last executing test programs: 16m11.845874317s ago: executing program 1 (id=476): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00N\xf2\xbb\x12m\xde[\xd2\xc8*\x82)\xc5\t\x00\xfd\xd4\x85\xa4\x84\xff\xe1,\xa9\xec(\x02\xc0\xd5\xd5\x96\xa8R\xbc\x85\xf6\xe6CN\x9c&\xca&d\xc6\xba\xf1\xff\xe5\x10A\xc1oe(S\xe7\x93\x93\x91\x7f\xd8\xc8\xcc\x8c\xb4r_\xbf|<\xd3\x9f\xcd\x01\xbd', 0x2) ftruncate(r1, 0xffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) fcntl$addseals(r1, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x8000}) ppoll(&(0x7f0000000100)=[{r3, 0x6504}], 0x1, 0x0, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='cpu.stat\x00', 0x0, 0x0) ptrace(0x10, r7) tkill(r7, 0x2e) ptrace$peeksig(0x4209, r7, &(0x7f0000000100)={0x8000000000000000}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x4, 0xa) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) 16m10.670836133s ago: executing program 1 (id=481): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000034276d20402003c68e010000000109021200010000000009040001"], 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000480)='GPL\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4, 0x3ff, @loopback, 0xee}, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) r4 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a00) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4, 0x1c, "fee8a2ab78fc179fd1f8a0a1af1ea89de2b7fb646e00000000000000000300", "2809e8db4820a100005240f45f819e00000000eaffffffffffffff133100348100", "90be8b0000000000000000000003000000000000000000002afedb9f00", [0x4, 0x20000a]}}) ioctl$LOOP_SET_STATUS(r4, 0x4c02, &(0x7f0000000480)={0x0, {}, 0x0, {}, 0xffffffff, 0x0, 0x15, 0x28, "561bfcadb322e7a648b826f003c1851a9c242527cb3d254dada2763688949546a12cc5809eccd37a8564cabfda4c147b3a45b8e943bced07fd3fffbf00", "2b416beaef043ee1e602417940bd7c3771390871faaa7103228109660205a039", [0x3, 0x7]}) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "c309008f", "b200"}, 0x38) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r6, &(0x7f00000032c0)=[{{&(0x7f0000000240)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x29}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x10, 0x1, 0x1}], 0x10}}], 0x1, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={0x0, 0x0, 0x4018}, 0x18) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0)=ANY=[@ANYRES8=r0], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "2474794233890da1", "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cec21291a43fe"}, 0x38) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r1, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0xfff, 0x1}}, 0x20) close_range(r8, r8, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r9, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r9, &(0x7f0000000000), &(0x7f00000002c0)=""/255}, 0x20) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xc) syz_usb_control_io$uac1(r0, 0x0, 0x0) 16m5.934531649s ago: executing program 1 (id=495): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(r0, 0x0, &(0x7f0000000000)={0x9, 0x49}, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7, 0x0, r5, 0x1, '\x00', 0x0, r5, 0x1, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) mknodat$loop(r5, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000004c0)) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r5, &(0x7f0000000100)='./file1\x00', r5, &(0x7f0000000240)='./file0\x00', 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') stat(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 16m3.82788078s ago: executing program 1 (id=499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000100)="c44060c1d081382bc2cc31ff94e37574", 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000280)=0x9279, 0x4) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="fccb5d9aeb2fc22223ffc679363e4618ca0d8c7e4c09be040de5bf426c529b2577f3d5110367b545", @ANYRES16=r5, @ANYBLOB="59cf0000000000000000080000001400018006000100020000000800050003000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f0000000240)='./file1\x00', 0x80) mkdir(&(0x7f0000000400)='./file1\x00', 0xc0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000540)={0x9, 0xfffffff9, 0x100, 0x0, 0x9}) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0xf1, r4, 0x80000}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6(0xa, 0x1, 0x8010000000000084) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$bt_hci(r8, 0x84, 0x0, 0x0, &(0x7f0000000040)) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e21, 0xb, @empty}, 0x1c) 16m0.599272962s ago: executing program 1 (id=509): r0 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe(0x0) iopl(0x3) r2 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!Tnux\x00', 0x6e93ebbbcc0884f2, 0xf1, &(0x7f0000000000)={0x4, 0x1, 0x8}) r3 = syz_open_dev$video4linux(&(0x7f00000000c0), 0xff, 0x101000) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0xc0405627, &(0x7f0000000040)={0x2}) mq_timedreceive(r2, &(0x7f0000000180)=""/196, 0xc4, 0x0, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000001980)=""/236, &(0x7f0000000080)=0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_dev$vim2m(0x0, 0x94, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000000c0)={0x2, 0x2, 0x3, "265155e1dea343ae56e1fb87fe02c50f799ec3a505f12345d8a9c03f531c54e4", 0x51424752}) r6 = socket$inet6(0xa, 0x5, 0x0) sendmmsg$inet6(r6, &(0x7f00000049c0)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x10001, @local, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f00000001c0)="9675", 0x2}], 0x1}}], 0x1, 0x30000840) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff1085000000ad00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 15m59.462535686s ago: executing program 1 (id=515): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc4002, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5, 0x9}}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9c2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6eb}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) 15m58.73606548s ago: executing program 32 (id=515): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xc4002, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x4c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x5, 0x9}}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x9}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9c2}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x6eb}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000140)) 17.711044876s ago: executing program 3 (id=2966): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route(r0, 0x0, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f0000000080)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r3, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) fcntl$lock(r2, 0x5, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x3}) fcntl$lock(r2, 0x26, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="14000100"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000001140)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="6714677e15b9df9451", 0x9}, {0x0}], 0x2}}], 0x2, 0x0) 16.068133723s ago: executing program 3 (id=2973): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x29, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0], &(0x7f0000001940)='GPL\x00', 0x7fff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) (async, rerun: 64) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYRES8=0x0], &(0x7f00000001c0)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x10000810) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) connect$l2tp6(0xffffffffffffffff, &(0x7f00000005c0)={0xa, 0x0, 0x800, @rand_addr=' \x01\x00', 0x6}, 0x20) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x101280, 0x0) (async, rerun: 64) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRESDEC=r5], 0x128}, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f00000002c0)=ANY=[@ANYBLOB="399a63e088aaaaaaaaaaaaffffff0000000000019078ac1e0000000080aa03049078030000004500000000000000000000007f000001f2fb00010400"/75], 0x0) (async, rerun: 64) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r4}, 0x4) (rerun: 64) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'\x00', 0x400}) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0xfffffffffffffe04, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0x2d4}}, 0x4048890) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000680)=ANY=[@ANYBLOB="7d82ac1ebf2b9f0433", @ANYRES16=r12, @ANYBLOB="000229bd7000ffdbdf252100000008000300", @ANYRES32=r13, @ANYRES16=r6], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x40014) 14.759246695s ago: executing program 3 (id=2977): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x1, 0x10000) r0 = userfaultfd(0x80001) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)={0x2c, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x18, 0x18, 0x0, 0x1, [@generic="0aac0f000dac0f00f18dc67b72d01038d2403935"]}]}, 0x2c}], 0x1}, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x9cc, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) sync() syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000080)={0x2c, &(0x7f0000000000)={0x0, 0xa, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00030000000500010004"], 0x4c}}, 0x0) r4 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x45e, 0x71d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfb, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x0, 0x12, {0x9, 0x21, 0x1000, 0x2, 0x1, {0x22, 0x9f3}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x6e}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0xfa, 0x4, 0x27}}]}}}]}}]}}, &(0x7f0000000440)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x110, 0x0, 0x0, 0x2, 0x20, 0x7f}, 0xf, &(0x7f0000000200)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xd, 0x3, 0xf7, 0x1}]}, 0x5, [{0x71, &(0x7f0000000280)=@string={0x71, 0x3, "68e6d3691cb06597a8795a00e3f12e0ab2253bf0ad54db42c7553ae3f129cb8587faf4d37b30a2fe069ed2f3fcf4e7ef43b4b2e98107e8cca0e547bece93557230a55049b4032a9cb36b4bc29becac404a4e595b1d3fe1c0c48b92f9bdebb9daa7c6c1146e747abca13ed7c9a7b01f"}}, {0x2a, &(0x7f0000000300)=@string={0x2a, 0x3, "a3b39cc7934df9e466e6071e82705f318a5c6852181d3f728b42082b26b9b281e8979a291e3e28eb"}}, {0x1d, &(0x7f0000000380)=@string={0x1d, 0x3, "7832e8dc823ad0322c769cc83b41fd0b2b857b931dacb739b77130"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x240a}}]}) syz_usb_control_io$hid(r4, 0x0, &(0x7f0000000640)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2001", @ANYRES8], 0x0}) 14.312238138s ago: executing program 5 (id=2979): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000003c0)=0x14) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2004c00}, 0x64, &(0x7f0000000400)={&(0x7f0000005080)=ANY=[@ANYBLOB="901200001200000125bd7000fedbdf252a06b3034e204e2300080000ff0300000000000002000000f7ffffff750700000e000000070000009fb830478e83c7852437bf135ba4cb75973344a020345b9d22823d", @ANYRES32=r2, @ANYBLOB="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"], 0x1290}, 0x1, 0x0, 0x0, 0x20008001}, 0x40000) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="120000000400000008000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f0000000480)=@tcp6=r6}, 0x20) r8 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r8, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, r8, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0xee) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x200001, &(0x7f0000000100)=ANY=[@ANYBLOB='dyn']) 12.640477429s ago: executing program 3 (id=2983): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route(r0, 0x0, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f0000000080)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r3, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) fcntl$lock(r2, 0x5, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x3}) fcntl$lock(r2, 0x26, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000001140)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="6714677e15b9df9451", 0x9}, {0x0}], 0x2}}], 0x2, 0x0) 10.893033637s ago: executing program 0 (id=2986): unshare(0x22020600) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000007c0)='map_files\x00') getdents64(r0, &(0x7f0000001fc0)=""/4086, 0xff6) 10.798357376s ago: executing program 3 (id=2987): mknod(&(0x7f0000000000)='./bus/file0\x00', 0x1, 0x5) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) syz_io_uring_setup(0x10e, &(0x7f0000000300)={0x0, 0xfad6, 0x0, 0xfffffffd, 0xfffffffd}, &(0x7f00000003c0)=0x0, &(0x7f0000000280)=0x0) sendto$l2tp(r0, &(0x7f0000000400)="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", 0x1000, 0x40, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x80000}) socket$igmp6(0xa, 0x3, 0x2) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='udf\x00', 0x1000000, 0x0) syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) getrandom(0x0, 0x0, 0x1) 10.783678599s ago: executing program 5 (id=2988): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000780)={0x1c, 0x0, 0x801, 0x70bd2c, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40905}, 0x4040800) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x0, 0x298, 0x200, 0x200, 0x298, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x98}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000004c0)=ANY=[@ANYRES32=0x0], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000680)=ANY=[@ANYBLOB="b90000000000"], 0xb8) ioctl$BLKRAGET(r2, 0x1263, &(0x7f0000000480)) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40002, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) 9.670284327s ago: executing program 3 (id=2990): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) unshare(0x24020400) setsockopt$rose(r0, 0x104, 0x3, &(0x7f0000000280)=0xffff8000, 0x4) (fail_nth: 1) 8.665687392s ago: executing program 5 (id=2993): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r4, &(0x7f0000002480)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000000000000290000000b000000000091d3000000001400000000000000290000003e00000001000000000000001400000000000000290000003400000000000000"], 0x98}}], 0x1, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r5, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) readv(r5, &(0x7f0000000080)=[{&(0x7f0000000140)=""/144, 0x90}], 0x1) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x0, 0x4}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, &(0x7f0000000140)=0x2, 0x4) read(r5, &(0x7f00000002c0)=""/200, 0x39) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f0000000480)='mm_page_alloc\x00'}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x3, 0x0, 0x8000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x19, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000003d00b702000014000000ecadab96f6c59df0fb92b7030100000000008500550901000000000095000000000000001811000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800004df4c0497b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000850000007d000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 8.651198746s ago: executing program 0 (id=2994): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x4, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 6.702866978s ago: executing program 5 (id=2995): r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8915, &(0x7f0000000280)={'lo\x00', {0x2, 0x0, @loopback}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, 0x0, 0x0) recvmmsg(r2, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x100, 0x0) shutdown(r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003700010327bd7002fcdbea2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) r4 = accept4$rose(0xffffffffffffffff, &(0x7f0000000780)=@full={0xb, @remote, @netrom, 0x0, [@default, @null, @remote, @netrom, @netrom, @netrom]}, &(0x7f00000007c0)=0x40, 0x800) connect$rose(r4, &(0x7f0000000800)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null]}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYRES16, @ANYBLOB="597798f1b2"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0x1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x4d000000, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) bpf$TOKEN_CREATE(0x24, &(0x7f0000000740)={0x0, r6}, 0x8) 6.559602358s ago: executing program 2 (id=2996): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, 0x0, 0x0, 0x1a48880, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) socket(0x2a, 0x2, 0x0) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0420eb00000000000100090000007fe708000000bdc8a0930136388520a54a95a0a1094ada47f103d4dda5db7d9eddd63c0d1832120bb29b66c45420de69818b4a042d06"]) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r1) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001340)=ANY=[], 0x20}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000006e9ea209cbe4e5ed1e77a6dec7b6d0ddc6598c3a3db56dc07a218a199b6db5aaee7c1a1eb70e183709f85afb0271da1ad255054f7943eee5ac325595546fa22cfd01ffd3d1515ecb47644045d8bc09001bb04af88593af51bfd93cca0b603515be6166c572f3b169cf749d89aa514f00"/129, @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) sendmsg$IPVS_CMD_FLUSH(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x2004810) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f00000004c0)={0x9c, r4, 0x400, 0x70bd28, 0x25dfdc00, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_TUN_PORT={0xfffffffffffffe38, 0xe, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x23}}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x6}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x10}, 0x50) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() tkill(r5, 0xb) socket$kcm(0x2, 0x3, 0x84) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x5) ptrace$pokeuser(0x6, r5, 0xfffffffffffffff8, 0x0) read$char_usb(r6, &(0x7f0000000080)=""/63, 0x3f) 6.379214671s ago: executing program 0 (id=2997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route(r0, 0x0, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f0000000080)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r3, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) fcntl$lock(r2, 0x5, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x3}) fcntl$lock(r2, 0x26, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000001140)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="6714677e15b9df9451", 0x9}, {0x0}], 0x2}}], 0x2, 0x0) 5.793252015s ago: executing program 4 (id=2998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x4490, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@debug={'debug', 0x3d, 0x9}}, {@access_user}, {@privport}, {@aname={'aname', 0x3d, '-]'}}, {@uname={'uname', 0x3d, '/dev/net/tun\x00'}}, {@noextend}, {@directio}, {@noxattr}, {@privport}, {@version_L}], [{@euid_eq={'euid', 0x3d, r3}}, {@uid_lt}, {@dont_appraise}]}}) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f00000001c0)={r4}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x800001c, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) close(r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) mkdir(&(0x7f0000000100)='./control\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000480)='syz1\x00', 0x200002, 0x0) ftruncate(0xffffffffffffffff, 0x20cf01) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r6, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) socket(0xa, 0x800, 0x1) 5.282586811s ago: executing program 5 (id=2999): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r0 = add_key$keyring(0x0, &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000001700)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000002c0)={0x9, 0x5, {0x1c22, @usage=0x4, 0x0, 0xd, 0x1, 0x3, 0x3, 0x8000000000000001, 0x28, @usage=0x6, 0x6, 0x6, [0x5, 0x1, 0x3, 0x1, 0x77b, 0x2]}, {0x3, @struct={0x2, 0x3}, 0x0, 0xce, 0x3, 0x100000000, 0x6, 0xc0000000, 0x40, @usage=0x98d, 0x7, 0x80000001, [0xe, 0x9, 0x9, 0x9, 0x4, 0x7]}, {0x5, @usage=0xffffffff, 0x0, 0xa290, 0x7, 0xb, 0xf30, 0x100000001, 0x50, @usage=0x6, 0x7, 0xfffffffe, [0x400000000000, 0x9, 0x0, 0xd, 0xe944, 0x40]}, {0x3, 0x8c1, 0x4}}) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r5, @ANYBLOB="8d7d8b633b8981a0703d0000"]) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) creat(&(0x7f00000002c0)='./file0\x00', 0x6) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf5ffffff, 0x12, r6, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 5.220041266s ago: executing program 2 (id=3000): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x7, 0x0) socket$rxrpc(0x21, 0x2, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b00)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c0050014260360ab1208000f0000000401a80016001100014003000300036010faccfdeb1d40696d936980b925b35381df6486338260de280e900094007134cf6ee08000a0e408e858ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb5", 0xa3}], 0x1}, 0x40000040) listen(r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000280)=0x100, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000a00)=""/157, 0x9d}], 0x1, 0x0, 0xffffffffffffff1f}}], 0x1, 0x2, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000080), 0x4) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create1(0x0) 4.335684881s ago: executing program 4 (id=3001): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) r0 = add_key$keyring(0x0, &(0x7f0000000340)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, 0x0, &(0x7f0000001700)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x168, 0x0, 0x0, 0xa, 0x340, 0x250, 0x250, 0x340, 0x250, 0x3, 0x0, {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x33}, [0xff, 0x0, 0xff, 0xff000000], [0xffffff00, 0xff000000, 0xff, 0xff000000], 'xfrm0\x00', 'veth1_to_bond\x00', {}, {0xff}, 0x0, 0x3, 0x2}, 0x0, 0x228, 0x268, 0x0, {0x0, 0x28e}, [@common=@inet=@hashlimit3={{0x158}, {'caif0\x00', {0x0, 0x7ff, 0x0, 0x1, 0x0, 0x6, 0x1000}, {0xfffffffffffffff6}}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x0, 0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB], 0xe8}}, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000002c0)={0x9, 0x5, {0x1c22, @usage=0x4, 0x0, 0xd, 0x1, 0x3, 0x3, 0x8000000000000001, 0x28, @usage=0x6, 0x6, 0x6, [0x5, 0x1, 0x3, 0x1, 0x77b, 0x2]}, {0x3, @struct={0x2, 0x3}, 0x0, 0xce, 0x3, 0x100000000, 0x6, 0xc0000000, 0x40, @usage=0x98d, 0x7, 0x80000001, [0xe, 0x9, 0x9, 0x9, 0x4, 0x7]}, {0x5, @usage=0xffffffff, 0x0, 0xa290, 0x7, 0xb, 0xf30, 0x100000001, 0x50, @usage=0x6, 0x7, 0xfffffffe, [0x400000000000, 0x9, 0x0, 0xd, 0xe944, 0x40]}, {0x3, 0x8c1, 0x4}}) ioctl$BTRFS_IOC_RESIZE(r4, 0x50009403, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRESDEC=r5, @ANYBLOB="8d7d8b633b8981a0703d0000"]) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) creat(&(0x7f00000002c0)='./file0\x00', 0x6) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x10) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf5ffffff, 0x12, r6, 0x0) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) 3.563227735s ago: executing program 2 (id=3002): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8100, &(0x7f0000001dc0)={0xf, 0x84, 0x20000}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000487bc1e39dc038bc00000a74000000060a010400000000000000000200000048000480440001800c0001007061796c6f616400340002800800044000000000080005400000000908000340000000610800024000000002080006400000000208000740000000080900010073797a30000000000900020073797a32"], 0x9c}}, 0x4) 3.552294692s ago: executing program 0 (id=3003): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x2}, 0x18) sendmmsg$unix(r0, &(0x7f000000a5c0)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f000000a540)="b4", 0x1}], 0x1}}, {{&(0x7f0000001380)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) (fail_nth: 8) 2.92037937s ago: executing program 5 (id=3004): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x25dfdbfc, {0xa, 0x0, 0x14, 0x10, 0x0, 0x0, 0x0, 0x3, 0x10007}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x41, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 2.671050565s ago: executing program 0 (id=3005): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000180)) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r5}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r6, &(0x7f0000000580), 0x0}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) 2.669685419s ago: executing program 4 (id=3006): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x4, 0x0, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2.443179336s ago: executing program 2 (id=3007): rt_sigaction(0x40, &(0x7f0000000080)={0x0, 0x0, 0x0, {[0x16]}}, 0x0, 0x8, &(0x7f0000000000)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r4) sendmsg$NFC_CMD_DISABLE_SE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0xc0}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x8880) r6 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) r7 = syz_open_dev$rtc(&(0x7f0000000280), 0x6, 0x0) ioctl$RTC_PIE_ON(r7, 0x7005) write$binfmt_register(r6, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x14, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20004094}, 0x20) r8 = gettid() r9 = syz_open_procfs(r8, &(0x7f0000000040)='stat\x00') r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x2180, 0x0) ioctl$int_in(r10, 0x5452, &(0x7f0000000240)=0x8) connect$unix(r10, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) preadv(r9, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/24, 0x18}], 0x1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00U\x00/'], 0x38}, 0x1, 0x0, 0x0, 0xfe0f}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.273288913s ago: executing program 2 (id=3008): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/wireless\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) recvmmsg$unix(r1, &(0x7f00000042c0)=[{{&(0x7f00000000c0), 0x6e, &(0x7f0000000400)=[{&(0x7f0000000280)=""/164, 0xa4}, {&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000002a40)=""/154, 0x9a}], 0x3, &(0x7f0000000440)}}, {{&(0x7f0000000580), 0x6e, &(0x7f00000029c0)=[{&(0x7f0000000600)=""/111, 0x6f}, {&(0x7f0000000680)=""/95, 0x5f}, {&(0x7f0000000700)=""/4096, 0x1000}, {&(0x7f0000003b40)=""/129, 0x81}, {&(0x7f00000017c0)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/255, 0xff}, {&(0x7f00000028c0)=""/150, 0x96}, {&(0x7f0000000540)=""/43, 0x2b}], 0x8, &(0x7f0000002a40)}}, {{&(0x7f0000002b00)=@abs, 0x6e, &(0x7f0000002fc0)=[{&(0x7f0000002b80)=""/150, 0x96}, {&(0x7f0000002c40)=""/122, 0x7a}, {&(0x7f0000002d00)=""/249, 0xf9}, {&(0x7f0000002e00)=""/172, 0xac}, {&(0x7f0000002ec0)=""/239, 0xef}], 0x5, &(0x7f0000003040)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{&(0x7f0000003080)=@abs, 0x6e, &(0x7f0000000040)=[{&(0x7f0000003100)=""/56, 0x38}, {&(0x7f0000000340)=""/105, 0x69}, {&(0x7f0000000440)=""/256, 0x100}], 0x3}}, {{&(0x7f0000003300), 0x6e, &(0x7f0000003700)=[{&(0x7f0000003380)=""/107, 0x6b}, {&(0x7f0000003400)=""/234, 0xea}, {&(0x7f0000003500)=""/59, 0x3b}, {&(0x7f0000003540)=""/170, 0xaa}, {&(0x7f0000003600)=""/136, 0x88}, {&(0x7f00000036c0)=""/20, 0x14}], 0x6, &(0x7f0000003780)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}, {{&(0x7f0000003800), 0x6e, &(0x7f0000003b00)=[{&(0x7f0000003880)=""/75, 0x4b}, {&(0x7f0000003900)=""/82, 0x52}, {&(0x7f0000003980)=""/238, 0xee}, {&(0x7f0000003a80)=""/94, 0x5e}], 0x4, &(0x7f0000003b40)}}, {{&(0x7f0000003c40)=@abs, 0x6e, &(0x7f00000041c0), 0x0, &(0x7f0000004240)}}], 0x7, 0x22, &(0x7f0000004480)={0x77359400}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x2400c811) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) read$FUSE(r3, &(0x7f0000007180)={0x2020}, 0x2020) r6 = shmget(0x1, 0x2000, 0x54000000, &(0x7f0000710000/0x2000)=nil) shmat(r6, &(0x7f00008ed000/0x4000)=nil, 0x7000) socket$inet_sctp(0x2, 0x800000000000001, 0x84) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(r2, 0xe, &(0x7f0000000000)={0x8, 0x300008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) ioperm(0x0, 0x7, 0x40) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 1.238251012s ago: executing program 0 (id=3009): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090000000000000000000000010500000008000000000000000000000300000000040000000200000000000000000000000000000b03000000005f97054896d073a4a41b1ea89bcc5908a99dc56e92fba9e2d6ad3094"], 0x0, 0x5a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) msgget$private(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001100004ea1b00085000000d00000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) msgget$private(0x0, 0x140) socket$inet_dccp(0x2, 0x6, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, 0x0) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/11, 0xfffffffffffffde1}}], 0x400000000000179, 0x10022, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) unshare(0x28020480) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)=ANY=[@ANYRESDEC], 0x20) unshare(0x80) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYRES32=r4, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.213010109s ago: executing program 4 (id=3010): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="1400070024000bdfd910e4069671e0621126b761", 0x14}], 0x1}, 0x0) 1.095209853s ago: executing program 4 (id=3011): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x7, 0x0) socket$rxrpc(0x21, 0x2, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b00)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c0050014260360ab1208000f0000000401a80016001100014003000300036010faccfdeb1d40696d936980b925b35381df6486338260de280e900094007134cf6ee08000a0e408e858ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb5", 0xa3}], 0x1}, 0x40000040) listen(r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) setsockopt$inet_tcp_int(r4, 0x6, 0x22, &(0x7f0000000280)=0x100, 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r6, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000a00)=""/157, 0x9d}], 0x1, 0x0, 0xffffffffffffff1f}}], 0x1, 0x2, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000080), 0x4) socket$can_j1939(0x1d, 0x2, 0x7) epoll_create1(0x0) 510.624504ms ago: executing program 4 (id=3012): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) sendmsg$nl_route(r0, 0x0, 0x80) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r2, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r2, 0x26, &(0x7f0000000080)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r3, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) fcntl$lock(r2, 0x5, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x3}) fcntl$lock(r2, 0x26, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000000)) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r7, &(0x7f0000001140)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)="6714677e15b9df9451", 0x9}, {0x0}], 0x2}}], 0x2, 0x0) 0s ago: executing program 2 (id=3013): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f00000002c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, 0x0) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpriority(0x0, r4, 0x3) r5 = openat$incfs(0xffffffffffffffff, &(0x7f0000000100)='.log\x00', 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000340)={0x1, 0xf, 0x5, 0x0, 0x2}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) clock_settime(0x0, &(0x7f0000000140)={0x77359400}) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000003c0)={0x0, 0xe6}, 0x8) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0xff}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x9c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) socket(0x26, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r7, &(0x7f0000000300)={0xa, 0x1, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): 0/0x10 [ 1030.027057][T15104] ? __pfx___might_resched+0x10/0x10 [ 1030.027086][T15104] netlink_rcv_skb+0x294/0x480 [ 1030.027105][T15104] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1030.027128][T15104] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1030.027170][T15104] genl_rcv+0x28/0x40 [ 1030.027188][T15104] netlink_unicast+0x7f6/0x990 [ 1030.027215][T15104] ? __pfx_netlink_unicast+0x10/0x10 [ 1030.027233][T15104] ? __virt_addr_valid+0x45f/0x530 [ 1030.027256][T15104] ? __phys_addr_symbol+0x2f/0x70 [ 1030.027278][T15104] ? __check_object_size+0x47a/0x730 [ 1030.027308][T15104] netlink_sendmsg+0x8de/0xcb0 [ 1030.027338][T15104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1030.027368][T15104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1030.027385][T15104] __sock_sendmsg+0x221/0x270 [ 1030.027408][T15104] ____sys_sendmsg+0x53a/0x860 [ 1030.027441][T15104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1030.027462][T15104] ? __fget_files+0x2a/0x410 [ 1030.027483][T15104] ? __fget_files+0x2a/0x410 [ 1030.027509][T15104] __sys_sendmsg+0x269/0x350 [ 1030.027538][T15104] ? __pfx___sys_sendmsg+0x10/0x10 [ 1030.027575][T15104] ? do_sys_openat2+0x17a/0x1d0 [ 1030.027619][T15104] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1030.027640][T15104] ? do_syscall_64+0x100/0x230 [ 1030.027662][T15104] ? do_syscall_64+0xb6/0x230 [ 1030.027684][T15104] do_syscall_64+0xf3/0x230 [ 1030.027715][T15104] ? clear_bhb_loop+0x35/0x90 [ 1030.027739][T15104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.027758][T15104] RIP: 0033:0x7fb64478d169 [ 1030.027773][T15104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1030.027786][T15104] RSP: 002b:00007fb645652038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1030.027805][T15104] RAX: ffffffffffffffda RBX: 00007fb6449a5fa0 RCX: 00007fb64478d169 [ 1030.027817][T15104] RDX: 0000000000000080 RSI: 00004000000003c0 RDI: 0000000000000004 [ 1030.027828][T15104] RBP: 00007fb645652090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.027839][T15104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.027849][T15104] R13: 0000000000000000 R14: 00007fb6449a5fa0 R15: 00007fff20b0a228 [ 1030.027878][T15104] [ 1030.340819][ C1] vkms_vblank_simulate: vblank timer overrun [ 1031.571676][T15124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2557'. [ 1031.595615][ T35] net_ratelimit: 239 callbacks suppressed [ 1031.595638][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.613352][ T2998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1031.800692][ T81] usb 3-1: device descriptor read/64, error -71 [ 1032.279555][ T81] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1032.347978][T15131] netlink: 'syz.3.2559': attribute type 1 has an invalid length. [ 1032.439817][ T81] usb 3-1: Using ep0 maxpacket: 8 [ 1032.457122][ T81] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1032.466922][ T81] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.488970][ T81] usb 3-1: config 0 descriptor?? [ 1032.589839][T15131] bond3: entered promiscuous mode [ 1032.594966][T15131] bond3: entered allmulticast mode [ 1032.689644][T15131] syz.3.2559 (15131) used greatest stack depth: 17584 bytes left [ 1032.718786][T15119] overlayfs: missing 'lowerdir' [ 1032.718944][T15142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.121704][T15142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.320286][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.328854][ T8506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.337921][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.387480][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1034.638199][ T81] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1034.666930][ T81] asix 3-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1034.684866][ T81] asix 3-1:0.0: probe with driver asix failed with error -71 [ 1034.774358][ T81] usb 3-1: USB disconnect, device number 80 [ 1035.280808][T15156] FAULT_INJECTION: forcing a failure. [ 1035.280808][T15156] name failslab, interval 1, probability 0, space 0, times 0 [ 1035.360629][T15157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.369212][T15157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.381776][T15157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.390293][T15157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1036.321942][T15156] CPU: 0 UID: 0 PID: 15156 Comm: syz.3.2564 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 1036.321968][T15156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1036.321986][T15156] Call Trace: [ 1036.321993][T15156] [ 1036.322001][T15156] dump_stack_lvl+0x241/0x360 [ 1036.322025][T15156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1036.322041][T15156] ? __pfx__printk+0x10/0x10 [ 1036.322065][T15156] ? __kmalloc_cache_noprof+0x48/0x390 [ 1036.322081][T15156] ? __pfx___might_resched+0x10/0x10 [ 1036.322103][T15156] should_fail_ex+0x40a/0x550 [ 1036.322130][T15156] should_failslab+0xac/0x100 [ 1036.322152][T15156] __kmalloc_cache_noprof+0x70/0x390 [ 1036.322167][T15156] ? hash_netportnet_create+0x2fa/0x1070 [ 1036.322190][T15156] hash_netportnet_create+0x2fa/0x1070 [ 1036.322226][T15156] ? __pfx_hash_netportnet_create+0x10/0x10 [ 1036.322245][T15156] ip_set_create+0xa78/0x1960 [ 1036.322267][T15156] ? ip_set_create+0x48a/0x1960 [ 1036.322291][T15156] ? __pfx_ip_set_create+0x10/0x10 [ 1036.322337][T15156] ? nfnetlink_rcv_msg+0x225/0x1180 [ 1036.322359][T15156] nfnetlink_rcv_msg+0xbec/0x1180 [ 1036.322379][T15156] ? nfnetlink_rcv_msg+0x225/0x1180 [ 1036.322419][T15156] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1036.322435][T15156] ? stack_trace_save+0x118/0x1d0 [ 1036.322465][T15156] ? dev_hard_start_xmit+0x27a/0x7d0 [ 1036.322488][T15156] ? __dev_queue_xmit+0x1b73/0x3f50 [ 1036.322503][T15156] ? __netlink_deliver_tap+0x561/0x7f0 [ 1036.322520][T15156] ? netlink_deliver_tap+0x19d/0x1b0 [ 1036.322535][T15156] ? netlink_unicast+0x7c4/0x990 [ 1036.322555][T15156] ? netlink_sendmsg+0x8de/0xcb0 [ 1036.322571][T15156] ? __sock_sendmsg+0x221/0x270 [ 1036.322589][T15156] ? ____sys_sendmsg+0x53a/0x860 [ 1036.322611][T15156] ? __sys_sendmsg+0x269/0x350 [ 1036.322647][T15156] netlink_rcv_skb+0x206/0x480 [ 1036.322666][T15156] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1036.322689][T15156] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1036.322721][T15156] ? safesetid_security_capable+0xb2/0x1d0 [ 1036.322748][T15156] ? bpf_lsm_capable+0x9/0x10 [ 1036.322768][T15156] ? security_capable+0x7e/0x2d0 [ 1036.322794][T15156] nfnetlink_rcv+0x297/0x2ab0 [ 1036.322821][T15156] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1036.322846][T15156] ? __dev_queue_xmit+0x2f4/0x3f50 [ 1036.322866][T15156] ? __dev_queue_xmit+0x1775/0x3f50 [ 1036.322882][T15156] ? kasan_save_track+0x51/0x80 [ 1036.322908][T15156] ? ____sys_sendmsg+0x53a/0x860 [ 1036.322935][T15156] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1036.322955][T15156] ? __dev_queue_xmit+0x2f4/0x3f50 [ 1036.322975][T15156] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1036.323010][T15156] ? ref_tracker_free+0x643/0x7e0 [ 1036.323034][T15156] ? __asan_memcpy+0x40/0x70 [ 1036.323054][T15156] ? __pfx_ref_tracker_free+0x10/0x10 [ 1036.323093][T15156] ? netlink_deliver_tap+0x2e/0x1b0 [ 1036.323109][T15156] ? skb_clone+0x240/0x390 [ 1036.323126][T15156] ? __pfx_lock_release+0x10/0x10 [ 1036.323150][T15156] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 1036.323179][T15156] ? netlink_deliver_tap+0x2e/0x1b0 [ 1036.323200][T15156] netlink_unicast+0x7f6/0x990 [ 1036.323238][T15156] ? __pfx_netlink_unicast+0x10/0x10 [ 1036.323260][T15156] ? __virt_addr_valid+0x45f/0x530 [ 1036.323284][T15156] ? __phys_addr_symbol+0x2f/0x70 [ 1036.323306][T15156] ? __check_object_size+0x47a/0x730 [ 1036.323336][T15156] netlink_sendmsg+0x8de/0xcb0 [ 1036.323366][T15156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1036.323397][T15156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1036.323414][T15156] __sock_sendmsg+0x221/0x270 [ 1036.323436][T15156] ____sys_sendmsg+0x53a/0x860 [ 1036.323469][T15156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1036.323491][T15156] ? __fget_files+0x2a/0x410 [ 1036.323513][T15156] ? __fget_files+0x2a/0x410 [ 1036.323539][T15156] __sys_sendmsg+0x269/0x350 [ 1036.323569][T15156] ? __pfx___sys_sendmsg+0x10/0x10 [ 1036.323606][T15156] ? do_sys_openat2+0x17a/0x1d0 [ 1036.323651][T15156] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1036.323675][T15156] ? do_syscall_64+0x100/0x230 [ 1036.323701][T15156] ? do_syscall_64+0xb6/0x230 [ 1036.323726][T15156] do_syscall_64+0xf3/0x230 [ 1036.323748][T15156] ? clear_bhb_loop+0x35/0x90 [ 1036.323774][T15156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.323795][T15156] RIP: 0033:0x7f8b0398d169 [ 1036.323812][T15156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1036.323826][T15156] RSP: 002b:00007f8b04779038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1036.323846][T15156] RAX: ffffffffffffffda RBX: 00007f8b03ba5fa0 RCX: 00007f8b0398d169 [ 1036.323859][T15156] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000004 [ 1036.323870][T15156] RBP: 00007f8b04779090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.323881][T15156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.323892][T15156] R13: 0000000000000000 R14: 00007f8b03ba5fa0 R15: 00007ffea5647bd8 [ 1036.323920][T15156] [ 1037.246844][T15164] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 1037.359382][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.369037][ T8506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.521912][T15169] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2569'. [ 1037.711625][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1039.295675][T15178] xt_recent: Unsupported userspace flags (000000de) [ 1039.536481][T15183] fuse: Bad value for 'fd' [ 1040.747830][T15198] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2577'. [ 1040.789049][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1040.859625][T15199] FAULT_INJECTION: forcing a failure. [ 1040.859625][T15199] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.872470][T15199] CPU: 1 UID: 0 PID: 15199 Comm: syz.5.2577 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 1040.872493][T15199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1040.872503][T15199] Call Trace: [ 1040.872509][T15199] [ 1040.872515][T15199] dump_stack_lvl+0x241/0x360 [ 1040.872532][T15199] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1040.872542][T15199] ? __pfx__printk+0x10/0x10 [ 1040.872556][T15199] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1040.872567][T15199] ? __pfx___might_resched+0x10/0x10 [ 1040.872582][T15199] should_fail_ex+0x40a/0x550 [ 1040.872597][T15199] should_failslab+0xac/0x100 [ 1040.872612][T15199] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1040.872622][T15199] ? __alloc_skb+0x1c3/0x440 [ 1040.872637][T15199] __alloc_skb+0x1c3/0x440 [ 1040.872649][T15199] ? lockdep_hardirqs_on+0x99/0x150 [ 1040.872664][T15199] ? __pfx___alloc_skb+0x10/0x10 [ 1040.872686][T15199] ? smack_socket_getpeersec_dgram+0x180/0x410 [ 1040.872700][T15199] netlink_sendmsg+0x634/0xcb0 [ 1040.872717][T15199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1040.872732][T15199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1040.872741][T15199] __sock_sendmsg+0x221/0x270 [ 1040.872755][T15199] ____sys_sendmsg+0x53a/0x860 [ 1040.872773][T15199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1040.872786][T15199] ? __fget_files+0x2a/0x410 [ 1040.872797][T15199] ? __fget_files+0x2a/0x410 [ 1040.872811][T15199] __sys_sendmsg+0x269/0x350 [ 1040.872823][T15199] ? finish_task_switch+0x1e5/0x870 [ 1040.872839][T15199] ? __pfx___sys_sendmsg+0x10/0x10 [ 1040.872852][T15199] ? __schedule+0x18c4/0x4c40 [ 1040.872883][T15199] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1040.872897][T15199] ? do_syscall_64+0x100/0x230 [ 1040.872911][T15199] ? do_syscall_64+0xb6/0x230 [ 1040.872924][T15199] do_syscall_64+0xf3/0x230 [ 1040.872937][T15199] ? clear_bhb_loop+0x35/0x90 [ 1040.872951][T15199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.872963][T15199] RIP: 0033:0x7f327138d169 [ 1040.872973][T15199] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1040.872981][T15199] RSP: 002b:00007f3272210038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1040.872993][T15199] RAX: ffffffffffffffda RBX: 00007f32715a6080 RCX: 00007f327138d169 [ 1040.873000][T15199] RDX: 0000000000000000 RSI: 0000400000000540 RDI: 0000000000000009 [ 1040.873006][T15199] RBP: 00007f3272210090 R08: 0000000000000000 R09: 0000000000000000 [ 1040.873012][T15199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1040.873018][T15199] R13: 0000000000000000 R14: 00007f32715a6080 R15: 00007fff6c5500d8 [ 1040.873032][T15199] [ 1041.135872][ C1] vkms_vblank_simulate: vblank timer overrun [ 1041.491251][T15197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1043.097357][T15219] syz.3.2583: attempt to access beyond end of device [ 1043.097357][T15219] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1043.111175][T15219] syz.3.2583: attempt to access beyond end of device [ 1043.111175][T15219] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1043.124417][T15219] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1043.134179][T15219] syz.3.2583: attempt to access beyond end of device [ 1043.134179][T15219] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1043.147317][T15219] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1043.156957][T15219] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1043.164670][T15219] UDF-fs: Scanning with blocksize 512 failed [ 1043.172567][T15219] syz.3.2583: attempt to access beyond end of device [ 1043.172567][T15219] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1043.186542][T15219] syz.3.2583: attempt to access beyond end of device [ 1043.186542][T15219] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1043.199659][T15219] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1043.209353][T15219] syz.3.2583: attempt to access beyond end of device [ 1043.209353][T15219] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1043.222449][T15219] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1043.232055][T15219] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1043.239692][T15219] UDF-fs: Scanning with blocksize 1024 failed [ 1043.246270][T15219] syz.3.2583: attempt to access beyond end of device [ 1043.246270][T15219] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1043.246611][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.259945][T15219] syz.3.2583: attempt to access beyond end of device [ 1043.259945][T15219] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1043.279302][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1043.280943][T15219] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1043.298566][T15219] syz.3.2583: attempt to access beyond end of device [ 1043.298566][T15219] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1043.311755][T15219] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1043.342503][T15219] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1043.351838][T15219] UDF-fs: Scanning with blocksize 2048 failed [ 1043.358995][T15219] syz.3.2583: attempt to access beyond end of device [ 1043.358995][T15219] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1043.373480][T15219] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1043.383628][T15219] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1043.394386][T15219] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1043.402219][T15219] UDF-fs: Scanning with blocksize 4096 failed [ 1043.408401][T15219] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1044.630795][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1045.173767][T15233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2586'. [ 1046.126925][T15244] xt_recent: Unsupported userspace flags (000000de) [ 1046.821768][ T8] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1047.127949][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 1047.301466][T15255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.310597][T15255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.319885][T15255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.586950][T15255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.596729][T15255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.616029][T15255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.632978][T15255] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1047.945559][ T8] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.976885][ T8] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1048.049724][ T8] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1048.059019][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.067027][ T8] usb 5-1: Product: syz [ 1048.176771][ T8] usb 5-1: Manufacturer: syz [ 1048.182239][ T8] usb 5-1: SerialNumber: syz [ 1049.200242][ T67] net_ratelimit: 242 callbacks suppressed [ 1049.200256][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.214695][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1049.318153][T15264] fuse: Bad value for 'fd' [ 1050.520964][ T8] usb 5-1: cannot find UAC_HEADER [ 1050.622351][ T8] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1050.776103][ T8] usb 5-1: USB disconnect, device number 65 [ 1050.800129][T15279] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2597'. [ 1050.951147][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1051.322072][T15278] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1052.426688][T15292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2599'. [ 1053.254753][T15304] xt_recent: Unsupported userspace flags (000000de) [ 1053.721795][T15309] cgroup: Need name or subsystem set [ 1053.734968][T15309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.747182][T15309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1054.310700][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.635570][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.643311][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.652333][ T208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1054.687672][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.278910][T15319] fuse: Bad value for 'fd' [ 1055.396982][ T5917] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1055.564895][ T5917] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.02 [ 1055.588129][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.611931][ T5917] usb 3-1: Product: syz [ 1055.616250][ T5917] usb 3-1: Manufacturer: syz [ 1055.628264][ T5917] usb 3-1: SerialNumber: syz [ 1055.635124][ T5917] usb 3-1: config 0 descriptor?? [ 1056.026732][T15332] netlink: 'syz.0.2610': attribute type 21 has an invalid length. [ 1056.034850][T15332] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2610'. [ 1056.802953][T15337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1056.807833][ T5917] hso 3-1:0.0: Failed to find BULK IN ep [ 1056.859818][T15337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.322659][T15337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.331256][T15337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.683167][T15348] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2615'. [ 1058.006244][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.075722][T15351] xt_recent: Unsupported userspace flags (000000de) [ 1059.679040][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1059.747316][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1060.630146][T15371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1060.667093][T15371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.900325][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1062.106022][T15382] random: crng reseeded on system resumption [ 1062.293538][T15383] netlink: 'syz.3.2623': attribute type 21 has an invalid length. [ 1062.301506][T15383] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2623'. [ 1063.448721][T12779] IPVS: starting estimator thread 0... [ 1063.607017][T15395] IPVS: using max 19 ests per chain, 45600 per kthread [ 1064.867728][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.997822][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.094258][T15415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.103716][T15415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.131488][T15415] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1066.206253][T15418] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2632'. [ 1067.116236][T15432] SET target dimension over the limit! [ 1067.323559][T15435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.333705][T15435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.539065][ T29] audit: type=1804 audit(1741391357.754:196): pid=15432 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.2635" name="/newroot/443/file0" dev="tmpfs" ino=2647 res=1 errno=0 [ 1067.782576][T15439] netlink: 'syz.4.2637': attribute type 21 has an invalid length. [ 1067.790681][T15439] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2637'. [ 1068.067029][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.494564][T15406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1070.538897][T15406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.599381][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.625983][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.678164][T15472] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2645'. [ 1074.713254][T15497] SET target dimension over the limit! [ 1074.888836][ T29] audit: type=1804 audit(1741391365.174:197): pid=15498 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.2651" name="/newroot/448/file0" dev="tmpfs" ino=2677 res=1 errno=0 [ 1074.983302][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.739032][T15504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.810776][T15504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1075.891223][T15503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1075.937228][T15503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1076.219087][T12779] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1076.653505][T12779] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1076.696416][T12779] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.715484][T12779] usb 5-1: config 0 descriptor?? [ 1077.127870][ T1086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1077.650297][T15511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.815165][T15511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.859082][T15525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2660'. [ 1077.998312][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1078.604424][T15511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.613604][T15511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.627694][T15511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1078.664682][T15511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1078.706612][T12779] [drm:udl_init] *ERROR* Selecting channel failed [ 1078.733079][T12779] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 1078.756813][T12779] [drm] Initialized udl on minor 2 [ 1078.765621][T12779] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1078.796248][T12779] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1078.806769][ T25] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1078.827758][T12779] usb 5-1: USB disconnect, device number 66 [ 1078.833863][ T25] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 1078.852732][ T25] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 1078.956329][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1079.059560][T15530] gfs2: gfs2 mount does not exist [ 1080.241550][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2670'. [ 1080.264802][T15558] Smack: duplicate mount options [ 1080.345023][T15562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2671'. [ 1080.436164][T15562] Smack: duplicate mount options [ 1080.921144][T15567] FAULT_INJECTION: forcing a failure. [ 1080.921144][T15567] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1080.977102][T15567] CPU: 0 UID: 0 PID: 15567 Comm: syz.3.2673 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 1080.977129][T15567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1080.977141][T15567] Call Trace: [ 1080.977148][T15567] [ 1080.977156][T15567] dump_stack_lvl+0x241/0x360 [ 1080.977182][T15567] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1080.977199][T15567] ? __pfx__printk+0x10/0x10 [ 1080.977229][T15567] ? snprintf+0xda/0x120 [ 1080.977250][T15567] should_fail_ex+0x40a/0x550 [ 1080.977278][T15567] _copy_to_user+0x31/0xb0 [ 1080.977300][T15567] simple_read_from_buffer+0xca/0x150 [ 1080.977328][T15567] proc_fail_nth_read+0x1e9/0x250 [ 1080.977355][T15567] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1080.977381][T15567] ? rw_verify_area+0x243/0x630 [ 1080.977398][T15567] ? tomoyo_socket_bind_permission+0x1b6/0x340 [ 1080.977415][T15567] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1080.977440][T15567] vfs_read+0x1f8/0xb40 [ 1080.977464][T15567] ? __pfx_vfs_read+0x10/0x10 [ 1080.977488][T15567] ? __sys_bind+0x20a/0x290 [ 1080.977511][T15567] ? __pfx___sys_bind+0x10/0x10 [ 1080.977535][T15567] ksys_read+0x18f/0x2b0 [ 1080.977554][T15567] ? __pfx_ksys_read+0x10/0x10 [ 1080.977572][T15567] ? do_syscall_64+0x100/0x230 [ 1080.977597][T15567] ? do_syscall_64+0xb6/0x230 [ 1080.977621][T15567] do_syscall_64+0xf3/0x230 [ 1080.977641][T15567] ? clear_bhb_loop+0x35/0x90 [ 1080.977664][T15567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1080.977683][T15567] RIP: 0033:0x7f8b0398bb7c [ 1080.977693][T15567] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1080.977701][T15567] RSP: 002b:00007f8b04779030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1080.977713][T15567] RAX: ffffffffffffffda RBX: 00007f8b03ba5fa0 RCX: 00007f8b0398bb7c [ 1080.977720][T15567] RDX: 000000000000000f RSI: 00007f8b047790a0 RDI: 0000000000000004 [ 1080.977726][T15567] RBP: 00007f8b04779090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.977732][T15567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1080.977738][T15567] R13: 0000000000000000 R14: 00007f8b03ba5fa0 R15: 00007ffea5647bd8 [ 1080.977752][T15567] [ 1081.227052][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1081.974192][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2675'. [ 1082.149825][T15581] SET target dimension over the limit! [ 1082.535217][ T29] audit: type=1804 audit(1741391372.524:198): pid=15582 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.2677" name="/newroot/506/file0" dev="tmpfs" ino=3060 res=1 errno=0 [ 1082.916322][ T8506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.133606][T15593] random: crng reseeded on system resumption [ 1084.307817][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.711439][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.180104][T15604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.215730][T15604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.639452][T15614] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2686'. [ 1086.308877][T15622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2688'. [ 1086.551798][T15624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1086.560793][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.491050][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.867144][T15630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2690'. [ 1087.989369][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.989830][T15630] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2690'. [ 1088.325343][T15637] fuse: Bad value for 'fd' [ 1088.718128][T15643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1088.726676][T15643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.828870][T15648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2697'. [ 1088.957726][T15650] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2699'. [ 1089.000274][T15653] Smack: duplicate mount options [ 1089.288313][T15655] xt_recent: Unsupported userspace flags (000000de) [ 1090.468956][ T1086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.729724][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1091.559020][T15675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2703'. [ 1092.320481][T15684] fuse: Bad value for 'fd' [ 1092.794844][T15686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.804151][T15686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1092.843189][T15686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1092.851795][T15686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.773747][ T8506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.797170][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1094.062160][T15694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1094.071008][T15694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.094520][T15695] FAULT_INJECTION: forcing a failure. [ 1094.094520][T15695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1094.111493][T15695] CPU: 0 UID: 0 PID: 15695 Comm: syz.4.2711 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 1094.111520][T15695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1094.111531][T15695] Call Trace: [ 1094.111538][T15695] [ 1094.111546][T15695] dump_stack_lvl+0x241/0x360 [ 1094.111572][T15695] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1094.111586][T15695] ? __pfx__printk+0x10/0x10 [ 1094.111604][T15695] ? snprintf+0xda/0x120 [ 1094.111616][T15695] should_fail_ex+0x40a/0x550 [ 1094.111631][T15695] _copy_to_user+0x31/0xb0 [ 1094.111645][T15695] simple_read_from_buffer+0xca/0x150 [ 1094.111662][T15695] proc_fail_nth_read+0x1e9/0x250 [ 1094.111678][T15695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1094.111694][T15695] ? rw_verify_area+0x243/0x630 [ 1094.111706][T15695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1094.111720][T15695] vfs_read+0x1f8/0xb40 [ 1094.111733][T15695] ? fdget_pos+0x254/0x320 [ 1094.111744][T15695] ? __pfx___mutex_lock+0x10/0x10 [ 1094.111757][T15695] ? __pfx_vfs_read+0x10/0x10 [ 1094.111767][T15695] ? do_sys_openat2+0x17a/0x1d0 [ 1094.111778][T15695] ? __fget_files+0x2a/0x410 [ 1094.111789][T15695] ? __fget_files+0x395/0x410 [ 1094.111798][T15695] ? __fget_files+0x2a/0x410 [ 1094.111812][T15695] ksys_read+0x18f/0x2b0 [ 1094.111825][T15695] ? __pfx_ksys_read+0x10/0x10 [ 1094.111837][T15695] ? do_syscall_64+0x100/0x230 [ 1094.111851][T15695] ? do_syscall_64+0xb6/0x230 [ 1094.111865][T15695] do_syscall_64+0xf3/0x230 [ 1094.111878][T15695] ? clear_bhb_loop+0x35/0x90 [ 1094.111893][T15695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.111911][T15695] RIP: 0033:0x7f4d2238bb7c [ 1094.111921][T15695] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1094.111929][T15695] RSP: 002b:00007f4d23117030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1094.111941][T15695] RAX: ffffffffffffffda RBX: 00007f4d225a5fa0 RCX: 00007f4d2238bb7c [ 1094.111949][T15695] RDX: 000000000000000f RSI: 00007f4d231170a0 RDI: 0000000000000004 [ 1094.111955][T15695] RBP: 00007f4d23117090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.111961][T15695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1094.111967][T15695] R13: 0000000000000000 R14: 00007f4d225a5fa0 R15: 00007fff0fe4a1b8 [ 1094.111982][T15695] [ 1094.390043][T15697] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2712'. [ 1094.465261][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2712'. [ 1094.476324][T15698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2712'. [ 1096.227303][ T1346] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.336517][T15718] fuse: Bad value for 'fd' [ 1096.557006][T15720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2719'. [ 1096.867058][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1096.956805][T15724] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2717'. [ 1097.450333][T15727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1097.459119][T15727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1097.483259][T15732] FAULT_INJECTION: forcing a failure. [ 1097.483259][T15732] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.501726][T15732] CPU: 0 UID: 0 PID: 15732 Comm: syz.2.2722 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 1097.501755][T15732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1097.501766][T15732] Call Trace: [ 1097.501773][T15732] [ 1097.501781][T15732] dump_stack_lvl+0x241/0x360 [ 1097.501807][T15732] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1097.501825][T15732] ? __pfx__printk+0x10/0x10 [ 1097.501851][T15732] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 1097.501872][T15732] ? __pfx___might_resched+0x10/0x10 [ 1097.501890][T15732] ? lockdep_init_map_type+0xa1/0x910 [ 1097.501917][T15732] should_fail_ex+0x40a/0x550 [ 1097.501946][T15732] should_failslab+0xac/0x100 [ 1097.501972][T15732] ? __alloc_workqueue+0x6ad/0x1bb0 [ 1097.501996][T15732] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 1097.502026][T15732] __alloc_workqueue+0x6ad/0x1bb0 [ 1097.502067][T15732] alloc_workqueue+0xd6/0x210 [ 1097.502090][T15732] ? __pfx___mutex_lock+0x10/0x10 [ 1097.502114][T15732] ? loop_configure+0x577/0xf20 [ 1097.502133][T15732] ? __pfx_alloc_workqueue+0x10/0x10 [ 1097.502160][T15732] ? __asan_memcpy+0x40/0x70 [ 1097.502181][T15732] ? loop_set_status_from_info+0x184/0x240 [ 1097.502202][T15732] loop_configure+0x67e/0xf20 [ 1097.502232][T15732] ? __pfx_loop_configure+0x10/0x10 [ 1097.502270][T15732] ? __might_fault+0xaa/0x120 [ 1097.502299][T15732] lo_ioctl+0x898/0x2870 [ 1097.502336][T15732] ? validate_chain+0x11e/0x5920 [ 1097.502353][T15732] ? __pfx_lo_ioctl+0x10/0x10 [ 1097.502377][T15732] ? __pfx_lock_release+0x10/0x10 [ 1097.502407][T15732] ? mark_lock+0x9a/0x360 [ 1097.502436][T15732] ? validate_chain+0x11e/0x5920 [ 1097.502457][T15732] ? mark_lock+0x9a/0x360 [ 1097.502484][T15732] ? __lock_acquire+0x1397/0x2100 [ 1097.502534][T15732] ? __pfx_lock_acquire+0x10/0x10 [ 1097.502557][T15732] ? is_bpf_text_address+0x26/0x2a0 [ 1097.502582][T15732] ? __pfx_lock_release+0x10/0x10 [ 1097.502607][T15732] ? unwind_next_frame+0x18e6/0x22d0 [ 1097.502633][T15732] ? preempt_count_add+0x93/0x190 [ 1097.502654][T15732] ? 0xffffffffa0003b40 [ 1097.502669][T15732] ? 0xffffffffa0003b40 [ 1097.502684][T15732] ? is_bpf_text_address+0x285/0x2a0 [ 1097.502706][T15732] ? is_bpf_text_address+0x26/0x2a0 [ 1097.502729][T15732] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1097.502751][T15732] ? kernel_text_address+0xa7/0xe0 [ 1097.502768][T15732] ? __kernel_text_address+0xd/0x40 [ 1097.502784][T15732] ? unwind_get_return_address+0x4d/0x90 [ 1097.502808][T15732] ? arch_stack_walk+0xfd/0x150 [ 1097.502843][T15732] ? stack_trace_save+0x118/0x1d0 [ 1097.502865][T15732] ? __pfx_stack_trace_save+0x10/0x10 [ 1097.502887][T15732] ? stack_depot_save_flags+0x37/0x940 [ 1097.502919][T15732] ? kasan_save_track+0x51/0x80 [ 1097.502938][T15732] ? kasan_save_track+0x3f/0x80 [ 1097.502957][T15732] ? kasan_save_free_info+0x40/0x50 [ 1097.502974][T15732] ? __kasan_slab_free+0x59/0x70 [ 1097.502994][T15732] ? kfree+0x196/0x430 [ 1097.503031][T15732] ? tomoyo_path_number_perm+0x5dd/0x770 [ 1097.503053][T15732] ? security_file_ioctl+0xc6/0x2a0 [ 1097.503076][T15732] ? __se_sys_ioctl+0x46/0x170 [ 1097.503095][T15732] ? do_syscall_64+0xf3/0x230 [ 1097.503116][T15732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.503141][T15732] ? do_vfs_ioctl+0xf18/0x2770 [ 1097.503168][T15732] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1097.503193][T15732] ? mark_lock+0x9a/0x360 [ 1097.503232][T15732] ? tomoyo_path_number_perm+0x209/0x770 [ 1097.503255][T15732] ? __pfx_lock_release+0x10/0x10 [ 1097.503282][T15732] ? tomoyo_path_number_perm+0x5dd/0x770 [ 1097.503308][T15732] ? tomoyo_path_number_perm+0x5dd/0x770 [ 1097.503332][T15732] ? blkdev_common_ioctl+0xfb2/0x2460 [ 1097.503359][T15732] ? __lock_acquire+0x1397/0x2100 [ 1097.503382][T15732] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1097.503404][T15732] ? tomoyo_path_number_perm+0x209/0x770 [ 1097.503458][T15732] ? smack_file_ioctl+0x2a5/0x3b0 [ 1097.503482][T15732] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1097.503507][T15732] ? file_to_blk_mode+0xcc/0x140 [ 1097.503523][T15732] ? __pfx_lo_ioctl+0x10/0x10 [ 1097.503548][T15732] blkdev_ioctl+0x5d0/0x6f0 [ 1097.503573][T15732] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1097.503600][T15732] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1097.503624][T15732] __se_sys_ioctl+0xf5/0x170 [ 1097.503648][T15732] do_syscall_64+0xf3/0x230 [ 1097.503671][T15732] ? clear_bhb_loop+0x35/0x90 [ 1097.503695][T15732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.503717][T15732] RIP: 0033:0x7f8755f8d169 [ 1097.503733][T15732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1097.503747][T15732] RSP: 002b:00007f8756dd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1097.503766][T15732] RAX: ffffffffffffffda RBX: 00007f87561a5fa0 RCX: 00007f8755f8d169 [ 1097.503780][T15732] RDX: 00004000000002c0 RSI: 0000000000004c0a RDI: 0000000000000004 [ 1097.503792][T15732] RBP: 00007f8756dd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.503802][T15732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.503813][T15732] R13: 0000000000000000 R14: 00007f87561a5fa0 R15: 00007ffe40db6038 [ 1097.503841][T15732] [ 1098.182835][T15734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.247505][T15734] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.275724][T15739] random: crng reseeded on system resumption [ 1098.831158][T15741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.842068][T15741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1098.932237][T15741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1098.942026][T15741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1099.416893][T15737] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 1099.423934][T15737] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1099.434365][T15737] vhci_hcd vhci_hcd.0: Device attached [ 1099.445722][ T208] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.455454][T15744] vhci_hcd: connection closed [ 1099.470940][ T7611] vhci_hcd: stop threads [ 1099.478651][ T7611] vhci_hcd: release socket [ 1099.483167][ T7611] vhci_hcd: disconnect device [ 1100.487698][T15750] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2726'. [ 1100.540096][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.571301][T15746] Smack: duplicate mount options [ 1101.879513][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2731'. [ 1102.003206][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.034171][T15763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.045069][T15763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.058867][T15763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.077971][T15763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.086900][T15763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.097622][T15763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.108075][T15763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1102.508593][T15764] overlayfs: failed to resolve './file0': -2 [ 1102.917313][T15758] batadv_slave_1: entered promiscuous mode [ 1102.989444][T15772] netlink: 'syz.4.2732': attribute type 1 has an invalid length. [ 1103.452552][T15764] batadv_slave_1: left promiscuous mode [ 1103.473282][T15758] batadv_slave_1: entered promiscuous mode [ 1103.497857][T15775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1103.507094][T15758] batadv_slave_1: left promiscuous mode [ 1103.527669][T15775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1103.582152][T15775] overlayfs: missing 'lowerdir' [ 1103.942888][T15781] Invalid ELF header magic: != ELF [ 1104.387240][ T25] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1105.197215][ T35] net_ratelimit: 1 callbacks suppressed [ 1105.197235][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.334527][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 1105.342321][ T25] usb 5-1: config 0 has an invalid descriptor of length 239, skipping remainder of the config [ 1105.349160][T15790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.360928][ T25] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1105.360957][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.360976][ T25] usb 5-1: Product: syz [ 1105.360990][ T25] usb 5-1: Manufacturer: syz [ 1105.361003][ T25] usb 5-1: SerialNumber: syz [ 1105.393160][ T25] usb 5-1: config 0 descriptor?? [ 1105.405848][ T25] usb 5-1: bad CDC descriptors [ 1105.409378][T15790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.416304][ T25] usb 5-1: unsupported MDLM descriptors [ 1105.616303][ T25] usb 5-1: USB disconnect, device number 67 [ 1105.941955][T15803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.951163][T15803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.960358][T15803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.994145][T15803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.003654][T15803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.023415][T15803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.041000][T15803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.086821][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.095215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.360677][T15811] SET target dimension over the limit! [ 1107.547462][ T29] audit: type=1804 audit(1741391397.816:199): pid=15811 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.2744" name="/newroot/571/file0" dev="tmpfs" ino=3417 res=1 errno=0 [ 1107.880321][ T25] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1108.127550][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 1108.194295][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.230200][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1108.392311][ T25] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1108.414352][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.466855][ T25] usb 5-1: Product: syz [ 1108.471082][ T25] usb 5-1: Manufacturer: syz [ 1108.481374][ T25] usb 5-1: SerialNumber: syz [ 1108.635937][T15824] netlink: 'syz.3.2747': attribute type 1 has an invalid length. [ 1109.246605][T15826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.298390][ T25] usb 5-1: cannot find UAC_HEADER [ 1109.307238][T15826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.343760][ T25] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1109.373829][ T25] usb 5-1: USB disconnect, device number 68 [ 1109.879083][T15833] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1109.888057][T15833] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1111.324774][ T8506] net_ratelimit: 238 callbacks suppressed [ 1111.324793][ T8506] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.632005][T15844] FAULT_INJECTION: forcing a failure. [ 1111.632005][T15844] name failslab, interval 1, probability 0, space 0, times 0 [ 1111.647164][T15844] CPU: 0 UID: 0 PID: 15844 Comm: syz.3.2753 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 1111.647191][T15844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1111.647202][T15844] Call Trace: [ 1111.647209][T15844] [ 1111.647217][T15844] dump_stack_lvl+0x241/0x360 [ 1111.647243][T15844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1111.647261][T15844] ? __pfx__printk+0x10/0x10 [ 1111.647286][T15844] ? __kmalloc_noprof+0xb5/0x4c0 [ 1111.647305][T15844] ? __pfx___might_resched+0x10/0x10 [ 1111.647332][T15844] should_fail_ex+0x40a/0x550 [ 1111.647360][T15844] should_failslab+0xac/0x100 [ 1111.647387][T15844] __kmalloc_noprof+0xdd/0x4c0 [ 1111.647403][T15844] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1111.647431][T15844] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1111.647460][T15844] genl_rcv_msg+0x80b/0xec0 [ 1111.647491][T15844] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1111.647540][T15844] ? __pfx_lock_acquire+0x10/0x10 [ 1111.647562][T15844] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1111.647579][T15844] ? __pfx_nl80211_start_ap+0x10/0x10 [ 1111.647600][T15844] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1111.647617][T15844] ? __pfx___might_resched+0x10/0x10 [ 1111.647647][T15844] netlink_rcv_skb+0x206/0x480 [ 1111.647666][T15844] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1111.647689][T15844] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1111.647720][T15844] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 1111.647759][T15844] genl_rcv+0x28/0x40 [ 1111.647778][T15844] netlink_unicast+0x7f6/0x990 [ 1111.647810][T15844] ? __pfx_netlink_unicast+0x10/0x10 [ 1111.647831][T15844] ? __virt_addr_valid+0x45f/0x530 [ 1111.647856][T15844] ? __phys_addr_symbol+0x2f/0x70 [ 1111.647877][T15844] ? __check_object_size+0x47a/0x730 [ 1111.647906][T15844] netlink_sendmsg+0x8de/0xcb0 [ 1111.647936][T15844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1111.647963][T15844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1111.647977][T15844] __sock_sendmsg+0x221/0x270 [ 1111.648003][T15844] ____sys_sendmsg+0x53a/0x860 [ 1111.648034][T15844] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1111.648056][T15844] ? __fget_files+0x2a/0x410 [ 1111.648074][T15844] ? __fget_files+0x2a/0x410 [ 1111.648099][T15844] __sys_sendmsg+0x269/0x350 [ 1111.648128][T15844] ? __pfx___sys_sendmsg+0x10/0x10 [ 1111.648164][T15844] ? do_sys_openat2+0x17a/0x1d0 [ 1111.648207][T15844] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1111.648231][T15844] ? do_syscall_64+0x100/0x230 [ 1111.648256][T15844] ? do_syscall_64+0xb6/0x230 [ 1111.648280][T15844] do_syscall_64+0xf3/0x230 [ 1111.648302][T15844] ? clear_bhb_loop+0x35/0x90 [ 1111.648327][T15844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1111.648348][T15844] RIP: 0033:0x7f8b0398d169 [ 1111.648364][T15844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1111.648378][T15844] RSP: 002b:00007f8b04779038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1111.648397][T15844] RAX: ffffffffffffffda RBX: 00007f8b03ba5fa0 RCX: 00007f8b0398d169 [ 1111.648410][T15844] RDX: 0000000000000000 RSI: 0000400000000000 RDI: 0000000000000003 [ 1111.648421][T15844] RBP: 00007f8b04779090 R08: 0000000000000000 R09: 0000000000000000 [ 1111.648431][T15844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1111.648442][T15844] R13: 0000000000000000 R14: 00007f8b03ba5fa0 R15: 00007ffea5647bd8 [ 1111.648468][T15844] [ 1111.979890][ C0] vkms_vblank_simulate: vblank timer overrun [ 1113.111812][ T8] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.946224][T15765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.571308][T15867] netlink: 'syz.2.2759': attribute type 1 has an invalid length. [ 1115.614791][T15881] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1115.621426][T15881] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1116.322624][T12779] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1116.347136][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.353450][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.364116][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.708145][T15765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.746757][T12779] usb 5-1: Using ep0 maxpacket: 16 [ 1116.758382][T12779] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.776947][T12779] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1116.925072][T15892] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1117.003484][T12779] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1117.016743][T12779] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.024790][T12779] usb 5-1: Product: syz [ 1117.029090][T12779] usb 5-1: Manufacturer: syz [ 1117.033793][T12779] usb 5-1: SerialNumber: syz [ 1117.243854][T15896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2769'. [ 1117.451050][T12779] usb 5-1: cannot find UAC_HEADER [ 1117.541500][T12779] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1118.430632][T12779] usb 5-1: USB disconnect, device number 69 [ 1118.575384][T15912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1118.614973][T15912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1118.688190][T15912] overlayfs: missing 'lowerdir' [ 1119.034419][ T1086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.244762][T15917] Invalid ELF header magic: != ELF [ 1119.427074][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.778102][T15922] netlink: 'syz.0.2774': attribute type 1 has an invalid length. [ 1120.095484][T15928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.199328][T15928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1120.972007][T12779] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 1120.994395][T12779] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1121.263572][T15944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1121.310835][T15944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.429814][T15944] overlayfs: missing 'lowerdir' [ 1121.587832][T15952] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2784'. [ 1121.978541][ T1086] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.483297][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.116006][T15974] netlink: 'syz.3.2790': attribute type 2 has an invalid length. [ 1123.217682][T15977] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1123.269543][T15977] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.284236][T15980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2792'. [ 1123.317484][T15979] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1123.326977][T12729] IPVS: starting estimator thread 0... [ 1123.446999][T15981] IPVS: using max 25 ests per chain, 60000 per kthread [ 1123.578931][T15986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2793'. [ 1123.633840][T15989] Smack: duplicate mount options [ 1124.422899][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.560675][T16009] netlink: 'syz.2.2800': attribute type 39 has an invalid length. [ 1125.880500][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1126.041429][T16015] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1126.062357][T16015] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1126.369293][T16015] overlayfs: missing 'lowerdir' [ 1127.585664][T16027] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1127.593209][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1128.517628][T16052] can: request_module (can-proto-4) failed. [ 1128.535349][T16050] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1128.947117][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.114397][T16070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2812'. [ 1129.626361][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1129.718466][T16073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1129.731498][T16073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.890969][T16075] netlink: 'syz.4.2816': attribute type 1 has an invalid length. [ 1129.972882][T16052] random: crng reseeded on system resumption [ 1130.438950][T16086] fuse: Bad value for 'fd' [ 1131.989675][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.015774][T16108] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1132.172406][T16114] FAULT_INJECTION: forcing a failure. [ 1132.172406][T16114] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1132.252725][T16114] CPU: 1 UID: 0 PID: 16114 Comm: syz.5.2827 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 1132.252750][T16114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1132.252760][T16114] Call Trace: [ 1132.252767][T16114] [ 1132.252775][T16114] dump_stack_lvl+0x241/0x360 [ 1132.252801][T16114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1132.252819][T16114] ? __pfx__printk+0x10/0x10 [ 1132.252843][T16114] ? unwind_next_frame+0x18e6/0x22d0 [ 1132.252874][T16114] should_fail_ex+0x40a/0x550 [ 1132.252901][T16114] prepare_alloc_pages+0x1da/0x5b0 [ 1132.252929][T16114] __alloc_frozen_pages_noprof+0x16f/0x710 [ 1132.252955][T16114] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1132.252983][T16114] ? __pfx_validate_chain+0x10/0x10 [ 1132.253004][T16114] ? __pfx_lock_acquire+0x10/0x10 [ 1132.253030][T16114] alloc_pages_mpol+0x311/0x660 [ 1132.253060][T16114] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1132.253094][T16114] vma_alloc_folio_noprof+0x12b/0x260 [ 1132.253121][T16114] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1132.253155][T16114] folio_prealloc+0x2e/0x170 [ 1132.253177][T16114] __handle_mm_fault+0x3e4b/0x70f0 [ 1132.253194][T16114] ? mark_lock+0x9a/0x360 [ 1132.253260][T16114] ? __pfx___handle_mm_fault+0x10/0x10 [ 1132.253289][T16114] ? mt_find+0x2a9/0x920 [ 1132.253312][T16114] ? __pfx_lock_release+0x10/0x10 [ 1132.253345][T16114] ? mt_find+0x2a9/0x920 [ 1132.253368][T16114] ? mt_find+0x6c8/0x920 [ 1132.253391][T16114] ? mt_find+0x2a9/0x920 [ 1132.253417][T16114] ? __pfx_mt_find+0x10/0x10 [ 1132.253457][T16114] ? find_vma+0xf9/0x170 [ 1132.253475][T16114] ? __pfx_find_vma+0x10/0x10 [ 1132.253492][T16114] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1132.253518][T16114] handle_mm_fault+0x2c1/0x7e0 [ 1132.253547][T16114] exc_page_fault+0x2b9/0x8b0 [ 1132.253573][T16114] asm_exc_page_fault+0x26/0x30 [ 1132.253593][T16114] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 1132.253610][T16114] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 1132.253623][T16114] RSP: 0018:ffffc90004bf74d8 EFLAGS: 00050202 [ 1132.253639][T16114] RAX: ffff88805b516001 RBX: 0000400000000fc0 RCX: 0000000000000157 [ 1132.253651][T16114] RDX: 0000000000000000 RSI: ffff88805b516421 RDI: 0000400000001000 [ 1132.253663][T16114] RBP: ffffc90004bf7658 R08: ffff88805b516577 R09: 1ffff1100b6a2cae [ 1132.253675][T16114] R10: dffffc0000000000 R11: ffffed100b6a2caf R12: 1ffff9200097eeb0 [ 1132.253687][T16114] R13: dffffc0000000000 R14: ffff88805b5163e1 R15: 0000000000000197 [ 1132.253717][T16114] _copy_to_iter+0x4a8/0x1c40 [ 1132.253751][T16114] ? __pfx__copy_to_iter+0x10/0x10 [ 1132.253772][T16114] ? __virt_addr_valid+0x183/0x530 [ 1132.253795][T16114] ? __virt_addr_valid+0x183/0x530 [ 1132.253816][T16114] ? __virt_addr_valid+0x45f/0x530 [ 1132.253840][T16114] ? __check_object_size+0x47a/0x730 [ 1132.253869][T16114] __skb_datagram_iter+0x107/0x900 [ 1132.253890][T16114] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1132.253917][T16114] skb_copy_datagram_iter+0xd1/0x250 [ 1132.253939][T16114] netlink_recvmsg+0x2d1/0x11a0 [ 1132.253965][T16114] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1132.253984][T16114] ? trace_kmalloc+0x1f/0xd0 [ 1132.253997][T16114] ? __kmalloc_noprof+0x2a5/0x4c0 [ 1132.254013][T16114] ? iovec_from_user+0x87/0x240 [ 1132.254045][T16114] ? __import_iovec+0x3bf/0x830 [ 1132.254063][T16114] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1132.254082][T16114] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1132.254102][T16114] sock_recvmsg+0x22f/0x280 [ 1132.254137][T16114] ____sys_recvmsg+0x1c6/0x480 [ 1132.254163][T16114] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1132.254202][T16114] do_recvmmsg+0x426/0xab0 [ 1132.254238][T16114] ? __pfx_do_recvmmsg+0x10/0x10 [ 1132.254289][T16114] ? __pfx___might_resched+0x10/0x10 [ 1132.254311][T16114] ? __might_fault+0xaa/0x120 [ 1132.254331][T16114] ? __pfx_lock_release+0x10/0x10 [ 1132.254355][T16114] ? vfs_write+0x7fa/0xd10 [ 1132.254390][T16114] ? get_timespec64+0x19c/0x280 [ 1132.254429][T16114] __x64_sys_recvmmsg+0x1b8/0x250 [ 1132.254449][T16114] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1132.254468][T16114] ? do_syscall_64+0x100/0x230 [ 1132.254493][T16114] ? do_syscall_64+0xb6/0x230 [ 1132.254518][T16114] do_syscall_64+0xf3/0x230 [ 1132.254540][T16114] ? clear_bhb_loop+0x35/0x90 [ 1132.254564][T16114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1132.254585][T16114] RIP: 0033:0x7f327138d169 [ 1132.254600][T16114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1132.254615][T16114] RSP: 002b:00007f3272231038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1132.254633][T16114] RAX: ffffffffffffffda RBX: 00007f32715a5fa0 RCX: 00007f327138d169 [ 1132.254645][T16114] RDX: 04000000000003b4 RSI: 00004000000037c0 RDI: 0000000000000003 [ 1132.254657][T16114] RBP: 00007f3272231090 R08: 0000400000003700 R09: 0000000000000000 [ 1132.254669][T16114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1132.254679][T16114] R13: 0000000000000000 R14: 00007f32715a5fa0 R15: 00007fff6c5500d8 [ 1132.254707][T16114] [ 1132.746594][ C1] vkms_vblank_simulate: vblank timer overrun [ 1132.747514][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1132.999203][T16121] bio_check_eod: 2 callbacks suppressed [ 1133.004857][T16121] syz.4.2828: attempt to access beyond end of device [ 1133.004857][T16121] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1133.019509][T16121] syz.4.2828: attempt to access beyond end of device [ 1133.019509][T16121] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1133.032872][T16121] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1133.043165][T16121] syz.4.2828: attempt to access beyond end of device [ 1133.043165][T16121] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1133.056345][T16121] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1133.069002][T16121] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 1133.076913][T16121] UDF-fs: Scanning with blocksize 512 failed [ 1133.089121][T16121] syz.4.2828: attempt to access beyond end of device [ 1133.089121][T16121] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1133.103272][T16121] syz.4.2828: attempt to access beyond end of device [ 1133.103272][T16121] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1133.116804][T16121] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1133.127554][T16121] syz.4.2828: attempt to access beyond end of device [ 1133.127554][T16121] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1133.141119][T16121] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1133.150791][T16121] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 1133.158591][T16121] UDF-fs: Scanning with blocksize 1024 failed [ 1133.168286][T16121] syz.4.2828: attempt to access beyond end of device [ 1133.168286][T16121] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1133.243922][T16121] syz.4.2828: attempt to access beyond end of device [ 1133.243922][T16121] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1133.259124][T16121] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1133.269305][T16121] syz.4.2828: attempt to access beyond end of device [ 1133.269305][T16121] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1133.282964][T16121] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1133.292560][T16121] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 1133.300254][T16121] UDF-fs: Scanning with blocksize 2048 failed [ 1133.309894][T16121] syz.4.2828: attempt to access beyond end of device [ 1133.309894][T16121] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1133.323698][T16121] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 1133.333916][T16121] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 1133.343568][T16121] UDF-fs: warning (device nbd4): udf_load_vrs: No anchor found [ 1133.351403][T16121] UDF-fs: Scanning with blocksize 4096 failed [ 1133.357635][T16121] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 1133.396425][T16124] FAULT_INJECTION: forcing a failure. [ 1133.396425][T16124] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1133.410259][T16124] CPU: 0 UID: 0 PID: 16124 Comm: syz.5.2829 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 1133.410283][T16124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1133.410294][T16124] Call Trace: [ 1133.410301][T16124] [ 1133.410309][T16124] dump_stack_lvl+0x241/0x360 [ 1133.410336][T16124] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1133.410353][T16124] ? __pfx__printk+0x10/0x10 [ 1133.410387][T16124] should_fail_ex+0x40a/0x550 [ 1133.410417][T16124] prepare_alloc_pages+0x1da/0x5b0 [ 1133.410448][T16124] __alloc_frozen_pages_noprof+0x16f/0x710 [ 1133.410473][T16124] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1133.410503][T16124] ? __pfx_validate_chain+0x10/0x10 [ 1133.410524][T16124] ? __pfx_lock_acquire+0x10/0x10 [ 1133.410551][T16124] alloc_pages_mpol+0x311/0x660 [ 1133.410581][T16124] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1133.410616][T16124] vma_alloc_folio_noprof+0x12b/0x260 [ 1133.410643][T16124] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1133.410677][T16124] folio_prealloc+0x2e/0x170 [ 1133.410700][T16124] __handle_mm_fault+0x3e4b/0x70f0 [ 1133.410717][T16124] ? mark_lock+0x9a/0x360 [ 1133.410764][T16124] ? __pfx___handle_mm_fault+0x10/0x10 [ 1133.410794][T16124] ? mt_find+0x2a9/0x920 [ 1133.410817][T16124] ? __pfx_lock_release+0x10/0x10 [ 1133.410851][T16124] ? mt_find+0x2a9/0x920 [ 1133.410874][T16124] ? mt_find+0x6c8/0x920 [ 1133.410896][T16124] ? mt_find+0x2a9/0x920 [ 1133.410923][T16124] ? __pfx_mt_find+0x10/0x10 [ 1133.410964][T16124] ? find_vma+0xf9/0x170 [ 1133.410982][T16124] ? __pfx_find_vma+0x10/0x10 [ 1133.410999][T16124] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1133.411025][T16124] handle_mm_fault+0x2c1/0x7e0 [ 1133.411055][T16124] exc_page_fault+0x2b9/0x8b0 [ 1133.411082][T16124] asm_exc_page_fault+0x26/0x30 [ 1133.411103][T16124] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 1133.411122][T16124] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 1133.411136][T16124] RSP: 0018:ffffc90004c4f4d8 EFLAGS: 00050202 [ 1133.411152][T16124] RAX: ffff888028cb8001 RBX: 0000400000000fc0 RCX: 0000000000000157 [ 1133.411164][T16124] RDX: 0000000000000000 RSI: ffff888028cb8421 RDI: 0000400000001000 [ 1133.411182][T16124] RBP: ffffc90004c4f658 R08: ffff888028cb8577 R09: 1ffff110051970ae [ 1133.411195][T16124] R10: dffffc0000000000 R11: ffffed10051970af R12: 1ffff92000989eb0 [ 1133.411208][T16124] R13: dffffc0000000000 R14: ffff888028cb83e1 R15: 0000000000000197 [ 1133.411237][T16124] _copy_to_iter+0x4a8/0x1c40 [ 1133.411272][T16124] ? __pfx__copy_to_iter+0x10/0x10 [ 1133.411294][T16124] ? __virt_addr_valid+0x183/0x530 [ 1133.411317][T16124] ? __virt_addr_valid+0x183/0x530 [ 1133.411338][T16124] ? __virt_addr_valid+0x45f/0x530 [ 1133.411363][T16124] ? __check_object_size+0x47a/0x730 [ 1133.411393][T16124] __skb_datagram_iter+0x107/0x900 [ 1133.411414][T16124] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1133.411440][T16124] skb_copy_datagram_iter+0xd1/0x250 [ 1133.411462][T16124] netlink_recvmsg+0x2d1/0x11a0 [ 1133.411492][T16124] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1133.411510][T16124] ? trace_kmalloc+0x1f/0xd0 [ 1133.411525][T16124] ? __kmalloc_noprof+0x2a5/0x4c0 [ 1133.411540][T16124] ? iovec_from_user+0x87/0x240 [ 1133.411570][T16124] ? __import_iovec+0x3bf/0x830 [ 1133.411589][T16124] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 1133.411607][T16124] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1133.411627][T16124] sock_recvmsg+0x22f/0x280 [ 1133.411653][T16124] ____sys_recvmsg+0x1c6/0x480 [ 1133.411679][T16124] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1133.411720][T16124] do_recvmmsg+0x426/0xab0 [ 1133.411748][T16124] ? __pfx_do_recvmmsg+0x10/0x10 [ 1133.411793][T16124] ? __pfx___might_resched+0x10/0x10 [ 1133.411814][T16124] ? __might_fault+0xaa/0x120 [ 1133.411834][T16124] ? __pfx_lock_release+0x10/0x10 [ 1133.411857][T16124] ? vfs_write+0x7fa/0xd10 [ 1133.411893][T16124] ? get_timespec64+0x19c/0x280 [ 1133.411931][T16124] __x64_sys_recvmmsg+0x1b8/0x250 [ 1133.411950][T16124] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1133.411969][T16124] ? do_syscall_64+0x100/0x230 [ 1133.411994][T16124] ? do_syscall_64+0xb6/0x230 [ 1133.412019][T16124] do_syscall_64+0xf3/0x230 [ 1133.412041][T16124] ? clear_bhb_loop+0x35/0x90 [ 1133.412066][T16124] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.412087][T16124] RIP: 0033:0x7f327138d169 [ 1133.412102][T16124] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1133.412116][T16124] RSP: 002b:00007f3272231038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1133.412132][T16124] RAX: ffffffffffffffda RBX: 00007f32715a5fa0 RCX: 00007f327138d169 [ 1133.412145][T16124] RDX: 04000000000003b4 RSI: 00004000000037c0 RDI: 0000000000000003 [ 1133.412156][T16124] RBP: 00007f3272231090 R08: 0000400000003700 R09: 0000000000000000 [ 1133.412168][T16124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1133.412184][T16124] R13: 0000000000000000 R14: 00007f32715a5fa0 R15: 00007fff6c5500d8 [ 1133.412212][T16124] [ 1134.269318][T16129] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1134.911127][T16138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.988890][T16138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.996937][T16137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.005891][T16137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.068763][T16142] fuse: Bad value for 'fd' [ 1135.462611][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.499675][ T7611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1135.519144][T16138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.539263][T16137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.551464][T16138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.774257][T16137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.094428][T16137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.105131][T16148] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1136.129122][T16137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.547106][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1136.696902][T16150] netlink: 12976 bytes leftover after parsing attributes in process `syz.2.2838'. [ 1137.938627][ T67] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.497552][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1138.598596][T16165] random: crng reseeded on system resumption [ 1138.644190][T16150] hsr_slave_1 (unregistering): left promiscuous mode [ 1138.960187][T16167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.970617][T16174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1138.980456][T16174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1138.988528][T16167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1139.012870][T16174] overlayfs: missing 'lowerdir' [ 1139.237039][ T25] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1139.416992][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 1139.821694][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1140.001230][ T25] usb 5-1: config 0 has an invalid interface number: 88 but max is 0 [ 1140.027527][ T25] usb 5-1: config 0 has no interface number 0 [ 1140.040275][ T25] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1140.203302][ T25] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 1140.403504][ T25] usb 5-1: config 0 interface 88 has no altsetting 0 [ 1140.623983][ T25] usb 5-1: string descriptor 0 read error: -22 [ 1140.717853][ T25] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1140.736899][ T25] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1140.768986][ T25] usb 5-1: config 0 descriptor?? [ 1140.790563][ T25] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input18 [ 1140.987582][ T25] usb 5-1: USB disconnect, device number 70 [ 1141.027339][T15765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.621814][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1141.755431][T16209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1141.817333][T16209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1142.829928][T16216] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.838890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1142.854768][T16216] IPVS: set_ctl: invalid protocol: 8 255.255.255.255:20000 [ 1142.932665][T16220] cifs: Unknown parameter 'no'‘a£Nð[G¶zob,erèèµ;%j¸¼ [ 1142.932665][T16220] ‡üzæ,€@q¬Ú÷ôÐåéJ#³"ŽÚh/.W1ȱ¨nNCº"†CÙ×ðÚ<“™+`# ÷Ž¢k²–' [ 1143.869037][T16237] bio_check_eod: 2 callbacks suppressed [ 1143.874777][T16237] syz.3.2862: attempt to access beyond end of device [ 1143.874777][T16237] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1143.889577][T16237] syz.3.2862: attempt to access beyond end of device [ 1143.889577][T16237] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1143.903295][T16237] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1143.913854][T16237] syz.3.2862: attempt to access beyond end of device [ 1143.913854][T16237] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1143.927230][T16237] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1144.613180][T16237] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1144.621156][T16237] UDF-fs: Scanning with blocksize 512 failed [ 1144.629609][T16237] syz.3.2862: attempt to access beyond end of device [ 1144.629609][T16237] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1144.645389][T16237] syz.3.2862: attempt to access beyond end of device [ 1144.645389][T16237] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1144.661311][T16237] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1144.684806][T16237] syz.3.2862: attempt to access beyond end of device [ 1144.684806][T16237] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1144.698750][T16237] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1144.716236][ T5917] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.731065][ T51] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1144.746064][T16237] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1144.753768][T16237] UDF-fs: Scanning with blocksize 1024 failed [ 1144.760442][T16237] syz.3.2862: attempt to access beyond end of device [ 1144.760442][T16237] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1144.775504][T16237] syz.3.2862: attempt to access beyond end of device [ 1144.775504][T16237] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1145.188167][T16237] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1145.197887][T16237] syz.3.2862: attempt to access beyond end of device [ 1145.197887][T16237] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1145.217128][T16237] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1145.227429][T16237] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1145.235007][T16237] UDF-fs: Scanning with blocksize 2048 failed [ 1145.241831][T16237] syz.3.2862: attempt to access beyond end of device [ 1145.241831][T16237] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1145.255475][T16237] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1145.265230][T16237] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1145.274992][T16237] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1145.282714][T16237] UDF-fs: Scanning with blocksize 4096 failed [ 1145.288931][T16237] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1145.380606][T16234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1145.441078][T16234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1145.776738][T16251] siw: device registration error -23 [ 1146.517008][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2870'. [ 1146.659589][T16257] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2869'. [ 1146.796733][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.432807][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2870'. [ 1148.408601][T12729] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.751999][T12729] usb 1-1: USB disconnect, device number 60 [ 1149.051742][T16279] SET target dimension over the limit! [ 1149.241856][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1149.319488][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.428726][ T29] audit: type=1804 audit(1741391439.730:200): pid=16279 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.2877" name="/newroot/563/file0" dev="tmpfs" ino=3259 res=1 errno=0 [ 1149.592260][T16283] netlink: 'syz.2.2875': attribute type 3 has an invalid length. [ 1149.836060][T16288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1149.857314][T16288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1149.862702][T16289] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.887546][T16288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1149.899959][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1149.911189][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.922498][T16288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1149.942423][T16288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1149.952266][T16288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1149.973911][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1149.986811][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1150.003800][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1150.015517][T16289] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1150.037862][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1150.087969][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1150.102378][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1150.323262][T16293] overlayfs: failed to resolve './file1': -2 [ 1150.461330][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1150.484962][T16296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1150.521549][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.909933][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1150.985853][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.257513][T16302] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 1151.299087][ T12] bridge_slave_1: left allmulticast mode [ 1151.346812][ T12] bridge_slave_1: left promiscuous mode [ 1151.353769][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.363539][ T12] bridge_slave_0: left allmulticast mode [ 1151.369366][ T12] bridge_slave_0: left promiscuous mode [ 1151.375266][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1151.889984][T16309] overlayfs: failed to resolve './file1': -2 [ 1152.307021][T16288] Bluetooth: hci0: command tx timeout [ 1152.549012][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1152.563074][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1152.582067][ T12] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1152.600824][ T12] bond0 (unregistering): Released all slaves [ 1152.713199][T16315] tmpfs: Bad value for 'mpol' [ 1152.751795][ T12] IPVS: stopping backup sync thread 11539 ... [ 1152.865563][T16285] chnl_net:caif_netlink_parms(): no params data found [ 1152.930305][T12779] libceph: connect (1)[c::]:6789 error -101 [ 1152.937665][T12779] libceph: mon0 (1)[c::]:6789 connect error [ 1153.167579][T16327] bio_check_eod: 2 callbacks suppressed [ 1153.173241][T16327] syz.5.2887: attempt to access beyond end of device [ 1153.173241][T16327] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1153.187494][T16327] syz.5.2887: attempt to access beyond end of device [ 1153.187494][T16327] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1153.200874][T16327] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1153.212481][T16327] syz.5.2887: attempt to access beyond end of device [ 1153.212481][T16327] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1153.226030][T16327] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1153.226057][T16327] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 1153.226076][T16327] UDF-fs: Scanning with blocksize 512 failed [ 1153.232328][T16327] syz.5.2887: attempt to access beyond end of device [ 1153.232328][T16327] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1153.233495][T16327] syz.5.2887: attempt to access beyond end of device [ 1153.233495][T16327] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1153.233829][T16327] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1153.234801][T16327] syz.5.2887: attempt to access beyond end of device [ 1153.234801][T16327] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1153.234890][T16327] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1153.234975][T16327] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 1153.235023][T16327] UDF-fs: Scanning with blocksize 1024 failed [ 1153.238724][T16327] syz.5.2887: attempt to access beyond end of device [ 1153.238724][T16327] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1153.240007][T16327] syz.5.2887: attempt to access beyond end of device [ 1153.240007][T16327] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1153.240221][T16327] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1153.241622][T16327] syz.5.2887: attempt to access beyond end of device [ 1153.241622][T16327] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1153.241816][T16327] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1153.241902][T16327] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 1153.242053][T16327] UDF-fs: Scanning with blocksize 2048 failed [ 1153.244770][T16327] syz.5.2887: attempt to access beyond end of device [ 1153.244770][T16327] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1153.245720][T16327] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 1153.246927][T16327] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 1153.246954][T16327] UDF-fs: warning (device nbd5): udf_load_vrs: No anchor found [ 1153.246968][T16327] UDF-fs: Scanning with blocksize 4096 failed [ 1153.247044][T16327] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 1153.570708][T16315] ceph: No mds server is up or the cluster is laggy [ 1153.773608][T12779] libceph: connect (1)[c::]:6789 error -101 [ 1153.773830][T12779] libceph: mon0 (1)[c::]:6789 connect error [ 1154.422114][T16288] Bluetooth: hci0: command tx timeout [ 1155.130105][T16285] bridge0: port 1(bridge_slave_0) entered blocking state [ 1155.141625][T16285] bridge0: port 1(bridge_slave_0) entered disabled state [ 1155.292107][T16285] bridge_slave_0: entered allmulticast mode [ 1155.317884][T16285] bridge_slave_0: entered promiscuous mode [ 1155.443912][T16285] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.462476][T16285] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.488576][T16285] bridge_slave_1: entered allmulticast mode [ 1155.520691][T16285] bridge_slave_1: entered promiscuous mode [ 1155.957426][T16355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1155.971258][T16355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.399676][ T12] hsr_slave_0: left promiscuous mode [ 1156.416824][ T12] hsr_slave_1: left promiscuous mode [ 1156.423257][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1156.476912][T16288] Bluetooth: hci0: command tx timeout [ 1156.496184][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1156.541599][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1156.587995][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1156.658266][ T12] dummy0: left allmulticast mode [ 1156.663586][ T12] veth1_macvtap: left promiscuous mode [ 1156.669712][ T12] veth1_vlan: left promiscuous mode [ 1156.677493][ T12] veth0_vlan: left promiscuous mode [ 1158.255728][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1158.321838][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1158.547894][T16288] Bluetooth: hci0: command tx timeout [ 1159.004018][T16285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.024814][T16285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.203239][T16285] team0: Port device team_slave_0 added [ 1159.256154][T16285] team0: Port device team_slave_1 added [ 1159.354034][T16378] bio_check_eod: 2 callbacks suppressed [ 1159.359967][T16378] syz.2.2899: attempt to access beyond end of device [ 1159.359967][T16378] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1159.374304][T16378] syz.2.2899: attempt to access beyond end of device [ 1159.374304][T16378] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1159.388131][T16378] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1159.399918][T16378] syz.2.2899: attempt to access beyond end of device [ 1159.399918][T16378] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1159.413232][T16378] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1159.423170][T16378] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1159.430922][T16378] UDF-fs: Scanning with blocksize 512 failed [ 1159.443125][T16378] syz.2.2899: attempt to access beyond end of device [ 1159.443125][T16378] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1159.457809][T16378] syz.2.2899: attempt to access beyond end of device [ 1159.457809][T16378] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1159.471253][T16378] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1159.482233][T16378] syz.2.2899: attempt to access beyond end of device [ 1159.482233][T16378] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1159.496175][T16378] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1159.505829][T16378] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1159.513953][T16378] UDF-fs: Scanning with blocksize 1024 failed [ 1159.523313][T16378] syz.2.2899: attempt to access beyond end of device [ 1159.523313][T16378] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1159.537464][T16378] syz.2.2899: attempt to access beyond end of device [ 1159.537464][T16378] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1159.551059][T16378] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1159.561598][T16378] syz.2.2899: attempt to access beyond end of device [ 1159.561598][T16378] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1159.575119][T16378] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1159.584830][T16378] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1159.593237][T16378] UDF-fs: Scanning with blocksize 2048 failed [ 1159.602017][T16378] syz.2.2899: attempt to access beyond end of device [ 1159.602017][T16378] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1159.616332][T16378] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 1159.626557][T16378] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 1159.636276][T16378] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 1159.644213][T16378] UDF-fs: Scanning with blocksize 4096 failed [ 1159.650497][T16378] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 1160.278150][T16383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.312767][T16285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.326992][T16285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1160.357442][T16383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.384037][T16285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.037903][T16285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.157171][T16285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1161.265017][T16285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1162.695097][T16285] hsr_slave_0: entered promiscuous mode [ 1162.732263][T16285] hsr_slave_1: entered promiscuous mode [ 1162.744245][T16285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1162.761485][T16285] Cannot create hsr debugfs directory [ 1162.778505][ T12] IPVS: stop unused estimator thread 0... [ 1163.256379][T16413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1163.804403][T16424] SET target dimension over the limit! [ 1163.913014][ T29] audit: type=1804 audit(1741391454.209:201): pid=16424 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.2915" name="/newroot/554/file0" dev="tmpfs" ino=3335 res=1 errno=0 [ 1164.959689][T16285] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1164.969561][T16285] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1164.979272][T16285] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1164.989275][T16285] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1165.877124][T16285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.950524][T16285] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.043799][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.051024][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.170320][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.177678][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1167.638543][T16453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2924'. [ 1167.938355][T16460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1167.958646][T16460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.480821][T16285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.560990][T16285] veth0_vlan: entered promiscuous mode [ 1169.591651][T16285] veth1_vlan: entered promiscuous mode [ 1169.657325][T16285] veth0_macvtap: entered promiscuous mode [ 1169.675862][T16285] veth1_macvtap: entered promiscuous mode [ 1169.831896][T16473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2928'. [ 1169.901776][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1169.945862][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1169.994006][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1170.065684][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1170.134563][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1170.210314][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1170.299817][T16285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1170.350243][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1170.410242][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1170.434023][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1170.469258][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1170.485288][T16285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1170.496071][T16285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1170.507802][T16285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1170.518791][T16285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.529606][T16285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.574133][T16285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.597609][T16285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.696805][ T8] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1170.892401][ T8] usb 5-1: device descriptor read/64, error -71 [ 1170.914776][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1170.948916][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.040165][ T208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1171.049306][ T208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1171.856973][ T8] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1172.805455][T16510] overlayfs: failed to resolve './file1': -2 [ 1172.832233][T16514] IPVS: sync thread started: state = BACKUP, mcast_ifn = wlan0, syncid = 1, id = 0 [ 1172.843145][T16513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1172.855747][T16513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1173.880873][T16524] fuse: Unknown parameter '/dev/cpu/#/msr' [ 1176.009795][T16555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1176.084975][T16555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1177.278395][T12779] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1177.515266][T12779] usb 1-1: Using ep0 maxpacket: 8 [ 1177.516445][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.557485][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.558351][T12779] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1177.589685][T12779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.603876][T12779] usb 1-1: config 0 descriptor?? [ 1178.082726][ T8] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1178.102195][T16561] overlayfs: missing 'lowerdir' [ 1178.515032][T16561] Invalid ELF header magic: != ELF [ 1178.530279][T12779] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1178.556172][T12779] asix 1-1:0.0: probe with driver asix failed with error -71 [ 1178.556304][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.567847][T12779] usb 1-1: USB disconnect, device number 61 [ 1178.621485][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1178.665946][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1178.694154][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1178.716250][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.739107][ T8] usb 5-1: config 0 descriptor?? [ 1179.921632][ T8] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 1179.970401][ T8] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 1180.063166][T16587] tipc: Started in network mode [ 1180.068319][T16587] tipc: Node identity 7, cluster identity 7 [ 1180.074705][T16587] tipc: Node number set to 7 [ 1180.084010][ T8] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1180.623522][T16599] FAULT_INJECTION: forcing a failure. [ 1180.623522][T16599] name failslab, interval 1, probability 0, space 0, times 0 [ 1180.642008][T16599] CPU: 1 UID: 0 PID: 16599 Comm: syz.2.2960 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 1180.642036][T16599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1180.642047][T16599] Call Trace: [ 1180.642060][T16599] [ 1180.642068][T16599] dump_stack_lvl+0x241/0x360 [ 1180.642097][T16599] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1180.642114][T16599] ? __pfx__printk+0x10/0x10 [ 1180.642141][T16599] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 1180.642160][T16599] ? __pfx___might_resched+0x10/0x10 [ 1180.642185][T16599] should_fail_ex+0x40a/0x550 [ 1180.642213][T16599] should_failslab+0xac/0x100 [ 1180.642240][T16599] kmem_cache_alloc_node_noprof+0x77/0x380 [ 1180.642257][T16599] ? __alloc_skb+0x1c3/0x440 [ 1180.642284][T16599] __alloc_skb+0x1c3/0x440 [ 1180.642312][T16599] ? __pfx___alloc_skb+0x10/0x10 [ 1180.642336][T16599] ? netlink_autobind+0xd6/0x2f0 [ 1180.642354][T16599] ? netlink_autobind+0x2b0/0x2f0 [ 1180.642377][T16599] netlink_sendmsg+0x634/0xcb0 [ 1180.642405][T16599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1180.642435][T16599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1180.642452][T16599] __sock_sendmsg+0x221/0x270 [ 1180.642474][T16599] ____sys_sendmsg+0x53a/0x860 [ 1180.642507][T16599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1180.642529][T16599] ? __fget_files+0x2a/0x410 [ 1180.642549][T16599] ? __fget_files+0x2a/0x410 [ 1180.642574][T16599] __sys_sendmsg+0x269/0x350 [ 1180.642603][T16599] ? __pfx___sys_sendmsg+0x10/0x10 [ 1180.642663][T16599] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1180.642687][T16599] ? do_syscall_64+0x100/0x230 [ 1180.642711][T16599] ? do_syscall_64+0xb6/0x230 [ 1180.642734][T16599] do_syscall_64+0xf3/0x230 [ 1180.642755][T16599] ? clear_bhb_loop+0x35/0x90 [ 1180.642780][T16599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.642801][T16599] RIP: 0033:0x7f8755f8d169 [ 1180.642815][T16599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1180.642830][T16599] RSP: 002b:00007f8756dd1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1180.642849][T16599] RAX: ffffffffffffffda RBX: 00007f87561a5fa0 RCX: 00007f8755f8d169 [ 1180.642862][T16599] RDX: 0000000000000000 RSI: 0000400000000300 RDI: 0000000000000003 [ 1180.642874][T16599] RBP: 00007f8756dd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1180.642885][T16599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1180.642896][T16599] R13: 0000000000000000 R14: 00007f87561a5fa0 R15: 00007ffe40db6038 [ 1180.642922][T16599] [ 1180.787371][ T8] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1181.137038][ T8] usb 1-1: device descriptor read/64, error -71 [ 1181.377101][ T8] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1181.548677][ T8] usb 1-1: device descriptor read/64, error -71 [ 1181.660921][ T8] usb usb1-port1: attempt power cycle [ 1182.118817][ T8] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1182.170689][ T8] usb 1-1: device descriptor read/8, error -71 [ 1182.210751][T16490] usb 5-1: USB disconnect, device number 73 [ 1182.428219][ T8] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1182.448230][T16636] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2971'. [ 1182.859108][ T8] usb 1-1: device descriptor read/8, error -71 [ 1183.017190][ T8] usb usb1-port1: unable to enumerate USB device [ 1183.040695][T16639] FAULT_INJECTION: forcing a failure. [ 1183.040695][T16639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1183.057303][T16639] CPU: 1 UID: 0 PID: 16639 Comm: syz.2.2972 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 1183.057331][T16639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1183.057342][T16639] Call Trace: [ 1183.057348][T16639] [ 1183.057355][T16639] dump_stack_lvl+0x241/0x360 [ 1183.057372][T16639] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1183.057382][T16639] ? __pfx__printk+0x10/0x10 [ 1183.057397][T16639] ? __pfx_lock_release+0x10/0x10 [ 1183.057416][T16639] should_fail_ex+0x40a/0x550 [ 1183.057432][T16639] _copy_from_iter+0x1df/0x1c40 [ 1183.057443][T16639] ? __virt_addr_valid+0x183/0x530 [ 1183.057458][T16639] ? __pfx_lock_release+0x10/0x10 [ 1183.057476][T16639] ? __pfx__copy_from_iter+0x10/0x10 [ 1183.057488][T16639] ? __virt_addr_valid+0x183/0x530 [ 1183.057501][T16639] ? __virt_addr_valid+0x183/0x530 [ 1183.057513][T16639] ? __virt_addr_valid+0x45f/0x530 [ 1183.057526][T16639] ? __phys_addr_symbol+0x2f/0x70 [ 1183.057539][T16639] ? __check_object_size+0x47a/0x730 [ 1183.057557][T16639] proc_sys_call_handler+0x4f4/0x920 [ 1183.057575][T16639] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1183.057594][T16639] do_iter_readv_writev+0x71a/0x9d0 [ 1183.057611][T16639] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1183.057623][T16639] ? rcu_read_lock_any_held+0xb7/0x160 [ 1183.057643][T16639] vfs_writev+0x38b/0xbc0 [ 1183.057655][T16639] ? trace_contention_end+0x3c/0x120 [ 1183.057665][T16639] ? __mutex_lock+0x397/0x1010 [ 1183.057683][T16639] ? __pfx_vfs_writev+0x10/0x10 [ 1183.057702][T16639] ? __fget_files+0x2a/0x410 [ 1183.057713][T16639] ? __fget_files+0x395/0x410 [ 1183.057722][T16639] ? __fget_files+0x2a/0x410 [ 1183.057739][T16639] do_writev+0x1b6/0x360 [ 1183.057752][T16639] ? __pfx_do_writev+0x10/0x10 [ 1183.057762][T16639] ? do_syscall_64+0x100/0x230 [ 1183.057777][T16639] ? do_syscall_64+0xb6/0x230 [ 1183.057791][T16639] do_syscall_64+0xf3/0x230 [ 1183.057804][T16639] ? clear_bhb_loop+0x35/0x90 [ 1183.057819][T16639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1183.057832][T16639] RIP: 0033:0x7f8755f8d169 [ 1183.057844][T16639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1183.057852][T16639] RSP: 002b:00007f8756dd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1183.057864][T16639] RAX: ffffffffffffffda RBX: 00007f87561a5fa0 RCX: 00007f8755f8d169 [ 1183.057871][T16639] RDX: 0000000000000001 RSI: 0000400000000080 RDI: 0000000000000004 [ 1183.057878][T16639] RBP: 00007f8756dd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1183.057884][T16639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1183.057890][T16639] R13: 0000000000000000 R14: 00007f87561a5fa0 R15: 00007ffe40db6038 [ 1183.057905][T16639] [ 1183.416803][T16490] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1183.547552][T16646] SET target dimension over the limit! [ 1183.572685][T16648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.595350][T16490] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.615620][T16648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1183.648453][T16490] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1183.682118][T16490] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1184.659244][T16660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.676745][T16490] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1184.682179][T16660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.696795][T16490] usb 5-1: SerialNumber: syz [ 1184.840385][T16660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2977'. [ 1184.878325][T16660] (unnamed net_device) (uninitialized): option lacp_active: invalid value (3) [ 1184.929260][T16664] FAULT_INJECTION: forcing a failure. [ 1184.929260][T16664] name failslab, interval 1, probability 0, space 0, times 0 [ 1184.945223][T16665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1184.966123][T16665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.974978][T16664] CPU: 1 UID: 0 PID: 16664 Comm: syz.2.2980 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 1184.975002][T16664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1184.975013][T16664] Call Trace: [ 1184.975021][T16664] [ 1184.975029][T16664] dump_stack_lvl+0x241/0x360 [ 1184.975054][T16664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1184.975071][T16664] ? __pfx__printk+0x10/0x10 [ 1184.975097][T16664] ? __kmalloc_cache_node_noprof+0x47/0x3a0 [ 1184.975116][T16664] ? __pfx___might_resched+0x10/0x10 [ 1184.975141][T16664] should_fail_ex+0x40a/0x550 [ 1184.975169][T16664] should_failslab+0xac/0x100 [ 1184.975195][T16664] ? __get_vm_area_node+0x132/0x2d0 [ 1184.975213][T16664] __kmalloc_cache_node_noprof+0x6f/0x3a0 [ 1184.975237][T16664] __get_vm_area_node+0x132/0x2d0 [ 1184.975259][T16664] __vmalloc_node_range_noprof+0x344/0x1380 [ 1184.975280][T16664] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 1184.975304][T16664] ? mark_lock+0x9a/0x360 [ 1184.975353][T16664] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1184.975382][T16664] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 1184.975402][T16664] __vmalloc_noprof+0x79/0x90 [ 1184.975421][T16664] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 1184.975444][T16664] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 1184.975464][T16664] ? bpf_prog_alloc+0x28/0x1b0 [ 1184.975488][T16664] bpf_prog_alloc+0x3a/0x1b0 [ 1184.975512][T16664] bpf_prog_load+0x7f4/0x20e0 [ 1184.975546][T16664] ? __pfx_bpf_prog_load+0x10/0x10 [ 1184.975568][T16664] ? __pfx___might_resched+0x10/0x10 [ 1184.975608][T16664] ? __might_fault+0xaa/0x120 [ 1184.975636][T16664] __sys_bpf+0x4ea/0x820 [ 1184.975659][T16664] ? __pfx___sys_bpf+0x10/0x10 [ 1184.975691][T16664] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1184.975716][T16664] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1184.975739][T16664] ? do_syscall_64+0x100/0x230 [ 1184.975766][T16664] __x64_sys_bpf+0x7c/0x90 [ 1184.975786][T16664] do_syscall_64+0xf3/0x230 [ 1184.975808][T16664] ? clear_bhb_loop+0x35/0x90 [ 1184.975833][T16664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.975854][T16664] RIP: 0033:0x7f8755f8d169 [ 1184.975870][T16664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1184.975885][T16664] RSP: 002b:00007f8756dd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1184.975903][T16664] RAX: ffffffffffffffda RBX: 00007f87561a5fa0 RCX: 00007f8755f8d169 [ 1184.975916][T16664] RDX: 0000000000000094 RSI: 00004000000005c0 RDI: 0000000000000005 [ 1184.975927][T16664] RBP: 00007f8756dd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1184.975938][T16664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1184.975948][T16664] R13: 0000000000000000 R14: 00007f87561a5fa0 R15: 00007ffe40db6038 [ 1184.975974][T16664] [ 1184.976017][T16664] syz.2.2980: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 1185.378404][T16490] usb 5-1: 0:2 : does not exist [ 1185.408137][T16490] usb 5-1: unit 5: unexpected type 0x03 [ 1185.426337][T16664] ,cpuset=/,mems_allowed=0-1 [ 1185.435943][T16664] CPU: 0 UID: 0 PID: 16664 Comm: syz.2.2980 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 1185.435970][T16664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1185.435980][T16664] Call Trace: [ 1185.435987][T16664] [ 1185.435994][T16664] dump_stack_lvl+0x241/0x360 [ 1185.436020][T16664] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1185.436037][T16664] ? __pfx__printk+0x10/0x10 [ 1185.436066][T16664] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1185.436086][T16664] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 1185.436108][T16664] warn_alloc+0x278/0x410 [ 1185.436134][T16664] ? __pfx_warn_alloc+0x10/0x10 [ 1185.436151][T16664] ? __kasan_kmalloc+0x23/0xb0 [ 1185.436174][T16664] ? __kmalloc_cache_node_noprof+0x25d/0x3a0 [ 1185.436198][T16664] ? __get_vm_area_node+0x280/0x2d0 [ 1185.436226][T16664] __vmalloc_node_range_noprof+0x369/0x1380 [ 1185.436246][T16664] ? mark_lock+0x9a/0x360 [ 1185.436289][T16664] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1185.436318][T16664] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 1185.436337][T16664] __vmalloc_noprof+0x79/0x90 [ 1185.436353][T16664] ? bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 1185.436375][T16664] bpf_prog_alloc_no_stats+0x4d/0x4d0 [ 1185.436396][T16664] ? bpf_prog_alloc+0x28/0x1b0 [ 1185.436419][T16664] bpf_prog_alloc+0x3a/0x1b0 [ 1185.436442][T16664] bpf_prog_load+0x7f4/0x20e0 [ 1185.436476][T16664] ? __pfx_bpf_prog_load+0x10/0x10 [ 1185.436508][T16664] ? __pfx___might_resched+0x10/0x10 [ 1185.436541][T16664] ? __might_fault+0xaa/0x120 [ 1185.436568][T16664] __sys_bpf+0x4ea/0x820 [ 1185.436591][T16664] ? __pfx___sys_bpf+0x10/0x10 [ 1185.436623][T16664] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1185.436646][T16664] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1185.436669][T16664] ? do_syscall_64+0x100/0x230 [ 1185.436695][T16664] __x64_sys_bpf+0x7c/0x90 [ 1185.436715][T16664] do_syscall_64+0xf3/0x230 [ 1185.436735][T16664] ? clear_bhb_loop+0x35/0x90 [ 1185.436758][T16664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.436778][T16664] RIP: 0033:0x7f8755f8d169 [ 1185.436794][T16664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1185.436807][T16664] RSP: 002b:00007f8756dd1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1185.436827][T16664] RAX: ffffffffffffffda RBX: 00007f87561a5fa0 RCX: 00007f8755f8d169 [ 1185.436839][T16664] RDX: 0000000000000094 RSI: 00004000000005c0 RDI: 0000000000000005 [ 1185.436850][T16664] RBP: 00007f8756dd1090 R08: 0000000000000000 R09: 0000000000000000 [ 1185.436861][T16664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1185.436871][T16664] R13: 0000000000000000 R14: 00007f87561a5fa0 R15: 00007ffe40db6038 [ 1185.436897][T16664] [ 1185.767107][T16664] Mem-Info: [ 1185.770281][T16664] active_anon:99 inactive_anon:16346 isolated_anon:0 [ 1185.770281][T16664] active_file:19709 inactive_file:3729 isolated_file:0 [ 1185.770281][T16664] unevictable:768 dirty:10 writeback:0 [ 1185.770281][T16664] slab_reclaimable:9162 slab_unreclaimable:98431 [ 1185.770281][T16664] mapped:34715 shmem:13251 pagetables:1135 [ 1185.770281][T16664] sec_pagetables:0 bounce:0 [ 1185.770281][T16664] kernel_misc_reclaimable:0 [ 1185.770281][T16664] free:1329362 free_pcp:12941 free_cma:0 [ 1185.911900][T16490] usb 5-1: USB disconnect, device number 74 [ 1185.946930][T16664] Node 0 active_anon:396kB inactive_anon:72284kB active_file:78836kB inactive_file:14912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145860kB dirty:140kB writeback:0kB shmem:58368kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11368kB pagetables:4540kB sec_pagetables:0kB all_unreclaimable? no [ 1185.981998][T16664] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1186.020638][T16664] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1186.107530][T16664] lowmem_reserve[]: 0 2490 2490 0 0 [ 1186.113328][T16664] Node 0 DMA32 free:1387300kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:384kB inactive_anon:72636kB active_file:78556kB inactive_file:14900kB unevictable:1536kB writepending:140kB present:3129332kB managed:2550344kB mlocked:0kB bounce:0kB free_pcp:44508kB local_pcp:40548kB free_cma:0kB [ 1186.164807][T16664] lowmem_reserve[]: 0 0 0 0 0 [ 1186.176754][T16664] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:12kB inactive_anon:48kB active_file:280kB inactive_file:12kB unevictable:0kB writepending:0kB present:1048580kB managed:368kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:12kB free_cma:0kB [ 1186.236736][T16664] lowmem_reserve[]: 0 0 0 0 0 [ 1186.244940][T16664] Node 1 Normal free:3914788kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111168kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1186.304599][T16664] lowmem_reserve[]: 0 0 0 0 0 [ 1186.316725][T16664] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1186.366788][T16664] Node 0 DMA32: 154*4kB (U) 69*8kB (UME) 411*16kB (UME) 189*32kB (UME) 44*64kB (UME) 76*128kB (UE) 144*256kB (UME) 100*512kB (UME) 76*1024kB (UME) 33*2048kB (UM) 275*4096kB (UM) = 1386208kB [ 1186.416373][T16664] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1186.451962][T16664] Node 1 Normal: 201*4kB (UME) 54*8kB (UME) 45*16kB (UME) 204*32kB (UME) 72*64kB (UME) 28*128kB (UME) 11*256kB (UM) 10*512kB (UME) 5*1024kB (UME) 7*2048kB (UME) 945*4096kB (M) = 3914788kB [ 1186.508672][T16664] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1186.598407][T16664] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1186.832559][T16664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1186.986124][T16664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1187.130644][T16664] 41473 total pagecache pages [ 1187.202532][T16664] 0 pages in swap cache [ 1187.326854][T16664] Free swap = 124800kB [ 1187.342235][T16664] Total swap = 124996kB [ 1187.386799][T16664] 2097051 pages RAM [ 1187.390834][T16664] 0 pages HighMem/MovableOnly [ 1187.416862][T16664] 427741 pages reserved [ 1187.426889][T16664] 0 pages cma reserved [ 1189.057821][T16696] bio_check_eod: 2 callbacks suppressed [ 1189.057834][T16696] syz.3.2987: attempt to access beyond end of device [ 1189.057834][T16696] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 1189.076523][T16696] syz.3.2987: attempt to access beyond end of device [ 1189.076523][T16696] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 1189.089766][T16696] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1189.099693][T16696] syz.3.2987: attempt to access beyond end of device [ 1189.099693][T16696] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 1189.112978][T16696] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1189.122632][T16696] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1189.130432][T16696] UDF-fs: Scanning with blocksize 512 failed [ 1189.137052][T16696] syz.3.2987: attempt to access beyond end of device [ 1189.137052][T16696] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 1189.150351][T16696] syz.3.2987: attempt to access beyond end of device [ 1189.150351][T16696] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 1189.163709][T16696] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1189.173791][T16696] syz.3.2987: attempt to access beyond end of device [ 1189.173791][T16696] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 1189.187589][T16696] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1189.197714][T16696] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1189.205341][T16696] UDF-fs: Scanning with blocksize 1024 failed [ 1189.212176][T16696] syz.3.2987: attempt to access beyond end of device [ 1189.212176][T16696] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 1189.225375][T16696] syz.3.2987: attempt to access beyond end of device [ 1189.225375][T16696] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 1189.238552][T16696] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1189.248333][T16696] syz.3.2987: attempt to access beyond end of device [ 1189.248333][T16696] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 1189.261600][T16696] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1189.271737][T16696] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1189.279628][T16696] UDF-fs: Scanning with blocksize 2048 failed [ 1189.286540][T16696] syz.3.2987: attempt to access beyond end of device [ 1189.286540][T16696] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1189.300489][T16696] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 1189.310362][T16696] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 1189.320375][T16696] UDF-fs: warning (device nbd3): udf_load_vrs: No anchor found [ 1189.328161][T16696] UDF-fs: Scanning with blocksize 4096 failed [ 1189.334228][T16696] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 1189.854525][T16705] FAULT_INJECTION: forcing a failure. [ 1189.854525][T16705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1189.906899][T16705] CPU: 1 UID: 0 PID: 16705 Comm: syz.3.2990 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 1189.906926][T16705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1189.906938][T16705] Call Trace: [ 1189.906945][T16705] [ 1189.906954][T16705] dump_stack_lvl+0x241/0x360 [ 1189.906979][T16705] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1189.906997][T16705] ? __pfx__printk+0x10/0x10 [ 1189.907023][T16705] ? __pfx_lock_release+0x10/0x10 [ 1189.907047][T16705] ? rcu_read_lock_any_held+0xb7/0x160 [ 1189.907071][T16705] should_fail_ex+0x40a/0x550 [ 1189.907099][T16705] _copy_from_user+0x2d/0xb0 [ 1189.907121][T16705] rose_setsockopt+0x17a/0x660 [ 1189.907147][T16705] ? __pfx_rose_setsockopt+0x10/0x10 [ 1189.907173][T16705] ? __pfx_vfs_write+0x10/0x10 [ 1189.907192][T16705] ? do_sys_openat2+0x17a/0x1d0 [ 1189.907211][T16705] ? __pfx_rose_setsockopt+0x10/0x10 [ 1189.907233][T16705] do_sock_setsockopt+0x3af/0x720 [ 1189.907271][T16705] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1189.907301][T16705] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1189.907331][T16705] __x64_sys_setsockopt+0x1ee/0x280 [ 1189.907361][T16705] do_syscall_64+0xf3/0x230 [ 1189.907384][T16705] ? clear_bhb_loop+0x35/0x90 [ 1189.907410][T16705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1189.907432][T16705] RIP: 0033:0x7f8b0398d169 [ 1189.907448][T16705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1189.907462][T16705] RSP: 002b:00007f8b04779038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1189.907482][T16705] RAX: ffffffffffffffda RBX: 00007f8b03ba5fa0 RCX: 00007f8b0398d169 [ 1189.907495][T16705] RDX: 0000000000000003 RSI: 0000000000000104 RDI: 0000000000000004 [ 1189.907505][T16705] RBP: 00007f8b04779090 R08: 0000000000000004 R09: 0000000000000000 [ 1189.907514][T16705] R10: 0000400000000280 R11: 0000000000000246 R12: 0000000000000001 [ 1189.907525][T16705] R13: 0000000000000000 R14: 00007f8b03ba5fa0 R15: 00007ffea5647bd8 [ 1189.907552][T16705] [ 1190.509404][T16490] usb 4-1: USB disconnect, device number 61 [ 1192.517477][T16723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.526178][T16723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1192.620319][ T1346] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.739237][T16726] PKCS7: Unknown OID: [5] (bad) [ 1192.745700][T16726] PKCS7: Only support pkcs7_signedData type [ 1193.048243][ T1346] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.798972][ T1346] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.825737][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1193.839042][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1193.855607][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1193.866336][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1193.878406][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1193.887063][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1193.935959][ T1346] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1194.015044][T16737] SET target dimension over the limit! [ 1194.476711][ T29] audit: type=1804 audit(1741391484.432:202): pid=16737 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.5.2999" name="/newroot/519/file0" dev="tmpfs" ino=3098 res=1 errno=0 [ 1194.738113][ T1346] bridge_slave_1: left allmulticast mode [ 1194.743915][ T1346] bridge_slave_1: left promiscuous mode [ 1194.751218][ T1346] bridge0: port 2(bridge_slave_1) entered disabled state [ 1195.547448][ T1346] bridge_slave_0: left allmulticast mode [ 1195.553147][ T1346] bridge_slave_0: left promiscuous mode [ 1195.578798][ T1346] bridge0: port 1(bridge_slave_0) entered disabled state [ 1195.589508][T16749] FAULT_INJECTION: forcing a failure. [ 1195.589508][T16749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1195.603925][T16749] CPU: 1 UID: 0 PID: 16749 Comm: syz.0.3003 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 1195.603948][T16749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1195.603958][T16749] Call Trace: [ 1195.603964][T16749] [ 1195.603972][T16749] dump_stack_lvl+0x241/0x360 [ 1195.603997][T16749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1195.604012][T16749] ? __pfx__printk+0x10/0x10 [ 1195.604036][T16749] ? __pfx_lock_release+0x10/0x10 [ 1195.604063][T16749] should_fail_ex+0x40a/0x550 [ 1195.604089][T16749] _copy_from_user+0x2d/0xb0 [ 1195.604110][T16749] move_addr_to_kernel+0x82/0x150 [ 1195.604130][T16749] copy_msghdr_from_user+0x43e/0x680 [ 1195.604150][T16749] ? __pfx___might_resched+0x10/0x10 [ 1195.604171][T16749] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1195.604188][T16749] ? __fget_files+0x2a/0x410 [ 1195.604208][T16749] ? __sys_sendmmsg+0x392/0x720 [ 1195.604224][T16749] ? __might_fault+0xaa/0x120 [ 1195.604246][T16749] __sys_sendmmsg+0x32b/0x720 [ 1195.604271][T16749] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1195.604297][T16749] ? __pfx_lock_release+0x10/0x10 [ 1195.604315][T16749] ? kstrtouint_from_user+0x128/0x190 [ 1195.604351][T16749] ? ksys_write+0x22a/0x2b0 [ 1195.604370][T16749] ? __pfx_lock_release+0x10/0x10 [ 1195.604396][T16749] ? sb_end_write+0xe9/0x1c0 [ 1195.604413][T16749] ? vfs_write+0x7fa/0xd10 [ 1195.604434][T16749] ? __mutex_unlock_slowpath+0x227/0x800 [ 1195.604477][T16749] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1195.604498][T16749] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1195.604521][T16749] ? do_syscall_64+0x100/0x230 [ 1195.604544][T16749] __x64_sys_sendmmsg+0xa0/0xb0 [ 1195.604561][T16749] do_syscall_64+0xf3/0x230 [ 1195.604581][T16749] ? clear_bhb_loop+0x35/0x90 [ 1195.604603][T16749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.604622][T16749] RIP: 0033:0x7f9d50b8d169 [ 1195.604635][T16749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1195.604647][T16749] RSP: 002b:00007f9d51acd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1195.604664][T16749] RAX: ffffffffffffffda RBX: 00007f9d50da5fa0 RCX: 00007f9d50b8d169 [ 1195.604675][T16749] RDX: 0000000000000002 RSI: 000040000000a5c0 RDI: 0000000000000003 [ 1195.604684][T16749] RBP: 00007f9d51acd090 R08: 0000000000000000 R09: 0000000000000000 [ 1195.604693][T16749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1195.604703][T16749] R13: 0000000000000000 R14: 00007f9d50da5fa0 R15: 00007ffd36a72c68 [ 1195.604727][T16749] [ 1196.133752][ T5840] Bluetooth: hci2: command tx timeout [ 1196.168393][ T29] audit: type=1804 audit(1741391486.452:203): pid=16752 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.3001" name="/newroot/587/file0" dev="tmpfs" ino=3388 res=1 errno=0 [ 1198.214681][T16288] Bluetooth: hci2: command tx timeout [ 1304.266680][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1304.273673][ C0] rcu: 1-...!: (1 GPs behind) idle=f634/1/0x4000000000000000 softirq=65734/65735 fqs=2 [ 1304.285270][ C0] rcu: (detected by 0, t=10502 jiffies, g=77289, q=91 ncpus=2) [ 1304.292937][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1304.292971][ C1] NMI backtrace for cpu 1 [ 1304.292984][ C1] CPU: 1 UID: 0 PID: 16786 Comm: syz.2.3013 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 1304.293001][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1304.293011][ C1] RIP: 0010:__lock_acquire+0xf2c/0x2100 [ 1304.293037][ C1] Code: 85 7d 04 00 00 48 83 7c 24 20 00 4c 8b 74 24 18 0f 84 6b 03 00 00 48 8b 44 24 38 48 8d 58 f8 48 89 d8 48 c1 e8 03 0f b6 04 38 <84> c0 0f 85 35 0f 00 00 8b 1b 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 [ 1304.293050][ C1] RSP: 0018:ffffc90000a18a50 EFLAGS: 00000806 [ 1304.293064][ C1] RAX: 0000000000000000 RBX: ffff888033a64710 RCX: 00000000001b35bd [ 1304.293076][ C1] RDX: 0000000036371a09 RSI: 000000009aeb59e6 RDI: dffffc0000000000 [ 1304.293087][ C1] RBP: d57e1d102ea6ccdd R08: ffffffff9451484f R09: 1ffffffff28a2909 [ 1304.293098][ C1] R10: dffffc0000000000 R11: fffffbfff28a290a R12: ffff888033a63c00 [ 1304.293109][ C1] R13: ffff888033a63c00 R14: 1ffff1100674c8e7 R15: 0000000000000001 [ 1304.293120][ C1] FS: 00007f8756db06c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1304.293133][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1304.293143][ C1] CR2: 00004000000dd030 CR3: 0000000032aaa000 CR4: 00000000003526f0 [ 1304.293164][ C1] DR0: 0000000000000007 DR1: 0000000000000002 DR2: 0000000000000008 [ 1304.293173][ C1] DR3: 1000000100000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1304.293183][ C1] Call Trace: [ 1304.293190][ C1] [ 1304.293198][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1304.293215][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1304.293233][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1304.293255][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1304.293271][ C1] ? nmi_handle+0x14f/0x5a0 [ 1304.293289][ C1] ? nmi_handle+0x2a/0x5a0 [ 1304.293307][ C1] ? __lock_acquire+0xf2c/0x2100 [ 1304.293324][ C1] ? default_do_nmi+0x63/0x160 [ 1304.293339][ C1] ? exc_nmi+0x123/0x1f0 [ 1304.293352][ C1] ? end_repeat_nmi+0xf/0x53 [ 1304.293375][ C1] ? __lock_acquire+0xf2c/0x2100 [ 1304.293393][ C1] ? __lock_acquire+0xf2c/0x2100 [ 1304.293411][ C1] ? __lock_acquire+0xf2c/0x2100 [ 1304.293429][ C1] [ 1304.293434][ C1] [ 1304.293446][ C1] lock_acquire+0x1ed/0x550 [ 1304.293463][ C1] ? __hrtimer_run_queues+0x670/0xd30 [ 1304.293479][ C1] ? advance_sched+0xa02/0xca0 [ 1304.293497][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1304.293517][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1304.293532][ C1] ? taprio_set_budgets+0x32c/0x370 [ 1304.293548][ C1] ? advance_sched+0xa02/0xca0 [ 1304.293563][ C1] ? advance_sched+0xa02/0xca0 [ 1304.293580][ C1] _raw_spin_lock_irq+0xd3/0x120 [ 1304.293597][ C1] ? __hrtimer_run_queues+0x670/0xd30 [ 1304.293611][ C1] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 1304.293630][ C1] __hrtimer_run_queues+0x670/0xd30 [ 1304.293651][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1304.293665][ C1] ? sched_clock+0x4a/0x70 [ 1304.293680][ C1] ? read_tsc+0x9/0x20 [ 1304.293694][ C1] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 1304.293715][ C1] hrtimer_interrupt+0x403/0xa40 [ 1304.293738][ C1] __sysvec_apic_timer_interrupt+0x110/0x420 [ 1304.293759][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1304.293777][ C1] [ 1304.293783][ C1] [ 1304.293789][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1304.293808][ C1] RIP: 0010:pid_vnr+0x6/0x1d0 [ 1304.293828][ C1] Code: 80 c1 03 38 c1 7c aa 48 89 df e8 15 fb 9a 00 eb a0 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 41 55 41 54 53 49 89 fe 49 bc 00 00 00 00 00 fc ff df e8 d1 [ 1304.293840][ C1] RSP: 0018:ffffc9000487f710 EFLAGS: 00000246 [ 1304.293852][ C1] RAX: 1ffff9200090fef8 RBX: ffff8880247a1030 RCX: dffffc0000000000 [ 1304.293863][ C1] RDX: ffffc9000d35b000 RSI: 000000000007ffff RDI: 0000000000000000 [ 1304.293874][ C1] RBP: ffffc9000487f8b0 R08: ffffc9000487f7df R09: 0000000000000000 [ 1304.293884][ C1] R10: ffffc9000487f7c0 R11: fffff5200090fefc R12: ffffc9000487f7c0 [ 1304.293895][ C1] R13: ffff88807cdad30c R14: 0000000000000000 R15: ffff8880247a1000 [ 1304.293912][ C1] __unix_dgram_recvmsg+0x9e1/0x1320 [ 1304.293937][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 1304.293958][ C1] ? iovec_from_user+0x61/0x240 [ 1304.293976][ C1] ? __pfx___might_resched+0x10/0x10 [ 1304.293994][ C1] ? __import_iovec+0x3bf/0x830 [ 1304.294010][ C1] ? unix_dgram_recvmsg+0xb6/0xe0 [ 1304.294023][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 1304.294038][ C1] sock_recvmsg_nosec+0x18e/0x1d0 [ 1304.294058][ C1] ____sys_recvmsg+0x3cd/0x480 [ 1304.294075][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1304.294094][ C1] ? do_recvmmsg+0x44e/0xab0 [ 1304.294108][ C1] ? __might_fault+0xaa/0x120 [ 1304.294126][ C1] do_recvmmsg+0x426/0xab0 [ 1304.294144][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 1304.294171][ C1] ? arch_irq_work_raise+0x6f/0x80 [ 1304.294193][ C1] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 1304.294212][ C1] ? bpf_trace_run2+0x1fc/0x540 [ 1304.294227][ C1] ? __pfx_lock_release+0x10/0x10 [ 1304.294254][ C1] ? trace_sys_enter+0x74/0x120 [ 1304.294275][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 1304.294297][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1304.294311][ C1] ? trace_sys_enter+0x74/0x120 [ 1304.294328][ C1] ? rcu_is_watching+0x15/0xb0 [ 1304.294343][ C1] ? trace_sys_enter+0x25/0x120 [ 1304.294363][ C1] do_syscall_64+0xf3/0x230 [ 1304.294381][ C1] ? clear_bhb_loop+0x35/0x90 [ 1304.294400][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.294418][ C1] RIP: 0033:0x7f8755f8d169 [ 1304.294432][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1304.294444][ C1] RSP: 002b:00007f8756db0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1304.294458][ C1] RAX: ffffffffffffffda RBX: 00007f87561a6080 RCX: 00007f8755f8d169 [ 1304.294469][ C1] RDX: 0000000000010106 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1304.294478][ C1] RBP: 00007f875600e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1304.294488][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 1304.294497][ C1] R13: 0000000000000001 R14: 00007f87561a6080 R15: 00007ffe40db6038 [ 1304.294513][ C1] [ 1304.294965][ C0] rcu: rcu_preempt kthread starved for 10498 jiffies! g77289 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1304.911801][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1304.921782][ C0] rcu: RCU grace-period kthread stack dump: [ 1304.927668][ C0] task:rcu_preempt state:R running task stack:25624 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 1304.941166][ C0] Call Trace: [ 1304.944449][ C0] [ 1304.947390][ C0] __schedule+0x18bc/0x4c40 [ 1304.951926][ C0] ? __pfx___schedule+0x10/0x10 [ 1304.956871][ C0] ? __pfx_lock_release+0x10/0x10 [ 1304.961911][ C0] ? __pfx___mod_timer+0x10/0x10 [ 1304.966857][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1304.973195][ C0] ? schedule+0x90/0x320 [ 1304.977443][ C0] schedule+0x14b/0x320 [ 1304.981605][ C0] schedule_timeout+0x15a/0x290 [ 1304.986461][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1304.991835][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1304.997132][ C0] ? prepare_to_swait_event+0x330/0x350 [ 1305.002695][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 1305.007552][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1305.012767][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1305.018929][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1305.024222][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1305.030127][ C0] ? finish_swait+0xd4/0x1e0 [ 1305.034725][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1305.039930][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 1305.044530][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1305.049745][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1305.055666][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1305.061143][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1305.066357][ C0] kthread+0x7a9/0x920 [ 1305.070443][ C0] ? __pfx_kthread+0x10/0x10 [ 1305.075040][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1305.080250][ C0] ? __pfx_kthread+0x10/0x10 [ 1305.084859][ C0] ? __pfx_kthread+0x10/0x10 [ 1305.089462][ C0] ? __pfx_kthread+0x10/0x10 [ 1305.094079][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1305.099309][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 1305.104520][ C0] ? __pfx_kthread+0x10/0x10 [ 1305.109123][ C0] ret_from_fork+0x4b/0x80 [ 1305.113551][ C0] ? __pfx_kthread+0x10/0x10 [ 1305.118162][ C0] ret_from_fork_asm+0x1a/0x30 [ 1305.122951][ C0] [ 1305.125975][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1305.132298][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.14.0-rc5-syzkaller-00137-g00a7d39898c8 #0 [ 1305.142624][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1305.152677][ C0] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 1305.158066][ C0] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 00 d5 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 05 cc 88 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 1305.177699][ C0] RSP: 0018:ffffffff8e807ca8 EFLAGS: 00000246 [ 1305.183781][ C0] RAX: ffffffff8e896580 RBX: ffff88801e2ef064 RCX: 000000000171b921 [ 1305.191756][ C0] RDX: 0000000000000001 RSI: ffff88801e2ef000 RDI: ffff88801e2ef064 [ 1305.199726][ C0] RBP: 000000000003a938 R08: ffff8880b863799b R09: 1ffff110170c6f33 [ 1305.207698][ C0] R10: dffffc0000000000 R11: ffffffff8c00f010 R12: ffff88801eb34000 [ 1305.215669][ C0] R13: 0000000000000001 R14: 0000000000000001 R15: ffffffff8f325fe0 [ 1305.223659][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1305.232599][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1305.239196][ C0] CR2: 000000110c2e0033 CR3: 000000007a5aa000 CR4: 00000000003526f0 [ 1305.247181][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1305.255158][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1305.263131][ C0] Call Trace: [ 1305.266416][ C0] [ 1305.269265][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1305.275616][ C0] ? print_other_cpu_stall+0x1481/0x15c0 [ 1305.281273][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1305.287123][ C0] ? timekeeping_advance+0x5e8/0x770 [ 1305.292444][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1305.298699][ C0] ? rcu_sched_clock_irq+0xa26/0x10e0 [ 1305.304087][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1305.309736][ C0] ? update_process_times+0x242/0x2f0 [ 1305.315155][ C0] ? tick_nohz_handler+0x37c/0x500 [ 1305.320277][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1305.325742][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 1305.331135][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1305.336866][ C0] ? read_tsc+0x9/0x20 [ 1305.340939][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 1305.347020][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 1305.352166][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 1305.358334][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1305.364145][ C0] [ 1305.367079][ C0] [ 1305.370015][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1305.376184][ C0] ? __pfx_acpi_idle_enter+0x10/0x10 [ 1305.381481][ C0] ? acpi_safe_halt+0x21/0x30 [ 1305.386162][ C0] acpi_idle_enter+0xe4/0x140 [ 1305.390850][ C0] cpuidle_enter_state+0x109/0x470 [ 1305.395970][ C0] ? __pfx_menu_select+0x10/0x10 [ 1305.400920][ C0] cpuidle_enter+0x5d/0xa0 [ 1305.405365][ C0] do_idle+0x372/0x5c0 [ 1305.409466][ C0] ? __pfx_do_idle+0x10/0x10 [ 1305.414071][ C0] ? poll_idle+0x60/0xb0 [ 1305.418333][ C0] ? rest_init+0x31/0x300 [ 1305.422674][ C0] cpu_startup_entry+0x42/0x60 [ 1305.427536][ C0] rest_init+0x2dc/0x300 [ 1305.431800][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1305.437365][ C0] start_kernel+0x484/0x510 [ 1305.441903][ C0] x86_64_start_reservations+0x2a/0x30 [ 1305.447381][ C0] x86_64_start_kernel+0x66/0x70 [ 1305.452337][ C0] common_startup_64+0x13e/0x147 [ 1305.457302][ C0]