last executing test programs: 3m19.380438386s ago: executing program 1 (id=170): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x53e}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 3m16.600241469s ago: executing program 1 (id=180): syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x5, 0xa}, {0xffff, 0x9}, {0xd, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4044800) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f0000000800)=0x16c, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e21, @local}}, 0x0, 0x20000000005, 0x21}, 0xd8) bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x2400c729, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r1, 0x0, r2, 0x0, 0xfffd, 0x0) 3m15.691657053s ago: executing program 1 (id=184): r0 = socket$vsock_stream(0x28, 0x1, 0x0) io_setup(0x402, &(0x7f0000000200)=0x0) close(0x3) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000240)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x80, r0, 0x0, 0x0, 0x0, 0x0, 0x3}]) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x155e, &(0x7f0000000740)={0x0, 0x1c29, 0x40, 0x1, 0x29, 0x0, r3}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000004c0)={0x1, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, &(0x7f0000000540), &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_io_uring_submit(r4, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd, 0x0, 0x0, 0x0, {}, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r7 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000002140)='net/raw6\x00') r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={0x0, r10}, 0x18) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'ip_vti0\x00', 'macsec0\x00', {0xff}}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x3, 0x2}}, @common=@icmp6={{0x28}, {0xd, "ea9c", 0x1}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff, 0xff000000, 0x0, 0xff], 'ipvlan1\x00', 'erspan0\x00', {}, {0xff}, 0x2b, 0x5, 0x6}, 0x0, 0xd0, 0x100, 0x0, {}, [@common=@inet=@set2={{0x28}, {{0x2, 0x0, 0x6}}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) socket(0x10, 0x3, 0x4) 3m13.550353152s ago: executing program 1 (id=186): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x35, r0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="05000806", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r2}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4844}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, 0x0) r5 = getpgid(0x0) prlimit64(r5, 0xe, &(0x7f00000002c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000e40)=@mangle={'mangle\x00', 0x64, 0x6, 0x500, 0x0, 0x270, 0xd0, 0x340, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@ipv6={@private1, @loopback, [], [], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x270}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x1, 0x3, 0x44}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'syzkaller1\x00', 'veth0_to_batadv\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x560) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="010100ff", @ANYRES16=r4, @ANYBLOB="290027bd7000ffdbdf250f00000008000300", @ANYRES32=r10, @ANYBLOB="05002e0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3m12.341125023s ago: executing program 1 (id=191): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x53e}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 3m9.11144938s ago: executing program 1 (id=205): io_uring_setup(0x4c22, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x359}) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$ndb(&(0x7f0000000640), 0x0, 0xa001) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x33333333, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2m53.510062071s ago: executing program 32 (id=205): io_uring_setup(0x4c22, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x359}) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$ndb(&(0x7f0000000640), 0x0, 0xa001) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x33333333, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2m46.718572919s ago: executing program 4 (id=257): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000100003040000000000000000", @ANYRES32=0x0, @ANYBLOB="e5fda98800000000180012800800010076"], 0x40}}, 0x0) r0 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2m45.246433623s ago: executing program 4 (id=262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dddbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x220008e8}, 0x800) 2m43.291197663s ago: executing program 4 (id=268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r1, 0x1, 0x70bd31, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x20000000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002000128008000100687372001400028008000100", @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r5], 0x40}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000000)={0x1, 0x4b421bee}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)={0xec, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0xa0, 0x8, 0x0, 0x1, [{0x9c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ALLOWEDIPS={0x74, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x4}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0xec}, 0x1, 0x0, 0x0, 0x4004840}, 0x40804) 2m41.900854031s ago: executing program 4 (id=273): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) (async) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$search(0xa, r0, &(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, r0) (async) request_key(0x0, 0x0, 0x0, r1) (async) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x22) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) (async, rerun: 32) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') (rerun: 32) utime(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)={0x4, 0x7fffffff}) 2m38.812004439s ago: executing program 4 (id=281): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) syz_open_dev$dri(&(0x7f0000000740), 0x7, 0x58d083) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0x0, 0x0}, 0x10) r7 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) io_uring_enter(r4, 0x46f3, 0x0, 0x0, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x4) 2m37.647968689s ago: executing program 4 (id=282): io_uring_setup(0x4c22, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x359}) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$ndb(&(0x7f0000000640), 0x0, 0xa001) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x200081, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "9c304bad897e0216795983be31b98b78a3cddf"}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='qgroup_meta_free_all_pertrans\x00', 0xffffffffffffffff, 0x0, 0x13b59609}, 0x18) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x845}, 0x20000000) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close(r5) 2m22.435103521s ago: executing program 33 (id=282): io_uring_setup(0x4c22, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, 0x359}) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = syz_open_dev$ndb(&(0x7f0000000640), 0x0, 0xa001) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000100)={'\x00', 0x0, 0x200081, 0x5}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "9c304bad897e0216795983be31b98b78a3cddf"}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000000c0)='qgroup_meta_free_all_pertrans\x00', 0xffffffffffffffff, 0x0, 0x13b59609}, 0x18) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x845}, 0x20000000) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) close(r5) 11.722643022s ago: executing program 6 (id=631): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000811}, 0x0) close_range(r0, r1, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000040)={0x1, 0x380000}, 0x8) shutdown(r2, 0x1) 11.589219558s ago: executing program 2 (id=632): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x1008}, 0x12) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) 10.817931883s ago: executing program 6 (id=633): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYRES8=r1], 0x48) r2 = signalfd4(r0, &(0x7f0000000200)={[0xb0]}, 0x8, 0x0) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="d8000000180081084e81f782db44b904021d087c06007c06e8fe55a1bc0015400600142603600a12080006", 0x2b}, {&(0x7f0000000180)="f1da381f0032060000000000000000", 0xf}, {&(0x7f0000000480)="bf0629aeda1f1d917bf7e04115037640f4761821354147ef6ab8adfc46b4488b780c740ac52183c041352e29947e76157e7172e65821c62c042ed31d54bf52e95f6048d7bd13fe66dace85058fc4cdd517f225caa905464885b2ff74260e2d1ab0f87c56537447aadf7c04f8d416172fc4e2e7b333bec811", 0x78}, {&(0x7f0000000500)="8b12e49b3a185368b4cca97c6b6c880899b991a3835b4ce8b228772fb856df7385276815e3083ddf8e5b74db8548b493be7c1b900b5ac47a44416999f870ae376a09a9e918f4129356a7c174a3374dcc7d6511ce39063d8b19394ef62ac4fcd34be3bc523895048eff263f226f131ad2908c18cb7317a8781c0f40d2b3b76ab907eb708a2ce5a25a437fb6fa8d3e", 0x8e}, {&(0x7f0000000340)="c5b8b48fe9f9a4f62487f1ccc0c12dfa97cdec4a6a91d95926ef98ec075fee79c5770853b6fc0fdfc5c75b81d084248a36b91cd502d4860f7b0ac5db552264d5f532fc85add09c05f28a0c20556eedd7d1001d98f3fcd5a9d8d4284072cbcd2f3d267cbe7a8d49c3c1acee02b8d9dfb2ce3c5121f8a6451b1a78748cb552d91ee7bf0cd73125aa7e9a52ad42ec1f5c3b06a76fa89d90687ad0d74d6455eacb083708ad553bfcfd3318f67c9e1c0041bbe9cac321650b34a4991c9d1fbe976121", 0xc0}], 0x5}, 0x8000) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r3, 0x84, 0x84, &(0x7f00000020c0)=""/4055, &(0x7f0000001080)=0xfd7) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) ioctl$SIOCAX25OPTRT(r4, 0x89e7, &(0x7f0000000040)={@default, @null, 0x2, 0x43}) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x5, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f7d28344b90402", 0x11}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x5, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x7}, 0x4) setsockopt$sock_int(r6, 0x1, 0x2c, &(0x7f0000000600)=0x5bb, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0x33fe0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0xb) socket$inet6_udp(0xa, 0x2, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) pidfd_send_signal(r0, 0x31, &(0x7f0000000400)={0x19, 0x2, 0x8}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="170000001a1401000000000000000000080012051f0000008c34a29a9b0cec8386849ed50000", @ANYRES64=r5, @ANYBLOB="914fec7ec31acd6ce0b706de1a8a5f5f438baff507f95850029abaab6866737c680b525c51b2f903d1d657fc41002b7cb2fe8b1fd4d22ec917a1927a347378bf3f1ff4fb686f013e5f312d07309693101e7433e9ed606cc74eb797c4"], 0x20}, 0x1, 0x0, 0x0, 0x4004015}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='mpol=bind:0-0B']) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xb) ioctl$KVM_CAP_DISABLE_QUIRKS2(r2, 0x4068aea3, &(0x7f0000000780)={0xd5, 0x0, 0x75}) 10.654487438s ago: executing program 0 (id=634): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r1, 0x3) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000000020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000850000005000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xffffffffffffff93, 0x0, 0x0, 0x3, 0x0, 0x960}, 0x13) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r0, 0x3) r3 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r3, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r4, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) listen(r3, 0x3) 10.423475058s ago: executing program 2 (id=637): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) pipe(&(0x7f00000000c0)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) ftruncate(r2, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) clock_gettime(0xb00, &(0x7f0000000180)) 9.811116729s ago: executing program 0 (id=638): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) (async) ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0x4004510d, 0xffffffffffffffff) (async) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x1, 0x6, "00004d2f189c"}, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="20010e"], 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x2402) ioctl$I2C_RDWR(r6, 0x707, &(0x7f0000000440)={&(0x7f0000000140)=[{0x4, 0x3010, 0x0, 0x0}, {0x4, 0x4b00, 0x0, 0x0}, {0x800, 0x4800, 0x0, 0x0}], 0x3}) 9.698513912s ago: executing program 6 (id=639): r0 = socket$kcm(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340), 0x0) io_uring_enter(r2, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91524fc60", 0x14}], 0x1}, 0x0) 9.578735494s ago: executing program 2 (id=640): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) syz_open_dev$dri(&(0x7f0000000740), 0x7, 0x58d083) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0x0, 0x0}, 0x10) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r8, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) io_uring_enter(r5, 0x46f3, 0x0, 0x0, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x4) 7.027630673s ago: executing program 6 (id=641): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_setup(0x3126, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x4, 0x0, 0x0, r1}, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x9, 0x2) socket$kcm(0x11, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) accept$alg(r2, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x3, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r3, 0x47bc, 0x0, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) 6.798620145s ago: executing program 0 (id=642): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000009080045000044b3000000002192780000000090780a0101024a0000000000000000000000ac1e0001ac141401071300e000000200000000ffffffffac1414fbffffffffff01002fb9360ca6eb641f786d3673c3b20700ec1949902baea0b72b4fbbda90b1c4eeb70166bd30a19e45db6fb4c4c35e4cedae109bd83387c30063f9550e5b7c96fbfa7e8b195d4dc373d5f6983ac7216456564e213795b40fe9d886231d16bbca5fb0f741a400a2934048fe05a20604f53e145b41571610226e70a4620d13f333ae2d356891079053d7473077a404c7078186f0fd99a310"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) 6.627062877s ago: executing program 5 (id=644): sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x48241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r4, &(0x7f0000005180)=[{{&(0x7f00000000c0)={0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000140)="bb", 0x1}], 0x1}}], 0x1, 0x4000080) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000100)={0xc}) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000240)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r5, 0x3b84, &(0x7f0000000340)={0x20, r8, 0x0, 0x0, 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3800000010003704feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="8b040400000000001800128008000100736974000c000280080003"], 0x38}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 5.4707388s ago: executing program 3 (id=645): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x13, r0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYRESHEX=r1], 0x48) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f02b, 0x1}) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x640000, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000040)={0x2, 0x1}, 0x2) 5.441951529s ago: executing program 5 (id=646): r0 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xe, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x1d, 0x12, "d285b6853bc4dc54c6910c1d66f8841a"}, @md5sig={0x1d, 0x12, "adf059fd789278e2fb03dc15d356998a"}]}}}}}}}, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000014}, 0x80c5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x0, 0xef, &(0x7f0000000580)=""/239, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000003c0)={r4, @in6={{0xa, 0x4e24, 0xc12, @private2, 0x7}}, 0xb, 0x81}, &(0x7f0000000300)=0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) setsockopt$sock_int(r2, 0x1, 0x2e, &(0x7f0000000580)=0xe77, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000100)={0xa, 0xfffd, 0x8000000, @loopback, 0x3}, 0x1c) recvmmsg(r2, &(0x7f0000002000)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x10000, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)=""/105, 0x69}], 0x1}, 0x2160) 5.308139574s ago: executing program 5 (id=647): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x26) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711217000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) getsockopt$sock_buf(r1, 0x1, 0x3b, 0x0, &(0x7f0000000300)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x480, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={'batadv_slave_1\x00', {0x2, 0x4e21, @empty}}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES8=0x0, @ANYRES8=0x0, @ANYBLOB="3a22544660dc6bdfdbfbdbe62800a1cf3974bb8c4fcd87052d647a", @ANYRESDEC=r1, @ANYRES16=r2, @ANYRESHEX=r3], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$tcp_mem(r5, &(0x7f00000000c0)={0x674, 0x20, 0x44, 0x20, 0x4c0}, 0x48) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000a0e500", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB="46c5bfe6b19dd40390ceef068d9eff06c825b3c63b082e1ed96942726846e3d0a4625066bc369f020c105a9291afa904db483a242a95b5ef377548", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3f, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1, 0x0, 0x1008}, 0x12) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009e173710ef171e7206de0102031d0902120001000000000904"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r4}, 0x18) 5.210708221s ago: executing program 3 (id=648): r0 = syz_io_uring_setup(0x5522, &(0x7f0000000480)={0x0, 0xdac0, 0x10100, 0x1ffffffd, 0x243}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x41, 0x0, @fd=r0, 0x0, 0x0, 0x10, 0xa}) r3 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000040)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x33be, 0xb85, 0x3, 0x0, 0x0) 4.935367131s ago: executing program 2 (id=649): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x7, 0x42f5, 0x0, 0x0}, {0x794, 0xd201, 0x0, 0x0}], 0x2}) 4.925944976s ago: executing program 3 (id=650): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newtfilter={0x43c, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {}, {0x9, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x40c, 0x2, [@TCA_CGROUP_POLICE={0x408, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xab, 0x7, 0x0, 0x6, 0x100, 0x7a, 0x8, 0xff, 0x0, 0x0, 0x47, 0x10000, 0x5, 0x2, 0xec, 0x5, 0x88b, 0x3, 0x8, 0xfffffff8, 0x7, 0xcefb, 0x1, 0xae42, 0x94, 0x9, 0x4dd8, 0xffffffff, 0x8, 0x20ce, 0x7, 0x9, 0x4, 0x3, 0x36222594, 0x6, 0x3, 0x9, 0x80, 0x7, 0x7ff, 0x9, 0x8, 0x9, 0x9c18, 0x5, 0x4, 0xffffffcf, 0x20000000, 0x0, 0x5, 0x7fffffff, 0x3, 0x1, 0x80, 0xffffffff, 0x5, 0x4, 0x5, 0x80, 0x2, 0xfff, 0x9, 0x100, 0x2, 0x1, 0x4ea4, 0x7, 0x8, 0x2, 0x5, 0x6, 0x4, 0x7, 0x9, 0x0, 0x1, 0x897, 0x3, 0xf555, 0x81, 0x3, 0xf, 0xfffffff9, 0xffffff7f, 0x3, 0x5e8, 0x8, 0x7e, 0xa1b4, 0x0, 0x3, 0x10000, 0x5, 0x8000, 0x1ff, 0x7, 0xa, 0x6, 0x6, 0x421, 0x5, 0x5, 0xff, 0x9, 0x0, 0x5, 0x9b8e, 0x0, 0xaf8c, 0x1e, 0x1, 0x9, 0x8b9, 0x7, 0x7, 0x2, 0x8, 0x7, 0xba8e, 0x5, 0x101, 0x6c6, 0x5, 0x9, 0x9, 0x7fffffff, 0x1a8e, 0x8, 0x3, 0x6, 0xa, 0x4, 0x8, 0xfff, 0xf, 0x1000, 0x2, 0x6, 0x101, 0x1, 0x7, 0x80, 0xe00, 0x80000001, 0x80000000, 0xf, 0x6, 0x2, 0xfff, 0x0, 0x7, 0xfffffe00, 0x8, 0x9ab2, 0x8, 0xfffffff8, 0x8000, 0x1e, 0x4, 0x6, 0xfffffffa, 0x8, 0xe, 0x800, 0x0, 0x8000, 0x3, 0x400, 0xfffff800, 0x1, 0x9, 0x10000, 0x101, 0xf, 0x8, 0x7fffffff, 0x7, 0x2, 0x4, 0x0, 0x2, 0x7, 0xfa, 0x2, 0x7, 0x9, 0x2f, 0x7, 0x5, 0x1, 0x590, 0x5, 0x10, 0x1, 0x4, 0x2, 0x3ff, 0x55, 0x5, 0xf, 0xa, 0x8, 0x6, 0x7fff, 0x0, 0x7, 0xffffffff, 0xfff, 0xfffffff7, 0x0, 0xb0, 0x81, 0x5152, 0x7fffffff, 0x7fffffff, 0x6, 0x9, 0x2, 0xfffffffd, 0x2, 0x7ff, 0x8, 0xba, 0x5, 0x1, 0x8000, 0xecf, 0x2, 0x4000000, 0x400, 0xc9db, 0x0, 0x3, 0x8ed, 0x34, 0x1, 0x81, 0x8, 0x7ff, 0x21a, 0x401, 0x0, 0xfffe000, 0x1, 0x9, 0xfff, 0x1, 0x1, 0x3, 0x10000, 0x800, 0x4, 0x7ffffffe, 0x7]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x810}, 0x40040c4) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) (fail_nth: 5) 4.258969946s ago: executing program 3 (id=651): r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000000)='./file0\x00', r1, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000900, r1, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r2 = getpid() connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r6, 0x0, 0xd, &(0x7f0000000080)=0x80000000, 0x4) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000002c0)='/', 0x1}], 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = accept4(r5, 0x0, 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0xff, @dev, @local, {[], @ndisc_rs}}}}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f00000001c0)={0x0, &(0x7f0000000040)}, 0x10) 4.230368867s ago: executing program 6 (id=652): socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)=ANY=[@ANYBLOB="380000003e000100fcff0700040000000100000004000000140001801000040000000f8012ccbd379ce6cd690c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r6, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r7 = syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x4}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 4.03729435s ago: executing program 0 (id=653): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_io_uring_setup(0x3126, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x4, 0x0, 0x0, r1}, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x1, 0x0) syz_open_dev$vim2m(&(0x7f0000000180), 0x9, 0x2) socket$kcm(0x11, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) accept$alg(r2, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x20000800}, 0x8d0) socket$inet(0x2, 0x4000000000000001, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x3, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r4, 0x47bc, 0x4000, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) 3.006592567s ago: executing program 3 (id=654): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) unshare(0x22020600) r0 = socket$can_j1939(0x1d, 0x2, 0x7) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000000)=0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x53e}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 2.922671104s ago: executing program 3 (id=655): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_connect$cdc_ecm(0x2, 0x8e, &(0x7f0000000380)={{0x12, 0x1, 0x6f43aff3ed649eb8, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x1, 0x1, 0xf0, 0x20, 0xb, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x80, {{0x9, 0x24, 0x6, 0x0, 0x0, "12821d06"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x10000, 0x3, 0xa, 0x9}, [@acm={0x4, 0x24, 0x2, 0x8}, @network_terminal={0x7, 0x24, 0xa, 0x9, 0x9, 0x5, 0x5}, @country_functional={0x10, 0x24, 0x7, 0x9, 0x0, [0x9, 0x6, 0x9, 0x2, 0x9]}, @ncm={0x6, 0x24, 0x1a, 0x3, 0x24}, @network_terminal={0x7, 0x24, 0xa, 0x72, 0xe, 0x5, 0x2}, @mbim={0xc, 0x24, 0x1b, 0x4, 0x2, 0x10, 0xff, 0x1, 0x9}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x53, 0x6, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0x0, 0x14}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x9, 0xc0, 0xb}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x201, 0x8, 0xff, 0x6, 0x8, 0x4}, 0x78, &(0x7f0000000480)={0x5, 0xf, 0x78, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xb7, "8b8aff3f2978068c2b2508740e52a42d"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x66, 0x2, 0x7f}, @generic={0x55, 0x10, 0x4, "a4c9cd036f94a01e1bf34f4c61e4d5f62e2ed5d111b918fd5dc417fec1e075a374696e24044286a620c79ebb1720ec4695259f0f8cbc877131eba9594e9bf7c0e957a4a660f039d0dec0caf244795c4c3768"}]}, 0x1, [{0x23, &(0x7f0000000500)=ANY=[@ANYBLOB="23032b6fe82aa16aed0f7f105bd490cf8c050037d3df74a5de8692d22451aaf0147286"]}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$nl_route(r2, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000140)=@newneigh={0x34, 0x1c, 0x4, 0x70bd25, 0x25dfdbfe, {0x1c, 0x0, 0x0, 0x0, 0x19, 0x21, 0x9}, [@NDA_VLAN={0x6}, @NDA_NH_ID={0x8, 0xd, 0x6}, @NDA_SRC_VNI={0x8, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="08150000000511040000000000000000010000055402010000000000000000080611000000000000f3a9cebc342a903bfbab79968fe9fa43a6919561b77def462207940fc09d5063"], 0x1508}}, 0x0) mprotect(&(0x7f0000b0c000/0x4000)=nil, 0x4000, 0x200000b) munlockall() madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) migrate_pages(0x0, 0x3, &(0x7f0000000300)=0x3, &(0x7f0000000040)=0x13e) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001400030500008000ffdbdf25020751ff", @ANYRES32, @ANYBLOB="080002007f00000114000600ff030000ffffffff030000000000000008000400e00074"], 0x50}, 0x1, 0x0, 0x0, 0xc090}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000000)={0x2, 0x3e7f, 0x1, 0x84000, 0xffffffffffffffff}) write(r4, &(0x7f0000000200)="89c61ed67d21bfd781186011f14a60c65a3915c563a3dcc48c895b96d460fe84cb82d98d46d96594e18e5f167b2c52a84cd75374568d5ee54808d673d7d9a63d1b26a0b8b2a25b99c06a269478ae6b7d0081daf9446b2743d17fefb78c29f3ce84a3a455d1e4ed36b3900408b47c676f0f8ad238a28c326eeda3c46ec44fa99a192d6d1988db310f8595e2255c3f76a58c20764b0ccd46", 0x97) munlockall() r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r5, 0x80015b1a, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x98, &(0x7f0000000580)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x86, 0x2, 0x1, 0x4, 0x0, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x323, 0x5, 0x106, 0x10}, {0x6, 0x24, 0x1a, 0x9, 0x10}, [@mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x1, 0x579}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x3, 0x4, 0x60}, @obex={0x5, 0x24, 0x15, 0x730c}, @obex={0x5, 0x24, 0x15, 0x3}, @mbim={0xc, 0x24, 0x1b, 0x87b, 0x5, 0x3, 0x10, 0xd, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x4, 0x5b}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x8, 0xb5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x0, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0xe, 0x5, 0xc}}}}}}}]}}, &(0x7f0000000840)={0xa, &(0x7f0000000640)={0xa, 0x6, 0x310, 0x5, 0x1, 0x3, 0x3a39ab88cdd15df6, 0xf4}, 0x1a, &(0x7f0000000680)={0x5, 0xf, 0x1a, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x2f, 0xff, 0xfffa, 0xff}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xd, 0xf, 0x2698}]}, 0x4, [{0xcc, &(0x7f0000000940)=@string={0xcc, 0x3, "c5b1e1bf5473fea86c68f535714b7a63c6778862699ca6457732176c596057c9404d61cdce3867548c560dbcdf34c3bde4139e7a72cc7f484a726229756ec72d47e89794e1e026a9f632e09c9f0589d61e7e322df674103755f096b63da9480261870e94a0871a5358c75da842f15b7defbc87bd8e348ee29fb28db769b8a682048fa41de10cc289f73eeb99d85ff55b2f91f7df7350d55e98bfdc685f996ab3cb84f2b07fd90dc0a8c971be0edd00c93f0bb580bfde1a463adeab6a9eb03f2e4428a2b3e3571359f4b5"}}, {0xbc, &(0x7f00000006c0)=@string={0xbc, 0x3, "a8e037affce3f170bd403ab73003c2873659172bed20903b50e0874b646f0c442537c6018d51319711c307495b3dbcdbaa3c14f326360ae8e30d8d61e540e823e925743a7f9917e26c76a9efce465083e9fc80ee41c11980e8952ae365ce60ecd69f8caaf9a83b56058d383fd77b006d673bf7fe03f9bc6d233f44e11e47233aff44a3fc095e28f31a4938cb4c723afffdefec47b0b8489bf6eedd7500ded813c452753d499e30fd72a03431eef79667491626a8ad1c10df452d"}}, {0x81, &(0x7f0000000a40)=@string={0x81, 0x3, "5f7f8ddbe913139f599b1bf8e7303956d9cd2d6c4d9a10eadbd2b1d49f3879faad84ff0fb5c79f6349a97be61e539a7b71e8c0330da371e262bf05b1a0ed8353f061bc70cbf36d4eb7903b4184fe6cbcea1d404c7ef2ba668178d3ff554b63821dfecfd690fdfa2f01dec1aeac5b6f4450cb760c4f0dc7119416757fc67033"}}, {0xa0, &(0x7f0000000b00)=@string={0xa0, 0x3, "3182075d6f5f063ab8a662893da272d05c6a7bb1799692d48860aa8c952714b0859f9d24eeefb5e41cbd2c36f3a37a7e4b15e328d5232a15dfa78aa72c51b7f9035a168d1c7ca1f3f6ebc76d69ffb02562517d5dd060823e6e3d98ed9dc674774fb04c5e8e1329064acf6135a25411b3420c82068589c8aef11123ba534b5db5a01b7a9c592ab78fd3b123b09fa7682570cbf33a494fcefc958736c32cf8"}}]}) 2.417928905s ago: executing program 0 (id=656): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc, 0xa3, 0x8f, 0x40, 0x13d8, 0x11, 0xd062, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xa6, 0x1, 0x56}}]}}]}}, 0x0) (async) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x8000, 0x0) 2.076779083s ago: executing program 5 (id=657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/disk', 0x21a02, 0x13a) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) socket$kcm(0x10, 0x400000002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214050, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x9, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x48}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='ext4_es_remove_extent\x00', r4, 0x0, 0xeaf}, 0x18) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) sendfile(r1, r3, 0x0, 0x101) fdatasync(r2) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.91849226s ago: executing program 2 (id=658): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000"], 0xa0}}, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x87734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.663173534s ago: executing program 6 (id=659): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) syz_open_dev$dri(&(0x7f0000000740), 0x7, 0x58d083) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0x0, 0x0}, 0x10) r8 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r8, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x0, 0x0, 0x0, 0x80000000}) io_uring_enter(r5, 0x46f3, 0x0, 0x0, 0x0, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000080)=0x4) 898.738447ms ago: executing program 5 (id=660): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x600, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000340)={0x2}) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x2020) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000040)={0x8}) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x7}}, [0x4, 0x4, 0x2, 0x41fe, 0xffffffffffffff6f, 0x9, 0x4, 0x80000001, 0x5, 0x4, 0x8c6, 0x3, 0x6, 0x4, 0x4]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@assoc_value={r3, 0x2}, &(0x7f0000000240)=0x8) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 302.802871ms ago: executing program 5 (id=661): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x5, 0x5, 0x3000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r3, 0x0) mremap(&(0x7f000000e000/0x7000)=nil, 0x7000, 0x2021, 0x3, &(0x7f0000ffb000/0x2000)=nil) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000340)=[@text64={0x40, 0x0}], 0x1, 0x54, &(0x7f0000000000)=[@efer={0x2, 0x800}], 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 289.17607ms ago: executing program 2 (id=662): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r1 = syz_io_uring_setup(0x10d2, &(0x7f0000000340)={0x0, 0x6bf6, 0x100, 0x5, 0x12}, &(0x7f00000000c0)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r1, 0x47bc, 0x0, 0x8000000, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, 0x0) 0s ago: executing program 0 (id=663): socket(0x80000000000000a, 0x2, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, 0x0, &(0x7f00000000c0)) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000009080045000044b3000000002192780000000090780a0101024a0000000000000000000000ac1e0001ac141401071300e000000200000000ffffffffac1414fbffffffffff01002fb9360ca6eb641f786d3673c3b20700ec1949902baea0b72b4fbbda90b1c4eeb70166bd30a19e45db6fb4c4c35e4cedae109bd83387c30063f9550e5b7c96fbfa7e8b195d4dc373d5f6983ac7216456564e213795b40fe9d886231d16bbca5fb0f741a400a2934048fe05a20604f53e145b41571610226e70a4620d13f333ae2d356891079053d7473077a404c7078186f0fd99a310"], 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c000000100005ff04000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r7, @ANYBLOB], 0x3c}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x0, @empty}}, 0xff, 0x3}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000840)={r4, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) kernel console output (not intermixed with test programs): 304] team0: Port device team_slave_0 added [ 206.397538][ T7304] team0: Port device team_slave_1 added [ 206.826970][ T7304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.849032][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.883538][ T3508] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.902316][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 206.914873][ T7304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.134210][ T7304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.199391][ T7304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.334618][ T7304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.360586][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.367058][ T7304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.663261][ T7388] netlink: 'syz.3.343': attribute type 10 has an invalid length. [ 208.117394][ T979] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 208.138516][ T5968] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 208.157275][ T5157] Bluetooth: hci6: command 0x040f tx timeout [ 208.700641][ T7304] hsr_slave_0: entered promiscuous mode [ 208.730072][ T7304] hsr_slave_1: entered promiscuous mode [ 208.952322][ T7235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 208.974590][ T7304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.042172][ T7304] Cannot create hsr debugfs directory [ 209.419147][ T979] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 209.430274][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 209.441355][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 209.810593][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 209.810615][ T30] audit: type=1326 audit(1754174062.302:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7405 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 209.995717][ T7412] sctp: [Deprecated]: syz.3.347 (pid 7412) Use of int in maxseg socket option. [ 209.995717][ T7412] Use struct sctp_assoc_value instead [ 210.057698][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 210.140186][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 210.274716][ T5854] Bluetooth: hci6: command 0x040f tx timeout [ 210.297926][ T30] audit: type=1326 audit(1754174062.302:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7405 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 210.485592][ T30] audit: type=1326 audit(1754174062.302:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7405 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 210.652121][ T30] audit: type=1326 audit(1754174062.302:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7405 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 210.688253][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 210.765234][ T7304] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 210.781497][ T30] audit: type=1326 audit(1754174062.302:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7405 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 210.838475][ T7304] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 210.871125][ T7304] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 210.900485][ T30] audit: type=1326 audit(1754174062.312:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7405 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 210.959905][ T7304] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 210.987958][ T30] audit: type=1326 audit(1754174062.312:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7405 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 211.009370][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.087373][ T927] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 211.125627][ T30] audit: type=1326 audit(1754174062.312:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7405 comm="syz.3.347" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 211.289760][ T927] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.368319][ T927] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 211.422230][ T927] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 211.447462][ T927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.556064][ T927] usb 6-1: config 0 descriptor?? [ 211.566085][ T927] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 211.587265][ T927] dvb-usb: bulk message failed: -22 (3/0) [ 211.611767][ T927] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 211.664111][ T7304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.664466][ T927] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 211.724320][ T927] usb 6-1: media controller created [ 211.744921][ T927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 211.772222][ T7304] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.801229][ T7419] dvb-usb: bulk message failed: -22 (2/0) [ 211.810548][ T7419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.821503][ T7419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.847646][ T927] dvb-usb: bulk message failed: -22 (6/0) [ 211.853517][ T927] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 211.873852][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.881108][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.914642][ T927] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12 [ 211.942305][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.949557][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.975297][ T927] dvb-usb: schedule remote query interval to 150 msecs. [ 212.007381][ T927] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 212.168715][ T927] dvb-usb: bulk message failed: -22 (1/0) [ 212.187242][ T927] dvb-usb: error while querying for an remote control event. [ 212.288594][ T5854] Bluetooth: hci6: command 0x040f tx timeout [ 212.354119][ T927] dvb-usb: bulk message failed: -22 (1/0) [ 212.364922][ T927] dvb-usb: error while querying for an remote control event. [ 212.537250][ T927] dvb-usb: bulk message failed: -22 (1/0) [ 212.547675][ T927] dvb-usb: error while querying for an remote control event. [ 212.616544][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.637853][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 212.747366][ T927] dvb-usb: bulk message failed: -22 (1/0) [ 212.775093][ T927] dvb-usb: error while querying for an remote control event. [ 212.967761][ T7446] netlink: 'syz.0.354': attribute type 10 has an invalid length. [ 213.260264][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 213.595763][ T927] dvb-usb: bulk message failed: -22 (1/0) [ 213.605471][ T927] dvb-usb: error while querying for an remote control event. [ 213.767490][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 213.773301][ T24] dvb-usb: error while querying for an remote control event. [ 213.898516][ T5968] usb 6-1: USB disconnect, device number 4 [ 213.945304][ T7304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.999455][ T5952] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.048643][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.069726][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.098772][ T5968] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 214.566168][ T5968] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.566313][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.577515][ T5952] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.691751][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 215.631643][ T30] audit: type=1326 audit(1754174068.122:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581ef8eb69 code=0x7ffc0000 [ 215.781444][ T7478] sctp: [Deprecated]: syz.2.360 (pid 7478) Use of int in maxseg socket option. [ 215.781444][ T7478] Use struct sctp_assoc_value instead [ 215.874213][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 215.950983][ T30] audit: type=1326 audit(1754174068.152:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f581ef8eb69 code=0x7ffc0000 [ 216.340481][ T7304] veth0_vlan: entered promiscuous mode [ 216.367693][ T30] audit: type=1326 audit(1754174068.152:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581ef8eb69 code=0x7ffc0000 [ 216.448148][ T979] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 216.451497][ T7235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 216.459742][ T7304] veth1_vlan: entered promiscuous mode [ 216.500750][ T30] audit: type=1326 audit(1754174068.152:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f581ef8eb69 code=0x7ffc0000 [ 216.727857][ T30] audit: type=1326 audit(1754174068.152:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f581ef8eb69 code=0x7ffc0000 [ 216.792468][ T30] audit: type=1326 audit(1754174068.152:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7474 comm="syz.2.360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f581ef8eb69 code=0x7ffc0000 [ 216.906996][ T7304] veth0_macvtap: entered promiscuous mode [ 216.960938][ T7304] veth1_macvtap: entered promiscuous mode [ 217.210111][ T7492] capability: warning: `syz.2.363' uses deprecated v2 capabilities in a way that may be insecure [ 217.817150][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 217.841342][ T7304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.968751][ T7304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.037615][ T7304] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.052201][ T7304] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.061283][ T7304] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.071109][ T7304] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.296160][ T7301] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.318035][ T7301] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.361249][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.378584][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 218.400633][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.926192][ T7500] netlink: 'syz.2.365': attribute type 10 has an invalid length. [ 219.022473][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.171620][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.687021][ T979] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.710110][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 219.851753][ T7511] overlayfs: failed to resolve './file0': -2 [ 219.899085][ T7513] netlink: 668 bytes leftover after parsing attributes in process `syz.6.319'. [ 219.909709][ T7513] netlink: 668 bytes leftover after parsing attributes in process `syz.6.319'. [ 220.057347][ T30] audit: type=1804 audit(1754174072.522:477): pid=7514 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.319" name="file1" dev="ramfs" ino=16831 res=1 errno=0 [ 220.287656][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 220.305698][ T7235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 221.479336][ T7523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 221.495648][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 221.504753][ T7523] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 221.512429][ T7523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.659102][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 222.207803][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 222.745578][ T7541] FAULT_INJECTION: forcing a failure. [ 222.745578][ T7541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.895145][ T7541] CPU: 1 UID: 0 PID: 7541 Comm: syz.3.375 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 222.895175][ T7541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 222.895185][ T7541] Call Trace: [ 222.895192][ T7541] [ 222.895200][ T7541] dump_stack_lvl+0x189/0x250 [ 222.895228][ T7541] ? __pfx____ratelimit+0x10/0x10 [ 222.895250][ T7541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.895270][ T7541] ? __pfx__printk+0x10/0x10 [ 222.895293][ T7541] ? __might_fault+0xb0/0x130 [ 222.895326][ T7541] should_fail_ex+0x414/0x560 [ 222.895353][ T7541] _copy_from_iter+0x1db/0x16f0 [ 222.895382][ T7541] ? rcu_is_watching+0x15/0xb0 [ 222.895411][ T7541] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 222.895433][ T7541] ? __pfx__copy_from_iter+0x10/0x10 [ 222.895460][ T7541] ? __build_skb_around+0x257/0x3e0 [ 222.895492][ T7541] ? netlink_sendmsg+0x642/0xb30 [ 222.895516][ T7541] ? skb_put+0x11b/0x210 [ 222.895557][ T7541] netlink_sendmsg+0x6b2/0xb30 [ 222.895593][ T7541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.895629][ T7541] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 222.895649][ T7541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.895677][ T7541] __sock_sendmsg+0x21c/0x270 [ 222.895704][ T7541] ____sys_sendmsg+0x505/0x830 [ 222.895741][ T7541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.895779][ T7541] ? import_iovec+0x74/0xa0 [ 222.895810][ T7541] ___sys_sendmsg+0x21f/0x2a0 [ 222.895842][ T7541] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.895912][ T7541] ? __fget_files+0x2a/0x420 [ 222.895934][ T7541] ? __fget_files+0x3a0/0x420 [ 222.895967][ T7541] __x64_sys_sendmsg+0x19b/0x260 [ 222.895998][ T7541] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.896038][ T7541] ? __pfx_ksys_write+0x10/0x10 [ 222.896055][ T7541] ? rcu_is_watching+0x15/0xb0 [ 222.896081][ T7541] ? do_syscall_64+0xbe/0x3b0 [ 222.896123][ T7541] do_syscall_64+0xfa/0x3b0 [ 222.896143][ T7541] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.896163][ T7541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.896182][ T7541] ? clear_bhb_loop+0x60/0xb0 [ 222.896206][ T7541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.896224][ T7541] RIP: 0033:0x7f6f6e18eb69 [ 222.896243][ T7541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.896259][ T7541] RSP: 002b:00007f6f6f0d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.896282][ T7541] RAX: ffffffffffffffda RBX: 00007f6f6e3b5fa0 RCX: 00007f6f6e18eb69 [ 222.896297][ T7541] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000004 [ 222.896310][ T7541] RBP: 00007f6f6f0d6090 R08: 0000000000000000 R09: 0000000000000000 [ 222.896323][ T7541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.896334][ T7541] R13: 0000000000000000 R14: 00007f6f6e3b5fa0 R15: 00007ffd61c9fba8 [ 222.896365][ T7541] [ 223.516997][ T7235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 224.130487][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 224.798755][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 224.813391][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 224.934496][ T7553] netlink: 'syz.3.378': attribute type 10 has an invalid length. [ 225.499393][ T979] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 225.519231][ T5968] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 225.568081][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 226.048407][ T5968] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 226.055912][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 226.070793][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 226.071324][ T7235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 226.769725][ T927] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 227.438014][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 227.508147][ T927] usb 1-1: device descriptor read/64, error -71 [ 227.857597][ T7576] ip6t_rpfilter: unknown options [ 227.907284][ T927] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 227.978336][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 228.068314][ T927] usb 1-1: device descriptor read/64, error -71 [ 228.167816][ T7581] netlink: 668 bytes leftover after parsing attributes in process `syz.2.386'. [ 228.177225][ T7581] netlink: 668 bytes leftover after parsing attributes in process `syz.2.386'. [ 228.271570][ T927] usb usb1-port1: attempt power cycle [ 228.387310][ T30] audit: type=1804 audit(1754174080.872:478): pid=7581 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.386" name="file1" dev="ramfs" ino=19433 res=1 errno=0 [ 228.390093][ T5157] Bluetooth: hci6: command 0x040f tx timeout [ 228.688785][ T927] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 228.784161][ T927] usb 1-1: device descriptor read/8, error -71 [ 229.077526][ T927] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 229.206652][ T927] usb 1-1: device descriptor read/8, error -71 [ 229.255625][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 229.360341][ T927] usb usb1-port1: unable to enumerate USB device [ 229.827847][ T7592] netlink: 'syz.0.389': attribute type 10 has an invalid length. [ 229.902336][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 230.527545][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 230.527951][ T7235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 230.601801][ T30] audit: type=1326 audit(1754174083.092:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7593 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 230.774630][ T7599] sctp: [Deprecated]: syz.3.388 (pid 7599) Use of int in maxseg socket option. [ 230.774630][ T7599] Use struct sctp_assoc_value instead [ 230.872461][ T30] audit: type=1326 audit(1754174083.142:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7593 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 231.067198][ T30] audit: type=1326 audit(1754174083.142:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7593 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 231.174071][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 231.249686][ T30] audit: type=1326 audit(1754174083.142:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7593 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 231.394065][ T30] audit: type=1326 audit(1754174083.142:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7593 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 231.574976][ T7606] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 231.592512][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.5.391'. [ 231.603070][ T7606] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 231.611326][ T7606] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.142592][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.143339][ T7235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.154617][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 232.289231][ T30] audit: type=1326 audit(1754174083.142:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7593 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 232.323616][ T30] audit: type=1326 audit(1754174083.142:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7593 comm="syz.3.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 233.119703][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 233.728884][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 234.562703][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.011988][ T979] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.464626][ T7634] ip6t_rpfilter: unknown options [ 235.649413][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 235.957198][ T7643] netlink: 'syz.0.400': attribute type 10 has an invalid length. [ 236.297578][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 236.319158][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 236.345880][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.568310][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.585559][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.597507][ T7235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 237.945304][ T7653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 237.991174][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.403'. [ 238.001855][ T7653] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 238.009736][ T7653] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.849516][ T7235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 238.884485][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 239.008248][ T7650] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 239.023226][ T7650] team0: Port device batadv8 added [ 239.267906][ T7650] hub 9-0:1.0: USB hub found [ 239.279296][ T7650] hub 9-0:1.0: 1 port detected [ 239.493836][ T5903] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 239.494374][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 239.647262][ T5903] usb 1-1: device descriptor read/64, error -71 [ 240.042935][ T5903] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 240.130179][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 240.197234][ T5903] usb 1-1: device descriptor read/64, error -71 [ 240.307523][ T5903] usb usb1-port1: attempt power cycle [ 240.647434][ T5903] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 240.682749][ T5903] usb 1-1: device descriptor read/8, error -71 [ 240.899275][ T7681] tipc: Started in network mode [ 240.904323][ T7681] tipc: Node identity 424948b2c59c, cluster identity 4711 [ 240.957208][ T5903] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 240.987589][ T7681] tipc: Enabled bearer , priority 0 [ 241.007826][ T7681] syzkaller0: entered promiscuous mode [ 241.015594][ T7681] syzkaller0: entered allmulticast mode [ 241.033944][ T5903] usb 1-1: device descriptor read/8, error -71 [ 241.122668][ T7681] FAULT_INJECTION: forcing a failure. [ 241.122668][ T7681] name failslab, interval 1, probability 0, space 0, times 0 [ 241.167440][ T5903] usb usb1-port1: unable to enumerate USB device [ 241.184425][ T7681] CPU: 1 UID: 0 PID: 7681 Comm: syz.2.409 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 241.184455][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 241.184467][ T7681] Call Trace: [ 241.184476][ T7681] [ 241.184485][ T7681] dump_stack_lvl+0x189/0x250 [ 241.184515][ T7681] ? __pfx____ratelimit+0x10/0x10 [ 241.184537][ T7681] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.184560][ T7681] ? __pfx__printk+0x10/0x10 [ 241.184593][ T7681] ? __pfx___might_resched+0x10/0x10 [ 241.184614][ T7681] ? fs_reclaim_acquire+0x7d/0x100 [ 241.184643][ T7681] should_fail_ex+0x414/0x560 [ 241.184672][ T7681] should_failslab+0xa8/0x100 [ 241.184696][ T7681] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 241.184716][ T7681] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 241.184738][ T7681] ? __alloc_skb+0x112/0x2d0 [ 241.184771][ T7681] __alloc_skb+0x112/0x2d0 [ 241.184804][ T7681] rtmsg_ifinfo_build_skb+0x84/0x260 [ 241.184837][ T7681] rtnetlink_event+0x1b7/0x270 [ 241.184869][ T7681] notifier_call_chain+0x1b3/0x3e0 [ 241.184902][ T7681] netif_set_mtu_ext+0x438/0x620 [ 241.184930][ T7681] ? __lock_acquire+0xab9/0xd20 [ 241.184955][ T7681] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 241.184987][ T7681] ? __mutex_trylock_common+0x153/0x260 [ 241.185024][ T7681] ? rcu_is_watching+0x15/0xb0 [ 241.185054][ T7681] netif_set_mtu+0xa4/0x150 [ 241.185091][ T7681] ? __pfx_netif_set_mtu+0x10/0x10 [ 241.185117][ T7681] ? __lock_acquire+0xab9/0xd20 [ 241.185152][ T7681] ? netdev_name_node_lookup+0xdf/0x120 [ 241.185185][ T7681] dev_set_mtu+0x126/0x260 [ 241.185219][ T7681] dev_ioctl+0x7b4/0x1150 [ 241.185250][ T7681] sock_do_ioctl+0x22c/0x300 [ 241.185278][ T7681] ? __pfx_sock_do_ioctl+0x10/0x10 [ 241.185298][ T7681] ? __lock_acquire+0xab9/0xd20 [ 241.185322][ T7681] ? __asan_memset+0x22/0x50 [ 241.185349][ T7681] ? smack_file_ioctl+0x24a/0x340 [ 241.185376][ T7681] sock_ioctl+0x576/0x790 [ 241.185401][ T7681] ? __pfx_sock_ioctl+0x10/0x10 [ 241.185423][ T7681] ? __fget_files+0x2a/0x420 [ 241.185449][ T7681] ? __fget_files+0x3a0/0x420 [ 241.185470][ T7681] ? __fget_files+0x2a/0x420 [ 241.185497][ T7681] ? bpf_lsm_file_ioctl+0x9/0x20 [ 241.185520][ T7681] ? __pfx_sock_ioctl+0x10/0x10 [ 241.185541][ T7681] __se_sys_ioctl+0xfc/0x170 [ 241.185574][ T7681] do_syscall_64+0xfa/0x3b0 [ 241.185595][ T7681] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.185617][ T7681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.185637][ T7681] ? clear_bhb_loop+0x60/0xb0 [ 241.185663][ T7681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.185682][ T7681] RIP: 0033:0x7f581ef8eb69 [ 241.185700][ T7681] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.185717][ T7681] RSP: 002b:00007f581edf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.185740][ T7681] RAX: ffffffffffffffda RBX: 00007f581f1b5fa0 RCX: 00007f581ef8eb69 [ 241.185754][ T7681] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 241.185768][ T7681] RBP: 00007f581edf7090 R08: 0000000000000000 R09: 0000000000000000 [ 241.185780][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.185791][ T7681] R13: 0000000000000000 R14: 00007f581f1b5fa0 R15: 00007fff2e01b1c8 [ 241.185825][ T7681] [ 241.508434][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 241.564274][ T7681] tipc: Resetting bearer [ 241.787472][ T7679] tipc: Resetting bearer [ 241.882259][ T7679] tipc: Disabling bearer [ 242.048897][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 242.048945][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 242.078859][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 242.810489][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.330614][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.362115][ T7704] ip6t_rpfilter: unknown options [ 243.678245][ T7709] netlink: 'syz.2.415': attribute type 10 has an invalid length. [ 244.309993][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.613841][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 244.625324][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 245.898160][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 245.984797][ T7723] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.006356][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.417'. [ 246.015985][ T7723] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 246.023776][ T7723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 247.189364][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.247810][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.491205][ T7725] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 247.592071][ T7725] team0: Port device batadv9 added [ 247.807486][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 247.818777][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.089809][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.100861][ T7235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.728434][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 249.991378][ T30] audit: type=1326 audit(1754174102.482:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7753 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd7d8eb69 code=0x7ffc0000 [ 250.157879][ T30] audit: type=1326 audit(1754174102.522:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7753 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd7d8eb69 code=0x7ffc0000 [ 250.259697][ T7757] sctp: [Deprecated]: syz.5.427 (pid 7757) Use of int in maxseg socket option. [ 250.259697][ T7757] Use struct sctp_assoc_value instead [ 250.454010][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 250.487196][ T30] audit: type=1326 audit(1754174102.552:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7753 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4cd7d8eb69 code=0x7ffc0000 [ 250.597852][ T7761] netlink: 'syz.6.428': attribute type 10 has an invalid length. [ 251.262645][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.293867][ T7235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.347448][ T30] audit: type=1326 audit(1754174102.552:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7753 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd7d8eb69 code=0x7ffc0000 [ 251.426569][ T30] audit: type=1326 audit(1754174102.552:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7753 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd7d8eb69 code=0x7ffc0000 [ 251.471232][ T7761] team0: Port device wlan1 added [ 251.592582][ T30] audit: type=1326 audit(1754174102.602:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7753 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f4cd7d8eb69 code=0x7ffc0000 [ 251.637820][ T5927] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 251.697252][ T30] audit: type=1326 audit(1754174102.602:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7753 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cd7d8eb69 code=0x7ffc0000 [ 251.800172][ T30] audit: type=1326 audit(1754174102.602:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7753 comm="syz.5.427" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4cd7d8eb69 code=0x7ffc0000 [ 251.938036][ T5927] usb 1-1: Using ep0 maxpacket: 8 [ 251.987266][ T5927] usb 1-1: unable to get BOS descriptor or descriptor too short [ 252.027680][ T5927] usb 1-1: config 5 has an invalid interface number: 184 but max is 3 [ 252.071539][ T5927] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 252.117247][ T5927] usb 1-1: config 5 has 1 interface, different from the descriptor's value: 4 [ 252.162824][ T5927] usb 1-1: config 5 has no interface number 0 [ 252.191960][ T5927] usb 1-1: config 5 interface 184 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 252.292965][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 252.304207][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 252.327899][ T5927] usb 1-1: config 5 interface 184 has no altsetting 0 [ 252.346004][ T5927] usb 1-1: New USB device found, idVendor=1b3d, idProduct=018d, bcdDevice=ee.07 [ 252.367614][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.376080][ T5927] usb 1-1: Product: syz [ 252.397232][ T5927] usb 1-1: Manufacturer: syz [ 252.412375][ T5927] usb 1-1: SerialNumber: syz [ 252.919917][ T7764] FAULT_INJECTION: forcing a failure. [ 252.919917][ T7764] name failslab, interval 1, probability 0, space 0, times 0 [ 252.988253][ T7771] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 253.006837][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 253.016362][ T7771] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 253.024204][ T7771] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.120859][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.169828][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 253.222952][ T7764] CPU: 0 UID: 0 PID: 7764 Comm: syz.0.429 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 253.222997][ T7764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 253.223010][ T7764] Call Trace: [ 253.223018][ T7764] [ 253.223027][ T7764] dump_stack_lvl+0x189/0x250 [ 253.223057][ T7764] ? __pfx____ratelimit+0x10/0x10 [ 253.223080][ T7764] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.223103][ T7764] ? __pfx__printk+0x10/0x10 [ 253.223133][ T7764] ? __pfx___might_resched+0x10/0x10 [ 253.223156][ T7764] ? fs_reclaim_acquire+0x7d/0x100 [ 253.223186][ T7764] should_fail_ex+0x414/0x560 [ 253.223214][ T7764] should_failslab+0xa8/0x100 [ 253.223237][ T7764] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 253.223257][ T7764] ? dup_task_struct+0x52/0x860 [ 253.223292][ T7764] dup_task_struct+0x52/0x860 [ 253.223316][ T7764] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.223341][ T7764] copy_process+0x544/0x3b80 [ 253.223398][ T7764] ? __pfx_copy_process+0x10/0x10 [ 253.223437][ T7764] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 253.223469][ T7764] vhost_task_create+0x1c4/0x290 [ 253.223497][ T7764] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 253.223529][ T7764] ? __pfx_vhost_task_create+0x10/0x10 [ 253.223565][ T7764] ? __pfx_vhost_task_fn+0x10/0x10 [ 253.223604][ T7764] ? kasan_save_track+0x4f/0x80 [ 253.223632][ T7764] ? kasan_save_track+0x3e/0x80 [ 253.223667][ T7764] kvm_mmu_post_init_vm+0x147/0x2b0 [ 253.223693][ T7764] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 253.223731][ T7764] ? __mutex_trylock_common+0x153/0x260 [ 253.223760][ T7764] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 253.223793][ T7764] ? rcu_is_watching+0x15/0xb0 [ 253.223813][ T7764] ? look_up_lock_class+0x74/0x170 [ 253.223837][ T7764] ? register_lock_class+0x51/0x320 [ 253.223876][ T7764] ? __lock_acquire+0xab9/0xd20 [ 253.223931][ T7764] kvm_vcpu_ioctl+0x95c/0xe90 [ 253.223972][ T7764] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 253.223995][ T7764] ? __lock_acquire+0xab9/0xd20 [ 253.224019][ T7764] ? __asan_memset+0x22/0x50 [ 253.224047][ T7764] ? smack_file_ioctl+0x302/0x340 [ 253.224071][ T7764] ? __pfx_smack_file_ioctl+0x10/0x10 [ 253.224102][ T7764] ? __fget_files+0x2a/0x420 [ 253.224123][ T7764] ? __fget_files+0x3a0/0x420 [ 253.224144][ T7764] ? __fget_files+0x2a/0x420 [ 253.224171][ T7764] ? bpf_lsm_file_ioctl+0x9/0x20 [ 253.224194][ T7764] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 253.224218][ T7764] __se_sys_ioctl+0xfc/0x170 [ 253.224250][ T7764] do_syscall_64+0xfa/0x3b0 [ 253.224271][ T7764] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.224291][ T7764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.224312][ T7764] ? clear_bhb_loop+0x60/0xb0 [ 253.224339][ T7764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.224358][ T7764] RIP: 0033:0x7fa9ebf8eb69 [ 253.224377][ T7764] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.224394][ T7764] RSP: 002b:00007fa9ecd32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.224418][ T7764] RAX: ffffffffffffffda RBX: 00007fa9ec1b5fa0 RCX: 00007fa9ebf8eb69 [ 253.224433][ T7764] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 253.224445][ T7764] RBP: 00007fa9ecd32090 R08: 0000000000000000 R09: 0000000000000000 [ 253.224458][ T7764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.224471][ T7764] R13: 0000000000000000 R14: 00007fa9ec1b5fa0 R15: 00007ffd2d3aa018 [ 253.224505][ T7764] [ 253.595076][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.165712][ T5927] ftdi_sio 1-1:5.184: FTDI USB Serial Device converter detected [ 254.343746][ T5927] ftdi_sio ttyUSB0: unknown device type: 0xee07 [ 254.397777][ T5927] usb 1-1: USB disconnect, device number 14 [ 254.405687][ T5927] ftdi_sio 1-1:5.184: device disconnected [ 254.847974][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.859143][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 254.870599][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 255.486667][ T7795] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 255.500253][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.501726][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 255.506877][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.609238][ T7795] team0: Port device batadv6 added [ 255.646931][ T7796] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 255.683523][ T7796] team0: Port device batadv1 added [ 255.862745][ T7796] hub 9-0:1.0: USB hub found [ 256.128997][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 256.162090][ T7796] hub 9-0:1.0: 1 port detected [ 256.268528][ T7795] hub 9-0:1.0: USB hub found [ 256.274566][ T7795] hub 9-0:1.0: 1 port detected [ 256.777916][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 256.791076][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 258.056852][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 258.057412][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 258.693855][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.231398][ T7847] netlink: 668 bytes leftover after parsing attributes in process `syz.6.450'. [ 259.240802][ T7847] netlink: 668 bytes leftover after parsing attributes in process `syz.6.450'. [ 259.327851][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.339735][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.526991][ T30] audit: type=1804 audit(1754174112.012:494): pid=7850 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.6.450" name="file1" dev="ramfs" ino=21630 res=1 errno=0 [ 260.154871][ T7858] FAULT_INJECTION: forcing a failure. [ 260.154871][ T7858] name failslab, interval 1, probability 0, space 0, times 0 [ 260.207507][ T7858] CPU: 0 UID: 0 PID: 7858 Comm: syz.3.454 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 260.207537][ T7858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 260.207549][ T7858] Call Trace: [ 260.207557][ T7858] [ 260.207567][ T7858] dump_stack_lvl+0x189/0x250 [ 260.207597][ T7858] ? __pfx____ratelimit+0x10/0x10 [ 260.207620][ T7858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.207645][ T7858] ? __pfx__printk+0x10/0x10 [ 260.207679][ T7858] ? __pfx___might_resched+0x10/0x10 [ 260.207708][ T7858] should_fail_ex+0x414/0x560 [ 260.207736][ T7858] should_failslab+0xa8/0x100 [ 260.207763][ T7858] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 260.207785][ T7858] ? __alloc_skb+0x112/0x2d0 [ 260.207819][ T7858] __alloc_skb+0x112/0x2d0 [ 260.207853][ T7858] netlink_sendmsg+0x5c6/0xb30 [ 260.207894][ T7858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.207942][ T7858] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 260.207962][ T7858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.207993][ T7858] __sock_sendmsg+0x21c/0x270 [ 260.208023][ T7858] ____sys_sendmsg+0x505/0x830 [ 260.208061][ T7858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.208103][ T7858] ? import_iovec+0x74/0xa0 [ 260.208137][ T7858] ___sys_sendmsg+0x21f/0x2a0 [ 260.208168][ T7858] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.208240][ T7858] ? __fget_files+0x2a/0x420 [ 260.208263][ T7858] ? __fget_files+0x3a0/0x420 [ 260.208299][ T7858] __x64_sys_sendmsg+0x19b/0x260 [ 260.208329][ T7858] ? clockevents_program_event+0x24d/0x360 [ 260.208362][ T7858] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 260.208414][ T7858] ? do_syscall_64+0xbe/0x3b0 [ 260.208442][ T7858] do_syscall_64+0xfa/0x3b0 [ 260.208467][ T7858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.208487][ T7858] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 260.208508][ T7858] ? clear_bhb_loop+0x60/0xb0 [ 260.208539][ T7858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.208560][ T7858] RIP: 0033:0x7f6f6e18eb69 [ 260.208579][ T7858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.208598][ T7858] RSP: 002b:00007f6f6f0d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.208622][ T7858] RAX: ffffffffffffffda RBX: 00007f6f6e3b5fa0 RCX: 00007f6f6e18eb69 [ 260.208637][ T7858] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000003 [ 260.208651][ T7858] RBP: 00007f6f6f0d6090 R08: 0000000000000000 R09: 0000000000000000 [ 260.208665][ T7858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.208678][ T7858] R13: 0000000000000000 R14: 00007f6f6e3b5fa0 R15: 00007ffd61c9fba8 [ 260.208712][ T7858] [ 260.475898][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.618399][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 260.779729][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 261.280169][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 261.426617][ T7875] ======================================================= [ 261.426617][ T7875] WARNING: The mand mount option has been deprecated and [ 261.426617][ T7875] and is ignored by this kernel. Remove the mand [ 261.426617][ T7875] option from the mount to silence this warning. [ 261.426617][ T7875] ======================================================= [ 261.493754][ T7875] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 261.568334][ T7875] process 'syz.5.458' launched '/dev/fd/9' with NULL argv: empty string added [ 262.009663][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.090312][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.159357][ T7878] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 262.170559][ T7878] team0: Port device batadv7 added [ 262.234489][ T7878] hub 9-0:1.0: USB hub found [ 262.239601][ T7878] hub 9-0:1.0: 1 port detected [ 262.549466][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 262.696253][ T7884] FAULT_INJECTION: forcing a failure. [ 262.696253][ T7884] name failslab, interval 1, probability 0, space 0, times 0 [ 262.771713][ T7884] CPU: 0 UID: 0 PID: 7884 Comm: syz.6.461 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 262.771733][ T7884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 262.771740][ T7884] Call Trace: [ 262.771744][ T7884] [ 262.771749][ T7884] dump_stack_lvl+0x189/0x250 [ 262.771764][ T7884] ? __pfx____ratelimit+0x10/0x10 [ 262.771775][ T7884] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.771786][ T7884] ? __pfx__printk+0x10/0x10 [ 262.771799][ T7884] ? __pfx___might_resched+0x10/0x10 [ 262.771810][ T7884] ? fs_reclaim_acquire+0x7d/0x100 [ 262.771824][ T7884] should_fail_ex+0x414/0x560 [ 262.771842][ T7884] should_failslab+0xa8/0x100 [ 262.771853][ T7884] __kmalloc_noprof+0xcb/0x4f0 [ 262.771862][ T7884] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 262.771871][ T7884] ? sock_kmalloc+0xd6/0x160 [ 262.771883][ T7884] sock_kmalloc+0xd6/0x160 [ 262.771894][ T7884] af_alg_sendmsg+0x109c/0x22e0 [ 262.771916][ T7884] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 262.771926][ T7884] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 262.771944][ T7884] ? skcipher_sendmsg+0x26/0xf0 [ 262.771954][ T7884] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 262.771964][ T7884] __sock_sendmsg+0x21c/0x270 [ 262.771978][ T7884] __sys_sendto+0x3bd/0x520 [ 262.771992][ T7884] ? __pfx___sys_sendto+0x10/0x10 [ 262.772010][ T7884] ? count_memcg_event_mm+0x21/0x260 [ 262.772030][ T7884] ? exc_page_fault+0x76/0xf0 [ 262.772041][ T7884] ? do_user_addr_fault+0xc8a/0x1390 [ 262.772057][ T7884] __x64_sys_sendto+0xde/0x100 [ 262.772072][ T7884] do_syscall_64+0xfa/0x3b0 [ 262.772081][ T7884] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.772090][ T7884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.772100][ T7884] ? clear_bhb_loop+0x60/0xb0 [ 262.772111][ T7884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.772120][ T7884] RIP: 0033:0x7fdcad3909fc [ 262.772130][ T7884] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 262.772138][ T7884] RSP: 002b:00007fdcae11aec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 262.772149][ T7884] RAX: ffffffffffffffda RBX: 00007fdcae11afc0 RCX: 00007fdcad3909fc [ 262.772156][ T7884] RDX: 0000000000000020 RSI: 00007fdcae11b010 RDI: 0000000000000004 [ 262.772162][ T7884] RBP: 0000000000000000 R08: 00007fdcae11af14 R09: 000000000000000c [ 262.772168][ T7884] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 262.772173][ T7884] R13: 00007fdcae11af68 R14: 00007fdcae11b010 R15: 0000000000000000 [ 262.772188][ T7884] [ 263.024773][ C0] vkms_vblank_simulate: vblank timer overrun [ 263.035733][ T7886] trusted_key: syz.6.461 sent an empty control message without MSG_MORE. [ 263.257754][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.312579][ T7888] netlink: 'syz.6.462': attribute type 10 has an invalid length. [ 263.411458][ T7888] bond0: (slave bond_slave_0): Releasing backup interface [ 263.807789][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 263.818822][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 264.133132][ T7894] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.151440][ T7894] netlink: 8 bytes leftover after parsing attributes in process `syz.6.464'. [ 264.161341][ T7894] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 264.169335][ T7894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.800639][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 265.698924][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 266.348308][ T7904] @: renamed from vlan0 (while UP) [ 266.367827][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 266.379866][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.007902][ T5903] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 267.016090][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.217395][ T5903] usb 7-1: Using ep0 maxpacket: 16 [ 267.227504][ T5903] usb 7-1: too many configurations: 29, using maximum allowed: 8 [ 267.337407][ T5927] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 267.652331][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.654652][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 267.777333][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.820875][ T5903] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 267.840749][ T5927] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.867192][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.894550][ T5927] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 267.904518][ T5903] usb 7-1: Product: syz [ 267.937723][ T5903] usb 7-1: Manufacturer: syz [ 267.943607][ T5903] usb 7-1: SerialNumber: syz [ 267.950760][ T5927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.045802][ T5927] usb 4-1: config 0 descriptor?? [ 268.057604][ T5903] r8152-cfgselector 7-1: Unknown version 0x0000 [ 268.077764][ T5903] r8152-cfgselector 7-1: config 0 descriptor?? [ 268.175674][ T7926] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 268.186839][ T7926] team0: Port device batadv1 added [ 268.291079][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.503452][ T927] r8152-cfgselector 7-1: USB disconnect, device number 2 [ 268.520593][ T5927] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 268.539255][ T5927] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 268.583201][ T5927] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 268.670205][ T5927] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 268.679971][ T5927] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 268.929113][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 268.943147][ T7912] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 268.987639][ T7925] delete_channel: no stack [ 268.993166][ T7932] ip6t_rpfilter: unknown options [ 269.094885][ T5927] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 269.200748][ T5927] playstation 0003:054C:0DF2.0007: Failed to retrieve feature with reportID 9: -32 [ 269.511544][ T7934] sctp: [Deprecated]: syz.3.470 (pid 7934) Use of int in max_burst socket option deprecated. [ 269.511544][ T7934] Use struct sctp_assoc_value instead [ 269.574240][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.587471][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 269.614164][ T5927] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense pairing info: -32 [ 269.754170][ T5927] playstation 0003:054C:0DF2.0007: Failed to get MAC address from DualSense [ 269.797343][ T5927] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 269.841094][ T5927] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -32 [ 270.373428][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 270.574011][ T5927] usb 4-1: USB disconnect, device number 6 [ 270.821101][ T7950] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 270.830124][ T7950] team0: Port device batadv2 added [ 270.869464][ T7950] hub 9-0:1.0: USB hub found [ 270.874567][ T7950] hub 9-0:1.0: 1 port detected [ 272.285243][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.297716][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.304900][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 272.979057][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.427070][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.439908][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 273.789599][ T7970] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 273.801488][ T7970] team0: Port device batadv10 added [ 273.892580][ T7972] syzkaller1: entered promiscuous mode [ 273.909350][ T7972] syzkaller1: entered allmulticast mode [ 274.021065][ T5854] Bluetooth: hci6: command 0x040f tx timeout [ 274.047559][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.070689][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.332085][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.334990][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 275.806474][ T7995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.823636][ T7995] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 275.970281][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.215444][ T8010] ip6t_rpfilter: unknown options [ 277.769150][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.797581][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 277.889917][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.997418][ T8031] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 279.037720][ T8031] team0: Port device batadv8 added [ 279.108572][ T5903] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 279.201687][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 279.202539][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 279.500899][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 279.510587][ T5903] usb 1-1: unable to get BOS descriptor or descriptor too short [ 279.631183][ T5903] usb 1-1: config 5 has an invalid interface number: 184 but max is 3 [ 279.680367][ T5903] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 279.693873][ T8042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 279.703041][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.6.503'. [ 279.711951][ T8042] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 279.719615][ T8042] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.827066][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 279.834239][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 279.884490][ T5903] usb 1-1: config 5 has 1 interface, different from the descriptor's value: 4 [ 279.972923][ T5903] usb 1-1: config 5 has no interface number 0 [ 280.018139][ T5903] usb 1-1: config 5 interface 184 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 7 [ 280.101967][ T5903] usb 1-1: config 5 interface 184 has no altsetting 0 [ 280.153838][ T5903] usb 1-1: New USB device found, idVendor=1b3d, idProduct=018d, bcdDevice=ee.07 [ 280.206798][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.247332][ T5903] usb 1-1: Product: syz [ 280.259593][ T5903] usb 1-1: Manufacturer: syz [ 280.273381][ T5903] usb 1-1: SerialNumber: syz [ 280.449184][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.677936][ T8027] netlink: 'syz.0.500': attribute type 13 has an invalid length. [ 281.498750][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.502485][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.559402][ T8027] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 281.607072][ T8055] binder: 8054:8055 ioctl 4018620d 0 returned -22 [ 281.715711][ T8056] netlink: 48 bytes leftover after parsing attributes in process `syz.3.506'. [ 281.725700][ T8056] netlink: 48 bytes leftover after parsing attributes in process `syz.3.506'. [ 281.737185][ T8056] netlink: 48 bytes leftover after parsing attributes in process `syz.3.506'. [ 281.737816][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 283.014922][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 283.102551][ T5903] ftdi_sio 1-1:5.184: FTDI USB Serial Device converter detected [ 283.132803][ T5903] ftdi_sio ttyUSB0: unknown device type: 0xee07 [ 283.297169][ T5903] usb 1-1: USB disconnect, device number 15 [ 283.304797][ T5903] ftdi_sio 1-1:5.184: device disconnected [ 283.654103][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 283.667001][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 284.018537][ T5968] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 284.461038][ T30] audit: type=1326 audit(1754174136.952:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 284.555829][ T30] audit: type=1326 audit(1754174136.982:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 284.607347][ T8098] sctp: [Deprecated]: syz.3.517 (pid 8098) Use of int in maxseg socket option. [ 284.607347][ T8098] Use struct sctp_assoc_value instead [ 284.684183][ T30] audit: type=1326 audit(1754174136.982:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 284.747129][ T30] audit: type=1326 audit(1754174136.982:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 284.769410][ T30] audit: type=1326 audit(1754174136.982:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 284.886060][ T30] audit: type=1326 audit(1754174136.992:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 284.927639][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 284.938779][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 285.046173][ T8102] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 285.056396][ T8102] team0: Port device batadv11 added [ 285.109927][ T30] audit: type=1326 audit(1754174136.992:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 285.197229][ T30] audit: type=1326 audit(1754174136.992:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 285.222636][ T30] audit: type=1326 audit(1754174136.992:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 285.324901][ T30] audit: type=1326 audit(1754174137.462:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8089 comm="syz.3.517" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f6e18eb69 code=0x7ffc0000 [ 285.971305][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 285.971980][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 286.001310][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 286.059802][ T8106] FAULT_INJECTION: forcing a failure. [ 286.059802][ T8106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 286.309976][ T8106] CPU: 0 UID: 0 PID: 8106 Comm: syz.3.519 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 286.310010][ T8106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 286.310022][ T8106] Call Trace: [ 286.310030][ T8106] [ 286.310040][ T8106] dump_stack_lvl+0x189/0x250 [ 286.310070][ T8106] ? __pfx____ratelimit+0x10/0x10 [ 286.310093][ T8106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 286.310117][ T8106] ? __pfx__printk+0x10/0x10 [ 286.310158][ T8106] should_fail_ex+0x414/0x560 [ 286.310193][ T8106] _copy_to_user+0x31/0xb0 [ 286.310224][ T8106] video_usercopy+0xeb2/0x14f0 [ 286.310268][ T8106] ? __pfx___video_do_ioctl+0x10/0x10 [ 286.310298][ T8106] ? __pfx_video_usercopy+0x10/0x10 [ 286.310325][ T8106] ? smack_file_ioctl+0x2a9/0x340 [ 286.310365][ T8106] ? __fget_files+0x2a/0x420 [ 286.310388][ T8106] ? __fget_files+0x3a0/0x420 [ 286.310415][ T8106] v4l2_ioctl+0x18a/0x1e0 [ 286.310445][ T8106] ? __pfx_v4l2_ioctl+0x10/0x10 [ 286.310474][ T8106] __se_sys_ioctl+0xfc/0x170 [ 286.310507][ T8106] do_syscall_64+0xfa/0x3b0 [ 286.310531][ T8106] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.310551][ T8106] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 286.310570][ T8106] ? clear_bhb_loop+0x60/0xb0 [ 286.310596][ T8106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.310616][ T8106] RIP: 0033:0x7f6f6e18eb69 [ 286.310635][ T8106] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 286.310653][ T8106] RSP: 002b:00007f6f6f0d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 286.310675][ T8106] RAX: ffffffffffffffda RBX: 00007f6f6e3b5fa0 RCX: 00007f6f6e18eb69 [ 286.310690][ T8106] RDX: 00002000000000c0 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 286.310704][ T8106] RBP: 00007f6f6f0d6090 R08: 0000000000000000 R09: 0000000000000000 [ 286.310717][ T8106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 286.310730][ T8106] R13: 0000000000000000 R14: 00007f6f6e3b5fa0 R15: 00007ffd61c9fba8 [ 286.310763][ T8106] [ 286.848315][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 286.848516][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 286.991258][ T8118] FAULT_INJECTION: forcing a failure. [ 286.991258][ T8118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 287.144435][ T8118] CPU: 0 UID: 0 PID: 8118 Comm: syz.0.520 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 287.144452][ T8118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 287.144458][ T8118] Call Trace: [ 287.144463][ T8118] [ 287.144468][ T8118] dump_stack_lvl+0x189/0x250 [ 287.144483][ T8118] ? __pfx____ratelimit+0x10/0x10 [ 287.144495][ T8118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.144505][ T8118] ? __pfx__printk+0x10/0x10 [ 287.144523][ T8118] should_fail_ex+0x414/0x560 [ 287.144537][ T8118] _copy_to_user+0x31/0xb0 [ 287.144552][ T8118] simple_read_from_buffer+0xe1/0x170 [ 287.144565][ T8118] proc_fail_nth_read+0x1df/0x250 [ 287.144578][ T8118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 287.144591][ T8118] ? rw_verify_area+0x258/0x650 [ 287.144604][ T8118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 287.144623][ T8118] vfs_read+0x200/0x980 [ 287.144640][ T8118] ? __pfx___mutex_lock+0x10/0x10 [ 287.144652][ T8118] ? __pfx_vfs_read+0x10/0x10 [ 287.144666][ T8118] ? __fget_files+0x2a/0x420 [ 287.144679][ T8118] ? __fget_files+0x3a0/0x420 [ 287.144689][ T8118] ? __fget_files+0x2a/0x420 [ 287.144703][ T8118] ksys_read+0x145/0x250 [ 287.144711][ T8118] ? __fget_files+0x3a0/0x420 [ 287.144722][ T8118] ? __pfx_ksys_read+0x10/0x10 [ 287.144733][ T8118] ? do_syscall_64+0xbe/0x3b0 [ 287.144745][ T8118] do_syscall_64+0xfa/0x3b0 [ 287.144754][ T8118] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.144764][ T8118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.144773][ T8118] ? clear_bhb_loop+0x60/0xb0 [ 287.144785][ T8118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.144794][ T8118] RIP: 0033:0x7fa9ebf8d57c [ 287.144803][ T8118] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 287.144811][ T8118] RSP: 002b:00007fa9ecd32030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 287.144822][ T8118] RAX: ffffffffffffffda RBX: 00007fa9ec1b5fa0 RCX: 00007fa9ebf8d57c [ 287.144829][ T8118] RDX: 000000000000000f RSI: 00007fa9ecd320a0 RDI: 0000000000000004 [ 287.144835][ T8118] RBP: 00007fa9ecd32090 R08: 0000000000000000 R09: 0000000000000000 [ 287.144841][ T8118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 287.144846][ T8118] R13: 0000000000000000 R14: 00007fa9ec1b5fa0 R15: 00007ffd2d3aa018 [ 287.144861][ T8118] [ 287.763026][ T8119] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 287.853180][ T8119] team0: Port device batadv9 added [ 287.907499][ T8119] hub 9-0:1.0: USB hub found [ 287.917487][ T8119] hub 9-0:1.0: 1 port detected [ 288.148338][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.768417][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.950796][ T8133] FAULT_INJECTION: forcing a failure. [ 288.950796][ T8133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.017515][ T8133] CPU: 0 UID: 0 PID: 8133 Comm: syz.3.529 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 289.017546][ T8133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.017559][ T8133] Call Trace: [ 289.017567][ T8133] [ 289.017576][ T8133] dump_stack_lvl+0x189/0x250 [ 289.017605][ T8133] ? __pfx____ratelimit+0x10/0x10 [ 289.017628][ T8133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 289.017652][ T8133] ? __pfx__printk+0x10/0x10 [ 289.017693][ T8133] should_fail_ex+0x414/0x560 [ 289.017721][ T8133] _copy_to_user+0x31/0xb0 [ 289.017751][ T8133] simple_read_from_buffer+0xe1/0x170 [ 289.017779][ T8133] proc_fail_nth_read+0x1df/0x250 [ 289.017807][ T8133] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.017843][ T8133] ? rw_verify_area+0x258/0x650 [ 289.017873][ T8133] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.017899][ T8133] vfs_read+0x200/0x980 [ 289.017932][ T8133] ? __pfx___mutex_lock+0x10/0x10 [ 289.017955][ T8133] ? __pfx_vfs_read+0x10/0x10 [ 289.017988][ T8133] ? __fget_files+0x2a/0x420 [ 289.018017][ T8133] ? __fget_files+0x3a0/0x420 [ 289.018038][ T8133] ? __fget_files+0x2a/0x420 [ 289.018071][ T8133] ksys_read+0x145/0x250 [ 289.018089][ T8133] ? __fget_files+0x3a0/0x420 [ 289.018110][ T8133] ? __pfx_ksys_read+0x10/0x10 [ 289.018134][ T8133] ? do_syscall_64+0xbe/0x3b0 [ 289.018159][ T8133] do_syscall_64+0xfa/0x3b0 [ 289.018180][ T8133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.018192][ T8133] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 289.018203][ T8133] ? clear_bhb_loop+0x60/0xb0 [ 289.018218][ T8133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.018230][ T8133] RIP: 0033:0x7f6f6e18d57c [ 289.018241][ T8133] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 289.018252][ T8133] RSP: 002b:00007f6f6f0d6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 289.018266][ T8133] RAX: ffffffffffffffda RBX: 00007f6f6e3b5fa0 RCX: 00007f6f6e18d57c [ 289.018276][ T8133] RDX: 000000000000000f RSI: 00007f6f6f0d60a0 RDI: 0000000000000004 [ 289.018283][ T8133] RBP: 00007f6f6f0d6090 R08: 0000000000000000 R09: 0000000000000000 [ 289.018291][ T8133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.018298][ T8133] R13: 0000000000000000 R14: 00007f6f6e3b5fa0 R15: 00007ffd61c9fba8 [ 289.018317][ T8133] [ 289.256384][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.810209][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 289.810603][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.691473][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 290.704541][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 291.189254][ T8157] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 291.331994][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 291.877314][ T5952] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 291.971439][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 291.979133][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.069511][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.080576][ T5952] usb 6-1: Using ep0 maxpacket: 32 [ 292.124573][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.165944][ T5952] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.196315][ T5952] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 292.311177][ T5952] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.357989][ T5952] usb 6-1: config 0 descriptor?? [ 292.619140][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.416462][ T5157] Bluetooth: hci5: command 0x040f tx timeout [ 293.624814][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.716919][ T8172] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.614700][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.182143][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.557559][ T8183] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 295.660558][ T8183] team0: Port device batadv11 added [ 295.752777][ T8182] netlink: 830 bytes leftover after parsing attributes in process `syz.6.541'. [ 295.785167][ T5952] usbhid 6-1:0.0: can't add hid device: -71 [ 295.795277][ T5952] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 295.809653][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 295.822795][ T5952] usb 6-1: USB disconnect, device number 5 [ 295.831828][ T8183] hub 9-0:1.0: USB hub found [ 295.852125][ T8183] hub 9-0:1.0: 1 port detected [ 295.970435][ T8188] FAULT_INJECTION: forcing a failure. [ 295.970435][ T8188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 296.037899][ T8188] CPU: 0 UID: 0 PID: 8188 Comm: syz.6.543 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 296.037915][ T8188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 296.037922][ T8188] Call Trace: [ 296.037926][ T8188] [ 296.037931][ T8188] dump_stack_lvl+0x189/0x250 [ 296.037948][ T8188] ? __pfx____ratelimit+0x10/0x10 [ 296.037959][ T8188] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.037969][ T8188] ? __pfx__printk+0x10/0x10 [ 296.037987][ T8188] should_fail_ex+0x414/0x560 [ 296.038000][ T8188] _copy_to_user+0x31/0xb0 [ 296.038014][ T8188] simple_read_from_buffer+0xe1/0x170 [ 296.038028][ T8188] proc_fail_nth_read+0x1df/0x250 [ 296.038041][ T8188] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 296.038054][ T8188] ? rw_verify_area+0x258/0x650 [ 296.038068][ T8188] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 296.038080][ T8188] vfs_read+0x200/0x980 [ 296.038097][ T8188] ? __pfx___mutex_lock+0x10/0x10 [ 296.038108][ T8188] ? __pfx_vfs_read+0x10/0x10 [ 296.038122][ T8188] ? __fget_files+0x2a/0x420 [ 296.038135][ T8188] ? __fget_files+0x3a0/0x420 [ 296.038144][ T8188] ? __fget_files+0x2a/0x420 [ 296.038159][ T8188] ksys_read+0x145/0x250 [ 296.038166][ T8188] ? __fget_files+0x3a0/0x420 [ 296.038177][ T8188] ? __pfx_ksys_read+0x10/0x10 [ 296.038188][ T8188] ? do_syscall_64+0xbe/0x3b0 [ 296.038201][ T8188] do_syscall_64+0xfa/0x3b0 [ 296.038210][ T8188] ? lockdep_hardirqs_on+0x9c/0x150 [ 296.038220][ T8188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.038229][ T8188] ? clear_bhb_loop+0x60/0xb0 [ 296.038240][ T8188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.038249][ T8188] RIP: 0033:0x7fdcad38d57c [ 296.038259][ T8188] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 296.038267][ T8188] RSP: 002b:00007fdcae11c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 296.038278][ T8188] RAX: ffffffffffffffda RBX: 00007fdcad5b5fa0 RCX: 00007fdcad38d57c [ 296.038286][ T8188] RDX: 000000000000000f RSI: 00007fdcae11c0a0 RDI: 0000000000000004 [ 296.038291][ T8188] RBP: 00007fdcae11c090 R08: 0000000000000000 R09: 0000000000000000 [ 296.038297][ T8188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.038302][ T8188] R13: 0000000000000000 R14: 00007fdcad5b5fa0 R15: 00007ffe29c8f128 [ 296.038317][ T8188] [ 296.449162][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 296.461056][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 296.480440][ T8196] loop2: detected capacity change from 0 to 7 [ 296.694840][ T8196] Dev loop2: unable to read RDB block 7 [ 296.812219][ T8200] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 296.883157][ T8196] loop2: unable to read partition table [ 297.207880][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.494625][ T8196] loop2: partition table beyond EOD, truncated [ 297.501054][ T8196] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 297.706092][ T8204] netlink: 24 bytes leftover after parsing attributes in process `syz.5.549'. [ 297.727730][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.733623][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 297.739842][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.290747][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.330297][ T8215] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 299.330297][ T8215] The task syz.5.549 (8215) triggered the difference, watch for misbehavior. [ 299.911484][ T8223] No source specified [ 299.921792][ T8227] xt_l2tp: wrong L2TP version: 0 [ 300.378776][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 300.407928][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 300.740335][ T5952] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 301.284078][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.304093][ T8244] netlink: 12 bytes leftover after parsing attributes in process `syz.2.558'. [ 301.319992][ T8244] sch_fq: defrate 4294967295 ignored. [ 301.347652][ T5952] usb 1-1: Using ep0 maxpacket: 16 [ 301.382728][ T5952] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 301.448027][ T5952] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 301.547507][ T5952] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 301.585672][ T979] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.586895][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.608466][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.679815][ T5952] usb 1-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d [ 301.699935][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.730475][ T5952] usb 1-1: Product: syz [ 301.734702][ T5952] usb 1-1: Manufacturer: syz [ 301.776834][ T5952] usb 1-1: SerialNumber: syz [ 301.798555][ T5952] usb 1-1: config 0 descriptor?? [ 301.827510][ T8249] netlink: 180 bytes leftover after parsing attributes in process `syz.2.560'. [ 301.840175][ T5952] gspca_main: STV06xx-2.14.0 probing 046d:08f0 [ 301.859614][ T5952] gspca_stv06xx: st6422 sensor detected [ 302.219577][ T8253] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 302.247596][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 303.146060][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 303.375526][ T5952] STV06xx 1-1:0.0: probe with driver STV06xx failed with error -71 [ 303.427274][ T5952] usb 1-1: USB disconnect, device number 16 [ 303.507971][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 303.523057][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.127680][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.052163][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.117962][ T5927] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 305.419996][ T5927] usb 1-1: device descriptor read/64, error -71 [ 305.707309][ T5927] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 305.867286][ T5927] usb 1-1: device descriptor read/64, error -71 [ 306.006234][ T5927] usb usb1-port1: attempt power cycle [ 306.057311][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.057374][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.220221][ T8293] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 306.339973][ T8293] team0: Port device batadv3 added [ 306.368420][ T5927] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 306.407499][ T5927] usb 1-1: device descriptor read/8, error -71 [ 306.523855][ T8301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.605078][ T8298] sctp: [Deprecated]: syz.3.571 (pid 8298) Use of int in maxseg socket option. [ 306.605078][ T8298] Use struct sctp_assoc_value instead [ 306.697173][ T5927] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 306.705281][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.773290][ T5927] usb 1-1: device descriptor read/8, error -71 [ 306.897783][ T5927] usb usb1-port1: unable to enumerate USB device [ 306.907346][ T5903] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 307.077258][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 307.109581][ T5903] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 307.139329][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.178347][ T5903] usb 4-1: config 0 descriptor?? [ 307.258715][ T8315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.576'. [ 307.328014][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.328579][ T59] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.340551][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.391275][ T5903] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 307.441451][ T5903] usb 4-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 307.497446][ T5903] usb 4-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 307.879443][ T8327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 308.618504][ T3490] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 308.633233][ T8326] 8021q: adding VLAN 0 to HW filter on device batadv12 [ 308.654553][ T8326] team0: Port device batadv12 added [ 308.928367][ T8326] hub 9-0:1.0: USB hub found [ 308.933529][ T8326] hub 9-0:1.0: 1 port detected [ 309.252195][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 309.267048][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 309.888887][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.139627][ T8344] fuse: Bad value for 'user_id' [ 311.512530][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.542458][ T8344] fuse: Bad value for 'user_id' [ 311.874793][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.921769][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 311.922343][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 312.297836][ T8363] vlan1: entered promiscuous mode [ 312.305059][ T8363] vlan1: entered allmulticast mode [ 312.310308][ T8363] veth0_vlan: entered allmulticast mode [ 312.453658][ T5854] Bluetooth: hci2: unexpected event for opcode 0x1804 [ 312.775131][ T8363] syz.3.585 (8363) used greatest stack depth: 16880 bytes left [ 313.089420][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.116182][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.116236][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.339534][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 313.339552][ T30] audit: type=1326 audit(1754174165.822:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8373 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcad38eb69 code=0x7ffc0000 [ 313.448848][ T30] audit: type=1326 audit(1754174165.862:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8373 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcad38eb69 code=0x7ffc0000 [ 313.527273][ T30] audit: type=1326 audit(1754174165.862:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8373 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7fdcad38eb69 code=0x7ffc0000 [ 313.561143][ T30] audit: type=1326 audit(1754174165.862:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8373 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcad38eb69 code=0x7ffc0000 [ 313.583053][ T30] audit: type=1326 audit(1754174165.862:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8373 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcad38eb69 code=0x7ffc0000 [ 313.609370][ T30] audit: type=1326 audit(1754174165.862:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8373 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fdcad38eb69 code=0x7ffc0000 [ 313.654679][ T30] audit: type=1326 audit(1754174165.862:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8373 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcad38eb69 code=0x7ffc0000 [ 313.809265][ T8384] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 313.841670][ T8384] team0: Port device batadv10 added [ 313.861408][ T5927] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 313.871503][ T30] audit: type=1326 audit(1754174165.862:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8373 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdcad38eb69 code=0x7ffc0000 [ 313.892955][ T30] audit: type=1326 audit(1754174165.862:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8373 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcad38eb69 code=0x7ffc0000 [ 313.914696][ T30] audit: type=1326 audit(1754174165.862:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8373 comm="syz.6.590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdcad38eb69 code=0x7ffc0000 [ 314.218358][ T5927] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 314.249595][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 314.266150][ T8392] FAULT_INJECTION: forcing a failure. [ 314.266150][ T8392] name failslab, interval 1, probability 0, space 0, times 0 [ 314.277117][ T5927] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 314.311704][ T5927] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 314.343444][ T5927] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 314.367823][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 314.427290][ T8392] CPU: 1 UID: 0 PID: 8392 Comm: syz.0.596 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 314.427324][ T8392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 314.427335][ T8392] Call Trace: [ 314.427342][ T8392] [ 314.427350][ T8392] dump_stack_lvl+0x189/0x250 [ 314.427375][ T8392] ? __pfx____ratelimit+0x10/0x10 [ 314.427395][ T8392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.427413][ T8392] ? __pfx__printk+0x10/0x10 [ 314.427441][ T8392] ? __pfx___might_resched+0x10/0x10 [ 314.427465][ T8392] should_fail_ex+0x414/0x560 [ 314.427488][ T8392] should_failslab+0xa8/0x100 [ 314.427508][ T8392] __kmalloc_cache_noprof+0x70/0x3d0 [ 314.427525][ T8392] ? allocate_cgrp_cset_links+0xc9/0x320 [ 314.427556][ T8392] allocate_cgrp_cset_links+0xc9/0x320 [ 314.427586][ T8392] find_css_set+0x9dd/0x1560 [ 314.427612][ T8392] ? __lock_acquire+0xab9/0xd20 [ 314.427629][ T8392] ? __pfx_find_css_set+0x10/0x10 [ 314.427675][ T8392] cgroup_migrate_prepare_dst+0x130/0x700 [ 314.427703][ T8392] cgroup_attach_task+0x5ae/0x970 [ 314.427727][ T8392] ? cgroup_attach_task+0x1fb/0x970 [ 314.427749][ T8392] ? __pfx_cgroup_attach_task+0x10/0x10 [ 314.427786][ T8392] ? get_task_cred+0x23/0x300 [ 314.427813][ T8392] ? get_task_cred+0x23/0x300 [ 314.427835][ T8392] ? get_task_cred+0x23/0x300 [ 314.427862][ T8392] ? get_task_cred+0x2c1/0x300 [ 314.427886][ T8392] ? get_task_cred+0x23/0x300 [ 314.427916][ T8392] __cgroup1_procs_write+0x2cd/0x3c0 [ 314.427954][ T8392] ? __pfx___cgroup1_procs_write+0x10/0x10 [ 314.427981][ T8392] ? kernfs_root+0x1c/0x230 [ 314.428002][ T8392] ? kernfs_root+0x1c/0x230 [ 314.428027][ T8392] ? kernfs_root+0x1ea/0x230 [ 314.428049][ T8392] ? __pfx_cgroup1_tasks_write+0x10/0x10 [ 314.428077][ T8392] cgroup_file_write+0x39b/0x740 [ 314.428116][ T8392] ? __pfx_cgroup_file_write+0x10/0x10 [ 314.428163][ T8392] ? __pfx_cgroup_file_write+0x10/0x10 [ 314.428189][ T8392] kernfs_fop_write_iter+0x378/0x4f0 [ 314.428231][ T8392] vfs_write+0x54b/0xa90 [ 314.428259][ T8392] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 314.428292][ T8392] ? __pfx_vfs_write+0x10/0x10 [ 314.428335][ T8392] ? __fget_files+0x2a/0x420 [ 314.428372][ T8392] ksys_write+0x145/0x250 [ 314.428396][ T8392] ? __pfx_ksys_write+0x10/0x10 [ 314.428413][ T8392] ? rcu_is_watching+0x15/0xb0 [ 314.428443][ T8392] ? do_syscall_64+0xbe/0x3b0 [ 314.428471][ T8392] do_syscall_64+0xfa/0x3b0 [ 314.428492][ T8392] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.428514][ T8392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.428534][ T8392] ? clear_bhb_loop+0x60/0xb0 [ 314.428560][ T8392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.428578][ T8392] RIP: 0033:0x7fa9ebf8eb69 [ 314.428598][ T8392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.428616][ T8392] RSP: 002b:00007fa9ecd32038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 314.428640][ T8392] RAX: ffffffffffffffda RBX: 00007fa9ec1b5fa0 RCX: 00007fa9ebf8eb69 [ 314.428655][ T8392] RDX: 0000000000000012 RSI: 0000200000000380 RDI: 0000000000000004 [ 314.428668][ T8392] RBP: 00007fa9ecd32090 R08: 0000000000000000 R09: 0000000000000000 [ 314.428681][ T8392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.428693][ T8392] R13: 0000000000000000 R14: 00007fa9ec1b5fa0 R15: 00007ffd2d3aa018 [ 314.428731][ T8392] [ 314.775647][ T5927] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.018430][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.035382][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.296261][ T5927] usb 7-1: config 0 descriptor?? [ 315.661697][ T8404] FAULT_INJECTION: forcing a failure. [ 315.661697][ T8404] name failslab, interval 1, probability 0, space 0, times 0 [ 315.761935][ T8404] CPU: 1 UID: 0 PID: 8404 Comm: syz.2.599 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 315.761967][ T8404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 315.761980][ T8404] Call Trace: [ 315.761988][ T8404] [ 315.761998][ T8404] dump_stack_lvl+0x189/0x250 [ 315.762024][ T8404] ? __pfx____ratelimit+0x10/0x10 [ 315.762040][ T8404] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.762054][ T8404] ? __pfx__printk+0x10/0x10 [ 315.762071][ T8404] ? __pfx___might_resched+0x10/0x10 [ 315.762085][ T8404] ? fs_reclaim_acquire+0x7d/0x100 [ 315.762103][ T8404] should_fail_ex+0x414/0x560 [ 315.762118][ T8404] ? create_io_worker+0x27/0x5d0 [ 315.762129][ T8404] should_failslab+0xa8/0x100 [ 315.762145][ T8404] __kmalloc_cache_noprof+0x70/0x3d0 [ 315.762157][ T8404] ? create_io_worker+0xac/0x5d0 [ 315.762168][ T8404] ? create_io_worker+0x27/0x5d0 [ 315.762179][ T8404] create_io_worker+0xac/0x5d0 [ 315.762193][ T8404] io_wq_enqueue+0x62c/0x850 [ 315.762210][ T8404] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 315.762231][ T8404] io_submit_sqes+0x1035/0x1c50 [ 315.762269][ T8404] __se_sys_io_uring_enter+0x2df/0x2b20 [ 315.762295][ T8404] ? ksys_write+0x1cb/0x250 [ 315.762309][ T8404] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 315.762319][ T8404] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 315.762333][ T8404] ? __pfx_vfs_write+0x10/0x10 [ 315.762347][ T8404] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 315.762363][ T8404] ? __fget_files+0x3a0/0x420 [ 315.762381][ T8404] ? fput+0xa0/0xd0 [ 315.762396][ T8404] ? ksys_write+0x22a/0x250 [ 315.762408][ T8404] ? __pfx_ksys_write+0x10/0x10 [ 315.762418][ T8404] ? rcu_is_watching+0x15/0xb0 [ 315.762438][ T8404] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 315.762452][ T8404] do_syscall_64+0xfa/0x3b0 [ 315.762465][ T8404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.762477][ T8404] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 315.762489][ T8404] ? clear_bhb_loop+0x60/0xb0 [ 315.762503][ T8404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.762515][ T8404] RIP: 0033:0x7f581ef8eb69 [ 315.762527][ T8404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 315.762537][ T8404] RSP: 002b:00007f581edf7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 315.762553][ T8404] RAX: ffffffffffffffda RBX: 00007f581f1b5fa0 RCX: 00007f581ef8eb69 [ 315.762562][ T8404] RDX: 0000000000000000 RSI: 00000000000047bc RDI: 0000000000000003 [ 315.762570][ T8404] RBP: 00007f581edf7090 R08: 0000000000000000 R09: 0000000000000000 [ 315.762577][ T8404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.762584][ T8404] R13: 0000000000000000 R14: 00007f581f1b5fa0 R15: 00007fff2e01b1c8 [ 315.762604][ T8404] [ 316.480958][ T8416] FAULT_INJECTION: forcing a failure. [ 316.480958][ T8416] name failslab, interval 1, probability 0, space 0, times 0 [ 316.547163][ T8416] CPU: 0 UID: 0 PID: 8416 Comm: syz.5.600 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 316.547194][ T8416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 316.547206][ T8416] Call Trace: [ 316.547215][ T8416] [ 316.547223][ T8416] dump_stack_lvl+0x189/0x250 [ 316.547253][ T8416] ? __pfx____ratelimit+0x10/0x10 [ 316.547276][ T8416] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.547299][ T8416] ? __pfx__printk+0x10/0x10 [ 316.547330][ T8416] ? __pfx___might_resched+0x10/0x10 [ 316.547353][ T8416] ? fs_reclaim_acquire+0x7d/0x100 [ 316.547384][ T8416] should_fail_ex+0x414/0x560 [ 316.547414][ T8416] should_failslab+0xa8/0x100 [ 316.547438][ T8416] __kmalloc_noprof+0xcb/0x4f0 [ 316.547458][ T8416] ? tomoyo_encode+0x28b/0x550 [ 316.547490][ T8416] tomoyo_encode+0x28b/0x550 [ 316.547525][ T8416] tomoyo_realpath_from_path+0x58d/0x5d0 [ 316.547567][ T8416] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 316.547590][ T8416] tomoyo_path_number_perm+0x1e8/0x5a0 [ 316.547683][ T8416] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 316.547705][ T8416] ? arch_stack_walk+0xfc/0x150 [ 316.547730][ T8416] ? look_up_lock_class+0x74/0x170 [ 316.547755][ T8416] ? register_lock_class+0x51/0x320 [ 316.547831][ T8416] ? __pfx_from_kuid+0x10/0x10 [ 316.547861][ T8416] ? down_write_killable+0x178/0x230 [ 316.547892][ T8416] ? __pfx_down_write_killable+0x10/0x10 [ 316.547922][ T8416] tomoyo_path_chown+0x46/0xc0 [ 316.547952][ T8416] security_path_chown+0x13d/0x360 [ 316.547988][ T8416] chown_common+0x3bd/0x5c0 [ 316.548025][ T8416] ? __pfx_chown_common+0x10/0x10 [ 316.548064][ T8416] ? mnt_get_write_access+0x223/0x2a0 [ 316.548106][ T8416] do_fchownat+0x161/0x270 [ 316.548139][ T8416] ? __pfx_do_fchownat+0x10/0x10 [ 316.548164][ T8416] ? __pfx_ksys_write+0x10/0x10 [ 316.548181][ T8416] ? rcu_is_watching+0x15/0xb0 [ 316.548212][ T8416] __x64_sys_fchownat+0xb5/0xd0 [ 316.548241][ T8416] do_syscall_64+0xfa/0x3b0 [ 316.548262][ T8416] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.548283][ T8416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.548303][ T8416] ? clear_bhb_loop+0x60/0xb0 [ 316.548329][ T8416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.548348][ T8416] RIP: 0033:0x7f4cd7d8eb69 [ 316.548368][ T8416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.548384][ T8416] RSP: 002b:00007f4cd8be7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000104 [ 316.548407][ T8416] RAX: ffffffffffffffda RBX: 00007f4cd7fb6080 RCX: 00007f4cd7d8eb69 [ 316.548422][ T8416] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 316.548437][ T8416] RBP: 00007f4cd8be7090 R08: 0000000000000000 R09: 0000000000000000 [ 316.548450][ T8416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 316.548462][ T8416] R13: 0000000000000000 R14: 00007f4cd7fb6080 R15: 00007ffc18397058 [ 316.548498][ T8416] [ 316.858045][ T8416] ERROR: Out of memory at tomoyo_realpath_from_path. [ 316.906888][ T5927] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 316.957974][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.964721][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 316.976648][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 316.988601][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.027453][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.568356][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 317.615057][ T5927] usb 7-1: USB disconnect, device number 4 [ 317.926206][ T8430] xt_policy: neither incoming nor outgoing policy selected [ 318.064114][ T8436] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 318.080618][ T8436] team0: Port device batadv11 added [ 318.113598][ T8436] hub 9-0:1.0: USB hub found [ 318.119530][ T8436] hub 9-0:1.0: 1 port detected [ 318.208336][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 318.864341][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 318.881119][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 318.897619][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.511982][ T8454] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 319.543996][ T8453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.612'. [ 319.659775][ T8455] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 319.783410][ T8454] team0: Port device batadv2 added [ 319.904200][ T8453] netlink: 'syz.2.612': attribute type 1 has an invalid length. [ 319.914018][ T8453] netlink: 36 bytes leftover after parsing attributes in process `syz.2.612'. [ 320.147567][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 320.227567][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 320.288290][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.400446][ T8466] Invalid logical block size (4) [ 321.943707][ T8472] FAULT_INJECTION: forcing a failure. [ 321.943707][ T8472] name failslab, interval 1, probability 0, space 0, times 0 [ 322.087210][ T8472] CPU: 0 UID: 0 PID: 8472 Comm: syz.6.616 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 322.087234][ T8472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 322.087243][ T8472] Call Trace: [ 322.087249][ T8472] [ 322.087256][ T8472] dump_stack_lvl+0x189/0x250 [ 322.087277][ T8472] ? __pfx____ratelimit+0x10/0x10 [ 322.087293][ T8472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 322.087312][ T8472] ? __pfx__printk+0x10/0x10 [ 322.087346][ T8472] ? ref_tracker_alloc+0x318/0x460 [ 322.087373][ T8472] should_fail_ex+0x414/0x560 [ 322.087398][ T8472] should_failslab+0xa8/0x100 [ 322.087423][ T8472] kmem_cache_alloc_noprof+0x73/0x3c0 [ 322.087443][ T8472] ? skb_clone+0x212/0x3a0 [ 322.087468][ T8472] skb_clone+0x212/0x3a0 [ 322.087503][ T8472] __netlink_deliver_tap+0x404/0x850 [ 322.087545][ T8472] ? netlink_deliver_tap+0x2e/0x1b0 [ 322.087574][ T8472] netlink_deliver_tap+0x19c/0x1b0 [ 322.087601][ T8472] netlink_unicast+0x730/0x8e0 [ 322.087641][ T8472] netlink_sendmsg+0x805/0xb30 [ 322.087680][ T8472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.087716][ T8472] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 322.087734][ T8472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 322.087760][ T8472] __sock_sendmsg+0x21c/0x270 [ 322.087789][ T8472] ____sys_sendmsg+0x505/0x830 [ 322.087826][ T8472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 322.087866][ T8472] ? import_iovec+0x74/0xa0 [ 322.087898][ T8472] ___sys_sendmsg+0x21f/0x2a0 [ 322.087931][ T8472] ? __pfx____sys_sendmsg+0x10/0x10 [ 322.088004][ T8472] ? __fget_files+0x2a/0x420 [ 322.088026][ T8472] ? __fget_files+0x3a0/0x420 [ 322.088060][ T8472] __x64_sys_sendmsg+0x19b/0x260 [ 322.088092][ T8472] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 322.088134][ T8472] ? __pfx_ksys_write+0x10/0x10 [ 322.088161][ T8472] ? do_syscall_64+0xbe/0x3b0 [ 322.088187][ T8472] do_syscall_64+0xfa/0x3b0 [ 322.088205][ T8472] ? lockdep_hardirqs_on+0x9c/0x150 [ 322.088224][ T8472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.088248][ T8472] ? clear_bhb_loop+0x60/0xb0 [ 322.088273][ T8472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.088291][ T8472] RIP: 0033:0x7fdcad38eb69 [ 322.088309][ T8472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.088324][ T8472] RSP: 002b:00007fdcab1f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 322.088347][ T8472] RAX: ffffffffffffffda RBX: 00007fdcad5b6080 RCX: 00007fdcad38eb69 [ 322.088361][ T8472] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 322.088373][ T8472] RBP: 00007fdcab1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 322.088384][ T8472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.088395][ T8472] R13: 0000000000000001 R14: 00007fdcad5b6080 R15: 00007ffe29c8f128 [ 322.088429][ T8472] [ 322.156313][ T7235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.688048][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.688510][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 323.331681][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 323.337543][ T8491] xt_connbytes: Forcing CT accounting to be enabled [ 323.351176][ T8491] Cannot find set identified by id 0 to match [ 323.971095][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 324.047771][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 324.133054][ T5854] Bluetooth: hci6: command 0x040f tx timeout [ 324.181276][ T8500] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 324.659205][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 324.659976][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.327501][ T7235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.887736][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.899826][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 326.340564][ T8526] FAULT_INJECTION: forcing a failure. [ 326.340564][ T8526] name failslab, interval 1, probability 0, space 0, times 0 [ 326.368375][ T8526] CPU: 0 UID: 0 PID: 8526 Comm: syz.5.629 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 326.368403][ T8526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.368416][ T8526] Call Trace: [ 326.368424][ T8526] [ 326.368433][ T8526] dump_stack_lvl+0x189/0x250 [ 326.368463][ T8526] ? __pfx____ratelimit+0x10/0x10 [ 326.368485][ T8526] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.368507][ T8526] ? __pfx__printk+0x10/0x10 [ 326.368536][ T8526] ? __pfx___might_resched+0x10/0x10 [ 326.368559][ T8526] ? fs_reclaim_acquire+0x7d/0x100 [ 326.368588][ T8526] should_fail_ex+0x414/0x560 [ 326.368616][ T8526] should_failslab+0xa8/0x100 [ 326.368640][ T8526] __kmalloc_noprof+0xcb/0x4f0 [ 326.368659][ T8526] ? security_task_alloc+0x4d/0x360 [ 326.368682][ T8526] ? perf_event_init_task+0x12d/0x4b0 [ 326.368711][ T8526] security_task_alloc+0x4d/0x360 [ 326.368736][ T8526] ? copy_process+0x978/0x3b80 [ 326.368758][ T8526] copy_process+0x14f8/0x3b80 [ 326.368791][ T8526] ? copy_process+0x978/0x3b80 [ 326.368834][ T8526] ? __pfx_copy_process+0x10/0x10 [ 326.368872][ T8526] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 326.368904][ T8526] vhost_task_create+0x1c4/0x290 [ 326.368932][ T8526] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 326.368965][ T8526] ? __pfx_vhost_task_create+0x10/0x10 [ 326.368988][ T8526] ? rcu_is_watching+0x15/0xb0 [ 326.369020][ T8526] ? __pfx_vhost_task_fn+0x10/0x10 [ 326.369055][ T8526] ? __lock_acquire+0xab9/0xd20 [ 326.369085][ T8526] kvm_mmu_post_init_vm+0x147/0x2b0 [ 326.369112][ T8526] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 326.369144][ T8526] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 326.369181][ T8526] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 326.369212][ T8526] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 326.369253][ T8526] ? rcu_is_watching+0x15/0xb0 [ 326.369274][ T8526] ? look_up_lock_class+0x74/0x170 [ 326.369298][ T8526] ? register_lock_class+0x51/0x320 [ 326.369335][ T8526] ? __lock_acquire+0xab9/0xd20 [ 326.369391][ T8526] kvm_vcpu_ioctl+0x95c/0xe90 [ 326.369424][ T8526] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 326.369445][ T8526] ? __lock_acquire+0xab9/0xd20 [ 326.369468][ T8526] ? __asan_memset+0x22/0x50 [ 326.369495][ T8526] ? smack_file_ioctl+0x302/0x340 [ 326.369519][ T8526] ? __pfx_smack_file_ioctl+0x10/0x10 [ 326.369552][ T8526] ? __fget_files+0x2a/0x420 [ 326.369574][ T8526] ? __fget_files+0x3a0/0x420 [ 326.369595][ T8526] ? __fget_files+0x2a/0x420 [ 326.369619][ T8526] ? bpf_lsm_file_ioctl+0x9/0x20 [ 326.369642][ T8526] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 326.369666][ T8526] __se_sys_ioctl+0xfc/0x170 [ 326.369698][ T8526] do_syscall_64+0xfa/0x3b0 [ 326.369718][ T8526] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.369734][ T8526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.369749][ T8526] ? clear_bhb_loop+0x60/0xb0 [ 326.369769][ T8526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.369783][ T8526] RIP: 0033:0x7f4cd7d8eb69 [ 326.369798][ T8526] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.369812][ T8526] RSP: 002b:00007f4cd8be7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.369831][ T8526] RAX: ffffffffffffffda RBX: 00007f4cd7fb6080 RCX: 00007f4cd7d8eb69 [ 326.369842][ T8526] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 326.369852][ T8526] RBP: 00007f4cd8be7090 R08: 0000000000000000 R09: 0000000000000000 [ 326.369861][ T8526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.369871][ T8526] R13: 0000000000000001 R14: 00007f4cd7fb6080 R15: 00007ffc18397058 [ 326.369897][ T8526] [ 326.817815][ T8529] FAULT_INJECTION: forcing a failure. [ 326.817815][ T8529] name failslab, interval 1, probability 0, space 0, times 0 [ 326.887828][ T8529] CPU: 1 UID: 0 PID: 8529 Comm: syz.3.630 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 326.887859][ T8529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 326.887872][ T8529] Call Trace: [ 326.887880][ T8529] [ 326.887889][ T8529] dump_stack_lvl+0x189/0x250 [ 326.887919][ T8529] ? __pfx____ratelimit+0x10/0x10 [ 326.887942][ T8529] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.887964][ T8529] ? __pfx__printk+0x10/0x10 [ 326.887999][ T8529] ? ref_tracker_alloc+0x318/0x460 [ 326.888025][ T8529] should_fail_ex+0x414/0x560 [ 326.888053][ T8529] should_failslab+0xa8/0x100 [ 326.888079][ T8529] kmem_cache_alloc_noprof+0x73/0x3c0 [ 326.888097][ T8529] ? skb_clone+0x212/0x3a0 [ 326.888124][ T8529] skb_clone+0x212/0x3a0 [ 326.888149][ T8529] __netlink_deliver_tap+0x404/0x850 [ 326.888193][ T8529] ? netlink_deliver_tap+0x2e/0x1b0 [ 326.888223][ T8529] netlink_deliver_tap+0x19c/0x1b0 [ 326.888253][ T8529] netlink_unicast+0x730/0x8e0 [ 326.888293][ T8529] netlink_sendmsg+0x805/0xb30 [ 326.888333][ T8529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.888380][ T8529] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 326.888401][ T8529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 326.888431][ T8529] __sock_sendmsg+0x21c/0x270 [ 326.888468][ T8529] ____sys_sendmsg+0x505/0x830 [ 326.888506][ T8529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.888554][ T8529] ? import_iovec+0x74/0xa0 [ 326.888587][ T8529] ___sys_sendmsg+0x21f/0x2a0 [ 326.888621][ T8529] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.888697][ T8529] ? __fget_files+0x2a/0x420 [ 326.888720][ T8529] ? __fget_files+0x3a0/0x420 [ 326.888756][ T8529] __x64_sys_sendmsg+0x19b/0x260 [ 326.888791][ T8529] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 326.888835][ T8529] ? __pfx_ksys_write+0x10/0x10 [ 326.888862][ T8529] ? do_syscall_64+0xbe/0x3b0 [ 326.888890][ T8529] do_syscall_64+0xfa/0x3b0 [ 326.888910][ T8529] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.888931][ T8529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.888953][ T8529] ? clear_bhb_loop+0x60/0xb0 [ 326.888978][ T8529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.888998][ T8529] RIP: 0033:0x7f6f6e18eb69 [ 326.889017][ T8529] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.889034][ T8529] RSP: 002b:00007f6f6f0d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.889057][ T8529] RAX: ffffffffffffffda RBX: 00007f6f6e3b5fa0 RCX: 00007f6f6e18eb69 [ 326.889072][ T8529] RDX: 00000000040040c4 RSI: 0000200000000000 RDI: 0000000000000005 [ 326.889086][ T8529] RBP: 00007f6f6f0d6090 R08: 0000000000000000 R09: 0000000000000000 [ 326.889098][ T8529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.889110][ T8529] R13: 0000000000000000 R14: 00007f6f6e3b5fa0 R15: 00007ffd61c9fba8 [ 326.889145][ T8529] [ 327.554232][ T8534] netlink: 7 bytes leftover after parsing attributes in process `syz.6.633'. [ 327.598602][ T8534] tmpfs: Bad value for 'mpol' [ 328.122954][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 328.448500][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 328.467674][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 328.727759][ T5927] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 328.847294][ T5854] Bluetooth: hci6: command 0x040f tx timeout [ 329.043402][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.108672][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.121480][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.264626][ T5927] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.516557][ T5927] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 330.013922][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 330.029151][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.622034][ T5927] usb 1-1: config 0 descriptor?? [ 330.628593][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 330.647655][ T8558] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 331.160840][ T5927] usbhid 1-1:0.0: can't add hid device: -71 [ 331.166814][ T5927] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 331.190064][ T5927] usb 1-1: USB disconnect, device number 21 [ 331.198796][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 331.870086][ T8574] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 331.907565][ T8574] netlink: 8 bytes leftover after parsing attributes in process `syz.5.644'. [ 331.918207][ T8574] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 331.926088][ T8574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 332.404519][ T8558] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 332.426162][ T8558] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 332.680623][ T8575] 8021q: adding VLAN 0 to HW filter on device batadv12 [ 332.696800][ T8575] team0: Port device batadv12 added [ 333.227163][ T5968] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 333.276688][ T8589] FAULT_INJECTION: forcing a failure. [ 333.276688][ T8589] name failslab, interval 1, probability 0, space 0, times 0 [ 333.330909][ T8589] CPU: 0 UID: 0 PID: 8589 Comm: syz.3.650 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 333.330940][ T8589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 333.330952][ T8589] Call Trace: [ 333.330960][ T8589] [ 333.330970][ T8589] dump_stack_lvl+0x189/0x250 [ 333.331000][ T8589] ? __pfx____ratelimit+0x10/0x10 [ 333.331023][ T8589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.331047][ T8589] ? __pfx__printk+0x10/0x10 [ 333.331082][ T8589] ? ref_tracker_alloc+0x318/0x460 [ 333.331110][ T8589] should_fail_ex+0x414/0x560 [ 333.331137][ T8589] should_failslab+0xa8/0x100 [ 333.331161][ T8589] kmem_cache_alloc_noprof+0x73/0x3c0 [ 333.331181][ T8589] ? skb_clone+0x212/0x3a0 [ 333.331207][ T8589] skb_clone+0x212/0x3a0 [ 333.331231][ T8589] __netlink_deliver_tap+0x404/0x850 [ 333.331274][ T8589] ? netlink_deliver_tap+0x2e/0x1b0 [ 333.331305][ T8589] netlink_deliver_tap+0x19c/0x1b0 [ 333.331335][ T8589] netlink_unicast+0x730/0x8e0 [ 333.331376][ T8589] netlink_sendmsg+0x805/0xb30 [ 333.331427][ T8589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.331466][ T8589] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 333.331486][ T8589] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.331516][ T8589] __sock_sendmsg+0x21c/0x270 [ 333.331546][ T8589] ____sys_sendmsg+0x505/0x830 [ 333.331584][ T8589] ? __pfx_____sys_sendmsg+0x10/0x10 [ 333.331626][ T8589] ? import_iovec+0x74/0xa0 [ 333.331660][ T8589] ___sys_sendmsg+0x21f/0x2a0 [ 333.331694][ T8589] ? __pfx____sys_sendmsg+0x10/0x10 [ 333.331772][ T8589] ? __fget_files+0x2a/0x420 [ 333.331794][ T8589] ? __fget_files+0x3a0/0x420 [ 333.331829][ T8589] __x64_sys_sendmsg+0x19b/0x260 [ 333.331864][ T8589] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 333.331908][ T8589] ? __pfx_ksys_write+0x10/0x10 [ 333.331924][ T8589] ? rcu_is_watching+0x15/0xb0 [ 333.331953][ T8589] ? do_syscall_64+0xbe/0x3b0 [ 333.331980][ T8589] do_syscall_64+0xfa/0x3b0 [ 333.332001][ T8589] ? lockdep_hardirqs_on+0x9c/0x150 [ 333.332022][ T8589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.332043][ T8589] ? clear_bhb_loop+0x60/0xb0 [ 333.332069][ T8589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.332089][ T8589] RIP: 0033:0x7f6f6e18eb69 [ 333.332109][ T8589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.332127][ T8589] RSP: 002b:00007f6f6f0d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.332150][ T8589] RAX: ffffffffffffffda RBX: 00007f6f6e3b5fa0 RCX: 00007f6f6e18eb69 [ 333.332165][ T8589] RDX: 0000000000000000 RSI: 0000200000005840 RDI: 0000000000000003 [ 333.332179][ T8589] RBP: 00007f6f6f0d6090 R08: 0000000000000000 R09: 0000000000000000 [ 333.332192][ T8589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.332204][ T8589] R13: 0000000000000000 R14: 00007f6f6e3b5fa0 R15: 00007ffd61c9fba8 [ 333.332240][ T8589] [ 333.620833][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 333.957216][ T5968] usb 6-1: Using ep0 maxpacket: 16 [ 333.968300][ T5968] usb 6-1: too many configurations: 29, using maximum allowed: 8 [ 334.148201][ T8594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 334.218737][ T9] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 334.225585][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 334.230727][ T7235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 334.270686][ T5968] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 334.279874][ T5968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.296168][ T5968] usb 6-1: Product: syz [ 334.303532][ T5968] usb 6-1: Manufacturer: syz [ 334.335756][ T5968] usb 6-1: SerialNumber: syz [ 334.385217][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.396589][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 334.869256][ T7235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 334.880673][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 335.071628][ T5968] r8152-cfgselector 6-1: Unknown version 0x0000 [ 335.092643][ T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 335.101900][ T5968] r8152-cfgselector 6-1: config 0 descriptor?? [ 335.119104][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.164422][ T9] usb 3-1: config 0 descriptor?? [ 335.212590][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 335.277353][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 335.311397][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 335.330539][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 335.346625][ T9] usb 3-1: media controller created [ 335.364204][ T5968] r8152-cfgselector 6-1: USB disconnect, device number 6 [ 335.384034][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 335.428474][ T8590] dvb-usb: bulk message failed: -22 (2/0) [ 335.477463][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 335.483348][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 335.491055][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 335.589955][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14 [ 335.680138][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 335.713598][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 335.753390][ T9] usb 3-1: USB disconnect, device number 9 [ 335.851127][ T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 335.992521][ T5968] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 336.128891][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 336.140981][ T49] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 336.189502][ T5968] usb 1-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 336.228574][ T5968] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.343619][ T5968] usb 1-1: Product: syz [ 336.481223][ T8618] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 337.123290][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 337.137168][ T5968] usb 1-1: Manufacturer: syz [ 337.141825][ T5968] usb 1-1: SerialNumber: syz [ 337.197618][ T5968] usb 1-1: config 0 descriptor?? [ 337.282674][ T5968] comedi comedi5: This driver needs USB 2.0 to operate. Aborting... [ 337.373031][ T5968] usbduxfast 1-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 337.408205][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 337.497400][ T5968] usb 1-1: USB disconnect, device number 22 [ 338.047445][ T31] INFO: task syz.4.282:7112 blocked for more than 143 seconds. [ 338.048276][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 338.055041][ T31] Not tainted 6.16.0-syzkaller #0 [ 338.055058][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 338.055069][ T31] task:syz.4.282 state:D stack:28328 pid:7112 tgid:7110 ppid:5838 task_flags:0x400140 flags:0x00024004 [ 338.111352][ T7301] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 338.553054][ T31] Call Trace: [ 338.556434][ T31] [ 338.637171][ T31] __schedule+0x16aa/0x4c90 [ 338.678731][ T31] ? schedule+0x165/0x360 [ 338.683152][ T31] ? __pfx___schedule+0x10/0x10 [ 338.688772][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 338.747325][ T31] ? schedule+0x91/0x360 [ 338.759083][ T31] schedule+0x165/0x360 [ 338.763298][ T31] schedule_preempt_disabled+0x13/0x30 [ 338.811439][ T31] __mutex_lock+0x724/0xe80 [ 338.816043][ T31] ? __mutex_lock+0x51b/0xe80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 338.857151][ T31] ? relay_open+0x3b8/0x920 [ 338.861772][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 338.866833][ T31] ? pcpu_alloc_noprof+0xf85/0x16b0 [ 338.937454][ T31] relay_open+0x3b8/0x920 [ 338.941891][ T31] do_blk_trace_setup+0x591/0x9d0 [ 338.947014][ T31] blk_trace_setup+0x116/0x1f0 [ 338.987288][ T31] ? __pfx_blk_trace_setup+0x10/0x10 [ 338.992673][ T31] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 339.037127][ T31] blk_trace_ioctl+0x181/0x430 [ 339.041986][ T31] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 339.087419][ T31] ? smk_access+0x14c/0x4e0 [ 339.092025][ T31] ? smk_tskacc+0x2fc/0x370 [ 339.096656][ T31] ? __pfx_smack_file_ioctl+0x10/0x10 [ 339.181817][ T31] blkdev_ioctl+0x416/0x6d0 [ 339.186415][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 339.221086][ T31] ? __fget_files+0x2a/0x420 [ 339.225771][ T31] ? bpf_lsm_file_ioctl+0x9/0x20 [ 339.267205][ T31] ? __pfx_blkdev_ioctl+0x10/0x10 [ 339.272296][ T31] __se_sys_ioctl+0xfc/0x170 [ 339.276957][ T31] do_syscall_64+0xfa/0x3b0 [ 339.336658][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.358755][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.364938][ T31] ? clear_bhb_loop+0x60/0xb0 [ 339.417115][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.437515][ T31] RIP: 0033:0x7fc241d8eb69 [ 339.441999][ T31] RSP: 002b:00007fc242c6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.507354][ T31] RAX: ffffffffffffffda RBX: 00007fc241fb5fa0 RCX: 00007fc241d8eb69 [ 339.557127][ T31] RDX: 0000200000000100 RSI: 00000000c0481273 RDI: 0000000000000005 [ 339.565175][ T31] RBP: 00007fc241e11df1 R08: 0000000000000000 R09: 0000000000000000 [ 339.627435][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.636207][ T31] R13: 0000000000000000 R14: 00007fc241fb5fa0 R15: 00007fff777ec568 [ 339.687222][ T31] [ 339.690469][ T31] [ 339.690469][ T31] Showing all locks held in the system: [ 339.747246][ T31] 2 locks held by kworker/u8:1/13: [ 339.752438][ T31] #0: ffff88801fb82148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 339.968820][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 340.021597][ T31] #1: ffffc90000127bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 340.117148][ T31] 1 lock held by khungtaskd/31: [ 340.122059][ T31] #0: ffffffff8e13f0e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 340.167192][ T31] 2 locks held by kworker/u8:6/1165: [ 340.172547][ T31] #0: ffff88801fb82148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 340.265822][ T31] #1: ffffc90003d7fbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 340.337118][ T31] 2 locks held by kworker/u8:9/3534: [ 340.342456][ T31] 2 locks held by getty/5598: [ 340.387111][ T31] #0: ffff888035b2a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 340.396951][ T31] #1: ffffc900036cb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 340.517435][ T31] 6 locks held by kworker/1:4/5903: [ 340.522707][ T31] #0: ffff8881442d1548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 340.607635][ T3534] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 340.618795][ T7146] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 340.618802][ T7235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 340.647173][ T31] #1: ffffc900044efbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 340.707223][ T31] #2: ffff888144f26198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 340.716342][ T31] #3: ffff88802822e198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 340.797199][ T31] #4: ffff888059ec5160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 340.806571][ T31] #5: ffffffff8dfe4850 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 Stopping sshd: [ 340.897195][ T31] 3 locks held by kworker/1:7/5927: [ 340.902602][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 340.977176][ T31] #1: ffffc9000466fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 341.027289][ T31] #2: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 341.077175][ T31] 3 locks held by kworker/0:6/5968: [ 341.082456][ T31] 5 locks held by syz.3.30/6091: [ 341.117219][ T31] #0: ffff888035104dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 341.147247][ T31] #1: ffff8880351040b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 stopped /usr/sbin/sshd (pid 5597) [ 341.157037][ T31] #2: ffffffff8f672108 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 OK [ 341.207145][ T31] #3: ffff88802698cb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 341.216609][ T31] #4: ffffffff8e144bf8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 341.249220][ T31] 2 locks held by syz.1.205/6765: [ 341.254589][ T31] 2 locks held by syz.4.282/7112: [ 341.277179][ T31] #0: ffff88814339cd98 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_setup+0xfb/0x1f0 [ 341.307525][ T31] #1: ffffffff8e192ee8 (relay_channels_mutex){+.+.}-{4:4}, at: relay_open+0x3b8/0x920 [ 341.327202][ T31] 2 locks held by kworker/u8:11/7235: [ 341.332631][ T31] 3 locks held by syz.6.659/8620: [ 341.337788][ T7235] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 341.367181][ T31] #0: ffff88807e68cdc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 341.403558][ T31] #1: ffff88807e68c0b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 341.437466][ T31] #2: ffffffff8f672108 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 341.467545][ T31] 3 locks held by syz.5.661/8625: Stopping crond: [ 341.472630][ T31] #0: ffff888032e14dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 341.517718][ T31] #1: ffff888032e140b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 341.547255][ T31] #2: ffffffff8f672108 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 341.567352][ T31] 3 locks held by syz.2.662/8628: [ 341.572432][ T31] #0: ffff8880307b8dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 stopped /usr/sbin/crond (pid 5580) OK [ 341.627431][ T31] #1: ffff8880307b80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 341.649836][ T31] #2: ffffffff8f672108 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 341.667105][ T31] 2 locks held by start-stop-daem/8644: [ 341.676487][ T31] [ 341.697888][ T31] ============================================= [ 341.697888][ T31] [ 341.717191][ T31] NMI backtrace for cpu 0 [ 341.717213][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 341.717235][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.717246][ T31] Call Trace: [ 341.717254][ T31] [ 341.717265][ T31] dump_stack_lvl+0x189/0x250 [ 341.717294][ T31] ? __wake_up_klogd+0xd9/0x110 [ 341.717333][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.717356][ T31] ? __pfx__printk+0x10/0x10 [ 341.717405][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 341.717439][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 341.717466][ T31] ? _printk+0xcf/0x120 [ 341.717496][ T31] ? __pfx__printk+0x10/0x10 [ 341.717523][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 341.717556][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 341.717589][ T31] watchdog+0xfee/0x1030 [ 341.717622][ T31] ? watchdog+0x1de/0x1030 [ 341.717660][ T31] kthread+0x70e/0x8a0 [ 341.717691][ T31] ? __pfx_watchdog+0x10/0x10 [ 341.717718][ T31] ? __pfx_kthread+0x10/0x10 [ 341.717747][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 341.717766][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.717785][ T31] ? __pfx_kthread+0x10/0x10 [ 341.717812][ T31] ret_from_fork+0x3fc/0x770 [ 341.717835][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 341.717862][ T31] ? __switch_to_asm+0x39/0x70 [ 341.717884][ T31] ? __switch_to_asm+0x33/0x70 [ 341.717906][ T31] ? __pfx_kthread+0x10/0x10 [ 341.717933][ T31] ret_from_fork_asm+0x1a/0x30 [ 341.717976][ T31] [ 341.717983][ T31] Sending NMI from CPU 0 to CPUs 1: [ 341.874769][ C1] NMI backtrace for cpu 1 [ 341.874789][ C1] CPU: 1 UID: 0 PID: 137 Comm: kworker/u8:5 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 341.874808][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 341.874819][ C1] Workqueue: bat_events batadv_nc_worker [ 341.874848][ C1] RIP: 0010:deref_stack_reg+0x1bd/0x230 [ 341.874868][ C1] Code: 30 4c 89 c7 49 89 f7 e8 11 08 00 00 49 89 c6 48 8b 5c 24 18 48 89 d8 48 c1 e8 03 42 80 3c 38 00 74 08 48 89 df e8 e3 3b ad 00 <4c> 89 33 b0 01 eb 02 31 c0 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f [ 341.874882][ C1] RSP: 0018:ffffc90000a086c0 EFLAGS: 00000246 [ 341.874895][ C1] RAX: 1ffff92000141111 RBX: ffffc90000a08888 RCX: 0000000000000001 [ 341.874907][ C1] RDX: ffffc90000a08888 RSI: dffffc0000000000 RDI: ffffc90000a08838 [ 341.874935][ C1] RBP: 1ffff92000141109 R08: ffffc90000a08838 R09: 0000000000000000 [ 341.874947][ C1] R10: ffffc90000a08898 R11: fffff52000141115 R12: 1ffff9200014110a [ 341.874959][ C1] R13: 1ffff9200014110b R14: ffffc90000a088d0 R15: dffffc0000000000 [ 341.874970][ C1] FS: 0000000000000000(0000) GS:ffff888125d57000(0000) knlGS:0000000000000000 [ 341.874983][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 341.874995][ C1] CR2: 00007f15d8e3ceb8 CR3: 00000000294b8000 CR4: 00000000003526f0 [ 341.875011][ C1] Call Trace: [ 341.875018][ C1] [ 341.875029][ C1] unwind_next_frame+0x17c4/0x2390 [ 341.875059][ C1] ? unwind_next_frame+0xa5/0x2390 [ 341.875076][ C1] ? __unwind_start+0xf8/0x760 [ 341.875095][ C1] __unwind_start+0x5b9/0x760 [ 341.875113][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 341.875134][ C1] arch_stack_walk+0xe4/0x150 [ 341.875155][ C1] ? arch_stack_walk+0xe4/0x150 [ 341.875173][ C1] stack_trace_save+0x9c/0xe0 [ 341.875192][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 341.875221][ C1] ? __lock_acquire+0xab9/0xd20 [ 341.875237][ C1] kasan_save_track+0x3e/0x80 [ 341.875284][ C1] kasan_save_free_info+0x46/0x50 [ 341.875303][ C1] __kasan_slab_free+0x62/0x70 [ 341.875317][ C1] ? slab_free_after_rcu_debug+0x60/0x2a0 [ 341.875338][ C1] kfree+0x18e/0x440 [ 341.875361][ C1] ? rcu_core+0xc34/0x1710 [ 341.875376][ C1] slab_free_after_rcu_debug+0x60/0x2a0 [ 341.875396][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 341.875415][ C1] ? rcu_core+0xc34/0x1710 [ 341.875430][ C1] rcu_core+0xca5/0x1710 [ 341.875453][ C1] ? __pfx_rcu_core+0x10/0x10 [ 341.875471][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 341.875487][ C1] ? sched_clock_cpu+0x74/0x430 [ 341.875504][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 341.875530][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 341.875546][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 341.875569][ C1] handle_softirqs+0x283/0x870 [ 341.875587][ C1] ? do_softirq+0xec/0x180 [ 341.875605][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 341.875624][ C1] ? rcu_is_watching+0x15/0xb0 [ 341.875640][ C1] ? batadv_nc_purge_paths+0x318/0x3b0 [ 341.875656][ C1] do_softirq+0xec/0x180 [ 341.875670][ C1] [ 341.875676][ C1] [ 341.875682][ C1] ? __pfx_do_softirq+0x10/0x10 [ 341.875697][ C1] ? __lock_acquire+0xab9/0xd20 [ 341.875715][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 341.875738][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 341.875754][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 341.875772][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 341.875793][ C1] ? batadv_nc_purge_paths+0x318/0x3b0 [ 341.875807][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 341.875825][ C1] batadv_nc_purge_paths+0x318/0x3b0 [ 341.875846][ C1] batadv_nc_worker+0x328/0x610 [ 341.875870][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 341.875888][ C1] process_scheduled_works+0xade/0x17b0 [ 341.875919][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 341.875943][ C1] worker_thread+0x8a0/0xda0 [ 341.875972][ C1] kthread+0x70e/0x8a0 [ 341.875993][ C1] ? __pfx_worker_thread+0x10/0x10 [ 341.876009][ C1] ? __pfx_kthread+0x10/0x10 [ 341.876035][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 341.876049][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.876070][ C1] ? __pfx_kthread+0x10/0x10 [ 341.876090][ C1] ret_from_fork+0x3fc/0x770 [ 341.876106][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 341.876124][ C1] ? __switch_to_asm+0x39/0x70 [ 341.876142][ C1] ? __switch_to_asm+0x33/0x70 [ 341.876159][ C1] ? __pfx_kthread+0x10/0x10 [ 341.876179][ C1] ret_from_fork_asm+0x1a/0x30 [ 341.876204][ C1] [ 342.497709][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 342.504631][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 342.514375][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 342.524455][ T31] Call Trace: [ 342.527756][ T31] [ 342.530711][ T31] dump_stack_lvl+0x99/0x250 [ 342.535334][ T31] ? __asan_memcpy+0x40/0x70 [ 342.539961][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.545185][ T31] ? __pfx__printk+0x10/0x10 [ 342.549824][ T31] panic+0x2db/0x790 [ 342.554803][ T31] ? __pfx_panic+0x10/0x10 [ 342.559261][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 342.565118][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 342.570543][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 342.576743][ T31] watchdog+0x102d/0x1030 [ 342.581094][ T31] ? watchdog+0x1de/0x1030 [ 342.585535][ T31] kthread+0x70e/0x8a0 [ 342.589623][ T31] ? __pfx_watchdog+0x10/0x10 [ 342.594324][ T31] ? __pfx_kthread+0x10/0x10 [ 342.598933][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 342.604150][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.609358][ T31] ? __pfx_kthread+0x10/0x10 [ 342.613964][ T31] ret_from_fork+0x3fc/0x770 [ 342.618568][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 342.623691][ T31] ? __switch_to_asm+0x39/0x70 [ 342.628464][ T31] ? __switch_to_asm+0x33/0x70 [ 342.633238][ T31] ? __pfx_kthread+0x10/0x10 [ 342.637842][ T31] ret_from_fork_asm+0x1a/0x30 [ 342.642626][ T31] [ 342.645917][ T31] Kernel Offset: disabled [ 342.650235][ T31] Rebooting in 86400 seconds..