last executing test programs: 9m50.349348628s ago: executing program 0 (id=222): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffffffff5]}, 0x8, 0x0) ppoll(&(0x7f0000000000)=[{r4, 0x4180}], 0x1, 0x0, 0x0, 0x0) close$binfmt(r4) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xfd, 0x9, 0xa9, 0x4, 0x0, 0x2, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x4, 0x0, 0x5e, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) 9m49.335554306s ago: executing program 0 (id=227): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/meminfo\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, 0x0}) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, &(0x7f0000000040)=""/97, 0x61, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e21, @broadcast}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={0x0, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}}, 0x10) 9m49.023576517s ago: executing program 0 (id=228): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711805000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f00000100000012"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={r0, 0x0, 0x0}, 0x20) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)={0x2, 0xf, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, [@sadb_x_policy={0x0, 0x12, 0x3, 0x1, 0x0, 0x6e6bb4, 0x6, {0x0, 0xff, 0xa, 0x7, 0x0, 0xfffff800, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x42}, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}}}, @sadb_address={0x2, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private2}}]}, 0x60}}, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000340)={0x0, 0x2, &(0x7f0000000040)=[0xd, 0x8000], &(0x7f0000000080)=[0xb481, 0x5, 0x7], &(0x7f00000002c0)=[0x5, 0xe7, 0x0, 0x8000, 0x9, 0x4, 0xb], &(0x7f0000000300)=[0x2, 0x7]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="2100000000000000000000000000000000040000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000400)) socket$nl_generic(0x10, 0x3, 0x10) r3 = mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mq_notify(r3, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000800)=""/99, &(0x7f0000000380)=0x63) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m48.699411055s ago: executing program 0 (id=230): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000040)=0xfffffff8, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ptrace$peeksig(0x4209, 0x0, &(0x7f0000000040)={0x7, 0x0, 0x2}, &(0x7f0000000240)=[{}, {}]) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r7 = syz_open_dev$sndpcmc(&(0x7f00000003c0), 0x0, 0x0) mmap(&(0x7f0000001000/0xe000)=nil, 0xe000, 0x0, 0x12, r7, 0x0) chroot(&(0x7f0000000200)='./file0\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x14, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x983}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00'}, 0x94) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xce) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x48, 0x2, 0x1, 0x101, 0x0, 0x0, {0x2}, [@CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x80000000}]}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 9m46.516035679s ago: executing program 0 (id=235): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f00000000c0)=0x4) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000900), &(0x7f0000000000)=0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000024c0)=ANY=[@ANYRES32=r3], 0x9) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4, 0x810, r0, 0xe92dc000) 9m45.890575062s ago: executing program 0 (id=240): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x1ea2}, 0x18) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x6, 0x0, 0x0, 0x8000e5}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002c00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff68) write$FUSE_INIT(r5, &(0x7f0000000500)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0xfc1b2d1c5df07dbb, 0x0, 0x441, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r5, &(0x7f00000000c0)={0x80000010}) syz_fuse_handle_req(r5, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0xfffffffffffffffa, {0xfffffffffffffffa, 0x400000, 0x0, {0x3, 0x0, 0x0, 0x5, 0x5, 0x2000000006, 0x200, 0xbaa1, 0x3, 0x1000, 0x0, r7, r8, 0x80000000, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000600)) prctl$PR_SCHED_CORE(0x3e, 0x2, r9, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r11 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r11, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 9m45.314994561s ago: executing program 32 (id=240): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3, 0x0, 0x1ea2}, 0x18) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f000075c000/0x3000)=nil, 0x6, 0x0, 0x0, 0x8000e5}) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002c00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff68) write$FUSE_INIT(r5, &(0x7f0000000500)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0xfc1b2d1c5df07dbb, 0x0, 0x441, 0x100, 0x400008, 0x0, 0x0, 0x2}}, 0x50) r10 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r5, &(0x7f00000000c0)={0x80000010}) syz_fuse_handle_req(r5, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0xfffffffffffffffa, {0xfffffffffffffffa, 0x400000, 0x0, {0x3, 0x0, 0x0, 0x5, 0x5, 0x2000000006, 0x200, 0xbaa1, 0x3, 0x1000, 0x0, r7, r8, 0x80000000, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000600)) prctl$PR_SCHED_CORE(0x3e, 0x2, r9, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r11 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r11, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 9m25.723762655s ago: executing program 2 (id=278): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x2b0}}, 0x20000080) 9m25.423683578s ago: executing program 2 (id=281): r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000000), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000010c0)=[{{0x4, 0x0, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x4, 0x0, 0x0, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002540)=[{{&(0x7f00000000c0)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000340)=""/178, 0xb2}, {&(0x7f0000000400)=""/219, 0xdb}, {&(0x7f0000000240)=""/75, 0x4b}, {&(0x7f0000000a40)=""/203, 0xcb}, {&(0x7f0000000b40)=""/235, 0xeb}], 0x5, &(0x7f00000001c0)=""/35, 0x23}, 0x9}, {{&(0x7f0000000cc0)=@nfc_llcp, 0x80, &(0x7f0000000500)=[{&(0x7f0000000d40)=""/98, 0x62}, {&(0x7f0000000dc0)=""/222, 0xde}], 0x2}, 0x2}, {{&(0x7f0000000ec0)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000f40)=""/132, 0x84}], 0x1}, 0x8400000}, {{&(0x7f0000001040)=@nfc, 0x80, &(0x7f00000024c0)=[{&(0x7f0000001100)=""/101, 0x65}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000002180)=""/232, 0xe8}, {&(0x7f0000002280)=""/217, 0xd9}, {&(0x7f0000002380)=""/248, 0xf8}, {&(0x7f0000002480)=""/51, 0x33}], 0x6}, 0xfffffff9}], 0x4, 0x2041, &(0x7f0000002640)) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x8000000000000, 0x0, 0x80c0}, 0x8004) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) 9m22.65569222s ago: executing program 2 (id=288): r0 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) r1 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r3, 0xc0845657, &(0x7f0000000340)={0x0, @reserved}) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000009c0), 0x0, 0x20008050) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000f00)={0x2020}, 0x2020) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x1, 0x3f, 0x9, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r5, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x3, 0x5, 0x4, 0x0, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000100)='A', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000000)={&(0x7f0000000200)='1', 0x1, 0x0}) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000400)={r6}) ftruncate(r0, 0x200004) 9m21.68468807s ago: executing program 2 (id=289): r0 = gettid() timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4, @tid=r0}, &(0x7f0000044000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000003a00)={0x3, &(0x7f00000000c0)=[{0x6}, {0xd0, 0xf, 0x5, 0x7}, {0x0, 0x6, 0xd, 0x8}]}) socket$inet_mptcp(0x2, 0x1, 0x106) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="f514e70259b6c68b5e94ff18c368e03b123da1bf837a67290bdd4b223d59f34e47fd76e35ad675b972b9d094ce9c007ce98e443c5c5b163d42a1e28b012c0755c73aa144739e3bf4d2eb09773f9746383ee6c819a15c1f96556ac9b0cfb5d10e0c8bdd6641088c7ea1b106ce946d28896e6d4bae56e4635e518b278f09110853cbf5ca9b0a4cf8a00d718baae6fce1853bc1cde60980816ac5e44b78e431fa25f294583a10761f6778f16fc1f663ea96b4aa7b9aae2d542f217216e0c284b25663", @ANYRESDEC=r0], 0x50) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x20008, r1, 0x1000000000000}, 0x38) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) fstatfs(r2, &(0x7f0000000140)=""/166) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$netlink(0x10, 0x3, 0x0) write$binfmt_script(r4, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x64, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000002740)=0x401, 0x4) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f0000000240)=0x3, 0xfffffffffffffff9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x1127057, 0x0) mount$bind(&(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x129c51, 0x0) 9m21.398096292s ago: executing program 2 (id=290): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) ioctl$KDGKBMODE(0xffffffffffffffff, 0x4b44, &(0x7f0000000300)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="c89339f96fa636ba2f527aaa37159cc815448e015b23284d531bdd25a86c02e88b8f962021a37fd9614193094b27b21bf40bc7b43441ae5179a127ea80e91899e1f10a7045c4412bb7997ff8838923521fe0754832209cd546f4ed81500298511e080ec7059b1c32c07fd26f721c6611b8cb344a3fd8f7a889c50a42881e09d4d7ee7ee6c308a13ae6436c858933dc99f71924b68ae0faf95b0afcd3533bcc32840737f434728a12e99aea5c4ee6a603636560b8d9de530d395181e440c1a025ff8d6f33062f14ba2403a178e32ff2d4ec5d0d2c83233b01a41103ef38daeed650987abebe0e8ba7effc07bb5dbbc9a38a11f082f2c99937942f017c37a59572f5069ca709702ef133aa9730ebb5b72687f6175906dbc32289108cc93e5c84284bc701a0629e12eca8c15e763acd011323b758fdb82a63665c906b176042a6c601b5428722c8f6b795a4effc0d4c9a4b4963ae30e77afa0b473d27f4938b1f081765f30aee60de80b1154e3afc3593cad6a146f1c4e954a6b7535f7c4f1baf0e7280ae8957eb14aecb29cc42be434b6a73840fb4668ab11c7ad5f300d7561aa60619fc26a1bfe8fa4858b8b4282d0c9a86c8c2eed644303c1213114081f9cd2358f6609ed25113de321db6b3efbfea341c7318fdcf6776383d3329f080e2386a708679852ee2c28c2ab423163be97f818424b862486791ce5b8b25836a4f07079b65c7c3b2e797eee7f267e5cf37fb63bb89f6b15c332da46b2a313ff6cd958152701a73601c7d02b74622ba7ff9c2fccb1826a3238b95163edcf5dbb381c666fcd8f0ce22eb182135bd8a32c627e20354f2253edb77efadbb48d512ca030763df825c1dd71d34295dc2e75e0a3054354ca6674e2d16ae319c8f3bf7a7fe1e1e596cc2679444c2b5e84a5caaa40136a41a3a35e2ca053d8e4ff2134c2bd7dc2c5c7ef55579a7b569b5face778afba93a877b622f473d942fef36d909b7c17e2ba3948fc889f377f0bce583835ce70b86ee8c419f77c9fa9da33d5f3fd2f994c2229b59db0670a15d7ba9b8b3245c7c2f83953c046528db1d9626877752071b0389bb18edd4d3797b6846e8746911526b6cfb1da1a206f5d13f69d7a8a76f5dfaf02abdfde171ed51a80ca2146fe8a181df5f9c9e969c1e2113bb355a956dd0139446d7e5b1ae338513459753977c245177ed5ae398bb23ad503739c2d75b99d70af19a2faf0a6922585378c0c881298f5af7dc63f99b40be3aea8c25bb8f599ffc4d47caec400357f2fa0675c5a81141d6b1697a92f7ab1e465361bdec4bc837595cc257aac0bcd3333eef2199c622268f0aafdccf73b3fda6ddef6102aa03c1a07a85509025be45443e71d63e4a8b54cde98554b1dd9a2f431b62d29f0cf67e069c15988b8b78c6c66f7f1d831e6307473250bf66b88c1c326faa8f093f03824980bbddc34e2324754fdaafa45ea1a1cc4baaef3104108c8e7987696d3634aa61cd9af0f2b5e427eff51cc66792a37a6e09278c6457a92a84d2fd23f7a753120758e5ca80582848d537d2704315ee55374ca8204c427c8f1138c901a29f83c0b63fb00dca30a90aa0b81d09fad2bf556100a3f762dcafd44d89936f8d5e037bff746a3d7f769ef8045ca50b1f7e8b24b723f06b5582564133e8d6b9f78c0e0d19c6808b65aa19e0dbd18527e5cf4f1c2a7e9b9dcf996d781b0851b925a02a02a9ec2887fa049d10bf8e3cf99157df4f6708c9b3673e565ad47f3518d45c69e4c18f511a9973938279a0c607d4d5b010b83b7edf9dc91ac7b9dabcabf45f4abf863c87c9671b22421600e6358ab3798afeabb0021b587e125b4f599271228944365b1333e3a9f5cc7211fde35179bc2237a26d11b9ed5387644e34efbffb54c615c7e52efc06b425d43d85227f73d7d7a7435c4bf35c76be6e5daf24785f197710503a7cf3c6bde5d5f9ac3312f50af0bcd4e05313bf02e8737761c47957cdb07f1efe8468502e58e1ef9d02582fdfe2db9c1300d99d97b2b339b73a78ef91206a8f08a21988076987ca3b6e361bdd86fb74a9184789586a1815935d837fa7590ec4ae4aa838bcc5cc94c9193b4f3084f9854f21223bc2d8fb4cb4f888ebf6dc9daed2b5f36a964955daf5fac1e69e40952b09e3124491d9d6db5eb2529c0d0a6d7a9329a05a9d4d05a9fb55711786daca3519573d1a19c9200561e9e08d74190583fc4127d99ec251cc2597ddfc77562ebcb0c4107ed839e8d4e39cf048f7c3bf4d3af99d32b419f7e46cb70d23039bf965874be68923e7947fcc8f6182f620576221209a1781eb0e490d53831a01e5c3bb406b8004534c5f5c631a6a46a06bbd56c4d309f8e7f1de903dc9561cd23cb9a7ab63db127ab22adf1294aaab41e73bc067935901e66de985aafb506744c96d12af55e5961718a250ccde0db9dc94c5ab817448f193f922361f8d3043d4095ab1bb1126580c094f5f0356773fca30f963c2cf97c033c634a057d376140faeff8e19273749acc9322c94ec87d0f4b70615b76f8e2b256daa5c034382a1b93889081862c20dd2b956566321f69b192fc7f2bc135bdb2bd9575cfff340bfdddc21ce37647f7e34724286e5faf447e039e67fd64938a40151d9aedbb772a059b0ff3d2dd8c2b7f96df3b48f611758e28ad8812fee6708cc39e77bb55743db0df4cc08653c78182adc3a67db7e760d5f3741d6ee241576d0c55d5c40b5932769d80e2a687ec05c7f4c3f137ffdc5abe3e7039fd5a86990374ff0b00192088182e82b970c5bf0cfc054ca99aa225a69df5519a78fa31ca37ced124e84ded418aa9868a5ff95334ada067084fa98e5fdf353285836246154b0eef9ec625c855721a6cd0c649b6d2f72e600ebdbcfc207347a3d083033b03fb233946e9aca086456ef2bb02efff8e7953d833eb986c22afac7fd3753c19a7fd39e4d1f709e70272013b41614df4f1db326250b5588de369c7a8bf3842acf15c78a4d3881a6e092877665ef63e88dc97dd72d38612d5380abc72b9266cd325f05fe16ef0a01799e33adbff1d86d0980d2ed3f496495e5b7f41278c9498d1616db7ba860ffb87aee648df3f19bffa2edafb89940f930fd8beb2825492305b074757730accb8d20c847dd4d8beabc318c78cccfbc406314fea2da4b4cb8a67371bbce9dd7ec2d3c5b4ea21059130fa76fefdb4a7669ee25748468ef2d78088d1b3bb997ae4d51b5b739acfbd3bb1236db07dbcd0c810c07c73e5c6735a0be9d539d5c6caae62b3707d1a18cec5e16cac8575484604ca884e4f91c9bad2476f18be0b873a2cbe9c997335479b8487919a78922fd5175e8dd3b571a7677e6ac9f82e4e7c67cdfcb9ceee59b08a51bbc737bdff9b6e2250877d44a8d8c1d5ef113b2372833307be3cf0db834d043f529db04185b557910009d92cdfaa07c0533483459294a3e3da555c29416e1af2ec90b4b891e028e5af3ff5b274a0dc93ad4a3a33f886675f86bd1573bea665221e6bda9e2682bc00de3e603531f5e7d7a52c5fec65f478414833e22f36fe2b18930be9e4ef6367955623a9b938f79ff7e288678344c378b2bfd168e4c929357ab39640d677bcc17ac12fd999f3d4cd17b25a26e2bf78bcf9f898e89af6af47390908d5ea767f516cd4194165cea481c8f7ab946b66aa3083f21c02e7d61c19a4358c1cc92503c6e3bb1e7bdeb5badafdda9cec995830f5fadfb3fffe12426db1253db1268e4d3a24ca1d3d06822a439d8ccfb26af736751ac2d6dcec3763eba1c56d8a9f0bb66edb73e0dc9d5b56b23058fa9afa3667ac6188027bda68211b45b5451fb5a7e359fc61cdcf13d1f0965d9fddfd3d5d75684353a8687d18c3970b1c89e217b6cc1c7a34cec7c1e667dcd205346c2a8f85835c186811ab1121136ea83d297eb05a9ac1afa3b33346b392c3e9f479a19f7563531d0519f29868015ff20163530ce8d31bb298801b772dbb65d5caeda85982798a5ccdb4576ecc9378dadb21b3bfbb4cc33b3883164fbb6ac1a0401492c453fe2430a9de3b96d445b2c36e9a82200e00df7649544966c8f39a2d173fd8529ff8ac0f068216ae62f68c21485d6a5638f916cb5c27e5b4859c799b0a6786fd48fbacd83a9a472f50e024fa394537b33d3b4f9301266ea5e2462310ee2b862635d32d780d6411e4e6eb49d1e3732d1a0b8f0aef5bb7fd71cf9f861fad635e321fa146a630ac18d45c425214d79becc8cb97b8cac0ed0155daa9861c57ad549ae9d3cab7259a4b1eeaa72f7fb575f1dfd7268365e194e15518e176a32b82cc13544e75170bccf49161b67f649ebd1b81c85b128312b78e93750bbe9a2c456be9743859c8d80c4ec1dc4fd9d1a059042b058347b8bd02e65d469448953ac787b827fc95071d67ba047ac40ddd8a2503f62bf94457ea53073336cc284b2af1ef5598b0c0a0df3e2d729c43a7307dedb785240ab9cbe89075fb6b7ab8e6482b1ce31332e1bfa3f72e850bcea57260e4ee064ea5cfb629a058fba119e7d09ea4abd1f3b13d5ba5f8fc8abf967baf2da74099fd298e3bf3dc19ccbfe4c5e6be8cdb5e10066eceef59da3fef70c4b3d0d3f1ab7c347b63e3373e3327f9df11c73283234de66a9fa7bd2465318c6ef3a6f6a90b09c547bb93c2e5a1d12af02a0abfbc697c38ae95e1cbfd12706e96bbb2e12aaf6d40b032d61f9ee527bf464d51cc1a80ea0baebaeb8fd0523a7028387c43fc27f5fe6d2880a9f2b69eae550e3dcad889ae61abbfca58140760b53c85cea987e242f9ac38ba50ae7da73", 0xd41}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c354", 0x55}, {&(0x7f0000003240)="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", 0xdc1}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r2, 0xffffffffffffffff, 0x33, 0x0, 0x0, @void, @value=0x0}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) 9m21.063619501s ago: executing program 2 (id=291): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x80000000, @mcast1, 0x4}}, 0x24) r4 = syz_io_uring_setup(0xae, &(0x7f0000000440)={0x0, 0x2a4b, 0x8, 0x0, 0xfffffdfc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040140) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) sendto$unix(0xffffffffffffffff, &(0x7f0000003340)="a3669abdf2b1ea3f241432ef197282deb2746de0c37bdb10be5106157cca20eae865c9efe7a87656f30812499f06b9681737bee9b25e1cab927c9d492c444bb783cb912f54da49fea052c04ac91a172951b210734fb60617bebeaf71d440f12c85505f30b7f9721637f25605cc907d4b64fada7111df3a00000200000000000000000000000000000000001d53167ade0b4d1f6f498a9114cb2ff975de6189ff968d0d15164857323f647d7bd9e1979cf47157421a47f03e86ff0d488be9829810794832bf80fd17362d19f66baea5358af7d3a0c64ec2da42080b6e655bb24437f6838c0401151e9e7197fe81764a3524e545b3c082a9c365", 0xfffffdaa, 0x0, 0x0, 0x0) 9m20.645203448s ago: executing program 33 (id=291): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x80000000, @mcast1, 0x4}}, 0x24) r4 = syz_io_uring_setup(0xae, &(0x7f0000000440)={0x0, 0x2a4b, 0x8, 0x0, 0xfffffdfc}, &(0x7f00000000c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x4, 0x2000, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, 0x0, 0x4040140) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) sendto$unix(0xffffffffffffffff, &(0x7f0000003340)="a3669abdf2b1ea3f241432ef197282deb2746de0c37bdb10be5106157cca20eae865c9efe7a87656f30812499f06b9681737bee9b25e1cab927c9d492c444bb783cb912f54da49fea052c04ac91a172951b210734fb60617bebeaf71d440f12c85505f30b7f9721637f25605cc907d4b64fada7111df3a00000200000000000000000000000000000000001d53167ade0b4d1f6f498a9114cb2ff975de6189ff968d0d15164857323f647d7bd9e1979cf47157421a47f03e86ff0d488be9829810794832bf80fd17362d19f66baea5358af7d3a0c64ec2da42080b6e655bb24437f6838c0401151e9e7197fe81764a3524e545b3c082a9c365", 0xfffffdaa, 0x0, 0x0, 0x0) 7m26.047003093s ago: executing program 4 (id=677): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) socket$kcm(0x21, 0x2, 0x2) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x2}, 0x0, [0x0, 0x3, 0x403, 0x1, 0x8, 0x100, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ec7c00, 0x2, 0x1, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x58, 0x0, 0x0, 0x1, 0xff, 0x0, 0x3, 0x0, 0xa9a4, 0x4, 0x9], [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffd, 0x0, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800, 0x4, 0x0, 0x0, 0x80000, 0x0, 0xfffffffb, 0x0, 0x0, 0x79, 0xfffffffd, 0x0, 0xffffffff, 0x10, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x7fff0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xd572, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffe, 0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x1, 0xfffffffc, 0x6492, 0x8], [0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x1, 0x0, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2, 0xffffffff, 0x4, 0x0, 0xfd32, 0x6, 0xffffffff, 0x0, 0x0, 0x2, 0x2000005, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x9, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae6, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x800, 0xfffff]}, 0x45c) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) listen(r1, 0xfffffffd) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000fd0900008400000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'/28], 0x48) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r3, &(0x7f00000020c0)={0x2020}, 0x2020) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000300)="d170f7f7ef00000000000000ab084fbccef6bf73ecdb33204fc158b4c3f69d39a9d107523932b8ad7860839296b3ba70908819b3e9d40d37ea2eb7dcac627a7879e9a862e6131eee15976b9f567138f732c5d3e27e7c0c6f57a7c78b0089f0a7ce0300d30977c58cfaf9e569910b28b754e584f1a46d6ea79b4565ac9d5f766795fea93e31d5192755507eb07981a23da44c5ac5a358bfe953000000000000000000", 0x1}], 0x0) 7m22.61324388s ago: executing program 4 (id=689): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0xffff0000, 0x10, 0x0, &(0x7f0000000400)="2b206d074843b397737ea49da2ba4c5d", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = syz_open_dev$audion(&(0x7f0000000040), 0xc3f, 0x10002) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0xfffffffffffffeb1, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r5, 0x27, 0x28, 0x0, &(0x7f0000000880)="f8ad1dcc02cb29dcc8003200810066a286ddc6617f503e7457188353133a3d4070574ac945c1be1c", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = userfaultfd(0x80001) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x51}) ppoll(&(0x7f0000000000)=[{r6, 0x20c0}], 0x1, 0x0, 0x0, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newtfilter={0x34, 0x2c, 0x200, 0x70bd27, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000d1}, 0x20000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000100)=ANY=[@ANYRESOCT=r3], &(0x7f0000000000)='GPL\x00', 0x8, 0x98, &(0x7f00000001c0)=""/152, 0x41100, 0xa}, 0x94) 7m21.18019984s ago: executing program 4 (id=695): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80000, 0x0, 0xffffffffffffffff}) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'sit0\x00', 0x0}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000040)={0x0, 0x0, r1, 0x0, 0xdc, 0x7, 0x1, 0xfffffffe, {0x8, 0xfff, 0x9, 0x2, 0xf, 0x40, 0x4, 0x5, 0x5, 0x8c, 0x8, 0x5, 0xe842, 0xa2, "79f817c7fc24d0351eaccfbd5df195369c3c9a6fc046151d46edbd8e6eb06b25"}}) 7m16.163749115s ago: executing program 4 (id=709): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYRES8]) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_getroute={0x28, 0x1a, 0x9e8a232eead7ae69, 0x70bd26, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4}, [@RTA_MULTIPATH={0xc, 0x9, {0x40, 0x3e, 0x3}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xc0002009}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000200)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x3) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000500)={'\x00', 0x7ef, 0x28, 0x9, 0xb, 0xc1ac}) ioctl$BLKTRACESTART(r6, 0x1274, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) 7m15.928767773s ago: executing program 4 (id=712): socket$inet_sctp(0x2, 0x1, 0x84) socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000400)="a38d1ebaa67401aa83cea1a04052671e5687f8e3516041a71afa8e21b1b77d7f00764f0000604e03c30ab9948dd0f840e98c69febbcf358320ab61770c480fdf791feb9259ac97428ab35a663658a6c7be0250e82302c3a49ef7f584cd219f0062bd3c7429168c2ada56720bc3994c03d68d4d94ef5dde7b1dce376d47514d785fd513cb9695ead24de25f4dd027c5ff024add6679b6b25c22b79047f328d64f947d086f5f09490b56530093099f506efa155f65bbdcb8cb948eb23536c90ca6a399497977939d285c1eabcb70906b41c9affd7aa7761841d66a8b43e437b500"/236, 0xec) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'sit0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$sock_bt_hci(r6, 0x400448e3, &(0x7f00000002c0)="5f81d4b03fe350fd67a9b5b68118176bcca74668580463654436b8fcda3a3d2ba697cbcdccbd584dd09ebc938caf1ac64c7dc815282731dc1146f456df24240d5340cec7b1b5c661c962b0a07b582914010d5ec393aa6e95ae9f71ba4296cd4a3fc1e0dd90ec094c20a5e965b358ddb715fedf9ab5055a3102f8b3136287b774582fd5b0614a2172ade1e6b410865793d5d86564") pselect6(0x40, &(0x7f0000000600)={0xfffffffffffffffe, 0x10000000000000, 0x100000000000, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f00000003c0)=0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 7m14.95867072s ago: executing program 4 (id=715): memfd_create(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x7c9ce320e12d300) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448e3, &(0x7f0000000000)={0x0, 0x300, "00291f"}) 7m14.03866863s ago: executing program 34 (id=715): memfd_create(0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x7c9ce320e12d300) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448e3, &(0x7f0000000000)={0x0, 0x300, "00291f"}) 6m19.010854183s ago: executing program 5 (id=908): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x109000, 0x0) write$P9_RSTAT(r0, &(0x7f00000001c0)={0x4d, 0x7d, 0x1, {0x0, 0x46, 0x3ff, 0xfffff5d7, {0x8a, 0x2, 0x1}, 0x80000, 0x8, 0xe, 0xc0d, 0x1, '\x00', 0x1, '\x00', 0x9, '/dev/vcs\x00', 0x8, 'trusted.'}}, 0x4d) fsetxattr(r0, &(0x7f0000000180)=@random={'trusted.', '\x00'}, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000080)={0x17c04, 0xffffffffffffffff, 0x10000009, 0x8cc7, 0x1a, 0x5}) syz_usb_connect(0x0, 0x62, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960d2406010103020001000600060924030505030605810924030601030405050724040501"], 0x0) 6m16.743646568s ago: executing program 5 (id=918): r0 = socket(0xa, 0x3, 0xff) accept4$unix(r0, &(0x7f00000000c0)=@abs, &(0x7f0000000000)=0x6e, 0x800) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@empty, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, "370c89", 0x28, 0x2c, 0x1, @rand_addr=' \x01\x00', @local, {[@hopopts={0xff, 0x3, '\x00', [@ra={0x5, 0x2, 0x7}, @jumbo={0xc2, 0x4, 0x3}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}]}}}}}, 0x0) munlockall() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7000014000000b70300000000000085"], 0x0, 0x7, 0x0, 0x0, 0x41100, 0x9543889d2423ce13}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) recvmsg$unix(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40010180) 6m15.719573018s ago: executing program 5 (id=922): r0 = socket$inet(0x2, 0x4000000805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x200e00, 0x0) bind$pptp(r4, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}}, {0x0, 0xe21, 0x8}}}}}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000012c0)=@nat={'nat\x00', 0x19, 0x5, 0x146, [0x200000000400, 0x0, 0x0, 0x20000000052e, 0x200000000732], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/326]}, 0x1be) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) userfaultfd(0x1) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x204}) r6 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r6, 0x75fa, 0xe475, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}]}) ioctl$sock_SIOCGIFCONF(r4, 0x8912, &(0x7f0000000180)=@buf={0xb5, &(0x7f0000000300)="3a8a190cd36b6cd6da2735531578ae4914ebb78281de081e5546d9bc9724090a9bbbb9db4eda7b39de75bbc61411b745136d4437365f57ede7ea671b8e62d5d0055cac1f152798659cb516c82a14c5cc053302152d27ab1b5da0160860f872c0bc5ae1ccef9e79bdb6ffe2c5fe13b6baeb9b79c6b2a2bfd821eb423ba3c261dd8d21e991dfae30b739c40968b823d5004ef55ee20be2d53daec38ae0378dc101745449ed32ca1a878135da2d6e6e184d5bf5d3c2ec"}) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 6m14.561216284s ago: executing program 5 (id=923): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mkdir(&(0x7f0000000000)='./file0\x00', 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000080)=@keyring={'key_or_keyring:', r0}) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffd, r3, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_io_uring_setup(0x18c3, &(0x7f0000000140)={0x0, 0xa24b, 0x40, 0x3, 0x3a5}, &(0x7f0000000200), &(0x7f0000000240)) io_uring_enter(r5, 0x6340, 0xc918, 0x1b, &(0x7f0000000280), 0x8) ptrace(0x10, r4) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff1000/0xe000)=nil, 0xe000, 0x8, 0x8010, r5, 0x0) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r4, 0x200, &(0x7f00000001c0)={&(0x7f0000000000)="c9453900000000000000000028685636", 0x10}) 6m13.299846364s ago: executing program 5 (id=929): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0xfffffe90) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x70bd28, 0x0, {0x2, 0x18, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0x1000}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x43}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = syz_io_uring_setup(0x1237, &(0x7f0000000380)={0x0, 0x80fd, 0x80, 0x3, 0x2b9}, &(0x7f0000000040)=0x0, &(0x7f0000000200)=0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x11a, 0x3, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x0, 0x0}) io_uring_enter(r4, 0x47bc, 0x0, 0x0, 0x0, 0x0) 6m12.279156537s ago: executing program 5 (id=934): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x71d200, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x301, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4004) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=0xffffffffffffffff) 6m11.012825607s ago: executing program 35 (id=934): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x71d200, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000005, 0x32, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x301, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4004) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000140)=0xffffffffffffffff) 7.579695244s ago: executing program 1 (id=1980): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_team\x00', 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x10001, 0x3, 0x3, 0x1480, 0x1, 0xfd0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xc}, 0x50) ioctl$TUNSETLINK(r1, 0x400454cd, 0x118) socket$kcm(0x10, 0x2, 0x4) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xc59f, 0x4) socket(0xa, 0x3, 0x3a) 6.894010485s ago: executing program 3 (id=1982): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "24747942338921a1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) 6.811681313s ago: executing program 1 (id=1983): r0 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x14c) r1 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_open_dev$vivid(&(0x7f0000000080), 0x0, 0x2) bind$inet(r3, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f00000009c0), 0x0, 0x20008050) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000000f00)={0x2020}, 0x2020) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x1, 0x3f, 0x9, 0x42}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r5, &(0x7f0000001b80), &(0x7f0000001c40)=""/245}, 0x20) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x3, 0x5, 0x4, 0x0, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, 0x0) capset(0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r1, 0xc00464be, &(0x7f0000000400)) ftruncate(r0, 0x200004) 6.162847728s ago: executing program 3 (id=1986): syz_open_procfs(0x0, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3c, 0x8) userfaultfd(0x801) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)=0x3) r2 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) close(r2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000140)="1417eb741abda036fde107ce89630b5479bf2480bcc9c716f18de0f661dee3f2d0b6f824800fd8357a1cdf02fa31d0541d12195aab391ece101ac3b7050fba9acf20867b6f4d21daee3560553c0b4f887e5269f0daa53331e4ee1daa2aadf1ef04fd2ddcb10a6b56a660d71533a494fa3590069d841ea8c326ab", 0x7a}, {&(0x7f0000000200)="ff23ba265e57f9c499d56667889fa7586c86e49b526cb84b69b07ccdcde9c2ca52feb110fe77441d95f069991b1d239d7b66e4feed5dfb24454ce43088598cd91d61332a46ab3d275969325d19b97661e1e4df986ff103b6a8069cc5838fa3bf857df0492ea98253affb82a9ee77ec82e3e183728b4ef1c3c3e5", 0x7a}], 0x2, 0x0, 0x4, 0x8) 5.689922984s ago: executing program 1 (id=1989): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000680)={0x0, 0x0, r1, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000600)={0x0, 0x0, r1, r2, 0x3b, 0x6, 0x7, 0x5b, {0xabac, 0x0, 0x2, 0x3, 0xffff, 0x8, 0x5, 0x100, 0xf, 0x4, 0x8000, 0x4, 0x0, 0x1, "3c07653f7bc421b2e2bd166b8459a3fcded06e494223aa5db3e5e050b399d71c"}}) 5.402102735s ago: executing program 3 (id=1990): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'interleave', '', @val={0x3a, [0x37, 0x2d, 0x4e, 0x3a, 0x2f, 0x36]}}}, 0x4e}]}) 5.401795658s ago: executing program 7 (id=1991): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x301, 0x0, 0x0, 0x0, 0x0, 0x0}) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 5.295632881s ago: executing program 8 (id=1992): socket$inet_sctp(0x2, 0x1, 0x84) socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket(0x10, 0x3, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000001200), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000400)="a38d1ebaa67401aa83cea1a04052671e5687f8e3516041a71afa8e21b1b77d7f00764f0000604e03c30ab9948dd0f840e98c69febbcf358320ab61770c480fdf791feb9259ac97428ab35a663658a6c7be0250e82302c3a49ef7f584cd219f0062bd3c7429168c2ada56720bc3994c03d68d4d94ef5dde7b1dce376d47514d785fd513cb9695ead24de25f4dd027c5ff024add6679b6b25c22b79047f328d64f947d086f5f09490b56530093099f506efa155f65bbdcb8cb948eb23536c90ca6a399497977939d285c1eabcb70906b41c9affd7aa7761841d66a8b43e437b500"/236, 0xec) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000001040)={'sit0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) r6 = fcntl$dupfd(r5, 0x0, r5) write$FUSE_INIT(r6, &(0x7f0000000180)={0x50, 0x24, 0x0, {0x7, 0x28, 0x8001, 0x7130d800, 0x1, 0x5, 0x4003ff, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}}, 0x50) ioctl$sock_bt_hci(r6, 0x400448e3, &(0x7f00000002c0)="5f81d4b03fe350fd67a9b5b68118176bcca74668580463654436b8fcda3a3d2ba697cbcdccbd584dd09ebc938caf1ac64c7dc815282731dc1146f456df24240d5340cec7b1b5c661c962b0a07b582914010d5ec393aa6e95ae9f71ba4296cd4a3fc1e0dd90ec094c20a5e965b358ddb715fedf9ab5055a3102f8b3136287b774582fd5b0614a2172ade1e6b410865793d5d86564") pselect6(0x40, &(0x7f0000000600)={0xfffffffffffffffe, 0x10000000000000, 0x100000000000, 0x0, 0x7}, 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f00000003c0)=0x2) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 5.278228803s ago: executing program 3 (id=1993): r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000580)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @void}}}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x44118, 0x88f}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x7f}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x3}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047c000008004280040008000c000180060010"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) futex_waitv(&(0x7f0000001380)=[{0x4, &(0x7f0000000040)=0x7, 0x82}, {0x5, &(0x7f0000000080)=0x5, 0x2}, {0x7, &(0x7f0000000100)=0x7, 0x82}, {0x8, &(0x7f0000000140)=0x55, 0x82}, {0xe00000, &(0x7f00000001c0)=0x1, 0x2}, {0x7, &(0x7f0000000200)=0x7, 0x2}, {0x80000000, &(0x7f0000000240)=0x1ff, 0x82}, {0x8, &(0x7f0000000280)=0xa, 0x2}, {0xfffffffffffff000, &(0x7f00000002c0)=0x780000000000000, 0x82}, {0x8, &(0x7f0000000300)=0xe0, 0x82}, {0x100, &(0x7f0000000340)=0x7fff, 0x82}, {0x4, &(0x7f0000000380)=0x9, 0x82}, {0xa1a, &(0x7f00000003c0)=0x7e, 0x2}, {0x0, &(0x7f0000000400)=0xffff, 0x82}, {0x1, &(0x7f0000000440)=0xe, 0x82}, {0xffffffffffffffff, &(0x7f0000000480)=0x3, 0x2}, {0x7ff, &(0x7f00000004c0)}, {0x5, &(0x7f0000000500)=0x7}, {0x8, &(0x7f0000000540)=0xffffffffffffffff, 0x2}, {0x7, &(0x7f0000000580)=0x3}, {0x0, &(0x7f00000005c0)=0x8, 0x82}, {0x1, &(0x7f0000000600)=0x9, 0x2}, {0xff, &(0x7f0000000640)=0xfffffffffffffff7, 0x2}, {0x2, &(0x7f0000000680)=0x712b8cb5, 0x2}, {0x5, &(0x7f00000006c0)=0x100000000}, {0x0, &(0x7f0000000700)=0xfffffffffffffeff, 0x2}, {0x6, &(0x7f0000000740)=0x800, 0x82}, {0x4, &(0x7f0000000780)=0x1c5, 0x2}, {0x15d, &(0x7f00000007c0)=0x8, 0x2}, {0x6, &(0x7f0000000800)=0x1, 0x82}, {0x10, &(0x7f0000000840)=0x10, 0x2}, {0x0, &(0x7f0000000880)=0xa901, 0x2}, {0xd32, &(0x7f00000008c0)=0x10001, 0x2}, {0x8, &(0x7f0000000900)=0x7, 0x2}, {0x101, &(0x7f0000000940)=0x8, 0x2}, {0x5, &(0x7f0000000980)=0x6, 0x82}, {0x10000, &(0x7f00000009c0)=0x400, 0x2}, {0x5, &(0x7f0000000a00)=0xfff, 0x2}, {0xfcf, &(0x7f0000000a40)=0x7a, 0x82}, {0x0, &(0x7f0000000a80)=0x7, 0x2}, {0xd, &(0x7f0000000ac0)=0x4, 0x82}, {0xfff, &(0x7f0000000b00)=0x60, 0x2}, {0x8, &(0x7f0000000b40)=0xb4, 0x82}, {0x1c, &(0x7f0000000b80)=0x249a1d67}, {0xb41, &(0x7f0000000bc0)=0xac, 0x2}, {0x5, &(0x7f0000000c00)=0xd54, 0x2}, {0xfffffffffffffffd, &(0x7f0000000c40)=0x5, 0x82}, {0x0, &(0x7f0000000c80)=0x100, 0x2}, {0x0, &(0x7f0000000cc0)=0x9, 0x82}, {0xffffffffffff7fff, &(0x7f0000000d00)=0x7fffffff, 0x2}, {0x7, &(0x7f0000000d40)=0x9, 0x2}, {0x5d, &(0x7f0000000d80)=0x5b, 0x82}, {0x1, &(0x7f0000000dc0)=0x7ff, 0x82}, {0x6, &(0x7f0000000e00)=0x7, 0x82}, {0x4, &(0x7f0000000e40)=0xe6ea, 0x82}, {0x9, &(0x7f0000000e80)=0x7, 0x2}, {0x0, &(0x7f0000000ec0)=0x4, 0x2}, {0x7, &(0x7f0000000f00)=0x5, 0x2}, {0x8000000000000000, &(0x7f0000000f40)=0x8000000000000000, 0x82}, {0x9, &(0x7f0000000f80)=0x7, 0x82}, {0xf1, &(0x7f0000000fc0)=0x7, 0x2}, {0x2, &(0x7f0000001000)=0x8, 0x2}, {0x7, &(0x7f0000001040)=0x7, 0x82}, {0xbb9, &(0x7f0000001080)=0x3, 0x2}, {0x6, &(0x7f00000010c0)=0x518, 0x82}, {0x5, &(0x7f0000001100)=0x8, 0x82}, {0x3, &(0x7f0000001140)=0x7f, 0x2}, {0x1, &(0x7f0000001180)=0x1, 0x82}, {0x9, &(0x7f00000011c0)=0x8, 0x82}, {0x8000000000000001, &(0x7f0000001200)=0x2, 0x2}, {0x0, &(0x7f0000001240)=0x8}, {0x80, &(0x7f0000001280)=0x5, 0x82}, {0x8, &(0x7f00000012c0)=0x225c, 0x2}, {0xfffffffffffffffb, &(0x7f0000001300)=0xd, 0x82}, {0x6, &(0x7f0000001340)=0x6, 0x82}], 0x4b, 0x0, &(0x7f0000001ac0), 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r3, r4, 0x6, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}, 0x40) mq_timedreceive(r4, &(0x7f0000001c40)=""/137, 0x89, 0x760b7b3d, &(0x7f0000001d00)={0x77359400}) r5 = socket(0x40000000015, 0x5, 0x0) close(r5) pipe2$watch_queue(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000001d80)=0xe8) mount$fuseblk(&(0x7f0000000040), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x3802088, &(0x7f0000000640)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {}, 0x2c, {[{@blksize}, {@default_permissions}, {@default_permissions}, {@default_permissions}], [{@obj_type}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '@\\{'}}]}}) mount$9p_fd(0x0, &(0x7f0000001b00)='./cgroup\x00', &(0x7f0000001b40), 0x100000, &(0x7f0000001b80)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '=relative'}}, {@loose}], [{@permit_directio}, {@fowner_gt={'fowner>', r7}}, {@flag='lazytime'}, {@subj_role={'subj_role', 0x3d, 'prefer'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{*,/@@\xea:('}}]}}) socket$nl_generic(0x10, 0x3, 0x10) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x1000040, &(0x7f0000000580)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @void}}}]}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) (async) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x44118, 0x88f}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x7f}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x3}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047c000008004280040008000c000180060010"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) (async) futex_waitv(&(0x7f0000001380)=[{0x4, &(0x7f0000000040)=0x7, 0x82}, {0x5, &(0x7f0000000080)=0x5, 0x2}, {0x7, &(0x7f0000000100)=0x7, 0x82}, {0x8, &(0x7f0000000140)=0x55, 0x82}, {0xe00000, &(0x7f00000001c0)=0x1, 0x2}, {0x7, &(0x7f0000000200)=0x7, 0x2}, {0x80000000, &(0x7f0000000240)=0x1ff, 0x82}, {0x8, &(0x7f0000000280)=0xa, 0x2}, {0xfffffffffffff000, &(0x7f00000002c0)=0x780000000000000, 0x82}, {0x8, &(0x7f0000000300)=0xe0, 0x82}, {0x100, &(0x7f0000000340)=0x7fff, 0x82}, {0x4, &(0x7f0000000380)=0x9, 0x82}, {0xa1a, &(0x7f00000003c0)=0x7e, 0x2}, {0x0, &(0x7f0000000400)=0xffff, 0x82}, {0x1, &(0x7f0000000440)=0xe, 0x82}, {0xffffffffffffffff, &(0x7f0000000480)=0x3, 0x2}, {0x7ff, &(0x7f00000004c0)}, {0x5, &(0x7f0000000500)=0x7}, {0x8, &(0x7f0000000540)=0xffffffffffffffff, 0x2}, {0x7, &(0x7f0000000580)=0x3}, {0x0, &(0x7f00000005c0)=0x8, 0x82}, {0x1, &(0x7f0000000600)=0x9, 0x2}, {0xff, &(0x7f0000000640)=0xfffffffffffffff7, 0x2}, {0x2, &(0x7f0000000680)=0x712b8cb5, 0x2}, {0x5, &(0x7f00000006c0)=0x100000000}, {0x0, &(0x7f0000000700)=0xfffffffffffffeff, 0x2}, {0x6, &(0x7f0000000740)=0x800, 0x82}, {0x4, &(0x7f0000000780)=0x1c5, 0x2}, {0x15d, &(0x7f00000007c0)=0x8, 0x2}, {0x6, &(0x7f0000000800)=0x1, 0x82}, {0x10, &(0x7f0000000840)=0x10, 0x2}, {0x0, &(0x7f0000000880)=0xa901, 0x2}, {0xd32, &(0x7f00000008c0)=0x10001, 0x2}, {0x8, &(0x7f0000000900)=0x7, 0x2}, {0x101, &(0x7f0000000940)=0x8, 0x2}, {0x5, &(0x7f0000000980)=0x6, 0x82}, {0x10000, &(0x7f00000009c0)=0x400, 0x2}, {0x5, &(0x7f0000000a00)=0xfff, 0x2}, {0xfcf, &(0x7f0000000a40)=0x7a, 0x82}, {0x0, &(0x7f0000000a80)=0x7, 0x2}, {0xd, &(0x7f0000000ac0)=0x4, 0x82}, {0xfff, &(0x7f0000000b00)=0x60, 0x2}, {0x8, &(0x7f0000000b40)=0xb4, 0x82}, {0x1c, &(0x7f0000000b80)=0x249a1d67}, {0xb41, &(0x7f0000000bc0)=0xac, 0x2}, {0x5, &(0x7f0000000c00)=0xd54, 0x2}, {0xfffffffffffffffd, &(0x7f0000000c40)=0x5, 0x82}, {0x0, &(0x7f0000000c80)=0x100, 0x2}, {0x0, &(0x7f0000000cc0)=0x9, 0x82}, {0xffffffffffff7fff, &(0x7f0000000d00)=0x7fffffff, 0x2}, {0x7, &(0x7f0000000d40)=0x9, 0x2}, {0x5d, &(0x7f0000000d80)=0x5b, 0x82}, {0x1, &(0x7f0000000dc0)=0x7ff, 0x82}, {0x6, &(0x7f0000000e00)=0x7, 0x82}, {0x4, &(0x7f0000000e40)=0xe6ea, 0x82}, {0x9, &(0x7f0000000e80)=0x7, 0x2}, {0x0, &(0x7f0000000ec0)=0x4, 0x2}, {0x7, &(0x7f0000000f00)=0x5, 0x2}, {0x8000000000000000, &(0x7f0000000f40)=0x8000000000000000, 0x82}, {0x9, &(0x7f0000000f80)=0x7, 0x82}, {0xf1, &(0x7f0000000fc0)=0x7, 0x2}, {0x2, &(0x7f0000001000)=0x8, 0x2}, {0x7, &(0x7f0000001040)=0x7, 0x82}, {0xbb9, &(0x7f0000001080)=0x3, 0x2}, {0x6, &(0x7f00000010c0)=0x518, 0x82}, {0x5, &(0x7f0000001100)=0x8, 0x82}, {0x3, &(0x7f0000001140)=0x7f, 0x2}, {0x1, &(0x7f0000001180)=0x1, 0x82}, {0x9, &(0x7f00000011c0)=0x8, 0x82}, {0x8000000000000001, &(0x7f0000001200)=0x2, 0x2}, {0x0, &(0x7f0000001240)=0x8}, {0x80, &(0x7f0000001280)=0x5, 0x82}, {0x8, &(0x7f00000012c0)=0x225c, 0x2}, {0xfffffffffffffffb, &(0x7f0000001300)=0xd, 0x82}, {0x6, &(0x7f0000001340)=0x6, 0x82}], 0x4b, 0x0, &(0x7f0000001ac0), 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) (async) prlimit64(0x0, 0x2, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4008, 0x2) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r3, r4, 0x6, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x3, 0x0, 0x1}}, 0x40) (async) mq_timedreceive(r4, &(0x7f0000001c40)=""/137, 0x89, 0x760b7b3d, &(0x7f0000001d00)={0x77359400}) (async) socket(0x40000000015, 0x5, 0x0) (async) close(r5) (async) pipe2$watch_queue(&(0x7f0000000340), 0x80) (async) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000540)={{{@in6=@dev, @in=@multicast2}}, {{@in=@multicast2}, 0x0, @in=@private}}, &(0x7f0000001d80)=0xe8) (async) mount$fuseblk(&(0x7f0000000040), &(0x7f00000000c0)='./cgroup\x00', 0x0, 0x3802088, &(0x7f0000000640)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r7}, 0x2c, {}, 0x2c, {[{@blksize}, {@default_permissions}, {@default_permissions}, {@default_permissions}], [{@obj_type}, {@dont_hash}, {@smackfsfloor={'smackfsfloor', 0x3d, '@\\{'}}]}}) (async) mount$9p_fd(0x0, &(0x7f0000001b00)='./cgroup\x00', &(0x7f0000001b40), 0x100000, &(0x7f0000001b80)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cachetag={'cachetag', 0x3d, '=relative'}}, {@loose}], [{@permit_directio}, {@fowner_gt={'fowner>', r7}}, {@flag='lazytime'}, {@subj_role={'subj_role', 0x3d, 'prefer'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '{*,/@@\xea:('}}]}}) (async) 5.248964754s ago: executing program 7 (id=1994): r0 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x7) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000040)='./file1\x00', 0x15c) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000040)=0x1) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf100, 0x0, 0x0, 0x0, 0x2000000}, [@printk={@i, {0x3, 0x3, 0x6}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, &(0x7f0000000400)='GPL\x00', 0x1, 0xe0, &(0x7f0000000440)=""/224}, 0x94) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) 5.194774825s ago: executing program 6 (id=1995): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000480)) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) open(0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendfile(r5, r4, 0x0, 0x2) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 4.874273467s ago: executing program 1 (id=1996): mknod(0x0, 0x20, 0x0) mount(&(0x7f0000000140)=@md0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000980)='noreao-\xa3\xa4\xb3') 4.413495601s ago: executing program 8 (id=1997): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xe, 0x5}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x40) socket$nl_xfrm(0x10, 0x3, 0x6) 3.509979907s ago: executing program 6 (id=1998): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800f5ffffffffff57000000580000000a00000009000000030000040000000009000000020000000900000004000000a776000500000000000000000500000000000000000000000000000300000000030000000400000047d300000b00000000000001000000004e00300000002e614f0030300000"], &(0x7f0000000200)=""/71, 0x7a, 0x47, 0x0, 0x80}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x8, 0x0}, 0x8) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, 0xffffffffffffffff}, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x141842, 0x0) quotactl_fd$Q_QUOTAOFF(r5, 0xffffffff80000301, 0x0, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', 0x0, 0x8}, 0x18) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x3}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r8 = fanotify_init(0x8, 0x0) r9 = epoll_create1(0x0) r10 = fcntl$dupfd(r8, 0x0, r9) fanotify_mark(r10, 0x21, 0x8000000, r10, 0x0) fanotify_mark(r8, 0x22, 0x800101b, r10, 0x0) r11 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400), 0x1810c0, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') renameat2(r12, &(0x7f0000000380)='./cgroup\x00', r12, &(0x7f00000003c0)='./mnt\x00', 0x2) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x56, 0x2}}, './file0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x34, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}}, 0x20008004) r14 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d00000905820200020000000905"], 0x0) syz_usb_control_io$cdc_ncm(r14, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r14, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r14, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x0, 0x0, 0x4, 0x0, 0x80000044, 0x2, 0xe, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r14, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1c, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, [@exit, @ldst={0x2, 0x1, 0x3, 0x1, 0x0, 0xfffffffffffffff0, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x28, '\x00', r0, @fallback=0x14, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0x4, 0x8fd}, 0x10, r2, 0xffffffffffffffff, 0x0, &(0x7f0000000480)=[r3, r4, r5, r6, r7, r10, r11, r12, r13], &(0x7f00000004c0), 0x10, 0x7}, 0x94) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r15, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r15, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r16, @ANYBLOB="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", @ANYRES32=r17], 0x22c}}, 0x0) 3.359572324s ago: executing program 3 (id=1999): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000009a0c00008804000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbc02, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x21, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) 3.339594929s ago: executing program 1 (id=2000): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xfc0, &(0x7f0000001600)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e21, 0x4e20, 0xf9e, 0x0, @wg=@data={0x4, 0x9, 0x7, "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"}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000005600)=[{{0x0, 0x0, &(0x7f0000003980)=[{0x0}, {&(0x7f0000002680)=""/4096, 0x1000}], 0x2}, 0xfffffff1}], 0x1, 0x10061, 0x0) (fail_nth: 2) 3.255373218s ago: executing program 7 (id=2001): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1}) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000001c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x800001, 0xa, 0x0, 0x0, 0xb48, 0x1401da}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000380)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(r7, &(0x7f0000000300)='attr/current\x00') r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x50) memfd_create(&(0x7f0000000180)='attr/current\x00', 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000740), 0x75, r9}, 0x38) openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) 2.799743352s ago: executing program 1 (id=2002): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000101c1b021b0000000000010902"], 0x0) r0 = socket$inet(0xa, 0x801, 0x84) listen(r0, 0x8) unshare(0x28020480) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) (fail_nth: 2) 2.799386443s ago: executing program 8 (id=2003): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f00000000c0)={{0x4, @name="eed2f85b171656fff219560ee7cc3298f18568e4c6c25f6e7d00"}, 0x8, 0x180000040, 0x10000}) 2.651231923s ago: executing program 3 (id=2004): r0 = socket$inet(0x2, 0x4000000805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x200e00, 0x0) bind$pptp(r3, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}}, {0x0, 0xe21, 0x8}}}}}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000400)={0xf0f071, 0x2}) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000012c0)=@nat={'nat\x00', 0x19, 0x5, 0x146, [0x200000000400, 0x0, 0x0, 0x20000000052e, 0x200000000732], 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/326]}, 0x1be) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x204}) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x75fa, 0xe475, 0x0, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}]}) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000180)=@buf={0xb5, &(0x7f0000000300)="3a8a190cd36b6cd6da2735531578ae4914ebb78281de081e5546d9bc9724090a9bbbb9db4eda7b39de75bbc61411b745136d4437365f57ede7ea671b8e62d5d0055cac1f152798659cb516c82a14c5cc053302152d27ab1b5da0160860f872c0bc5ae1ccef9e79bdb6ffe2c5fe13b6baeb9b79c6b2a2bfd821eb423ba3c261dd8d21e991dfae30b739c40968b823d5004ef55ee20be2d53daec38ae0378dc101745449ed32ca1a878135da2d6e6e184d5bf5d3c2ec"}) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.454468328s ago: executing program 8 (id=2005): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x30d000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000001000000000000000000000071122f000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, @cgroup_sock_addr=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x6, 0x80800) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000002c0)={0x400002, r2}) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f00000000c0)={0x400002, 0xffffffffffffffff, 0x1}) 2.379627087s ago: executing program 6 (id=2006): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, 0x0, 0x0) 2.185803228s ago: executing program 6 (id=2007): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000004c0)={0x9, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [], 0xfa}}) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000280)={0x7, {0x65c1, 0x10, 0x81, 0x8}, {0x6, 0x725c, 0x3, 0xd9e}, {0x7, 0x80000000}}) 2.140932656s ago: executing program 8 (id=2008): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000480)) connect$unix(r1, &(0x7f0000000400)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) open(0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendfile(r5, r4, 0x0, 0x2) open_tree(0xffffffffffffff9c, 0x0, 0x89901) 1.923556936s ago: executing program 6 (id=2009): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000140), 0x80000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x1a, 0x80000, 0x2) connect$netlink(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macsec0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001300050000000000005cc4000700", @ANYRES32=r8, @ANYBLOB="00000000000000000c001a800800058004000780"], 0x2c}}, 0x0) connect$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=bind:N-', @ANYRESOCT]) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r6, 0x8948, &(0x7f0000000040)={'wg1\x00', @ifru_data=&(0x7f0000000280)="c2edef919c45f05b0516151848dec341d63aa2a35db5e2191a9ba8dbe9eea33e"}) alarm(0x9) alarm(0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYBLOB="ed4d00000000000000003100000008000300", @ANYBLOB="0b6424d9a035f5aa7360c16bc6b798774118e6c484d2", @ANYBLOB="6c7b913724a34c5a60184ecdce8111b4cf977b01ccea15d600007a062d70b97aa7b622dda09d2fced41a8144447f885a69b6af0edf"], 0x1c}}, 0x0) syz_open_dev$rtc(&(0x7f0000000100), 0x3, 0x10200) migrate_pages(r4, 0x3068243e, &(0x7f0000000180)=0x8000000000000000, &(0x7f00000001c0)=0xa) 1.318694059s ago: executing program 7 (id=2010): mknod(&(0x7f0000000040)='./file0\x00', 0x20, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000980)='noreao-\xa3\xa4\xb3') 912.691243ms ago: executing program 8 (id=2011): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) gettid() timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) 911.742653ms ago: executing program 7 (id=2012): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x40) fcntl$notify(r0, 0x402, 0x1a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 167.34315ms ago: executing program 6 (id=2013): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x6, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000280)="360f78c866b8cf8c00000f23d80f21f86635800000f00f23f83e2626660f38818a00000fbff267660f383d5603b815010f00d8f080950600c9260fc7bfaa00e300660f6173d6", 0x46}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000200)={0x10000, 0x4000}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000180), 0x7, 0x10000) ioctl$HIDIOCAPPLICATION(r7, 0x4802, 0x1820) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r10 = dup(r9) write$FUSE_BMAP(r10, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r10, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000140)=ANY=[], 0x10) write$FUSE_DIRENTPLUS(r10, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r10, @ANYBLOB=',posixacl']) ioctl$HIDIOCSREPORT(r6, 0xc018480b, &(0x7f0000000080)={0x2, 0x100}) 0s ago: executing program 7 (id=2014): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000080)={0x2}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000009a0c00008804000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffefe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0xbc02, 0x10, 0x0, 0x30f}, &(0x7f00000000c0)=0x0, &(0x7f0000000540)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47bc, 0x0, 0x21, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fanotify_init(0x200, 0x0) kernel console output (not intermixed with test programs): 9 but max is 0 [ 469.425774][ T24] usb 9-1: config 7 has no interface number 0 [ 469.446000][ T24] usb 9-1: config 7 interface 79 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 469.457716][ T24] usb 9-1: config 7 interface 79 altsetting 6 endpoint 0x7 has an invalid bInterval 64, changing to 10 [ 469.469549][ T24] usb 9-1: config 7 interface 79 has no altsetting 0 [ 469.483943][ T24] usb 9-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f4.98 [ 469.494356][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.503501][ T24] usb 9-1: Product: syz [ 469.509061][ T24] usb 9-1: Manufacturer: syz [ 469.513820][ T24] usb 9-1: SerialNumber: syz [ 471.323046][ T24] usb 9-1: USB disconnect, device number 4 [ 471.759936][ T5892] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 472.676124][ T5892] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 472.730091][T10452] binder: 10450:10452 ioctl c0306201 200000001a80 returned -14 [ 472.867924][ T5892] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 472.927811][ T5892] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 472.948302][ T5892] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 473.004841][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.041607][T10443] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 473.078622][ T5892] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 473.334515][T10443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.431152][T10443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.983020][ T5907] usb 8-1: USB disconnect, device number 6 [ 477.599610][T10500] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1156'. [ 477.777686][T10500] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1156'. [ 477.906936][ T980] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 477.966970][ T5957] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 478.300661][ T5957] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 478.314034][ T980] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 478.376222][ T5957] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 478.426820][T10510] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1159'. [ 478.451721][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 479.040427][ T5957] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 479.056279][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 479.068647][ T5957] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 479.078152][ T980] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 479.091467][ T5957] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.127398][ T980] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 479.152435][T10505] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 479.195947][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.236207][ T5957] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 479.243952][T10515] cgroup: Unknown subsys name 'cpuset' [ 479.251959][T10514] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1161'. [ 479.260412][ T980] usb 2-1: config 0 descriptor?? [ 479.470916][T10505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.496757][T10505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.822989][T10520] netlink: 80 bytes leftover after parsing attributes in process `syz.8.1163'. [ 479.844562][ T980] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 481.050249][T10502] usb 2-1: string descriptor 0 read error: -2 [ 481.206046][ T5957] usb 2-1: reset high-speed USB device number 24 using dummy_hcd [ 481.348720][ T5957] usb 2-1: device descriptor read/64, error -32 [ 481.675799][ T5957] usb 2-1: reset high-speed USB device number 24 using dummy_hcd [ 482.086954][ T24] usb 8-1: USB disconnect, device number 7 [ 482.115931][ T5957] usb 2-1: device descriptor read/64, error -32 [ 482.425775][ T5957] usb 2-1: reset high-speed USB device number 24 using dummy_hcd [ 482.475462][ T5957] usb 2-1: device descriptor read/8, error -71 [ 483.014091][T10557] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 484.719447][ T980] usb 2-1: USB disconnect, device number 24 [ 488.298566][T10584] netlink: 'syz.1.1177': attribute type 15 has an invalid length. [ 488.327281][T10584] 8021q: VLANs not supported on ip6_vti0 [ 488.339145][T10584] netlink: 'syz.1.1177': attribute type 10 has an invalid length. [ 488.357438][T10584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.369289][T10584] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 489.707077][ T5957] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 489.929712][ T5957] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 489.993171][ T5957] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 490.039118][ T5957] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 490.218758][ T5957] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 490.229160][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.241682][T10605] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 490.376705][T10616] openvswitch: netlink: IPv4 tun info is not correct [ 490.392837][T10617] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1187'. [ 490.417852][ T5957] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 490.622736][T10605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.662951][T10605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.023650][T10640] debugfs: Bad value for 'mode' [ 492.833729][ T5907] usb 2-1: USB disconnect, device number 25 [ 493.196299][ T5836] Bluetooth: hci4: link tx timeout [ 493.201978][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 493.212788][ T5836] Bluetooth: hci4: link tx timeout [ 493.219542][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 493.227786][ T5836] Bluetooth: hci4: link tx timeout [ 493.233036][ T5836] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 493.295387][ T980] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 493.356093][ T5907] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 493.448241][ T980] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.460907][ T980] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 493.472700][ T980] usb 9-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 493.482296][ T980] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.507046][ T980] usb 9-1: config 0 descriptor?? [ 493.716038][ T5907] usb 2-1: Using ep0 maxpacket: 8 [ 493.723646][ T5907] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 493.813299][ T5907] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 493.838192][ T5907] usb 2-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 493.859128][ T5907] usb 2-1: Product: syz [ 493.873627][ T5907] usb 2-1: Manufacturer: syz [ 493.886404][ T5907] usb 2-1: SerialNumber: syz [ 493.901550][ T5907] usb 2-1: config 0 descriptor?? [ 494.034513][ T980] hid (null): global environment stack underflow [ 494.054528][ T980] steelseries 0003:1038:12B6.0011: unknown main item tag 0x1 [ 494.064672][ T980] steelseries 0003:1038:12B6.0011: global environment stack underflow [ 494.074368][ T980] steelseries 0003:1038:12B6.0011: item 0 2 1 11 parsing failed [ 494.083559][ T980] steelseries 0003:1038:12B6.0011: probe with driver steelseries failed with error -22 [ 494.849067][ T5907] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 494.908857][ T5907] gspca_sunplus: reg_w_riv err -71 [ 494.920859][ T5907] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 494.945990][ T5907] usb 2-1: USB disconnect, device number 26 [ 495.246150][ T5836] Bluetooth: hci4: command 0x0405 tx timeout [ 495.681964][T10688] netlink: 'syz.3.1207': attribute type 12 has an invalid length. [ 495.699162][ T5907] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 496.066346][ T5828] usb 9-1: USB disconnect, device number 5 [ 496.082957][ T5907] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 496.115663][ T5907] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 496.141109][ T5907] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 496.159565][ T5907] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 496.170715][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.191471][T10682] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 496.213400][ T5907] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 496.295508][T10693] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1209'. [ 496.400383][T10693] veth3: entered promiscuous mode [ 496.423821][T10682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.435188][T10682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.455932][ T5908] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 496.616004][ T5908] usb 8-1: Using ep0 maxpacket: 16 [ 496.623682][ T5908] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 496.649088][ T5908] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 496.718545][ T5908] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 496.754679][ T5908] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.802057][ T5908] usb 8-1: Product: syz [ 496.820304][ T5908] usb 8-1: Manufacturer: syz [ 496.828716][ T5908] usb 8-1: SerialNumber: syz [ 496.844637][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 496.844683][ T30] audit: type=1400 audit(1752637123.364:225): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=10692 comm="syz.6.1209" saddr=172.30.0.7 daddr=172.20.20.170 netif=wpan0 [ 496.846798][ T5908] usb 8-1: config 0 descriptor?? [ 496.910686][ T5908] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 496.974533][ T5908] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 497.526421][ T5908] em28xx 8-1:0.0: unknown em28xx chip ID (0) [ 497.541058][ T5908] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 498.916799][ T5892] usb 2-1: USB disconnect, device number 27 [ 499.258333][ T5908] em28xx 8-1:0.0: Unknown AC97 audio processor detected! [ 499.281372][ T5908] em28xx 8-1:0.0: couldn't setup AC97 register 2 [ 499.307588][ T5908] em28xx 8-1:0.0: couldn't setup AC97 register 4 [ 499.321546][ T5908] em28xx 8-1:0.0: couldn't setup AC97 register 6 [ 499.340392][ T5908] em28xx 8-1:0.0: couldn't setup AC97 register 54 [ 499.369748][ T5908] em28xx 8-1:0.0: couldn't setup AC97 register 56 [ 499.401790][ T5908] usb 8-1: USB disconnect, device number 8 [ 500.990527][T10751] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1224'. [ 501.661718][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.776191][T10752] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1224'. [ 506.266127][ T5908] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 506.449766][ T5908] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 506.480818][ T5908] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 506.505991][ T5908] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 506.534001][ T5908] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 506.559230][ T5892] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 506.563804][ T5908] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.611980][T10763] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 506.622602][ T5908] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 507.192691][ T5892] usb 9-1: Using ep0 maxpacket: 8 [ 507.231431][ T5892] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 507.377087][ T5892] usb 9-1: config 0 has no interface number 0 [ 507.397977][T10763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 507.408808][ T5892] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 507.439190][T10763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.452068][ T5892] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 507.488404][ T5892] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 507.561263][ T5892] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 507.857541][ T5892] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 507.879322][ T5892] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.893491][ T5892] usb 9-1: config 0 descriptor?? [ 507.919307][ T5892] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 508.269209][ T5923] usb 9-1: USB disconnect, device number 6 [ 508.338289][ T5923] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 509.356566][T10808] overlayfs: failed to clone lowerpath [ 509.358197][T10809] overlayfs: failed to clone lowerpath [ 509.723575][ T5957] usb 8-1: USB disconnect, device number 9 [ 512.676079][ T5908] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 513.589424][T10858] tmpfs: Bad value for 'mpol' [ 513.646564][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 513.666615][ T5908] usb 2-1: too many configurations: 69, using maximum allowed: 8 [ 513.687332][ T5908] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 513.703244][ T5908] usb 2-1: can't read configurations, error -61 [ 513.867299][ T5908] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 514.334238][T10868] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1260'. [ 516.263696][ T30] audit: type=1326 audit(1752637140.904:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10861 comm="syz.8.1260" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94cdd8e929 code=0x0 [ 516.487315][ T5908] usb 2-1: Using ep0 maxpacket: 8 [ 516.493740][ T5908] usb 2-1: device descriptor read/all, error -71 [ 516.520552][ T5908] usb usb2-port1: attempt power cycle [ 517.273649][T10881] netlink: 'syz.1.1263': attribute type 10 has an invalid length. [ 517.346208][T10881] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1263'. [ 517.912147][T10881] dummy0: entered promiscuous mode [ 518.099346][T10881] bridge0: port 3(dummy0) entered blocking state [ 518.156137][T10881] bridge0: port 3(dummy0) entered disabled state [ 518.162748][T10881] dummy0: entered allmulticast mode [ 518.240963][T10881] bridge0: port 3(dummy0) entered blocking state [ 518.247629][T10881] bridge0: port 3(dummy0) entered forwarding state [ 520.747090][T10915] 9pnet_fd: Insufficient options for proto=fd [ 521.757164][T10929] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1273'. [ 523.308311][T10947] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 524.207349][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 524.313691][T10953] tmpfs: Bad value for 'mpol' [ 527.432204][T10985] trusted_key: encrypted_key: key user:syz not found [ 528.323259][ T30] audit: type=1326 audit(1752637154.844:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10986 comm="syz.6.1289" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5a9238e929 code=0x0 [ 529.029431][T11001] tmpfs: Bad value for 'mpol' [ 530.492412][T11021] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1298'. [ 532.018479][T11034] trusted_key: encrypted_key: key user:syz not found [ 532.835071][T11021] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.868981][T11021] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.229273][T11021] bond0 (unregistering): Released all slaves [ 533.544954][T11041] FAULT_INJECTION: forcing a failure. [ 533.544954][T11041] name failslab, interval 1, probability 0, space 0, times 0 [ 533.558112][T11041] CPU: 0 UID: 0 PID: 11041 Comm: syz.1.1304 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 533.558139][T11041] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 533.558152][T11041] Call Trace: [ 533.558161][T11041] [ 533.558169][T11041] dump_stack_lvl+0x189/0x250 [ 533.558198][T11041] ? __pfx____ratelimit+0x10/0x10 [ 533.558229][T11041] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.558252][T11041] ? __pfx__printk+0x10/0x10 [ 533.558283][T11041] ? ref_tracker_alloc+0x318/0x460 [ 533.558346][T11041] should_fail_ex+0x414/0x560 [ 533.558380][T11041] should_failslab+0xa8/0x100 [ 533.558413][T11041] kmem_cache_alloc_noprof+0x73/0x3c0 [ 533.558440][T11041] ? skb_clone+0x212/0x3a0 [ 533.558472][T11041] skb_clone+0x212/0x3a0 [ 533.558501][T11041] __netlink_deliver_tap+0x404/0x850 [ 533.558539][T11041] ? netlink_deliver_tap+0x2e/0x1b0 [ 533.558565][T11041] netlink_deliver_tap+0x19c/0x1b0 [ 533.558589][T11041] netlink_unicast+0x730/0x8e0 [ 533.558629][T11041] netlink_sendmsg+0x805/0xb30 [ 533.558664][T11041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.558696][T11041] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.558723][T11041] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.558748][T11041] __sock_sendmsg+0x219/0x270 [ 533.558782][T11041] ____sys_sendmsg+0x505/0x830 [ 533.558813][T11041] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.558852][T11041] ? import_iovec+0x74/0xa0 [ 533.558880][T11041] ___sys_sendmsg+0x21f/0x2a0 [ 533.558908][T11041] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.558963][T11041] ? __fget_files+0x2a/0x420 [ 533.558976][T11041] ? __fget_files+0x3a0/0x420 [ 533.558997][T11041] __x64_sys_sendmsg+0x19b/0x260 [ 533.559019][T11041] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.559046][T11041] ? __pfx_ksys_write+0x10/0x10 [ 533.559064][T11041] ? rcu_is_watching+0x15/0xb0 [ 533.559084][T11041] ? do_syscall_64+0xbe/0x3b0 [ 533.559101][T11041] do_syscall_64+0xfa/0x3b0 [ 533.559116][T11041] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.559129][T11041] ? asm_sysvec_call_function_single+0x1a/0x20 [ 533.559144][T11041] ? clear_bhb_loop+0x60/0xb0 [ 533.559162][T11041] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.559176][T11041] RIP: 0033:0x7f03e558e929 [ 533.559190][T11041] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.559203][T11041] RSP: 002b:00007f03e33f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.559219][T11041] RAX: ffffffffffffffda RBX: 00007f03e57b6080 RCX: 00007f03e558e929 [ 533.559230][T11041] RDX: 0000000000040010 RSI: 0000200000000180 RDI: 0000000000000005 [ 533.559239][T11041] RBP: 00007f03e33f6090 R08: 0000000000000000 R09: 0000000000000000 [ 533.559248][T11041] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.559257][T11041] R13: 0000000000000000 R14: 00007f03e57b6080 R15: 00007ffddb2b8cc8 [ 533.559279][T11041] [ 533.559455][T11041] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1304'. [ 534.957552][T11054] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1308'. [ 535.014535][T11055] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 535.605653][T11044] FAULT_INJECTION: forcing a failure. [ 535.605653][T11044] name failslab, interval 1, probability 0, space 0, times 0 [ 535.918481][T11044] CPU: 0 UID: 0 PID: 11044 Comm: syz.1.1306 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 535.918512][T11044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 535.918526][T11044] Call Trace: [ 535.918534][T11044] [ 535.918543][T11044] dump_stack_lvl+0x189/0x250 [ 535.918572][T11044] ? __pfx____ratelimit+0x10/0x10 [ 535.918604][T11044] ? __pfx_dump_stack_lvl+0x10/0x10 [ 535.918628][T11044] ? __pfx__printk+0x10/0x10 [ 535.918670][T11044] should_fail_ex+0x414/0x560 [ 535.918703][T11044] should_failslab+0xa8/0x100 [ 535.918738][T11044] __kmalloc_cache_noprof+0x70/0x3d0 [ 535.918767][T11044] ? nfc_genl_rcv_nl_event+0xa8/0x2b0 [ 535.918795][T11044] ? blocking_notifier_call_chain+0x54/0x90 [ 535.918825][T11044] nfc_genl_rcv_nl_event+0xa8/0x2b0 [ 535.918862][T11044] notifier_call_chain+0x1b6/0x3e0 [ 535.918895][T11044] blocking_notifier_call_chain+0x6a/0x90 [ 535.918924][T11044] netlink_release+0x1259/0x1b10 [ 535.918958][T11044] ? netlink_release+0x108/0x1b10 [ 535.918985][T11044] ? __pfx_netlink_release+0x10/0x10 [ 535.919011][T11044] ? down_write+0x162/0x1f0 [ 535.919034][T11044] ? __pfx_down_write+0x10/0x10 [ 535.919053][T11044] ? do_raw_spin_lock+0x121/0x290 [ 535.919084][T11044] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 535.919118][T11044] sock_close+0xc0/0x240 [ 535.919156][T11044] ? __pfx_sock_close+0x10/0x10 [ 535.919186][T11044] __fput+0x449/0xa70 [ 535.919222][T11044] task_work_run+0x1d4/0x260 [ 535.919256][T11044] ? __pfx_task_work_run+0x10/0x10 [ 535.919293][T11044] ? exit_to_user_mode_loop+0x40/0x110 [ 535.919317][T11044] exit_to_user_mode_loop+0xec/0x110 [ 535.919338][T11044] do_syscall_64+0x2bd/0x3b0 [ 535.919360][T11044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.919380][T11044] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 535.919400][T11044] ? clear_bhb_loop+0x60/0xb0 [ 535.919426][T11044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.919446][T11044] RIP: 0033:0x7f03e558e929 [ 535.919464][T11044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.919482][T11044] RSP: 002b:00007f03e632b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.919504][T11044] RAX: 0000000000000028 RBX: 00007f03e57b5fa0 RCX: 00007f03e558e929 [ 535.919519][T11044] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 535.919531][T11044] RBP: 00007f03e632b090 R08: 0000000000000000 R09: 0000000000000000 [ 535.919544][T11044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 535.919557][T11044] R13: 0000000000000000 R14: 00007f03e57b5fa0 R15: 00007ffddb2b8cc8 [ 535.919590][T11044] [ 538.401105][T11083] trusted_key: encrypted_key: key user:syz not found [ 539.163645][T11088] qrtr: Invalid version 43 [ 543.755536][T11132] tmpfs: Bad value for 'mpol' [ 544.532053][T11137] trusted_key: encrypted_key: key user:syz not found [ 549.952668][T11174] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1342'. [ 554.952227][T11209] netlink: 'syz.6.1352': attribute type 3 has an invalid length. [ 554.969752][T11209] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1352'. [ 554.990250][T11209] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1352'. [ 555.023471][T11209] syz.6.1352: attempt to access beyond end of device [ 555.023471][T11209] loop6: rw=0, sector=0, nr_sectors = 1 limit=0 [ 555.056302][ T5908] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 555.855889][ T5908] usb 9-1: Using ep0 maxpacket: 32 [ 555.953181][ T5908] usb 9-1: device descriptor read/all, error -71 [ 555.968187][ T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 556.139873][T11222] trusted_key: syz.1.1354 sent an empty control message without MSG_MORE. [ 556.180069][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 557.598479][ T24] usb 8-1: device descriptor read/all, error -71 [ 560.375088][T11260] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 562.953745][T11296] netlink: 'syz.8.1373': attribute type 1 has an invalid length. [ 563.115430][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.183859][T11296] bond0: entered promiscuous mode [ 563.213235][T11296] bond0: entered allmulticast mode [ 565.028689][T11313] openvswitch: netlink: VXLAN extension message has 201 unknown bytes. [ 565.039270][ T980] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 565.255795][ T980] usb 9-1: Using ep0 maxpacket: 32 [ 565.361193][ T980] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 565.555610][ T980] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 565.599362][ T980] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 565.657491][ T980] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.669628][T11315] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 565.712853][T11315] bridge0: entered allmulticast mode [ 565.742905][ T980] usb 9-1: config 0 descriptor?? [ 565.913184][ T30] audit: type=1326 audit(1752637192.434:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11314 comm="syz.7.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6498f2ab19 code=0x7ffc0000 [ 566.891710][ T30] audit: type=1326 audit(1752637192.434:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11314 comm="syz.7.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6498f2ab19 code=0x7ffc0000 [ 566.974677][ T30] audit: type=1326 audit(1752637192.434:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11314 comm="syz.7.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6498f2ab19 code=0x7ffc0000 [ 567.084939][ T30] audit: type=1326 audit(1752637192.434:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11314 comm="syz.7.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6498f2ab19 code=0x7ffc0000 [ 567.162806][ T30] audit: type=1326 audit(1752637192.434:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11314 comm="syz.7.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6498f2ab19 code=0x7ffc0000 [ 567.775998][ T30] audit: type=1326 audit(1752637192.434:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11314 comm="syz.7.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6498f2ab19 code=0x7ffc0000 [ 567.857084][ T980] usbhid 9-1:0.0: can't add hid device: -71 [ 567.863152][ T980] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 567.913896][T11335] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(9) [ 567.920500][T11335] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 567.942612][ T980] usb 9-1: USB disconnect, device number 9 [ 567.951495][ T30] audit: type=1326 audit(1752637192.434:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11314 comm="syz.7.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6498f2ab19 code=0x7ffc0000 [ 568.043509][ T30] audit: type=1326 audit(1752637192.434:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11314 comm="syz.7.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6498f2ab19 code=0x7ffc0000 [ 568.079564][T11335] vhci_hcd vhci_hcd.0: Device attached [ 568.150175][ T30] audit: type=1326 audit(1752637192.434:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11314 comm="syz.7.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6498f2ab19 code=0x7ffc0000 [ 568.315650][T11336] vhci_hcd: connection closed [ 568.673430][ T78] vhci_hcd: stop threads [ 568.699982][ T78] vhci_hcd: release socket [ 568.724423][ T78] vhci_hcd: disconnect device [ 568.733552][ T30] audit: type=1326 audit(1752637192.434:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11314 comm="syz.7.1378" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6498f2ab19 code=0x7ffc0000 [ 571.175916][ T977] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 571.362305][ T977] usb 8-1: no configurations [ 571.386169][ T977] usb 8-1: can't read configurations, error -22 [ 571.714546][ T977] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 573.063925][ T977] usb 8-1: no configurations [ 573.083706][ T977] usb 8-1: can't read configurations, error -22 [ 573.134733][ T977] usb usb8-port1: attempt power cycle [ 573.211889][T11390] overlay: ./file0 is not a directory [ 577.985796][ T5908] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 578.248466][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 578.403880][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.703361][ T5908] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.847435][ T5908] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 578.903251][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.943909][ T5908] usb 2-1: config 0 descriptor?? [ 579.379577][T11439] vlan2: entered allmulticast mode [ 579.385108][T11439] vlan1: entered allmulticast mode [ 579.735344][T11439] veth0_vlan: entered allmulticast mode [ 580.458286][ T5908] usbhid 2-1:0.0: can't add hid device: -71 [ 581.146017][ T5908] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 581.210223][ T5908] usb 2-1: USB disconnect, device number 31 [ 581.879177][T11466] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1421'. [ 582.303426][T11472] FAULT_INJECTION: forcing a failure. [ 582.303426][T11472] name failslab, interval 1, probability 0, space 0, times 0 [ 582.342968][T11472] CPU: 0 UID: 0 PID: 11472 Comm: syz.8.1424 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 582.343001][T11472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 582.343014][T11472] Call Trace: [ 582.343023][T11472] [ 582.343033][T11472] dump_stack_lvl+0x189/0x250 [ 582.343062][T11472] ? __pfx____ratelimit+0x10/0x10 [ 582.343094][T11472] ? __pfx_dump_stack_lvl+0x10/0x10 [ 582.343118][T11472] ? __pfx__printk+0x10/0x10 [ 582.343152][T11472] ? __pfx___might_resched+0x10/0x10 [ 582.343181][T11472] ? fs_reclaim_acquire+0x7d/0x100 [ 582.343208][T11472] should_fail_ex+0x414/0x560 [ 582.343244][T11472] should_failslab+0xa8/0x100 [ 582.343277][T11472] __kmalloc_noprof+0xcb/0x4f0 [ 582.343304][T11472] ? kfree+0x4d/0x440 [ 582.343328][T11472] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 582.343356][T11472] tomoyo_realpath_from_path+0xe3/0x5d0 [ 582.343380][T11472] ? tomoyo_domain+0xda/0x130 [ 582.343410][T11472] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 582.343441][T11472] tomoyo_path_number_perm+0x1e8/0x5a0 [ 582.343475][T11472] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 582.343524][T11472] ? __lock_acquire+0xab9/0xd20 [ 582.343569][T11472] ? __fget_files+0x2a/0x420 [ 582.343591][T11472] ? __fget_files+0x2a/0x420 [ 582.343608][T11472] ? __fget_files+0x3a0/0x420 [ 582.343626][T11472] ? __fget_files+0x2a/0x420 [ 582.343649][T11472] security_file_ioctl+0xcb/0x2d0 [ 582.343683][T11472] __se_sys_ioctl+0x47/0x170 [ 582.343713][T11472] do_syscall_64+0xfa/0x3b0 [ 582.343732][T11472] ? lockdep_hardirqs_on+0x9c/0x150 [ 582.343762][T11472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.343783][T11472] ? clear_bhb_loop+0x60/0xb0 [ 582.343808][T11472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.343832][T11472] RIP: 0033:0x7f94cdd8e929 [ 582.343851][T11472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.343869][T11472] RSP: 002b:00007f94ceb9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 582.343892][T11472] RAX: ffffffffffffffda RBX: 00007f94cdfb5fa0 RCX: 00007f94cdd8e929 [ 582.343907][T11472] RDX: 0000200000000000 RSI: 0000000000008b28 RDI: 0000000000000003 [ 582.343920][T11472] RBP: 00007f94ceb9e090 R08: 0000000000000000 R09: 0000000000000000 [ 582.343933][T11472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.343945][T11472] R13: 0000000000000000 R14: 00007f94cdfb5fa0 R15: 00007fff6b9b0b08 [ 582.343978][T11472] [ 582.345169][T11472] ERROR: Out of memory at tomoyo_realpath_from_path. [ 583.212529][T11484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 584.206551][ T5957] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 584.989813][ T5957] usb 2-1: unable to get BOS descriptor or descriptor too short [ 584.999336][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 585.011292][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 585.023922][ T5957] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 585.037736][ T5957] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=b5.39 [ 585.047134][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.055325][ T5957] usb 2-1: Product: syz [ 585.059667][ T5957] usb 2-1: Manufacturer: syz [ 585.064423][ T5957] usb 2-1: SerialNumber: syz [ 585.074420][ T5957] usb 2-1: config 0 descriptor?? [ 585.084084][ T5957] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 585.086162][ T5908] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 585.208345][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 585.248766][ T5908] usb 9-1: config 0 has an invalid interface number: 216 but max is 0 [ 585.258010][ T5908] usb 9-1: config 0 has no interface number 0 [ 585.264228][ T5908] usb 9-1: config 0 interface 216 altsetting 0 endpoint 0x7 has invalid maxpacket 528, setting to 64 [ 585.278339][ T5908] usb 9-1: New USB device found, idVendor=05da, idProduct=0094, bcdDevice=f6.f7 [ 585.289331][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.300851][ T5908] usb 9-1: Product: syz [ 585.305327][ T5908] usb 9-1: Manufacturer: syz [ 585.310126][ T5908] usb 9-1: SerialNumber: syz [ 585.321045][ T5957] usb 2-1: USB disconnect, device number 32 [ 585.323730][ T5908] usb 9-1: config 0 descriptor?? [ 585.338066][ T5908] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 7 is not bulk. [ 585.348893][ T5908] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 3 is not bulk. [ 585.359411][ T5908] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 585.371235][ T24] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 585.387485][ T24] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 585.399444][ T24] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 585.410307][ T24] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 585.420097][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.432948][T11495] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 585.444246][ T24] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 585.716478][T11495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.728929][T11495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 585.916922][ T24] usb 9-1: USB disconnect, device number 10 [ 586.033939][ T977] usb 8-1: USB disconnect, device number 15 [ 586.725388][ T5957] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 587.047244][ T5957] usb 9-1: Using ep0 maxpacket: 32 [ 587.067378][ T5957] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 587.085651][ T5957] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.714348][ T5957] usb 9-1: config 0 descriptor?? [ 587.818238][T11523] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 587.957507][T11527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1442'. [ 587.987457][ T5957] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 588.010180][ T5957] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 588.031433][ T5957] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 588.055314][ T5957] usb 9-1: media controller created [ 588.142904][ T5957] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 588.172636][T11509] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 588.204300][ T5957] az6027: usb out operation failed. (-71) [ 588.215944][ T5957] az6027: usb out operation failed. (-71) [ 588.221981][ T5957] stb0899_attach: Driver disabled by Kconfig [ 588.228697][ T5957] az6027: no front-end attached [ 588.228697][ T5957] [ 588.238352][ T5957] az6027: usb out operation failed. (-71) [ 588.244295][ T5957] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 588.254788][ T5957] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb9/9-1/input/input20 [ 588.268997][ T5957] dvb-usb: schedule remote query interval to 400 msecs. [ 588.276596][ T5957] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 588.295050][ T5957] usb 9-1: USB disconnect, device number 11 [ 588.296896][ T977] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 588.374575][ T5957] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 588.425517][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 588.456094][ T977] usb 8-1: Using ep0 maxpacket: 16 [ 588.468414][ T977] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.488884][ T977] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.501783][ T977] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 588.521688][ T977] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 588.532088][ T977] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.549431][ T977] usb 8-1: config 0 descriptor?? [ 588.604205][ T24] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 588.615151][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.635075][ T24] usb 2-1: config 0 descriptor?? [ 588.642687][ T24] cp210x 2-1:0.0: cp210x converter detected [ 588.687782][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 589.001472][ T977] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 589.014604][ T977] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 589.060705][ T977] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 589.099854][ T977] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 589.488779][ T24] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 589.499420][ T977] shield 0003:0955:7214.0012: unknown main item tag 0x0 [ 589.519767][ T977] input: HID 0955:7214 Haptics as /devices/virtual/input/input21 [ 589.729620][T11538] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 589.753486][ T977] shield 0003:0955:7214.0012: Registered Thunderstrike controller [ 589.769135][ T24] usb 2-1: cp210x converter now attached to ttyUSB0 [ 589.777763][ T977] shield 0003:0955:7214.0012: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 590.633616][ T24] usb 2-1: USB disconnect, device number 33 [ 590.648525][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 590.704417][ T24] cp210x 2-1:0.0: device disconnected [ 590.834716][T11557] netlink: 'syz.7.1444': attribute type 2 has an invalid length. [ 590.843051][T11557] netlink: 244 bytes leftover after parsing attributes in process `syz.7.1444'. [ 590.888768][T11564] syz.1.1455: attempt to access beyond end of device [ 590.888768][T11564] nbd1: rw=0, sector=0, nr_sectors = 2 limit=0 [ 591.040221][ T5908] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 591.040631][ T5923] usb 8-1: USB disconnect, device number 16 [ 591.077318][ T5908] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 591.804369][T11566] block device autoloading is deprecated and will be removed. [ 591.832746][T11559] [U] [Œæî [ 591.844401][ T5908] shield 0003:0955:7214.0012: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 592.690396][T11581] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1459'. [ 593.096610][T11588] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 593.785033][T11570] delete_channel: no stack [ 595.823798][T11607] CUSE: DEVNAME unspecified [ 595.854019][T11607] netlink: 'syz.1.1465': attribute type 8 has an invalid length. [ 596.123077][T11611] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1467'. [ 597.839161][T11622] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1470'. [ 598.396791][T11636] binder: 11629:11636 ioctl 4018620d 0 returned -22 [ 599.260276][T11639] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 602.295401][T11671] ptrace attach of "./syz-executor exec"[8932] was attempted by "./syz-executor exec"[11671] [ 602.318082][T11671] overlay: Unknown parameter 'func' [ 603.034666][T11683] netlink: 'syz.6.1484': attribute type 14 has an invalid length. [ 603.815894][T11690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 605.340320][T11706] input: syz0 as /devices/virtual/input/input22 [ 608.865805][T11726] netlink: 'syz.8.1496': attribute type 4 has an invalid length. [ 610.512420][T11743] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 611.731475][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 611.731495][ T30] audit: type=1326 audit(1752637238.254:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11745 comm="syz.6.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9238e929 code=0x7ffc0000 [ 611.759855][ C1] vkms_vblank_simulate: vblank timer overrun [ 611.822199][T11754] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1503'. [ 611.972048][T11756] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 611.979914][T11756] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 612.076055][ T30] audit: type=1326 audit(1752637238.254:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11745 comm="syz.6.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9238e929 code=0x7ffc0000 [ 612.572789][ T30] audit: type=1326 audit(1752637238.294:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11745 comm="syz.6.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a9238e929 code=0x7ffc0000 [ 612.742508][ T30] audit: type=1326 audit(1752637238.294:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11745 comm="syz.6.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9238e929 code=0x7ffc0000 [ 612.764129][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.940949][ T30] audit: type=1326 audit(1752637238.294:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11745 comm="syz.6.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9238e929 code=0x7ffc0000 [ 612.962571][ C1] vkms_vblank_simulate: vblank timer overrun [ 612.970358][ T30] audit: type=1326 audit(1752637238.294:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11745 comm="syz.6.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f5a9238e929 code=0x7ffc0000 [ 613.015899][ T30] audit: type=1326 audit(1752637238.294:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11745 comm="syz.6.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5a9238e929 code=0x7ffc0000 [ 613.160172][T11769] netlink: 'syz.6.1506': attribute type 4 has an invalid length. [ 613.677231][T11769] syz.6.1506 (11769) used greatest stack depth: 19368 bytes left [ 614.955654][ T5892] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 615.133370][ T5892] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [syz1] on syz0 [ 615.439839][T11789] overlayfs: failed to clone lowerpath [ 617.072914][T11800] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 619.086701][T11813] overlayfs: failed to clone upperpath [ 620.042951][T11822] 9pnet_fd: Insufficient options for proto=fd [ 620.053657][T11822] netlink: 'syz.3.1523': attribute type 83 has an invalid length. [ 620.214391][T11820] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 620.237874][T11820] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.986915][T11820] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 620.994421][T11820] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 621.485829][T11836] netlink: 'syz.6.1522': attribute type 4 has an invalid length. [ 621.710145][T11840] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 2, id = 0 [ 624.540613][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.898563][T11895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 626.156600][T11902] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1542'. [ 626.446872][T11901] wg1 speed is unknown, defaulting to 1000 [ 628.261779][T11921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.493225][T11926] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1550'. [ 633.617493][T11971] syz.8.1560: attempt to access beyond end of device [ 633.617493][T11971] nbd8: rw=0, sector=0, nr_sectors = 1 limit=0 [ 633.636883][T11971] (syz.8.1560,11971,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 633.646355][T11971] (syz.8.1560,11971,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 633.660953][T11971] (syz.8.1560,11971,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 633.670510][T11971] (syz.8.1560,11971,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 634.549244][T11981] netlink: 'syz.6.1563': attribute type 1 has an invalid length. [ 634.557779][T11981] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1563'. [ 635.944346][T11993] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 636.805971][ T5828] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 636.978309][ T5828] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 637.087014][ T5892] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 637.255926][ T5892] usb 8-1: config 0 has an invalid interface number: 117 but max is 0 [ 637.265484][ T5892] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 637.297628][ T5892] usb 8-1: config 0 has no interface number 0 [ 637.330786][ T5892] usb 8-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 637.376731][ T5892] usb 8-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 637.457695][ T5892] usb 8-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 637.474731][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.511324][ T5892] usb 8-1: Product: syz [ 637.539631][ T5892] usb 8-1: Manufacturer: syz [ 637.560923][ T5892] usb 8-1: SerialNumber: syz [ 637.641717][ T5892] usb 8-1: config 0 descriptor?? [ 637.816145][ T5828] usb 9-1: New USB device found, idVendor=050d, idProduct=3201, bcdDevice= 0.00 [ 637.863414][ T5828] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 637.894941][ T5828] usb 9-1: config 0 descriptor?? [ 637.907740][T11999] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 638.421692][ T5828] belkin 0003:050D:3201.0014: unbalanced collection at end of report description [ 638.434262][T12001] netlink: 61 bytes leftover after parsing attributes in process `syz.7.1571'. [ 638.456696][ T5908] usb 8-1: USB disconnect, device number 17 [ 638.481291][ T5828] belkin 0003:050D:3201.0014: parse failed [ 638.499717][ T5828] belkin 0003:050D:3201.0014: probe with driver belkin failed with error -22 [ 639.839846][ T5908] usb 9-1: USB disconnect, device number 12 [ 642.792705][T12061] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1586'. [ 642.847998][T12059] vxcan1: entered allmulticast mode [ 642.931030][T12061] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1586'. [ 643.597094][ T5908] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 643.888982][ T5908] usb 9-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 643.913241][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.927872][ T5908] usb 9-1: Product: syz [ 643.932201][ T5908] usb 9-1: Manufacturer: syz [ 643.938647][ T5908] usb 9-1: SerialNumber: syz [ 643.952464][ T5908] r8152-cfgselector 9-1: Unknown version 0x0000 [ 643.959861][ T5908] r8152-cfgselector 9-1: config 0 descriptor?? [ 644.209310][T12084] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1592'. [ 644.440350][T12066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.455537][T12084] binder: 12078:12084 ioctl c0306201 0 returned -14 [ 644.532905][T12090] tmpfs: Bad value for 'mpol' [ 644.589551][T12066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 645.243450][ T5828] r8152-cfgselector 9-1: USB disconnect, device number 13 [ 645.430690][T12093] pim6reg: entered allmulticast mode [ 646.196899][T12100] tmpfs: Unknown parameter 'usrq  J¼×‘ê­\9Z~þa_inouÓfðîæzž>D£ÃOHde_hardlimit' [ 646.247695][T12100] tmpfs: Unknown parameter 'usrq  J¼×‘ê­\9Z~þa_inouÓfðîæzž>D£ÃOHde_hardlimit' [ 646.733817][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1602'. [ 647.206789][T12118] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 647.219152][T12118] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 647.235163][T12118] sp0: Synchronizing with TNC [ 647.808141][T12116] [U] è [ 647.880357][T12130] tmpfs: Bad value for 'mpol' [ 648.169003][T12132] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 648.727183][ T5923] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 648.812791][T12139] netlink: 129704 bytes leftover after parsing attributes in process `syz.3.1610'. [ 648.965408][ T5923] usb 8-1: Using ep0 maxpacket: 32 [ 648.988825][ T5923] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.103005][ T5923] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.128242][ T5923] usb 8-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 649.152354][ T5923] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.195015][ T5923] usb 8-1: config 0 descriptor?? [ 649.579834][T12152] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1615'. [ 649.669019][ T5923] ft260 0003:0403:6030.0015: unknown main item tag 0x7 [ 650.844509][T12150] netlink: 844 bytes leftover after parsing attributes in process `syz.1.1614'. [ 650.966484][ T5923] ft260 0003:0403:6030.0015: chip code: 6424 8183 [ 650.974250][ T5923] ft260 0003:0403:6030.0015: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.7-1/input0 [ 651.183960][ T5923] ft260 0003:0403:6030.0015: failed to retrieve status: -32, no wakeup [ 652.874731][T12176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 653.834241][ T5908] usb 8-1: USB disconnect, device number 18 [ 654.098675][T12181] tmpfs: Bad value for 'mpol' [ 655.087867][T12182] /dev/nullb0: Can't open blockdev [ 655.253382][T12185] netlink: 'syz.3.1624': attribute type 1 has an invalid length. [ 655.490669][T12186] gretap1: entered allmulticast mode [ 656.686822][T12207] overlayfs: failed to resolve './file0': -2 [ 657.754754][T12213] 8021q: VLANs not supported on ipvlan1 [ 657.779491][ T6192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 657.800797][ T6192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.043443][T12222] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 658.844756][T12237] xt_SECMARK: invalid mode: 2 [ 659.881339][T12251] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1642'. [ 661.059772][T12263] netlink: del zone limit has 4 unknown bytes [ 661.361198][T12263] 9pnet: Could not find request transport: g [ 661.380202][T12260] wg1 speed is unknown, defaulting to 1000 [ 662.330453][T12274] netlink: 68 bytes leftover after parsing attributes in process `syz.7.1647'. [ 663.005052][T12281] FAULT_INJECTION: forcing a failure. [ 663.005052][T12281] name failslab, interval 1, probability 0, space 0, times 0 [ 663.196013][T12281] CPU: 0 UID: 0 PID: 12281 Comm: syz.1.1649 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 663.196044][T12281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 663.196056][T12281] Call Trace: [ 663.196065][T12281] [ 663.196074][T12281] dump_stack_lvl+0x189/0x250 [ 663.196104][T12281] ? __pfx____ratelimit+0x10/0x10 [ 663.196135][T12281] ? __pfx_dump_stack_lvl+0x10/0x10 [ 663.196157][T12281] ? __pfx__printk+0x10/0x10 [ 663.196190][T12281] ? __pfx___might_resched+0x10/0x10 [ 663.196218][T12281] should_fail_ex+0x414/0x560 [ 663.196252][T12281] should_failslab+0xa8/0x100 [ 663.196294][T12281] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 663.196324][T12281] ? __alloc_skb+0x112/0x2d0 [ 663.196352][T12281] __alloc_skb+0x112/0x2d0 [ 663.196379][T12281] netlink_sendmsg+0x5c6/0xb30 [ 663.196414][T12281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.196447][T12281] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 663.196475][T12281] ? __pfx_netlink_sendmsg+0x10/0x10 [ 663.196501][T12281] __sock_sendmsg+0x219/0x270 [ 663.196535][T12281] ____sys_sendmsg+0x505/0x830 [ 663.196567][T12281] ? __pfx_____sys_sendmsg+0x10/0x10 [ 663.196602][T12281] ? import_iovec+0x74/0xa0 [ 663.196630][T12281] ___sys_sendmsg+0x21f/0x2a0 [ 663.196658][T12281] ? __pfx____sys_sendmsg+0x10/0x10 [ 663.196725][T12281] ? __fget_files+0x2a/0x420 [ 663.196743][T12281] ? __fget_files+0x3a0/0x420 [ 663.196774][T12281] __x64_sys_sendmsg+0x19b/0x260 [ 663.196802][T12281] ? schedule+0x165/0x360 [ 663.196833][T12281] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 663.196880][T12281] ? do_syscall_64+0xbe/0x3b0 [ 663.196904][T12281] do_syscall_64+0xfa/0x3b0 [ 663.196924][T12281] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.196944][T12281] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 663.196964][T12281] ? clear_bhb_loop+0x60/0xb0 [ 663.196989][T12281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.197008][T12281] RIP: 0033:0x7f03e558e929 [ 663.197027][T12281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.197045][T12281] RSP: 002b:00007f03e33f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 663.197067][T12281] RAX: ffffffffffffffda RBX: 00007f03e57b6080 RCX: 00007f03e558e929 [ 663.197082][T12281] RDX: 0000000000008090 RSI: 0000200000001540 RDI: 0000000000000003 [ 663.197096][T12281] RBP: 00007f03e33f6090 R08: 0000000000000000 R09: 0000000000000000 [ 663.197109][T12281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.197121][T12281] R13: 0000000000000001 R14: 00007f03e57b6080 R15: 00007ffddb2b8cc8 [ 663.197153][T12281] [ 663.799042][T12285] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 663.935910][T12289] overlayfs: failed to clone upperpath [ 664.059491][T12296] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1651'. [ 664.572650][T12300] netlink: 666 bytes leftover after parsing attributes in process `syz.6.1654'. [ 664.754728][T12299] netlink: 'syz.6.1654': attribute type 4 has an invalid length. [ 664.837973][T12299] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1654'. [ 664.998602][T12302] batadv_slave_1: entered promiscuous mode [ 665.420847][T12301] batadv_slave_1: left promiscuous mode [ 666.069089][T12317] Cannot find set identified by id 0 to match [ 666.104849][T12317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1659'. [ 666.177641][T12322] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1661'. [ 668.014810][T12337] tmpfs: Bad value for 'mpol' [ 669.123681][T12345] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1670'. [ 669.141602][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1670'. [ 669.152268][T12345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1670'. [ 673.438628][T12383] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1680'. [ 673.922667][T12386] xt_hashlimit: size too large, truncated to 1048576 [ 678.537773][T12431] tmpfs: Bad value for 'mpol' [ 682.237232][T12465] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 682.351505][T12462] tmpfs: Bad value for 'mpol' [ 683.155526][T12475] tmpfs: Bad value for 'mpol' [ 684.155892][T12483] tmpfs: Bad value for 'mpol' [ 684.807019][T12484] FAULT_INJECTION: forcing a failure. [ 684.807019][T12484] name failslab, interval 1, probability 0, space 0, times 0 [ 684.875680][T12484] CPU: 0 UID: 0 PID: 12484 Comm: syz.1.1708 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 684.875720][T12484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 684.875733][T12484] Call Trace: [ 684.875742][T12484] [ 684.875751][T12484] dump_stack_lvl+0x189/0x250 [ 684.875785][T12484] ? __pfx____ratelimit+0x10/0x10 [ 684.875817][T12484] ? __pfx_dump_stack_lvl+0x10/0x10 [ 684.875840][T12484] ? __pfx__printk+0x10/0x10 [ 684.875874][T12484] ? __pfx___might_resched+0x10/0x10 [ 684.875904][T12484] should_fail_ex+0x414/0x560 [ 684.875940][T12484] should_failslab+0xa8/0x100 [ 684.875974][T12484] __kmalloc_noprof+0xcb/0x4f0 [ 684.876001][T12484] ? __kasan_kmalloc+0x93/0xb0 [ 684.876027][T12484] ? nla_strdup+0x9d/0x140 [ 684.876052][T12484] nla_strdup+0x9d/0x140 [ 684.876075][T12484] nf_tables_newtable+0x491/0x1890 [ 684.876102][T12484] ? nfnetlink_has_listeners+0x41/0x50 [ 684.876155][T12484] nfnetlink_rcv+0x112f/0x2520 [ 684.876223][T12484] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 684.876274][T12484] ? ref_tracker_free+0x63a/0x7d0 [ 684.876340][T12484] ? __netlink_deliver_tap+0x807/0x850 [ 684.876376][T12484] ? netlink_deliver_tap+0x2e/0x1b0 [ 684.876400][T12484] ? netlink_deliver_tap+0x2e/0x1b0 [ 684.876431][T12484] netlink_unicast+0x75c/0x8e0 [ 684.876466][T12484] netlink_sendmsg+0x805/0xb30 [ 684.876502][T12484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 684.876536][T12484] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 684.876566][T12484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 684.876593][T12484] __sock_sendmsg+0x219/0x270 [ 684.876629][T12484] ____sys_sendmsg+0x505/0x830 [ 684.876662][T12484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 684.876700][T12484] ? import_iovec+0x74/0xa0 [ 684.876740][T12484] ___sys_sendmsg+0x21f/0x2a0 [ 684.876769][T12484] ? __pfx____sys_sendmsg+0x10/0x10 [ 684.876838][T12484] ? __fget_files+0x2a/0x420 [ 684.876856][T12484] ? __fget_files+0x3a0/0x420 [ 684.876888][T12484] __x64_sys_sendmsg+0x19b/0x260 [ 684.876918][T12484] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 684.876957][T12484] ? __pfx_ksys_write+0x10/0x10 [ 684.876982][T12484] ? rcu_is_watching+0x15/0xb0 [ 684.877011][T12484] ? do_syscall_64+0xbe/0x3b0 [ 684.877036][T12484] do_syscall_64+0xfa/0x3b0 [ 684.877054][T12484] ? lockdep_hardirqs_on+0x9c/0x150 [ 684.877085][T12484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.877106][T12484] ? clear_bhb_loop+0x60/0xb0 [ 684.877131][T12484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.877151][T12484] RIP: 0033:0x7f03e558e929 [ 684.877169][T12484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.877188][T12484] RSP: 002b:00007f03e632b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 684.877210][T12484] RAX: ffffffffffffffda RBX: 00007f03e57b5fa0 RCX: 00007f03e558e929 [ 684.877225][T12484] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 684.877239][T12484] RBP: 00007f03e632b090 R08: 0000000000000000 R09: 0000000000000000 [ 684.877252][T12484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 684.877264][T12484] R13: 0000000000000000 R14: 00007f03e57b5fa0 R15: 00007ffddb2b8cc8 [ 684.877298][T12484] [ 685.971636][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.053149][T12512] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 689.805409][T12525] tmpfs: Bad value for 'mpol' [ 690.598145][T12530] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1722'. [ 690.642038][T12529] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.952253][T12554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 692.780772][T12561] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1732'. [ 692.965863][ T977] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 693.079855][T12568] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1735'. [ 693.168798][ T977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 693.202613][T12570] tmpfs: Bad value for 'mpol' [ 693.288120][ T977] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 693.434009][ T977] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 693.710158][ T977] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 693.864964][ T977] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.114276][ T977] usb 9-1: config 0 descriptor?? [ 694.611436][ T977] plantronics 0003:047F:FFFF.0016: reserved main item tag 0xe [ 694.650513][ T977] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 695.163182][ T977] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 695.373670][T12589] program syz.7.1741 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 696.565665][ T5892] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 696.675299][ T5923] usb 9-1: reset high-speed USB device number 14 using dummy_hcd [ 696.895407][ T5892] usb 2-1: Using ep0 maxpacket: 32 [ 696.980447][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 697.170661][ T5892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 697.182150][ T5892] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 697.191695][ T5892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.207835][ T5892] usb 2-1: config 0 descriptor?? [ 698.283983][T12615] xt_CT: You must specify a L4 protocol and not use inversions on it [ 698.412977][T12615] xt_CT: No such helper "snmp" [ 698.525355][ T9] usb 9-1: USB disconnect, device number 14 [ 699.308071][ T30] audit: type=1400 audit(1752637325.764:303): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=12624 comm="syz.8.1754" saddr=172.30.0.9 daddr=172.20.20.170 netif=wpan0 [ 699.392851][ T5892] usbhid 2-1:0.0: can't add hid device: -71 [ 699.404579][ T5892] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 699.432270][ T5892] usb 2-1: USB disconnect, device number 34 [ 699.517184][T12634] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1756'. [ 699.547260][T12635] netlink: 'syz.7.1755': attribute type 30 has an invalid length. [ 699.618609][T12638] vivid-002: disconnect [ 699.623288][T12635] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1755'. [ 699.675148][ T5828] IPVS: starting estimator thread 0... [ 699.683571][T12637] FAULT_INJECTION: forcing a failure. [ 699.683571][T12637] name failslab, interval 1, probability 0, space 0, times 0 [ 699.696215][T12635] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 699.696243][T12635] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 699.746660][T12637] CPU: 0 UID: 0 PID: 12637 Comm: syz.6.1756 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 699.746691][T12637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 699.746704][T12637] Call Trace: [ 699.746713][T12637] [ 699.746722][T12637] dump_stack_lvl+0x189/0x250 [ 699.746752][T12637] ? __pfx____ratelimit+0x10/0x10 [ 699.746788][T12637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 699.746812][T12637] ? __pfx__printk+0x10/0x10 [ 699.746842][T12637] ? __pfx___might_resched+0x10/0x10 [ 699.746864][T12637] ? fs_reclaim_acquire+0x7d/0x100 [ 699.746891][T12637] should_fail_ex+0x414/0x560 [ 699.746927][T12637] should_failslab+0xa8/0x100 [ 699.746960][T12637] __kmalloc_noprof+0xcb/0x4f0 [ 699.746988][T12637] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 699.747028][T12637] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 699.747068][T12637] genl_family_rcv_msg_doit+0xb8/0x300 [ 699.747107][T12637] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 699.747141][T12637] ? rcu_is_watching+0x15/0xb0 [ 699.747165][T12637] ? cap_capable+0x11f/0x460 [ 699.747195][T12637] ? safesetid_security_capable+0xa9/0x1a0 [ 699.747228][T12637] ? bpf_lsm_capable+0x9/0x20 [ 699.747249][T12637] ? security_capable+0x7e/0x2e0 [ 699.747278][T12637] genl_rcv_msg+0x60e/0x790 [ 699.747315][T12637] ? __pfx_genl_rcv_msg+0x10/0x10 [ 699.747342][T12637] ? ref_tracker_free+0x63a/0x7d0 [ 699.747372][T12637] ? __pfx_ip_vs_genl_set_cmd+0x10/0x10 [ 699.747405][T12637] ? __pfx_ref_tracker_free+0x10/0x10 [ 699.747456][T12637] netlink_rcv_skb+0x208/0x470 [ 699.747481][T12637] ? __pfx_genl_rcv_msg+0x10/0x10 [ 699.747513][T12637] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 699.747558][T12637] ? down_read+0x1ad/0x2e0 [ 699.747582][T12637] genl_rcv+0x28/0x40 [ 699.747610][T12637] netlink_unicast+0x75c/0x8e0 [ 699.747644][T12637] netlink_sendmsg+0x805/0xb30 [ 699.747679][T12637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.747714][T12637] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 699.747742][T12637] ? __pfx_netlink_sendmsg+0x10/0x10 [ 699.747768][T12637] __sock_sendmsg+0x219/0x270 [ 699.747804][T12637] ____sys_sendmsg+0x505/0x830 [ 699.747836][T12637] ? __pfx_____sys_sendmsg+0x10/0x10 [ 699.747873][T12637] ? import_iovec+0x74/0xa0 [ 699.747901][T12637] ___sys_sendmsg+0x21f/0x2a0 [ 699.747930][T12637] ? __pfx____sys_sendmsg+0x10/0x10 [ 699.747998][T12637] ? __fget_files+0x2a/0x420 [ 699.748016][T12637] ? __fget_files+0x3a0/0x420 [ 699.748047][T12637] __x64_sys_sendmsg+0x19b/0x260 [ 699.748077][T12637] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 699.748116][T12637] ? __pfx_ksys_write+0x10/0x10 [ 699.748141][T12637] ? rcu_is_watching+0x15/0xb0 [ 699.748168][T12637] ? do_syscall_64+0xbe/0x3b0 [ 699.748193][T12637] do_syscall_64+0xfa/0x3b0 [ 699.748210][T12637] ? lockdep_hardirqs_on+0x9c/0x150 [ 699.748240][T12637] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.748261][T12637] ? clear_bhb_loop+0x60/0xb0 [ 699.748286][T12637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.748306][T12637] RIP: 0033:0x7f5a9238e929 [ 699.748324][T12637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.748342][T12637] RSP: 002b:00007f5a9322c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 699.748364][T12637] RAX: ffffffffffffffda RBX: 00007f5a925b6080 RCX: 00007f5a9238e929 [ 699.748379][T12637] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: 0000000000000004 [ 699.748392][T12637] RBP: 00007f5a9322c090 R08: 0000000000000000 R09: 0000000000000000 [ 699.748405][T12637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.748422][T12637] R13: 0000000000000000 R14: 00007f5a925b6080 R15: 00007ffc80e47a88 [ 699.748456][T12637] [ 700.183130][T12634] bond1: entered promiscuous mode [ 700.189027][T12641] IPVS: using max 25 ests per chain, 60000 per kthread [ 700.196682][T12634] bond1: entered allmulticast mode [ 700.202363][T12634] 8021q: adding VLAN 0 to HW filter on device bond1 [ 700.254693][T12624] vivid-002: reconnect [ 700.471149][T12654] tmpfs: Bad value for 'mpol' [ 701.845439][ T5923] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 702.005696][ T5923] usb 8-1: device descriptor read/64, error -71 [ 702.345508][ T5923] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 702.650430][ T5923] usb 8-1: device descriptor read/64, error -71 [ 702.785718][ T5923] usb usb8-port1: attempt power cycle [ 702.955255][ T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 703.115295][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 703.129815][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 703.151510][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 703.165584][ T5923] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 703.183698][ T9] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 703.209430][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.218271][ T5923] usb 8-1: device descriptor read/8, error -71 [ 703.239751][ T9] usb 9-1: config 0 descriptor?? [ 703.465422][ T5923] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 703.465842][ T5907] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 703.494695][ T5923] usb 8-1: device descriptor read/8, error -71 [ 703.606383][ T5923] usb usb8-port1: unable to enumerate USB device [ 704.208006][ T5907] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 704.223936][ T5907] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 704.241375][ T5907] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 704.251331][ T5907] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 704.260201][ T5907] usb 2-1: SerialNumber: syz [ 704.292205][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 704.301008][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 704.322306][ T9] usb 9-1: USB disconnect, device number 15 [ 704.346242][ T5908] kernel write not supported for file /487/oom_adj (pid: 5908 comm: kworker/1:6) [ 704.476330][ T5907] usb 2-1: 0:2 : does not exist [ 704.481364][ T5907] usb 2-1: unit 5: unexpected type 0x03 [ 704.500355][T12692] syz.3.1777 (12692) used greatest stack depth: 17688 bytes left [ 704.526397][ T5907] usb 2-1: USB disconnect, device number 35 [ 706.997356][ T5957] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 707.206131][ T5957] usb 2-1: Using ep0 maxpacket: 32 [ 707.264186][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.485421][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 707.599444][ T5957] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 707.608876][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.656275][ T5957] usb 2-1: config 0 descriptor?? [ 707.793854][ T30] audit: type=1800 audit(1752637334.304:304): pid=12730 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.8.1790" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 708.018354][T12732] wg1 speed is unknown, defaulting to 1000 [ 708.351961][T12741] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1793'. [ 708.478665][T12741] loop6: detected capacity change from 0 to 63 [ 708.543325][T12741] support for the xor transformation has been removed. [ 708.647160][ T5957] usbhid 2-1:0.0: can't add hid device: -71 [ 708.653855][ T5957] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 708.781899][ T5957] usb 2-1: USB disconnect, device number 36 [ 710.036371][ T5954] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 710.799262][ T5954] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 710.840530][ T5954] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.878594][ T5954] usb 8-1: Product: syz [ 710.896231][ T5954] usb 8-1: Manufacturer: syz [ 710.915213][ T5954] usb 8-1: SerialNumber: syz [ 710.956251][ T5954] usb 8-1: config 0 descriptor?? [ 711.382672][T12775] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 711.438066][ T9] usb 8-1: USB disconnect, device number 23 [ 712.269451][T12794] xt_connbytes: Forcing CT accounting to be enabled [ 712.280326][T12794] Cannot find set identified by id 0 to match [ 713.960512][T12819] ubi31: attaching mtd0 [ 713.987439][T12819] ubi31: scanning is finished [ 713.992286][T12819] ubi31: empty MTD device detected [ 714.630478][T12816] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 714.937925][T12819] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 714.946238][T12819] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 714.946994][T12816] team0: Failed to send options change via netlink (err -105) [ 714.953630][T12819] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 714.953679][T12819] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 714.979946][T12819] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 714.986942][T12819] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 714.995056][T12819] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3823581993 [ 715.005936][T12819] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 715.033814][T12826] ubi31: background thread "ubi_bgt31d" started, PID 12826 [ 715.067465][T12816] team0: Port device batadv1 added [ 716.011039][T12843] tmpfs: Bad value for 'mpol' [ 716.145356][ T5954] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 716.375459][ T5954] usb 9-1: Using ep0 maxpacket: 32 [ 716.435651][ T5954] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 716.651426][ T5954] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 716.662020][ T5954] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 716.671547][ T5954] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.683046][ T5954] usb 9-1: config 0 descriptor?? [ 717.075414][ T977] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 717.238610][ T977] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.261395][ T977] usb 8-1: config 0 interface 0 has no altsetting 0 [ 717.273203][ T977] usb 8-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 717.292273][ T977] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.304686][ T977] usb 8-1: config 0 descriptor?? [ 717.670750][ T5954] usbhid 9-1:0.0: can't add hid device: -71 [ 717.679285][ T5954] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 717.692722][ T5954] usb 9-1: USB disconnect, device number 16 [ 717.764761][ T977] nti 0003:0757:0A00.0017: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.7-1/input0 [ 718.316843][ T30] audit: type=1326 audit(1752637344.834:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12857 comm="syz.8.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94cdd8e929 code=0x7ffc0000 [ 718.388867][ T30] audit: type=1326 audit(1752637344.834:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12857 comm="syz.8.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f94cdd8e929 code=0x7ffc0000 [ 718.455971][ T30] audit: type=1326 audit(1752637344.834:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12857 comm="syz.8.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94cdd8e929 code=0x7ffc0000 [ 718.497741][ T30] audit: type=1326 audit(1752637344.834:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12857 comm="syz.8.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f94cdd8e929 code=0x7ffc0000 [ 718.533505][ T30] audit: type=1326 audit(1752637344.834:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12857 comm="syz.8.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94cdd8e929 code=0x7ffc0000 [ 718.598079][ T30] audit: type=1326 audit(1752637344.834:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12857 comm="syz.8.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f94cdd8e929 code=0x7ffc0000 [ 718.646913][ T30] audit: type=1326 audit(1752637344.834:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12857 comm="syz.8.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94cdd8e929 code=0x7ffc0000 [ 718.765719][T12844] Bluetooth: hci4: command 0x0405 tx timeout [ 719.648664][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1831'. [ 720.279183][ T30] audit: type=1326 audit(1752637344.834:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12857 comm="syz.8.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7f94cdd8e929 code=0x7ffc0000 [ 720.302836][ T30] audit: type=1326 audit(1752637344.834:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12857 comm="syz.8.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94cdd8e929 code=0x7ffc0000 [ 720.327890][ T30] audit: type=1326 audit(1752637344.844:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12857 comm="syz.8.1829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f94cdd8e929 code=0x7ffc0000 [ 720.521453][T12873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1834'. [ 720.597524][ T977] usb 8-1: USB disconnect, device number 24 [ 721.063104][T12885] FAULT_INJECTION: forcing a failure. [ 721.063104][T12885] name failslab, interval 1, probability 0, space 0, times 0 [ 721.205999][T12885] CPU: 1 UID: 0 PID: 12885 Comm: syz.8.1840 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 721.206032][T12885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 721.206045][T12885] Call Trace: [ 721.206054][T12885] [ 721.206063][T12885] dump_stack_lvl+0x189/0x250 [ 721.206091][T12885] ? __pfx____ratelimit+0x10/0x10 [ 721.206120][T12885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 721.206140][T12885] ? __pfx__printk+0x10/0x10 [ 721.206169][T12885] ? __pfx___might_resched+0x10/0x10 [ 721.206188][T12885] ? fs_reclaim_acquire+0x7d/0x100 [ 721.206212][T12885] should_fail_ex+0x414/0x560 [ 721.206243][T12885] should_failslab+0xa8/0x100 [ 721.206276][T12885] __kmalloc_cache_noprof+0x70/0x3d0 [ 721.206311][T12885] ? nf_tables_newtable+0x435/0x1890 [ 721.206341][T12885] nf_tables_newtable+0x435/0x1890 [ 721.206363][T12885] ? nfnetlink_has_listeners+0x42/0x50 [ 721.206408][T12885] nfnetlink_rcv+0x112f/0x2520 [ 721.206468][T12885] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 721.206512][T12885] ? ref_tracker_free+0x63a/0x7d0 [ 721.206570][T12885] ? __netlink_deliver_tap+0x807/0x850 [ 721.206601][T12885] ? netlink_deliver_tap+0x2e/0x1b0 [ 721.206621][T12885] ? netlink_deliver_tap+0x2e/0x1b0 [ 721.206648][T12885] netlink_unicast+0x75c/0x8e0 [ 721.206678][T12885] netlink_sendmsg+0x805/0xb30 [ 721.206710][T12885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 721.206740][T12885] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 721.206764][T12885] ? __pfx_netlink_sendmsg+0x10/0x10 [ 721.206790][T12885] __sock_sendmsg+0x219/0x270 [ 721.206822][T12885] ____sys_sendmsg+0x505/0x830 [ 721.206851][T12885] ? __pfx_____sys_sendmsg+0x10/0x10 [ 721.206884][T12885] ? import_iovec+0x74/0xa0 [ 721.206908][T12885] ___sys_sendmsg+0x21f/0x2a0 [ 721.206933][T12885] ? __pfx____sys_sendmsg+0x10/0x10 [ 721.206993][T12885] ? __fget_files+0x2a/0x420 [ 721.207008][T12885] ? __fget_files+0x3a0/0x420 [ 721.207036][T12885] __x64_sys_sendmsg+0x19b/0x260 [ 721.207061][T12885] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 721.207094][T12885] ? __pfx_ksys_write+0x10/0x10 [ 721.207115][T12885] ? rcu_is_watching+0x15/0xb0 [ 721.207139][T12885] ? do_syscall_64+0xbe/0x3b0 [ 721.207160][T12885] do_syscall_64+0xfa/0x3b0 [ 721.207175][T12885] ? lockdep_hardirqs_on+0x9c/0x150 [ 721.207201][T12885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.207219][T12885] ? clear_bhb_loop+0x60/0xb0 [ 721.207241][T12885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.207259][T12885] RIP: 0033:0x7f94cdd8e929 [ 721.207276][T12885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 721.207291][T12885] RSP: 002b:00007f94ceb9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 721.207318][T12885] RAX: ffffffffffffffda RBX: 00007f94cdfb5fa0 RCX: 00007f94cdd8e929 [ 721.207332][T12885] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 721.207344][T12885] RBP: 00007f94ceb9e090 R08: 0000000000000000 R09: 0000000000000000 [ 721.207355][T12885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 721.207365][T12885] R13: 0000000000000000 R14: 00007f94cdfb5fa0 R15: 00007fff6b9b0b08 [ 721.207394][T12885] [ 721.579300][T12882] tmpfs: Bad value for 'mpol' [ 721.995836][ T977] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 722.215986][ T977] usb 8-1: Using ep0 maxpacket: 8 [ 722.229532][ T977] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 722.245997][ T977] usb 8-1: config 0 has no interface number 0 [ 722.256323][ T977] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 722.274015][ T977] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 722.292230][ T977] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 722.305125][ T977] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 722.377692][T12895] netlink: 'syz.6.1841': attribute type 10 has an invalid length. [ 722.385829][T12895] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1841'. [ 722.431192][ T977] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 722.475903][ T977] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.517040][ T977] usb 8-1: config 0 descriptor?? [ 722.541048][ T977] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 722.571078][T12895] team0: Port device geneve0 added [ 723.204784][T12910] Bluetooth: hci5: Frame reassembly failed (-90) [ 723.722668][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 723.722687][ T30] audit: type=1800 audit(1752637350.244:324): pid=12913 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.7.1839" name="bus" dev="tmpfs" ino=1006 res=0 errno=0 [ 724.393093][T12918] support for cryptoloop has been removed. Use dm-crypt instead. [ 724.578387][T12919] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1845'. [ 724.618152][T12918] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1845'. [ 724.721683][ T5957] usb 8-1: USB disconnect, device number 25 [ 724.732856][ T5957] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 725.656809][ T5156] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 726.415710][T12941] affs: No valid root block on device nullb0 [ 726.917649][T12948] tmpfs: Bad value for 'mpol' [ 728.289079][T12944] netlink: 31 bytes leftover after parsing attributes in process `syz.7.1851'. [ 730.990112][T12964] FAULT_INJECTION: forcing a failure. [ 730.990112][T12964] name fail_futex, interval 1, probability 0, space 0, times 1 [ 731.048065][T12964] CPU: 1 UID: 0 PID: 12964 Comm: syz.1.1857 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 731.048096][T12964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 731.048108][T12964] Call Trace: [ 731.048117][T12964] [ 731.048126][T12964] dump_stack_lvl+0x189/0x250 [ 731.048156][T12964] ? __pfx____ratelimit+0x10/0x10 [ 731.048188][T12964] ? __pfx_dump_stack_lvl+0x10/0x10 [ 731.048211][T12964] ? __pfx__printk+0x10/0x10 [ 731.048246][T12964] ? __lock_acquire+0xab9/0xd20 [ 731.048271][T12964] should_fail_ex+0x414/0x560 [ 731.048306][T12964] get_futex_key+0x1a8/0x1640 [ 731.048344][T12964] ? __pfx_get_futex_key+0x10/0x10 [ 731.048383][T12964] futex_wait_multiple_setup+0xe2/0x5f0 [ 731.048420][T12964] ? futex_parse_waitv+0x39e/0x410 [ 731.048450][T12964] ? __pfx_futex_wake_mark+0x10/0x10 [ 731.048485][T12964] futex_wait_multiple+0xaf/0x3b0 [ 731.048528][T12964] __se_sys_futex_waitv+0x1e5/0x280 [ 731.048560][T12964] ? __pfx___se_sys_futex_waitv+0x10/0x10 [ 731.048595][T12964] ? __pfx_ksys_write+0x10/0x10 [ 731.048621][T12964] ? rcu_is_watching+0x15/0xb0 [ 731.048649][T12964] ? do_syscall_64+0xbe/0x3b0 [ 731.048668][T12964] ? __x64_sys_futex_waitv+0x20/0xc0 [ 731.048698][T12964] do_syscall_64+0xfa/0x3b0 [ 731.048716][T12964] ? lockdep_hardirqs_on+0x9c/0x150 [ 731.048754][T12964] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.048774][T12964] ? clear_bhb_loop+0x60/0xb0 [ 731.048800][T12964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 731.048820][T12964] RIP: 0033:0x7f03e558e929 [ 731.048838][T12964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 731.048856][T12964] RSP: 002b:00007f03e632b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001c1 [ 731.048879][T12964] RAX: ffffffffffffffda RBX: 00007f03e57b5fa0 RCX: 00007f03e558e929 [ 731.048894][T12964] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000001080 [ 731.048908][T12964] RBP: 00007f03e632b090 R08: 0000000000000001 R09: 0000000000000000 [ 731.048920][T12964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 731.048932][T12964] R13: 0000000000000000 R14: 00007f03e57b5fa0 R15: 00007ffddb2b8cc8 [ 731.048965][T12964] [ 731.936944][ T9] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 732.006120][ T5828] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 732.112172][ T9] usb 8-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 732.131159][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.141818][ T9] usb 8-1: Product: syz [ 732.149568][ T9] usb 8-1: Manufacturer: syz [ 732.158036][ T9] usb 8-1: SerialNumber: syz [ 732.168458][ T5828] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 732.300310][ T5828] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 24623, setting to 1024 [ 732.580750][ T5828] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 732.591460][ T5828] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 732.601228][ T5828] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.614787][T12966] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 732.619179][ T9] usb 8-1: config 0 descriptor?? [ 732.660149][ T5828] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 732.664271][ T9] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 732.858557][T12966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 733.055379][T12966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 733.419127][T12988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 733.433140][ T5828] usb 8-1: USB disconnect, device number 26 [ 735.379956][ T5828] usb 9-1: USB disconnect, device number 17 [ 735.449140][T13017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1872'. [ 735.645200][ T30] audit: type=1326 audit(1752637362.144:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13016 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4378e929 code=0x7fc00000 [ 735.774935][ T30] audit: type=1326 audit(1752637362.154:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13016 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4378e929 code=0x7fc00000 [ 735.928663][ T30] audit: type=1326 audit(1752637362.154:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13016 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4378e929 code=0x7fc00000 [ 735.985264][ T30] audit: type=1326 audit(1752637362.154:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13016 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4378e929 code=0x7fc00000 [ 736.009573][ T30] audit: type=1326 audit(1752637362.154:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13016 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4378e929 code=0x7fc00000 [ 736.095533][ T30] audit: type=1326 audit(1752637362.154:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13016 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4378e929 code=0x7fc00000 [ 736.277637][ T30] audit: type=1326 audit(1752637362.164:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13016 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4378e929 code=0x7fc00000 [ 736.334419][ T30] audit: type=1326 audit(1752637362.164:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13016 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4378e929 code=0x7fc00000 [ 736.380032][ T30] audit: type=1326 audit(1752637362.164:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13016 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4378e929 code=0x7fc00000 [ 736.466070][ T30] audit: type=1326 audit(1752637362.164:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13016 comm="syz.3.1872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e4378e929 code=0x7fc00000 [ 738.555491][T13046] loop6: detected capacity change from 0 to 63 [ 738.637178][T13048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 738.699273][T13046] Buffer I/O error on dev loop6, logical block 0, async page read [ 738.715688][T13046] Buffer I/O error on dev loop6, logical block 1, async page read [ 738.734101][T13046] Buffer I/O error on dev loop6, logical block 2, async page read [ 738.751084][T13046] Buffer I/O error on dev loop6, logical block 3, async page read [ 738.765670][T13046] Buffer I/O error on dev loop6, logical block 0, async page read [ 738.778727][T13046] Buffer I/O error on dev loop6, logical block 1, async page read [ 738.789371][T13046] Buffer I/O error on dev loop6, logical block 2, async page read [ 738.801079][T13046] Buffer I/O error on dev loop6, logical block 3, async page read [ 738.812309][T13046] Buffer I/O error on dev loop6, logical block 0, async page read [ 738.827250][T13046] Buffer I/O error on dev loop6, logical block 1, async page read [ 738.835984][ T5828] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 739.866433][ T5828] usb 2-1: Using ep0 maxpacket: 8 [ 739.874861][ T5828] usb 2-1: config 6 has an invalid interface number: 2 but max is 0 [ 739.885062][ T5828] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 740.148669][ T5828] usb 2-1: config 6 has no interface number 0 [ 740.157651][ T5828] usb 2-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xAA, changing to 0x8A [ 740.170417][T13056] overlay: Unknown parameter '/' [ 740.195783][ T5828] usb 2-1: config 6 interface 2 altsetting 0 endpoint 0x8A has invalid maxpacket 4363, setting to 64 [ 740.208375][ T5828] usb 2-1: config 6 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 740.324919][ T5828] usb 2-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 740.334103][ T5828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.343422][ T5828] usb 2-1: Product: syz [ 740.348352][ T5828] usb 2-1: Manufacturer: syz [ 740.353003][ T5828] usb 2-1: SerialNumber: syz [ 740.363937][ T5828] hso 2-1:6.2: Failed to find INT IN ep [ 740.608700][ T5954] usb 2-1: USB disconnect, device number 37 [ 740.955911][T13069] netlink: 148 bytes leftover after parsing attributes in process `syz.7.1884'. [ 740.965395][T13069] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1884'. [ 741.845996][T13075] can0: slcan on ttyS3. [ 742.031708][T13078] can0 (unregistered): slcan off ttyS3. [ 742.157696][T13085] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 742.373551][T13090] FAULT_INJECTION: forcing a failure. [ 742.373551][T13090] name failslab, interval 1, probability 0, space 0, times 0 [ 742.435760][T13090] CPU: 1 UID: 0 PID: 13090 Comm: syz.1.1895 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 742.435799][T13090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 742.435813][T13090] Call Trace: [ 742.435821][T13090] [ 742.435831][T13090] dump_stack_lvl+0x189/0x250 [ 742.435859][T13090] ? __pfx____ratelimit+0x10/0x10 [ 742.435891][T13090] ? __pfx_dump_stack_lvl+0x10/0x10 [ 742.435913][T13090] ? __pfx__printk+0x10/0x10 [ 742.435946][T13090] ? __pfx___might_resched+0x10/0x10 [ 742.435974][T13090] should_fail_ex+0x414/0x560 [ 742.436008][T13090] should_failslab+0xa8/0x100 [ 742.436041][T13090] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 742.436071][T13090] ? __alloc_skb+0x112/0x2d0 [ 742.436104][T13090] __alloc_skb+0x112/0x2d0 [ 742.436132][T13090] netlink_sendmsg+0x5c6/0xb30 [ 742.436167][T13090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 742.436200][T13090] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 742.436229][T13090] ? __pfx_netlink_sendmsg+0x10/0x10 [ 742.436254][T13090] __sock_sendmsg+0x219/0x270 [ 742.436289][T13090] ____sys_sendmsg+0x505/0x830 [ 742.436321][T13090] ? __pfx_____sys_sendmsg+0x10/0x10 [ 742.436356][T13090] ? import_iovec+0x74/0xa0 [ 742.436384][T13090] ___sys_sendmsg+0x21f/0x2a0 [ 742.436412][T13090] ? __pfx____sys_sendmsg+0x10/0x10 [ 742.436478][T13090] ? __fget_files+0x2a/0x420 [ 742.436495][T13090] ? __fget_files+0x3a0/0x420 [ 742.436526][T13090] __x64_sys_sendmsg+0x19b/0x260 [ 742.436556][T13090] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 742.436593][T13090] ? __pfx_ksys_write+0x10/0x10 [ 742.436618][T13090] ? rcu_is_watching+0x15/0xb0 [ 742.436646][T13090] ? do_syscall_64+0xbe/0x3b0 [ 742.436670][T13090] do_syscall_64+0xfa/0x3b0 [ 742.436687][T13090] ? lockdep_hardirqs_on+0x9c/0x150 [ 742.436717][T13090] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.436737][T13090] ? clear_bhb_loop+0x60/0xb0 [ 742.436761][T13090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.436782][T13090] RIP: 0033:0x7f03e558e929 [ 742.436806][T13090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.436824][T13090] RSP: 002b:00007f03e632b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 742.436845][T13090] RAX: ffffffffffffffda RBX: 00007f03e57b5fa0 RCX: 00007f03e558e929 [ 742.436860][T13090] RDX: 000000000000c054 RSI: 00002000000006c0 RDI: 0000000000000004 [ 742.436873][T13090] RBP: 00007f03e632b090 R08: 0000000000000000 R09: 0000000000000000 [ 742.436885][T13090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.436897][T13090] R13: 0000000000000000 R14: 00007f03e57b5fa0 R15: 00007ffddb2b8cc8 [ 742.436929][T13090] [ 742.777782][T13099] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1897'. [ 743.292706][T13097] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1893'. [ 743.301923][T13097] IPVS: Unknown mcast interface: vcan0 [ 745.674002][T13139] FAULT_INJECTION: forcing a failure. [ 745.674002][T13139] name failslab, interval 1, probability 0, space 0, times 0 [ 745.725946][T13139] CPU: 1 UID: 0 PID: 13139 Comm: syz.8.1909 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 745.725976][T13139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 745.725987][T13139] Call Trace: [ 745.725996][T13139] [ 745.726004][T13139] dump_stack_lvl+0x189/0x250 [ 745.726033][T13139] ? __pfx____ratelimit+0x10/0x10 [ 745.726062][T13139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 745.726082][T13139] ? __pfx__printk+0x10/0x10 [ 745.726110][T13139] ? __pfx___might_resched+0x10/0x10 [ 745.726131][T13139] ? fs_reclaim_acquire+0x7d/0x100 [ 745.726155][T13139] should_fail_ex+0x414/0x560 [ 745.726188][T13139] should_failslab+0xa8/0x100 [ 745.726219][T13139] __kmalloc_noprof+0xcb/0x4f0 [ 745.726245][T13139] ? tomoyo_encode+0x28b/0x550 [ 745.726268][T13139] tomoyo_encode+0x28b/0x550 [ 745.726292][T13139] tomoyo_realpath_from_path+0x58d/0x5d0 [ 745.726315][T13139] ? tomoyo_domain+0xda/0x130 [ 745.726342][T13139] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 745.726372][T13139] tomoyo_path_number_perm+0x1e8/0x5a0 [ 745.726405][T13139] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 745.726451][T13139] ? __lock_acquire+0xab9/0xd20 [ 745.726501][T13139] ? __fget_files+0x2a/0x420 [ 745.726523][T13139] ? __fget_files+0x2a/0x420 [ 745.726540][T13139] ? __fget_files+0x3a0/0x420 [ 745.726557][T13139] ? __fget_files+0x2a/0x420 [ 745.726580][T13139] security_file_ioctl+0xcb/0x2d0 [ 745.726613][T13139] __se_sys_ioctl+0x47/0x170 [ 745.726642][T13139] do_syscall_64+0xfa/0x3b0 [ 745.726661][T13139] ? lockdep_hardirqs_on+0x9c/0x150 [ 745.726691][T13139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.726712][T13139] ? clear_bhb_loop+0x60/0xb0 [ 745.726737][T13139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 745.726757][T13139] RIP: 0033:0x7f94cdd8e929 [ 745.726775][T13139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 745.726793][T13139] RSP: 002b:00007f94ceb9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 745.726815][T13139] RAX: ffffffffffffffda RBX: 00007f94cdfb5fa0 RCX: 00007f94cdd8e929 [ 745.726830][T13139] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 745.726842][T13139] RBP: 00007f94ceb9e090 R08: 0000000000000000 R09: 0000000000000000 [ 745.726855][T13139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 745.726866][T13139] R13: 0000000000000000 R14: 00007f94cdfb5fa0 R15: 00007fff6b9b0b08 [ 745.726899][T13139] [ 745.726922][T13139] ERROR: Out of memory at tomoyo_realpath_from_path. [ 746.310228][T13151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1911'. [ 746.326638][T13151] IPVS: Error joining to the multicast group [ 746.816227][ T977] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 747.410036][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.195842][ T977] usb 2-1: device descriptor read/64, error -71 [ 748.572470][ T977] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 748.669461][T13168] FAULT_INJECTION: forcing a failure. [ 748.669461][T13168] name failslab, interval 1, probability 0, space 0, times 0 [ 748.958369][ T977] usb 2-1: device descriptor read/64, error -71 [ 749.135559][T13168] CPU: 0 UID: 0 PID: 13168 Comm: syz.6.1916 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 749.135592][T13168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 749.135605][T13168] Call Trace: [ 749.135614][T13168] [ 749.135623][T13168] dump_stack_lvl+0x189/0x250 [ 749.135652][T13168] ? __pfx____ratelimit+0x10/0x10 [ 749.135684][T13168] ? __pfx_dump_stack_lvl+0x10/0x10 [ 749.135707][T13168] ? __pfx__printk+0x10/0x10 [ 749.135739][T13168] ? __pfx___might_resched+0x10/0x10 [ 749.135763][T13168] ? fs_reclaim_acquire+0x7d/0x100 [ 749.135789][T13168] should_fail_ex+0x414/0x560 [ 749.135823][T13168] should_failslab+0xa8/0x100 [ 749.135856][T13168] kmem_cache_alloc_noprof+0x73/0x3c0 [ 749.135883][T13168] ? getname_flags+0xb8/0x540 [ 749.135908][T13168] getname_flags+0xb8/0x540 [ 749.135932][T13168] path_setxattrat+0x2ac/0x3a0 [ 749.135967][T13168] ? __pfx_path_setxattrat+0x10/0x10 [ 749.135989][T13168] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 749.136039][T13168] ? ksys_write+0x22a/0x250 [ 749.136069][T13168] ? __pfx_ksys_write+0x10/0x10 [ 749.136094][T13168] ? rcu_is_watching+0x15/0xb0 [ 749.136122][T13168] __x64_sys_setxattr+0xbc/0xe0 [ 749.136147][T13168] do_syscall_64+0xfa/0x3b0 [ 749.136165][T13168] ? lockdep_hardirqs_on+0x9c/0x150 [ 749.136201][T13168] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.136221][T13168] ? clear_bhb_loop+0x60/0xb0 [ 749.136246][T13168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 749.136265][T13168] RIP: 0033:0x7f5a9238e929 [ 749.136283][T13168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 749.136300][T13168] RSP: 002b:00007f5a9324d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 749.136322][T13168] RAX: ffffffffffffffda RBX: 00007f5a925b5fa0 RCX: 00007f5a9238e929 [ 749.136336][T13168] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000080 [ 749.136350][T13168] RBP: 00007f5a9324d090 R08: 0000000000000001 R09: 0000000000000000 [ 749.136362][T13168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 749.136374][T13168] R13: 0000000000000000 R14: 00007f5a925b5fa0 R15: 00007ffc80e47a88 [ 749.136406][T13168] [ 749.185856][ T977] usb usb2-port1: attempt power cycle [ 750.223929][T13184] FAULT_INJECTION: forcing a failure. [ 750.223929][T13184] name failslab, interval 1, probability 0, space 0, times 0 [ 750.326485][T13184] CPU: 1 UID: 0 PID: 13184 Comm: syz.1.1919 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 750.326508][T13184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 750.326517][T13184] Call Trace: [ 750.326524][T13184] [ 750.326530][T13184] dump_stack_lvl+0x189/0x250 [ 750.326551][T13184] ? __pfx____ratelimit+0x10/0x10 [ 750.326575][T13184] ? __pfx_dump_stack_lvl+0x10/0x10 [ 750.326591][T13184] ? __pfx__printk+0x10/0x10 [ 750.326615][T13184] ? __pfx___might_resched+0x10/0x10 [ 750.326635][T13184] should_fail_ex+0x414/0x560 [ 750.326660][T13184] ? io_sqe_buffers_register+0x133/0x8d0 [ 750.326675][T13184] should_failslab+0xa8/0x100 [ 750.326699][T13184] __kvmalloc_node_noprof+0x161/0x5f0 [ 750.326721][T13184] ? io_sqe_buffers_register+0x133/0x8d0 [ 750.326736][T13184] ? __lock_acquire+0xab9/0xd20 [ 750.326753][T13184] io_sqe_buffers_register+0x133/0x8d0 [ 750.326782][T13184] ? __might_fault+0xb0/0x130 [ 750.326826][T13184] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 750.326855][T13184] io_register_rsrc+0x229/0x260 [ 750.326875][T13184] ? __fget_files+0x2a/0x420 [ 750.326890][T13184] ? __pfx_io_register_rsrc+0x10/0x10 [ 750.326911][T13184] ? __fget_files+0x2a/0x420 [ 750.326926][T13184] ? io_is_uring_fops+0xd/0x50 [ 750.326947][T13184] __se_sys_io_uring_register+0xabb/0x11b0 [ 750.326968][T13184] ? __pfx___se_sys_io_uring_register+0x10/0x10 [ 750.326981][T13184] ? ksys_write+0x22a/0x250 [ 750.327004][T13184] ? __pfx_ksys_write+0x10/0x10 [ 750.327022][T13184] ? rcu_is_watching+0x15/0xb0 [ 750.327042][T13184] ? do_syscall_64+0xbe/0x3b0 [ 750.327060][T13184] do_syscall_64+0xfa/0x3b0 [ 750.327074][T13184] ? lockdep_hardirqs_on+0x9c/0x150 [ 750.327096][T13184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.327110][T13184] ? clear_bhb_loop+0x60/0xb0 [ 750.327128][T13184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 750.327142][T13184] RIP: 0033:0x7f03e558e929 [ 750.327158][T13184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 750.327171][T13184] RSP: 002b:00007f03e632b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 750.327187][T13184] RAX: ffffffffffffffda RBX: 00007f03e57b5fa0 RCX: 00007f03e558e929 [ 750.327198][T13184] RDX: 00002000000060c0 RSI: 000000000000000f RDI: 0000000000000003 [ 750.327207][T13184] RBP: 00007f03e632b090 R08: 0000000000000000 R09: 0000000000000000 [ 750.327216][T13184] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 750.327225][T13184] R13: 0000000000000000 R14: 00007f03e57b5fa0 R15: 00007ffddb2b8cc8 [ 750.327249][T13184] [ 751.347523][T13202] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1925'. [ 752.180416][T13207] tmpfs: Bad value for 'size' [ 753.784717][ T5828] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 753.979674][ T5828] usb 8-1: config 0 has an invalid interface number: 229 but max is 0 [ 754.007772][ T5828] usb 8-1: config 0 has no interface number 0 [ 754.013983][ T5828] usb 8-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice= c.19 [ 754.025819][T13231] 9pnet_fd: Insufficient options for proto=fd [ 754.061773][ T5828] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.099893][ T5828] usb 8-1: config 0 descriptor?? [ 754.338331][ T5892] usb 8-1: USB disconnect, device number 27 [ 754.502226][T13238] netlink: 68 bytes leftover after parsing attributes in process `syz.8.1940'. [ 759.847778][T13276] tmpfs: Bad value for 'mpol' [ 761.495079][T13282] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1950'. [ 761.504604][T13282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1950'. [ 761.780702][T13289] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1952'. [ 761.922133][T13292] FAULT_INJECTION: forcing a failure. [ 761.922133][T13292] name failslab, interval 1, probability 0, space 0, times 0 [ 761.995360][T13292] CPU: 0 UID: 0 PID: 13292 Comm: syz.8.1953 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 761.995394][T13292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 761.995407][T13292] Call Trace: [ 761.995416][T13292] [ 761.995425][T13292] dump_stack_lvl+0x189/0x250 [ 761.995455][T13292] ? __pfx____ratelimit+0x10/0x10 [ 761.995487][T13292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 761.995510][T13292] ? __pfx__printk+0x10/0x10 [ 761.995540][T13292] ? __pfx___might_resched+0x10/0x10 [ 761.995563][T13292] ? fs_reclaim_acquire+0x7d/0x100 [ 761.995588][T13292] should_fail_ex+0x414/0x560 [ 761.995623][T13292] should_failslab+0xa8/0x100 [ 761.995656][T13292] __kmalloc_noprof+0xcb/0x4f0 [ 761.995684][T13292] ? tomoyo_encode+0x28b/0x550 [ 761.995710][T13292] tomoyo_encode+0x28b/0x550 [ 761.995737][T13292] tomoyo_realpath_from_path+0x58d/0x5d0 [ 761.995775][T13292] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 761.995805][T13292] tomoyo_path_number_perm+0x1e8/0x5a0 [ 761.995836][T13292] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 761.995885][T13292] ? __lock_acquire+0xab9/0xd20 [ 761.995928][T13292] ? __fget_files+0x2a/0x420 [ 761.995949][T13292] ? __fget_files+0x2a/0x420 [ 761.995967][T13292] ? __fget_files+0x3a0/0x420 [ 761.995983][T13292] ? __fget_files+0x2a/0x420 [ 761.996006][T13292] security_file_ioctl+0xcb/0x2d0 [ 761.996040][T13292] __se_sys_ioctl+0x47/0x170 [ 761.996069][T13292] do_syscall_64+0xfa/0x3b0 [ 761.996096][T13292] ? lockdep_hardirqs_on+0x9c/0x150 [ 761.996125][T13292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.996146][T13292] ? clear_bhb_loop+0x60/0xb0 [ 761.996172][T13292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.996192][T13292] RIP: 0033:0x7f94cdd8e929 [ 761.996210][T13292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 761.996228][T13292] RSP: 002b:00007f94ceb9e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 761.996250][T13292] RAX: ffffffffffffffda RBX: 00007f94cdfb5fa0 RCX: 00007f94cdd8e929 [ 761.996295][T13292] RDX: 0000200000000140 RSI: 0000000040946400 RDI: 0000000000000003 [ 761.996308][T13292] RBP: 00007f94ceb9e090 R08: 0000000000000000 R09: 0000000000000000 [ 761.996321][T13292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.996333][T13292] R13: 0000000000000000 R14: 00007f94cdfb5fa0 R15: 00007fff6b9b0b08 [ 761.996366][T13292] [ 761.996475][T13292] ERROR: Out of memory at tomoyo_realpath_from_path. [ 762.315390][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1955'. [ 762.355801][T13295] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1955'. [ 763.948645][T13330] FAULT_INJECTION: forcing a failure. [ 763.948645][T13330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 763.963231][T13330] CPU: 0 UID: 0 PID: 13330 Comm: syz.8.1969 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 763.963259][T13330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 763.963272][T13330] Call Trace: [ 763.963280][T13330] [ 763.963289][T13330] dump_stack_lvl+0x189/0x250 [ 763.963318][T13330] ? __pfx____ratelimit+0x10/0x10 [ 763.963349][T13330] ? __pfx_dump_stack_lvl+0x10/0x10 [ 763.963372][T13330] ? __pfx__printk+0x10/0x10 [ 763.963412][T13330] should_fail_ex+0x414/0x560 [ 763.963447][T13330] _copy_to_user+0x31/0xb0 [ 763.963472][T13330] simple_read_from_buffer+0xe1/0x170 [ 763.963512][T13330] proc_fail_nth_read+0x1df/0x250 [ 763.963536][T13330] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 763.963561][T13330] ? rw_verify_area+0x258/0x650 [ 763.963586][T13330] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 763.963609][T13330] vfs_read+0x200/0x980 [ 763.963645][T13330] ? __pfx_vfs_read+0x10/0x10 [ 763.963677][T13330] ? rcu_is_watching+0x15/0xb0 [ 763.963698][T13330] ? do_sock_setsockopt+0x267/0x3e0 [ 763.963722][T13330] ? kfree+0x4d/0x440 [ 763.963749][T13330] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 763.963772][T13330] ? do_sock_setsockopt+0x267/0x3e0 [ 763.963807][T13330] ksys_read+0x145/0x250 [ 763.963837][T13330] ? __pfx_ksys_read+0x10/0x10 [ 763.963870][T13330] ? do_syscall_64+0xbe/0x3b0 [ 763.963894][T13330] do_syscall_64+0xfa/0x3b0 [ 763.963912][T13330] ? lockdep_hardirqs_on+0x9c/0x150 [ 763.963943][T13330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.963964][T13330] ? clear_bhb_loop+0x60/0xb0 [ 763.963989][T13330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.964009][T13330] RIP: 0033:0x7f94cdd8d33c [ 763.964027][T13330] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 763.964045][T13330] RSP: 002b:00007f94ceb9e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 763.964066][T13330] RAX: ffffffffffffffda RBX: 00007f94cdfb5fa0 RCX: 00007f94cdd8d33c [ 763.964081][T13330] RDX: 000000000000000f RSI: 00007f94ceb9e0a0 RDI: 0000000000000004 [ 763.964093][T13330] RBP: 00007f94ceb9e090 R08: 0000000000000000 R09: 0000000000000000 [ 763.964106][T13330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 763.964117][T13330] R13: 0000000000000000 R14: 00007f94cdfb5fa0 R15: 00007fff6b9b0b08 [ 763.964148][T13330] [ 764.201324][ T977] usb 8-1: new full-speed USB device number 28 using dummy_hcd [ 764.465087][T13315] orangefs_mount: mount request failed with -4 [ 764.538171][ T977] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 764.551539][ T977] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.856727][ T977] usb 8-1: config 0 descriptor?? [ 765.978952][T13363] syzkaller0: entered promiscuous mode [ 766.007171][T13363] syzkaller0: entered allmulticast mode [ 766.030428][T13367] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 766.824344][T13380] FAULT_INJECTION: forcing a failure. [ 766.824344][T13380] name failslab, interval 1, probability 0, space 0, times 0 [ 766.930338][ T977] usb 8-1: USB disconnect, device number 28 [ 766.938910][T13380] CPU: 1 UID: 0 PID: 13380 Comm: syz.8.1985 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 766.938938][T13380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 766.938952][T13380] Call Trace: [ 766.938960][T13380] [ 766.938969][T13380] dump_stack_lvl+0x189/0x250 [ 766.938998][T13380] ? __pfx____ratelimit+0x10/0x10 [ 766.939029][T13380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 766.939053][T13380] ? __pfx__printk+0x10/0x10 [ 766.939086][T13380] ? __pfx___might_resched+0x10/0x10 [ 766.939113][T13380] should_fail_ex+0x414/0x560 [ 766.939148][T13380] should_failslab+0xa8/0x100 [ 766.939181][T13380] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 766.939215][T13380] ? __alloc_skb+0x112/0x2d0 [ 766.939243][T13380] __alloc_skb+0x112/0x2d0 [ 766.939270][T13380] netlink_sendmsg+0x5c6/0xb30 [ 766.939306][T13380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.939339][T13380] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 766.939368][T13380] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.939393][T13380] __sock_sendmsg+0x219/0x270 [ 766.939428][T13380] ____sys_sendmsg+0x505/0x830 [ 766.939460][T13380] ? __pfx_____sys_sendmsg+0x10/0x10 [ 766.939495][T13380] ? import_iovec+0x74/0xa0 [ 766.939523][T13380] ___sys_sendmsg+0x21f/0x2a0 [ 766.939552][T13380] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.939618][T13380] ? __fget_files+0x2a/0x420 [ 766.939636][T13380] ? __fget_files+0x3a0/0x420 [ 766.939666][T13380] __x64_sys_sendmsg+0x19b/0x260 [ 766.939701][T13380] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 766.939739][T13380] ? __pfx_ksys_write+0x10/0x10 [ 766.939764][T13380] ? rcu_is_watching+0x15/0xb0 [ 766.939794][T13380] ? do_syscall_64+0xbe/0x3b0 [ 766.939817][T13380] do_syscall_64+0xfa/0x3b0 [ 766.939835][T13380] ? lockdep_hardirqs_on+0x9c/0x150 [ 766.939864][T13380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.939884][T13380] ? clear_bhb_loop+0x60/0xb0 [ 766.939909][T13380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.939928][T13380] RIP: 0033:0x7f94cdd8e929 [ 766.939945][T13380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 766.939962][T13380] RSP: 002b:00007f94ceb9e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 766.939984][T13380] RAX: ffffffffffffffda RBX: 00007f94cdfb5fa0 RCX: 00007f94cdd8e929 [ 766.939998][T13380] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 766.940010][T13380] RBP: 00007f94ceb9e090 R08: 0000000000000000 R09: 0000000000000000 [ 766.940023][T13380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.940035][T13380] R13: 0000000000000000 R14: 00007f94cdfb5fa0 R15: 00007fff6b9b0b08 [ 766.940066][T13380] [ 767.208501][ C1] vkms_vblank_simulate: vblank timer overrun [ 767.277353][T13385] FAULT_INJECTION: forcing a failure. [ 767.277353][T13385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.337523][T13385] CPU: 0 UID: 0 PID: 13385 Comm: syz.7.1987 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 767.337554][T13385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 767.337566][T13385] Call Trace: [ 767.337574][T13385] [ 767.337584][T13385] dump_stack_lvl+0x189/0x250 [ 767.337626][T13385] ? __pfx____ratelimit+0x10/0x10 [ 767.337657][T13385] ? __pfx_dump_stack_lvl+0x10/0x10 [ 767.337680][T13385] ? __pfx__printk+0x10/0x10 [ 767.337720][T13385] should_fail_ex+0x414/0x560 [ 767.337758][T13385] _copy_to_user+0x31/0xb0 [ 767.337784][T13385] simple_read_from_buffer+0xe1/0x170 [ 767.337821][T13385] proc_fail_nth_read+0x1df/0x250 [ 767.337846][T13385] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 767.337870][T13385] ? rw_verify_area+0x258/0x650 [ 767.337897][T13385] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 767.337919][T13385] vfs_read+0x200/0x980 [ 767.337951][T13385] ? __pfx___mutex_lock+0x10/0x10 [ 767.337972][T13385] ? __pfx_vfs_read+0x10/0x10 [ 767.338001][T13385] ? __fget_files+0x2a/0x420 [ 767.338025][T13385] ? __fget_files+0x3a0/0x420 [ 767.338042][T13385] ? __fget_files+0x2a/0x420 [ 767.338069][T13385] ksys_read+0x145/0x250 [ 767.338101][T13385] ? __pfx_ksys_read+0x10/0x10 [ 767.338125][T13385] ? rcu_is_watching+0x15/0xb0 [ 767.338154][T13385] ? do_syscall_64+0xbe/0x3b0 [ 767.338178][T13385] do_syscall_64+0xfa/0x3b0 [ 767.338196][T13385] ? lockdep_hardirqs_on+0x9c/0x150 [ 767.338226][T13385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.338247][T13385] ? clear_bhb_loop+0x60/0xb0 [ 767.338272][T13385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.338291][T13385] RIP: 0033:0x7f6498f8d33c [ 767.338308][T13385] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 767.338327][T13385] RSP: 002b:00007f6499d89030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 767.338381][T13385] RAX: ffffffffffffffda RBX: 00007f64991b5fa0 RCX: 00007f6498f8d33c [ 767.338396][T13385] RDX: 000000000000000f RSI: 00007f6499d890a0 RDI: 0000000000000005 [ 767.338409][T13385] RBP: 00007f6499d89090 R08: 0000000000000000 R09: 0000000000000000 [ 767.338422][T13385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.338433][T13385] R13: 0000000000000000 R14: 00007f64991b5fa0 R15: 00007ffc91296a58 [ 767.338465][T13385] [ 768.449364][T13405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1993'. [ 768.648906][T13401] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.159898][T13413] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 769.171976][T13413] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 769.793385][T13420] FAULT_INJECTION: forcing a failure. [ 769.793385][T13420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 769.815641][T13420] CPU: 0 UID: 0 PID: 13420 Comm: syz.1.2000 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 769.815672][T13420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 769.815685][T13420] Call Trace: [ 769.815693][T13420] [ 769.815703][T13420] dump_stack_lvl+0x189/0x250 [ 769.815731][T13420] ? __pfx____ratelimit+0x10/0x10 [ 769.815767][T13420] ? __pfx_dump_stack_lvl+0x10/0x10 [ 769.815790][T13420] ? __pfx__printk+0x10/0x10 [ 769.815830][T13420] should_fail_ex+0x414/0x560 [ 769.815865][T13420] _copy_to_user+0x31/0xb0 [ 769.815891][T13420] csum_and_copy_to_iter+0x83f/0x1c30 [ 769.815942][T13420] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 769.815978][T13420] ? __skb_recv_udp+0x4be/0x990 [ 769.816002][T13420] ? __skb_recv_udp+0x890/0x990 [ 769.816026][T13420] __skb_datagram_iter+0x89f/0x990 [ 769.816056][T13420] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 769.816088][T13420] ? csum_partial+0x239/0x2c0 [ 769.816113][T13420] skb_copy_and_csum_datagram_msg+0x1b8/0x440 [ 769.816148][T13420] ? __pfx_skb_copy_and_csum_datagram_msg+0x10/0x10 [ 769.816190][T13420] udp_recvmsg+0x3b8/0x1300 [ 769.816231][T13420] ? __pfx_udp_recvmsg+0x10/0x10 [ 769.816261][T13420] ? sock_rps_record_flow+0x19/0x410 [ 769.816283][T13420] ? __pfx_udp_recvmsg+0x10/0x10 [ 769.816303][T13420] inet_recvmsg+0x202/0x250 [ 769.816326][T13420] ? __pfx_inet_recvmsg+0x10/0x10 [ 769.816343][T13420] ? __lock_acquire+0xab9/0xd20 [ 769.816371][T13420] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 769.816399][T13420] ? security_socket_recvmsg+0x7e/0x2e0 [ 769.816429][T13420] sock_recvmsg+0x1a8/0x270 [ 769.816465][T13420] ____sys_recvmsg+0x1c9/0x460 [ 769.816502][T13420] ? __pfx_____sys_recvmsg+0x10/0x10 [ 769.816545][T13420] ? import_iovec+0x74/0xa0 [ 769.816573][T13420] ___sys_recvmsg+0x1b5/0x510 [ 769.816606][T13420] ? __pfx____sys_recvmsg+0x10/0x10 [ 769.816661][T13420] ? __fget_files+0x3a0/0x420 [ 769.816692][T13420] do_recvmmsg+0x307/0x770 [ 769.816729][T13420] ? __pfx_do_recvmmsg+0x10/0x10 [ 769.816768][T13420] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 769.816809][T13420] __x64_sys_recvmmsg+0x190/0x240 [ 769.816840][T13420] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 769.816865][T13420] ? rcu_is_watching+0x15/0xb0 [ 769.816894][T13420] ? do_syscall_64+0xbe/0x3b0 [ 769.816918][T13420] do_syscall_64+0xfa/0x3b0 [ 769.816936][T13420] ? lockdep_hardirqs_on+0x9c/0x150 [ 769.816966][T13420] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.816986][T13420] ? clear_bhb_loop+0x60/0xb0 [ 769.817011][T13420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.817031][T13420] RIP: 0033:0x7f03e558e929 [ 769.817048][T13420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 769.817066][T13420] RSP: 002b:00007f03e632b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 769.817088][T13420] RAX: ffffffffffffffda RBX: 00007f03e57b5fa0 RCX: 00007f03e558e929 [ 769.817102][T13420] RDX: 0000000000000001 RSI: 0000200000005600 RDI: 0000000000000003 [ 769.817115][T13420] RBP: 00007f03e632b090 R08: 0000000000000000 R09: 0000000000000000 [ 769.817127][T13420] R10: 0000000000010061 R11: 0000000000000246 R12: 0000000000000001 [ 769.817140][T13420] R13: 0000000000000000 R14: 00007f03e57b5fa0 R15: 00007ffddb2b8cc8 [ 769.817171][T13420] [ 770.275824][T13421] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1999'. [ 770.289433][T13421] overlayfs: failed to clone upperpath [ 770.380649][T13430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 770.615313][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 770.775576][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 770.787375][ T9] usb 2-1: config 0 has no interfaces? [ 770.803410][ T9] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 770.869094][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.927120][ T9] usb 2-1: config 0 descriptor?? [ 771.716383][T13429] FAULT_INJECTION: forcing a failure. [ 771.716383][T13429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.760426][T13429] CPU: 1 UID: 0 PID: 13429 Comm: syz.1.2002 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 771.760457][T13429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 771.760471][T13429] Call Trace: [ 771.760479][T13429] [ 771.760488][T13429] dump_stack_lvl+0x189/0x250 [ 771.760517][T13429] ? __pfx____ratelimit+0x10/0x10 [ 771.760549][T13429] ? __pfx_dump_stack_lvl+0x10/0x10 [ 771.760571][T13429] ? __pfx__printk+0x10/0x10 [ 771.760596][T13429] ? __might_fault+0xb0/0x130 [ 771.760636][T13429] should_fail_ex+0x414/0x560 [ 771.760669][T13429] _copy_from_user+0x2d/0xb0 [ 771.760693][T13429] core_sys_select+0x4b7/0xa20 [ 771.760734][T13429] ? __pfx_core_sys_select+0x10/0x10 [ 771.760790][T13429] ? __pfx_set_user_sigmask+0x10/0x10 [ 771.760824][T13429] __se_sys_pselect6+0x27a/0x300 [ 771.760859][T13429] ? __pfx___se_sys_pselect6+0x10/0x10 [ 771.760889][T13429] ? __pfx_ksys_write+0x10/0x10 [ 771.760912][T13429] ? rcu_is_watching+0x15/0xb0 [ 771.760939][T13429] ? __x64_sys_pselect6+0x21/0xf0 [ 771.760971][T13429] do_syscall_64+0xfa/0x3b0 [ 771.760991][T13429] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.761010][T13429] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 771.761040][T13429] ? clear_bhb_loop+0x60/0xb0 [ 771.761066][T13429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.761084][T13429] RIP: 0033:0x7f03e558e929 [ 771.761102][T13429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.761119][T13429] RSP: 002b:00007f03e632b038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 771.761140][T13429] RAX: ffffffffffffffda RBX: 00007f03e57b5fa0 RCX: 00007f03e558e929 [ 771.761154][T13429] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 771.761167][T13429] RBP: 00007f03e632b090 R08: 0000200000000280 R09: 0000000000000000 [ 771.761179][T13429] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 771.761191][T13429] R13: 0000000000000000 R14: 00007f03e57b5fa0 R15: 00007ffddb2b8cc8 [ 771.761222][T13429] [ 771.970227][ C1] vkms_vblank_simulate: vblank timer overrun [ 773.172850][ T5828] usb 2-1: USB disconnect, device number 41 [ 773.175440][T13459] ------------[ cut here ]------------ [ 773.185446][T13459] WARNING: CPU: 0 PID: 13459 at mm/page_alloc.c:4935 __alloc_frozen_pages_noprof+0x2c8/0x370 [ 773.195916][T13459] Modules linked in: [ 773.200789][T13459] CPU: 0 UID: 0 PID: 13459 Comm: syz.6.2013 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 773.214739][T13459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 773.225253][T13459] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 773.232858][T13459] Code: 74 10 4c 89 e7 89 54 24 0c e8 14 14 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 4d 44 76 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 773.253420][T13459] RSP: 0018:ffffc90002f079c0 EFLAGS: 00010246 [ 773.260103][T13459] RAX: ffffc90002f07a00 RBX: 000000000000002a RCX: 0000000000000000 [ 773.268266][T13459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90002f07a28 [ 773.276657][T13459] RBP: ffffc90002f07aa8 R08: ffffc90002f07a27 R09: 0000000000000000 [ 773.284975][T13459] R10: ffffc90002f07a00 R11: fffff520005e0f45 R12: 0000000000000000 [ 773.293158][T13459] R13: 1ffff920005e0f3c R14: 0000000000040d40 R15: dffffc0000000000 [ 773.301283][T13459] FS: 00007f5a9324d6c0(0000) GS:ffff888125c4f000(0000) knlGS:0000000000000000 [ 773.310325][T13459] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 773.317452][T13459] CR2: 0000555583df3588 CR3: 0000000031128000 CR4: 00000000003526f0 [ 773.325816][T13459] Call Trace: [ 773.330111][T13459] [ 773.333634][T13459] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 773.340108][T13459] ? v9fs_fid_xattr_get+0x237/0x2e0 [ 773.345550][T13459] __alloc_pages_noprof+0xa/0x30 [ 773.350571][T13459] ___kmalloc_large_node+0x85/0x210 [ 773.355937][T13459] __kmalloc_large_node_noprof+0x18/0x90 [ 773.361664][T13459] __kmalloc_noprof+0x36f/0x4f0 [ 773.366635][T13459] ? v9fs_fid_get_acl+0x4f/0x100 [ 773.371652][T13459] ? __pfx_v9fs_cache_inode_get_cookie+0x10/0x10 [ 773.378130][T13459] v9fs_fid_get_acl+0x4f/0x100 [ 773.382973][T13459] v9fs_get_acl+0x11b/0x360 [ 773.387552][T13459] v9fs_inode_from_fid_dotl+0x221/0x2b0 [ 773.393188][T13459] v9fs_mount+0x6cb/0xa10 [ 773.397637][T13459] ? __pfx_v9fs_mount+0x10/0x10 [ 773.402555][T13459] ? rcu_is_watching+0x15/0xb0 [ 773.407410][T13459] ? cap_capable+0x11f/0x460 [ 773.412063][T13459] legacy_get_tree+0xfd/0x1a0 [ 773.416831][T13459] ? __pfx_v9fs_mount+0x10/0x10 [ 773.421781][T13459] vfs_get_tree+0x92/0x2b0 [ 773.426276][T13459] do_new_mount+0x24a/0xa40 [ 773.430881][T13459] __se_sys_mount+0x317/0x410 [ 773.436344][T13459] ? __pfx___se_sys_mount+0x10/0x10 [ 773.441998][T13459] ? rcu_is_watching+0x15/0xb0 [ 773.446855][T13459] ? do_syscall_64+0xbe/0x3b0 [ 773.451587][T13459] ? __x64_sys_mount+0x20/0xc0 [ 773.456458][T13459] do_syscall_64+0xfa/0x3b0 [ 773.461018][T13459] ? lockdep_hardirqs_on+0x9c/0x150 [ 773.466349][T13459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.472537][T13459] ? clear_bhb_loop+0x60/0xb0 [ 773.477340][T13459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.483295][T13459] RIP: 0033:0x7f5a9238e929 [ 773.487797][T13459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.507808][T13459] RSP: 002b:00007f5a9324d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 773.516339][T13459] RAX: ffffffffffffffda RBX: 00007f5a925b5fa0 RCX: 00007f5a9238e929 [ 773.524382][T13459] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 773.532469][T13459] RBP: 00007f5a92410b39 R08: 0000200000000580 R09: 0000000000000000 [ 773.541150][T13459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.549629][T13459] R13: 0000000000000000 R14: 00007f5a925b5fa0 R15: 00007ffc80e47a88 [ 773.557723][T13459] [ 773.560806][T13459] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 773.568107][T13459] CPU: 0 UID: 0 PID: 13459 Comm: syz.6.2013 Not tainted 6.16.0-rc6-syzkaller-00002-g155a3c003e55 #0 PREEMPT(full) [ 773.580178][T13459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 773.590244][T13459] Call Trace: [ 773.593531][T13459] [ 773.596470][T13459] dump_stack_lvl+0x99/0x250 [ 773.601070][T13459] ? __asan_memcpy+0x40/0x70 [ 773.605681][T13459] ? __pfx_dump_stack_lvl+0x10/0x10 [ 773.610912][T13459] ? __pfx__printk+0x10/0x10 [ 773.615538][T13459] panic+0x2db/0x790 [ 773.619464][T13459] ? __pfx_panic+0x10/0x10 [ 773.623892][T13459] ? show_trace_log_lvl+0x4fb/0x550 [ 773.629114][T13459] __warn+0x31b/0x4b0 [ 773.633102][T13459] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 773.639125][T13459] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 773.645118][T13459] report_bug+0x2be/0x4f0 [ 773.649483][T13459] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 773.655486][T13459] ? __alloc_frozen_pages_noprof+0x2c8/0x370 [ 773.661492][T13459] ? __alloc_frozen_pages_noprof+0x2ca/0x370 [ 773.667479][T13459] handle_bug+0x84/0x160 [ 773.671731][T13459] exc_invalid_op+0x1a/0x50 [ 773.676250][T13459] asm_exc_invalid_op+0x1a/0x20 [ 773.681110][T13459] RIP: 0010:__alloc_frozen_pages_noprof+0x2c8/0x370 [ 773.687713][T13459] Code: 74 10 4c 89 e7 89 54 24 0c e8 14 14 0d 00 8b 54 24 0c 49 83 3c 24 00 0f 85 a5 fe ff ff e9 a6 fe ff ff c6 05 4d 44 76 0d 01 90 <0f> 0b 90 e9 18 ff ff ff a9 00 00 08 00 48 8b 4c 24 10 4c 8d 44 24 [ 773.707330][T13459] RSP: 0018:ffffc90002f079c0 EFLAGS: 00010246 [ 773.713406][T13459] RAX: ffffc90002f07a00 RBX: 000000000000002a RCX: 0000000000000000 [ 773.721383][T13459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90002f07a28 [ 773.729362][T13459] RBP: ffffc90002f07aa8 R08: ffffc90002f07a27 R09: 0000000000000000 [ 773.737344][T13459] R10: ffffc90002f07a00 R11: fffff520005e0f45 R12: 0000000000000000 [ 773.745338][T13459] R13: 1ffff920005e0f3c R14: 0000000000040d40 R15: dffffc0000000000 [ 773.753357][T13459] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 773.759708][T13459] ? v9fs_fid_xattr_get+0x237/0x2e0 [ 773.764925][T13459] __alloc_pages_noprof+0xa/0x30 [ 773.769877][T13459] ___kmalloc_large_node+0x85/0x210 [ 773.775097][T13459] __kmalloc_large_node_noprof+0x18/0x90 [ 773.780761][T13459] __kmalloc_noprof+0x36f/0x4f0 [ 773.785638][T13459] ? v9fs_fid_get_acl+0x4f/0x100 [ 773.790606][T13459] ? __pfx_v9fs_cache_inode_get_cookie+0x10/0x10 [ 773.796985][T13459] v9fs_fid_get_acl+0x4f/0x100 [ 773.801764][T13459] v9fs_get_acl+0x11b/0x360 [ 773.806278][T13459] v9fs_inode_from_fid_dotl+0x221/0x2b0 [ 773.811876][T13459] v9fs_mount+0x6cb/0xa10 [ 773.816225][T13459] ? __pfx_v9fs_mount+0x10/0x10 [ 773.821089][T13459] ? rcu_is_watching+0x15/0xb0 [ 773.825873][T13459] ? cap_capable+0x11f/0x460 [ 773.830480][T13459] legacy_get_tree+0xfd/0x1a0 [ 773.835176][T13459] ? __pfx_v9fs_mount+0x10/0x10 [ 773.840060][T13459] vfs_get_tree+0x92/0x2b0 [ 773.844498][T13459] do_new_mount+0x24a/0xa40 [ 773.849026][T13459] __se_sys_mount+0x317/0x410 [ 773.853713][T13459] ? __pfx___se_sys_mount+0x10/0x10 [ 773.858919][T13459] ? rcu_is_watching+0x15/0xb0 [ 773.863698][T13459] ? do_syscall_64+0xbe/0x3b0 [ 773.868384][T13459] ? __x64_sys_mount+0x20/0xc0 [ 773.873159][T13459] do_syscall_64+0xfa/0x3b0 [ 773.877670][T13459] ? lockdep_hardirqs_on+0x9c/0x150 [ 773.882886][T13459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.888965][T13459] ? clear_bhb_loop+0x60/0xb0 [ 773.893653][T13459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.899556][T13459] RIP: 0033:0x7f5a9238e929 [ 773.903979][T13459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 773.923599][T13459] RSP: 002b:00007f5a9324d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 773.932025][T13459] RAX: ffffffffffffffda RBX: 00007f5a925b5fa0 RCX: 00007f5a9238e929 [ 773.940009][T13459] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 773.947995][T13459] RBP: 00007f5a92410b39 R08: 0000200000000580 R09: 0000000000000000 [ 773.956007][T13459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 773.963982][T13459] R13: 0000000000000000 R14: 00007f5a925b5fa0 R15: 00007ffc80e47a88 [ 773.971977][T13459] [ 773.975379][T13459] Kernel Offset: disabled [ 773.979718][T13459] Rebooting in 86400 seconds..