last executing test programs: 28m7.60941532s ago: executing program 4 (id=576): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_print_times', 0x800, 0x2) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendfile(r1, r0, 0x0, 0x4) 28m7.37045632s ago: executing program 4 (id=578): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000500)=ANY=[@ANYRESOCT], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xa20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x0, 0x44080) r4 = openat$kvm(0x0, 0x0, 0x2382, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@o_path={&(0x7f0000000300)='./file0\x00', 0x0, 0x4000, r0}, 0x18) recvmmsg(r2, &(0x7f0000001d00)=[{{&(0x7f0000000680)=@caif=@dgm, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000700)=""/96, 0x60}, {&(0x7f0000000440)=""/55, 0x37}, {&(0x7f0000001d80)=""/236, 0xec}, {&(0x7f0000000880)=""/62, 0x3e}, {&(0x7f00000008c0)=""/175, 0xaf}, {&(0x7f0000000980)=""/188, 0xbc}, {&(0x7f0000001d40)=""/29, 0x1d}, {&(0x7f0000000a80)=""/196, 0xc4}, {0xfffffffffffffffe}, {&(0x7f0000000b80)=""/162, 0xa2}], 0xa, &(0x7f0000000d00)=""/4086, 0xff6}, 0x3}], 0x1, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000780)={0x1, @pix_mp={0x299, 0x0, 0x50424752, 0x0, 0xd, [{0x0, 0xfff}, {}, {0x3}, {0xf, 0xd}, {0x0, 0x2}, {0x0, 0xfffffffe}, {0x7, 0xffffffff}, {0x0, 0x20000}], 0x0, 0x0, 0x0, 0x0, 0x1}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$rtc(&(0x7f00000004c0), 0x2, 0x50200) syz_io_uring_setup(0x1e20, &(0x7f00000003c0)={0x0, 0x3da4, 0x10, 0xffffffff, 0x2b3, 0x0, r0}, &(0x7f0000000640)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x104) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfsd\x00', 0x10, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f00000001c0)='./file0\x00', 0x0) sendmmsg$inet6(r0, &(0x7f0000000340), 0x0, 0x10000055) 28m6.881913793s ago: executing program 4 (id=580): r0 = openat$sequencer(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) write(r1, &(0x7f0000000500)="01", 0x1) socket$unix(0x1, 0x1, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x72, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) read(r4, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f0000000180)={0x381, @time={0x5}, 0x40, {0xc0, 0xff}, 0x46, 0x1, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = openat$cgroup_ro(r3, &(0x7f00000002c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) fsetxattr$smack_xattr_label(r9, &(0x7f0000000040)='security.SMACK64MMAP\x00', &(0x7f00000000c0)={'s.events\x00\x00\x00\x00'}, 0xd, 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0xcc, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0xc, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x9c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x38, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x9}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x3ff}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xfffffff3}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xcc}}, 0x0) getsockopt$sock_timeval(r3, 0x1, 0x42, 0x0, &(0x7f0000000080)) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, &(0x7f0000000040)=0xb2) 28m4.39069363s ago: executing program 4 (id=587): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)={0x1c, 0x5e, 0xe25, 0x0, 0x3, "", [@typed={0x8, 0x77, 0x0, 0x0, @uid}, @nested={0xc, 0xea, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x4}]}]}, 0x24}], 0x1}, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_route_sched(r1, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x14, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}}, 0x14}}, 0x2000a804) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r0, 0x1, 0x10000001, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x97}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @default=0x976}]]}, 0x34}, 0x1, 0x0, 0x0, 0x54a1a7b10f47ca8e}, 0x8804) 28m2.43861297s ago: executing program 4 (id=591): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {0x0, 0x9}}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x14}, 0x1, 0x0, 0x0, 0x400c810}, 0x20004094) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) ioctl$BLKSSZGET(0xffffffffffffffff, 0x1268, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) lseek(r5, 0x0, 0x1) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}}) 28m0.78300217s ago: executing program 4 (id=596): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) r0 = getpid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000001c0)={0x2, 0x2, 0x3, 0x200, r0}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xd1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sysctl=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) io_setup(0x6, &(0x7f0000000400)=0x0) io_pgetevents(r3, 0x2, 0x2, &(0x7f0000000540)=[{}, {}], &(0x7f0000000440)={0x0, 0x3938700}, 0x0) r4 = dup(r2) close(0x3) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r2]) syz_usb_connect(0x0, 0x43, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff000524060000052402", @ANYRES16], 0x0) 27m45.500903545s ago: executing program 32 (id=596): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xb) r0 = getpid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f00000001c0)={0x2, 0x2, 0x3, 0x200, r0}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x17, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0xd1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sysctl=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) io_setup(0x6, &(0x7f0000000400)=0x0) io_pgetevents(r3, 0x2, 0x2, &(0x7f0000000540)=[{}, {}], &(0x7f0000000440)={0x0, 0x3938700}, 0x0) r4 = dup(r2) close(0x3) mount$9p_fd(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESDEC=r2]) syz_usb_connect(0x0, 0x43, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e7c2f708210435030e5f0000000109023100010000000009040000000202ff000524060000052402", @ANYRES16], 0x0) 6m58.188125691s ago: executing program 2 (id=3228): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x200, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x8000, 0x0) open$dir(&(0x7f0000000200)='./file1\x00', 0x400, 0x148) r1 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x1bc001, 0xfc) r2 = openat(r1, &(0x7f0000000400)='./file1\x00', 0x40c0, 0x20) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0xb95}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0xb01) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) ioctl$USBDEVFS_FORBID_SUSPEND(r3, 0x5521) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file1\x00'}, 0x6e) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, 0x0, &(0x7f0000000040)) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="140000002b000b93de09a427b36c690000fff005", 0x14}], 0x1}, 0x40080) ppoll(&(0x7f0000000080)=[{r0, 0x8108}, {r1, 0x1000}, {r3, 0x4202}, {0xffffffffffffffff, 0x8000}], 0x4, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x8) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x20000804) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r7}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYRES8=r7], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x61900}, 0x94) 6m56.423245868s ago: executing program 2 (id=3233): r0 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, 0x0, 0x0) 6m55.562580534s ago: executing program 2 (id=3234): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 6m55.283742676s ago: executing program 2 (id=3236): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x100000001, r2, 0x1, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x200}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) close_range(r4, 0xffffffffffffffff, 0x100000000000000) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz1\x00', 0x3f}) ioctl$UI_DEV_CREATE(r3, 0x5501) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x11, r3, 0xf4e1c000) 6m50.858137925s ago: executing program 2 (id=3247): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) socket$nl_generic(0x10, 0x3, 0x10) r0 = eventfd(0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r2 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 6m48.685129516s ago: executing program 2 (id=3253): socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r4, &(0x7f0000000200)={0x2c, 0xd, r6, 0x2}, 0x10) 6m48.181453346s ago: executing program 33 (id=3253): socket(0x10, 0x803, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r4, &(0x7f0000000200)={0x2c, 0xd, r6, 0x2}, 0x10) 17.621786856s ago: executing program 3 (id=4033): symlinkat(&(0x7f0000001040)='./cgroup\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') r0 = memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) write$binfmt_script(r0, &(0x7f0000000a40)={'#! ', './file0'}, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@metacopy_on}, {@userxattr}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, 0x0) gettid() openat$kvm(0xffffffffffffff9c, 0x0, 0x400, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000040)={0x7, 0x3}) r4 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r4, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x7, {0x8000, 0x1000, 0x4, 0x86c}}) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000016000000000085000000ab00000095000000000000002fd4ccc6ceec348140d4dbf0b996899f303391d00351687938a771ce61113af188d60d392191a273a4fbea07aacdc9f3d87ca5ad212ec95b743df7f79226fe4caac3ebcc28d7d73d3366444df2252ced8e358d15a404400b6b5e325d3ecb99837680dccc89af8dcbd5"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB], &(0x7f00000002c0)='syzkaller\x00', 0x202, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x400001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r6}, 0x10) 15.362604145s ago: executing program 3 (id=4038): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000041c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x4, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f0000000380)={0x50, 0x0, r3, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f00000000c0)='./file0/../file0/file0\x00') syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x8, {0x3, 0x3, 0x10100000003, 0x0, 0x0, 0x3881fffc, {0x5, 0xff, 0x1, 0x0, 0x3, 0x2, 0xa, 0x0, 0x0, 0x2000, 0x1, r4, r5, 0x2, 0x8009}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) 13.358276421s ago: executing program 3 (id=4041): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r4, 0x2000) ioctl$VIDIOC_G_SLICED_VBI_CAP(0xffffffffffffffff, 0xc0745645, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000, 0xfd7f0000}) 10.406541364s ago: executing program 0 (id=4048): syz_open_dev$vim2m(0x0, 0x7, 0x2) r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008040}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$snddsp(&(0x7f00003c6000/0x1000)=nil, 0x1000, 0x2000004, 0x4010, 0xffffffffffffffff, 0x3000) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) 9.15077466s ago: executing program 6 (id=4050): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r1) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={0x0, 0xfffffffffffffe7a, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000600)={r4, 0x0, 0x1000, 0x10000, 0x3, [0x0, 0x0, 0x0, 0x0], [0x800000, 0x800, 0xfffffffd], [0x0, 0x1001000, 0xfffffffc], [0x0, 0x0, 0xe8a6]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x1, [r5, 0x0, 0x0, r6], [0x2b8], [0x0, 0x0, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r7, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000340)={0x200028, 0x8, 0x2}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) setsockopt$SO_J1939_ERRQUEUE(r9, 0x6b, 0x4, &(0x7f0000000300)=0x1, 0x4) bind$can_j1939(r9, &(0x7f0000000380)={0x1d, r10, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048001) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000580)=0x3eba, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r10, {0x5, 0xffeb}, {0x1, 0x7}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) close_range(r0, 0xffffffffffffffff, 0x0) 8.677155372s ago: executing program 3 (id=4051): syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) dup(0xffffffffffffffff) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) syz_open_dev$video(0x0, 0x5, 0x280900) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x80fe, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 7.983082306s ago: executing program 5 (id=4052): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x239, &(0x7f0000000100)={0x0, 0x8103, 0x10, 0x0, 0x2cd}, &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) ioctl$SIOCAX25DELFWD(r1, 0x89eb, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) 6.944543418s ago: executing program 5 (id=4053): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000180), 0x7fffffff, 0x80001) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) 6.826800609s ago: executing program 6 (id=4054): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x5, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) syz_open_dev$video(0x0, 0x75, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x1d, 0x0, 0x0, 0x7fff0000}]}) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000006, 0x40032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x100000a, 0x10, r2, 0xe355b000) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet6_mptcp(0xa, 0x1, 0x106) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x9}, 0x0, &(0x7f00000002c0)={0x3fb, 0x3, 0x400000000001, 0x9, 0x40000000000000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) close(r4) recvmsg(r5, 0x0, 0x40002142) syz_open_dev$usbfs(0x0, 0x76, 0x160341) 6.576652755s ago: executing program 1 (id=4055): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x10, &(0x7f0000000180)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(0xffffffffffffffff, &(0x7f000000a280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008280)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x0, {0x1, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0xffff6957, {0x0, 0x2, 0x1, 0x0, 0x8000000000000000, 0x0, 0x5, 0x0, 0x8000000, 0x2000, 0x0, 0x0, r2, 0x0, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f00000005c0), 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r3, &(0x7f0000000000), 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0xa, 0x7}}, 0x26) getsockopt$sock_buf(r4, 0x1, 0x1c, &(0x7f00000000c0)=""/244, &(0x7f00000001c0)=0xf4) iopl(0x3) syz_clone(0x200000, 0x0, 0x0, 0x0, 0x0, 0x0) 5.865676579s ago: executing program 5 (id=4056): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) r1 = socket$alg(0x26, 0x5, 0x0) setxattr$security_evm(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100), &(0x7f0000000140)=ANY=[@ANYBLOB="04030000000000000006"], 0xa, 0x2) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', 0x0, 0x1208023, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/custom1\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000300)={0x50, 0x0, &(0x7f00000001c0)=[@clear_death={0x400c630f, 0x3}, @release={0x40046306, 0x3}, @increfs_done, @acquire={0x40046305, 0x3}, @dead_binder_done, @request_death={0x400c630e, 0x3}], 0xbf, 0x0, &(0x7f0000000240)="71448e5c7aa61a8dd9b017996d377db4373d18d014e2b252557cb707f699334cc06336cfdf9c43970c91b11778ed65680669d77a83862c442d5fe4df41f6eba369a21315063472970b7e96a9255e944f5fef7c3a9c077fc8c5146ed524381fd135a40226122d2b19baee31e3716cfb9c93aa62653d23e2773e2c0f55191e4ee2b9a73f6b229b68d4a5cfce96113966d5761017aa82e8441fcbfe1a23109b2be0d018740f148277cf4739bea112803d8a730ad7f9ccdd4c2ec8ec62dc75fb85"}) openat$kvm(0xffffffffffffff9c, &(0x7f00000020c0), 0x1, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="500100001000130429bd700000000000ac1414bb00000000000000000000000020010000000000000000000000000000000000004e2400000200002021000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) socket(0x25, 0x5, 0x0) socketpair(0xb, 0x80000, 0x6, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000200)=[{0x0, 0x2a, 0x0, 0x0, @tick, {0x9b}, {}, @raw32}, {0x0, 0x0, 0x1, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x3, 0xffffffff, 0x5df]}}], 0x38) ioctl$SG_GET_PACK_ID(r7, 0x227c, &(0x7f0000000000)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r8, 0x0, 0xd}, 0x18) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$smackfs_ptrace(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x388}, 0x0, &(0x7f00000002c0)={0x3ff}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) sendmmsg$inet6(r3, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="218292", 0xfff6}], 0x2) 5.391933666s ago: executing program 0 (id=4057): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x1, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@arm64={0x7, 0x6, 0x81, '\x00', 0x3c}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000000c0)=0xffff) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab07000400"], 0xfe33) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.073302081s ago: executing program 1 (id=4058): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000ffffff000000000000000095"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020a040007000000b6f1ffff0000854105001a"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e000000030000000000000405000600000000000a0000000000000400000000000000000000002100000000000100000000000002000100010000000000010200fd000005000500000000000a"], 0x70}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x3ef, 0x0) (fail_nth: 3) write$dsp(0xffffffffffffffff, &(0x7f0000000080), 0x0) 4.764088063s ago: executing program 1 (id=4059): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 4.186835249s ago: executing program 6 (id=4060): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0xc801}, 0x8000) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg$kcm(r4, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x2, 0x2, 0x0, @private=0xa010102, @broadcast}, {0x14, 0x81, 0x0, @remote}}}}}, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r5, 0xc018aec0, &(0x7f0000000480)={0x0, 0x380, 0x80, 0x0}) 4.125515601s ago: executing program 0 (id=4061): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x2, 0xfffffffd, 0x2}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="000000000000000037025d0100008025861b4f25aec1f79cdddce36143f9153d556872e4494000"/49, @ANYRES16=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x1, 0x0, 0x3}, 0x2}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) close(r7) 3.916085553s ago: executing program 1 (id=4062): r0 = syz_io_uring_setup(0x48be, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x13}, &(0x7f0000000000), &(0x7f0000001180)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002300)=[{&(0x7f0000000140)=""/4096, 0x1000}], 0x3100) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x3c8, 0xffffffff, 0x228, 0x0, 0x228, 0xfeffffff, 0xffffffff, 0x2f8, 0x2f8, 0x2f8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x110, 0x138, 0x0, {}, [@common=@unspec=@mark={{0x30}}, @common=@unspec=@devgroup={{0x38}}]}, @REJECT={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="40010000100001000000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="6401010200000000000000000000000000000000320000000000000000000000000000000000000100000000000000000400000000000000000000000000000000000000000000000300000000000000000000000000000004000000000000000000000000000000000000000080000004000000000000000000004000000000000000000000000000000000000000000000000025bd7000013500000a0000010000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000450000000c001c00", @ANYRES32=0x0, @ANYBLOB="0605e5e9"], 0x140}, 0x1, 0x0, 0x0, 0x4004000}, 0x4810) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="1e000000ffffffff020000000900000000000000", @ANYRES32=r2, @ANYBLOB="1000"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="020000000538a3199a0000000600"/28], 0x50) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) chdir(&(0x7f00000000c0)='./file0\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000004c08000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file5\x00', 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r5, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r7, 0x540b, 0x40000000002) pread64(r2, &(0x7f0000000080)=""/237, 0xed, 0x0) 3.275713903s ago: executing program 5 (id=4063): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) syz_io_uring_setup(0x239, &(0x7f0000000100)={0x0, 0x8103, 0x10, 0x0, 0x2cd}, &(0x7f0000000040)=0x0, &(0x7f0000000000)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000}) syz_init_net_socket$ax25(0x3, 0x5, 0xca) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) 3.073091695s ago: executing program 3 (id=4064): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0xdc7d) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0) 3.060424628s ago: executing program 6 (id=4065): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000200), 0x80340, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_open_procfs(0x0, 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) open(0x0, 0x14103e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_io_uring_setup(0x10d, &(0x7f00000006c0)={0x0, 0x5885, 0x0, 0x2}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, r1, 0x0, 0x0, 0x0, 0x80800, 0x1}) io_uring_enter(r2, 0x3516, 0xc2de, 0x8, 0x0, 0x0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r5, {0x6, 0x1}}, './file0\x00'}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="3f0000000100f4", 0x7) 2.735411507s ago: executing program 5 (id=4066): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0x3, &(0x7f0000000240)={0x0, 0x6109, 0x1, 0x1000000, 0x1a4}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) io_uring_enter(r1, 0x16e, 0x3c1d, 0x8, 0x0, 0xf00) 2.012878595s ago: executing program 3 (id=4067): syz_open_dev$vim2m(0x0, 0x7, 0x2) r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) read$midi(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008040}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap$snddsp(&(0x7f00003c6000/0x1000)=nil, 0x1000, 0x2000004, 0x4010, 0xffffffffffffffff, 0x3000) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r1, 0x5100) 1.249992315s ago: executing program 1 (id=4068): r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0xfffffffffffffffd, &(0x7f0000000040)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000040010000000000000101410000001c001700060000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000440)="197cc163df7ce9d0b02650c9824bb25cb9048c6fee30d513", 0x18}], 0x2) connect$inet(r0, 0x0, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r5, 0x405c5503, &(0x7f0000000280)={{0x5, 0x0, 0x4, 0xfff6}, 'syz1\x00', 0x14}) ioctl$UI_DEV_CREATE(r5, 0x5501) syz_open_dev$evdev(&(0x7f0000000080), 0x7, 0x0) syz_open_dev$evdev(&(0x7f0000000340), 0xaa54, 0x8042) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000080005001027000005000600e20f000008000900010000000500020009"], 0x4c}}, 0x0) ioctl$UI_DEV_DESTROY(r5, 0x5502) 737.097084ms ago: executing program 0 (id=4069): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x202, @private2={0xfc, 0x2, '\x00', 0xff}, 0x4ac2d78a}}, 0x0, 0x0, 0x34, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "0300", "95670cff05e29ee8dcfc54e13b2dd711", "fdffb26f", "a2deb79f8c96bff4"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)={0x14, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x48490) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="210000000000000000000000000000400004"], 0x48) ioctl$int_in(r1, 0x5421, &(0x7f0000000240)=0x3) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000880)=0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() sched_setscheduler(r4, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r5 = semget(0x3, 0x1, 0x206) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000200)=[0xf24, 0x5, 0xe0fd, 0x5]) semop(0x0, &(0x7f0000002480)=[{}], 0x1) semop(0x0, &(0x7f00000003c0)=[{}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(r7, 0x3312, 0x6) r8 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000140)={"ad9a6c3f", 0x7fff, 0x0, 0x8, 0x22, 0x8, "bfff02bf39ea7996283e4c683e1cec", "70c69475", "a5517c92", "00001c00", ["4fa371c86389332b5bafedc5", "2407ee471550c1d093e7dce3", "008be63635dc05e546621f8b", "9c68d7f540f579412fd3a5be"]}) sendmsg$NL80211_CMD_GET_KEY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='.\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="23012abd7000fddbdf250900000008000300", @ANYRES32=r6, @ANYBLOB="0a000600080a5e3dab0000000000"], 0x30}}, 0x4000) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) 702.317765ms ago: executing program 5 (id=4070): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x21, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="8400000012000501"], 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x20040810) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='+\x00'], 0x10) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b80)=@filter={'filter\x00', 0x42, 0x4, 0xb08, 0xffffffff, 0x0, 0x98, 0x998, 0xffffffff, 0xffffffff, 0xa70, 0xa70, 0xa70, 0xffffffff, 0x4, 0x0, {[{{@ip={@rand_addr=0x64010100, @private=0xa010101, 0xffffff00, 0xffffffff, 'wg1\x00', 'dummy0\x00', {0xff}, {}, 0xff, 0x0, 0x40}, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x2c}, 0x0, 0x8a0, 0x900, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x3, 0x0, 0x1}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x5, 0x2}, {0x2, 0x2}, {0x0, 0x1}, {0x3, 0x2}, {0x2d}, {0x3, 0x1}, {0x0, 0x2}, {0x6}, {0x964, 0x1}, {0x2}, {0x0, 0x2}], [{0x887, 0x4}, {0xf7b, 0x3}, {0x4, 0x7fffffff}, {0xe, 0x8}, {0x5f, 0xfffffffa}, {0x7, 0x59f}, {0xa24, 0x4}, {0x2, 0xf}, {0x6, 0x9}, {0x0, 0x3}, {0x4}], 0x4, 0x9}, {[{0x44b7a6d3, 0x3}, {0xffffffff, 0x3}, {0x80000000}, {0x7, 0x2}, {0x80000000}, {0x4, 0x3}, {0x44, 0x2}, {0x7, 0x1}, {0xf, 0x3}, {0x10, 0x2}, {0x0, 0x3}], [{0x0, 0x80000001}, {0x6, 0x6}, {0x7, 0xffffcb18}, {0x7, 0x9c7c}, {0x2, 0x2}, {0x400, 0x1}, {0x4, 0x4}, {0x5ba1, 0x6}, {0x9, 0xffffffec}, {0x3, 0xf}, {0xfffffffd, 0x3739}], 0x9, 0x2}, {[{0x7, 0x3}, {0x1, 0x2}, {0xe}, {0x3588}, {0x3, 0x1}, {0x8001}, {0xffffffff}, {0x10, 0x3}, {0x0, 0x2}, {0x8, 0x3}, {0x6, 0x1}], [{0x9, 0x5}, {0x8, 0x48}, {0x4, 0xfffffc00}, {0x7}, {0x7, 0x9fc}, {0x1, 0xe3b6}, {0x401, 0x3}, {0x3, 0x4}, {0x0, 0xeb6}, {0x7, 0xfffff347}, {0xc6a1, 0x3}], 0x8}, {[{0x1, 0x2}, {0x6}, {0x2, 0x1}, {0x407, 0x1}, {0x7}, {0x8001, 0x6}, {0xa, 0x3}, {0xa, 0x3}, {0x2, 0x1}, {0x9, 0x1}, {0xffffffff, 0x2}], [{0x2, 0x4}, {0x5, 0x7}, {0x0, 0x8}, {0x3, 0x101}, {0x2, 0xb}, {0x7, 0x7}, {0x0, 0x3}, {0x80000001}, {0x4, 0x2}, {0x1000, 0x3}, {0xff, 0x5de}], 0x7, 0xb}, {[{0x8}, {0x80, 0x3}, {0x101}, {0x5, 0xe99882136a902c43}, {0x7fffffff}, {0xb, 0x3}, {0x8}, {0x0, 0x3}, {0xfffffff7}, {0xbe43}, {0x0, 0x1}], [{0x1b, 0x5}, {0x6, 0x39}, {0x4ca7209f, 0x11}, {0x9, 0x4003}, {0xa2c, 0x6}, {0x2, 0x58}, {0x0, 0x4}, {0x94000000, 0x60c}, {0x0, 0xf11a9b7a}, {0xffff, 0x4}, {0x8, 0x6}], 0x2, 0xa}, {[{0x1, 0x1}, {0x400, 0x1}, {0x9, 0x1}, {0x6}, {0x9, 0x2}, {0xc2d, 0x3}, {0xc4c0, 0x1}, {0x2, 0x3}, {0xff}, {0x1, 0x1}, {0xfffff020, 0x1}], [{0x7, 0x8000000}, {0x9, 0x8}, {0x2, 0x1}, {0xab1d, 0x1}, {0x280, 0x5}, {0x4b, 0x10}, {0x0, 0x2}, {0x9, 0x2}, {0xc7, 0x8}, {0xa890, 0xbb57}, {0x5, 0x5}], 0x7, 0x3}, {[{0x0, 0x3}, {0x7, 0x1}, {0x2}, {0xb, 0x2}, {0x30000000, 0x2}, {0x6, 0x2}, {0x80000001, 0x2}, {0x51cb, 0x1}, {0x401}, {0xfff, 0x1}, {0x7, 0x1}], [{0x7f80, 0x10001}, {0x2, 0x7f}, {0xc, 0x7}, {0x50, 0xfffffc67}, {0x6, 0x5}, {0x0, 0x755}, {0x1, 0x2}, {0x6, 0x28f}, {0x7, 0x9}, {0x4395605d, 0x8}, {0xb995}], 0x0, 0x7}, {[{0x7, 0x2}, {0xa77, 0xdf58b979394f9c26}, {0x8, 0x2}, {0x2, 0x1}, {0xf, 0x2}, {0x10, 0x3}, {0x6, 0x1}, {0x2, 0x3}, {0x5, 0x3}, {0x5bf, 0x1}, {0x2}], [{0x10, 0x58c7}, {0x3, 0x7}, {0x5, 0x7}, {0x8, 0x7fff}, {0x6, 0xb6c6}, {0x8}, {0x4, 0x8b}, {0x10, 0x3}, {0x2, 0x7fff}, {0x5, 0x8}, {0x68, 0x800}], 0x4, 0x1}, {[{0x2}, {0x8}, {0x4, 0x3}, {0x3ff}, {0x5, 0x3}, {0x8, 0x2}, {0x3}, {0x1, 0x2}, {0xb1, 0x2}, {0x0, 0x2}, {0x0, 0x2}], [{0x4, 0x40}, {0xd, 0x9}, {0x5, 0xff}, {}, {0x6d0add70, 0xf}, {0x0, 0x6}, {0xe}, {0x8000000, 0x8}, {0x4, 0x8000}, {0x8, 0x3}, {0xa}], 0x25}, {[{0x9, 0x3}, {0x6, 0x3}, {0x3}, {0x8, 0x3}, {0x1}, {0xffffffff, 0x2}, {0x80000000, 0x3}, {0x3}, {0x3ff, 0x1}, {0x8, 0x2}, {0x8001, 0x2}], [{0x6}, {0x28c7, 0x8}, {0x6, 0x791}, {0x4, 0x7}, {0xf, 0x8001}, {0x0, 0xfffffff8}, {0x1000, 0x80}, {0x9, 0x3d0fd5f}, {0xcc}, {0x3, 0x2}, {0x8, 0xb}], 0x5, 0x1}, {[{0x3, 0x1}, {}, {0x0, 0x1}, {0x7}, {0x5, 0x1}, {0x7}, {0x80000001, 0x2}, {0x4, 0x2}, {0x7dfc}, {0x9, 0x4}, {0x1, 0x2}], [{0x8, 0x5f9}, {0x0, 0x5}, {0x6, 0x40}, {0xffffff81, 0x2}, {0x7f, 0x872}, {0x9, 0x8}, {0x9, 0x7}, {0xb, 0x4}, {0x9, 0x1}, {0x5, 0x3}, {0x5, 0x9}], 0x6, 0x2}], 0xb}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x5, 0x4, [0x32, 0x4, 0x7, 0x2e, 0xa, 0xa, 0x6, 0x8, 0x2e, 0xa, 0x1, 0x19, 0x1, 0x36, 0x40, 0x1a], 0x2, 0x0, 0x20000000008}}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x6, 0x0, 0x7]}}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xb68) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000006780)=[{{0x0, 0x0, &(0x7f0000000540)=[{}, {&(0x7f0000000440)="e8fb905db6872bec0394d60e715fb8c428f96a2e3425c891c6f78b39e6c738dd158b6a24dac494f81dd8d3acca19e9aacdff4b92dd16cfc5165c3f04d97539d6451cbfe94df52010ca6fcfe954bc2eab37ed351f49e480b56a4f0737d866caa07782607da1af19d1e509351fc7719c0f7c87aa64cefab243c2f5cf40700b6cb57adc0451098e6fb13c4245aa1496d0adbc81a6f825bd5d32b2c9831c841223e8ffc6f51a4511552d0b7d344ced4560243ebb5a7ccabaa2682ac2656146ee1c7dc5667c", 0xc3}, {&(0x7f0000000180)="dccbe51818e64723a911e2462e85095665b311c4f0a981b3dc3d3c4323f6def6419d5c117eb8e68c9261ab66a62f7b9c6dd394255f7d2f5605ab9a078c", 0x3d}, {&(0x7f0000000280)="8059bc7cd1ff48cf8fee7e40be87cd4af62f70bb166059496b22dbe08a44fee783622c9ee821e1a42c8eef88", 0x2c}], 0x4, 0x0, 0x0, 0x20004001}}, {{&(0x7f0000000580)=@abs={0x0, 0x0, 0x1}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000600)="94561fae585de3d70cb3c42e9683fcfba7af7ef3c60f2bf63b693759c306e036b3ec3ebd75bd57d7e5d493a0bc6f73ac1843e9f20af291964d92fb", 0x3b}, {&(0x7f0000000640)="d0e6721fd452085c9a74498757f4027d07656fd1f6cfd57ec6cf6b09c3397f743758d183f5078f8b9797babe350d7c14a04d336b3c7f44a86c84532dc0ed9065e27e3a669c6a1f1193544d00a54d5d92603c8c2496a2d56963b92c674e9ba5ad1965da60b8f3071d8db518b8527415bca65e07d338a9bb9afc275b494dc06688a3ec1f720bf3490fc23fe8d37756c9527c135bdd3a522e3729715958faa586636f4888d30fac04adef034cd30070b43d350539f72502d7de0d2a494243ffc01ea61768c9", 0xc4}, {&(0x7f0000000740)="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", 0xfc}, {&(0x7f0000001700)="28375c3c814feedd074dc40243e822f831cd0814373c60ff403973fb6cb9efb3de588fc49da2e853cdb245b118a4d16de2d37229b6e90236d5da43e6b2b47091a2c26b7404b2cb640e6f604c526a54dcb7cf4a48292206c41194274274fb4088fca5ae52a2f6a6c912dd3344ffc7e24e704ad3f1086e8e6d409c17a5c446a8ca98689c91329bf6892107d491b231d9b9f107aa356f8bcc0fff9b7b290be1fb1f3547da052f4111b0dfd568fa58f0b92cc73228f0f18f88cfc298f499e26d371c4f08d324392f865aa5d0bc6ddc552a800bd8a54f6fd66556780861c225c5655e039fb6430b08df42ecfd3464aaff6266b57ad80e1273d13ce3020f34aef8bc77884c387f8ee35449687dba7583da508654245fb786cf0f5466aa39e3754fdc6b08f30df1e8ae922a51bc4cced9a70b1dea08cae91d97486eb63dfbcd842750d51ad1d7bffdb659b6740ae07cded7b6486fb0ecb4b747b28c83b586c8158f1f51e58336f7baaa2281b03fb6ea01b71e83b868f9e5171ae2cecac40e53b3400bcd9fb95b906550bb749c6b5713edaaa33f13028b8d60b1fc96912358977aba312803e772b6bcd8cbf5faadb957bc3b80bdf67b350b7d62d0f2e77c26b2e9e051d8097cd15f269cc944b0b471fc85374848e1fb67dc7b06e11a811e3f04538b54a094f4b5360f52122feb2ff46d6c3c9e12c3bf47a160b96aad4577842e4d0048cebf3b62a45d62c132d8ab6187643bbc2db3f3c732f86b7484b9a2eed320c03dbba75067752f4de23637ef6a63dfb440e8cdfefe7082cd082f222941b58e69f4223cccb3ef1fb3ce3218118b3b97f4920e5880a7689f32623012e1bb8223a991de80cbed6e03a525b9d947b8cab13787501fee986e331aa962ba233b23a4f06afddb472d9788ff6db081107526f885adeea112e3127a6786914edf5109c75e3b46017e778f402b160b06f26fab01ce97e9f74d309bd9c29cdc8922f02e52fcc37d63a5cdd701232ce2d01ac1267acc2ec222dc6edaceb50909e1c75a36432d01e1b17e8c99777190022256aff1352c4445a73f2a24c1db6111ca6658ff4f685cd4599dc477e372694983ae71dc1e062c0f01e82c5433e63183cbcc4544f49b580c36871800627ec51955750fcb294b4048934d9fd64c95a35b3e98b28f294412438784410978610ff52c578debb5f1d0aa9d14dac662f0f0b13427453933536c1b5b90ff364bf37ccbadcc573f5c732fe603df83733d13f98c64132a2d198da28f442cdf801dc644fb1e07f114cab00e5405a5304b2ed16e23ed7cddfa4e485bc8c078d2e0c8d41dfb9c2f5c30e17ea7aaf6ed332ed7f2b899c18cbb853a20207c6d2e44ea45fb444c1c400df2e570807ce55c8ae5f1e4f1f7a7de6e7567869acd7b7e6dd32a8929a67439db48e0e66c15e43c0bec4b740821267aed29ac6754472d1af5e6fd8dd05cbf84bd143acf26524f8fa841dab36550c5aa615bbd70de368cd24853f0fd2be2383cc9ca7b3ce33a079d63930743994737947962567decd53d4884ae295ec58f8b32061eccc757d503cf25a2c2e20f556cb185dbecfec090e5ffb938282323c85d96afa974ef81200f22c3f8a1bf78356d9ca077ff9a2fd7366a55b3c02049317cce760ae25a76708e429c614e25f5672560bd807ebfd24a21b99450fffd03863578b774eee157b44967e071122b052fdd58b180d9735c2776e35c37d4fdac91e079576dbcc2713f6b059c7705ee5eff705863b1e34f6d5bc313f413e55f9473071d0566fa14743be05e90e83bb11b7886c642a2a61b2d6e935bcc4c1761800e149525eff843504c945eb5cea99a695a7eb0b21011fe4d89f71d67aa650696356b87d0db27eb320113fbad1608fa070daa93720cf87d1e95b89437db049746bb9de786af8f9bc39314676d45898a708ff5e3325587289bb072c74608142c2c9304dd8ea4e1180ec1791254ed1f5aa7ee94a2daa345ccfcb7a72723267667d9ceab7c67c9c340e3c325d541a248647c88c92e5e9f4ff49efef4cf4c15c35e1b22beb34c73724f69705ffc80f740efae37ae7ab1eac85bfdb244499d2b658ef6b3fc34970ef409595f07f957994ace8a11a50ba770fb5f52b56b4a86b93e4aea7c07616c2e61f1a47301f45e23e4548281efe51753af56dd35b3b23f59bc59adb7a7e2f724204ec6235cc78aa43fcffa429bcf1a600f19c0be7ad948fbcaeee7869a8ba29880917a32e68202588e57fe3d14dafc3762c1b9ad8080cfd8a031a17c4685db53f3659202d2c480824f0db86c368b113217e3e2f1ad094e6bd25ae63014b2f86d25ad7beb3f1b0920bc7a7df23d65384b15c04e9a94c26545ea4b3cdf2b5e6d55e0290604540abb2a6910af106225dfbe47af15200ba9836a000df307bbd04d2b67a6c9a1cd1a710ff8d3b387d3448e387132df4f701834a91a64b70bce5d2426da497b0cd508413febdec4634f9cac97a823e190c95dac18ba94ff06e01b1589ca71d0e0f808acd4df33b20fddc4e2ebed343cc52c96445d20e7dab7faa75a0634070a269c94245184c1898a0f5963d0977d753c07b8fe5ea1eb61dbbbf23cd72380582bc417514eea28ed57defe3c85e7eeed3e46da95e8b823ca055a1940f64cd7fc990c11690a8abbaa27428927816f20d3265d9e1098e3d01bcd015c7a0a75682f774f63d8f8053cb565e0c7c3096b72377308a6c56e2752b0e8790d41603647c2619642d86e3ff158e6729e6a65d3febebf988be5c0c1b0cb4cf8e9d46e590b42298779ef0df5719de9eaed25d55303563c691423863b2466b86561e970517ff45961c4055403c1524caea80169f3d7012334f82eb8a7c4ac6fe0b7656fd78be606660afff47c361cc9353ebb647d686fc4af441d6f33fb5670c22a37543a56a49bc2ad8d844cce1f8932ac92226132ba4f6f3ac08ae07a7485bea76757d9f1dd7d355f52492d2bfd06e6636238367536c4754ad18f98d4a5f4b94b2c9e768c61ee32a4fd793c3ba5b9eb716cf04d290cb04c4b6a26633773510a3aae48d035442fede8434f68de12b69d1cbc8a233626aa50985ea3e6ecc350f0825f439be6a51df50bff54c52690c4c27545a322f0f542e2651a799fe16d9f6c4df15eca65009083190e35cd7a1c02d80a1bec523bfcf033d5e4c267dca1b19ce25a4b82cfee96587234df00b816a31d9eadfe30a01a881bc709f09f40a17eaa1bfee192fadb552def2298c856d50f94c075ad1eedacf2b0e9750002703dd7998369220a470a3ddf21531642e68229b55162a88719a514b4f656a8e804daede757d36d6cdc3e8f57b079ab68a4dec4216a3e107aba81a7dae1770cdd2c32dd22fbec2da906562ecc211fb1c24ae383b99b361ad3b3518e8476011d6017f29f604577a1f7574fa844719deee8ecc183aa6d0a45c646714ce8ec47e43bcab9cea8d9f4df0b7c61eac1a2e648ccd343a14e2c0747328824ebf88af4b7778f2beadd036c917a1f8a01534c6fa5344908b02994cf607f9e8c5e2f94b1f106e8471e5e5214915481b34b540ccde9ff1d4181795fecc6beb942f73d1ee15c32b1a090b15efee346f202b0cbf43549e2f827131c1580d1df51b974e113afe34894a2cdf8692eceb86117346ba0f76a71a05928c5bf58bd266184735102a88e3aa99ee78b9fc1b4287c7307d9ba4b5a693b508895e8c1c6446d0073878669216f1514bf7b87da169c61c1e7b2d9d6f443faf6671cdd606a9619cb0672ea9152ac18bba6adf0f07071774f133b12fb4eec80a1254cf267d9d3b1a6bfe305fb7d695d71802a12c4e437a3c3a6ab3a35741038d09f310b112a554140d73592317f1c72c8fdec7bcb7ed393765790f50430f21c49165c4af3b9bb86cfd64dbd72d3dca89b13ead7dca096c3cd7a4772e419d0189ee43a1adc38c77a2c04e4b2b0b4d5c26d3103d8a287ac64d737023c72a682c2756305f60120d43b35e515e66dd42b4f9794610e744b37e0e23d8def497c5d64967bd81455800ab4524b094f625f471251f60b1f0bda8d14f8dce585e1a947514cbc85389ef15442058ecee3abea9a0abafba494ca53c020c32d62a91e31774524a87ff034f803485472d127d9d96581d290ea86006ab2a056aa27c600d4392e4271f71099788a178c030a91bae452c66d887c1f5fd4b61240fe705db06422482193eb69223f9fb94a9d88224713a14215f39b1e39bb31ab6f0df85543f4ca00f5819922959e312422fbcd91136548e5bcaa5bd4ecea100b2f1448eaac5abf9e2b4680f51da3e6070fb6668e5720e489e747be2ffae8b42965eda6cafb7c871964bb5e0b1fd510d150cfc2f7f4ea36aead536672887c3f5e3d8831858ba21e3400c128316ff3eac33f11d23fe14f65a582f4cdeca6a902be00a657d739627c8893cb55f8e6c994cf0b35fac6e2145ae8e2fe1b841ce4e457f2d082032d8de2c21ed7102566aaa57a94a441128d67c61a131c12aebfec5a1a7cbf13c9924a79bfa9974f424326cc3714a7adcf553b7dd816ce11b8c4c1f4fd1e66be55ec2420a34f03713de5a441b685c884d97e207936089d1ac580bea161a0fc775f178a0d97aa32d0fb89cfd4fcb1e2f78aa8f00d85a7a3728a93071680385e0ec8e000e5e90b089cc3adc09bb7ca1219436816b8311e555845da5446a9aebbf09c026758b4291852d0594f29f4009b80d84a18ee501650362a8af2698628e0c4c628e7067fc5099d5a2b43020f358b46a458684aba47eb9805d105b7b73d8683b659b1680489bd0faa256e242ec2e459078b0f24e9ba97a3f87f922d6b070e716d6d64d6cf4be7f41ca4f0201a3c08b6f0d858dc7a5680e585709d8b87b722948b8febcc5c95eb31672fc9a1ac66860f7628d95dcbb5b5b75a1dd13bc414f92d8e789c8cca959c07afaa1904f98ced4a6940872eda9ef3973c91a6c404e4e872a30af5659ddf888d4fbe8307f5d4722451387c0bdf2795b8d1663c702ba7d8a8f85ee11e4ff79eb30b021d1ea38443f0c8ad33c752728827fc9763d2dcb63a6fcaa88b5fd9c40abf7b85790d914736de37afa3aa6ea7c4378b8b8bfa9902f9f0c3cc1418e4d1b073ccc8bb178b82f572d82b70ccc32921de8a443c4e31247d75f3ff17067500c8e1b5a8b80dc76da414dad63d3b504b48ec0992d997891c69af5484132888a519a2c3cd8f647d3ac9066657a4138322b2597c99e44e5ea26e8d4192f78cdd3b7eb255785a61ca98896175dbf4904f5062d8d7113287a253bd5e48d8a562f1960aad9d24b2a046f90ec010a3d3846ec8b02024938f70f6c90ef177f623494db1af18fde6372059a825faff0ad00f78baf1364d3c199e84b4e73bb69cb13cb57777d8fcf7337384d254a8fd33dbba351e085778cdf71b3c094299dceccdd61655e4c60da1d91a58a43a13edeb21c26876dfcf3f3a26dbae8ebf96f5c2bd3b54a078c0c15b6088ab7bf98398b3d999c087433a06d3df3c50ea90be52d81159d8cbc6e48b4ae0f319433ec1de0ab74925cb580ebb0aef61bb825e4016422ff264699e184658bbce98249c41f96c73633fd9db432db536168c5dff902e4d5e23d88dc00c85c09bf483e9e912e5a9ddb1d4c9d484845b2f129f511c40ba2743f81a0c600dfd4535604a86acc5ea57fc8e1c8839032c30521da8556b7c2e7479a2d056bdcdc514b4a9adfe80ffc9d0d39da0ce9734899b72bed77b3cb089ebd72da464eb596616ddc6040bc45d6490f97df16a2ed1f5cd32f7877e00e3219ac0a64fd125b70191d1f1a72953", 0x1000}, {&(0x7f0000000840)="1ba8750aed2058b366ddfe4016de1ee250bfa1f0042f8ec3411baf21b210ce72ce9d63e9584927fdcc8b2f8424f2e17ad229915e3a4f3c24f282c194da596c859f63cc60f3c37cef1dbdaa53b308696969900d2f8bd393351880a9f16196f0baec9e99", 0x63}, {&(0x7f00000008c0)="a4d15355d09115600d0d855735f04da80be9cdc29982d0d7bc9e1a214df96b4b51c10ecd18015fdc11", 0x29}, {&(0x7f0000000900)="b29caa8a2c3c68f7804365f717f762944462f9699fd6ddbf7db336014afe808533352bfcd0bc94cf58715bd2d3d288fcc582b03966aa63124c1b8bc191c15db0d91f81edade4fc3c5761ddb28b7e7b267e07", 0x52}, {&(0x7f0000002880)="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"/397, 0x18d}, {&(0x7f0000000a00)="260064550a7561e567a0f38a2bd107edffca0dba10c60e68875758aef5413e12ea6185045affd0ca14ae14e6a745de782a547cea251dac2a4122b0cdf8f2ed14def79532b5271056c23de6c846d51e0baa65941b9e237adf847c3946e9c7fde27a40c25ba475e319f4306dbd61c05e0f7958b207d3202d5702891f32f6608a868f36f9019ee7fb352d716b6e73317aada30548ddf79b8d74a297d9cf779633de1439089ff9e906c588546432980f734d", 0xb0}, {&(0x7f0000002700)="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", 0xfc}], 0xa, &(0x7f00000048c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}, @rights={{0x24, 0x1, 0x1, [r2, 0xffffffffffffffff, r1, r6, r3]}}], 0x68}}, {{&(0x7f0000004940)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000005d80)=[{&(0x7f00000049c0)="12a2e71b13796b8bf3604e4cca14fa71c4185dd265f8cb69a99c5812a71809e0fc1f71174614b87f46d6643309f59ea781ce232ae2b2d461f430aa6d38041b3b69d68ecf78e55fd5b84ab784fe7426ad75945aed9bb224e956b99570d24cce338c680a74", 0x2a}, {&(0x7f0000004a40)="a5850aa6254c3181ceecf7576951df062b2de909d2982834a5f6eb0d13b9e151d7cc836aa649d4b4aa390ca33d40b78e518efe3a2d6c4e5dc9b2d49eae495ae1c8dedc48ba97443bf6cd3481d995890b9a54e5fe115d19f61a2f0aedcc981e2eed5ec8b4d9ccff274967c415eaa87469e31f17c23a17239062f3cdec0f850d4c9846ab7967c310c391d86e370caed84b56bf2fa7bc86341357a22ef4faab4e31b155a3bb54216005d2211988984171ec8adaebf3100c82fec37f59e31a2cf52993e65820807ca15391fcaf87b83994a22922749fdd8b50ff7842bf4fb29c158b331af16a7f0045ba0d93f4eebc98fbfdc4bf", 0xf2}, {&(0x7f0000004b40)="29cc5f1d903c328123767d8afaef5579bd4d1a43c6897c8d1592d3bf4be3092c4681992ec49eca5b56b6d078ed408c85a0110104353ad4b71acd86c161140db066d20581", 0x44}, {&(0x7f0000004bc0)="44118ef47b6717e0cb689de52186c66c7023f5e6c3cdcf976f93c72b5e58d0188f467ec6e29d60692f32490b88005fc10287e106ac231835ab34b2d5fd52e49e67ead143ceee643948a09bf4702a246b6c622e91331f5269274861308cca8a2e472147eeb2bbdb3d815dcdd81c17fcccbc5340f224f92280f24e2f6b812dae64b3b689dd39768487c8bb3526e935f782eefd0499025e9f70c6e6dbe720df8bcf17cc4551188bf93503c047", 0xab}, {&(0x7f0000004c80)="25a51ddab8598424b49feee43faacdaf7a1002360386f0240d74ff59233e2435ed0e9879efe026275302fd92c72d166337a1c2a1cd111a95b0171322e4291afce7c9ac0e2a17c5a898adc58abb4c6bdbc40a4c9d7aa23e0b19990b248c807a15ef0546f735774b35fd87b21737d07289903a34b8169a6bcd73f5e4a014961755b03a696e4da9f3cca632025867ee02740d727be3d9b9d32f8dbf7f7fe95d0f0af622df1f7922d2cc2892a597fd64a744c8d2b5c644f66f0f670d006c8358fdc14c64c4d02ce14397baec9a9a54e8072704c965db822d51edaefc4df27578d34643980d281f6cfd5038be9feb4c981ab6210608fb", 0xf4}, {&(0x7f0000004d80)="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", 0x1000}], 0x2d, &(0x7f0000005e00)=[@rights={{0x1c, 0x1, 0x1, [r4, r1, r2]}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}, @rights={{0x60, 0x1, 0x1, [r4]}}], 0x70, 0x81}}, {{&(0x7f0000005e80)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000000000)=[{&(0x7f0000005f00)="5153d10be9855471c41acb098db4379f182b36527d545ab94657e9a4c2dd01699a3399701bd84cc51a6771311a83bba4079273102770797f1506224624083eb70e5142ac5af97ff822f8aa41ebdfe86ee73ca610f6400c21aa379f317b9ea03cbaa7b434895e63e54ab2a3d7", 0x6c}, {&(0x7f0000002800)="54f13f071036123d402822496f438432e7673c6a6f506af2a2d3a4cdf43466e3b15ad9d2e1456bcbccc70f208502365191026ab98c2dcc000231e51ecccb19c17c92bd0c38716b41ac0000000000000000", 0x51}, {&(0x7f0000006000)="dcf92927126faeca163fae1dda02ef684cbbe15b5f506850dc1c5e6c932b050a82ad767bd4e1e52c7dd9b36dad6e25a6aef59d8d66531bf6ac6473a45450e5436d2873db43c9c89aa47abbdb4ad6039ee0393ac4187a72bc9ce0e585b97d277c30d01d0c251da77e132f010911da21a22c90cc6c67947bc06c9df05973eb47b8e584097eba15d60abf736ff818722c67cf72798a9d4b8f5774b5df9bb7d507ae0d8e991271d653bbf763518a7ee3b769769c9ba08f62ea5e94e939abf5fedf4192b1", 0xc2}], 0x3, &(0x7f0000006140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}}, {{&(0x7f0000006180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000006540)=[{&(0x7f0000006200)="f73129e6b55c688b61ad02ea27ab89aa98733b76ee280e7300c3b61be330761f4da1c1de25c2eaf740a31700ad09613da8aeb7809f725a59077625e1109ceed2c8c87030b54b7cd965cda29540ac598e7a1ac04a88c58abb91cebed95f71203c1d0e970e8198da5f16f2c5000ac8caedc24c9906c948fa3b26d935c4614d9687db8c972df2d9be7c2962d959ffc4ebdffb4f41bc11dec87ac2ddbc", 0x9b}, {&(0x7f00000062c0)="2940f0918a05b786fdc524d65084c3222a7945f165c0f657dd9c76b8e17ae3ab8f449cf0380b326f8b06998513fc1ebd6f095e69e5711546e18f7234e578", 0x3e}, {&(0x7f0000006300)="a6ad8df6a84628ba928f0f279a6e607a929cb6d3e034e0af6b9104ee7585dbd0b36c9b0bc1b39990c8208b57966640c76158c34efabca394ec387419f8c42c4655922ccc624a221c4b05811c8864c04ab206b1663911b0cef3d737608361ef4b721eed17fa29a60879fd4bea24334e2702244bdc14258d0768347843272360df4eb7e270536ad3c50b435fb7a9caccbd451d0696ab4dc1affa33c6410d05f91c1da69f63114670be3b6ef68cb33b4b71687656786e7de0db95a3f0aed964551ea7e08284be8f329c92dd57566c0dea459a1c398e3a19f9bb3f2f39b70953113a4a9d", 0xe2}, {&(0x7f0000006400)="2b11d7ab9dcbba0e92901ae50379f2ad199f29ea93e9bf3eadefbf7a6ffc0ee8ba52485dc0253c8ef6f62da67bf88b8bea8d4f2535d652d794ece0c0405475a77000fed86f365f8381941d6c7047caae906f052638e5ce176934c370e701282e3c0fe2e4685b59f7d97fc6f77cd24e24345e30707e196c24dc384cddd03f3c594a8bb3f83247f52748de8291f42346902146254df40bfc68e6fbea1f344d3292718e19681537626ad2ac0a78c2f2595e7b7947c5", 0xb4}, {&(0x7f00000064c0)="9ad941eb0be6dfe4bb6e37b9ef9e4bc7ee166737c4cb5d200384a0cac6b293d79d502a1e3931e7872eb9f9ba40634586ef85bde399c2a0cd0c8319ed2d609b30b5dd2d2763a9b44810d2f458d231f53ac1d21dfffd96371129fc264dfd85d2901c5c2818f6719ba7e587d81c534d6c42bf0298cfbbc9b0b920c783", 0x7b}], 0x5, &(0x7f0000006680), 0xd0, 0x20000000}}], 0x5, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 417.647699ms ago: executing program 6 (id=4071): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r2, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000540), 0x4001c0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, 0x0, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x9, 0x4, 0x6, 0x0, {0x0, 0x10001, 0x0, 0xd, 0xffffffffffffffff, 0x102, 0xed3, 0x2, 0x5, 0xc000, 0xfffffffc, r7, 0x0, 0x7, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000500), 0x2002, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}, {@cache_none}], [{@fsmagic={'fsmagic', 0x3d, 0x6}}, {@context={'context', 0x3d, 'staff_u'}}, {@fowner_gt={'fowner>', r7}}, {@smackfshat}, {@subj_type}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}}) syz_emit_ethernet(0xdc0, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0xaa60, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x700, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0) r8 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x800) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000380)={"ca52f1b5", 0x0, 0x7, 0x2, 0x0, 0x4, "f759e10400000000f59aad966300", '\x00', "0300", "e859ad13", ['\x00', "c2fed6bf0400000000000040", "cf486c860000000000000020", "0000000000000000000100"]}) r9 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r10, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000480)="c4e178296216670f30ef67660fc7b769b6660f388059e0b805000000b91e4200000f01c10f20c00f300f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b921000000fa3ec5c4e17929d8", 0x54}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r9, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$CEC_TRANSMIT(r8, 0xc0386105, &(0x7f0000000000)={0x8, 0x7, 0x2, 0x0, 0x2, 0x4, "d5c3a389fb0f054454fb649ca6fd7c2b", 0x9, 0x3, 0xb, 0x5, 0xdb, 0x8, 0x7}) fanotify_mark(0xffffffffffffffff, 0x10, 0x8001020, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x99}, [@ldst={0x7}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) ioctl$CEC_ADAP_S_LOG_ADDRS(r8, 0xc05c6104, &(0x7f0000000100)={"7ee9a383", 0xa, 0x38, 0x4, 0xff, 0x7, "9bc9a5378f3a9294885c55e8afda4c", "40002003", "df6049fd", "e11c45ec", ["db21c9f4cb5d0adfe1c6040e", "0ebb13d6faf5e818f26724bd", "cc0245c3e2bceca83194614e", "2a14e6460f4899b605ce0d0f"]}) 133.300392ms ago: executing program 0 (id=4072): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 105.701766ms ago: executing program 1 (id=4073): r0 = userfaultfd(0x801) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000000180)="1000", 0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)) r2 = userfaultfd(0x801) r3 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x38e38e38e38e5f9, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc, &(0x7f00000007c0)={[{0x8, 0x4e00, "00eb13301b974cbd"}]}) pread64(r2, &(0x7f0000000180)=""/4096, 0x1000, 0xffffffffffffffff) socket$inet(0x2, 0x800, 0xffffff2f) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010300000000030000f11c00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="ac010000", @ANYRES16=r7, @ANYBLOB="01002abd7000fedbdf250a000000a000048054000780080001000600000008000400050000000800010015000000080002000200001008000400ff01000008000400000000000800010017000000080004000900ffffffffffffff7f000008000300030000001300"], 0x1ac}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(r4, &(0x7f0000001280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000001180)={0xf8, r7, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA={0x28, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2b5a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x30, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xad6e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x4020084) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mlock2(&(0x7f00007a8000/0x2000)=nil, 0x2000, 0x0) syz_emit_vhci(&(0x7f00000026c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_write_auth_payload_to={{0x89}, {0x4, 0xc9}}}}, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x13bfffffffffe, 0x10) r8 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r8, 0xc0046d00, &(0x7f0000000080)) syz_open_dev$media(&(0x7f0000000000), 0xceb, 0x400) 48.712133ms ago: executing program 6 (id=4074): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {0x0, 0x6}, @raw32}, {0x0, 0x0, 0xb0, 0x0, @time, {0x0, 0xff}, {}, @quote={{0x4}}}], 0x38) write$sndseq(r1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x0, @tick, {0xa}, {0x0, 0x5}, @addr}, {0x0, 0x4, 0x3, 0x80, @tick=0xfffffffa, {}, {}, @control={0x6, 0x7fff, 0x8}}], 0x38) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x18) fsetxattr$security_evm(r0, &(0x7f0000000280), &(0x7f00000002c0)=@md5={0x1, "0c00ce3569204f4ffb7233eebd49aa95"}, 0x11, 0x3) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_usb_connect$uac1(0x0, 0xa6, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0]}, @output_terminal={0x9}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x0, "f8431cfd"}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x0, 0x0, 0x4}, @extension_unit={0x7, 0x24, 0x8, 0x4}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xff, 0x0, 0xa, {0x7, 0x25, 0x1, 0x83, 0x9, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x0, 0x5, 0x0, {0x7, 0x25, 0x1, 0x1, 0x3, 0x7}}}}}}}]}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xff1ed000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$media(&(0x7f0000000240), 0x200, 0x10000) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x0, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0xbc) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir}]}) 0s ago: executing program 0 (id=4075): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x84, 0xba, 0xf4, 0x20, 0xe41, 0x4250, 0x6011, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x4e, 0x5, 0x1, 0x5, 0xa7, 0x1e, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x40, r3, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x1, 0x0, 0x1, 0x0, 0x9, 0x7fff, 0x8000]}}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r3, 0x2, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x10, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0xffb1}]}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_SEQ={0x0, 0x4, "6f17309884e0886d7169a8afcd236fde"}, @NL80211_KEY_TYPE={0x0, 0x7, 0x2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x804}, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_emit_ethernet(0x83, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e2000"], 0x0) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000500)='oom_score_adj\x00') r5 = openat$smackfs_access(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/smackfs/access2\x00', 0x2, 0x0) writev(r5, 0x0, 0x0) gettid() (async) ioctl$RTC_IRQP_SET(r4, 0x4008700c, 0x1ae1) (async) timer_create(0x3, &(0x7f0000000080)={0x0, 0x21, 0x1, @thr={&(0x7f0000000540)="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", &(0x7f00000002c0)="a9fc246c84dc60692a0cf34ad9f94a5314253a93f7397cb221e573c790dfb309606114ca9782f4c7f47f4b568529a57913cdc9c7ad5b1f0a48b54ca6051f41794bad5070c507e91ee326af3c464e8d4ec28307312e1872dd75dc7fa89bb974507768dfd5536f93310ca5172c21ab0cc6f866edc3b8a2f3895bd45279151a8664fa32eb3da6d1a339ce28edfe39a466f37edf7f290c89437da995ef7dd33dd3cc471d611da68004cb828a723fe09c0d61801703bf578c01d35fddef1d6270cd2c0469b2"}}, &(0x7f0000bbdffc)) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a3000c109004c000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000009080002400000000308000b40000000000900010073797a300000000014000000110001"], 0xd4}, 0x1, 0x0, 0x0, 0x8800}, 0x0) kernel console output (not intermixed with test programs): 498][T17576] XFS (nbd1): SB validate failed with error -5. [ 1596.737391][T17575] XFS (nbd0): SB validate failed with error -5. [ 1598.694774][T17604] Falling back ldisc for ttyS3. [ 1600.373268][T17617] Invalid logical block size (-5) [ 1600.883913][T17613] ALSA: mixer_oss: invalid OSS volume '' [ 1600.960076][T17304] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1601.037620][T17608] veth0_to_team: entered promiscuous mode [ 1601.245952][T17608] veth0_to_team: entered allmulticast mode [ 1601.263109][T17304] usb 4-1: config 1 has an invalid interface number: 128 but max is 1 [ 1601.273854][T17607] Falling back ldisc for ttyS3. [ 1601.310070][T17304] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1601.373804][T17304] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1601.468524][T17304] usb 4-1: config 1 has no interface number 0 [ 1601.606968][T17304] usb 4-1: config 1 interface 128 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1601.647109][T17304] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1601.670258][T17304] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1601.689641][T17304] usb 4-1: Product: syz [ 1601.699527][T17304] usb 4-1: Manufacturer: syz [ 1601.712899][T17304] usb 4-1: SerialNumber: syz [ 1601.737694][T17304] cdc_wdm 4-1:1.128: skipping garbage [ 1601.757759][T17304] cdc_wdm 4-1:1.128: skipping garbage [ 1601.774730][T17304] cdc_wdm 4-1:1.128: skipping garbage [ 1601.784873][T17304] cdc_wdm 4-1:1.128: probe with driver cdc_wdm failed with error -22 [ 1602.550069][T17304] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1602.728662][T17304] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 1602.909440][T17304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1603.037148][ T926] usb 4-1: USB disconnect, device number 30 [ 1603.112599][T17304] usb 1-1: config 0 descriptor?? [ 1603.150289][T17304] usb 1-1: Invalid firmware size=18. [ 1604.288694][T17642] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4294967295 (34359738360 ns) > initial count (288 ns). Using initial count to start timer. [ 1604.368074][T17643] kvm: pic: non byte write [ 1604.503278][T17664] input: syz1 as /devices/virtual/input/input40 [ 1604.710251][ T926] usb 1-1: USB disconnect, device number 50 [ 1607.509243][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.519729][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.603274][T15183] Bluetooth: hci6: command 0x0405 tx timeout [ 1610.011092][T17710] veth0_to_team: entered promiscuous mode [ 1610.011278][T17711] Falling back ldisc for ttyS3. [ 1610.016867][T17710] veth0_to_team: entered allmulticast mode [ 1610.229245][T16377] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.414350][T16377] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.593823][T16377] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.797862][T16377] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.710289][T16377] bridge_slave_1: left allmulticast mode [ 1611.716020][T16377] bridge_slave_1: left promiscuous mode [ 1611.748478][T16377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.826425][T15183] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1611.840726][T15183] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1611.849195][T15183] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1611.857570][T15183] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1611.866632][T15183] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1611.919202][T16377] bridge_slave_0: left allmulticast mode [ 1611.940691][T16377] bridge_slave_0: left promiscuous mode [ 1611.960326][T16377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.981315][T17743] syz.0.3261: attempt to access beyond end of device [ 1611.981315][T17743] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1612.000342][T17743] XFS (nbd0): SB validate failed with error -5. [ 1612.622799][ T926] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1612.800879][ T926] usb 1-1: Using ep0 maxpacket: 32 [ 1612.844381][ T926] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1612.870472][ T926] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1612.910087][ T926] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1612.929123][ T926] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1613.070033][T17768] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3267'. [ 1613.087970][T17768] overlay: Unknown parameter 'fc' [ 1613.198358][ T926] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1613.232944][ T926] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1613.255858][ T926] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1613.267278][ T926] usb 1-1: Product: syz [ 1613.301440][ T926] usb 1-1: Manufacturer: syz [ 1613.310141][ T926] usb 1-1: SerialNumber: syz [ 1613.350669][ T926] usb 1-1: config 0 descriptor?? [ 1613.426601][ T926] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1613.446709][ T926] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1613.629454][T16377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1613.643296][T16377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1613.656299][T16377] bond0 (unregistering): Released all slaves [ 1613.980168][T12508] Bluetooth: hci0: command tx timeout [ 1614.150139][T17780] binder: 17757:17780 ioctl c0306201 200000000540 returned -22 [ 1616.350069][T12508] Bluetooth: hci0: command tx timeout [ 1616.526118][T13162] usb 1-1: USB disconnect, device number 51 [ 1616.680921][T13162] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 1618.662616][T12508] Bluetooth: hci0: command tx timeout [ 1619.434076][T17740] chnl_net:caif_netlink_parms(): no params data found [ 1619.565725][T16377] hsr_slave_0: left promiscuous mode [ 1619.589181][T16377] hsr_slave_1: left promiscuous mode [ 1619.607627][T16377] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1620.120248][T16377] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1620.233967][T16377] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1620.253229][T16377] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1620.394283][T16377] veth1_macvtap: left promiscuous mode [ 1620.422609][T16377] veth0_macvtap: left promiscuous mode [ 1620.428339][T16377] veth1_vlan: left promiscuous mode [ 1620.474168][T16377] veth0_vlan: left promiscuous mode [ 1620.709021][T12508] Bluetooth: hci0: command tx timeout [ 1625.332695][ T9689] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1625.542164][ T9689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1625.628207][ T9689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1625.659784][ T9689] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1625.720225][ T9689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.747186][ T9689] usb 4-1: config 0 descriptor?? [ 1626.252279][T17854] fuse: Unknown parameter '7Kú‘ÿW­j£€±úYÅ»8±Ôº4ì  Üw2…”ò¦”!v÷ÝvqŒ0›Og†ÀŒ½qf'çëÝúœÆÿÕ•ËhE®÷åX‚æÎ⹉æy“0x0000000000000005' [ 1627.540553][T16377] team0 (unregistering): Port device team_slave_1 removed [ 1627.824473][T16377] team0 (unregistering): Port device team_slave_0 removed [ 1628.574354][T17865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3290'. [ 1628.640454][T17866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3290'. [ 1629.308704][T17865] batadv0: entered promiscuous mode [ 1629.314717][T17865] macvtap1: entered promiscuous mode [ 1629.320444][T17865] macvtap1: entered allmulticast mode [ 1629.326410][T17865] batadv0: entered allmulticast mode [ 1629.333304][T17865] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1629.382035][T17866] batadv0: left allmulticast mode [ 1629.387543][T17866] batadv0: left promiscuous mode [ 1629.434984][ T9689] usbhid 4-1:0.0: can't add hid device: -71 [ 1629.471624][ T9689] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1629.546023][ T9689] usb 4-1: USB disconnect, device number 31 [ 1629.811239][T17740] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.825565][T17740] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.835293][T17875] IPVS: set_ctl: invalid protocol: 60 0.0.0.0:20002 [ 1629.852480][T17740] bridge_slave_0: entered allmulticast mode [ 1629.868449][T17740] bridge_slave_0: entered promiscuous mode [ 1629.989212][T17740] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.008297][T17740] bridge0: port 2(bridge_slave_1) entered disabled state [ 1630.018326][T17740] bridge_slave_1: entered allmulticast mode [ 1630.058436][T17740] bridge_slave_1: entered promiscuous mode [ 1631.835999][T17883] binder: 17877:17883 ioctl c0306201 200000000080 returned -22 [ 1632.120716][T17878] binder: BINDER_SET_CONTEXT_MGR already set [ 1632.146177][T17878] binder: 17877:17878 ioctl 4018620d 200000000040 returned -16 [ 1632.381279][T17887] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1632.693296][T17897] fuse: Unknown parameter 'group_i00000000000000000000' [ 1634.126393][T17740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1634.241320][T17740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1634.562211][T17910] trusted_key: encrypted_key: insufficient parameters specified [ 1634.576418][T17910] FAULT_INJECTION: forcing a failure. [ 1634.576418][T17910] name failslab, interval 1, probability 0, space 0, times 0 [ 1634.590385][T17910] CPU: 1 UID: 0 PID: 17910 Comm: syz.3.3299 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1634.590416][T17910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1634.590430][T17910] Call Trace: [ 1634.590439][T17910] [ 1634.590448][T17910] dump_stack_lvl+0x189/0x250 [ 1634.590478][T17910] ? __pfx____ratelimit+0x10/0x10 [ 1634.590512][T17910] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1634.590537][T17910] ? __pfx__printk+0x10/0x10 [ 1634.590570][T17910] ? __pfx___might_resched+0x10/0x10 [ 1634.590594][T17910] ? fs_reclaim_acquire+0x7d/0x100 [ 1634.590621][T17910] should_fail_ex+0x414/0x560 [ 1634.590658][T17910] should_failslab+0xa8/0x100 [ 1634.590692][T17910] __kmalloc_cache_noprof+0x70/0x3d0 [ 1634.590722][T17910] ? assoc_array_insert+0x43d/0x2f90 [ 1634.590753][T17910] assoc_array_insert+0x43d/0x2f90 [ 1634.590781][T17910] ? key_set_index_key+0x381/0x540 [ 1634.590809][T17910] ? __asan_memcpy+0x40/0x70 [ 1634.590839][T17910] ? down_write+0x162/0x1f0 [ 1634.590862][T17910] ? __pfx_down_write+0x10/0x10 [ 1634.590894][T17910] __key_link_begin+0xd6/0x1f0 [ 1634.590925][T17910] __key_create_or_update+0x41a/0xa30 [ 1634.590961][T17910] ? __pfx___key_create_or_update+0x10/0x10 [ 1634.590991][T17910] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1634.591038][T17910] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1634.591072][T17910] key_create_or_update+0x42/0x60 [ 1634.591102][T17910] __se_sys_add_key+0x329/0x400 [ 1634.591136][T17910] ? __pfx___se_sys_add_key+0x10/0x10 [ 1634.591183][T17910] ? do_syscall_64+0xbe/0x3b0 [ 1634.591202][T17910] ? __x64_sys_add_key+0x20/0xc0 [ 1634.591234][T17910] do_syscall_64+0xfa/0x3b0 [ 1634.591255][T17910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.591275][T17910] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1634.591296][T17910] ? clear_bhb_loop+0x60/0xb0 [ 1634.591322][T17910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1634.591343][T17910] RIP: 0033:0x7f0b4618e929 [ 1634.591363][T17910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1634.591382][T17910] RSP: 002b:00007f0b46ffa038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1634.591404][T17910] RAX: ffffffffffffffda RBX: 00007f0b463b6160 RCX: 00007f0b4618e929 [ 1634.591420][T17910] RDX: 00002000000000c0 RSI: 0000200000000440 RDI: 00002000000003c0 [ 1634.591436][T17910] RBP: 00007f0b46ffa090 R08: fffffffffffffffd R09: 0000000000000000 [ 1634.591451][T17910] R10: 0000000000005ba8 R11: 0000000000000246 R12: 0000000000000002 [ 1634.591464][T17910] R13: 0000000000000000 R14: 00007f0b463b6160 R15: 00007ffd4167f548 [ 1634.591498][T17910] [ 1635.460698][T17914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3300'. [ 1635.602431][T17740] team0: Port device team_slave_0 added [ 1635.616808][T17740] team0: Port device team_slave_1 added [ 1635.630538][T17896] Falling back ldisc for ttyS3. [ 1635.918584][T17740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1635.944616][T17740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1636.022670][T17740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1636.084459][T17740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1636.121498][T17740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1636.169861][T17740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1638.307588][T17740] hsr_slave_0: entered promiscuous mode [ 1638.371035][T17929] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3306'. [ 1638.384390][T17740] hsr_slave_1: entered promiscuous mode [ 1638.390980][T17740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1638.398609][T17740] Cannot create hsr debugfs directory [ 1639.294756][T17935] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1640.462757][T17740] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1640.526063][T17740] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1640.569648][T17740] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1640.672020][T17740] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1641.673999][T17740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1641.690929][T17964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3312'. [ 1641.736108][T17964] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3312'. [ 1641.893804][T17740] 8021q: adding VLAN 0 to HW filter on device team0 [ 1642.054787][T17964] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 1642.061336][T17964] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1642.071443][T17964] vhci_hcd vhci_hcd.0: Device attached [ 1642.104700][T16046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1642.111963][T16046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1642.128570][ T9689] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 1642.185870][T16046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1642.193137][T16046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1642.312588][T17969] input: syz0 as /devices/virtual/input/input41 [ 1642.328075][T17911] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 1642.328707][ T9689] usb 1-1: config 0 has an invalid interface number: 223 but max is 0 [ 1642.341333][T15094] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1642.350502][ T9689] usb 1-1: config 0 has no interface number 0 [ 1642.358339][ T9689] usb 1-1: New USB device found, idVendor=17cc, idProduct=4712, bcdDevice=63.f3 [ 1642.437227][ T9689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.485947][ T9689] usb 1-1: config 0 descriptor?? [ 1642.527830][ T9689] snd-usb-caiaq 1-1:0.223: can't set alt interface. [ 1642.537424][ T9689] usb 1-1: unable to init card! (ret=-5) [ 1642.543038][T15094] usb 4-1: config 0 has no interfaces? [ 1642.552965][ T9689] snd-usb-caiaq 1-1:0.223: probe with driver snd-usb-caiaq failed with error -5 [ 1642.572355][T15094] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1642.646103][T15094] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.170567][T13162] usb 1-1: USB disconnect, device number 52 [ 1643.667602][T15094] usb 4-1: config 0 descriptor?? [ 1643.920472][T17971] usbip_core: unknown command [ 1643.926642][T17971] vhci_hcd: unknown pdu 302055424 [ 1643.957781][T17971] usbip_core: unknown command [ 1643.993832][T16045] vhci_hcd: stop threads [ 1644.024293][T16045] vhci_hcd: release socket [ 1644.046685][T16045] vhci_hcd: disconnect device [ 1644.718871][ T9689] usb 4-1: USB disconnect, device number 32 [ 1645.530616][T18001] fuse: Unknown parameter '0x00000000000000070000000000000000000000000000000000000000' [ 1645.980848][T17740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1646.314327][T17997] mkiss: ax0: crc mode is auto. [ 1646.850259][ T6009] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1647.490044][T17911] vhci_hcd: vhci_device speed not set [ 1648.663940][T18032] netlink: 180 bytes leftover after parsing attributes in process `syz.3.3328'. [ 1650.641853][T17740] veth0_vlan: entered promiscuous mode [ 1650.923391][T17740] veth1_vlan: entered promiscuous mode [ 1651.100362][T18044] fuse: Bad value for 'user_id' [ 1651.105364][T18044] fuse: Bad value for 'user_id' [ 1651.988164][T17740] veth0_macvtap: entered promiscuous mode [ 1651.999259][T17740] veth1_macvtap: entered promiscuous mode [ 1652.289815][T17740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1652.341716][T17740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1652.372673][T17740] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.400040][T17740] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.546269][T17740] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.555369][T17740] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.637955][T18061] netlink: 'syz.5.3337': attribute type 3 has an invalid length. [ 1654.038309][T11289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1654.196300][T11289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1655.074491][T16381] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1655.115089][T16381] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1660.887602][T15183] Bluetooth: hci2: command 0x0406 tx timeout [ 1666.696651][T18164] netlink: 'syz.1.3362': attribute type 3 has an invalid length. [ 1667.467245][T18162] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3361'. [ 1668.891980][T18179] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.3367'. [ 1668.969314][T18181] trusted_key: encrypted_key: insufficient parameters specified [ 1669.661309][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.672894][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.087083][T18185] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3366'. [ 1670.563758][T18190] RDS: rds_bind could not find a transport for ::ffff:172.30.1.4, load rds_tcp or rds_rdma? [ 1670.771851][T18193] netlink: 'syz.5.3370': attribute type 8 has an invalid length. [ 1670.817401][T18193] netlink: 'syz.5.3370': attribute type 8 has an invalid length. [ 1670.904550][T18195] syz.1.3371: attempt to access beyond end of device [ 1670.904550][T18195] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1670.918018][T18195] FAT-fs (loop3): unable to read boot sector [ 1672.720982][T18209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3373'. [ 1673.292278][T18211] syzkaller1: entered allmulticast mode [ 1673.314024][T18211] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1673.327968][T18211] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1673.338879][T18211] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1673.358197][T18211] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1674.810010][ T6009] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1675.033332][ T6009] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1675.050192][ T6009] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1675.063909][ T6009] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1675.086164][ T6009] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1675.106931][ T6009] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1675.120439][ T6009] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1675.140634][ T6009] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1675.654162][ T6009] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1675.667090][ T6009] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1675.680058][ T6009] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1675.699023][ T6009] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1675.708111][ T6009] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1675.720865][ T6009] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1675.732893][ T6009] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1675.745134][ T6009] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1675.764681][ T6009] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1675.791782][ T6009] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1675.801194][ T6009] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1675.813708][ T6009] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1675.843990][ T6009] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1675.855850][ T6009] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1675.915206][ T6009] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1675.983293][ T6009] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1675.993605][ T6009] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1676.059973][ T6009] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1676.248509][ T6009] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1676.318830][ T6009] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1676.350923][ T6009] usb 1-1: Product: syz [ 1676.642863][ T6009] usb 1-1: Manufacturer: syz [ 1676.673314][ T6009] usb 1-1: SerialNumber: syz [ 1676.691432][ T6009] usb 1-1: config 0 descriptor?? [ 1676.942993][ T6009] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1677.071507][T18247] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3387'. [ 1677.170771][T17911] usb 1-1: USB disconnect, device number 53 [ 1677.212200][T17911] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1678.510318][T18259] Falling back ldisc for ttyS3. [ 1678.560415][T18263] program syz.5.3393 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1679.032532][T18276] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3394'. [ 1679.603116][ T9689] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1679.980423][ T9689] usb 6-1: Using ep0 maxpacket: 16 [ 1680.138765][ T9689] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 1680.165557][ T9689] usb 6-1: config 0 has no interface number 0 [ 1680.184303][ T9689] usb 6-1: config 0 interface 12 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 1680.244704][ T9689] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=83.b3 [ 1680.259649][ T9689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1680.286849][ T9689] usb 6-1: Product: syz [ 1680.300247][ T9689] usb 6-1: Manufacturer: syz [ 1680.318668][ T9689] usb 6-1: SerialNumber: syz [ 1680.336803][T18287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3400'. [ 1680.404610][ T9689] usb 6-1: config 0 descriptor?? [ 1680.440705][T18275] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1680.450514][ T9689] usb 6-1: NFC: intf ffff888088754000 id ffffffff8eb411e0 [ 1680.451843][T18289] overlayfs: failed to resolve './file0': -2 [ 1680.588256][ T9689] nfcmrvl 6-1:0.12: NFC: registered with nci successfully [ 1680.869003][ T5945] usb 6-1: USB disconnect, device number 36 [ 1680.895615][ T5945] usb 6-1: NFC: intf ffff888088754000 [ 1682.033429][T12508] Bluetooth: hci3: command 0x0406 tx timeout [ 1687.406586][T18333] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3412'. [ 1687.498093][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3414'. [ 1688.877821][T18350] syz.3.3416: attempt to access beyond end of device [ 1688.877821][T18350] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 1688.910984][T18350] XFS (nbd3): SB validate failed with error -5. [ 1689.587781][T18360] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3418'. [ 1689.822318][ T9689] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1690.004565][ T9689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1690.021342][ T9689] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1690.213823][ T9689] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1690.223931][ T9689] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.256232][ T9689] usb 6-1: config 0 descriptor?? [ 1692.469219][ T9689] usb 6-1: can't set config #0, error -71 [ 1692.565126][ T9689] usb 6-1: USB disconnect, device number 37 [ 1693.985434][T18400] 9pnet_fd: Insufficient options for proto=fd [ 1694.627802][T18411] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.3430'. [ 1699.008326][T18431] Falling back ldisc for ttyS3. [ 1700.081874][T18453] FAULT_INJECTION: forcing a failure. [ 1700.081874][T18453] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.136018][T18453] CPU: 1 UID: 0 PID: 18453 Comm: syz.0.3444 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1700.136051][T18453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1700.136065][T18453] Call Trace: [ 1700.136075][T18453] [ 1700.136085][T18453] dump_stack_lvl+0x189/0x250 [ 1700.136116][T18453] ? __pfx____ratelimit+0x10/0x10 [ 1700.136149][T18453] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1700.136173][T18453] ? __pfx__printk+0x10/0x10 [ 1700.136206][T18453] ? __pfx___might_resched+0x10/0x10 [ 1700.136230][T18453] ? fs_reclaim_acquire+0x7d/0x100 [ 1700.136257][T18453] should_fail_ex+0x414/0x560 [ 1700.136292][T18453] should_failslab+0xa8/0x100 [ 1700.136326][T18453] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 1700.136356][T18453] ? __d_alloc+0x31/0x6f0 [ 1700.136450][T18453] __d_alloc+0x31/0x6f0 [ 1700.136483][T18453] d_alloc_pseudo+0x1f/0xb0 [ 1700.136507][T18453] alloc_file_pseudo+0xcc/0x210 [ 1700.136532][T18453] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1700.136553][T18453] ? evm_inode_alloc_security+0x40/0xb0 [ 1700.136573][T18453] ? security_inode_alloc+0xd5/0x330 [ 1700.136611][T18453] sock_alloc_file+0xb8/0x2e0 [ 1700.136647][T18453] do_accept+0x34b/0x680 [ 1700.136696][T18453] ? __pfx_do_accept+0x10/0x10 [ 1700.136742][T18453] __sys_accept4+0x11c/0x1c0 [ 1700.136768][T18453] ? __pfx___sys_accept4+0x10/0x10 [ 1700.136805][T18453] ? __pfx_ksys_write+0x10/0x10 [ 1700.136831][T18453] ? rcu_is_watching+0x15/0xb0 [ 1700.136862][T18453] __x64_sys_accept4+0x9a/0xb0 [ 1700.136887][T18453] do_syscall_64+0xfa/0x3b0 [ 1700.136907][T18453] ? lockdep_hardirqs_on+0x9c/0x150 [ 1700.136945][T18453] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1700.136966][T18453] ? clear_bhb_loop+0x60/0xb0 [ 1700.136992][T18453] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1700.137013][T18453] RIP: 0033:0x7f0f2298e929 [ 1700.137042][T18453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1700.137061][T18453] RSP: 002b:00007f0f238b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1700.137085][T18453] RAX: ffffffffffffffda RBX: 00007f0f22bb5fa0 RCX: 00007f0f2298e929 [ 1700.137101][T18453] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 1700.137113][T18453] RBP: 00007f0f238b0090 R08: 0000000000000000 R09: 0000000000000000 [ 1700.137127][T18453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1700.137139][T18453] R13: 0000000000000000 R14: 00007f0f22bb5fa0 R15: 00007ffec578d2e8 [ 1700.137172][T18453] [ 1703.094575][T18476] fuse: Unknown parameter 'fd0x0000000000000005' [ 1704.153631][T18487] overlayfs: conflicting options: userxattr,metacopy=on [ 1708.341826][T18518] fuse: Unknown parameter 'fd0x0000000000000005' [ 1711.901784][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3472'. [ 1711.916519][T18551] IPVS: Error joining to the multicast group [ 1713.736273][T18559] fuse: Unknown parameter 'fd0x0000000000000005' [ 1714.604872][T18563] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3476'. [ 1719.948484][T12508] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1719.968563][T12508] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1719.977874][T12508] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1719.991194][T12508] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1720.001519][T12508] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1722.269710][T15183] Bluetooth: hci4: command tx timeout [ 1723.557420][T18612] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3490'. [ 1724.344899][T15183] Bluetooth: hci4: command tx timeout [ 1724.588952][T18619] Invalid option length (1048372) for dns_resolver key [ 1725.335117][T16381] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.469664][T16381] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1725.723708][T18629] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3495'. [ 1726.390407][T15183] Bluetooth: hci4: command tx timeout [ 1727.313705][T16381] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1727.891377][T18645] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3498'. [ 1728.052581][T18589] chnl_net:caif_netlink_parms(): no params data found [ 1728.225084][T16381] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1728.461227][T15183] Bluetooth: hci4: command tx timeout [ 1728.822221][T18657] netfs: Couldn't get user pages (rc=-14) [ 1729.721610][ T9689] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1729.949345][T18589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1729.963001][T18589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1729.973733][ T9689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1729.984911][T18589] bridge_slave_0: entered allmulticast mode [ 1729.996036][T18589] bridge_slave_0: entered promiscuous mode [ 1730.030346][T18663] overlayfs: conflicting options: userxattr,metacopy=on [ 1730.054853][ T9689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1730.098220][ T9689] usb 4-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.00 [ 1730.350933][T18589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1730.359278][T18589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1730.365765][ T9689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.477944][T18589] bridge_slave_1: entered allmulticast mode [ 1730.492621][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.506443][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.605376][T18589] bridge_slave_1: entered promiscuous mode [ 1730.609598][ T9689] usb 4-1: config 0 descriptor?? [ 1731.405139][T18589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1731.475792][T18589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1731.486214][ T9689] elecom 0003:056E:010D.000E: hidraw0: USB HID v0.00 Device [HID 056e:010d] on usb-dummy_hcd.3-1/input0 [ 1731.830930][T18669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1732.031462][T18669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1732.764632][ T9689] usb 4-1: USB disconnect, device number 34 [ 1732.778487][T18589] team0: Port device team_slave_0 added [ 1732.853672][T16381] ip6gretap0: left allmulticast mode [ 1732.859024][T16381] ip6gretap0: left promiscuous mode [ 1732.870242][T16381] bridge0: port 3(ip6gretap0) entered disabled state [ 1732.886788][T16381] bridge_slave_1: left allmulticast mode [ 1732.892659][T16381] bridge_slave_1: left promiscuous mode [ 1732.900528][T16381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1732.917350][T16381] bridge_slave_0: left allmulticast mode [ 1732.945740][T16381] bridge_slave_0: left promiscuous mode [ 1732.978987][T16381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.790818][T18689] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 1733.876326][T18694] overlayfs: conflicting options: userxattr,metacopy=on [ 1736.174453][T18703] xt_l2tp: v2 doesn't support IP mode [ 1737.755832][T15183] Bluetooth: hci0: command 0x0406 tx timeout [ 1738.403050][T18714] delete_channel: no stack [ 1739.490422][T16381]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 1739.503779][T16381]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 1739.514816][T16381]  (unregistering): Released all slaves [ 1739.533974][T18589] team0: Port device team_slave_1 added [ 1739.657082][T18721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3517'. [ 1740.100401][T18589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1740.107416][T18589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1740.963940][T18589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1741.430455][T18743] overlayfs: conflicting options: userxattr,metacopy=on [ 1741.564110][T18745] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3522'. [ 1742.190493][T18589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1742.290120][T18589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1742.731987][T18589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1743.023397][T12508] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1743.033561][T12508] CPU: 0 UID: 0 PID: 12508 Comm: kworker/u9:0 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1743.033591][T12508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1743.033606][T12508] Workqueue: hci3 hci_rx_work [ 1743.033644][T12508] Call Trace: [ 1743.033654][T12508] [ 1743.033664][T12508] dump_stack_lvl+0x189/0x250 [ 1743.033691][T12508] ? kernfs_path_from_node+0x2c/0x260 [ 1743.033715][T12508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1743.033740][T12508] ? __pfx__printk+0x10/0x10 [ 1743.033770][T12508] ? kernfs_path_from_node+0x2c/0x260 [ 1743.033791][T12508] ? kernfs_path_from_node+0x2c/0x260 [ 1743.033815][T12508] ? kernfs_path_from_node+0x22c/0x260 [ 1743.033835][T12508] ? kernfs_path_from_node+0x2c/0x260 [ 1743.033861][T12508] sysfs_create_dir_ns+0x259/0x280 [ 1743.033899][T12508] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1743.033938][T12508] ? do_raw_spin_unlock+0x122/0x240 [ 1743.033972][T12508] kobject_add_internal+0x59f/0xb40 [ 1743.034006][T12508] kobject_add+0x155/0x220 [ 1743.034035][T12508] ? __pfx_kobject_add+0x10/0x10 [ 1743.034059][T12508] ? _raw_spin_unlock+0x28/0x50 [ 1743.034091][T12508] ? get_device_parent+0x366/0x3a0 [ 1743.034123][T12508] device_add+0x408/0xb50 [ 1743.034155][T12508] hci_conn_add_sysfs+0xd5/0x1e0 [ 1743.034189][T12508] le_conn_complete_evt+0xc3a/0x1220 [ 1743.034232][T12508] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1743.034258][T12508] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1743.034278][T12508] ? __asan_memcpy+0x40/0x70 [ 1743.034306][T12508] ? __pfx___mutex_lock+0x10/0x10 [ 1743.034328][T12508] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1743.034348][T12508] ? skb_pull_data+0xfb/0x200 [ 1743.034385][T12508] hci_le_conn_complete_evt+0x187/0x450 [ 1743.034419][T12508] hci_event_packet+0x78f/0x1200 [ 1743.034477][T12508] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1743.034510][T12508] ? __pfx_hci_event_packet+0x10/0x10 [ 1743.034546][T12508] ? kcov_remote_start+0x4d3/0x7f0 [ 1743.034578][T12508] ? lockdep_hardirqs_on+0x90/0x150 [ 1743.034615][T12508] ? hci_send_to_monitor+0xe2/0x570 [ 1743.034645][T12508] hci_rx_work+0x46a/0xe80 [ 1743.034687][T12508] ? process_scheduled_works+0x9ef/0x17b0 [ 1743.034714][T12508] process_scheduled_works+0xade/0x17b0 [ 1743.034772][T12508] ? __pfx_process_scheduled_works+0x10/0x10 [ 1743.034815][T12508] worker_thread+0x8a0/0xda0 [ 1743.034870][T12508] kthread+0x711/0x8a0 [ 1743.034903][T12508] ? __pfx_worker_thread+0x10/0x10 [ 1743.034926][T12508] ? __pfx_kthread+0x10/0x10 [ 1743.034957][T12508] ? _raw_spin_unlock_irq+0x23/0x50 [ 1743.034988][T12508] ? lockdep_hardirqs_on+0x9c/0x150 [ 1743.035017][T12508] ? __pfx_kthread+0x10/0x10 [ 1743.035047][T12508] ret_from_fork+0x3fc/0x770 [ 1743.035073][T12508] ? __pfx_ret_from_fork+0x10/0x10 [ 1743.035102][T12508] ? __switch_to_asm+0x39/0x70 [ 1743.035128][T12508] ? __switch_to_asm+0x33/0x70 [ 1743.035153][T12508] ? __pfx_kthread+0x10/0x10 [ 1743.035184][T12508] ret_from_fork_asm+0x1a/0x30 [ 1743.035230][T12508] [ 1743.035366][T12508] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1743.344056][T12508] Bluetooth: hci3: failed to register connection device [ 1745.508895][T18589] hsr_slave_0: entered promiscuous mode [ 1745.515937][T18589] hsr_slave_1: entered promiscuous mode [ 1745.531090][T18589] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1745.545240][T18589] Cannot create hsr debugfs directory [ 1745.836969][T16381] hsr_slave_0: left promiscuous mode [ 1746.026726][T16381] hsr_slave_1: left promiscuous mode [ 1746.051242][T16381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1746.072540][T16381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1746.092614][T17911] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1746.121082][T16381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1746.250185][T16381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1746.381574][T16381] veth1_macvtap: left promiscuous mode [ 1746.387190][T16381] veth0_macvtap: left promiscuous mode [ 1746.401242][T17911] usb 1-1: Using ep0 maxpacket: 32 [ 1746.429088][T17911] usb 1-1: config 0 has an invalid interface number: 191 but max is 0 [ 1746.450140][T16381] veth1_vlan: left promiscuous mode [ 1746.455572][T16381] veth0_vlan: left promiscuous mode [ 1746.457932][T17911] usb 1-1: config 0 has no interface number 0 [ 1746.520858][T17911] usb 1-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24 [ 1746.556939][T17911] usb 1-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1 [ 1746.574166][T17911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1746.595133][T17911] usb 1-1: Product: syz [ 1746.614296][T17911] usb 1-1: Manufacturer: syz [ 1746.628061][T17911] usb 1-1: SerialNumber: syz [ 1746.657160][T17911] usb 1-1: config 0 descriptor?? [ 1746.671758][T18771] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1746.890643][T17911] asix 1-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1746.929181][T17911] asix 1-1:0.191: probe with driver asix failed with error -71 [ 1746.978825][T17911] usb 1-1: USB disconnect, device number 54 [ 1747.602764][T16381] team0 (unregistering): Port device team_slave_1 removed [ 1747.663914][T16381] team0 (unregistering): Port device C removed [ 1749.026988][T18774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3531'. [ 1749.116333][T18766] Falling back ldisc for ttyS3. [ 1749.500115][T15183] Bluetooth: hci3: command 0x0406 tx timeout [ 1749.832013][T18797] overlayfs: conflicting options: userxattr,metacopy=on [ 1752.855159][T12508] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1755.970389][T17911] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1756.220043][T17911] usb 1-1: Using ep0 maxpacket: 16 [ 1756.228729][T17911] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1756.280156][T17911] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1756.286861][T17911] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 1756.315121][T17911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.348463][T17911] usb 1-1: config 0 descriptor?? [ 1757.312899][T18827] input: syz1 as /devices/virtual/input/input42 [ 1757.504816][T17911] cougar 0003:060B:500A.000F: unexpected long global item [ 1757.525060][T17911] cougar 0003:060B:500A.000F: parse failed [ 1757.532364][T17911] cougar 0003:060B:500A.000F: probe with driver cougar failed with error -22 [ 1757.551683][T17911] usb 1-1: USB disconnect, device number 55 [ 1757.618583][T18589] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1757.639719][T18834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3545'. [ 1757.814538][T18589] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1757.941499][T18589] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1758.146144][T18589] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1759.705023][T18857] overlayfs: missing 'lowerdir' [ 1760.892767][T18862] overlayfs: conflicting options: userxattr,metacopy=on [ 1761.534235][T18589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1761.882425][T18589] 8021q: adding VLAN 0 to HW filter on device team0 [ 1761.921624][T16046] bridge0: port 1(bridge_slave_0) entered blocking state [ 1761.928917][T16046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1761.994576][T16046] bridge0: port 2(bridge_slave_1) entered blocking state [ 1762.001801][T16046] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1763.073288][T18589] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1763.087929][T18589] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1765.645626][T18589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1766.030173][ T24] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1766.292062][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1766.310025][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1766.532406][ T24] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 1766.560342][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1766.569373][ T24] usb 1-1: Product: syz [ 1766.620880][ T24] usb 1-1: Manufacturer: syz [ 1766.625573][ T24] usb 1-1: SerialNumber: syz [ 1766.710257][ T24] usb 1-1: config 0 descriptor?? [ 1766.736373][ T24] usb 1-1: ucan: probing device on interface #0 [ 1766.811540][ T24] usb 1-1: ucan: invalid EP count (1) [ 1766.816990][ T24] usb 1-1: ucan: probe failed; try to update the device firmware [ 1766.894587][T18913] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1766.923027][T18901] batman_adv: batadv0: Adding interface: dummy0 [ 1766.929297][T18901] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1766.955487][T18901] batman_adv: batadv0: Interface activated: dummy0 [ 1766.970132][T18901] batadv0: mtu less than device minimum [ 1766.977013][T18901] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1766.988402][T18901] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1766.999800][T18901] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1767.011219][T18901] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1767.022596][T18901] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1767.033975][T18901] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1767.045357][T18901] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1767.056741][T18901] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1767.068132][T18901] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 1767.301871][T18917] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3560'. [ 1767.913254][ T1224] usb 1-1: USB disconnect, device number 56 [ 1768.153990][T18924] overlayfs: conflicting options: userxattr,metacopy=on [ 1768.171679][T18589] veth0_vlan: entered promiscuous mode [ 1768.317478][T18928] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3553'. [ 1768.798072][T18589] veth1_vlan: entered promiscuous mode [ 1768.848875][T18589] veth0_macvtap: entered promiscuous mode [ 1768.864524][T18589] veth1_macvtap: entered promiscuous mode [ 1769.006222][T18589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1769.962001][T18589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1769.973211][T18589] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.982767][T18589] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1769.991725][T18589] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1770.000555][T18589] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1771.072074][T16384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1771.079090][T18942] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3565'. [ 1771.277500][T16384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1771.313511][T18945] netlink: 'syz.0.3566': attribute type 1 has an invalid length. [ 1771.330921][T18945] netlink: 'syz.0.3566': attribute type 2 has an invalid length. [ 1771.392810][T16384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1773.103200][T16384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1774.750561][T18963] FAULT_INJECTION: forcing a failure. [ 1774.750561][T18963] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1774.827073][T18963] CPU: 0 UID: 0 PID: 18963 Comm: syz.3.3570 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1774.827107][T18963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1774.827121][T18963] Call Trace: [ 1774.827130][T18963] [ 1774.827140][T18963] dump_stack_lvl+0x189/0x250 [ 1774.827170][T18963] ? __pfx____ratelimit+0x10/0x10 [ 1774.827203][T18963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1774.827226][T18963] ? __pfx__printk+0x10/0x10 [ 1774.827254][T18963] ? __might_fault+0xb0/0x130 [ 1774.827297][T18963] should_fail_ex+0x414/0x560 [ 1774.827333][T18963] _copy_from_user+0x2d/0xb0 [ 1774.827358][T18963] memdup_user+0x5e/0xd0 [ 1774.827382][T18963] strndup_user+0x68/0xd0 [ 1774.827405][T18963] __se_sys_mount+0xde/0x410 [ 1774.827426][T18963] ? ksys_write+0x22a/0x250 [ 1774.827458][T18963] ? __pfx___se_sys_mount+0x10/0x10 [ 1774.827476][T18963] ? rcu_is_watching+0x15/0xb0 [ 1774.827505][T18963] ? do_syscall_64+0xbe/0x3b0 [ 1774.827523][T18963] ? __x64_sys_mount+0x20/0xc0 [ 1774.827545][T18963] do_syscall_64+0xfa/0x3b0 [ 1774.827567][T18963] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.827587][T18963] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1774.827608][T18963] ? clear_bhb_loop+0x60/0xb0 [ 1774.827645][T18963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.827666][T18963] RIP: 0033:0x7f0b4618e929 [ 1774.827685][T18963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1774.827704][T18963] RSP: 002b:00007f0b4703c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1774.827727][T18963] RAX: ffffffffffffffda RBX: 00007f0b463b5fa0 RCX: 00007f0b4618e929 [ 1774.827743][T18963] RDX: 0000200000000040 RSI: 0000200000000280 RDI: 0000200000000080 [ 1774.827759][T18963] RBP: 00007f0b4703c090 R08: 0000000000000000 R09: 0000000000000000 [ 1774.827773][T18963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1774.827786][T18963] R13: 0000000000000000 R14: 00007f0b463b5fa0 R15: 00007ffd4167f548 [ 1774.827819][T18963] [ 1775.290547][T18975] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3564'. [ 1779.466154][T19000] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3580'. [ 1781.260108][T19020] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3585'. [ 1783.044305][T19027] Falling back ldisc for ttyS3. [ 1784.297093][T19040] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (7) [ 1784.798303][T19046] overlayfs: conflicting options: userxattr,metacopy=on [ 1790.487920][T19086] veth0_to_team: entered promiscuous mode [ 1790.543786][T19086] veth0_to_team: entered allmulticast mode [ 1790.564291][T19083] Falling back ldisc for ttyS3. [ 1791.856634][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.873593][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.941529][T19109] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3608'. [ 1792.980454][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 1792.980499][ T30] audit: type=1326 audit(1752479033.843:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19099 comm="syz.5.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815d58e929 code=0x7ffc0000 [ 1793.063138][ T30] audit: type=1326 audit(1752479033.843:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19099 comm="syz.5.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815d58e929 code=0x7ffc0000 [ 1793.085619][ T30] audit: type=1326 audit(1752479033.843:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19099 comm="syz.5.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f815d58e929 code=0x7ffc0000 [ 1793.112027][ T30] audit: type=1326 audit(1752479033.843:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19099 comm="syz.5.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815d58e929 code=0x7ffc0000 [ 1793.134317][ T30] audit: type=1326 audit(1752479033.843:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19099 comm="syz.5.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815d58e929 code=0x7ffc0000 [ 1793.391447][ T30] audit: type=1326 audit(1752479033.843:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19099 comm="syz.5.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f815d58e929 code=0x7ffc0000 [ 1793.414596][ T30] audit: type=1326 audit(1752479033.843:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19099 comm="syz.5.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815d58e929 code=0x7ffc0000 [ 1794.979496][ T30] audit: type=1326 audit(1752479033.843:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19099 comm="syz.5.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815d58e929 code=0x7ffc0000 [ 1795.152299][ T30] audit: type=1326 audit(1752479033.843:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19099 comm="syz.5.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f815d58e929 code=0x7ffc0000 [ 1796.304021][ T30] audit: type=1326 audit(1752479033.843:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19099 comm="syz.5.3608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f815d58e929 code=0x7ffc0000 [ 1802.695053][T19155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3624'. [ 1804.577424][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1804.583707][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1804.790532][T19169] ceph: No mds server is up or the cluster is laggy [ 1804.846440][T19179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3630'. [ 1804.888003][ T10] libceph: connect (1)[c::]:6789 error -101 [ 1805.710376][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 1814.450025][ T5945] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1814.624200][ T5945] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1814.643938][ T5945] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1814.664240][ T5945] usb 6-1: Product: syz [ 1814.679950][ T5945] usb 6-1: Manufacturer: syz [ 1814.691311][ T5945] usb 6-1: SerialNumber: syz [ 1814.731419][ T5945] usb 6-1: config 0 descriptor?? [ 1814.749522][ T5945] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1816.505579][ T5945] gspca_sunplus: reg_r err -71 [ 1816.549000][ T5945] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1816.664281][ T5945] usb 6-1: USB disconnect, device number 38 [ 1817.100674][T12508] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 1817.112310][T12508] CPU: 1 UID: 0 PID: 12508 Comm: kworker/u9:0 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1817.112345][T12508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1817.112364][T12508] Workqueue: hci6 hci_rx_work [ 1817.112405][T12508] Call Trace: [ 1817.112416][T12508] [ 1817.112429][T12508] dump_stack_lvl+0x189/0x250 [ 1817.112459][T12508] ? kernfs_path_from_node+0x2c/0x260 [ 1817.112484][T12508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1817.112508][T12508] ? __pfx__printk+0x10/0x10 [ 1817.112539][T12508] ? kernfs_path_from_node+0x2c/0x260 [ 1817.112558][T12508] ? kernfs_path_from_node+0x2c/0x260 [ 1817.112581][T12508] ? kernfs_path_from_node+0x22c/0x260 [ 1817.112599][T12508] ? kernfs_path_from_node+0x2c/0x260 [ 1817.112625][T12508] sysfs_create_dir_ns+0x259/0x280 [ 1817.112663][T12508] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1817.112700][T12508] ? do_raw_spin_unlock+0x122/0x240 [ 1817.112735][T12508] kobject_add_internal+0x59f/0xb40 [ 1817.112769][T12508] kobject_add+0x155/0x220 [ 1817.112797][T12508] ? __pfx_kobject_add+0x10/0x10 [ 1817.112821][T12508] ? _raw_spin_unlock+0x28/0x50 [ 1817.112855][T12508] ? get_device_parent+0x366/0x3a0 [ 1817.112887][T12508] device_add+0x408/0xb50 [ 1817.112926][T12508] hci_conn_add_sysfs+0xd5/0x1e0 [ 1817.112962][T12508] le_conn_complete_evt+0xc3a/0x1220 [ 1817.113003][T12508] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1817.113030][T12508] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1817.113050][T12508] ? __asan_memcpy+0x40/0x70 [ 1817.113077][T12508] ? __pfx___mutex_lock+0x10/0x10 [ 1817.113099][T12508] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1817.113118][T12508] ? skb_pull_data+0xfb/0x200 [ 1817.113156][T12508] hci_le_conn_complete_evt+0x187/0x450 [ 1817.113191][T12508] hci_event_packet+0x78f/0x1200 [ 1817.113229][T12508] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1817.113256][T12508] ? __pfx_hci_event_packet+0x10/0x10 [ 1817.113296][T12508] ? kcov_remote_start+0x4d3/0x7f0 [ 1817.113327][T12508] ? lockdep_hardirqs_on+0x90/0x150 [ 1817.113362][T12508] ? hci_send_to_monitor+0xe2/0x570 [ 1817.113392][T12508] hci_rx_work+0x46a/0xe80 [ 1817.113436][T12508] ? process_scheduled_works+0x9ef/0x17b0 [ 1817.113463][T12508] process_scheduled_works+0xade/0x17b0 [ 1817.113520][T12508] ? __pfx_process_scheduled_works+0x10/0x10 [ 1817.113564][T12508] worker_thread+0x8a0/0xda0 [ 1817.113619][T12508] kthread+0x711/0x8a0 [ 1817.113652][T12508] ? __pfx_worker_thread+0x10/0x10 [ 1817.113676][T12508] ? __pfx_kthread+0x10/0x10 [ 1817.113707][T12508] ? _raw_spin_unlock_irq+0x23/0x50 [ 1817.113737][T12508] ? lockdep_hardirqs_on+0x9c/0x150 [ 1817.113766][T12508] ? __pfx_kthread+0x10/0x10 [ 1817.113797][T12508] ret_from_fork+0x3fc/0x770 [ 1817.113822][T12508] ? __pfx_ret_from_fork+0x10/0x10 [ 1817.113851][T12508] ? __switch_to_asm+0x39/0x70 [ 1817.113896][T12508] ? __switch_to_asm+0x33/0x70 [ 1817.113927][T12508] ? __pfx_kthread+0x10/0x10 [ 1817.113959][T12508] ret_from_fork_asm+0x1a/0x30 [ 1817.114005][T12508] [ 1817.114136][T12508] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1817.432736][T12508] Bluetooth: hci6: failed to register connection device [ 1817.749016][T19267] input: syz1 as /devices/virtual/input/input43 [ 1817.762952][ T1224] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1817.814211][T19270] overlayfs: conflicting options: userxattr,metacopy=on [ 1817.991875][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1818.083492][ T1224] usb 7-1: Using ep0 maxpacket: 32 [ 1818.260721][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 1818.360594][ T1224] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1818.409306][ T10] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1818.422005][ T10] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1818.444023][ T10] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1818.461693][ T1224] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1818.509301][ T1224] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.527716][ T10] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 1818.538020][ T1224] usb 7-1: Product: syz [ 1818.559967][ T1224] usb 7-1: Manufacturer: syz [ 1818.564855][ T10] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1818.578444][ T1224] usb 7-1: SerialNumber: syz [ 1818.588191][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1818.595797][ T1224] usb 7-1: config 0 descriptor?? [ 1818.618777][ T1224] gs_usb 7-1:0.0: Required endpoints not found [ 1818.628894][ T10] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1818.674337][ T10] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1818.723867][ T10] usb 4-1: Product: syz [ 1818.744517][ T10] usb 4-1: Manufacturer: syz [ 1818.749193][ T10] usb 4-1: SerialNumber: syz [ 1818.809946][ T10] usb 4-1: config 0 descriptor?? [ 1818.823609][ T1224] usb 7-1: USB disconnect, device number 2 [ 1819.098100][T19280] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3656'. [ 1819.994519][ T10] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1820.147973][ T10] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1823.272936][ T5945] usb 4-1: USB disconnect, device number 35 [ 1823.415565][ T5945] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1824.146552][T12508] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1824.156711][T12508] CPU: 1 UID: 0 PID: 12508 Comm: kworker/u9:0 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1824.156743][T12508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1824.156759][T12508] Workqueue: hci4 hci_rx_work [ 1824.156796][T12508] Call Trace: [ 1824.156806][T12508] [ 1824.156816][T12508] dump_stack_lvl+0x189/0x250 [ 1824.156844][T12508] ? kernfs_path_from_node+0x2c/0x260 [ 1824.156868][T12508] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1824.156893][T12508] ? __pfx__printk+0x10/0x10 [ 1824.156924][T12508] ? __rcu_read_unlock+0x84/0xe0 [ 1824.156954][T12508] ? kernfs_path_from_node+0x2c/0x260 [ 1824.156978][T12508] ? kernfs_path_from_node+0x22c/0x260 [ 1824.156998][T12508] ? kernfs_path_from_node+0x2c/0x260 [ 1824.157024][T12508] sysfs_create_dir_ns+0x259/0x280 [ 1824.157062][T12508] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1824.157099][T12508] ? do_raw_spin_unlock+0x122/0x240 [ 1824.157134][T12508] kobject_add_internal+0x59f/0xb40 [ 1824.157168][T12508] kobject_add+0x155/0x220 [ 1824.157197][T12508] ? __pfx_kobject_add+0x10/0x10 [ 1824.157221][T12508] ? _raw_spin_unlock+0x28/0x50 [ 1824.157255][T12508] ? get_device_parent+0x366/0x3a0 [ 1824.157288][T12508] device_add+0x408/0xb50 [ 1824.157463][T12508] hci_conn_add_sysfs+0xd5/0x1e0 [ 1824.157501][T12508] le_conn_complete_evt+0xc3a/0x1220 [ 1824.157570][T12508] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1824.157600][T12508] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1824.157622][T12508] ? __asan_memcpy+0x40/0x70 [ 1824.157652][T12508] ? __pfx___mutex_lock+0x10/0x10 [ 1824.157674][T12508] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1824.157694][T12508] ? skb_pull_data+0xfb/0x200 [ 1824.157733][T12508] hci_le_conn_complete_evt+0x187/0x450 [ 1824.157768][T12508] hci_event_packet+0x78f/0x1200 [ 1824.157806][T12508] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1824.157833][T12508] ? __pfx_hci_event_packet+0x10/0x10 [ 1824.157869][T12508] ? kcov_remote_start+0x4d3/0x7f0 [ 1824.157901][T12508] ? lockdep_hardirqs_on+0x90/0x150 [ 1824.157937][T12508] ? hci_send_to_monitor+0xe2/0x570 [ 1824.157967][T12508] hci_rx_work+0x46a/0xe80 [ 1824.158010][T12508] ? process_scheduled_works+0x9ef/0x17b0 [ 1824.158038][T12508] process_scheduled_works+0xade/0x17b0 [ 1824.158097][T12508] ? __pfx_process_scheduled_works+0x10/0x10 [ 1824.158143][T12508] worker_thread+0x8a0/0xda0 [ 1824.158200][T12508] kthread+0x711/0x8a0 [ 1824.158233][T12508] ? __pfx_worker_thread+0x10/0x10 [ 1824.158257][T12508] ? __pfx_kthread+0x10/0x10 [ 1824.158288][T12508] ? _raw_spin_unlock_irq+0x23/0x50 [ 1824.158318][T12508] ? lockdep_hardirqs_on+0x9c/0x150 [ 1824.158348][T12508] ? __pfx_kthread+0x10/0x10 [ 1824.158379][T12508] ret_from_fork+0x3fc/0x770 [ 1824.158404][T12508] ? __pfx_ret_from_fork+0x10/0x10 [ 1824.158434][T12508] ? __switch_to_asm+0x39/0x70 [ 1824.158460][T12508] ? __switch_to_asm+0x33/0x70 [ 1824.158485][T12508] ? __pfx_kthread+0x10/0x10 [ 1824.158516][T12508] ret_from_fork_asm+0x1a/0x30 [ 1824.158571][T12508] [ 1824.446613][T15183] Bluetooth: hci6: command 0x0405 tx timeout [ 1824.548053][T12508] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1824.562630][T12508] Bluetooth: hci4: failed to register connection device [ 1825.383381][T19312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3664'. [ 1825.683971][T19319] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1826.613200][T19330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3667'. [ 1829.276990][T19356] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3673'. [ 1829.410413][T19357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3673'. [ 1835.147471][T19380] fuse: Unknown parameter 'fd0x000000000000000500000000000000000000' [ 1836.230085][T19255] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1836.710023][T19255] usb 1-1: Using ep0 maxpacket: 16 [ 1836.761908][T19255] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1836.980063][T19255] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1837.017835][T19255] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.119034][T19255] usb 1-1: config 0 descriptor?? [ 1837.788553][T19255] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 1837.805409][T19255] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 1837.821737][T19255] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 1837.839641][T19255] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 1837.858947][T19255] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 1837.867457][T19255] mcp2221 0003:04D8:00DD.0010: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1838.119097][T19409] net_ratelimit: 10 callbacks suppressed [ 1838.119128][T19409] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 1838.212447][T19385] i2c i2c-1: unsupported multi-msg i2c transaction [ 1838.234181][T19255] usb 1-1: USB disconnect, device number 57 [ 1839.544259][T19419] input: syz1 as /devices/virtual/input/input44 [ 1840.007553][T19429] fuse: Unknown parameter 'fd0x000000000000000500000000000000000000' [ 1843.856585][T19447] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3697'. [ 1844.562918][T19465] netlink: 'syz.6.3699': attribute type 10 has an invalid length. [ 1845.102594][T15183] Bluetooth: hci4: command 0x0406 tx timeout [ 1846.067714][T19481] slcan: can't register candev [ 1846.072847][T19481] Falling back ldisc for ptm0. [ 1846.147160][T19465] veth0_vlan: left promiscuous mode [ 1846.600100][T19465] veth0_vlan: entered promiscuous mode [ 1846.990744][T19465] team0: Device veth0_vlan failed to register rx_handler [ 1847.502321][T19486] input: syz1 as /devices/virtual/input/input45 [ 1851.988835][T19532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3719'. [ 1852.214615][T19530] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3718'. [ 1852.845306][T19544] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.3720'. [ 1853.275800][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.283254][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.346345][T19542] fuse: Unknown parameter 'fd0x0000000000000006' [ 1855.326864][ T9689] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 1855.432515][T19577] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1855.626906][ T9689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1855.659462][ T9689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1855.673991][ T9689] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1855.692402][ T9689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1855.736501][ T9689] usb 1-1: config 0 descriptor?? [ 1856.069190][ T9689] usbhid 1-1:0.0: can't add hid device: -71 [ 1856.075962][ T9689] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1856.236032][ T9689] usb 1-1: USB disconnect, device number 58 [ 1856.841796][T19589] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3733'. [ 1856.860090][T15183] Bluetooth: hci4: command 0x0406 tx timeout [ 1858.960130][ T1224] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1859.216619][T19612] fuse: Unknown parameter 'fd0x0000000000000006' [ 1859.687919][ T1224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1859.700343][ T1224] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1859.710440][ T1224] usb 4-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1859.719523][ T1224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.771047][ T1224] usb 4-1: config 0 descriptor?? [ 1860.042136][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1860.042156][ T30] audit: type=1326 audit(1752479100.933:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19619 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be1b8e929 code=0x7ffc0000 [ 1860.106195][ T30] audit: type=1326 audit(1752479100.933:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19619 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be1b8e929 code=0x7ffc0000 [ 1860.128968][ T30] audit: type=1326 audit(1752479100.993:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19619 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f0be1b8e929 code=0x7ffc0000 [ 1860.930207][ T30] audit: type=1326 audit(1752479100.993:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19619 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be1b8e929 code=0x7ffc0000 [ 1861.135785][T19633] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 1861.135785][T19633] The task syz.3.3740 (19633) triggered the difference, watch for misbehavior. [ 1861.582287][ T1224] hid-picolcd 0003:04D8:C002.0011: unknown global tag 0xc [ 1861.589500][ T1224] hid-picolcd 0003:04D8:C002.0011: item 0 0 1 12 parsing failed [ 1861.597912][ T30] audit: type=1326 audit(1752479100.993:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19619 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be1b8e929 code=0x7ffc0000 [ 1861.620545][ T1224] hid-picolcd 0003:04D8:C002.0011: device report parse failed [ 1861.628171][ T1224] hid-picolcd 0003:04D8:C002.0011: probe with driver hid-picolcd failed with error -22 [ 1861.637995][ T30] audit: type=1326 audit(1752479100.993:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19619 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7f0be1b8e929 code=0x7ffc0000 [ 1861.678783][ T30] audit: type=1326 audit(1752479100.993:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19619 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be1b8e929 code=0x7ffc0000 [ 1861.733104][ T30] audit: type=1326 audit(1752479100.993:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19619 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be1b8e929 code=0x7ffc0000 [ 1861.767850][ T30] audit: type=1326 audit(1752479100.993:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19619 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0be1b8e929 code=0x7ffc0000 [ 1861.802783][ T30] audit: type=1326 audit(1752479100.993:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19619 comm="syz.1.3741" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be1b8e929 code=0x7ffc0000 [ 1861.949978][ T1224] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 1862.105315][ T1224] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1862.119718][ T1224] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1862.816441][ T1224] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1862.826101][ T1224] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1862.882032][ T24] usb 4-1: USB disconnect, device number 36 [ 1862.901725][ T1224] usb 6-1: config 0 descriptor?? [ 1863.000787][T19651] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1863.163129][T19654] overlayfs: conflicting options: userxattr,metacopy=on [ 1863.951645][ T1224] usbhid 6-1:0.0: can't add hid device: -71 [ 1863.965445][ T1224] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1864.017025][ T1224] usb 6-1: USB disconnect, device number 39 [ 1865.959414][T19673] fuse: Unknown parameter 'fd0x0000000000000006' [ 1866.980019][ T5945] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1867.188879][T19689] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3759'. [ 1868.051512][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1868.079642][ T5945] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1868.102854][ T5945] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1868.148426][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.214741][ T5945] usb 6-1: config 0 descriptor?? [ 1869.407398][T19701] overlayfs: conflicting options: userxattr,metacopy=on [ 1870.521424][ T5945] usbhid 6-1:0.0: can't add hid device: -71 [ 1870.527504][ T5945] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1870.593280][ T5945] usb 6-1: USB disconnect, device number 40 [ 1870.910152][T17911] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 1871.098858][T17911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1871.125547][T17911] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1871.153771][T17911] usb 7-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1871.167122][T17911] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.185497][T17911] usb 7-1: config 0 descriptor?? [ 1871.725479][T17911] usbhid 7-1:0.0: can't add hid device: -71 [ 1872.002040][T17911] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1872.021420][T17911] usb 7-1: USB disconnect, device number 3 [ 1872.164090][T19738] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3769'. [ 1873.401967][T19746] overlayfs: conflicting options: userxattr,metacopy=on [ 1874.478742][T19754] netlink: 'syz.1.3773': attribute type 2 has an invalid length. [ 1877.509261][T19777] fuse: Unknown parameter 'fd0x0000000000000005' [ 1878.795884][T19787] overlayfs: overlapping lowerdir path [ 1879.268044][T19771] Falling back ldisc for ttyS3. [ 1881.180391][T19790] mkiss: ax0: crc mode is auto. [ 1884.501459][T19827] fuse: Unknown parameter 'fd0x0000000000000005' [ 1885.500072][ T5945] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1885.660202][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 1885.685600][ T5945] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1885.724963][ T5945] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1885.785487][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.851826][ T5945] usb 1-1: config 0 descriptor?? [ 1886.711608][T19840] FAULT_INJECTION: forcing a failure. [ 1886.711608][T19840] name failslab, interval 1, probability 0, space 0, times 0 [ 1886.739940][T19840] CPU: 0 UID: 0 PID: 19840 Comm: syz.6.3799 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1886.739972][T19840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1886.739986][T19840] Call Trace: [ 1886.739995][T19840] [ 1886.740004][T19840] dump_stack_lvl+0x189/0x250 [ 1886.740034][T19840] ? __pfx____ratelimit+0x10/0x10 [ 1886.740066][T19840] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1886.740089][T19840] ? __pfx__printk+0x10/0x10 [ 1886.740122][T19840] ? __pfx___might_resched+0x10/0x10 [ 1886.740143][T19840] ? fs_reclaim_acquire+0x7d/0x100 [ 1886.740169][T19840] should_fail_ex+0x414/0x560 [ 1886.740204][T19840] ? alloc_netdev_mqs+0xa6/0x11e0 [ 1886.740232][T19840] should_failslab+0xa8/0x100 [ 1886.740266][T19840] __kvmalloc_node_noprof+0x161/0x5f0 [ 1886.740297][T19840] ? alloc_netdev_mqs+0xa6/0x11e0 [ 1886.740324][T19840] ? snprintf+0xda/0x120 [ 1886.740353][T19840] ? __pfx_veth_setup+0x10/0x10 [ 1886.740382][T19840] alloc_netdev_mqs+0xa6/0x11e0 [ 1886.740411][T19840] ? __pfx_veth_setup+0x10/0x10 [ 1886.740436][T19840] ? __pfx_snprintf+0x10/0x10 [ 1886.740468][T19840] rtnl_create_link+0x31f/0xd10 [ 1886.740506][T19840] rtnl_newlink_create+0x25c/0xb00 [ 1886.740537][T19840] ? __lock_acquire+0xab9/0xd20 [ 1886.740563][T19840] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1886.740585][T19840] ? rtnl_newlink+0x8db/0x1c70 [ 1886.740611][T19840] ? __pfx___mutex_lock+0x10/0x10 [ 1886.740644][T19840] ? ns_capable+0x8a/0xf0 [ 1886.740671][T19840] rtnl_newlink+0x16d6/0x1c70 [ 1886.740695][T19840] ? netlink_sendmsg+0x805/0xb30 [ 1886.740734][T19840] ? __pfx_rtnl_newlink+0x10/0x10 [ 1886.740852][T19840] ? __lock_acquire+0xab9/0xd20 [ 1886.740901][T19840] ? __pfx_rtnl_newlink+0x10/0x10 [ 1886.740922][T19840] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1886.740949][T19840] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1886.740970][T19840] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1886.740990][T19840] ? ref_tracker_free+0x63a/0x7d0 [ 1886.741019][T19840] ? __copy_skb_header+0xa7/0x550 [ 1886.741049][T19840] ? __pfx_ref_tracker_free+0x10/0x10 [ 1886.741081][T19840] ? __skb_clone+0x63/0x7a0 [ 1886.741116][T19840] netlink_rcv_skb+0x208/0x470 [ 1886.741142][T19840] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1886.741166][T19840] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1886.741207][T19840] ? netlink_deliver_tap+0x2e/0x1b0 [ 1886.741231][T19840] ? netlink_deliver_tap+0x2e/0x1b0 [ 1886.741263][T19840] netlink_unicast+0x759/0x8e0 [ 1886.741297][T19840] netlink_sendmsg+0x805/0xb30 [ 1886.741334][T19840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1886.741369][T19840] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1886.741399][T19840] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1886.741425][T19840] __sock_sendmsg+0x219/0x270 [ 1886.741462][T19840] ____sys_sendmsg+0x505/0x830 [ 1886.741495][T19840] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1886.741533][T19840] ? import_iovec+0x74/0xa0 [ 1886.741561][T19840] ___sys_sendmsg+0x21f/0x2a0 [ 1886.741591][T19840] ? __pfx____sys_sendmsg+0x10/0x10 [ 1886.741660][T19840] ? __fget_files+0x2a/0x420 [ 1886.741678][T19840] ? __fget_files+0x3a0/0x420 [ 1886.741710][T19840] __x64_sys_sendmsg+0x19b/0x260 [ 1886.741740][T19840] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1886.741786][T19840] ? __pfx_ksys_write+0x10/0x10 [ 1886.741812][T19840] ? rcu_is_watching+0x15/0xb0 [ 1886.741841][T19840] ? do_syscall_64+0xbe/0x3b0 [ 1886.741866][T19840] do_syscall_64+0xfa/0x3b0 [ 1886.741885][T19840] ? lockdep_hardirqs_on+0x9c/0x150 [ 1886.741916][T19840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.741937][T19840] ? clear_bhb_loop+0x60/0xb0 [ 1886.741963][T19840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1886.741984][T19840] RIP: 0033:0x7ff21c98e929 [ 1886.742002][T19840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1886.742021][T19840] RSP: 002b:00007ff21d886038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1886.742045][T19840] RAX: ffffffffffffffda RBX: 00007ff21cbb5fa0 RCX: 00007ff21c98e929 [ 1886.742061][T19840] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1886.742074][T19840] RBP: 00007ff21d886090 R08: 0000000000000000 R09: 0000000000000000 [ 1886.742088][T19840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1886.742101][T19840] R13: 0000000000000000 R14: 00007ff21cbb5fa0 R15: 00007ffe0d75efb8 [ 1886.742134][T19840] [ 1887.338484][ T5945] usbhid 1-1:0.0: can't add hid device: -71 [ 1887.380101][ T5945] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1887.446557][ T5945] usb 1-1: USB disconnect, device number 59 [ 1887.563116][ T9689] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1888.951073][ T9689] usb 7-1: Using ep0 maxpacket: 16 [ 1889.048141][ T9689] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1889.059595][ T9689] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1889.070023][ T9689] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1889.076700][ T9689] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1889.193892][ T9689] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1889.266086][ T9689] usb 7-1: config 0 descriptor?? [ 1889.822108][T19851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1890.602549][T19851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1891.841725][T19851] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3802'. [ 1892.239322][T19881] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1892.325534][ T9689] usb 7-1: USB disconnect, device number 4 [ 1893.688339][T19877] sp0: Synchronizing with TNC [ 1893.742601][T19896] sp0: Found TNC [ 1893.779913][ T9689] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1894.289021][T19896] netlink: 'syz.3.3809': attribute type 12 has an invalid length. [ 1894.307413][T19896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3809'. [ 1894.349914][ T9689] usb 7-1: Using ep0 maxpacket: 16 [ 1894.550059][ T9689] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1894.565778][T19876] [U] è` [ 1894.585005][ T9689] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1894.605851][ T9689] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1894.633838][ T9689] usb 7-1: config 0 descriptor?? [ 1896.754776][ T9689] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 1896.783772][ T9689] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 1896.792472][ T9689] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 1896.799582][ T9689] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 1896.837894][ T9689] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 1896.871129][ T9689] mcp2221 0003:04D8:00DD.0013: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1897.001140][ T9689] usb 7-1: USB disconnect, device number 5 [ 1897.743133][T12508] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 1898.329120][T19939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3825'. [ 1898.611534][T19944] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3825'. [ 1899.081543][T19951] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3827'. [ 1902.981466][T19987] FAULT_INJECTION: forcing a failure. [ 1902.981466][T19987] name failslab, interval 1, probability 0, space 0, times 0 [ 1903.055270][T19987] CPU: 0 UID: 0 PID: 19987 Comm: syz.1.3839 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1903.055299][T19987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1903.055313][T19987] Call Trace: [ 1903.055322][T19987] [ 1903.055333][T19987] dump_stack_lvl+0x189/0x250 [ 1903.055364][T19987] ? __pfx____ratelimit+0x10/0x10 [ 1903.055397][T19987] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1903.055426][T19987] ? __pfx__printk+0x10/0x10 [ 1903.055462][T19987] ? ref_tracker_alloc+0x318/0x460 [ 1903.055518][T19987] should_fail_ex+0x414/0x560 [ 1903.055555][T19987] should_failslab+0xa8/0x100 [ 1903.055590][T19987] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1903.055620][T19987] ? skb_clone+0x212/0x3a0 [ 1903.055654][T19987] skb_clone+0x212/0x3a0 [ 1903.055687][T19987] __netlink_deliver_tap+0x404/0x850 [ 1903.055727][T19987] ? netlink_deliver_tap+0x2e/0x1b0 [ 1903.055754][T19987] netlink_deliver_tap+0x19c/0x1b0 [ 1903.055781][T19987] netlink_unicast+0x730/0x8e0 [ 1903.055816][T19987] netlink_sendmsg+0x805/0xb30 [ 1903.055853][T19987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1903.055888][T19987] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1903.055917][T19987] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1903.055944][T19987] __sock_sendmsg+0x219/0x270 [ 1903.055982][T19987] ____sys_sendmsg+0x52d/0x830 [ 1903.056015][T19987] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1903.056053][T19987] ? import_iovec+0x74/0xa0 [ 1903.056082][T19987] ___sys_sendmsg+0x21f/0x2a0 [ 1903.056113][T19987] ? __pfx____sys_sendmsg+0x10/0x10 [ 1903.056191][T19987] ? __might_fault+0xb0/0x130 [ 1903.056225][T19987] __sys_sendmmsg+0x227/0x430 [ 1903.056259][T19987] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1903.056284][T19987] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1903.056336][T19987] ? ksys_write+0x22a/0x250 [ 1903.056368][T19987] ? __pfx_ksys_write+0x10/0x10 [ 1903.056394][T19987] ? rcu_is_watching+0x15/0xb0 [ 1903.056426][T19987] __x64_sys_sendmmsg+0xa0/0xc0 [ 1903.056455][T19987] do_syscall_64+0xfa/0x3b0 [ 1903.056474][T19987] ? lockdep_hardirqs_on+0x9c/0x150 [ 1903.056512][T19987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.056534][T19987] ? clear_bhb_loop+0x60/0xb0 [ 1903.056560][T19987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1903.056582][T19987] RIP: 0033:0x7f0be1b8e929 [ 1903.056601][T19987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1903.056619][T19987] RSP: 002b:00007f0be2a0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1903.056642][T19987] RAX: ffffffffffffffda RBX: 00007f0be1db5fa0 RCX: 00007f0be1b8e929 [ 1903.056658][T19987] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 1903.056673][T19987] RBP: 00007f0be2a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1903.056686][T19987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1903.056699][T19987] R13: 0000000000000000 R14: 00007f0be1db5fa0 R15: 00007ffd9fe3b4a8 [ 1903.056733][T19987] [ 1903.347421][ C0] vkms_vblank_simulate: vblank timer overrun [ 1904.641776][T20000] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3840'. [ 1906.487216][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 1906.643625][T20015] fuse: Unknown parameter 'fd0x0000000000000005' [ 1908.574129][T20025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3848'. [ 1912.991050][T20049] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3853'. [ 1914.780900][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.130219][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.270629][T20053] veth0_to_team: entered promiscuous mode [ 1915.276431][T20053] veth0_to_team: entered allmulticast mode [ 1915.545748][T20052] Falling back ldisc for ttyS3. [ 1917.663001][ T9689] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1917.797726][T20080] netlink: 16167 bytes leftover after parsing attributes in process `syz.1.3862'. [ 1918.036109][ T9689] usb 6-1: config 1 has an invalid descriptor of length 150, skipping remainder of the config [ 1918.046601][ T9689] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1918.360748][ T9689] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 60156, setting to 64 [ 1918.381556][ T9689] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1918.412057][ T9689] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1918.421382][ T9689] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.430302][ T9689] usb 6-1: Product: syz [ 1918.438077][ T9689] usb 6-1: Manufacturer: syz [ 1918.446180][ T9689] usb 6-1: SerialNumber: syz [ 1920.041464][T20096] netlink: 'syz.1.3864': attribute type 3 has an invalid length. [ 1920.049271][T20096] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3864'. [ 1920.346865][ T9689] cdc_ncm 6-1:1.0: bind() failure [ 1920.454728][ T9689] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1920.462912][ T9689] cdc_ncm 6-1:1.1: bind() failure [ 1920.566358][ T9689] usb 6-1: USB disconnect, device number 41 [ 1921.849490][T20101] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3866'. [ 1921.965158][T20113] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1928.136510][T20148] NILFS (nullb0): couldn't find nilfs on the device [ 1931.852631][T20178] netlink: 208 bytes leftover after parsing attributes in process `syz.6.3884'. [ 1931.968992][T20158] Falling back ldisc for ttyS3. [ 1933.352400][T20185] FAULT_INJECTION: forcing a failure. [ 1933.352400][T20185] name failslab, interval 1, probability 0, space 0, times 0 [ 1933.497095][T20185] CPU: 0 UID: 0 PID: 20185 Comm: syz.1.3885 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1933.497128][T20185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1933.497142][T20185] Call Trace: [ 1933.497151][T20185] [ 1933.497162][T20185] dump_stack_lvl+0x189/0x250 [ 1933.497192][T20185] ? __pfx____ratelimit+0x10/0x10 [ 1933.497216][T20185] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1933.497232][T20185] ? __pfx__printk+0x10/0x10 [ 1933.497256][T20185] ? __pfx___might_resched+0x10/0x10 [ 1933.497272][T20185] ? fs_reclaim_acquire+0x7d/0x100 [ 1933.497291][T20185] should_fail_ex+0x414/0x560 [ 1933.497317][T20185] should_failslab+0xa8/0x100 [ 1933.497342][T20185] __kmalloc_noprof+0xcb/0x4f0 [ 1933.497362][T20185] ? security_sk_alloc+0x52/0x390 [ 1933.497387][T20185] security_sk_alloc+0x52/0x390 [ 1933.497409][T20185] sk_prot_alloc+0x101/0x220 [ 1933.497427][T20185] ? sk_alloc+0x24/0x370 [ 1933.497446][T20185] sk_alloc+0x3a/0x370 [ 1933.497462][T20185] ? bpf_ctx_init+0x167/0x1d0 [ 1933.497481][T20185] bpf_prog_test_run_skb+0x2ed/0x1560 [ 1933.497498][T20185] ? __fget_files+0x2a/0x420 [ 1933.497522][T20185] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1933.497546][T20185] bpf_prog_test_run+0x2c7/0x340 [ 1933.497574][T20185] __sys_bpf+0x4a4/0x860 [ 1933.497597][T20185] ? __pfx___sys_bpf+0x10/0x10 [ 1933.497630][T20185] ? ksys_write+0x22a/0x250 [ 1933.497653][T20185] ? __pfx_ksys_write+0x10/0x10 [ 1933.497684][T20185] __x64_sys_bpf+0x7c/0x90 [ 1933.497705][T20185] do_syscall_64+0xfa/0x3b0 [ 1933.497721][T20185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1933.497735][T20185] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1933.497750][T20185] ? clear_bhb_loop+0x60/0xb0 [ 1933.497768][T20185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1933.497782][T20185] RIP: 0033:0x7f0be1b8e929 [ 1933.497798][T20185] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1933.497811][T20185] RSP: 002b:00007f0be2a0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1933.497829][T20185] RAX: ffffffffffffffda RBX: 00007f0be1db5fa0 RCX: 00007f0be1b8e929 [ 1933.497840][T20185] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 1933.497850][T20185] RBP: 00007f0be2a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 1933.497860][T20185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1933.497869][T20185] R13: 0000000000000000 R14: 00007f0be1db5fa0 R15: 00007ffd9fe3b4a8 [ 1933.497892][T20185] [ 1935.775834][T20204] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3891'. [ 1935.803060][T17911] usb 1-1: new full-speed USB device number 60 using dummy_hcd [ 1935.992876][T17911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1936.004949][T17911] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1936.016779][T17911] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1936.026750][T17911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1936.078799][T17911] usb 1-1: config 0 descriptor?? [ 1936.276148][T20207] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3892'. [ 1936.836408][T17911] usbhid 1-1:0.0: can't add hid device: -71 [ 1936.870652][T17911] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1936.922327][T17911] usb 1-1: USB disconnect, device number 60 [ 1940.805587][T20248] netlink: 'syz.3.3904': attribute type 1 has an invalid length. [ 1940.813573][T20248] netlink: 500 bytes leftover after parsing attributes in process `syz.3.3904'. [ 1941.797292][T20247] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3903'. [ 1943.851868][T20282] pim6reg1: entered promiscuous mode [ 1943.860040][ T1207] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1943.865791][T20282] pim6reg1: entered allmulticast mode [ 1944.011827][ T1207] usb 4-1: Using ep0 maxpacket: 16 [ 1944.045365][ T1207] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 1944.075459][ T1207] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1944.105208][ T1207] usb 4-1: Product: syz [ 1944.110615][ T1207] usb 4-1: Manufacturer: syz [ 1944.116653][ T1207] usb 4-1: SerialNumber: syz [ 1944.142805][ T1207] usb 4-1: config 0 descriptor?? [ 1944.161858][ T1207] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 1944.362025][ T1207] gp8psk: usb in 128 operation failed. [ 1944.374945][ T1207] gp8psk: usb in 137 operation failed. [ 1944.430323][ T1207] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1944.542851][ T1207] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 1944.628838][ T1207] usb 4-1: media controller created [ 1945.049104][ T1207] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1945.189022][ T1207] gp8psk_fe: Frontend revision 1 attached [ 1945.199270][ T1207] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1945.226147][ T1207] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1945.400702][T20301] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1946.186650][ T1207] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 1946.224077][ T1207] gp8psk: found Genpix USB device pID = 201 (hex) [ 1946.898912][ T10] usb 4-1: USB disconnect, device number 37 [ 1948.443935][T20325] IPVS: Error connecting to the multicast addr [ 1949.111031][ T10] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 1949.839907][T20334] fuse: Unknown parameter 'fd0x0000000000000005' [ 1954.478634][T20368] FAULT_INJECTION: forcing a failure. [ 1954.478634][T20368] name failslab, interval 1, probability 0, space 0, times 0 [ 1954.518465][T20368] CPU: 1 UID: 0 PID: 20368 Comm: syz.1.3933 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1954.518497][T20368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1954.518510][T20368] Call Trace: [ 1954.518519][T20368] [ 1954.518530][T20368] dump_stack_lvl+0x189/0x250 [ 1954.518558][T20368] ? __pfx____ratelimit+0x10/0x10 [ 1954.518591][T20368] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1954.518615][T20368] ? __pfx__printk+0x10/0x10 [ 1954.518645][T20368] ? __pfx___might_resched+0x10/0x10 [ 1954.518669][T20368] ? fs_reclaim_acquire+0x7d/0x100 [ 1954.518705][T20368] should_fail_ex+0x414/0x560 [ 1954.518741][T20368] should_failslab+0xa8/0x100 [ 1954.518776][T20368] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1954.518807][T20368] ? dup_task_struct+0x52/0x860 [ 1954.518836][T20368] dup_task_struct+0x52/0x860 [ 1954.518861][T20368] ? lockdep_hardirqs_on+0x9c/0x150 [ 1954.518897][T20368] copy_process+0x544/0x3b80 [ 1954.518941][T20368] ? get_pid_task+0x20/0x1f0 [ 1954.518977][T20368] ? __pfx_copy_process+0x10/0x10 [ 1954.519007][T20368] ? rcu_read_lock_any_held+0xb3/0x120 [ 1954.519041][T20368] kernel_clone+0x224/0x7f0 [ 1954.519070][T20368] ? __pfx_kernel_clone+0x10/0x10 [ 1954.519107][T20368] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1954.519135][T20368] __x64_sys_clone+0x18b/0x1e0 [ 1954.519166][T20368] ? __pfx___x64_sys_clone+0x10/0x10 [ 1954.519211][T20368] ? __pfx_ksys_write+0x10/0x10 [ 1954.519246][T20368] ? do_syscall_64+0xbe/0x3b0 [ 1954.519271][T20368] do_syscall_64+0xfa/0x3b0 [ 1954.519290][T20368] ? lockdep_hardirqs_on+0x9c/0x150 [ 1954.519321][T20368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1954.519342][T20368] ? clear_bhb_loop+0x60/0xb0 [ 1954.519368][T20368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1954.519388][T20368] RIP: 0033:0x7f0be1b8e929 [ 1954.519408][T20368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1954.519425][T20368] RSP: 002b:00007f0be29ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1954.519449][T20368] RAX: ffffffffffffffda RBX: 00007f0be1db6160 RCX: 00007f0be1b8e929 [ 1954.519465][T20368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1954.519477][T20368] RBP: 00007f0be29cd090 R08: 0000000000000000 R09: 0000000000000000 [ 1954.519491][T20368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1954.519504][T20368] R13: 0000000000000001 R14: 00007f0be1db6160 R15: 00007ffd9fe3b4a8 [ 1954.519536][T20368] [ 1955.121162][T20378] FAULT_INJECTION: forcing a failure. [ 1955.121162][T20378] name failslab, interval 1, probability 0, space 0, times 0 [ 1955.180508][T20378] CPU: 1 UID: 0 PID: 20378 Comm: syz.5.3938 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1955.180532][T20378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1955.180542][T20378] Call Trace: [ 1955.180549][T20378] [ 1955.180556][T20378] dump_stack_lvl+0x189/0x250 [ 1955.180577][T20378] ? __pfx____ratelimit+0x10/0x10 [ 1955.180600][T20378] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1955.180617][T20378] ? __pfx__printk+0x10/0x10 [ 1955.180649][T20378] ? __pfx___might_resched+0x10/0x10 [ 1955.180665][T20378] ? fs_reclaim_acquire+0x7d/0x100 [ 1955.180684][T20378] should_fail_ex+0x414/0x560 [ 1955.180711][T20378] should_failslab+0xa8/0x100 [ 1955.180745][T20378] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1955.180773][T20378] ? __kernfs_new_node+0xd7/0x7e0 [ 1955.180800][T20378] __kernfs_new_node+0xd7/0x7e0 [ 1955.180820][T20378] ? __lock_acquire+0xab9/0xd20 [ 1955.180848][T20378] ? __pfx___kernfs_new_node+0x10/0x10 [ 1955.180871][T20378] ? kernfs_root+0x1c/0x230 [ 1955.180900][T20378] ? kernfs_root+0x1c/0x230 [ 1955.180916][T20378] ? kernfs_root+0x1c/0x230 [ 1955.180934][T20378] kernfs_new_node+0x102/0x210 [ 1955.180954][T20378] kernfs_create_link+0xa7/0x200 [ 1955.180977][T20378] sysfs_do_create_link_sd+0x83/0x110 [ 1955.180994][T20378] device_add_class_symlinks+0xb6/0x240 [ 1955.181016][T20378] device_add+0x475/0xb50 [ 1955.181033][T20378] ? device_initialize+0x24b/0x440 [ 1955.181053][T20378] wakeup_source_sysfs_add+0x1af/0x280 [ 1955.181075][T20378] wakeup_source_register+0x18a/0x380 [ 1955.181095][T20378] ? ep_insert+0xb93/0x19e0 [ 1955.181117][T20378] ep_insert+0xef6/0x19e0 [ 1955.181149][T20378] ? __pfx_ep_insert+0x10/0x10 [ 1955.181169][T20378] ? __pfx___mutex_lock+0x10/0x10 [ 1955.181193][T20378] ? bpf_lsm_capable+0x9/0x20 [ 1955.181217][T20378] do_epoll_ctl+0x7f4/0xe90 [ 1955.181245][T20378] __x64_sys_epoll_ctl+0x163/0x1a0 [ 1955.181269][T20378] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1955.181289][T20378] ? rcu_is_watching+0x15/0xb0 [ 1955.181310][T20378] ? do_syscall_64+0xbe/0x3b0 [ 1955.181328][T20378] do_syscall_64+0xfa/0x3b0 [ 1955.181341][T20378] ? lockdep_hardirqs_on+0x9c/0x150 [ 1955.181363][T20378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1955.181377][T20378] ? clear_bhb_loop+0x60/0xb0 [ 1955.181396][T20378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1955.181410][T20378] RIP: 0033:0x7f815d58e929 [ 1955.181424][T20378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1955.181437][T20378] RSP: 002b:00007f815e462038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1955.181453][T20378] RAX: ffffffffffffffda RBX: 00007f815d7b5fa0 RCX: 00007f815d58e929 [ 1955.181464][T20378] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000007 [ 1955.181473][T20378] RBP: 00007f815e462090 R08: 0000000000000000 R09: 0000000000000000 [ 1955.181482][T20378] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000002 [ 1955.181491][T20378] R13: 0000000000000000 R14: 00007f815d7b5fa0 R15: 00007ffd9df1dc68 [ 1955.181514][T20378] [ 1955.791971][T20384] fuse: Bad value for 'fd' [ 1956.687357][T20391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3942'. [ 1957.553889][T20387] IPVS: ip_vs_add_dest(): server weight less than zero [ 1957.609567][ T9689] IPVS: starting estimator thread 0... [ 1957.740108][T20394] IPVS: using max 25 ests per chain, 60000 per kthread [ 1958.165757][T20400] IPv6: addrconf: prefix option has invalid lifetime [ 1958.210000][T20404] FAULT_INJECTION: forcing a failure. [ 1958.210000][T20404] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1958.223764][T20404] CPU: 0 UID: 0 PID: 20404 Comm: syz.5.3948 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1958.223792][T20404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1958.223805][T20404] Call Trace: [ 1958.223814][T20404] [ 1958.223824][T20404] dump_stack_lvl+0x189/0x250 [ 1958.223852][T20404] ? __pfx____ratelimit+0x10/0x10 [ 1958.223885][T20404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1958.223909][T20404] ? __pfx__printk+0x10/0x10 [ 1958.223943][T20404] ? __task_pid_nr_ns+0x28/0x470 [ 1958.223975][T20404] should_fail_ex+0x414/0x560 [ 1958.224010][T20404] futex_lock_pi_atomic+0x100/0xd60 [ 1958.224050][T20404] futex_lock_pi+0x23d/0xa60 [ 1958.224080][T20404] ? lockdep_hardirqs_on+0x9c/0x150 [ 1958.224118][T20404] ? __pfx_futex_lock_pi+0x10/0x10 [ 1958.224156][T20404] ? fpu__restore_sig+0x978/0x1100 [ 1958.224208][T20404] ? __pfx_futex_wake_mark+0x10/0x10 [ 1958.224260][T20404] ? __ia32_sys_rt_sigreturn+0x6a2/0x7b0 [ 1958.224296][T20404] do_futex+0x292/0x420 [ 1958.224322][T20404] ? __pfx___ia32_sys_rt_sigreturn+0x10/0x10 [ 1958.224458][T20404] ? __pfx_do_futex+0x10/0x10 [ 1958.224495][T20404] __se_sys_futex+0x36f/0x400 [ 1958.224528][T20404] ? __pfx___se_sys_futex+0x10/0x10 [ 1958.224554][T20404] ? __task_pid_nr_ns+0x28/0x470 [ 1958.224587][T20404] ? __x64_sys_futex+0x21/0xf0 [ 1958.224618][T20404] do_syscall_64+0xfa/0x3b0 [ 1958.224636][T20404] ? lockdep_hardirqs_on+0x9c/0x150 [ 1958.224666][T20404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.224687][T20404] ? clear_bhb_loop+0x60/0xb0 [ 1958.224714][T20404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1958.224734][T20404] RIP: 0033:0x7f815d58e929 [ 1958.224754][T20404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1958.224771][T20404] RSP: 002b:00007f815e462038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1958.224794][T20404] RAX: ffffffffffffffda RBX: 00007f815d7b5fa0 RCX: 00007f815d58e929 [ 1958.224808][T20404] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 000020000000cffc [ 1958.224821][T20404] RBP: 00007f815e462090 R08: 0000000000000000 R09: 00000000fffffffc [ 1958.224836][T20404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1958.224849][T20404] R13: 0000000000000000 R14: 00007f815d7b5fa0 R15: 00007ffd9df1dc68 [ 1958.224882][T20404] [ 1959.477336][T20415] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1960.720047][ T9689] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 1963.723532][ T9689] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1963.751697][ T9689] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1963.767978][ T9689] usb 1-1: can't read configurations, error -71 [ 1964.118663][T20446] No control pipe specified [ 1964.200423][T12508] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 1964.275679][T20449] netlink: 9 bytes leftover after parsing attributes in process `syz.5.3958'. [ 1964.315640][T20449] 0·: renamed from hsr0 (while UP) [ 1964.350437][T20449] 0·: entered allmulticast mode [ 1964.405395][T20449] hsr_slave_0: entered allmulticast mode [ 1964.430426][T20449] hsr_slave_1: entered allmulticast mode [ 1964.465769][T20449] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1965.208523][T20459] NILFS (nullb0): couldn't find nilfs on the device [ 1967.470282][T20460] Falling back ldisc for ttyS3. [ 1968.972849][T20493] TCP: TCP_TX_DELAY enabled [ 1969.059331][T15183] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 1969.153431][T20497] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3972'. [ 1971.014419][T20511] overlayfs: failed to resolve './file1': -2 [ 1971.698673][T20515] NILFS (nullb0): couldn't find nilfs on the device [ 1972.560215][T20520] netlink: 80 bytes leftover after parsing attributes in process `syz.5.3979'. [ 1972.824871][T20520] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3979'. [ 1973.590131][T20520] tipc: MTU too low for tipc bearer [ 1976.039424][T12508] Bluetooth: hci6: Ignoring HCI_Connection_Complete for existing connection [ 1976.155101][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.169990][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1979.257056][T20566] overlayfs: conflicting options: userxattr,metacopy=on [ 1979.294534][T20559] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3989'. [ 1981.304921][T20573] Falling back ldisc for ttyS3. [ 1982.060118][T20586] fuse: Unknown parameter '0x0000000000000005' [ 1982.325633][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 1982.325654][ T30] audit: type=1326 audit(1752479676.212:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20577 comm="syz.6.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21c98e929 code=0x7ffc0000 [ 1983.274801][ T30] audit: type=1326 audit(1752479676.252:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20577 comm="syz.6.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21c98e929 code=0x7ffc0000 [ 1983.476685][T20596] warn_alloc: 1 callbacks suppressed [ 1983.476706][T20596] syz.6.3995: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1983.497505][T20596] CPU: 1 UID: 0 PID: 20596 Comm: syz.6.3995 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1983.497536][T20596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1983.497551][T20596] Call Trace: [ 1983.497561][T20596] [ 1983.497571][T20596] dump_stack_lvl+0x189/0x250 [ 1983.497607][T20596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1983.497632][T20596] ? __pfx__printk+0x10/0x10 [ 1983.497661][T20596] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1983.497689][T20596] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1983.497719][T20596] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1983.497749][T20596] warn_alloc+0x214/0x310 [ 1983.497770][T20596] ? stack_depot_save_flags+0x40/0x900 [ 1983.497807][T20596] ? __pfx_warn_alloc+0x10/0x10 [ 1983.497831][T20596] ? kasan_save_track+0x4f/0x80 [ 1983.497862][T20596] ? xskq_create+0x56/0x170 [ 1983.497890][T20596] ? xsk_init_queue+0xb0/0x110 [ 1983.497918][T20596] ? xsk_setsockopt+0x43f/0x710 [ 1983.497945][T20596] ? do_sock_setsockopt+0x257/0x3e0 [ 1983.497970][T20596] ? __x64_sys_setsockopt+0x18b/0x220 [ 1983.497995][T20596] ? do_syscall_64+0xfa/0x3b0 [ 1983.498014][T20596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1983.498045][T20596] __vmalloc_node_range_noprof+0x125/0x12f0 [ 1983.498196][T20596] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1983.498239][T20596] ? __kasan_kmalloc+0x93/0xb0 [ 1983.498275][T20596] vmalloc_user_noprof+0xad/0xf0 [ 1983.498309][T20596] ? xskq_create+0xbf/0x170 [ 1983.498341][T20596] xskq_create+0xbf/0x170 [ 1983.498376][T20596] xsk_init_queue+0xb0/0x110 [ 1983.498411][T20596] xsk_setsockopt+0x43f/0x710 [ 1983.498444][T20596] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1983.498473][T20596] ? __lock_acquire+0xab9/0xd20 [ 1983.498505][T20596] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1983.498536][T20596] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1983.498568][T20596] do_sock_setsockopt+0x257/0x3e0 [ 1983.498598][T20596] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1983.498631][T20596] ? __fget_files+0x2a/0x420 [ 1983.498661][T20596] __x64_sys_setsockopt+0x18b/0x220 [ 1983.498695][T20596] do_syscall_64+0xfa/0x3b0 [ 1983.498714][T20596] ? lockdep_hardirqs_on+0x9c/0x150 [ 1983.498747][T20596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1983.498768][T20596] ? clear_bhb_loop+0x60/0xb0 [ 1983.498795][T20596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1983.498816][T20596] RIP: 0033:0x7ff21c98e929 [ 1983.498836][T20596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1983.498855][T20596] RSP: 002b:00007ff21d802038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1983.498879][T20596] RAX: ffffffffffffffda RBX: 00007ff21cbb6320 RCX: 00007ff21c98e929 [ 1983.498895][T20596] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 1983.498909][T20596] RBP: 00007ff21ca10b39 R08: 0000000000000052 R09: 0000000000000000 [ 1983.498923][T20596] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1983.498937][T20596] R13: 0000000000000000 R14: 00007ff21cbb6320 R15: 00007ffe0d75efb8 [ 1983.498971][T20596] [ 1983.498992][T20596] Mem-Info: [ 1983.650800][T12508] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1983.654310][T20596] active_anon:34711 inactive_anon:13717 isolated_anon:0 [ 1983.654310][T20596] active_file:26577 inactive_file:35927 isolated_file:0 [ 1983.654310][T20596] unevictable:768 dirty:338 writeback:0 [ 1983.654310][T20596] slab_reclaimable:11045 slab_unreclaimable:107873 [ 1983.654310][T20596] mapped:48354 shmem:44427 pagetables:1564 [ 1983.654310][T20596] sec_pagetables:0 bounce:0 [ 1983.654310][T20596] kernel_misc_reclaimable:0 [ 1983.654310][T20596] free:1246129 free_pcp:9871 free_cma:0 [ 1983.697934][ T30] audit: type=1326 audit(1752479676.362:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20577 comm="syz.6.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff21c98e929 code=0x7ffc0000 [ 1983.699009][T20596] Node 0 active_anon:138844kB inactive_anon:54868kB active_file:105940kB inactive_file:143708kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:193340kB dirty:1352kB writeback:0kB shmem:176172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13144kB pagetables:6100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1983.728965][ T30] audit: type=1326 audit(1752479676.802:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20577 comm="syz.6.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21c98e929 code=0x7ffc0000 [ 1983.731484][T20596] Node 1 active_anon:0kB inactive_anon:0kB active_file:368kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1983.758192][ T30] audit: type=1326 audit(1752479676.802:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20577 comm="syz.6.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21c98e929 code=0x7ffc0000 [ 1983.764587][T20596] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1983.764658][T20596] lowmem_reserve[]: 0 2500 2502 2502 [ 1983.889286][ T30] audit: type=1326 audit(1752479676.952:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20577 comm="syz.6.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7ff21c98e929 code=0x7ffc0000 [ 1983.923118][T20596] 2502 [ 1983.923146][T20596] Node 0 DMA32 free:1056036kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:138840kB inactive_anon:55020kB active_file:104192kB inactive_file:143640kB unevictable:1536kB writepending:1352kB present:3129332kB managed:2560896kB mlocked:0kB bounce:0kB free_pcp:29684kB local_pcp:20332kB free_cma:0kB [ 1983.923214][T20596] lowmem_reserve[]: 0 0 1 1 1 [ 1984.130044][ T1224] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1984.131766][T20596] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:48kB active_file:1748kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1984.176477][T20596] lowmem_reserve[]: 0 0 0 0 0 [ 1984.181414][T20596] Node 1 Normal free:3913152kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:368kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:9044kB local_pcp:0kB free_cma:0kB [ 1984.320104][T20596] lowmem_reserve[]: 0 0 0 0 0 [ 1984.324937][T20596] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1984.332490][ T30] audit: type=1326 audit(1752479676.952:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20577 comm="syz.6.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21c98e929 code=0x7ffc0000 [ 1984.337938][T20596] Node 0 DMA32: 628*4kB (UME) 359*8kB (UM) 344*16kB (UME) 205*32kB (UM) 207*64kB (UME) 477*128kB (UME) 301*256kB (UME) 157*512kB (UME) 92*1024kB (UME) 39*2048kB (UM) 156*4096kB (UM) = 1062248kB [ 1984.380046][T20596] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 1984.392970][T20596] Node 1 Normal: 198*4kB (UM) 43*8kB (UME) 45*16kB (UME) 248*32kB (UME) 106*64kB (UME) 34*128kB (UME) 12*256kB (UME) 6*512kB (UM) 3*1024kB (UME) 4*2048kB (UME) 946*4096kB (M) = 3913152kB [ 1984.411795][T20596] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1984.422043][T20596] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1984.429912][ T1224] usb 4-1: Using ep0 maxpacket: 8 [ 1984.432318][T20596] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1984.446722][T20596] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1984.456333][T20596] 101198 total pagecache pages [ 1984.461400][T20596] 0 pages in swap cache [ 1984.465602][T20596] Free swap = 124996kB [ 1984.469830][T20596] Total swap = 124996kB [ 1984.474997][T20596] 2097051 pages RAM [ 1984.478881][T20596] 0 pages HighMem/MovableOnly [ 1984.483631][T20596] 424720 pages reserved [ 1984.487912][T20596] 0 pages cma reserved [ 1984.492102][ T1224] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1984.492724][ T30] audit: type=1326 audit(1752479676.952:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20577 comm="syz.6.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21c98e929 code=0x7ffc0000 [ 1984.524087][ T1224] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1984.538082][ T1224] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1984.539835][ T30] audit: type=1326 audit(1752479676.952:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20577 comm="syz.6.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7ff21c98e929 code=0x7ffc0000 [ 1984.549419][ T1224] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1984.587163][ T1224] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1984.596631][ T1224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1984.659494][T20604] overlayfs: conflicting options: userxattr,metacopy=on [ 1984.702875][ T30] audit: type=1326 audit(1752479676.952:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20577 comm="syz.6.3995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21c98e929 code=0x7ffc0000 [ 1985.508968][ T1224] usb 4-1: GET_CAPABILITIES returned 0 [ 1985.522528][ T1224] usbtmc 4-1:16.0: can't read capabilities [ 1987.489627][ T1224] usb 4-1: USB disconnect, device number 38 [ 1988.410169][T20626] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0 [ 1988.420713][T20627] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 1 [ 1988.454736][T20628] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 2 [ 1988.459932][T20629] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 3 [ 1988.491383][T20630] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 4 [ 1988.511589][T20631] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 5 [ 1988.525973][T20633] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 6 [ 1988.541857][T20635] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 7 [ 1988.560992][T20637] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 8 [ 1988.574897][T20640] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 10 [ 1988.575653][T20639] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 9 [ 1988.599108][T20642] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 12 [ 1988.603116][T20641] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 11 [ 1988.610176][T20643] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 13 [ 1988.641218][T20645] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 14 [ 1988.656523][T20646] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 15 [ 1988.674240][T20647] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 16 [ 1988.689571][T20648] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 17 [ 1988.691825][T20649] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 18 [ 1988.719446][T20653] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 20 [ 1988.719877][T20650] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 19 [ 1988.730307][T20654] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 21 [ 1988.761629][T20655] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 22 [ 1988.778106][T20656] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 23 [ 1988.781081][T20657] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 24 [ 1988.798861][T20658] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 25 [ 1988.822030][T20659] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 26 [ 1989.041682][T20662] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 27 [ 1989.054146][T20665] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 29 [ 1989.054764][T20664] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 28 [ 1989.064714][T20666] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 30 [ 1989.086456][T20667] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 31 [ 1989.169792][T20669] fuse: Unknown parameter '0x0000000000000005' [ 1990.417304][T15183] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1990.427590][T15183] CPU: 0 UID: 0 PID: 15183 Comm: kworker/u9:1 Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 1990.427620][T15183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1990.427635][T15183] Workqueue: hci0 hci_rx_work [ 1990.427673][T15183] Call Trace: [ 1990.427684][T15183] [ 1990.427695][T15183] dump_stack_lvl+0x189/0x250 [ 1990.427722][T15183] ? kernfs_path_from_node+0x2c/0x260 [ 1990.427746][T15183] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1990.427771][T15183] ? __pfx__printk+0x10/0x10 [ 1990.427802][T15183] ? __rcu_read_unlock+0x84/0xe0 [ 1990.427831][T15183] ? kernfs_path_from_node+0x2c/0x260 [ 1990.427855][T15183] ? kernfs_path_from_node+0x22c/0x260 [ 1990.427874][T15183] ? kernfs_path_from_node+0x2c/0x260 [ 1990.427900][T15183] sysfs_create_dir_ns+0x259/0x280 [ 1990.427938][T15183] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1990.427975][T15183] ? do_raw_spin_unlock+0x122/0x240 [ 1990.428009][T15183] kobject_add_internal+0x59f/0xb40 [ 1990.428043][T15183] kobject_add+0x155/0x220 [ 1990.428071][T15183] ? __pfx_kobject_add+0x10/0x10 [ 1990.428095][T15183] ? _raw_spin_unlock+0x3f/0x50 [ 1990.428129][T15183] ? get_device_parent+0x366/0x3a0 [ 1990.428162][T15183] device_add+0x408/0xb50 [ 1990.428193][T15183] hci_conn_add_sysfs+0xd5/0x1e0 [ 1990.428229][T15183] le_conn_complete_evt+0xc3a/0x1220 [ 1990.428269][T15183] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1990.428296][T15183] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1990.428315][T15183] ? __asan_memcpy+0x40/0x70 [ 1990.428343][T15183] ? __pfx___mutex_lock+0x10/0x10 [ 1990.428369][T15183] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1990.428389][T15183] ? skb_pull_data+0xfb/0x200 [ 1990.428427][T15183] hci_le_conn_complete_evt+0x187/0x450 [ 1990.428460][T15183] hci_event_packet+0x78f/0x1200 [ 1990.428499][T15183] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1990.428533][T15183] ? __pfx_hci_event_packet+0x10/0x10 [ 1990.428579][T15183] ? hci_send_to_monitor+0xe2/0x570 [ 1990.428610][T15183] hci_rx_work+0x46a/0xe80 [ 1990.428654][T15183] ? process_scheduled_works+0x9ef/0x17b0 [ 1990.428680][T15183] process_scheduled_works+0xade/0x17b0 [ 1990.428738][T15183] ? __pfx_process_scheduled_works+0x10/0x10 [ 1990.428782][T15183] worker_thread+0x8a0/0xda0 [ 1990.428838][T15183] kthread+0x711/0x8a0 [ 1990.428871][T15183] ? __pfx_worker_thread+0x10/0x10 [ 1990.428894][T15183] ? __pfx_kthread+0x10/0x10 [ 1990.428925][T15183] ? _raw_spin_unlock_irq+0x23/0x50 [ 1990.428954][T15183] ? lockdep_hardirqs_on+0x9c/0x150 [ 1990.428984][T15183] ? __pfx_kthread+0x10/0x10 [ 1990.429014][T15183] ret_from_fork+0x3fc/0x770 [ 1990.429040][T15183] ? __pfx_ret_from_fork+0x10/0x10 [ 1990.429069][T15183] ? __switch_to_asm+0x39/0x70 [ 1990.429094][T15183] ? __switch_to_asm+0x33/0x70 [ 1990.429119][T15183] ? __pfx_kthread+0x10/0x10 [ 1990.429150][T15183] ret_from_fork_asm+0x1a/0x30 [ 1990.429195][T15183] [ 1990.429553][T15183] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1990.804921][T15183] Bluetooth: hci0: failed to register connection device [ 1991.075056][ T1224] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1991.621119][ T1224] usb 4-1: Using ep0 maxpacket: 16 [ 1991.642185][ T1224] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 1991.650888][ T1224] usb 4-1: config 1 has no interface number 0 [ 1991.661042][ T1224] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1991.837421][ T1224] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1992.054620][T20692] NILFS (nullb0): couldn't find nilfs on the device [ 1992.326891][T20690] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4011'. [ 1992.333087][ T1224] usb 4-1: config 1 interface 105 has no altsetting 0 [ 1992.421178][ T1224] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1992.559859][ T1224] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1992.568361][ T1224] usb 4-1: Product: syz [ 1992.600338][ T1224] usb 4-1: Manufacturer: syz [ 1992.605014][ T1224] usb 4-1: SerialNumber: syz [ 1992.668169][T20680] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1992.716206][T20680] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1993.821944][ T1224] aqc111 4-1:1.105: probe with driver aqc111 failed with error -71 [ 1993.934072][ T1224] usb 4-1: USB disconnect, device number 39 [ 1994.273475][T20707] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4019'. [ 1994.765449][T20707] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1995.494443][T20719] fuse: Unknown parameter '0x0000000000000005' [ 1996.846900][T15183] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 1997.023332][T12508] Bluetooth: hci0: command 0x0406 tx timeout [ 2001.618638][T20754] overlayfs: conflicting options: userxattr,metacopy=on [ 2004.217889][T20776] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4035'. [ 2011.206799][T20818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4050'. [ 2015.463354][T20857] ip6t_REJECT: ECHOREPLY is not supported [ 2015.513916][T20857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4062'. [ 2017.980257][T20883] tipc: Enabled bearer , priority 10 [ 2018.052425][T20880] random: crng reseeded on system resumption [ 2018.101953][T20885] netlink: 116 bytes leftover after parsing attributes in process `syz.5.4070'. [ 2018.119577][T20886] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4069'. [ 2018.248131][T20885] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 2123.629693][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2123.636719][ C0] rcu: 1-...!: (0 ticks this GP) idle=532c/1/0x4000000000000000 softirq=116751/116751 fqs=0 [ 2123.648418][ C0] rcu: (detected by 0, t=10502 jiffies, g=107013, q=263 ncpus=2) [ 2123.656279][ C0] Sending NMI from CPU 0 to CPUs 1: [ 2123.656317][ C1] NMI backtrace for cpu 1 [ 2123.656335][ C1] CPU: 1 UID: 0 PID: 16581 Comm: syz-executor Not tainted 6.16.0-rc5-syzkaller-00276-g5d5d62298b8b #0 PREEMPT(full) [ 2123.656357][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2123.656369][ C1] RIP: 0010:lock_is_held_type+0xa8/0x190 [ 2123.656403][ C1] Code: 35 07 41 83 bd e8 0a 00 00 00 7e 48 4c 89 eb 48 81 c3 f0 0a 00 00 45 31 ff 49 83 ff 31 73 24 48 89 df 4c 89 f6 e8 78 02 00 00 <85> c0 75 2a 49 ff c7 49 63 85 e8 0a 00 00 48 83 c3 28 49 39 c7 7c [ 2123.656418][ C1] RSP: 0018:ffffc90000a08cf8 EFLAGS: 00000046 [ 2123.656435][ C1] RAX: 0000000000000000 RBX: ffff888025684808 RCX: 7b8cc622c4303800 [ 2123.656448][ C1] RDX: ffff888025683c00 RSI: ffff8880b8727ad8 RDI: ffff888025684808 [ 2123.656462][ C1] RBP: 00000000ffffffff R08: ffff888057186357 R09: 0000000000000000 [ 2123.656474][ C1] R10: ffff888057186340 R11: ffffed100ae30c6b R12: 0000000000000046 [ 2123.656487][ C1] R13: ffff888025683c00 R14: ffff8880b8727ad8 R15: 0000000000000007 [ 2123.656500][ C1] FS: 000055558a986500(0000) GS:ffff888125d4f000(0000) knlGS:0000000000000000 [ 2123.656515][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2123.656527][ C1] CR2: 00007f0f236e56c0 CR3: 0000000034e3a000 CR4: 00000000003526f0 [ 2123.656543][ C1] Call Trace: [ 2123.656553][ C1] [ 2123.656564][ C1] __hrtimer_run_queues+0x284/0xc60 [ 2123.656594][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 2123.656613][ C1] ? read_tsc+0x9/0x20 [ 2123.656643][ C1] hrtimer_interrupt+0x45b/0xaa0 [ 2123.656674][ C1] __sysvec_apic_timer_interrupt+0x108/0x410 [ 2123.656696][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 2123.656722][ C1] [ 2123.656728][ C1] [ 2123.656735][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2123.656755][ C1] RIP: 0010:page_table_check_set+0x2f6/0x730 [ 2123.656784][ C1] Code: be 04 00 00 00 e8 8a db f4 ff 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 0f 85 55 01 00 00 44 8b 3b <31> ff 44 89 fe e8 d0 87 93 ff 45 85 ff 0f 85 5e 02 00 00 48 8d 7b [ 2123.656799][ C1] RSP: 0018:ffffc9001c0af388 EFLAGS: 00000246 [ 2123.656814][ C1] RAX: 0000000000000000 RBX: ffff88801ecc4218 RCX: dffffc0000000000 [ 2123.656827][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801ecc4218 [ 2123.656839][ C1] RBP: ffff88801ecc41d0 R08: ffff88801ecc421b R09: 1ffff11003d98843 [ 2123.656852][ C1] R10: dffffc0000000000 R11: ffffed1003d98844 R12: 0000000000000001 [ 2123.656871][ C1] R13: 0000000000000000 R14: 000000000008a739 R15: 0000000000000000 [ 2123.656891][ C1] ? page_table_check_set+0x2d6/0x730 [ 2123.656917][ C1] ? page_table_check_set+0x18d/0x730 [ 2123.656944][ C1] copy_pmd_range+0x4262/0x7000 [ 2123.656971][ C1] ? arch_stack_walk+0xfc/0x150 [ 2123.657005][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 2123.657040][ C1] copy_page_range+0xc46/0x1270 [ 2123.657058][ C1] ? __lock_acquire+0xab9/0xd20 [ 2123.657084][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 2123.657106][ C1] ? up_write+0x1c4/0x420 [ 2123.657126][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 2123.657147][ C1] dup_mmap+0xf57/0x1ac0 [ 2123.657181][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 2123.657211][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 2123.657231][ C1] ? mm_init+0xc68/0xec0 [ 2123.657252][ C1] copy_mm+0x13c/0x4b0 [ 2123.657273][ C1] ? copy_process+0x978/0x3b80 [ 2123.657291][ C1] copy_process+0x16d3/0x3b80 [ 2123.657314][ C1] ? copy_process+0x978/0x3b80 [ 2123.657341][ C1] ? __pfx_copy_process+0x10/0x10 [ 2123.657362][ C1] ? __handle_mm_fault+0x1144/0x5620 [ 2123.657388][ C1] kernel_clone+0x224/0x7f0 [ 2123.657410][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 2123.657440][ C1] __x64_sys_clone+0x18b/0x1e0 [ 2123.657461][ C1] ? count_memcg_event_mm+0x21/0x260 [ 2123.657484][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 2123.657514][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 2123.657541][ C1] ? do_syscall_64+0xbe/0x3b0 [ 2123.657559][ C1] do_syscall_64+0xfa/0x3b0 [ 2123.657574][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 2123.657599][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2123.657618][ C1] ? clear_bhb_loop+0x60/0xb0 [ 2123.657638][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2123.657655][ C1] RIP: 0033:0x7f0f22985193 [ 2123.657671][ C1] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 2123.657686][ C1] RSP: 002b:00007ffec578d568 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 2123.657702][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0f22985193 [ 2123.657715][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 2123.657726][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 2123.657736][ C1] R10: 000055558a9867d0 R11: 0000000000000246 R12: 0000000000000000 [ 2123.657748][ C1] R13: 00000000000927c0 R14: 00000000001ecc8d R15: 00007ffec578d700 [ 2123.657768][ C1] [ 2123.658305][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g107013 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 2124.155393][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=131885 [ 2124.163504][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g107013 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 2124.175085][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2124.185100][ C0] rcu: RCU grace-period kthread stack dump: [ 2124.191020][ C0] task:rcu_preempt state:I stack:26464 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 2124.203015][ C0] Call Trace: [ 2124.206333][ C0] [ 2124.209304][ C0] __schedule+0x16a2/0x4cb0 [ 2124.213872][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 2124.219133][ C0] ? schedule+0x165/0x360 [ 2124.223519][ C0] ? __lock_acquire+0xab9/0xd20 [ 2124.228413][ C0] ? __pfx___schedule+0x10/0x10 [ 2124.233335][ C0] ? schedule+0x91/0x360 [ 2124.237629][ C0] schedule+0x165/0x360 [ 2124.241844][ C0] schedule_timeout+0x12b/0x270 [ 2124.246742][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2124.252159][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2124.257593][ C0] ? prepare_to_swait_event+0x341/0x380 [ 2124.263206][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 2124.268106][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 2124.273087][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2124.278333][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2124.283656][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2124.288929][ C0] rcu_gp_kthread+0x99/0x390 [ 2124.293564][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2124.298806][ C0] ? __kthread_parkme+0x7b/0x200 [ 2124.303787][ C0] ? __kthread_parkme+0x1a1/0x200 [ 2124.308867][ C0] kthread+0x711/0x8a0 [ 2124.312994][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2124.318234][ C0] ? __pfx_kthread+0x10/0x10 [ 2124.322875][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2124.328121][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2124.333386][ C0] ? __pfx_kthread+0x10/0x10 [ 2124.338032][ C0] ret_from_fork+0x3fc/0x770 [ 2124.342662][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2124.347823][ C0] ? __switch_to_asm+0x39/0x70 [ 2124.352635][ C0] ? __switch_to_asm+0x33/0x70 [ 2124.357437][ C0] ? __pfx_kthread+0x10/0x10 [ 2124.362065][ C0] ret_from_fork_asm+0x1a/0x30 [ 2124.366883][ C0]