][T15023] ? __pfx____ratelimit+0x10/0x10 [ 437.997286][T15023] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.997308][T15023] ? __pfx__printk+0x10/0x10 [ 437.997330][T15023] ? fs_reclaim_acquire+0x7d/0x100 [ 437.997362][T15023] should_fail_ex+0x414/0x560 [ 437.997397][T15023] prepare_alloc_pages+0x213/0x610 [ 437.997428][T15023] __alloc_frozen_pages_noprof+0x123/0x370 [ 437.997457][T15023] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 437.997499][T15023] alloc_pages_mpol+0x232/0x4a0 [ 437.997525][T15023] alloc_pages_noprof+0xa9/0x190 [ 437.997547][T15023] folio_alloc_noprof+0x1e/0x30 [ 437.997568][T15023] filemap_alloc_folio_noprof+0xdf/0x470 [ 437.997594][T15023] ? filemap_get_read_batch+0xc4/0x7b0 [ 437.997622][T15023] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 437.997642][T15023] ? __up_read+0x280/0x680 [ 437.997665][T15023] ? page_cache_sync_ra+0x2d6/0xb10 [ 437.997695][T15023] filemap_get_pages+0xa90/0x1ea0 [ 437.997726][T15023] ? __pfx_lru_add+0x10/0x10 [ 437.997767][T15023] ? __pfx_filemap_get_pages+0x10/0x10 [ 437.997792][T15023] ? folios_put_refs+0x560/0x640 [ 437.997821][T15023] ? __pfx___might_resched+0x10/0x10 [ 437.997856][T15023] filemap_splice_read+0x4fc/0xbc0 [ 437.997902][T15023] ? __pfx_filemap_splice_read+0x10/0x10 [ 437.997957][T15023] ? __pfx_iter_file_splice_write+0x10/0x10 [ 437.997982][T15023] ? file_end_write+0x156/0x250 [ 437.998007][T15023] ? direct_splice_actor+0x10c/0x160 [ 437.998031][T15023] ? __pfx_filemap_splice_read+0x10/0x10 [ 437.998055][T15023] splice_direct_to_actor+0x4a6/0xcc0 [ 437.998097][T15023] ? __pfx_direct_splice_actor+0x10/0x10 [ 437.998123][T15023] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 437.998156][T15023] do_splice_direct+0x181/0x270 [ 437.998181][T15023] ? __pfx_do_splice_direct+0x10/0x10 [ 437.998204][T15023] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 437.998235][T15023] ? rw_verify_area+0x258/0x650 [ 437.998260][T15023] do_sendfile+0x4da/0x7e0 [ 437.998286][T15023] ? __pfx_vfs_write+0x10/0x10 [ 437.998312][T15023] ? __pfx_do_sendfile+0x10/0x10 [ 437.998338][T15023] ? __fget_files+0x3a0/0x420 [ 437.998373][T15023] __se_sys_sendfile64+0x13e/0x190 [ 437.998400][T15023] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 437.998424][T15023] ? rcu_is_watching+0x15/0xb0 [ 437.998448][T15023] ? do_syscall_64+0xbe/0x3b0 [ 437.998473][T15023] do_syscall_64+0xfa/0x3b0 [ 437.998493][T15023] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.998513][T15023] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.998532][T15023] ? clear_bhb_loop+0x60/0xb0 [ 437.998554][T15023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.998573][T15023] RIP: 0033:0x7f020598e929 [ 437.998591][T15023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.998609][T15023] RSP: 002b:00007f02037f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 437.998629][T15023] RAX: ffffffffffffffda RBX: 00007f0205bb5fa0 RCX: 00007f020598e929 [ 437.998643][T15023] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 437.998655][T15023] RBP: 00007f02037f6090 R08: 0000000000000000 R09: 0000000000000000 [ 437.998667][T15023] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000002 [ 437.998680][T15023] R13: 0000000000000000 R14: 00007f0205bb5fa0 R15: 00007ffc4d667158 [ 437.998709][T15023] [ 438.518877][T15036] fuseblk: Unknown parameter 'rootm000000û¸U|jí] 0000' [ 438.559931][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.767960][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.799311][T15046] tmpfs: Unknown parameter 'mp`_' [ 439.010286][T14977] chnl_net:caif_netlink_parms(): no params data found [ 439.160172][ T5152] Bluetooth: hci4: command tx timeout [ 439.524890][T14977] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.564007][T14977] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.589842][T15068] FAULT_INJECTION: forcing a failure. [ 439.589842][T15068] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 439.598520][T14977] bridge_slave_0: entered allmulticast mode [ 439.615192][T15068] CPU: 0 UID: 0 PID: 15068 Comm: syz.2.2359 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 439.615220][T15068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 439.615234][T15068] Call Trace: [ 439.615243][T15068] [ 439.615253][T15068] dump_stack_lvl+0x189/0x250 [ 439.615280][T15068] ? __pfx____ratelimit+0x10/0x10 [ 439.615302][T15068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.615325][T15068] ? __pfx__printk+0x10/0x10 [ 439.615350][T15068] ? fs_reclaim_acquire+0x7d/0x100 [ 439.615383][T15068] should_fail_ex+0x414/0x560 [ 439.615418][T15068] prepare_alloc_pages+0x213/0x610 [ 439.615451][T15068] __alloc_frozen_pages_noprof+0x123/0x370 [ 439.615480][T15068] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 439.615523][T15068] alloc_pages_mpol+0x232/0x4a0 [ 439.615552][T15068] alloc_pages_noprof+0xa9/0x190 [ 439.615576][T15068] folio_alloc_noprof+0x1e/0x30 [ 439.615597][T15068] filemap_alloc_folio_noprof+0xdf/0x470 [ 439.615625][T15068] ? filemap_get_read_batch+0xc4/0x7b0 [ 439.615655][T15068] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 439.615677][T15068] ? __up_read+0x280/0x680 [ 439.615705][T15068] ? page_cache_sync_ra+0x2d6/0xb10 [ 439.615737][T15068] filemap_get_pages+0xa90/0x1ea0 [ 439.615769][T15068] ? __pfx_lru_add+0x10/0x10 [ 439.615813][T15068] ? __pfx_filemap_get_pages+0x10/0x10 [ 439.615840][T15068] ? folios_put_refs+0x560/0x640 [ 439.615869][T15068] ? __pfx___might_resched+0x10/0x10 [ 439.615907][T15068] filemap_splice_read+0x4fc/0xbc0 [ 439.615956][T15068] ? __pfx_filemap_splice_read+0x10/0x10 [ 439.616007][T15068] ? __pfx_iter_file_splice_write+0x10/0x10 [ 439.616033][T15068] ? file_end_write+0x156/0x250 [ 439.616058][T15068] ? direct_splice_actor+0x10c/0x160 [ 439.616085][T15068] ? __pfx_filemap_splice_read+0x10/0x10 [ 439.616116][T15068] splice_direct_to_actor+0x4a6/0xcc0 [ 439.616161][T15068] ? __pfx_direct_splice_actor+0x10/0x10 [ 439.616185][T15068] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 439.616221][T15068] do_splice_direct+0x181/0x270 [ 439.616248][T15068] ? __pfx_do_splice_direct+0x10/0x10 [ 439.616273][T15068] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 439.616306][T15068] ? rw_verify_area+0x258/0x650 [ 439.616332][T15068] do_sendfile+0x4da/0x7e0 [ 439.616358][T15068] ? __pfx_vfs_write+0x10/0x10 [ 439.616385][T15068] ? __pfx_do_sendfile+0x10/0x10 [ 439.616412][T15068] ? __fget_files+0x3a0/0x420 [ 439.616449][T15068] __se_sys_sendfile64+0x13e/0x190 [ 439.616478][T15068] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 439.616502][T15068] ? rcu_is_watching+0x15/0xb0 [ 439.616528][T15068] ? do_syscall_64+0xbe/0x3b0 [ 439.616555][T15068] do_syscall_64+0xfa/0x3b0 [ 439.616576][T15068] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.616597][T15068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.616617][T15068] ? clear_bhb_loop+0x60/0xb0 [ 439.616642][T15068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.616661][T15068] RIP: 0033:0x7f06df58e929 [ 439.616679][T15068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.616697][T15068] RSP: 002b:00007f06e04e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 439.616719][T15068] RAX: ffffffffffffffda RBX: 00007f06df7b5fa0 RCX: 00007f06df58e929 [ 439.616735][T15068] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 439.616747][T15068] RBP: 00007f06e04e2090 R08: 0000000000000000 R09: 0000000000000000 [ 439.616761][T15068] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000002 [ 439.616774][T15068] R13: 0000000000000000 R14: 00007f06df7b5fa0 R15: 00007ffe715e4b78 [ 439.616805][T15068] [ 439.628708][T14977] bridge_slave_0: entered promiscuous mode [ 439.670227][T15074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.691874][T14977] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.780051][T15074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.004515][T14977] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.011872][T14977] bridge_slave_1: entered allmulticast mode [ 440.019607][T14977] bridge_slave_1: entered promiscuous mode [ 440.147435][T14977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.169448][T14977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.215803][ T59] bridge_slave_1: left allmulticast mode [ 440.215829][ T59] bridge_slave_1: left promiscuous mode [ 440.216044][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.222396][ T59] bridge_slave_0: left allmulticast mode [ 440.222420][ T59] bridge_slave_0: left promiscuous mode [ 440.222627][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.924060][T15105] vxfs: WRONG superblock magic 00000000 at 1 [ 440.930278][T15105] vxfs: WRONG superblock magic 00000000 at 8 [ 440.966081][T15105] vxfs: can't find superblock. [ 441.209624][T15118] hfs: can't find a HFS filesystem on dev rnullb0 [ 441.223666][T15117] /dev/rnullb0: Can't open blockdev [ 441.332562][T15121] FAULT_INJECTION: forcing a failure. [ 441.332562][T15121] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 441.350358][T15121] CPU: 0 UID: 0 PID: 15121 Comm: syz.0.2369 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 441.350384][T15121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 441.350395][T15121] Call Trace: [ 441.350402][T15121] [ 441.350409][T15121] dump_stack_lvl+0x189/0x250 [ 441.350433][T15121] ? __pfx____ratelimit+0x10/0x10 [ 441.350452][T15121] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.350470][T15121] ? __pfx__printk+0x10/0x10 [ 441.350490][T15121] ? fs_reclaim_acquire+0x7d/0x100 [ 441.350516][T15121] should_fail_ex+0x414/0x560 [ 441.350546][T15121] prepare_alloc_pages+0x213/0x610 [ 441.350573][T15121] __alloc_frozen_pages_noprof+0x123/0x370 [ 441.350597][T15121] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 441.350631][T15121] alloc_pages_mpol+0x232/0x4a0 [ 441.350653][T15121] alloc_pages_noprof+0xa9/0x190 [ 441.350673][T15121] folio_alloc_noprof+0x1e/0x30 [ 441.350690][T15121] filemap_alloc_folio_noprof+0xdf/0x470 [ 441.350712][T15121] ? filemap_get_read_batch+0xc4/0x7b0 [ 441.350737][T15121] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 441.350755][T15121] ? __up_read+0x280/0x680 [ 441.350777][T15121] ? page_cache_sync_ra+0x2d6/0xb10 [ 441.350803][T15121] filemap_get_pages+0xa90/0x1ea0 [ 441.350829][T15121] ? __pfx_lru_add+0x10/0x10 [ 441.350864][T15121] ? __pfx_filemap_get_pages+0x10/0x10 [ 441.350885][T15121] ? folios_put_refs+0x560/0x640 [ 441.350910][T15121] ? __pfx___might_resched+0x10/0x10 [ 441.350947][T15121] filemap_splice_read+0x4fc/0xbc0 [ 441.350985][T15121] ? __pfx_filemap_splice_read+0x10/0x10 [ 441.351026][T15121] ? __pfx_iter_file_splice_write+0x10/0x10 [ 441.351047][T15121] ? file_end_write+0x156/0x250 [ 441.351068][T15121] ? direct_splice_actor+0x10c/0x160 [ 441.351089][T15121] ? __pfx_filemap_splice_read+0x10/0x10 [ 441.351109][T15121] splice_direct_to_actor+0x4a6/0xcc0 [ 441.351145][T15121] ? __pfx_direct_splice_actor+0x10/0x10 [ 441.351164][T15121] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 441.351192][T15121] do_splice_direct+0x181/0x270 [ 441.351218][T15121] ? __pfx_do_splice_direct+0x10/0x10 [ 441.351238][T15121] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 441.351265][T15121] ? rw_verify_area+0x258/0x650 [ 441.351286][T15121] do_sendfile+0x4da/0x7e0 [ 441.351307][T15121] ? __pfx_vfs_write+0x10/0x10 [ 441.351330][T15121] ? __pfx_do_sendfile+0x10/0x10 [ 441.351352][T15121] ? __fget_files+0x3a0/0x420 [ 441.351381][T15121] __se_sys_sendfile64+0x13e/0x190 [ 441.351405][T15121] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 441.351425][T15121] ? rcu_is_watching+0x15/0xb0 [ 441.351446][T15121] ? do_syscall_64+0xbe/0x3b0 [ 441.351467][T15121] do_syscall_64+0xfa/0x3b0 [ 441.351484][T15121] ? lockdep_hardirqs_on+0x9c/0x150 [ 441.351501][T15121] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.351517][T15121] ? clear_bhb_loop+0x60/0xb0 [ 441.351537][T15121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.351554][T15121] RIP: 0033:0x7f249678e929 [ 441.351570][T15121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.351585][T15121] RSP: 002b:00007f2497520038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 441.351606][T15121] RAX: ffffffffffffffda RBX: 00007f24969b5fa0 RCX: 00007f249678e929 [ 441.351619][T15121] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 441.351630][T15121] RBP: 00007f2497520090 R08: 0000000000000000 R09: 0000000000000000 [ 441.351640][T15121] R10: 0001000000201005 R11: 0000000000000246 R12: 0000000000000002 [ 441.351651][T15121] R13: 0000000000000000 R14: 00007f24969b5fa0 R15: 00007ffeaaeca568 [ 441.351676][T15121] [ 441.721292][T15122] Can't find a SQUASHFS superblock on rnullb0 [ 441.748797][ T5152] Bluetooth: hci4: command tx timeout [ 441.869625][T15131] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 441.877845][T15131] VFS: Can't find a romfs filesystem on dev rnullb0. [ 441.877845][T15131] [ 441.966373][T14977] team0: Port device team_slave_0 added [ 441.990571][T14977] team0: Port device team_slave_1 added [ 442.197371][ T59] [ 442.199734][ T59] ====================================================== [ 442.206749][ T59] WARNING: possible circular locking dependency detected [ 442.213779][ T59] 6.16.0-rc3-next-20250625-syzkaller #0 Not tainted [ 442.220358][ T59] ------------------------------------------------------ [ 442.227355][ T59] kworker/u8:4/59 is trying to acquire lock: [ 442.233309][ T59] ffff88802f4cce00 (team->team_lock_key){+.+.}-{4:4}, at: team_del_slave+0x32/0x1c0 [ 442.242688][ T59] [ 442.242688][ T59] but task is already holding lock: [ 442.250034][ T59] ffff888024850768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 442.260387][ T59] [ 442.260387][ T59] which lock already depends on the new lock. [ 442.260387][ T59] [ 442.270782][ T59] [ 442.270782][ T59] the existing dependency chain (in reverse order) is: [ 442.279787][ T59] [ 442.279787][ T59] -> #1 (&rdev->wiphy.mtx){+.+.}-{4:4}: [ 442.287524][ T59] lock_acquire+0x120/0x360 [ 442.292554][ T59] __mutex_lock+0x182/0xe80 [ 442.297566][ T59] ieee80211_open+0xed/0x1f0 [ 442.302667][ T59] __dev_open+0x470/0x880 [ 442.307507][ T59] netif_open+0xaa/0x170 [ 442.312257][ T59] dev_open+0x125/0x260 [ 442.316924][ T59] team_add_slave+0xb36/0x2840 [ 442.322199][ T59] do_set_master+0x530/0x6d0 [ 442.327294][ T59] do_setlink+0xcf0/0x41c0 [ 442.332220][ T59] rtnl_newlink+0x160b/0x1c70 [ 442.337403][ T59] rtnetlink_rcv_msg+0x7cc/0xb70 [ 442.342848][ T59] netlink_rcv_skb+0x208/0x470 [ 442.348143][ T59] netlink_unicast+0x75b/0x8d0 [ 442.353427][ T59] netlink_sendmsg+0x805/0xb30 [ 442.358711][ T59] __sock_sendmsg+0x219/0x270 [ 442.363898][ T59] ____sys_sendmsg+0x505/0x830 [ 442.369178][ T59] ___sys_sendmsg+0x21f/0x2a0 [ 442.374368][ T59] __x64_sys_sendmsg+0x19b/0x260 [ 442.379815][ T59] do_syscall_64+0xfa/0x3b0 [ 442.384837][ T59] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.391235][ T59] [ 442.391235][ T59] -> #0 (team->team_lock_key){+.+.}-{4:4}: [ 442.399217][ T59] validate_chain+0xb9b/0x2140 [ 442.404491][ T59] __lock_acquire+0xab9/0xd20 [ 442.409678][ T59] lock_acquire+0x120/0x360 [ 442.414692][ T59] __mutex_lock+0x182/0xe80 [ 442.419698][ T59] team_del_slave+0x32/0x1c0 [ 442.424801][ T59] team_device_event+0x285/0xa20 [ 442.430329][ T59] notifier_call_chain+0x1b6/0x3e0 [ 442.435943][ T59] unregister_netdevice_many_notify+0x15d8/0x2320 [ 442.442860][ T59] unregister_netdevice_queue+0x33c/0x380 [ 442.449092][ T59] _cfg80211_unregister_wdev+0x165/0x590 [ 442.455229][ T59] ieee80211_remove_interfaces+0x49a/0x6d0 [ 442.461540][ T59] ieee80211_unregister_hw+0x5d/0x2c0 [ 442.467423][ T59] mac80211_hwsim_del_radio+0x275/0x460 [ 442.473474][ T59] hwsim_exit_net+0x584/0x640 [ 442.478664][ T59] ops_undo_list+0x49a/0x990 [ 442.483761][ T59] cleanup_net+0x4c5/0x800 [ 442.488775][ T59] process_scheduled_works+0xade/0x17b0 [ 442.494844][ T59] worker_thread+0x8a0/0xda0 [ 442.499936][ T59] kthread+0x711/0x8a0 [ 442.504510][ T59] ret_from_fork+0x3fc/0x770 [ 442.509602][ T59] ret_from_fork_asm+0x1a/0x30 [ 442.514875][ T59] [ 442.514875][ T59] other info that might help us debug this: [ 442.514875][ T59] [ 442.525084][ T59] Possible unsafe locking scenario: [ 442.525084][ T59] [ 442.532513][ T59] CPU0 CPU1 [ 442.537860][ T59] ---- ---- [ 442.543206][ T59] lock(&rdev->wiphy.mtx); [ 442.547695][ T59] lock(team->team_lock_key); [ 442.554965][ T59] lock(&rdev->wiphy.mtx); [ 442.561975][ T59] lock(team->team_lock_key); [ 442.566723][ T59] [ 442.566723][ T59] *** DEADLOCK *** [ 442.566723][ T59] [ 442.574846][ T59] 5 locks held by kworker/u8:4/59: [ 442.579935][ T59] #0: ffff88801b6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 442.590806][ T59] #1: ffffc9000210fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 442.601333][ T59] #2: ffffffff8f71d390 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 442.610640][ T59] #3: ffffffff8f72a048 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 442.620468][ T59] #4: ffff888024850768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: ieee80211_remove_interfaces+0x133/0x6d0 [ 442.631246][ T59] [ 442.631246][ T59] stack backtrace: [ 442.637116][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted 6.16.0-rc3-next-20250625-syzkaller #0 PREEMPT(full) [ 442.637136][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 442.637149][ T59] Workqueue: netns cleanup_net [ 442.637170][ T59] Call Trace: [ 442.637178][ T59] [ 442.637186][ T59] dump_stack_lvl+0x189/0x250 [ 442.637206][ T59] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.637223][ T59] ? __pfx__printk+0x10/0x10 [ 442.637241][ T59] ? print_lock_name+0xde/0x100 [ 442.637260][ T59] print_circular_bug+0x2ee/0x310 [ 442.637279][ T59] check_noncircular+0x134/0x160 [ 442.637299][ T59] validate_chain+0xb9b/0x2140 [ 442.637319][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.637340][ T59] __lock_acquire+0xab9/0xd20 [ 442.637365][ T59] ? team_del_slave+0x32/0x1c0 [ 442.637388][ T59] lock_acquire+0x120/0x360 [ 442.637410][ T59] ? team_del_slave+0x32/0x1c0 [ 442.637435][ T59] ? __mutex_trylock_common+0x153/0x260 [ 442.637454][ T59] __mutex_lock+0x182/0xe80 [ 442.637472][ T59] ? team_del_slave+0x32/0x1c0 [ 442.637495][ T59] ? rcu_is_watching+0x15/0xb0 [ 442.637512][ T59] ? team_del_slave+0x32/0x1c0 [ 442.637536][ T59] ? __pfx___mutex_lock+0x10/0x10 [ 442.637554][ T59] ? bond_netdev_event+0xd9/0xe80 [ 442.637578][ T59] ? __pfx___mutex_lock+0x10/0x10 [ 442.637596][ T59] ? __pfx_bond_netdev_event+0x10/0x10 [ 442.637623][ T59] team_del_slave+0x32/0x1c0 [ 442.637647][ T59] team_device_event+0x285/0xa20 [ 442.637665][ T59] notifier_call_chain+0x1b6/0x3e0 [ 442.637685][ T59] unregister_netdevice_many_notify+0x15d8/0x2320 [ 442.637707][ T59] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 442.637724][ T59] ? __lock_acquire+0xab9/0xd20 [ 442.637754][ T59] unregister_netdevice_queue+0x33c/0x380 [ 442.637786][ T59] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 442.637813][ T59] _cfg80211_unregister_wdev+0x165/0x590 [ 442.637835][ T59] ieee80211_remove_interfaces+0x49a/0x6d0 [ 442.637853][ T59] ? __pfx_synchronize_rcu+0x10/0x10 [ 442.637871][ T59] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 442.637889][ T59] ? rcu_is_watching+0x15/0xb0 [ 442.637907][ T59] ieee80211_unregister_hw+0x5d/0x2c0 [ 442.637932][ T59] mac80211_hwsim_del_radio+0x275/0x460 [ 442.637952][ T59] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 442.637972][ T59] hwsim_exit_net+0x584/0x640 [ 442.637996][ T59] ? __pfx_hwsim_exit_net+0x10/0x10 [ 442.638021][ T59] ? __ip_vs_dev_cleanup_batch+0x238/0x260 [ 442.638042][ T59] ops_undo_list+0x49a/0x990 [ 442.638063][ T59] ? __pfx_ops_undo_list+0x10/0x10 [ 442.638085][ T59] cleanup_net+0x4c5/0x800 [ 442.638104][ T59] ? __pfx_cleanup_net+0x10/0x10 [ 442.638123][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 442.638138][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 442.638163][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 442.638188][ T59] process_scheduled_works+0xade/0x17b0 [ 442.638222][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 442.638252][ T59] worker_thread+0x8a0/0xda0 [ 442.638269][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 442.638287][ T59] ? __kthread_parkme+0x7b/0x200 [ 442.638306][ T59] kthread+0x711/0x8a0 [ 442.638326][ T59] ? __pfx_worker_thread+0x10/0x10 [ 442.638340][ T59] ? __pfx_kthread+0x10/0x10 [ 442.638359][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 442.638374][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.638389][ T59] ? __pfx_kthread+0x10/0x10 [ 442.638408][ T59] ret_from_fork+0x3fc/0x770 [ 442.638423][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 442.638440][ T59] ? __switch_to_asm+0x39/0x70 [ 442.638458][ T59] ? __switch_to_asm+0x33/0x70 [ 442.638477][ T59] ? __pfx_kthread+0x10/0x10 [ 442.638496][ T59] ret_from_fork_asm+0x1a/0x30 [ 442.638521][ T59] [ 443.106178][ T59] team0: Port device wlan1 removed [ 443.141349][T14977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.150264][T14977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.164102][T15153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.176268][T14977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.201599][T14977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.202926][T15153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.209073][T14977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.242864][T14977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.281707][T14977] hsr_slave_0: entered promiscuous mode [ 443.288816][T14977] hsr_slave_1: entered promiscuous mode [ 443.294895][T14977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.302914][T14977] Cannot create hsr debugfs directory [ 443.527487][ T59] hsr_slave_0: left promiscuous mode [ 443.534558][ T59] hsr_slave_1: left promiscuous mode [ 443.540403][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.547965][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.556481][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.564007][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.575807][ T59] veth1_macvtap: left promiscuous mode [ 443.581465][ T59] veth0_macvtap: left allmulticast mode [ 443.587411][ T59] veth0_macvtap: left promiscuous mode [ 443.593095][ T59] veth1_vlan: left promiscuous mode [ 443.598979][ T59] veth0_vlan: left promiscuous mode [ 443.655137][ T59] pimreg (unregistering): left allmulticast mode [ 443.949680][ T5152] Bluetooth: hci4: command tx timeout [ 445.351208][ T59] team0 (unregistering): Port device team_slave_1 removed [ 445.556866][ T59] team0 (unregistering): Port device team_slave_0 removed [ 446.173173][ T5152] Bluetooth: hci4: command tx timeout [ 448.278231][ T59] IPVS: stop unused estimator thread 0... [ 448.300452][T14977] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 448.310681][T14977] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 448.320031][T14977] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 448.329613][T14977] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 448.411591][T14977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.435006][T14977] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.447509][ T5994] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.454648][ T5994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.471568][ T5994] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.478673][ T5994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.509749][T14977] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 448.523302][T14977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 448.715711][T14977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.754762][T14977] veth0_vlan: entered promiscuous mode [ 448.765907][T14977] veth1_vlan: entered promiscuous mode [ 448.795442][T14977] veth0_macvtap: entered promiscuous mode [ 448.808899][T14977] veth1_macvtap: entered promiscuous mode [ 448.830288][T14977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.849010][T14977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.862995][ T5994] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.883634][ T5994] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.905268][ T5994] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.919517][T14977] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 448.929713][ T5994] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.956337][ T5994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.966570][T14977] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 448.974937][ T5994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.000337][T15152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.018927][T15152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50