last executing test programs: 14.864271029s ago: executing program 0 (id=602): socket$nl_generic(0x10, 0x3, 0x10) mq_open(&(0x7f0000000440)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xceq\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = socket(0x10, 0xa, 0x4) recvmsg(r0, &(0x7f0000000b80)={&(0x7f00000001c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000980)=[{0x0}, {&(0x7f0000000300)=""/178, 0xb2}, {0x0}, {0x0}, {&(0x7f0000000480)=""/29, 0x1d}, {&(0x7f0000000780)=""/182, 0xb6}, {&(0x7f0000000880)=""/35, 0x23}, {&(0x7f0000000bc0)=""/193, 0xc1}], 0x8, &(0x7f0000000b00)=""/66, 0x42}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a0104000000000000000001000003090001007379ecf3ffff00002c000000030a01010000000000000000010000000900010073077a30000000000900030073797a320000000008000000060a010400008750867f6a5c42e60deb0000000000000100000008050040000000003c000480001400028008000340000000000800044000000022140001800c0001006269747769736500040002800900010073797a3021000000140000001100010000008b97d25a5ea97fbbfe1395ccc217cac06d0700"/231], 0xd8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sysvipc/sem\x00', 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000a00)={'sit0\x00', 0x0, 0x1, 0x8000, 0x8000, 0x8, {{0xa, 0x4, 0x2, 0x5, 0x28, 0x64, 0x0, 0xf9, 0x29, 0x0, @empty, @multicast1, {[@noop, @ssrr={0x89, 0x13, 0x22, [@multicast2, @loopback, @remote, @loopback]}]}}}}}) syz_open_dev$sndpcmp(&(0x7f0000000240), 0x0, 0x100) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0842b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f04c7f0be31491eb8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c15fa12313ffbfa7c2730302b66a99f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca20508011132153c528f7bca92980a3223c5b9cdddedb0a14adddf9a6e70a26b5c0ee0879c349814bee9d96d8bd23db4e801d49201ae84090455682794098afa42b34196b1d849020eeeb1ef48d003d71524683d7cdfa841bca708414fb8ff49742420d1ab7fa678aa4806d5247616e8bc0b02887f8efe9310ccf9bec1c9b7f6671c9d59ac6b09b4436cafdd1887c8e884c930d21ace088ccc99a94d4b33da2fc1b1310bb607a9ad65844655de1ac9fd36d12e07a821fb950368a970c58fb4f3f403fdaf68902874"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x58}, 0x10) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x2a00000, 0x0) 12.673969433s ago: executing program 0 (id=608): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000940)=ANY=[@ANYBLOB="090a0e000000073500f40000004264070f7d77e5cdef636418ed1c80"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000003280)={0x2020}, 0x2020) syz_usb_control_io(r0, &(0x7f0000000780)={0x2c, &(0x7f0000000600)={0x20, 0xa, 0xf8, {0xf8, 0x23, "5bde409b744269cb1793d6e5006960dcb48fba4024017ac8e95f3b5de0c59d5a88c1416c7bb6257dd1b11cd16b05deb8c49ed4ec843c14dedacc490ac8a2b0f375d99dc82d132467ef267af3d3d0cf3dcb0aa186579ca83ed8720a7cf21f0051cc0e706c15ecaacd2b498aa93a44b72f868b7db21801a7d836310f6839223d154aaa1daaa0c85cf8e12d3549a224d714b26270751405af785d2cd4fe624bf904d26dc8258d2056d03dac83bff58a6cfd592aa46c11a60493c328ce934406fb83dd2dc65a42128d5c8aac5dd9471e19ce2086c88986aa9094a9a23a22f42b821495b48048b69340669db79bc7871a3d8b6d457ce441f1"}}, &(0x7f0000000380)={0x0, 0x3, 0x85, @string={0x85, 0x3, "5c4a60f683653c433f62d4f2142427d1c4c1cd5618376c67b8e343111713460793a9c5f51ff9f8669d3c97236b3f80e864d32475e1897d1697e21bb982117d469089c16646ca1a6e51fc972db00a5fe8685ac31714384d643aa36cfc515fba652274133e1a2203459183ff26f37a2e6da28952c3e947ccd03dee86b1204526adb6d759"}}, &(0x7f0000000700)={0x0, 0xf, 0x4b, {0x5, 0xf, 0x4b, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0xcc, 0x81, 0xc485}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x88, 0xb7, 0x8, 0x3, 0xf}, @ssp_cap={0x20, 0x10, 0xa, 0x9a, 0x5, 0x0, 0xf000, 0x4, [0x30, 0xff00, 0x0, 0xc03f, 0xff3f30]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x0, 0x80, 0x0, 0x6, 0x2}, @ptm_cap={0x3}]}}, &(0x7f0000000300)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x8, 0x80, 0xb, "7158b8f5", "1c5f26d1"}}, &(0x7f0000000580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x10, 0x7, 0x97, 0x9, 0x254}}}, &(0x7f0000000cc0)={0x84, &(0x7f00000007c0)={0x0, 0x0, 0xcd, "b58c4e6727ad4caa88384bf3140483d262f818bbb512b57e575d584718638a3cbd00e6c0c34aeb27f4540554494070b65ce851dbde565bd1fb54282892e65cac533492019d59e152a921a06d83c3b77d2f78d6298ac8ae3614c4a4ae52caceb0b151e8e90c6df07a693555159fe3032ad8317f5cf3d7d6f753c329b074c5717da960f2e3e017f01a87585b3be0a931ed609f062f3e1743f7a9f02855fc84cc817f65ca05aa0e498d66f5dad349262904e37b10724bbc74dcec14f625a3edfebd617bad6a1602462dfdb6a153d2"}, &(0x7f00000008c0)={0x0, 0xa, 0x1}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x0, 0x4}}, &(0x7f0000000a00)={0x40, 0x7, 0x2, 0xa}, &(0x7f0000000a40)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000a80)={0x40, 0xb, 0x2, "b669"}, &(0x7f0000000ac0)={0x40, 0xf, 0x2, 0x3140}, &(0x7f0000000b00)={0x40, 0x13, 0x6, @local}, &(0x7f0000000b40)={0x40, 0x17, 0x6, @random="0118f382da21"}, &(0x7f0000000b80)={0x40, 0x19, 0x2, "a85a"}, &(0x7f0000000bc0)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000c00)={0x40, 0x1c, 0x1, 0x9}, &(0x7f0000000c40)={0x40, 0x1e, 0x1, 0xaa}, &(0x7f0000000c80)={0x40, 0x21, 0x1, 0x3}}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x56, {"66ba2100b066eeb9e00a00000f32646467660f3821adcc6d233a477124c4a179d64a0067362e0f01c8f3450f23baf000833530463866baa00066b8050066efc482018e7900"}}], 0x56}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000380)={0x2, 0x102000, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000440)={0x0, 0x0, @pic={0x7, 0x10, 0x4, 0x81, 0x0, 0xb, 0x7, 0x9, 0x61, 0x1, 0x8, 0x1, 0x31, 0x0, 0x5, 0x4b}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x92, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x80, 0x2, 0x1, 0x4, 0xe0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "b8"}, {0x5, 0x24, 0x0, 0xfff8}, {0xd, 0x24, 0xf, 0x1, 0x7ff, 0x7fff, 0xe, 0x6}, {0x6, 0x24, 0x1a, 0x4, 0xe}, [@mdlm={0x15, 0x24, 0x12, 0x1}, @country_functional={0xe, 0x24, 0x7, 0x6, 0x5, [0x3e2, 0x9, 0x3, 0xc]}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xe9, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x20, 0xb, 0x0, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x9, 0xfd, 0x6}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x3, 0xc, 0x5, 0x0, 0xd8}, 0x2f, &(0x7f0000000540)={0x5, 0xf, 0x2f, 0x3, [@wireless={0xb, 0x10, 0x1, 0x4, 0x10, 0xc, 0x1, 0x6, 0x2}, @wireless={0xb, 0x10, 0x1, 0x8, 0x1, 0x4, 0x0, 0x7f, 0x2}, @ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x6, 0xf, 0x1b36, [0x3f00, 0xc007]}]}}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x5f, 0x2a, 0xb4, 0x20, 0xc72, 0xd, 0x279b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xdb, 0xa2, 0x92}}]}}]}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) 9.794164716s ago: executing program 3 (id=616): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000200)=ANY=[@ANYBLOB="010000ed0100008001000001000000"]) 8.436191075s ago: executing program 3 (id=619): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$snapshot(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0), 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a00)=ANY=[@ANYBLOB="7c000000130701042cbd7000", @ANYRES32=r3, @ANYBLOB="0800f98004003c804a00c880790881bcfa13f257b35322a5c10e711b58383eebcda0a5a0aa9039eec246329026e8067860ede08f54c1d1c135cbe861479ccce6b2967f924914f03e9db1dd62db901a74f4230000040008000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001e580)=@newtaction={0x14, 0x1e, 0x109}, 0x14}, 0x1, 0x2b1e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000040)={0x6, 0x9, 0x7, 0x5, 0x2, 0x7, 0x8d, 0x6}, &(0x7f0000000180)={0x2, 0x1, 0x7, 0xc, 0x8, 0x8003, 0x8, 0xf}, &(0x7f00000002c0)={0x0, 0x1, 0x2, 0xd, 0x8, 0x8, 0x1, 0x8}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x9]}, 0x8}) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7, 0x7ffc0002}]}) sync() r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) add_key$user(0x0, &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 7.893735749s ago: executing program 1 (id=620): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0xfffffffd, 0x2800040, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) syz_fuse_handle_req(r0, &(0x7f0000004300)="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", 0x2000, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x25c17c22, 0x40000, 0x2, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6838}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 7.86871963s ago: executing program 4 (id=621): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x1) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) syz_clone3(&(0x7f00000004c0)={0x2004000, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 7.791294478s ago: executing program 1 (id=622): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x1) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) 6.907633041s ago: executing program 4 (id=623): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0x40000000015, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000640)="bc", 0x1}], 0x2}}], 0x1, 0x4000000) 6.792490981s ago: executing program 3 (id=625): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe", 0x19) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f0000000040)) 6.778339956s ago: executing program 0 (id=626): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$snapshot(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0), 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a00)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0800f98004003c804a00c880790881bcfa13f257b35322a5c10e711b58383eebcda0a5a0aa9039eec246329026e8067860ede08f54c1d1c135cbe861479ccce6b2967f924914f03e9db1dd62db901a74f4230000040008000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001e580)=@newtaction={0x14, 0x1e, 0x109}, 0x14}, 0x1, 0x2b1e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000040)={0x6, 0x9, 0x7, 0x5, 0x2, 0x7, 0x8d, 0x6}, &(0x7f0000000180)={0x2, 0x1, 0x7, 0xc, 0x8, 0x8003, 0x8, 0xf}, &(0x7f00000002c0)={0x0, 0x1, 0x2, 0xd, 0x8, 0x8, 0x1, 0x8}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x9]}, 0x8}) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7, 0x7ffc0002}]}) sync() r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) add_key$user(0x0, &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 6.694531181s ago: executing program 4 (id=627): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) getsockname$packet(r0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, &(0x7f000001b000)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000480)="bdb4b5b2c18d17500dbedb1f3c56e5f41601828c4ec4945e789d4df0db14d6bded4775cfbe78e07be0dc09400788a824e4976c025ad0f87562b5b6f0906292ae2f706f186a5fb7592c17fa638b716e414e9eb6654e022f40eb1703bce7efcee5edd07d8c630367c95599ede8740ffb1afed5a731eeec0ac6ca221f38163e33f8ae6450", 0x83}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) sendto$inet6(r0, &(0x7f0000000680)="5384ce0863e5b2a7a2bf6cb2d970efcfbd10e7dd77d02a6e59d6084b4ad1ebd0f96cd0ecc4f829c01ebffa769beb4a35379817d3774fa38ce92b114a80c124c71a31b62b43ff0ed2347d3a7a882077ef0427b9a55a0877ecce0d4c1de7d72326cc4e157831d490bc6b31168a0ba9c6b0ee676873c15406d95f894260734ddfd73b27d656850e9b9e1e138fed11ef1c35479cf5461258aa1a26dbef82d25dd25d8c6db4f75416b6857971b32a78059ec7a94064c1cd6333f0dd5e678a1c80890475fd3228738c4cc907b6aa4960b225e03b3c96c7d5750585183c5e130bdea0f17994a6be", 0xe4, 0x4000, &(0x7f0000000180)={0xa, 0x4e21, 0xffffffc0, @mcast1, 0x101}, 0x1c) 5.645796452s ago: executing program 3 (id=628): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='pids.current\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x80000) (async) epoll_create1(0x80000) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) syz_usbip_server_init(0x4) (async) syz_usbip_server_init(0x4) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) (async) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) (async) syz_usbip_server_init(0x0) syz_usbip_server_init(0x3) socket$kcm(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_io_uring_setup(0x42e6, &(0x7f00000002c0)={0x0, 0x5eda, 0x10100, 0x2}, &(0x7f0000000040), &(0x7f0000000140)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_usbip_server_init(0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x60, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x61, 0x1, {0x1}}) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x60, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x61, 0x1, {0x1}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) 5.28127593s ago: executing program 2 (id=629): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x4a01, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000002d40), 0x1, 0x0) ioctl$TIOCCBRK(r5, 0x5428) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_delrule={0x24, 0x21, 0x105, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, [@FRA_GENERIC_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x1}]}, 0x24}}, 0x0) 4.883669217s ago: executing program 4 (id=630): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mincore(&(0x7f0000bfe000/0x400000)=nil, 0x400000, &(0x7f0000000200)=""/133) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)={'trans=rdma,', {'port', 0x3d, 0x4e20}}) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r7, &(0x7f0000000040)=[{0xf, 0x0, 0x0, 0xfd, @time, {}, {0xe}, @queue}], 0x1c) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) 4.795348713s ago: executing program 1 (id=631): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000004"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)={[&(0x7f0000000080)=' ']}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0xffff7fff, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f00000008c0)='-\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f905, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000040)=0xfffffffc}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000d000000080000000000000f0500"/44], 0x0, 0x31, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x28) 3.484795586s ago: executing program 2 (id=632): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000020c0)="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", 0x2000, &(0x7f0000006e40)={&(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x21, 0xfffffffd, 0x2800040, 0x0, 0x0, 0x1, 0xfffffffe, 0x0, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) syz_fuse_handle_req(r0, &(0x7f0000004300)="e05acff62a41134e0f28a6ba227995b05776c837ab3a066a329e33b775d4586b7a0c48f3471ede96c5e03e1f347acdb576b1b8c75ad4fe76f3ceb2331adb9676968ebcc8bc70b50acd984f9067e2499ec9e28061d978efb1ebbb90d82d973c7b4bdadf6dcf1cd1ba8a4b8882779ab3c5a956791fcf5097ee4b0da8d910938b1edf34fbb493d106ad0270110e14f0c94d02e722ba66bc7e3d90197f4fc676d18723513482dbaa39e68b3a4c0d23f9706f67f76202f16de2f3a40b48a2de184a15f89b2935a65017dbd8783a3d9153c275b72470d0fc15920a659c531d6ca85c36012deb6bf650f9d0a598707c1798a3636b7339a0a5b0a3a62073dbc94eaeecccc58722b8d76d0a447fe0ec7c122ee5d028f5dd17813e62da599f209c621c06c98e0440c008b8678dd65ec6ae2b0b659d6883ff1170ff904db86d0748e8dd1e870c6255ddfc90cbb5aba594c593f64f518d69ab7e02425299303d7d37d5ed28afde8fa2daa4627855dba7c4ab12209d5a836ea0c4592cba568dabd5453382eb5f7e6ce5bd0489b876d4d1dabe18f0440190f5898675bff139d7e8c953abb31383b932a67808cc2a2f67cb714b9a2c8e75f68c21fbe56ecb49f39136b7a0b7b6a53a93f33f9987fb7e7437a0852b9194cb75bb84f3b40f4617ae8ce9a8da6ca74d4e7c737bbc5126b0b8bd0c86f4fb861fea02fd7b8649fb1c0523b30f28a24bd7f58495f29cd2e092f5b6ff29f4de5ce56894fbd9fa78df0fb93efe2192e966e14bc9bd4671b0a2c6873d7750773a8aef7f1d35cad742e64664dcd277b2d604f564fdc519911c0749575c7136226cd68f2ec02a1563c727c1eac916cc426da130ac5c5fd6c0169161c2d7f79fb16b9d8025a6c74e14abccaaf30e5e39806a8b1866cc62e8e238c38036cbcb0abf003861103634409202ffac458605f599ae67db8f4cbd45f72ac9bfd126783135f552dd6639937ff0f77e15ebf8a49fe3d6a7da4fd6faf018b62956957c13ae52537c5ffbb4b2c28f3076468b1d11b018b6af74ff706f17c4babd4987bf9afe98a4b9aa357137d9383b8fb6ca370dd2fdc582aa701e85d926bf3087565231d6089911b2cf578786607ec5849d3d58dd423ff4558092c9a22a1153b787f37c9075555e1d06bc99b95b03bb0862da5be4f8d4718b1c6b892c1ad1138cded558e910553a70699e9d6ac935c227bd3326bfe40f389b16517801826d0ba7a1d74528fa273eca268a74e11423f0ea00e2745abbb7342c846566cf067b38a308babc8a45e607f39b66ddd2e772867cee3e14b3e7dd8844c3651330d15db8aa51d94c98ece900f4443bcbbf8849c3fafd4e5d4e1e5ea4306c081438e1694c59bdafa3b6bf80302b48f09a541dd30db6026ac247303db3facce171b64b48a74a1865db29a15db73f6989f7e5d6b6f39431511246b2ac2873dcdbea3fa5636af6813c83a7fe8b3b7936911a6a47f10823188d0ad18dbf3e4c45c296210e5bfc3abc3dc3836fd60a691005857db271290243709c57fc1ca3ad9a7938550b81b473c66e614fdf7ff35b8e19e60f7616ed19af91e4818c5b2c30f5ff903a3da9c7b7debc5d1b9e41f4a12f122a727a627cc5e6a0f8d81161088a93e4d0e592b7e977287833ec9446a6b44aba303e12ecc19c7fda316f6049db6bf1617f6fefeebcded95f75371fbd6db605ed7b77f8f91ea27468a68e068d1aad50a4118bd619aa85d1f5ee0eb9bbdfcad7335628e3ae1340681ce824204a9997f8aad87c8ce0534482cd748148689ec331002203b94af4ecd11d5b75d80838478c26cfee0fa076c5baaa82483b04898ead705bdb37247956ee25db667ea6668a4f3082332070489da02c3b5d25091e3a00f884265185a28757cdeedb3a1e4a0ada801d4a386fbab0c1de6f35fbb6c7d81fd15370909a387eabd3415f146129647a13f20ccfa69e436ce067ed1a9e0dfb877c85f0b8032e64f5379a9f5a92967533f9b45584ce1a04b962306d2d707e0e462d9d2ce94dbf4c52835c2bc005d1c21fd4e64b0f2578a072d8c442c49bb9450a8fcb49a4b2167912ff1f5946585983087deffee403a0c079ba90a0b644584137c58626afc604ab684650aac5ede8632f3e035da41c511bfb25a62d0a283e35fdd67dc0ef135d428297805b5fd0ad62294531f46171f546c61eb6475fd9fc7c8357e65737d39a741417f8a0a7e035f696c1a83d44837e360592db9ae7afd2ae7be9859f062d274b0862746c9ad804eb1c72aecf6ef9cfbbed33f68f38f25eb493d165f3012c04ec02d42421e2232aa4b30910f9d4fb91b9ba2e7b40ea4fdb60f6957e3afed8cab6d076b2f5ac59ea53bd1e9d944cb53deaa2b8ba097664fca77ab97666c6add05e7556b92d8ad11d19887e83a8ae9dc086bbb4d23cabb3615fdc05e35c61fc3e28315659509df1cbaf449ac909f36c69f5366f1bbe9b3bf9899533f06a6161c986607292a202bfcfeb2508aa18dd993d2d239b32e4f06ba1321d607c154965b9d1f52c940777e69430967d456cafabf236a2f8cea019cc87b350a5bc2aed7f1469ae6cadbcd579864d2194e3bc71e2596c690226b15c86aa0c2aede98cec57c4e752edb6fbe58046ca59546511805a71aa187ce4bcd5399c36eb3f76681a63e5a1d948a9cf98703aebda62c0759477f1be96841d60256bb2d7140fe4481d4d5180df9595fae750da2a9178c89fab47766ae30cd3d8ffcb94eb4b4245ef19ee3d95b89094f528c16ed7289703afd5805e923ce48bb5e451a93ceadbef1443e61b6b59fc13e79ed418dc73cf12b302ff40aa09994374eeabec532bc98b820c21d15f2cd10f755132b12c824a8875387c6682e991dfc01280ce1619c23593659de590b080c7f2eac12ec00704ab8b3bc2052ba9ba6f59a2312b9ebf62c6ea1ec5250435c25215f87350903140a4a12d8e3f8e233f0d63002dbbbd12a7ba9282768dc2b2b9aceb9e45e9da4a2d4a8da83e72bf0cf91bc12324b544a1d6145525dd9cf44199d7448d839bc67b1d33d7da10a9abc08f8f08a894edbd42c1baf8482feb06d68f25c4405a624998bd4c28cb9b845712ba307ca9b9ff56131617ceccd2927ecd57796eb103b6b15dfa12b3e8e9aa2ac8af20cde7877501a98d8b04dbd96d606661066dd80ef55d45fbd5c410d4a0d59ad53cfe3779350e71f109118bccb61121bb8eefced8feaa72c95ed737490c7318e7db86d94eda2ce5f9b04f2308dadbd8a2be6991309a56959c6be4312623a04483bd72a64c210bc6ea600d887aeb3781030a0c4a6ee06f38896bb95688ba5c735180ed50f1fce6c321aa0503f714a000b6e10f22d019e0c5bdbf982bc0a3b15ee59e9c573f77073ac64394f3610f68eca10092a7b7544bc1e643c30017133fec103af1111536ec6b37472157ef7a57186d4b64812ee20f51257d2cdaa19b5508fc40824aeb678c368149387f9083d645c9b616fdf08459aa792897293e7dabfab1144ea74d39a2f0d3632d16ce1b1973717eb83d217250646903207ccd9804e584c12bd98be5096c2a43f21161547f6b2fcf244f12a3c6863a90b45901379a1df5948dba63c34aedb7b877c675dec404acdc0348482502c3e9a886d0829a17c06457a2bb3b6c843285b1aecb4c917d9d586b5b47be2895dad99e620cc824f4d0c577f8b737c20c39c40b77db27e8e72d83c6d220011e7e304c97e281697afe31e077f490f0e632a3fb5125351051543125d7895e86007e0be5527f57f98db8235bfaa3c4d25514ae88d06289261b49013f25326461a5672c0fd975af977d9e9725d14c923decf5b60cb800a267644e0fb5e8dfc734c5b1ba810ff276f24f8fd0608bda3ab335252fbfce4e75c533bf44d2f6a2d14314b5bf24ab3d3dc0794a120379264d2bdfb4111e614b4f68d36f930b4802863bd47dc7b8520f8e95b9673a9bac79dd4e68b7dd9e095d87eb8004f19763459171142145ff6ba160709fa7732579c48bbd4ace904fed83603de20179c6d230b1b098b2800749c1836b222b52da56a2d47dcd9a87e4ea2a2fc3da46b05fb446d1b6e134d5979c43c1e79b00ce0909a020fa2e0377e19bbbeb5c4453a0f04a09242a477bcf0fdf824b58b196d7ee987ed68092c6696cf2dbf942310ed22d674512a4428e9e194127eb44828f9a812c762460486889d715dc6dc4377e557834f31cab1db1b276a5e3c14618c233ae523f1e3f3c0078fe150354855b3c31d0f333928efff70c7383cf65880420cf7ec307b708307fed0745032cb81891b85d67fb55303a30da8f4b3bedeabddc6bd38d92edeec80aff10f0d29f116cfe31f1b1a96962a713300635329c04977ab606e50b93cb1305f5a82c826febf41318f1ddb7e6fd0eaf37936f6950f841c8853bf1acbb96ba04dcc4fa5a23d8eb8e5b22fea5b5784453d51799442c665df83b45ed6fa99401ceec8e0f62b89fab9fadaa0d51e845fcf2ec20676b3d867304b7f893054490af7a0080bdaacfddd54fee4349e03dff156c9f08ceffa31e3701d333251f7cd4b07c52a9901d4fd32bb01261544c7842df78b420b99645e7c2695fcc6dc4e402ddc0ac039bdaf4129a4ae70b37b1c61ebd47e6cb7d6dfde13e7e972c74b706e8a3ad7fddd50cf581d2055ff5b127695d6f5c8fc67df49aaa56afb789a9fa384125f13d928feea35139cd9153b254c6b39f838c0f0367c5efa13c5fbdcbec5c9f88d7d2ff54aaf8d0c4db4cada8b74ea780d32aa0e66942e936061692182be3c5b21fcd99dfbfd22467d4d3ce3d78e88f1481bc2ed388f0dc3f262a079bdcf41d2f21f1de75202fac6b4f8f9f8a7ee0bdb646ce582f6fd358461fc4266f980f33138c41daa3c8a82088eccb8a2944b6dc432f8149414115f209282945e51e5d0a999d518a32fec37e64e8618879f7d65e088514efed5104ead3fab91c017447a645575a50dba5f28a3a6359a9d591ee2c7eadd08b86e733a6a8723880890d3158e527b4d9a676b02ef0faabff71865c487641c6c104c15178106d878c6cd588b2c6f834a4a2ebb9d129ab28eb7dc6a556f3d868e2765034bb146c7be493d19302b31881a11257ed202bd20d53f05d7b5c96954b55cfb933fcf0945a10b460bf7e276ddb6fa313225b7bee647e8e6d5c1ef68dae19d4cca98f00d3a860602b66b09a1392ad01739a5ddb7117dcb0053e9c31602727101225c627225674aa1e49f3c3abeffada9f5ac76b5f10a2de55951de24b1fb144f4c1eae80e27bc36e5da70e01ff37ca465190180644a27eb9a96a15d6fb4eace5e652176a02d4ef8228bd72df5142351a6f1b08981a5c66eeab943983277c1bb192b668ff25cecae19229da67e2d8e3655c409f597b68260c70c47c5843082d94a94e72fc42ed11eed5a0cc5c9eb57de53947d2823cedbd9e417682b7b19ed3be8d27b3a887795b062c88317a0dc04bd6a62cf05fb78b2955af0514a99e3fe0e0f382c9fc2ff820af6451e0915722162c53b060250890c381ebe2edbb63359643ebd780a32770e78c6af810f341f3e07781ee25c92275ab427de063326239514c6623c9a3a2ee2c80da4c77404607cd208e2e9a273cfff2cf9c6cac6ed4cd6641d8890ce82f229cec11b483db0e4fe70161829bebcdc65351e75eef29d4ec70495415927aa6be603dfb8c5c34f4d2a0afe0bd0700540b8ccd9e0421efb4d449225fe38cf4ea8145e7e1ecdcfda0c1b8a6439b3535a7c853065f665cd28c86fcf4b47ce321edc9ba1bed1a6e4160e62819cc8f9d0914ca7c8f54c6392d9b8d8a9e23e6877e240cf50208b5dc085cbf5932d730dde94314d269f8e4730e72c62ebf1100b423e7c02c0c7b3d579fe738a75bf3d29264bc27009673ebc5fd0d777e2b43d4b738addf5e1c1d084270f5ad6441d10e723331ef5d41d1da2597817968e3c33324fd876bb2c4829921fb5c835ed01e78d0fa88d1f4043693a5cbf592f350505d37efd84845feb77ed38a25df0e98678047f320080972ae011d5ecc9b9cb1aa519fc661c3c909ccf1002844a4f3a9ff21dcb3e861cec427cea26eb765e3d30c532f3c67aead616cca4ed0ef627e3edec6a98e0f0866af49b0019ef8c50104b4e21c17b17b36b0bd5d785c0a46dd5e84dc7327d46c73637602f159900ddc1e6bd3f9afddf45ca54cc7958a6fc0a7e9b93c7e91da8afba0a63238f3847860ebe9403ff3b80e067493d34c55e7562b8b0fb06a2f8c1ddc9cd0f785aa9814cd40aa66ded541de15e647303864b27b5cb7631666f4166b6daf929fbff41fd95bf16994a6f9bc8ce579da13442357cd500f10c392ec78b0c161c99742c03b4d745262d86500e2a981586627350cfe1bcf4710b0824070abca21e1a53a36bfbc12ea7fe8336f741784746abef46f52ad131eafd02ac24c1d1636fa30337251a5f169cdb8c57fa214f2a900af0ee866748661f1a67a6c2c6a6e49ce1939139e45a456c7dbbec8a09be48853cd9b1feeefc6729740dde9de04dd1e0f9c774d387a902174274729e6349a7effd237e63c40bdbccb72e44dab5ac1eab96eb75a6ea8f2f7dd362159131072dd8d733fe9c54d1ea4771e85e7cc0b0455dae0a5c8ece44aeff7e2d247e94639c9a74f48e690c02e89d0377fe3afce5d6abc706dd3e23d19809dfa948b010b6d66556ea81ca3690c3322478dfa1e9ef6de5e4d21b6e9867c611fc4e78abc94bd3c9f112739f8d2996834f54d1137f34ff5442c2432746c37031bc7e9201fdeb7d73a24163fe423fdf3e8e22b655ec159664e905675d8bb80d651d4dda22dfed198d02c2b8ff5b0760fd2aea35e519619393cb66b048b59d4e6cf398652a4726925c8a1936ee29cde1bd70fdeeec0aa1e9289711c57ab8ba170c427173fada71e9a1f0fc4cbe23c248f5340db3f9ba4f8c23da230ef4c1013ba0ffaaf5bfc58cc2eb5084f96bcdce7c1ce76c4206189bfbc9d8f1238aed641c39693363762f2cbb1b3433cb01fba42dfbc7b1aa6a46cb9bfcc98a8d8f46cde8a5dc9d74de7fc73aa22420acd949a26c2bd0c8c6f05fcac03a88e622c851454f583623b35f825038ab1aaa3091d05018c2179f473a889219e3414bbbf4eb62333df13ca9eef4dd987358c90d6bdc113aa2972cbff9b7d7e5a76fa182609401567889febe7f2443b338982c3be4328caa199f4b14652ff609b3012fc66cd7a02d8e837bf85f7d2ee7f5061b359104a90e5a74179f6fe7ea44acaf2e8531b05875e041a7f42f6551e89518dd06f04ceaa5140fee9535cc3de18ca42721661d395e23828b07d449e4e09614c8aa753d28215608a56dbb66a929a47fe1beddc6123afad8d4f64cc5602138a289ef1287548d914647d144c3010cb5e3a90753aafebb70703a4f0eb4edbb991f47ed529b219a9fd421782a8a9d73d18e9ac69768791f408ee65af8f78ca3986e878276993c8dc140949f7410c8aee7b57739ffd57e5096ef3c1edc9d242d8ed7d0b5c8f7d4ff37b4ef76a6d4ca8960793508313c751a194ce0dcd0b08e3c3b91f06cb9f158347af1689fa86e9229970ab49bd44bf99da76818f7deb102bffbc575cf53966e247ce3558f77937d822ab74a437c5575dbcbd907199d5b645ee6ee122dc77090960302f8fce044fcb5d19a803b92a95950c262ea117522e6cbe44f5c277d6d7e36890eb7702136dc78abfdc5105f138b9415ee6ed0b4e1f805b3bdb5d0e7aba7d0aaf7c6c100edae89b8496804a7cc9e61d002ba42abb6ada2fdb12f672a15f2f3ef7d23330a5d411195bd2e3caf54d7c29a4ac9e13db64d88c35587059465e59507acd1ed7393f3557b8991116fdbb675f7f4a30acfa0cce3e31b817834a3037a18479aa764a83820f7186460fb96e07adcd529cdf66d0f6dad80260f51d3a9a1ebe213d03b9b71c9c522b4b8bdfe40b06a9da4c722f9a73d43423b456b2464bbb546b0527f71cbe600478169bab6caab15b98d4383552cf0dbf3c4b5208d901873f79901d174410ccd887073c1c9c6091f01c1772123f8354efdd6646d1e5373ef0e7750406b2c9acc1315c9fe1e9b0dba050717ee4f1ed17fc73357150921e5092c8edeb79f25a5b5e142e6813f20871252ebf52752d643a2965058509271b370bf98ef0fe8983a4725d39685647416757b85f87cef3ed7265d67a479d7752dcb3fb78447e6dff107a51365cba79fdf6edba21db2d3b52bf70579a398c36847bb3ec5e8ced0ad82c68c22d422335f73ea5297a95c5263d2403e06b7fb1d30804efd4d535894e0e0fb4747bd77caf3e92fd23d0bc8c73e08374ca42b52fa8c02f1ff3d19d8eaa78ef2ba7b3b1bea75faabf2658cf0a49f59bdd1fc49618fb60260053033184ede8c6a10fbf5f295a8a96553d469b160b17d9dbef52a651afd41fa87a169e5b34c8f3f0299aab066bcfadb07055502432b285f42e369606c4217f10f947fab6bd24889ca0aafad8be5ecbf11462b3a1cfd0c93c80e0a5611d6248a0a4fcc3a2307a7de22d1e301aae233155bd10d11f6b37d89a34c5104049bfe242ceba72e5968ead5ec6ec6b7056c8a1c390f6c6640ec92afbd76fb1072784ad7349ca30b605d6e755f0a21703724394a7681709f7b73aa34f6f44dea15264ef10e86a1079d64f98f6f7bb50bd2e0caca18df8b09a51ca436834ddc235d60fa9500bfb09fbb1dba93c95e1406086f83f6950a0cb9a4cd8ba97333b0de1e658d42469ac93529c596712231f8e0410992d789d326a127bc8c0d901f4dc99b36948c782410052229769f5177b328a6ca68df9e4fc4638cf090d17a4704cf142271418c5a85c7cd292b6fe1ac9e1f2a1858d17e5318d4d75cad3c4e7f2b3d3da458e4581217a07b28ca94043cd0d31d1af5264b8170ef325855a5b5863f01541dd1428cac12793e9080919f6d4b6f9f1255032b44daf64d2ae7b1084384d0d9eb76b7aa18c70b8ce5a174f2a3f73b31f98a9dc329c3f5e1a4ff04c6b85ab3e2eb95f8e265915937b5bad0088c7ab15e2c9cc97707039045758b56f613f58d8100ab0a829c2672e99624494ae81983c23dced6381e718454e714c00d6df6d76f502bc2bc7dd8dd67279418cc4855e33d9250dfd9eff61c98fb06d578d92d1510c1589025dc2bba8208b8d4554d9718bc846666c984ecd7442c60c3437dc9adb4a8bb671cb828ae0a1be34a4db662ef440fce64a6194a296726e7fd6c2b0d2dd52c785d01b26c66b363c6be384471c0e5e60aacb8c1c47751f8c689892ea1ead15f157dc7b567243cc298583e5f37a6bd4ff9d947e2ae56a466f0c27408cdb8b2b7036598aaef45c995b4b1bcb7f110b5c5aa87fdd652e30998796982fcfa0911558395ec8f63e7fc898221d6a9b904951600f1caf077870db43f5e1c59907e4d5c50c9b51e365cf82f4a77c5bccbfaf90b1ce51aef03675e7c45e2bf46f98bfc0d140273dc2ad2e1c25c74ca2edd2efca89aa1432d1c5450125b8a0c19326b0a8c845e657bf69481918a75502de4fff5db8c706fb0e6d0d7263f3b213171f478b71a67257924a8f5ffbf29215783d21d379f50722972cd7c96c4577dfd958155d15214fe704e73effd98092f640b4e376804013028539422407156de850d0cf7797383d0c9c7e7a0c79718003d5748b5393eb3cd8c18f314cd94139f432f4bc82f908533cdaa7c80d0d6d26e1228f8d00a8882b9b07fc6a177d20231e7f42eb40eaa029a1576cd0cd32d7da652d01824077bcf175d7f9540522f38a815aa0e2267588d9ddc6ab5188e45decb68c93091a3607c0d8f158387e0e152bb4a8da4e66fc3c6fde1fb8f4d00f03885b7822a8587abd72c36d10c77e1c7222d24e2bf1992a17c07d586540a0ae2631687cb9197a655fb66690c3b0a0de8808945ba66ffa1e60e0d9623d067fc6f8a233ab53332478d538597fd798f0abfcc97182ff22249f95bce4a07d9f410ae919fd3e0d313a5b12c03f58de66ff5d211e25c791c108ff82ade5be2d59cdb15c6a4759dca915ddf3c07bda00b13018bdb95caea0bf170a15b6cf53a230ef717e1c90233735b9693379e7ef711a367ce42fd7c3ffe25496789342517332a68350a46a3a8da15bfbb63c45f8dc7c5d25db7ab473da177398443857e81bb58d9aa6d97e0bc685e1b40a0704c330e1c0850b9e799207be79508f927fcd5df193b929e0aad5a426990f7c19c50c50427c66a73347fc0937f091c98668f1ece95fa029dcce72977d51a836b6d7e5c93084968ffbca70619eee8700b1a9cc5056b5485ae3d5440b4711b8600fd10fd814cadde2ed11cc6b241464a002fb06ade3ceb7e89fb74462c9abdeb3d88eb9e57eb4f9abbabd23fea5f970417a7fa8a0e78f96b233ec75c6ff89c0068dac52bbafbdc1636f8156a1681acc405b52c65960ad32bac32189c074390c11385dec2b6bad34e95de5e848845adab92a7edf2e60f3c70fda609cb76662a4b98b187b93a739bbe139054b09f5488428b2c8b462e8f5cea5df40290f2dab5ed51cf9e719688ecec4ab1c72b8497efa1746d1bc9b3dff2dabfcb1092f1856f17c2a9a7c37656eb3ec485ffdb0f51149391d6131dd1d8554310c60598e49afad834f5e5255f21c432abb377f54cdf2ea82148d73475214e28346785d797bc4e657d9a2f1f4ce54da741f8caf8262335e284e2f8a04a823de564e553474c39ec1e763700bce1bf030eacaedd345fbe3c3af2120f3fa962ceb2b1427663d791b5936a80b336941c6079f468f92d5c10deab0dfefe9593b76b673a71ad499c5d0fff4a9db2a5f5a0caa0c2c5620abf503deb905d8cb7b6c66865ee69bf31982ef6d9ae8834d361dce14d535a2025db065f5429f3945d5615886163892e1e41fd34c44949cd97592f1a378027de0e81637c11594609c1808da0cdb64de43a871b2b2640f2642d6c1aae34d83b0b0eb73aedf94ce7c1daeddf8cf684672edaf1ce0c7757f163dae3a4350cef5803a60f1e1f3d5eb277a17d38cc32ca8b6fdf536720ce186e7be6507d720810ce8801be2cc5488c7a6f0e398878ebb2ee530d62b61bf67fd4a7fdc811ecb119e4a6e7c6555685850656cf52dbc2a1da93d8550a7941a8a7716fa348f2cbcd6f58489051bf01c0ad0745b8a1e9a10fb748a9ae9f7897dfa81efc7fe240959a3857385f8be3a8102efb0791e1e01e539b370b8ea57d3b7b747bfce3a206612410c0a9aa9130320d80a912434c5a47048c1ab6901e7806c72fef1f4f59322bbf5a79f444a0eec2397a76ae63a22c5bc76a98c4e65212258f963709c07c54dc36ac15d16d7f34c6becd2de54a3ca98babdbe1068275e18585abd3a1fb4e889ea087d918ce2e791098a3e337926a408e9301f2e8f681c50b700cfc240d2a692516e491b7f4774309953b34372fc5425832d4206079872e4387f2343de66525c63c71b1c9625e7649adcc92f279d51d55fc771f7c8b81c02e8a7a6b2bb6f0170d6e5552882434382163f07ea5e4c5971bff35f530e04ca0247f5bdd27929eee90e2078141cfd2d45a1cc2a1bf47012025fa808b9e849978011e482fb7e851e5efcb02796b6a4ce2b72e8e83bba54670b912668723803b", 0x2000, &(0x7f00000003c0)={&(0x7f00000002c0)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x25c17c22, 0x40000, 0x2, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6838}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f0000003340)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) 3.11032517s ago: executing program 4 (id=633): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x13, 0x800) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$xdp(0x2c, 0x3, 0x0) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x1, 0x2, 0x19e}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=@newtfilter={0x728, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x9, 0x6}, {}, {0xfff3, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x6fc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x5}, @TCA_U32_HASH={0x8, 0x2, 0x240000}, @TCA_U32_SEL={0x6d4, 0x5, {0xe, 0x8c, 0x7f, 0x4, 0x7, 0x3d6d, 0x300, 0x9, [{0x4, 0x2, 0x8039, 0x5}, {0x0, 0x9, 0x8, 0x200}, {0x8, 0xb4a, 0x200, 0x1}, {0x3, 0x4, 0xe, 0x2}, {0x4, 0x4, 0x0, 0xae}, {0x7, 0xf2f, 0xf}, {0x4, 0x6, 0x800, 0x985a}, {0xc, 0x3}, {0x3, 0xf, 0x1, 0x95e}, {0x5, 0xfffffffd, 0xf4, 0x8}, {0x9, 0x2, 0x7, 0x3ff}, {0x10, 0x0, 0x4}, {0x9, 0x4, 0x40a, 0xffff}, {0x3, 0x9, 0x7, 0x1}, {0x80000001, 0x3, 0x6, 0x8}, {0x1, 0x9c7d, 0x2, 0x400}, {0x5, 0x9, 0x6, 0xff}, {0x9, 0x80000000, 0x2, 0x1639}, {0x2, 0xc2d0, 0x1, 0x5}, {0x7, 0x10000, 0x401, 0x81}, {0xfffffc00, 0x0, 0x1, 0x40}, {0x5, 0x5, 0x7, 0x7}, {0x8, 0x0, 0x0, 0xa}, {0x7, 0x8, 0x8}, {0x81, 0x2, 0x1}, {0x6, 0x8, 0x39, 0x3}, {0x5da, 0xfff, 0x5, 0x5}, {0x1000, 0x1, 0x400, 0x1}, {0xc0, 0xfffff801, 0x5, 0x6}, {0xb, 0x200000, 0x9, 0xfffffffd}, {0x1400, 0x2f31, 0x9, 0x2}, {0x0, 0x7fff, 0x3, 0xfffeffff}, {0x5, 0xf51, 0x80, 0x2}, {0x0, 0x1000, 0x3, 0x8}, {0x7, 0x6, 0x6, 0xfffffff4}, {0x55d, 0xffffffff, 0x5, 0x9}, {0xfffffffe, 0x1, 0xfffffc00, 0x3}, {0x62, 0x2, 0x4, 0x5}, {0x8000, 0x4, 0x6, 0x1}, {0x2, 0x1, 0x28, 0x74}, {0x1, 0x5, 0x5, 0x73f}, {0xfff00000, 0x7, 0x5e2, 0x3}, {0x4, 0x4, 0xbb, 0x5}, {0x8a7, 0x9f05, 0x1}, {0x9, 0x2, 0x8}, {0x3, 0x6, 0x4, 0x2}, {0x747, 0x3, 0x8, 0x9}, {0x6, 0x1ff, 0x7, 0x9}, {0x3, 0x9, 0x3, 0x8}, {0x1, 0x7, 0x8, 0xd}, {0xe0000000, 0x2, 0x6, 0xffffffff}, {0x2, 0x81, 0x9, 0x10}, {0x4, 0x1, 0x8, 0x80}, {0x2, 0x7, 0x7, 0x9}, {0x573b, 0x0, 0xb, 0xd}, {0x5, 0x1595, 0xf99, 0xbc}, {0x1, 0x9, 0x3, 0x5}, {0xfe3d, 0x7, 0x6, 0x8000}, {0xe, 0x800, 0x4, 0x8}, {0x7, 0x7, 0x9, 0x4}, {0x6, 0x5, 0x9, 0x7fffffff}, {0x2, 0x5, 0x7, 0x9}, {0x400, 0x7, 0x8, 0x800}, {0x4, 0x8, 0x5, 0x7}, {0xb, 0x4778, 0x7, 0x6}, {0x8, 0x0, 0x7fff, 0x9}, {0x6, 0x8000, 0x1ff, 0x10001}, {0x0, 0x0, 0x3, 0xbe68}, {0x3, 0x60b, 0x95, 0x3}, {0xbae, 0xca91, 0xf, 0x93}, {0x0, 0x8, 0x7, 0x513}, {0x4c5, 0x1, 0x1ff, 0x7ca1}, {0x4, 0x80000000, 0x2, 0x2}, {0x1ff, 0x1, 0x3, 0x401}, {0x1, 0xfb91, 0x1ff, 0xe}, {0x101, 0xef, 0xd}, {0x1, 0x6, 0x8, 0x287}, {0x7, 0x9, 0x40000, 0x1}, {0x7, 0x7, 0x8, 0x9}, {0xf, 0x2, 0x10, 0xc}, {0x7, 0x2, 0x1, 0xf}, {0x4, 0x1, 0x80000001, 0x80000001}, {0x6, 0x8, 0x2, 0x8}, {0x4, 0x4, 0x8001, 0x5}, {0xfff, 0x4dd2, 0x1, 0x5b}, {0x1200, 0xc0, 0x1, 0x1}, {0x0, 0x8, 0x3, 0xfffffffa}, {0x4, 0x81, 0x1, 0x80}, {0x1, 0xfffffe00, 0x8}, {0x3, 0x4, 0x7, 0x4}, {0x12bc2df3, 0x6, 0x3ff, 0x7}, {0x3, 0x2, 0x9}, {0x9, 0x800, 0x9, 0x8001}, {0xf, 0x3, 0x1933, 0x3}, {0x1, 0x5, 0x0, 0x7}, {0xfffff38a, 0xff, 0x5c21, 0x6}, {0x6, 0x0, 0x1, 0x7fff}, {0xffff, 0x800, 0x3, 0x80}, {0x0, 0x4, 0x2, 0xc}, {0x7, 0x4, 0x7}, {0xffff, 0x9, 0xfffffffd, 0x2}, {0x8, 0x4, 0xb26e, 0x69b8d880}, {0xca38, 0x800, 0x7, 0x9}, {0xd6f2, 0x4, 0x1, 0x7}, {0x2, 0x2, 0x80000000, 0x4}, {0x3000000, 0x3, 0x8, 0x9}, {0xa, 0x5, 0x5, 0x8}, {0xa, 0xfffffff7, 0x91, 0xfffffeff}]}}, @TCA_U32_INDEV={0x14, 0x8, 'bond_slave_1\x00'}]}}]}, 0x728}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) r9 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000000000626a0136377b6e7b4fdd9dc8d3d6a2417688ad90c12603b1f37ae58fcc529606db29d742a2ad7700c5206c1c1da577fbe88aa0a919f8933698db87ae469bd62dd574eff7be14cc9ef9342b8935fd767fa19a6589aaf8daf1d2a760108db150c617a33ff26aa44834f64ec2bfa7995eb8885468129fd1f367a7f000000f0ab449936ac7fef00072fbccca44b03c26a7a783bf401e06a3c5b67ff9c2b5b038d2e98e0efb43df54a915ded7b897de131567ee4f88c09ea00dca4dc220d48fb25e0ed80c2c697e63cdbfb15840a0000008ab6aeffea7979ac6c5091a828557280a135cf4596ff54a333ab3ed67a949055af147da54488f801d4aa3c364bedc73e73a8791ab4bc927bba99d99b9020c94d38fd42b6c1ff5021c12a4dc5434729178cc76fc41620b6692035"], 0x8) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r10, 0xc0145b0e, &(0x7f0000000040)) 2.891647792s ago: executing program 0 (id=634): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x60, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x1) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) syz_clone3(&(0x7f00000004c0)={0x2004000, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r4, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.816209908s ago: executing program 1 (id=635): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0xb9c1, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.779099221s ago: executing program 3 (id=636): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$snapshot(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0), 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a00)=ANY=[@ANYBLOB="7c0000001307", @ANYRES32=r3, @ANYBLOB="0800f98004003c804a00c880790881bcfa13f257b35322a5c10e711b58383eebcda0a5a0aa9039eec246329026e8067860ede08f54c1d1c135cbe861479ccce6b2967f924914f03e9db1dd62db901a74f4230000040008000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001e580)=@newtaction={0x14, 0x1e, 0x109}, 0x14}, 0x1, 0x2b1e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000040)={0x6, 0x9, 0x7, 0x5, 0x2, 0x7, 0x8d, 0x6}, &(0x7f0000000180)={0x2, 0x1, 0x7, 0xc, 0x8, 0x8003, 0x8, 0xf}, &(0x7f00000002c0)={0x0, 0x1, 0x2, 0xd, 0x8, 0x8, 0x1, 0x8}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x9]}, 0x8}) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7, 0x7ffc0002}]}) sync() r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) add_key$user(0x0, &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 2.667486644s ago: executing program 2 (id=637): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0x40000000015, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000000) 2.044709109s ago: executing program 2 (id=638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0803000000e8c94ef56491ee54be0e1c2074ed27c1c6fe", 0x19) getsockopt$inet_opts(r3, 0x0, 0x4, 0x0, &(0x7f0000000040)) 1.703336006s ago: executing program 1 (id=639): r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x202, 0x11) sendfile(r0, r0, 0x0, 0x6) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r0, 0x5760, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) syz_open_dev$video(&(0x7f00000000c0), 0x4, 0x20100) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)=ANY=[], 0x1000f) r1 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r1, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) 1.117132108s ago: executing program 3 (id=640): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b30, &(0x7f0000000400)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newtfilter={0x64, 0x28, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r8, {0xf}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x0, 0x3, 0x761}]}, {0x4}, {0xc}, {0x4}}}]}]}}]}, 0x64}}, 0x0) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r2, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}]}, 0x24}}, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r11, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 968.119506ms ago: executing program 0 (id=641): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) getsockname$packet(r0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) read$FUSE(0xffffffffffffffff, &(0x7f000001b000)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000480)="bdb4b5b2c18d17500dbedb1f3c56e5f41601828c4ec4945e789d4df0db14d6bded4775cfbe78e07be0dc09400788a824e4976c025ad0f87562b5b6f0906292ae2f706f186a5fb7592c17fa638b716e414e9eb6654e022f40eb1703bce7efcee5edd07d8c630367c95599ede8740ffb1afed5a731eeec0ac6ca221f38163e33f8ae6450", 0x83}], 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) sendto$inet6(r0, &(0x7f0000000680)="5384ce0863e5b2a7a2bf6cb2d970efcfbd10e7dd77d02a6e59d6084b4ad1ebd0f96cd0ecc4f829c01ebffa769beb4a35379817d3774fa38ce92b114a80c124c71a31b62b43ff0ed2347d3a7a882077ef0427b9a55a0877ecce0d4c1de7d72326cc4e157831d490bc6b31168a0ba9c6b0ee676873c15406d95f894260734ddfd73b27d656850e9b9e1e138fed11ef1c35479cf5461258aa1a26dbef82d25dd25d8c6db4f75416b6857971b32a78059ec7a94064c1cd6333f0dd5e678a1c80890475fd3228738c4cc907b6aa4960b225e03b3c96c7d5750585183c5e130bdea0f17994a6be", 0xe4, 0x4000, &(0x7f0000000180)={0xa, 0x4e21, 0xffffffc0, @mcast1, 0x101}, 0x1c) 960.827116ms ago: executing program 2 (id=642): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = accept4$alg(r1, 0x0, 0x0, 0x80000) sendmmsg$alg(r2, &(0x7f0000002980)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="cb8e363f2486d7bf4a8bc2f5e05a86875d8788e66617e2cfe55a2fcdc8c9b3cda2bcd2cb5f68b5c1fc763d40600b012cb332881ddce472b2895b431668eec36572a4c1ae89a3cfbaef904d1a0177ca03fc75772892690cb392e8d960eba7aaf2f5b9706e0f7e09acc09fcc9f76eaaf74c4f993355eb90deaa7b786c38567692e8f46d70be362a8ed63d5cbd1ba100fb13d288986ff7759e088e65de1dae77ef35ffdd43961d8126939530d8b091b19171ab38d636711c367239afe8d", 0xbc}, {&(0x7f0000000240)="954c3a6807ef8c18bd057c378794103572333b3a", 0xfffffdd4}], 0x2, 0x0, 0x0, 0x4004}], 0x1, 0x200048d1) r3 = syz_open_dev$media(&(0x7f0000000000), 0xc, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66667a4, 0x0, &(0x7f0000000fc0)}) 219.819444ms ago: executing program 1 (id=643): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x6, 0x0, 0x7fff0006}]}) mkdir(0x0, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x200, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594", 0xf}], 0x1}, 0x40048820) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0x1e3d50de03aa3d1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) mount(&(0x7f00000000c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x208000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="79ff51b6d019af6c0b96792e0766c0b1972baabac8018748d2d312bbd9ebfc8eea76b1b0e8e38de1", @ANYBLOB='\x00'/25], 0x50) r4 = mq_open(&(0x7f00000000c0)='${ \x00', 0x840, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x5, 0x4}]}) socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.564855ms ago: executing program 2 (id=644): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$snapshot(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)=0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0), 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000a00)=ANY=[@ANYBLOB="7c000000130701042cbd7000fbdbdf25020000050800fd00", @ANYRES32=r3, @ANYBLOB="0800f98004003c804a00c880790881bcfa13f257b35322a5c10e711b58383eebcda0a5a0aa9039eec246329026e8067860ede08f54c1d1c135cbe861479ccce6b2967f924914f03e9db1dd62db901a74f4230000040008000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0xc000}, 0x20000045) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000005580)=""/102392, 0x18ff8) sendmsg$nl_route_sched(r2, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f000001e580)=@newtaction={0x14, 0x1e, 0x109}, 0x14}, 0x1, 0x2b1e}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) pselect6(0x40, &(0x7f0000000040)={0x6, 0x9, 0x7, 0x5, 0x2, 0x7, 0x8d, 0x6}, &(0x7f0000000180)={0x2, 0x1, 0x7, 0xc, 0x8, 0x8003, 0x8, 0xf}, &(0x7f00000002c0)={0x0, 0x1, 0x2, 0xd, 0x8, 0x8, 0x1, 0x8}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x9]}, 0x8}) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7, 0x7ffc0002}]}) sync() r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) add_key$user(0x0, &(0x7f0000000480)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) ioctl$DRM_IOCTL_WAIT_VBLANK(r4, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 729.015µs ago: executing program 0 (id=645): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0000000004"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mknodat(0xffffffffffffff9c, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000019080)='./file0\x00', 0x0, 0x23010, 0x0) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)={[&(0x7f0000000080)=' ']}, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000040)={0xffff7fff, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x10) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f00000008c0)='-\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000000)={0x18}, 0x18) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205648, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f905, 0xffffbfff, '\x00', @p_u32=&(0x7f0000000040)=0xfffffffc}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c0000000d000000080000000000000f0500"/44], 0x0, 0x31, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x28) 0s ago: executing program 4 (id=646): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4048804}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0xee00) keyctl$KEYCTL_RESTRICT_KEYRING(0xb, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x101}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='tlb_flush\x00', r3}, 0x10) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f0000000000)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j$v\xefw\x96\\\\\xa2\xfc\xe3\xb8\xc7\x0f\xaa\x01\x00\x00\x00;\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) (fail_nth: 6) kernel console output (not intermixed with test programs): T891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.719925][ T891] usb 1-1: config 0 descriptor?? [ 151.053287][ T6788] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6tnl0, syncid = 3, id = 0 [ 151.304680][ T891] ft260 0003:0403:6030.0004: unbalanced collection at end of report description [ 151.339784][ T891] ft260 0003:0403:6030.0004: failed to parse HID [ 151.363649][ T891] ft260 0003:0403:6030.0004: probe with driver ft260 failed with error -22 [ 152.443976][ T5887] usb 1-1: USB disconnect, device number 7 [ 152.525872][ T891] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 152.677752][ T891] usb 5-1: device descriptor read/64, error -71 [ 152.935179][ T891] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 153.083721][ T891] usb 5-1: device descriptor read/64, error -71 [ 153.201037][ T891] usb usb5-port1: attempt power cycle [ 153.588112][ T6831] syzkaller0: entered promiscuous mode [ 153.593628][ T6831] syzkaller0: entered allmulticast mode [ 153.599388][ T891] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 153.625898][ T891] usb 5-1: device descriptor read/8, error -71 [ 153.884455][ T891] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 153.970400][ T891] usb 5-1: device descriptor read/8, error -71 [ 154.086444][ T891] usb usb5-port1: unable to enumerate USB device [ 156.819206][ T6863] overlayfs: missing 'lowerdir' [ 156.900900][ T6864] syz.2.231: attempt to access beyond end of device [ 156.900900][ T6864] loop2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 156.914210][ T6864] hfsplus: unable to find HFS+ superblock [ 156.939679][ T6864] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 156.950203][ T6864] cramfs: wrong magic [ 158.242527][ T6873] FAULT_INJECTION: forcing a failure. [ 158.242527][ T6873] name failslab, interval 1, probability 0, space 0, times 0 [ 158.281277][ T6873] CPU: 0 UID: 0 PID: 6873 Comm: syz.3.233 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 158.281303][ T6873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 158.281313][ T6873] Call Trace: [ 158.281320][ T6873] [ 158.281328][ T6873] dump_stack_lvl+0x189/0x250 [ 158.281355][ T6873] ? __pfx____ratelimit+0x10/0x10 [ 158.281378][ T6873] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.281400][ T6873] ? __pfx__printk+0x10/0x10 [ 158.281422][ T6873] ? __pfx___might_resched+0x10/0x10 [ 158.281443][ T6873] ? fs_reclaim_acquire+0x7d/0x100 [ 158.281470][ T6873] should_fail_ex+0x414/0x560 [ 158.281494][ T6873] should_failslab+0xa8/0x100 [ 158.281516][ T6873] __kmalloc_cache_noprof+0x70/0x3d0 [ 158.281534][ T6873] ? ip_set_create+0x348/0x1940 [ 158.281561][ T6873] ip_set_create+0x348/0x1940 [ 158.281593][ T6873] ? rcu_is_watching+0x15/0xb0 [ 158.281618][ T6873] ? __pfx_ip_set_create+0x10/0x10 [ 158.281637][ T6873] ? preempt_schedule_irq+0xde/0x150 [ 158.281682][ T6873] ? __pfx_ip_set_create+0x10/0x10 [ 158.281703][ T6873] ? nfnetlink_rcv_msg+0xb1f/0x1130 [ 158.281733][ T6873] nfnetlink_rcv_msg+0xb4a/0x1130 [ 158.281756][ T6873] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 158.281797][ T6873] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 158.281816][ T6873] ? kasan_save_free_info+0x46/0x50 [ 158.281896][ T6873] netlink_rcv_skb+0x208/0x470 [ 158.281916][ T6873] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 158.281939][ T6873] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 158.281965][ T6873] ? bpf_lsm_capable+0x9/0x20 [ 158.281987][ T6873] ? security_capable+0x7e/0x2e0 [ 158.282017][ T6873] nfnetlink_rcv+0x26a/0x2520 [ 158.282042][ T6873] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 158.282068][ T6873] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 158.282089][ T6873] ? __dev_queue_xmit+0x27e/0x3a70 [ 158.282109][ T6873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.282136][ T6873] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 158.282158][ T6873] ? __pfx___dev_queue_xmit+0x10/0x10 [ 158.282193][ T6873] ? ref_tracker_free+0x63a/0x7d0 [ 158.282211][ T6873] ? __copy_skb_header+0xa7/0x550 [ 158.282232][ T6873] ? __pfx_ref_tracker_free+0x10/0x10 [ 158.282251][ T6873] ? __skb_clone+0x63/0x7a0 [ 158.282275][ T6873] ? __skb_clone+0x483/0x7a0 [ 158.282301][ T6873] ? skb_clone+0x246/0x3a0 [ 158.282324][ T6873] ? __netlink_deliver_tap+0x807/0x850 [ 158.282341][ T6873] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.282365][ T6873] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.282382][ T6873] ? netlink_deliver_tap+0x2e/0x1b0 [ 158.282405][ T6873] netlink_unicast+0x75b/0x8d0 [ 158.282432][ T6873] netlink_sendmsg+0x805/0xb30 [ 158.282460][ T6873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.282487][ T6873] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 158.282505][ T6873] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.282524][ T6873] __sock_sendmsg+0x21c/0x270 [ 158.282550][ T6873] ____sys_sendmsg+0x505/0x830 [ 158.282575][ T6873] ? __pfx_____sys_sendmsg+0x10/0x10 [ 158.282604][ T6873] ? import_iovec+0x74/0xa0 [ 158.282623][ T6873] ___sys_sendmsg+0x21f/0x2a0 [ 158.282645][ T6873] ? __pfx____sys_sendmsg+0x10/0x10 [ 158.282702][ T6873] ? __fget_files+0x2a/0x420 [ 158.282721][ T6873] ? __fget_files+0x3a0/0x420 [ 158.282752][ T6873] __x64_sys_sendmsg+0x19b/0x260 [ 158.282774][ T6873] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 158.282803][ T6873] ? __pfx_ksys_write+0x10/0x10 [ 158.282818][ T6873] ? rcu_is_watching+0x15/0xb0 [ 158.282851][ T6873] ? do_syscall_64+0xbe/0x3b0 [ 158.282877][ T6873] do_syscall_64+0xfa/0x3b0 [ 158.282897][ T6873] ? lockdep_hardirqs_on+0x9c/0x150 [ 158.282918][ T6873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.282933][ T6873] ? clear_bhb_loop+0x60/0xb0 [ 158.282953][ T6873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.282969][ T6873] RIP: 0033:0x7f71dd98e929 [ 158.282985][ T6873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.282999][ T6873] RSP: 002b:00007f71db7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.283016][ T6873] RAX: ffffffffffffffda RBX: 00007f71ddbb5fa0 RCX: 00007f71dd98e929 [ 158.283028][ T6873] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 158.283038][ T6873] RBP: 00007f71db7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 158.283048][ T6873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.283058][ T6873] R13: 0000000000000000 R14: 00007f71ddbb5fa0 R15: 00007ffcc8ff8848 [ 158.283086][ T6873] [ 159.592240][ T6886] syz.3.237: attempt to access beyond end of device [ 159.592240][ T6886] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 159.607411][ T6886] hfsplus: unable to find HFS+ superblock [ 159.617519][ T6886] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 159.625660][ T6886] cramfs: wrong magic [ 159.707536][ T6888] hpfs: Bad magic ... probably not HPFS [ 159.822080][ T6892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 160.211167][ T6912] netlink: 16 bytes leftover after parsing attributes in process `syz.0.241'. [ 161.679536][ T6927] netlink: 12 bytes leftover after parsing attributes in process `syz.2.245'. [ 162.423714][ T6926] Bluetooth: MGMT ver 1.23 [ 162.488522][ T6935] 9pnet_fd: Insufficient options for proto=fd [ 163.103209][ T30] audit: type=1326 audit(1750660548.885:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6928 comm="syz.1.247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3576d8e929 code=0x0 [ 164.756023][ T6965] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 165.100602][ T5948] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 165.325791][ T5948] usb 3-1: Using ep0 maxpacket: 8 [ 165.397781][ T5948] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.419535][ T5948] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 165.457359][ T5948] usb 3-1: config 1 has no interface number 1 [ 165.922291][ T5948] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 165.947884][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.985195][ T891] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 165.987875][ T5948] usb 3-1: Product: syz [ 166.012683][ T5948] usb 3-1: Manufacturer: syz [ 166.036173][ T5948] usb 3-1: SerialNumber: syz [ 166.199232][ T891] usb 5-1: config 0 has no interfaces? [ 166.206972][ T891] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 166.243547][ T891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.273516][ T6990] netlink: 12 bytes leftover after parsing attributes in process `syz.1.260'. [ 166.302868][ T891] usb 5-1: Product: syz [ 166.388578][ T891] usb 5-1: Manufacturer: syz [ 166.389575][ T5948] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 166.393203][ T891] usb 5-1: SerialNumber: syz [ 166.405843][ T5948] usb 3-1: 2:1 : sample bitwidth 54 in over sample bytes 4 [ 166.413750][ T5948] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 166.566726][ T891] usb 5-1: config 0 descriptor?? [ 166.695909][ T3441] Bluetooth: Error in BCSP hdr checksum [ 166.710976][ T5948] usb 3-1: USB disconnect, device number 5 [ 166.793784][ T7003] syz.1.261: attempt to access beyond end of device [ 166.793784][ T7003] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 166.807248][ T7003] hfsplus: unable to find HFS+ superblock [ 166.835730][ T7003] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 166.849191][ T7003] cramfs: wrong magic [ 167.396193][ T6068] udevd[6068]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.791045][ T3461] Bluetooth: Error in BCSP hdr checksum [ 167.920188][ T6974] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.930447][ T3461] Bluetooth: Error in BCSP hdr checksum [ 168.005619][ T891] usb 5-1: USB disconnect, device number 8 [ 168.168205][ T30] audit: type=1326 audit(1750660554.605:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7014 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393e78e929 code=0x7ffc0000 [ 168.305438][ T30] audit: type=1326 audit(1750660554.605:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7014 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f393e78e929 code=0x7ffc0000 [ 168.406781][ T5827] Bluetooth: hci5: command 0x1003 tx timeout [ 168.414181][ T5825] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 168.596787][ T30] audit: type=1326 audit(1750660555.045:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7014 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393e78e929 code=0x7ffc0000 [ 168.624422][ T30] audit: type=1326 audit(1750660555.065:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7014 comm="syz.2.262" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393e78e929 code=0x7ffc0000 [ 169.360153][ T7025] FAULT_INJECTION: forcing a failure. [ 169.360153][ T7025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.415715][ T7025] CPU: 1 UID: 0 PID: 7025 Comm: syz.2.267 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 169.415742][ T7025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.415752][ T7025] Call Trace: [ 169.415759][ T7025] [ 169.415765][ T7025] dump_stack_lvl+0x189/0x250 [ 169.415792][ T7025] ? __pfx____ratelimit+0x10/0x10 [ 169.415815][ T7025] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.415836][ T7025] ? __pfx__printk+0x10/0x10 [ 169.415866][ T7025] should_fail_ex+0x414/0x560 [ 169.415890][ T7025] _copy_to_user+0x31/0xb0 [ 169.415906][ T7025] simple_read_from_buffer+0xe1/0x170 [ 169.415929][ T7025] proc_fail_nth_read+0x1df/0x250 [ 169.415960][ T7025] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.415980][ T7025] ? rw_verify_area+0x258/0x650 [ 169.415994][ T7025] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 169.416016][ T7025] vfs_read+0x200/0x980 [ 169.416038][ T7025] ? __pfx___mutex_lock+0x10/0x10 [ 169.416061][ T7025] ? __pfx_vfs_read+0x10/0x10 [ 169.416079][ T7025] ? __fget_files+0x2a/0x420 [ 169.416104][ T7025] ? __fget_files+0x3a0/0x420 [ 169.416121][ T7025] ? __fget_files+0x2a/0x420 [ 169.416147][ T7025] ksys_read+0x145/0x250 [ 169.416166][ T7025] ? __pfx_ksys_read+0x10/0x10 [ 169.416179][ T7025] ? rcu_is_watching+0x15/0xb0 [ 169.416201][ T7025] ? do_syscall_64+0xbe/0x3b0 [ 169.416222][ T7025] do_syscall_64+0xfa/0x3b0 [ 169.416238][ T7025] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.416254][ T7025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.416267][ T7025] ? clear_bhb_loop+0x60/0xb0 [ 169.416282][ T7025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.416295][ T7025] RIP: 0033:0x7f393e78d33c [ 169.416307][ T7025] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 169.416318][ T7025] RSP: 002b:00007f393f650030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 169.416332][ T7025] RAX: ffffffffffffffda RBX: 00007f393e9b5fa0 RCX: 00007f393e78d33c [ 169.416342][ T7025] RDX: 000000000000000f RSI: 00007f393f6500a0 RDI: 0000000000000004 [ 169.416349][ T7025] RBP: 00007f393f650090 R08: 0000000000000000 R09: 0000000000000000 [ 169.416357][ T7025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.416364][ T7025] R13: 0000000000000000 R14: 00007f393e9b5fa0 R15: 00007ffc2f07bf88 [ 169.416385][ T7025] [ 169.874517][ T7036] netlink: 24 bytes leftover after parsing attributes in process `syz.2.270'. [ 169.884354][ T7036] nbd: must specify at least one socket [ 170.035351][ T5887] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 170.255378][ T5887] usb 4-1: Using ep0 maxpacket: 16 [ 170.322690][ T5887] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.414539][ T5887] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.507332][ T5887] usb 4-1: config 0 interface 0 has no altsetting 0 [ 170.831917][ T5887] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 171.089533][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.197375][ T5887] usb 4-1: config 0 descriptor?? [ 171.477842][ T7057] hpfs: Bad magic ... probably not HPFS [ 171.505094][ T5938] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 171.683808][ T7061] fuse: Bad value for 'fd' [ 171.697130][ T5938] usb 1-1: Using ep0 maxpacket: 8 [ 171.729720][ T5938] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 171.750750][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.759912][ T7030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.791310][ T7030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.800750][ T5938] usb 1-1: Product: syz [ 171.805991][ T30] audit: type=1326 audit(1750660558.245:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7064 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3576d8e929 code=0x7ffc0000 [ 171.809396][ T5938] usb 1-1: Manufacturer: syz [ 171.848242][ T5887] hid (null): report_id 0 is invalid [ 171.863326][ T5938] usb 1-1: SerialNumber: syz [ 171.912179][ T5938] usb 1-1: config 0 descriptor?? [ 171.932895][ T30] audit: type=1326 audit(1750660558.245:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7064 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3576d8e929 code=0x7ffc0000 [ 172.016553][ T30] audit: type=1326 audit(1750660558.285:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7064 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f3576d8e929 code=0x7ffc0000 [ 172.113187][ T5887] usb 4-1: USB disconnect, device number 4 [ 172.511669][ T7071] FAULT_INJECTION: forcing a failure. [ 172.511669][ T7071] name failslab, interval 1, probability 0, space 0, times 0 [ 172.521075][ T30] audit: type=1326 audit(1750660558.285:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7064 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3576d8e929 code=0x7ffc0000 [ 172.526196][ T7049] hfs: can't find a HFS filesystem on dev nullb0 [ 172.602818][ T7071] CPU: 0 UID: 0 PID: 7071 Comm: syz.1.279 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 172.602844][ T7071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.602854][ T7071] Call Trace: [ 172.602861][ T7071] [ 172.602868][ T7071] dump_stack_lvl+0x189/0x250 [ 172.602895][ T7071] ? __pfx____ratelimit+0x10/0x10 [ 172.602922][ T7071] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.602944][ T7071] ? __pfx__printk+0x10/0x10 [ 172.602968][ T7071] ? __pfx___might_resched+0x10/0x10 [ 172.602994][ T7071] should_fail_ex+0x414/0x560 [ 172.603019][ T7071] should_failslab+0xa8/0x100 [ 172.603041][ T7071] __kmalloc_cache_noprof+0x70/0x3d0 [ 172.603060][ T7071] ? subflow_ulp_init+0xd0/0x5c0 [ 172.603082][ T7071] subflow_ulp_init+0xd0/0x5c0 [ 172.603100][ T7071] ? tcp_set_ulp+0xb1/0x5f0 [ 172.603123][ T7071] tcp_set_ulp+0x539/0x5f0 [ 172.603145][ T7071] mptcp_subflow_create_socket+0x5c5/0xb40 [ 172.603172][ T7071] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 172.603201][ T7071] __mptcp_nmpc_sk+0x148/0x750 [ 172.603220][ T7071] ? __local_bh_enable_ip+0x12d/0x1c0 [ 172.603242][ T7071] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 172.603270][ T7071] mptcp_bind+0xab/0x1d0 [ 172.603297][ T7071] __sys_bind+0x2c6/0x3e0 [ 172.603317][ T7071] ? __pfx___sys_bind+0x10/0x10 [ 172.603346][ T7071] ? __pfx_ksys_write+0x10/0x10 [ 172.603361][ T7071] ? rcu_is_watching+0x15/0xb0 [ 172.603383][ T7071] ? arch_syscall_is_vdso_sigreturn+0x120/0x1a0 [ 172.603408][ T7071] __x64_sys_bind+0x7a/0x90 [ 172.603425][ T7071] do_syscall_64+0xfa/0x3b0 [ 172.603447][ T7071] ? lockdep_hardirqs_on+0x9c/0x150 [ 172.603469][ T7071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.603485][ T7071] ? clear_bhb_loop+0x60/0xb0 [ 172.603504][ T7071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.603520][ T7071] RIP: 0033:0x7f3576d8e929 [ 172.603535][ T7071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.603548][ T7071] RSP: 002b:00007f3577c5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 172.603566][ T7071] RAX: ffffffffffffffda RBX: 00007f3576fb5fa0 RCX: 00007f3576d8e929 [ 172.603578][ T7071] RDX: 000000000000001c RSI: 0000200000000000 RDI: 0000000000000003 [ 172.603588][ T7071] RBP: 00007f3577c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 172.603598][ T7071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 172.603607][ T7071] R13: 0000000000000000 R14: 00007f3576fb5fa0 R15: 00007ffc7759a0e8 [ 172.603642][ T7071] [ 172.853300][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.861692][ T30] audit: type=1326 audit(1750660558.285:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7064 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3576d8e929 code=0x7ffc0000 [ 172.882965][ C0] vkms_vblank_simulate: vblank timer overrun [ 172.891024][ T30] audit: type=1326 audit(1750660558.285:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7064 comm="syz.1.277" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3576d8e929 code=0x7ffc0000 [ 172.967009][ T5938] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -110 [ 172.974535][ T5938] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 173.784436][ T7049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.825657][ T7049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.836941][ T5938] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 174.022106][ T7091] netlink: 24 bytes leftover after parsing attributes in process `syz.2.283'. [ 174.031253][ T7091] nbd: must specify at least one socket [ 174.039677][ T5938] usb 4-1: config 0 has an invalid interface number: 190 but max is 0 [ 174.051766][ T5938] usb 4-1: config 0 has no interface number 0 [ 174.063959][ T5938] usb 4-1: config 0 interface 190 has no altsetting 0 [ 174.091845][ T5938] usb 4-1: New USB device found, idVendor=0411, idProduct=017f, bcdDevice=85.ac [ 174.651183][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.712798][ T5938] usb 4-1: Product: syz [ 174.748293][ T5938] usb 4-1: Manufacturer: syz [ 174.811540][ T5938] usb 4-1: SerialNumber: syz [ 174.984642][ T5938] usb 4-1: config 0 descriptor?? [ 175.029517][ T5938] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 175.125582][ T5887] usb 1-1: USB disconnect, device number 8 [ 175.386853][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 175.386925][ T30] audit: type=1326 audit(1750660561.825:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7095 comm="syz.1.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3576d8e929 code=0x7ffc0000 [ 175.414363][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.689358][ T7103] overlayfs: failed to verify upper root origin [ 175.806089][ T30] audit: type=1326 audit(1750660561.865:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7095 comm="syz.1.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3576d8e929 code=0x7ffc0000 [ 176.147071][ T5829] usb 4-1: USB disconnect, device number 5 [ 176.545889][ T30] audit: type=1326 audit(1750660561.915:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7095 comm="syz.1.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f3576d8e929 code=0x7ffc0000 [ 177.063207][ T30] audit: type=1326 audit(1750660562.855:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7095 comm="syz.1.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3576d8e929 code=0x7ffc0000 [ 177.155160][ T7113] fuse: Bad value for 'fd' [ 177.216870][ T30] audit: type=1326 audit(1750660562.855:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7095 comm="syz.1.284" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3576d8e929 code=0x7ffc0000 [ 177.624668][ T7125] FAULT_INJECTION: forcing a failure. [ 177.624668][ T7125] name failslab, interval 1, probability 0, space 0, times 0 [ 177.637523][ T7125] CPU: 1 UID: 0 PID: 7125 Comm: syz.0.290 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 177.637545][ T7125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 177.637555][ T7125] Call Trace: [ 177.637562][ T7125] [ 177.637569][ T7125] dump_stack_lvl+0x189/0x250 [ 177.637597][ T7125] ? __pfx____ratelimit+0x10/0x10 [ 177.637621][ T7125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 177.637643][ T7125] ? __pfx__printk+0x10/0x10 [ 177.637663][ T7125] ? __pfx___might_resched+0x10/0x10 [ 177.637685][ T7125] ? fs_reclaim_acquire+0x7d/0x100 [ 177.637712][ T7125] should_fail_ex+0x414/0x560 [ 177.637736][ T7125] should_failslab+0xa8/0x100 [ 177.637759][ T7125] __kmalloc_noprof+0xcb/0x4f0 [ 177.637777][ T7125] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 177.637806][ T7125] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 177.637835][ T7125] genl_family_rcv_msg_doit+0xb8/0x300 [ 177.637860][ T7125] ? irqentry_exit+0x74/0x90 [ 177.637883][ T7125] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 177.637915][ T7125] ? genl_rcv_msg+0x5eb/0x790 [ 177.637938][ T7125] ? genl_family_rcv_msg_doit+0x10/0x300 [ 177.637966][ T7125] genl_rcv_msg+0x60e/0x790 [ 177.637994][ T7125] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.638013][ T7125] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 177.638033][ T7125] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 177.638054][ T7125] ? __pfx_nl80211_post_doit+0x10/0x10 [ 177.638089][ T7125] netlink_rcv_skb+0x208/0x470 [ 177.638108][ T7125] ? __pfx_genl_rcv_msg+0x10/0x10 [ 177.638137][ T7125] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 177.638172][ T7125] ? down_read+0x1ad/0x2e0 [ 177.638191][ T7125] genl_rcv+0x28/0x40 [ 177.638210][ T7125] netlink_unicast+0x75b/0x8d0 [ 177.638237][ T7125] netlink_sendmsg+0x805/0xb30 [ 177.638255][ T7125] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 177.638284][ T7125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.638310][ T7125] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 177.638329][ T7125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 177.638348][ T7125] __sock_sendmsg+0x21c/0x270 [ 177.638375][ T7125] ____sys_sendmsg+0x505/0x830 [ 177.638400][ T7125] ? __pfx_____sys_sendmsg+0x10/0x10 [ 177.638428][ T7125] ? import_iovec+0x74/0xa0 [ 177.638448][ T7125] ___sys_sendmsg+0x21f/0x2a0 [ 177.638469][ T7125] ? __pfx____sys_sendmsg+0x10/0x10 [ 177.638526][ T7125] ? __fget_files+0x2a/0x420 [ 177.638549][ T7125] ? __fget_files+0x3a0/0x420 [ 177.638581][ T7125] __x64_sys_sendmsg+0x19b/0x260 [ 177.638603][ T7125] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 177.638648][ T7125] do_syscall_64+0xfa/0x3b0 [ 177.638671][ T7125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.638687][ T7125] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 177.638702][ T7125] ? clear_bhb_loop+0x60/0xb0 [ 177.638722][ T7125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.638738][ T7125] RIP: 0033:0x7f449c18e929 [ 177.638753][ T7125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.638767][ T7125] RSP: 002b:00007f449d089038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 177.638785][ T7125] RAX: ffffffffffffffda RBX: 00007f449c3b6160 RCX: 00007f449c18e929 [ 177.638797][ T7125] RDX: 0000000004000054 RSI: 0000200000000480 RDI: 0000000000000005 [ 177.638808][ T7125] RBP: 00007f449d089090 R08: 0000000000000000 R09: 0000000000000000 [ 177.638818][ T7125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 177.638827][ T7125] R13: 0000000000000000 R14: 00007f449c3b6160 R15: 00007ffdb1ab8708 [ 177.638865][ T7125] [ 178.009999][ T7123] netlink: 'syz.4.293': attribute type 8 has an invalid length. [ 178.430242][ T7133] ======================================================= [ 178.430242][ T7133] WARNING: The mand mount option has been deprecated and [ 178.430242][ T7133] and is ignored by this kernel. Remove the mand [ 178.430242][ T7133] option from the mount to silence this warning. [ 178.430242][ T7133] ======================================================= [ 179.113747][ T30] audit: type=1326 audit(1750660565.505:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dd98e929 code=0x7ffc0000 [ 179.497326][ T30] audit: type=1326 audit(1750660565.505:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dd98e929 code=0x7ffc0000 [ 179.548635][ T30] audit: type=1326 audit(1750660565.505:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f71dd98e929 code=0x7ffc0000 [ 179.765495][ T7157] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 179.777295][ T7157] cramfs: wrong magic [ 180.800186][ T30] audit: type=1326 audit(1750660565.995:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dd98e929 code=0x7ffc0000 [ 180.821649][ T30] audit: type=1326 audit(1750660565.995:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7145 comm="syz.3.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dd98e929 code=0x7ffc0000 [ 180.964709][ T7166] FAULT_INJECTION: forcing a failure. [ 180.964709][ T7166] name failslab, interval 1, probability 0, space 0, times 0 [ 180.990566][ T7162] fuse: Bad value for 'fd' [ 181.058529][ T7166] CPU: 0 UID: 0 PID: 7166 Comm: syz.3.300 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 181.058545][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.058551][ T7166] Call Trace: [ 181.058556][ T7166] [ 181.058561][ T7166] dump_stack_lvl+0x189/0x250 [ 181.058581][ T7166] ? __pfx____ratelimit+0x10/0x10 [ 181.058596][ T7166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.058610][ T7166] ? __pfx__printk+0x10/0x10 [ 181.058622][ T7166] ? __pfx___might_resched+0x10/0x10 [ 181.058636][ T7166] ? fs_reclaim_acquire+0x7d/0x100 [ 181.058652][ T7166] should_fail_ex+0x414/0x560 [ 181.058666][ T7166] should_failslab+0xa8/0x100 [ 181.058679][ T7166] kmem_cache_alloc_noprof+0x73/0x3c0 [ 181.058690][ T7166] ? skb_clone+0x212/0x3a0 [ 181.058704][ T7166] skb_clone+0x212/0x3a0 [ 181.058715][ T7166] ? nfnetlink_rcv+0x486/0x2520 [ 181.058730][ T7166] nfnetlink_rcv+0x4b4/0x2520 [ 181.058745][ T7166] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 181.058760][ T7166] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 181.058778][ T7166] ? __dev_queue_xmit+0x27e/0x3a70 [ 181.058790][ T7166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.058804][ T7166] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 181.058826][ T7166] ? ref_tracker_free+0x63a/0x7d0 [ 181.058837][ T7166] ? __copy_skb_header+0xa7/0x550 [ 181.058849][ T7166] ? __pfx_ref_tracker_free+0x10/0x10 [ 181.058860][ T7166] ? __skb_clone+0x63/0x7a0 [ 181.058874][ T7166] ? __skb_clone+0x483/0x7a0 [ 181.058888][ T7166] ? skb_clone+0x246/0x3a0 [ 181.058901][ T7166] ? __netlink_deliver_tap+0x807/0x850 [ 181.058911][ T7166] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.058924][ T7166] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.058933][ T7166] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.058946][ T7166] netlink_unicast+0x75b/0x8d0 [ 181.058960][ T7166] netlink_sendmsg+0x805/0xb30 [ 181.058975][ T7166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.058990][ T7166] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 181.059001][ T7166] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.059011][ T7166] __sock_sendmsg+0x21c/0x270 [ 181.059028][ T7166] ____sys_sendmsg+0x505/0x830 [ 181.059042][ T7166] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.059058][ T7166] ? import_iovec+0x74/0xa0 [ 181.059068][ T7166] ___sys_sendmsg+0x21f/0x2a0 [ 181.059084][ T7166] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.059113][ T7166] ? __fget_files+0x2a/0x420 [ 181.059125][ T7166] ? __fget_files+0x3a0/0x420 [ 181.059142][ T7166] __x64_sys_sendmsg+0x19b/0x260 [ 181.059155][ T7166] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.059171][ T7166] ? __pfx_ksys_write+0x10/0x10 [ 181.059180][ T7166] ? rcu_is_watching+0x15/0xb0 [ 181.059197][ T7166] ? do_syscall_64+0xbe/0x3b0 [ 181.059213][ T7166] do_syscall_64+0xfa/0x3b0 [ 181.059239][ T7166] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.059252][ T7166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.059260][ T7166] ? clear_bhb_loop+0x60/0xb0 [ 181.059272][ T7166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.059281][ T7166] RIP: 0033:0x7f71dd98e929 [ 181.059290][ T7166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.059298][ T7166] RSP: 002b:00007f71db7f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.059308][ T7166] RAX: ffffffffffffffda RBX: 00007f71ddbb5fa0 RCX: 00007f71dd98e929 [ 181.059315][ T7166] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 181.059321][ T7166] RBP: 00007f71db7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 181.059326][ T7166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.059331][ T7166] R13: 0000000000000000 R14: 00007f71ddbb5fa0 R15: 00007ffcc8ff8848 [ 181.059345][ T7166] [ 181.415897][ C0] vkms_vblank_simulate: vblank timer overrun [ 184.989844][ T7187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.306'. [ 185.026276][ T7187] netlink: 160 bytes leftover after parsing attributes in process `syz.0.306'. [ 185.045428][ T7187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.306'. [ 185.550382][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.308'. [ 186.240031][ T30] audit: type=1326 audit(1750660572.645:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7191 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393e78e929 code=0x7ffc0000 [ 186.613840][ T30] audit: type=1326 audit(1750660572.645:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7191 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393e78e929 code=0x7ffc0000 [ 186.635225][ C0] vkms_vblank_simulate: vblank timer overrun [ 186.932494][ T30] audit: type=1326 audit(1750660572.665:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7191 comm="syz.2.309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f393e78e929 code=0x7ffc0000 [ 186.953812][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.206638][ T30] audit: type=1326 audit(1750660573.285:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7200 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c18e929 code=0x7ffc0000 [ 187.292934][ T5827] Bluetooth: hci2: command tx timeout [ 187.316959][ T7216] fuse: Bad value for 'fd' [ 187.338774][ T30] audit: type=1326 audit(1750660573.295:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7200 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c18e929 code=0x7ffc0000 [ 187.369597][ T30] audit: type=1326 audit(1750660573.305:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7200 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f449c18e929 code=0x7ffc0000 [ 187.391947][ T30] audit: type=1326 audit(1750660573.615:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7200 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c18e929 code=0x7ffc0000 [ 187.424684][ T30] audit: type=1326 audit(1750660573.615:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7200 comm="syz.0.310" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c18e929 code=0x7ffc0000 [ 188.022691][ T7222] netlink: 96 bytes leftover after parsing attributes in process `syz.2.316'. [ 188.435308][ T5829] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 188.630080][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 188.733943][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.729118][ T5829] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 189.747164][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.779429][ T30] audit: type=1326 audit(1750660575.275:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7239 comm="syz.1.322" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3576d8e929 code=0x0 [ 189.779942][ T5829] usb 1-1: config 0 descriptor?? [ 190.370624][ T5938] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 190.579745][ T30] audit: type=1326 audit(1750660576.865:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7244 comm="syz.4.324" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 190.795323][ T5938] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 192.175085][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.183874][ T5829] hid-steam 0003:28DE:1142.0006: unknown main item tag 0x1 [ 192.200491][ T5938] usb 4-1: Product: syz [ 192.645369][ T5829] hid-steam 0003:28DE:1142.0006: item fetching failed at offset 3/5 [ 192.654201][ T5829] hid-steam 0003:28DE:1142.0006: steam_probe:parse of hid interface failed [ 192.662986][ T5938] usb 4-1: Manufacturer: syz [ 192.677347][ T5938] usb 4-1: SerialNumber: syz [ 192.695220][ T5938] usb 4-1: config 0 descriptor?? [ 192.704195][ T5829] hid-steam 0003:28DE:1142.0006: probe with driver hid-steam failed with error -22 [ 192.823745][ T5829] usb 1-1: USB disconnect, device number 9 [ 192.870883][ T7263] fuse: Bad value for 'fd' [ 193.637082][ T7278] fuse: Unknown parameter 'grou00000000000000000000' [ 193.715710][ T7281] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 194.262882][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.269251][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.405411][ T5938] usb 4-1: can't set config #0, error -71 [ 195.422739][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.0.334'. [ 195.438844][ T5938] usb 4-1: USB disconnect, device number 6 [ 195.477502][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 195.477518][ T30] audit: type=1326 audit(1750660581.915:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7293 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 195.504858][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.569073][ T30] audit: type=1326 audit(1750660581.915:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7293 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 195.591460][ T30] audit: type=1326 audit(1750660581.915:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7293 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 195.613356][ T30] audit: type=1326 audit(1750660582.035:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7293 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 195.634677][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.726060][ T7304] fuse: Invalid rootmode [ 195.821814][ T30] audit: type=1326 audit(1750660582.035:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7293 comm="syz.4.336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 196.485093][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 196.564054][ T7328] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 196.574919][ T7328] cramfs: wrong magic [ 196.965413][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 196.972736][ T5827] Bluetooth: hci3: command 0x0406 tx timeout [ 196.978808][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 197.821951][ T7332] fuse: Unknown parameter 'grou00000000000000000000' [ 197.940800][ T9] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 197.985912][ T9] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 198.024707][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 198.035450][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.049586][ T7334] loop6: detected capacity change from 0 to 524287999 [ 198.151529][ T7320] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 198.375404][ T5829] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 199.164812][ T9] usb 4-1: can't set config #27, error -71 [ 199.961860][ T9] usb 4-1: USB disconnect, device number 7 [ 200.060958][ T5829] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 200.537438][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.666060][ T5829] usb 1-1: Product: syz [ 200.700799][ T5829] usb 1-1: Manufacturer: syz [ 200.705602][ T5829] usb 1-1: SerialNumber: syz [ 200.725124][ T5829] usb 1-1: config 0 descriptor?? [ 200.729966][ T7350] fuse: Invalid rootmode [ 201.296292][ T7365] fuse: Unknown parameter 'grou00000000000000000000' [ 203.532105][ T5829] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 204.939714][ T5829] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 205.589558][ T5829] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 205.632923][ T5829] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 205.648305][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.071803][ T7388] syz.1.361: attempt to access beyond end of device [ 206.071803][ T7388] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 206.103754][ T7388] hfsplus: unable to find HFS+ superblock [ 206.104492][ T7391] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 206.116813][ T7391] cramfs: wrong magic [ 206.200334][ T9] usb 1-1: USB disconnect, device number 10 [ 206.207141][ T5939] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 206.306359][ T7385] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 206.336436][ T5829] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 206.361784][ T7400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 206.375214][ T5939] usb 4-1: Using ep0 maxpacket: 8 [ 206.406904][ T5939] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 206.463376][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.534584][ T5939] usb 4-1: Product: syz [ 206.561586][ T5939] usb 4-1: Manufacturer: syz [ 206.581662][ T5939] usb 4-1: SerialNumber: syz [ 206.641539][ T5939] usb 4-1: config 0 descriptor?? [ 206.668537][ T5939] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 206.688073][ T7406] fuse: Invalid rootmode [ 206.720849][ T5939] usb 4-1: setting power ON [ 206.784411][ T5939] dvb-usb: bulk message failed: -22 (2/0) [ 206.884332][ T5939] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 207.067488][ T7413] netlink: 12 bytes leftover after parsing attributes in process `syz.1.366'. [ 207.365198][ T5939] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 207.418874][ T5829] usb 5-1: USB disconnect, device number 9 [ 207.432683][ T5939] usb 4-1: media controller created [ 207.562800][ T7419] sctp: [Deprecated]: syz.0.367 (pid 7419) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.562800][ T7419] Use struct sctp_sack_info instead [ 207.581110][ T5939] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.693332][ T5939] usb 4-1: selecting invalid altsetting 6 [ 207.717217][ T5939] usb 4-1: digital interface selection failed (-22) [ 207.743180][ T7422] fuse: Unknown parameter 'group_i00000000000000000000' [ 207.771525][ T5939] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 207.806707][ T5939] usb 4-1: setting power OFF [ 207.832786][ T5939] dvb-usb: bulk message failed: -22 (2/0) [ 207.850166][ T5939] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 207.861094][ T5939] (NULL device *): no alternate interface [ 207.998534][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.370'. [ 208.009991][ T5939] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 208.034214][ T5939] usb 4-1: USB disconnect, device number 8 [ 208.367686][ T7435] FAULT_INJECTION: forcing a failure. [ 208.367686][ T7435] name failslab, interval 1, probability 0, space 0, times 0 [ 208.380998][ T5939] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 208.420485][ T7435] CPU: 0 UID: 0 PID: 7435 Comm: syz.1.372 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 208.420514][ T7435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 208.420524][ T7435] Call Trace: [ 208.420532][ T7435] [ 208.420539][ T7435] dump_stack_lvl+0x189/0x250 [ 208.420578][ T7435] ? __pfx____ratelimit+0x10/0x10 [ 208.420601][ T7435] ? __pfx_dump_stack_lvl+0x10/0x10 [ 208.420623][ T7435] ? __pfx__printk+0x10/0x10 [ 208.420646][ T7435] ? __pfx___might_resched+0x10/0x10 [ 208.420667][ T7435] ? fs_reclaim_acquire+0x7d/0x100 [ 208.420694][ T7435] should_fail_ex+0x414/0x560 [ 208.420719][ T7435] should_failslab+0xa8/0x100 [ 208.420742][ T7435] __kmalloc_noprof+0xcb/0x4f0 [ 208.420759][ T7435] ? kfree+0x4d/0x440 [ 208.420773][ T7435] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 208.420801][ T7435] tomoyo_realpath_from_path+0xe3/0x5d0 [ 208.420825][ T7435] ? tomoyo_domain+0xda/0x130 [ 208.420854][ T7435] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 208.420873][ T7435] tomoyo_path_number_perm+0x1e8/0x5a0 [ 208.420896][ T7435] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 208.420933][ T7435] ? __lock_acquire+0xab9/0xd20 [ 208.420993][ T7435] ? __fget_files+0x2a/0x420 [ 208.421016][ T7435] ? __fget_files+0x2a/0x420 [ 208.421034][ T7435] ? __fget_files+0x3a0/0x420 [ 208.421053][ T7435] ? __fget_files+0x2a/0x420 [ 208.421077][ T7435] security_file_ioctl+0xcb/0x2d0 [ 208.421100][ T7435] __se_sys_ioctl+0x47/0x170 [ 208.421120][ T7435] do_syscall_64+0xfa/0x3b0 [ 208.421141][ T7435] ? lockdep_hardirqs_on+0x9c/0x150 [ 208.421164][ T7435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.421180][ T7435] ? clear_bhb_loop+0x60/0xb0 [ 208.421200][ T7435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.421216][ T7435] RIP: 0033:0x7f3576d8e929 [ 208.421235][ T7435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.421249][ T7435] RSP: 002b:00007f3577c5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 208.421270][ T7435] RAX: ffffffffffffffda RBX: 00007f3576fb5fa0 RCX: 00007f3576d8e929 [ 208.421282][ T7435] RDX: 00002000000008c0 RSI: 00000000c05064a7 RDI: 0000000000000003 [ 208.421293][ T7435] RBP: 00007f3577c5e090 R08: 0000000000000000 R09: 0000000000000000 [ 208.421302][ T7435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.421312][ T7435] R13: 0000000000000000 R14: 00007f3576fb5fa0 R15: 00007ffc7759a0e8 [ 208.421340][ T7435] [ 208.421347][ T7435] ERROR: Out of memory at tomoyo_realpath_from_path. [ 208.765109][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 208.774873][ T5939] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 208.787309][ T5939] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 208.826758][ T5939] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.846800][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 208.859266][ T5939] usb 4-1: SerialNumber: syz [ 209.056505][ T7444] FAULT_INJECTION: forcing a failure. [ 209.056505][ T7444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.152056][ T7444] CPU: 0 UID: 0 PID: 7444 Comm: syz.4.375 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 209.152073][ T7444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 209.152079][ T7444] Call Trace: [ 209.152084][ T7444] [ 209.152089][ T7444] dump_stack_lvl+0x189/0x250 [ 209.152109][ T7444] ? __pfx____ratelimit+0x10/0x10 [ 209.152124][ T7444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 209.152138][ T7444] ? __pfx__printk+0x10/0x10 [ 209.152154][ T7444] should_fail_ex+0x414/0x560 [ 209.152168][ T7444] _copy_to_user+0x31/0xb0 [ 209.152179][ T7444] simple_read_from_buffer+0xe1/0x170 [ 209.152194][ T7444] proc_fail_nth_read+0x1df/0x250 [ 209.152210][ T7444] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.152225][ T7444] ? rw_verify_area+0x258/0x650 [ 209.152235][ T7444] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 209.152249][ T7444] vfs_read+0x200/0x980 [ 209.152262][ T7444] ? __pfx___mutex_lock+0x10/0x10 [ 209.152277][ T7444] ? __pfx_vfs_read+0x10/0x10 [ 209.152288][ T7444] ? __fget_files+0x2a/0x420 [ 209.152302][ T7444] ? __fget_files+0x3a0/0x420 [ 209.152314][ T7444] ? __fget_files+0x2a/0x420 [ 209.152330][ T7444] ksys_read+0x145/0x250 [ 209.152342][ T7444] ? __pfx_ksys_read+0x10/0x10 [ 209.152351][ T7444] ? rcu_is_watching+0x15/0xb0 [ 209.152365][ T7444] ? arch_syscall_is_vdso_sigreturn+0x120/0x1a0 [ 209.152378][ T7444] ? syscall_user_dispatch+0x4f/0x90 [ 209.152393][ T7444] do_syscall_64+0xfa/0x3b0 [ 209.152406][ T7444] ? lockdep_hardirqs_on+0x9c/0x150 [ 209.152419][ T7444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.152428][ T7444] ? clear_bhb_loop+0x60/0xb0 [ 209.152440][ T7444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.152448][ T7444] RIP: 0033:0x7feda3d8d33c [ 209.152457][ T7444] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 209.152465][ T7444] RSP: 002b:00007feda4cd5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 209.152475][ T7444] RAX: ffffffffffffffda RBX: 00007feda3fb5fa0 RCX: 00007feda3d8d33c [ 209.152482][ T7444] RDX: 000000000000000f RSI: 00007feda4cd50a0 RDI: 0000000000000003 [ 209.152488][ T7444] RBP: 00007feda4cd5090 R08: 0000000000000000 R09: 0000000000000000 [ 209.152493][ T7444] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 209.152498][ T7444] R13: 0000000000000000 R14: 00007feda3fb5fa0 R15: 00007fffac91b7d8 [ 209.152513][ T7444] [ 209.392363][ C0] vkms_vblank_simulate: vblank timer overrun [ 209.555107][ T5829] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 209.715702][ T5829] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 209.725089][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.733142][ T5829] usb 1-1: Product: syz [ 209.737549][ T5829] usb 1-1: Manufacturer: syz [ 209.747296][ T5829] usb 1-1: SerialNumber: syz [ 209.758458][ T5829] usb 1-1: config 0 descriptor?? [ 209.855239][ T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 209.985247][ T5829] usb 1-1: USB disconnect, device number 11 [ 210.042393][ T7459] fuse: Unknown parameter 'group_i00000000000000000000' [ 210.107238][ T24] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 210.168525][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.220737][ T5829] usb 4-1: USB disconnect, device number 9 [ 210.263545][ T24] usb 3-1: config 0 descriptor?? [ 210.286220][ T5939] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 210.332141][ T24] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 210.433526][ T7467] syz.3.383: attempt to access beyond end of device [ 210.433526][ T7467] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 210.445123][ T5939] usb 5-1: Using ep0 maxpacket: 16 [ 210.452172][ T7467] hfsplus: unable to find HFS+ superblock [ 210.470518][ T7467] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 210.483360][ T7467] cramfs: wrong magic [ 211.387910][ T5939] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.398188][ T5939] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 211.414158][ T5939] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 211.423510][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 211.431680][ T5939] usb 5-1: SerialNumber: syz [ 211.473015][ T24] gspca_cpia1: usb_control_msg 05, error -110 [ 211.532145][ T7450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.565484][ T7450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.593596][ T24] gspca_cpia1: usb_control_msg 01, error -32 [ 211.655352][ T24] gspca_cpia1: usb_control_msg 01, error -32 [ 212.743652][ T7469] syz.1.384: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 212.761613][ T7469] CPU: 1 UID: 0 PID: 7469 Comm: syz.1.384 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 212.761629][ T7469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 212.761635][ T7469] Call Trace: [ 212.761641][ T7469] [ 212.761648][ T7469] dump_stack_lvl+0x189/0x250 [ 212.761668][ T7469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.761683][ T7469] ? __pfx__printk+0x10/0x10 [ 212.761693][ T7469] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 212.761712][ T7469] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 212.761728][ T7469] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 212.761744][ T7469] warn_alloc+0x214/0x310 [ 212.761761][ T7469] ? __pfx_warn_alloc+0x10/0x10 [ 212.761778][ T7469] ? __get_vm_area_node+0x28f/0x300 [ 212.761790][ T7469] ? translate_table+0x19b/0x2040 [ 212.761804][ T7469] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 212.761831][ T7469] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 212.761846][ T7469] ? rcu_is_watching+0x15/0xb0 [ 212.761861][ T7469] ? translate_table+0x19b/0x2040 [ 212.761871][ T7469] ? translate_table+0x19b/0x2040 [ 212.761881][ T7469] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 212.761893][ T7469] ? translate_table+0x19b/0x2040 [ 212.761903][ T7469] ? xt_alloc_table_info+0x3b/0xa0 [ 212.761920][ T7469] translate_table+0x19b/0x2040 [ 212.761938][ T7469] ? __lock_acquire+0xab9/0xd20 [ 212.761954][ T7469] ? __pfx_translate_table+0x10/0x10 [ 212.761966][ T7469] ? __might_fault+0xb0/0x130 [ 212.761987][ T7469] ? _copy_from_user+0x94/0xb0 [ 212.761999][ T7469] do_ip6t_set_ctl+0x970/0xce0 [ 212.762014][ T7469] ? rcu_is_watching+0x15/0xb0 [ 212.762027][ T7469] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 212.762048][ T7469] ? __pfx___mutex_lock+0x10/0x10 [ 212.762063][ T7469] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 212.762081][ T7469] ? __pfx_futex_wait+0x10/0x10 [ 212.762098][ T7469] nf_setsockopt+0x26c/0x290 [ 212.762114][ T7469] rawv6_setsockopt+0x23b/0x5b0 [ 212.762126][ T7469] ? __lock_acquire+0xab9/0xd20 [ 212.762139][ T7469] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 212.762154][ T7469] ? sock_common_setsockopt+0x36/0xc0 [ 212.762169][ T7469] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 212.762184][ T7469] do_sock_setsockopt+0x25a/0x3e0 [ 212.762196][ T7469] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 212.762210][ T7469] ? __fget_files+0x2a/0x420 [ 212.762227][ T7469] __x64_sys_setsockopt+0x18b/0x220 [ 212.762241][ T7469] do_syscall_64+0xfa/0x3b0 [ 212.762255][ T7469] ? lockdep_hardirqs_on+0x9c/0x150 [ 212.762268][ T7469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.762278][ T7469] ? clear_bhb_loop+0x60/0xb0 [ 212.762290][ T7469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.762299][ T7469] RIP: 0033:0x7f3576d8e929 [ 212.762310][ T7469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.762318][ T7469] RSP: 002b:00007f3577c5e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 212.762329][ T7469] RAX: ffffffffffffffda RBX: 00007f3576fb5fa0 RCX: 00007f3576d8e929 [ 212.762336][ T7469] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 212.762342][ T7469] RBP: 00007f3576e10b39 R08: 0000000000000588 R09: 0000000000000000 [ 212.762348][ T7469] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000000 [ 212.762354][ T7469] R13: 0000000000000000 R14: 00007f3576fb5fa0 R15: 00007ffc7759a0e8 [ 212.762368][ T7469] [ 212.762394][ T7469] Mem-Info: [ 213.099938][ T7469] active_anon:263 inactive_anon:19318 isolated_anon:0 [ 213.099938][ T7469] active_file:13452 inactive_file:38873 isolated_file:0 [ 213.099938][ T7469] unevictable:768 dirty:164 writeback:0 [ 213.099938][ T7469] slab_reclaimable:10093 slab_unreclaimable:98531 [ 213.099938][ T7469] mapped:31460 shmem:13480 pagetables:1397 [ 213.099938][ T7469] sec_pagetables:0 bounce:0 [ 213.099938][ T7469] kernel_misc_reclaimable:0 [ 213.099938][ T7469] free:1285701 free_pcp:18575 free_cma:0 [ 213.145702][ T7469] Node 0 active_anon:1052kB inactive_anon:77272kB active_file:53608kB inactive_file:155492kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125840kB dirty:656kB writeback:0kB shmem:52384kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12560kB pagetables:5412kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 213.180107][ T7469] Node 1 active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:176kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 213.211520][ T7469] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 213.240295][ T7469] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 213.246058][ T7469] Node 0 DMA32 free:1236228kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1048kB inactive_anon:77232kB active_file:51844kB inactive_file:155424kB unevictable:1536kB writepending:656kB present:3129332kB managed:2561488kB mlocked:0kB bounce:0kB free_pcp:45532kB local_pcp:26304kB free_cma:0kB [ 213.279254][ T7469] lowmem_reserve[]: 0 0 1 1 1 [ 213.283961][ T7469] Node 0 Normal free:20kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1764kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1904kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 213.313104][ T7469] lowmem_reserve[]: 0 0 0 0 0 [ 213.317906][ T7469] Node 1 Normal free:3891196kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:200kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:28760kB local_pcp:7936kB free_cma:0kB [ 213.349061][ T7469] lowmem_reserve[]: 0 0 0 0 0 [ 213.353774][ T7469] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 213.367130][ T7469] Node 0 DMA32: 4*4kB (UME) 4*8kB (UME) 88*16kB (UME) 166*32kB (ME) 202*64kB (ME) 76*128kB (ME) 60*256kB (ME) 31*512kB (ME) 14*1024kB (ME) 9*2048kB (UM) 279*4096kB (M) = 1236208kB [ 213.385049][ T7469] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 213.397310][ T7469] Node 1 Normal: 181*4kB (UME) 49*8kB (UME) 48*16kB (UME) 61*32kB (UME) 24*64kB (UME) 10*128kB (UME) 2*256kB (UM) 2*512kB (UE) 4*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3891196kB [ 213.415457][ T7469] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.425019][ T7469] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 213.434301][ T7469] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 213.443853][ T7469] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 213.453457][ T7469] 65801 total pagecache pages [ 213.459379][ T7469] 0 pages in swap cache [ 213.463544][ T7469] Free swap = 124996kB [ 213.467712][ T7469] Total swap = 124996kB [ 213.471858][ T7469] 2097051 pages RAM [ 213.475678][ T7469] 0 pages HighMem/MovableOnly [ 213.480341][ T7469] 424572 pages reserved [ 213.484492][ T7469] 0 pages cma reserved [ 213.531875][ T24] gspca_cpia1: usb_control_msg 02, error -110 [ 213.544549][ T24] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 214.652516][ T5886] usb 5-1: USB disconnect, device number 10 [ 214.713463][ T5887] usb 3-1: USB disconnect, device number 6 [ 215.932390][ T7492] sp0: Synchronizing with TNC [ 216.156047][ T7503] syz.1.395: attempt to access beyond end of device [ 216.156047][ T7503] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 216.169311][ T7503] hfsplus: unable to find HFS+ superblock [ 216.179680][ T7506] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 216.242092][ T7506] cramfs: wrong magic [ 216.600136][ T7515] netlink: 'syz.1.398': attribute type 30 has an invalid length. [ 216.608149][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.1.398'. [ 216.617639][ T7515] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 217.335771][ T5829] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 217.624379][ T24] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 217.746211][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 217.780269][ T5829] usb 2-1: config 0 has an invalid descriptor of length 19, skipping remainder of the config [ 217.802322][ T5829] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.810756][ T24] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 217.828988][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.839293][ T24] usb 3-1: Product: syz [ 217.843809][ T5829] usb 2-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 217.870700][ T24] usb 3-1: Manufacturer: syz [ 217.881192][ T24] usb 3-1: SerialNumber: syz [ 217.886196][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.893462][ T24] usb 3-1: config 0 descriptor?? [ 217.945327][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 217.959570][ T5829] usb 2-1: config 0 descriptor?? [ 217.975636][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.019748][ T5829] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 218.035176][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 218.131166][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.157615][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 218.161965][ T5886] usb 3-1: USB disconnect, device number 7 [ 218.174328][ T7537] hpfs: Bad magic ... probably not HPFS [ 218.191524][ T9] usb 4-1: SerialNumber: syz [ 219.466130][ T9] usb 4-1: USB disconnect, device number 10 [ 220.134341][ T5829] usb 2-1: USB disconnect, device number 8 [ 220.372646][ T30] audit: type=1326 audit(1750660606.745:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7557 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 220.779012][ T30] audit: type=1326 audit(1750660606.745:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7557 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 220.805373][ T30] audit: type=1326 audit(1750660606.745:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7557 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 220.929531][ T30] audit: type=1326 audit(1750660606.745:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7557 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 220.957758][ T30] audit: type=1326 audit(1750660606.745:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7557 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 221.014658][ T30] audit: type=1326 audit(1750660606.745:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7557 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 221.424494][ T30] audit: type=1326 audit(1750660606.755:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7557 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 221.450988][ T30] audit: type=1326 audit(1750660606.755:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7557 comm="syz.4.410" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 221.611702][ T7572] FAULT_INJECTION: forcing a failure. [ 221.611702][ T7572] name failslab, interval 1, probability 0, space 0, times 0 [ 221.624766][ T7572] CPU: 0 UID: 0 PID: 7572 Comm: syz.0.413 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 221.624791][ T7572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.624799][ T7572] Call Trace: [ 221.624804][ T7572] [ 221.624809][ T7572] dump_stack_lvl+0x189/0x250 [ 221.624828][ T7572] ? __pfx____ratelimit+0x10/0x10 [ 221.624843][ T7572] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.624857][ T7572] ? __pfx__printk+0x10/0x10 [ 221.624869][ T7572] ? __pfx___might_resched+0x10/0x10 [ 221.624883][ T7572] ? fs_reclaim_acquire+0x7d/0x100 [ 221.624900][ T7572] should_fail_ex+0x414/0x560 [ 221.624914][ T7572] should_failslab+0xa8/0x100 [ 221.624928][ T7572] __kmalloc_cache_noprof+0x70/0x3d0 [ 221.624940][ T7572] ? alloc_async+0x4d/0xc0 [ 221.624955][ T7572] alloc_async+0x4d/0xc0 [ 221.624976][ T7572] proc_do_submiturb+0xb1a/0x37b0 [ 221.625010][ T7572] ? proc_do_submiturb+0x22d0/0x37b0 [ 221.625037][ T7572] proc_submiturb+0x10e/0x160 [ 221.625049][ T7572] ? __pfx_proc_submiturb+0x10/0x10 [ 221.625065][ T7572] ? preempt_schedule_irq+0xde/0x150 [ 221.625079][ T7572] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 221.625090][ T7572] ? smack_file_ioctl+0x2a9/0x340 [ 221.625103][ T7572] usbdev_ioctl+0x10e7/0x20c0 [ 221.625118][ T7572] ? __pfx_usbdev_ioctl+0x10/0x10 [ 221.625127][ T7572] ? __pfx_usbdev_ioctl+0x10/0x10 [ 221.625137][ T7572] ? __pfx_usbdev_ioctl+0x10/0x10 [ 221.625146][ T7572] ? __se_sys_ioctl+0xea/0x170 [ 221.625158][ T7572] ? __pfx_usbdev_ioctl+0x10/0x10 [ 221.625168][ T7572] __se_sys_ioctl+0xfc/0x170 [ 221.625179][ T7572] do_syscall_64+0xfa/0x3b0 [ 221.625194][ T7572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.625203][ T7572] ? asm_sysvec_call_function_single+0x1a/0x20 [ 221.625213][ T7572] ? clear_bhb_loop+0x60/0xb0 [ 221.625224][ T7572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.625233][ T7572] RIP: 0033:0x7f449c18e929 [ 221.625243][ T7572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.625251][ T7572] RSP: 002b:00007f449d0aa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 221.625262][ T7572] RAX: ffffffffffffffda RBX: 00007f449c3b6080 RCX: 00007f449c18e929 [ 221.625269][ T7572] RDX: 0000200000000140 RSI: 000000008038550a RDI: 0000000000000003 [ 221.625275][ T7572] RBP: 00007f449d0aa090 R08: 0000000000000000 R09: 0000000000000000 [ 221.625281][ T7572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.625286][ T7572] R13: 0000000000000000 R14: 00007f449c3b6080 R15: 00007ffdb1ab8708 [ 221.625301][ T7572] [ 222.191229][ T7578] fuse: Unknown parameter 'group_id00000000000000000000' [ 222.340712][ T7581] xt_hashlimit: size too large, truncated to 1048576 [ 222.347813][ T7581] FAULT_INJECTION: forcing a failure. [ 222.347813][ T7581] name failslab, interval 1, probability 0, space 0, times 0 [ 222.360870][ T7581] CPU: 0 UID: 0 PID: 7581 Comm: syz.2.415 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 222.360895][ T7581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 222.360906][ T7581] Call Trace: [ 222.360912][ T7581] [ 222.360916][ T7581] dump_stack_lvl+0x189/0x250 [ 222.360935][ T7581] ? __pfx____ratelimit+0x10/0x10 [ 222.360951][ T7581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.360964][ T7581] ? __pfx__printk+0x10/0x10 [ 222.360976][ T7581] ? lock_acquire+0x175/0x360 [ 222.360989][ T7581] ? __pfx___might_resched+0x10/0x10 [ 222.361005][ T7581] should_fail_ex+0x414/0x560 [ 222.361020][ T7581] should_failslab+0xa8/0x100 [ 222.361034][ T7581] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 222.361046][ T7581] ? __get_vm_area_node+0x13f/0x300 [ 222.361060][ T7581] __get_vm_area_node+0x13f/0x300 [ 222.361074][ T7581] __vmalloc_node_range_noprof+0x301/0x12f0 [ 222.361087][ T7581] ? htable_create+0xfc/0x7a0 [ 222.361106][ T7581] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 222.361127][ T7581] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 222.361142][ T7581] ? rcu_is_watching+0x15/0xb0 [ 222.361157][ T7581] ? htable_create+0xfc/0x7a0 [ 222.361169][ T7581] ? htable_create+0xfc/0x7a0 [ 222.361179][ T7581] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 222.361191][ T7581] ? htable_create+0xfc/0x7a0 [ 222.361202][ T7581] ? hashlimit_pernet+0x23/0x240 [ 222.361218][ T7581] htable_create+0xfc/0x7a0 [ 222.361234][ T7581] hashlimit_mt_check_common+0x719/0xa10 [ 222.361251][ T7581] xt_check_match+0x3ce/0xab0 [ 222.361263][ T7581] ? __pfx___mutex_lock+0x10/0x10 [ 222.361279][ T7581] ? __pfx_xt_check_match+0x10/0x10 [ 222.361295][ T7581] ? strcmp+0x31/0xc0 [ 222.361305][ T7581] ? xt_find_match+0x1f7/0x250 [ 222.361321][ T7581] translate_table+0x1553/0x2040 [ 222.361344][ T7581] ? __pfx_translate_table+0x10/0x10 [ 222.361356][ T7581] ? __might_fault+0xb0/0x130 [ 222.361378][ T7581] ? _copy_from_user+0x94/0xb0 [ 222.361390][ T7581] do_ip6t_set_ctl+0x970/0xce0 [ 222.361406][ T7581] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 222.361418][ T7581] ? rcu_is_watching+0x15/0xb0 [ 222.361431][ T7581] ? trace_irq_disable+0x37/0x110 [ 222.361448][ T7581] ? irqentry_exit+0x74/0x90 [ 222.361462][ T7581] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.361479][ T7581] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 222.361500][ T7581] nf_setsockopt+0x26c/0x290 [ 222.361516][ T7581] rawv6_setsockopt+0x23b/0x5b0 [ 222.361528][ T7581] ? __lock_acquire+0xab9/0xd20 [ 222.361540][ T7581] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 222.361555][ T7581] ? sock_common_setsockopt+0x36/0xc0 [ 222.361570][ T7581] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 222.361585][ T7581] do_sock_setsockopt+0x25a/0x3e0 [ 222.361598][ T7581] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 222.361611][ T7581] ? __fget_files+0x2a/0x420 [ 222.361628][ T7581] __x64_sys_setsockopt+0x18b/0x220 [ 222.361641][ T7581] do_syscall_64+0xfa/0x3b0 [ 222.361656][ T7581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.361665][ T7581] ? asm_sysvec_call_function_single+0x1a/0x20 [ 222.361675][ T7581] ? clear_bhb_loop+0x60/0xb0 [ 222.361686][ T7581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.361695][ T7581] RIP: 0033:0x7f393e78e929 [ 222.361705][ T7581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.361713][ T7581] RSP: 002b:00007f393f62f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 222.361723][ T7581] RAX: ffffffffffffffda RBX: 00007f393e9b6080 RCX: 00007f393e78e929 [ 222.361730][ T7581] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 222.361736][ T7581] RBP: 00007f393f62f090 R08: 0000000000000588 R09: 0000000000000000 [ 222.361742][ T7581] R10: 00002000000014c0 R11: 0000000000000246 R12: 0000000000000001 [ 222.361747][ T7581] R13: 0000000000000000 R14: 00007f393e9b6080 R15: 00007ffc2f07bf88 [ 222.361762][ T7581] [ 223.068705][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.1.417'. [ 223.349796][ T7588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.418'. [ 223.358750][ T7588] nbd: must specify at least one socket [ 224.024898][ T7594] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 224.837474][ T3461] Bluetooth: Error in BCSP hdr checksum [ 225.080427][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'. [ 225.089764][ T758] Bluetooth: Error in BCSP hdr checksum [ 225.246807][ T24] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 225.495211][ T30] audit: type=1326 audit(1750660611.875:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7607 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c18e929 code=0x7ffc0000 [ 225.895244][ T30] audit: type=1326 audit(1750660611.875:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7607 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c18e929 code=0x7ffc0000 [ 225.920234][ T30] audit: type=1326 audit(1750660611.875:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7607 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f449c18e929 code=0x7ffc0000 [ 225.942940][ T30] audit: type=1326 audit(1750660611.875:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7607 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c18e929 code=0x7ffc0000 [ 225.966427][ T30] audit: type=1326 audit(1750660611.875:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7607 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c18e929 code=0x7ffc0000 [ 225.993300][ T30] audit: type=1326 audit(1750660611.875:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7607 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f449c18e929 code=0x7ffc0000 [ 226.032808][ T30] audit: type=1326 audit(1750660611.875:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7607 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c18e929 code=0x7ffc0000 [ 226.061932][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 226.071846][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.089301][ T30] audit: type=1326 audit(1750660611.885:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7607 comm="syz.0.424" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c18e929 code=0x7ffc0000 [ 226.119758][ T24] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 226.139851][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.149792][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 226.151422][ T7615] netlink: 12 bytes leftover after parsing attributes in process `syz.0.426'. [ 226.169459][ T24] usb 3-1: SerialNumber: syz [ 226.214792][ T7616] FAULT_INJECTION: forcing a failure. [ 226.214792][ T7616] name failslab, interval 1, probability 0, space 0, times 0 [ 226.233301][ T7616] CPU: 0 UID: 0 PID: 7616 Comm: syz.0.426 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 226.233326][ T7616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.233337][ T7616] Call Trace: [ 226.233343][ T7616] [ 226.233348][ T7616] dump_stack_lvl+0x189/0x250 [ 226.233367][ T7616] ? __pfx____ratelimit+0x10/0x10 [ 226.233381][ T7616] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.233395][ T7616] ? __pfx__printk+0x10/0x10 [ 226.233408][ T7616] ? __pfx___might_resched+0x10/0x10 [ 226.233421][ T7616] ? fs_reclaim_acquire+0x7d/0x100 [ 226.233437][ T7616] should_fail_ex+0x414/0x560 [ 226.233452][ T7616] should_failslab+0xa8/0x100 [ 226.233465][ T7616] __kmalloc_cache_noprof+0x70/0x3d0 [ 226.233477][ T7616] ? rtnl_newlink+0xed/0x1c70 [ 226.233486][ T7616] ? kasan_save_free_info+0x46/0x50 [ 226.233502][ T7616] rtnl_newlink+0xed/0x1c70 [ 226.233510][ T7616] ? netlink_sendmsg+0x805/0xb30 [ 226.233520][ T7616] ? __sock_sendmsg+0x21c/0x270 [ 226.233533][ T7616] ? ____sys_sendmsg+0x505/0x830 [ 226.233543][ T7616] ? ___sys_sendmsg+0x21f/0x2a0 [ 226.233552][ T7616] ? __x64_sys_sendmsg+0x19b/0x260 [ 226.233562][ T7616] ? do_syscall_64+0xfa/0x3b0 [ 226.233576][ T7616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.233589][ T7616] ? __pfx_rtnl_newlink+0x10/0x10 [ 226.233609][ T7616] ? kasan_quarantine_put+0xdd/0x220 [ 226.233618][ T7616] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.233635][ T7616] ? nlmon_xmit+0xb0/0x100 [ 226.233647][ T7616] ? kmem_cache_free+0x18f/0x400 [ 226.233661][ T7616] ? __local_bh_enable_ip+0x12d/0x1c0 [ 226.233675][ T7616] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.233689][ T7616] ? __local_bh_enable_ip+0x12d/0x1c0 [ 226.233701][ T7616] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 226.233716][ T7616] ? __dev_queue_xmit+0x27e/0x3a70 [ 226.233729][ T7616] ? __dev_queue_xmit+0x27e/0x3a70 [ 226.233739][ T7616] ? __dev_queue_xmit+0x27e/0x3a70 [ 226.233752][ T7616] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 226.233766][ T7616] ? __lock_acquire+0xab9/0xd20 [ 226.233806][ T7616] ? __pfx_rtnl_newlink+0x10/0x10 [ 226.233821][ T7616] rtnetlink_rcv_msg+0x7cc/0xb70 [ 226.233838][ T7616] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 226.233852][ T7616] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 226.233875][ T7616] ? ref_tracker_free+0x63a/0x7d0 [ 226.233887][ T7616] ? __copy_skb_header+0xa7/0x550 [ 226.233900][ T7616] ? __pfx_ref_tracker_free+0x10/0x10 [ 226.233911][ T7616] ? __skb_clone+0x63/0x7a0 [ 226.233926][ T7616] netlink_rcv_skb+0x208/0x470 [ 226.233937][ T7616] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 226.233947][ T7616] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.233963][ T7616] ? netlink_deliver_tap+0x2e/0x1b0 [ 226.233973][ T7616] ? netlink_deliver_tap+0x2e/0x1b0 [ 226.233986][ T7616] netlink_unicast+0x75b/0x8d0 [ 226.234000][ T7616] netlink_sendmsg+0x805/0xb30 [ 226.234015][ T7616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.234029][ T7616] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 226.234041][ T7616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.234051][ T7616] __sock_sendmsg+0x21c/0x270 [ 226.234066][ T7616] ____sys_sendmsg+0x505/0x830 [ 226.234080][ T7616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.234096][ T7616] ? import_iovec+0x74/0xa0 [ 226.234106][ T7616] ___sys_sendmsg+0x21f/0x2a0 [ 226.234121][ T7616] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.234149][ T7616] ? __fget_files+0x2a/0x420 [ 226.234162][ T7616] ? __fget_files+0x3a0/0x420 [ 226.234179][ T7616] __x64_sys_sendmsg+0x19b/0x260 [ 226.234191][ T7616] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.234207][ T7616] ? __pfx_ksys_write+0x10/0x10 [ 226.234221][ T7616] ? do_syscall_64+0xbe/0x3b0 [ 226.234237][ T7616] do_syscall_64+0xfa/0x3b0 [ 226.234250][ T7616] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.234262][ T7616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.234272][ T7616] ? clear_bhb_loop+0x60/0xb0 [ 226.234283][ T7616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.234292][ T7616] RIP: 0033:0x7f449c18e929 [ 226.234301][ T7616] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.234309][ T7616] RSP: 002b:00007f449d0aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.234320][ T7616] RAX: ffffffffffffffda RBX: 00007f449c3b6080 RCX: 00007f449c18e929 [ 226.234327][ T7616] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000007 [ 226.234333][ T7616] RBP: 00007f449d0aa090 R08: 0000000000000000 R09: 0000000000000000 [ 226.234339][ T7616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.234345][ T7616] R13: 0000000000000000 R14: 00007f449c3b6080 R15: 00007ffdb1ab8708 [ 226.234359][ T7616] [ 226.680177][ T5908] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 226.732727][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 226.809591][ T5886] usb 3-1: USB disconnect, device number 8 [ 226.876833][ T5908] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.909593][ T5908] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 226.944896][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.980508][ T5908] usb 2-1: config 0 descriptor?? [ 226.989125][ T7622] FAULT_INJECTION: forcing a failure. [ 226.989125][ T7622] name failslab, interval 1, probability 0, space 0, times 0 [ 226.996304][ T5908] pwc: Askey VC010 type 2 USB webcam detected. [ 227.003064][ T7622] CPU: 0 UID: 0 PID: 7622 Comm: syz.4.428 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 227.003088][ T7622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 227.003098][ T7622] Call Trace: [ 227.003105][ T7622] [ 227.003112][ T7622] dump_stack_lvl+0x189/0x250 [ 227.003139][ T7622] ? __pfx____ratelimit+0x10/0x10 [ 227.003163][ T7622] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.003185][ T7622] ? __pfx__printk+0x10/0x10 [ 227.003207][ T7622] ? __pfx___might_resched+0x10/0x10 [ 227.003229][ T7622] ? fs_reclaim_acquire+0x7d/0x100 [ 227.003254][ T7622] should_fail_ex+0x414/0x560 [ 227.003279][ T7622] should_failslab+0xa8/0x100 [ 227.003301][ T7622] __kmalloc_noprof+0xcb/0x4f0 [ 227.003320][ T7622] ? smk_write_net6addr+0x163/0x13e0 [ 227.003338][ T7622] ? _copy_from_user+0x94/0xb0 [ 227.003357][ T7622] smk_write_net6addr+0x163/0x13e0 [ 227.003378][ T7622] ? __lock_acquire+0xab9/0xd20 [ 227.003410][ T7622] ? __pfx_smk_write_net6addr+0x10/0x10 [ 227.003428][ T7622] ? rcu_read_lock_any_held+0xb3/0x120 [ 227.003451][ T7622] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 227.003482][ T7622] ? __pfx_smk_write_net6addr+0x10/0x10 [ 227.003505][ T7622] vfs_write+0x27e/0xa90 [ 227.003530][ T7622] ? __pfx_vfs_write+0x10/0x10 [ 227.003550][ T7622] ? __fget_files+0x2a/0x420 [ 227.003574][ T7622] ? __fget_files+0x3a0/0x420 [ 227.003592][ T7622] ? __fget_files+0x2a/0x420 [ 227.003620][ T7622] ksys_write+0x145/0x250 [ 227.003640][ T7622] ? __pfx_ksys_write+0x10/0x10 [ 227.003655][ T7622] ? rcu_is_watching+0x15/0xb0 [ 227.003682][ T7622] ? do_syscall_64+0xbe/0x3b0 [ 227.003708][ T7622] do_syscall_64+0xfa/0x3b0 [ 227.003727][ T7622] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.003748][ T7622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.003763][ T7622] ? clear_bhb_loop+0x60/0xb0 [ 227.003783][ T7622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.003798][ T7622] RIP: 0033:0x7feda3d8e929 [ 227.003813][ T7622] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.003827][ T7622] RSP: 002b:00007feda4cd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 227.003845][ T7622] RAX: ffffffffffffffda RBX: 00007feda3fb5fa0 RCX: 00007feda3d8e929 [ 227.003858][ T7622] RDX: 00000000000000b4 RSI: 0000200000000400 RDI: 0000000000000003 [ 227.003867][ T7622] RBP: 00007feda4cd5090 R08: 0000000000000000 R09: 0000000000000000 [ 227.003877][ T7622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.003887][ T7622] R13: 0000000000000000 R14: 00007feda3fb5fa0 R15: 00007fffac91b7d8 [ 227.003914][ T7622] [ 227.119865][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 227.320597][ C0] Unknown status report in ack skb [ 227.421711][ T9] usb 1-1: device descriptor read/64, error -71 [ 227.532627][ T5908] pwc: recv_control_msg error -32 req 02 val 2b00 [ 227.540141][ T5908] pwc: recv_control_msg error -32 req 02 val 2700 [ 227.550838][ T5908] pwc: recv_control_msg error -32 req 02 val 2c00 [ 227.562305][ T5908] pwc: recv_control_msg error -32 req 04 val 1000 [ 227.676562][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 227.779261][ T7614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.854417][ T7614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.895104][ T9] usb 1-1: device descriptor read/64, error -71 [ 228.065494][ T9] usb usb1-port1: attempt power cycle [ 228.114514][ T5908] pwc: recv_control_msg error -71 req 04 val 1400 [ 228.324649][ T5908] pwc: recv_control_msg error -71 req 02 val 2000 [ 228.426617][ T5908] pwc: recv_control_msg error -71 req 02 val 2100 [ 228.452817][ T5908] pwc: recv_control_msg error -71 req 04 val 1500 [ 228.464464][ T5908] pwc: recv_control_msg error -71 req 02 val 2500 [ 228.474097][ T5908] pwc: recv_control_msg error -71 req 02 val 2400 [ 228.484914][ T5908] pwc: recv_control_msg error -71 req 02 val 2600 [ 228.545200][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 228.630127][ T9] usb 1-1: device descriptor read/8, error -71 [ 228.716639][ T5908] pwc: recv_control_msg error -71 req 02 val 2900 [ 228.723549][ T5908] pwc: recv_control_msg error -71 req 02 val 2800 [ 228.730863][ T5908] pwc: recv_control_msg error -71 req 04 val 1100 [ 228.738633][ T5908] pwc: recv_control_msg error -71 req 04 val 1200 [ 228.748951][ T5908] pwc: Registered as video103. [ 228.766496][ T5908] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 228.954791][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 228.975647][ T9] usb 1-1: device descriptor read/8, error -71 [ 229.086172][ T9] usb usb1-port1: unable to enumerate USB device [ 229.869172][ T5908] usb 2-1: USB disconnect, device number 9 [ 230.672704][ T7654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.437'. [ 231.243633][ T7657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.438'. [ 231.265189][ T30] audit: type=1326 audit(1750660617.645:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7645 comm="syz.1.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3576d8e929 code=0x7ffc0000 [ 231.473608][ T30] audit: type=1326 audit(1750660617.645:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7645 comm="syz.1.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3576d8e929 code=0x7ffc0000 [ 231.549716][ T30] audit: type=1326 audit(1750660617.645:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7645 comm="syz.1.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f3576d8e929 code=0x7ffc0000 [ 231.633741][ T30] audit: type=1326 audit(1750660617.945:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7645 comm="syz.1.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3576d8e929 code=0x7ffc0000 [ 231.663994][ T30] audit: type=1326 audit(1750660617.945:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7645 comm="syz.1.436" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3576d8e929 code=0x7ffc0000 [ 232.134670][ T13] Bluetooth: Error in BCSP hdr checksum [ 232.400850][ T3461] Bluetooth: Error in BCSP hdr checksum [ 232.560339][ T5939] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 232.777312][ T3560] Bluetooth: Error in BCSP hdr checksum [ 232.925120][ T5939] usb 5-1: Using ep0 maxpacket: 16 [ 232.952511][ C1] Unknown status report in ack skb [ 232.959655][ T5939] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.998194][ T5939] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 233.031599][ T5939] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 233.044602][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 233.053279][ T5939] usb 5-1: SerialNumber: syz [ 233.682313][ T9] usb 5-1: USB disconnect, device number 11 [ 233.819150][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 233.826698][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 234.416578][ T24] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 234.675245][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 234.688847][ T7693] fuse: Unknown parameter 'use00000000000000000000' [ 234.707841][ T24] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 234.730455][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 234.791337][ T24] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.836448][ T24] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.883387][ T24] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.916192][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.961061][ T3560] Bluetooth: Error in BCSP hdr checksum [ 235.068281][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.449'. [ 235.188939][ T24] usb 3-1: usb_control_msg returned -32 [ 235.194582][ T24] usbtmc 3-1:16.0: can't read capabilities [ 235.216772][ T3441] Bluetooth: Error in BCSP hdr checksum [ 235.242164][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.446'. [ 235.337354][ C0] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 235.430958][ T24] usb 3-1: USB disconnect, device number 9 [ 235.477528][ T3527] Bluetooth: Error in BCSP hdr checksum [ 235.912132][ T7708] netlink: 12 bytes leftover after parsing attributes in process `syz.0.453'. [ 236.456754][ T7713] syz.2.454: attempt to access beyond end of device [ 236.456754][ T7713] loop2: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 236.470056][ T7713] hfsplus: unable to find HFS+ superblock [ 236.489408][ T7713] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 236.501464][ T7713] cramfs: wrong magic [ 236.725187][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 236.736102][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 237.782406][ T7725] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 237.790275][ T7725] cramfs: wrong magic [ 237.822914][ T7724] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 237.955166][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 238.441027][ T7724] cramfs: wrong magic [ 238.623912][ T7733] fuse: Unknown parameter 'use00000000000000000000' [ 238.715338][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 238.749823][ T24] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 238.778164][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.807898][ T24] usb 2-1: config 0 has no interface number 0 [ 238.824502][ T24] usb 2-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.5b [ 238.968960][ T7738] syz.0.463 uses obsolete (PF_INET,SOCK_PACKET) [ 239.534212][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.572479][ T24] usb 2-1: config 0 descriptor?? [ 239.754287][ T24] usb 2-1: Found UVC 0.00 device (0bd3:0555) [ 239.816293][ T24] usb 2-1: No valid video chain found. [ 240.820787][ T5827] Bluetooth: hci4: command 0x0406 tx timeout [ 240.901261][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 241.595443][ T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 243.381560][ T5908] usb 2-1: USB disconnect, device number 10 [ 244.042224][ T24] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 244.071663][ T24] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 244.138202][ T24] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 244.161163][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.344234][ T7749] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 244.368335][ T24] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 244.744204][ T7772] netlink: 12 bytes leftover after parsing attributes in process `syz.1.469'. [ 245.094802][ T5939] usb 5-1: USB disconnect, device number 12 [ 246.534476][ T7786] fuse: Unknown parameter 'user_i00000000000000000000' [ 246.798323][ T7776] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.471'. [ 246.834579][ T51] Bluetooth: hci1: unexpected event for opcode 0x1000 [ 248.140194][ T7802] netlink: 12 bytes leftover after parsing attributes in process `syz.0.478'. [ 248.660450][ T7811] netlink: 16 bytes leftover after parsing attributes in process `syz.2.480'. [ 250.125349][ T5939] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 250.453210][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.520263][ T5939] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 250.654844][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.956777][ T51] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 250.966964][ T51] Bluetooth: hci1: Injecting HCI hardware error event [ 250.973612][ T5939] usb 5-1: config 0 descriptor?? [ 250.975880][ T51] Bluetooth: hci1: hardware error 0x00 [ 251.461029][ T5939] logitech 0003:046D:C50C.0007: unbalanced delimiter at end of report description [ 251.488529][ T5939] logitech 0003:046D:C50C.0007: parse failed [ 251.494660][ T5939] logitech 0003:046D:C50C.0007: probe with driver logitech failed with error -22 [ 252.008816][ T7817] tc_dump_action: action bad kind [ 252.263007][ T7853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.490'. [ 252.416734][ T13] Bluetooth: Error in BCSP hdr checksum [ 252.475427][ T5908] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 252.645651][ T5908] usb 1-1: Using ep0 maxpacket: 16 [ 252.683155][ T5908] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.755736][ T5908] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 252.846007][ T5908] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.861551][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 252.903814][ T5908] usb 1-1: SerialNumber: syz [ 253.045103][ T51] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 253.249299][ T5939] usb 5-1: USB disconnect, device number 13 [ 253.336534][ T7863] netlink: 16 bytes leftover after parsing attributes in process `syz.2.493'. [ 254.158102][ T7864] netlink: 12 bytes leftover after parsing attributes in process `syz.1.494'. [ 254.216234][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 255.328906][ T9] usb 1-1: USB disconnect, device number 16 [ 255.689303][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.695912][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.674906][ T5908] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 257.035063][ T5908] usb 2-1: Using ep0 maxpacket: 32 [ 257.046697][ T5908] usb 2-1: config 1 has an invalid interface number: 242 but max is 0 [ 257.065884][ T5908] usb 2-1: config 1 has no interface number 0 [ 257.090990][ T5908] usb 2-1: config 1 interface 242 has no altsetting 0 [ 257.118291][ T5908] usb 2-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 257.138670][ T5908] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.340412][ T5908] usb 2-1: Product: syz [ 257.372575][ T5908] usb 2-1: Manufacturer: syz [ 257.421405][ T5908] usb 2-1: SerialNumber: syz [ 257.965260][ T5908] aqc111 2-1:1.242: probe with driver aqc111 failed with error -71 [ 258.228024][ T5908] usb 2-1: USB disconnect, device number 11 [ 260.195265][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 260.375513][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 260.387651][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 260.905028][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 260.927328][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 260.939667][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 260.958160][ T9] usb 3-1: SerialNumber: syz [ 263.389250][ T5908] usb 3-1: USB disconnect, device number 10 [ 263.526059][ T7967] fuse: Unknown parameter 'user_i00000000000000000000' [ 267.495418][ T24] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 267.893037][ T5900] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 268.047517][ T24] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 268.075056][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 268.117522][ T24] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 268.132127][ T5900] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.169521][ T24] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 268.185047][ T5900] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 268.247766][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.296306][ T5900] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 268.358362][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 268.435988][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.536'. [ 268.536484][ T8001] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 268.567686][ T5900] usb 5-1: SerialNumber: syz [ 268.730628][ T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 271.923399][ T5908] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 271.979869][ T2150] usb 5-1: USB disconnect, device number 14 [ 272.067875][ T24] usb 2-1: USB disconnect, device number 12 [ 272.119031][ T8026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.538'. [ 274.234341][ T6071] udevd[6071]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.431356][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 277.305182][ T5887] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 277.475275][ T5887] usb 3-1: Using ep0 maxpacket: 16 [ 277.496229][ T5887] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.553730][ T8077] syz.0.552: attempt to access beyond end of device [ 277.553730][ T8077] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 277.567775][ T8077] hfsplus: unable to find HFS+ superblock [ 277.586223][ T8077] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 277.595986][ T8077] cramfs: wrong magic [ 278.440051][ T5887] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 278.457060][ T5887] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 278.475016][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 278.483887][ T5887] usb 3-1: SerialNumber: syz [ 278.493722][ T24] usb 2-1: device descriptor read/all, error -71 [ 278.632711][ T5887] usb 3-1: can't set config #1, error -71 [ 278.655057][ T5887] usb 3-1: USB disconnect, device number 11 [ 278.786044][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.553'. [ 278.875080][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 278.918135][ T3441] Bluetooth: Error in BCSP hdr checksum [ 279.638148][ T3560] Bluetooth: Error in BCSP hdr checksum [ 279.643837][ T3560] Bluetooth: Error in BCSP hdr checksum [ 279.776954][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 279.797709][ T3461] Bluetooth: Error in BCSP hdr checksum [ 279.978824][ T3461] Bluetooth: Error in BCSP hdr checksum [ 280.001073][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 280.001797][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.555'. [ 280.056431][ T3001] Bluetooth: Error in BCSP hdr checksum [ 280.088760][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 280.551603][ T13] Bluetooth: Error in BCSP hdr checksum [ 280.557312][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 280.595969][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 280.628369][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 280.650884][ T5820] Bluetooth: hci5: command 0x1003 tx timeout [ 280.657504][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 280.674333][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.676269][ T8102] FAULT_INJECTION: forcing a failure. [ 280.676269][ T8102] name failslab, interval 1, probability 0, space 0, times 0 [ 280.736075][ T51] Bluetooth: hci6: command 0x1003 tx timeout [ 280.744471][ T5827] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 280.765533][ T8102] CPU: 0 UID: 0 PID: 8102 Comm: syz.2.560 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 280.765559][ T8102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.765569][ T8102] Call Trace: [ 280.765576][ T8102] [ 280.765584][ T8102] dump_stack_lvl+0x189/0x250 [ 280.765617][ T8102] ? __pfx____ratelimit+0x10/0x10 [ 280.765640][ T8102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 280.765662][ T8102] ? __pfx__printk+0x10/0x10 [ 280.765686][ T8102] ? __pfx___might_resched+0x10/0x10 [ 280.765707][ T8102] ? fs_reclaim_acquire+0x7d/0x100 [ 280.765734][ T8102] should_fail_ex+0x414/0x560 [ 280.765759][ T8102] should_failslab+0xa8/0x100 [ 280.765782][ T8102] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 280.765802][ T8102] ? smk_parse_smack+0x1b1/0x1f0 [ 280.765817][ T8102] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.765843][ T8102] kstrndup+0x80/0x160 [ 280.765867][ T8102] smk_parse_smack+0x1b1/0x1f0 [ 280.765887][ T8102] smk_fill_rule+0x146/0x630 [ 280.765916][ T8102] smk_parse_long_rule+0xbc3/0xee0 [ 280.765941][ T8102] ? __pfx_smk_parse_long_rule+0x10/0x10 [ 280.765965][ T8102] ? _copy_from_user+0x94/0xb0 [ 280.765987][ T8102] smk_write_access2+0x75/0x180 [ 280.766009][ T8102] ? __pfx_smk_write_access2+0x10/0x10 [ 280.766031][ T8102] vfs_write+0x27e/0xa90 [ 280.766064][ T8102] ? __pfx_vfs_write+0x10/0x10 [ 280.766090][ T8102] ? __fget_files+0x2a/0x420 [ 280.766115][ T8102] ? __fget_files+0x3a0/0x420 [ 280.766134][ T8102] ? __fget_files+0x2a/0x420 [ 280.766163][ T8102] ksys_write+0x145/0x250 [ 280.766184][ T8102] ? __pfx_ksys_write+0x10/0x10 [ 280.766207][ T8102] ? rcu_is_watching+0x15/0xb0 [ 280.766235][ T8102] ? do_syscall_64+0xbe/0x3b0 [ 280.766262][ T8102] do_syscall_64+0xfa/0x3b0 [ 280.766282][ T8102] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.766303][ T8102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.766320][ T8102] ? clear_bhb_loop+0x60/0xb0 [ 280.766340][ T8102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.766356][ T8102] RIP: 0033:0x7f393e78e929 [ 280.766371][ T8102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.766385][ T8102] RSP: 002b:00007f393f650038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 280.766403][ T8102] RAX: ffffffffffffffda RBX: 00007f393e9b5fa0 RCX: 00007f393e78e929 [ 280.766416][ T8102] RDX: 0000000000000065 RSI: 0000200000000040 RDI: 0000000000000003 [ 280.766426][ T8102] RBP: 00007f393f650090 R08: 0000000000000000 R09: 0000000000000000 [ 280.766436][ T8102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 280.766446][ T8102] R13: 0000000000000000 R14: 00007f393e9b5fa0 R15: 00007ffc2f07bf88 [ 280.766475][ T8102] [ 281.103168][ T9] usb 1-1: usb_control_msg returned -32 [ 281.108942][ T9] usbtmc 1-1:16.0: can't read capabilities [ 281.210150][ T8105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.559'. [ 281.958408][ T30] audit: type=1326 audit(1750660668.385:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8103 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 282.077039][ T30] audit: type=1326 audit(1750660668.385:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8103 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 282.106312][ T8114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.554'. [ 282.461714][ T13] Bluetooth: Error in BCSP hdr checksum [ 282.506124][ T30] audit: type=1326 audit(1750660668.945:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8103 comm="syz.4.561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 282.650337][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 282.662364][ T5908] usb 1-1: USB disconnect, device number 17 [ 282.739355][ T8123] syz.4.565: attempt to access beyond end of device [ 282.739355][ T8123] loop4: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 282.752781][ T8123] hfsplus: unable to find HFS+ superblock [ 282.770173][ T8123] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 282.779657][ T8123] cramfs: wrong magic [ 283.088800][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 283.325075][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 283.410382][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.537221][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 283.786846][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 283.857613][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 283.915013][ T24] usb 2-1: SerialNumber: syz [ 284.095329][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 284.195190][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 284.876227][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 285.570231][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 285.712664][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 285.855977][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 285.972464][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.282887][ T5939] usb 2-1: USB disconnect, device number 15 [ 286.330908][ T8131] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 286.688501][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 287.104144][ T8145] netlink: 8 bytes leftover after parsing attributes in process `syz.4.569'. [ 288.984269][ T8159] syz.3.570: attempt to access beyond end of device [ 288.984269][ T8159] loop3: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 288.997786][ T8159] hfsplus: unable to find HFS+ superblock [ 289.014132][ T8159] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 289.024665][ T8159] cramfs: wrong magic [ 289.625047][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 289.644314][ T30] audit: type=1326 audit(1750660674.905:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8154 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 289.679393][ T24] usb 3-1: USB disconnect, device number 12 [ 289.773982][ T30] audit: type=1326 audit(1750660674.905:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8154 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 289.802582][ T30] audit: type=1326 audit(1750660674.905:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8154 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 289.960756][ T30] audit: type=1326 audit(1750660674.905:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8154 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 290.081912][ T8164] netlink: 12 bytes leftover after parsing attributes in process `syz.4.574'. [ 290.290047][ T30] audit: type=1326 audit(1750660674.905:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8154 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 290.587781][ T30] audit: type=1326 audit(1750660674.905:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8154 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 291.091945][ T8172] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 291.099823][ T8172] cramfs: wrong magic [ 291.152232][ T30] audit: type=1326 audit(1750660674.915:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8154 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 291.729938][ T30] audit: type=1326 audit(1750660674.915:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8154 comm="syz.4.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feda3d8e929 code=0x7ffc0000 [ 291.753735][ T5887] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 291.890169][ T8162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.573'. [ 292.015114][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 292.021853][ T5887] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 292.042043][ T5887] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 292.083648][ T5887] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 292.126927][ T5887] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.146703][ T12] Bluetooth: Error in BCSP hdr checksum [ 292.322822][ T5887] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 292.368123][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.397187][ T12] Bluetooth: Error in BCSP hdr checksum [ 292.397989][ T30] audit: type=1326 audit(1750660678.795:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8187 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393e78e929 code=0x7ffc0000 [ 292.655386][ T3001] Bluetooth: Error in BCSP hdr checksum [ 292.671110][ T30] audit: type=1326 audit(1750660678.825:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8187 comm="syz.2.581" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393e78e929 code=0x7ffc0000 [ 292.837006][ T8194] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 292.847098][ T8194] cramfs: wrong magic [ 292.863122][ T5887] usb 4-1: usb_control_msg returned -32 [ 292.877368][ T8176] netlink: 16 bytes leftover after parsing attributes in process `syz.3.578'. [ 293.614206][ T5887] usbtmc 4-1:16.0: can't read capabilities [ 293.789383][ T5887] usb 4-1: USB disconnect, device number 12 [ 293.925425][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 293.937273][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 294.465560][ T2150] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 294.633277][ T8210] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 294.643295][ T8210] cramfs: wrong magic [ 294.719881][ T2150] usb 2-1: Using ep0 maxpacket: 32 [ 294.859425][ T2150] usb 2-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config [ 294.997122][ T2150] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 295.169760][ T2150] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 295.326790][ T2150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.437446][ T2150] usb 2-1: Product: syz [ 295.490215][ T2150] usb 2-1: Manufacturer: syz [ 295.555512][ T2150] usb 2-1: SerialNumber: syz [ 295.714670][ T2150] usb 2-1: config 0 descriptor?? [ 296.259771][ T8217] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.590'. [ 296.593394][ T8228] netlink: 36 bytes leftover after parsing attributes in process `syz.1.584'. [ 296.972575][ T758] Bluetooth: Error in BCSP hdr checksum [ 297.165597][ T3001] Bluetooth: Error in BCSP hdr checksum [ 298.198870][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 298.198905][ T30] audit: type=1326 audit(1750660684.015:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8232 comm="syz.2.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393e78e929 code=0x7ffc0000 [ 298.226621][ C0] vkms_vblank_simulate: vblank timer overrun [ 298.289219][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 298.350363][ T8242] netlink: 48 bytes leftover after parsing attributes in process `syz.2.596'. [ 298.419438][ T30] audit: type=1326 audit(1750660684.015:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8232 comm="syz.2.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393e78e929 code=0x7ffc0000 [ 298.443644][ T9] usb 2-1: USB disconnect, device number 16 [ 298.536191][ T30] audit: type=1326 audit(1750660684.015:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8232 comm="syz.2.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f393e78e929 code=0x7ffc0000 [ 298.558350][ T30] audit: type=1326 audit(1750660684.025:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8232 comm="syz.2.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393e78e929 code=0x7ffc0000 [ 298.580063][ T30] audit: type=1326 audit(1750660684.025:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8232 comm="syz.2.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393e78e929 code=0x7ffc0000 [ 298.601785][ T30] audit: type=1326 audit(1750660684.025:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8232 comm="syz.2.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f393e78e929 code=0x7ffc0000 [ 298.643909][ T30] audit: type=1326 audit(1750660684.025:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8232 comm="syz.2.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393e78e929 code=0x7ffc0000 [ 298.832260][ T30] audit: type=1326 audit(1750660684.025:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8232 comm="syz.2.594" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f393e78e929 code=0x7ffc0000 [ 299.834683][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 301.142615][ T8271] syz.0.602: attempt to access beyond end of device [ 301.142615][ T8271] loop0: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 301.157681][ T8271] hfsplus: unable to find HFS+ superblock [ 301.182656][ T8271] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 301.194825][ T8271] cramfs: wrong magic [ 301.525520][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 301.531606][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 301.651359][ T5827] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 301.803039][ T8277] fuse: Unknown parameter '0x0000000000000003' [ 302.181564][ T2150] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 303.068177][ T2150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 303.072979][ T8294] netlink: 2384 bytes leftover after parsing attributes in process `syz.3.612'. [ 303.295273][ T2150] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 303.334507][ T2150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.352010][ T2150] usb 1-1: config 0 descriptor?? [ 303.358729][ T8280] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 303.515271][ T8297] lo speed is unknown, defaulting to 1000 [ 303.522135][ T8297] lo speed is unknown, defaulting to 1000 [ 303.538361][ T8297] lo speed is unknown, defaulting to 1000 [ 303.565649][ T8297] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 303.612856][ T8297] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 303.695757][ T5827] Bluetooth: hci6: command 0x1003 tx timeout [ 303.716955][ T8297] lo speed is unknown, defaulting to 1000 [ 303.732315][ T8297] lo speed is unknown, defaulting to 1000 [ 303.747035][ T8297] lo speed is unknown, defaulting to 1000 [ 303.761563][ T8297] lo speed is unknown, defaulting to 1000 [ 303.776686][ T8297] lo speed is unknown, defaulting to 1000 [ 304.330132][ T51] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 305.314572][ T2150] elan 0003:04F3:0755.0008: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 305.984448][ T8312] syz.1.617: attempt to access beyond end of device [ 305.984448][ T8312] loop1: rw=2048, sector=2, nr_sectors = 1 limit=0 [ 305.997673][ T8312] hfsplus: unable to find HFS+ superblock [ 306.020941][ T8312] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 306.031068][ T8312] cramfs: wrong magic [ 306.545520][ T2150] usb 1-1: reset full-speed USB device number 18 using dummy_hcd [ 306.572305][ T8319] fuse: Unknown parameter '0x0000000000000003' [ 306.716866][ T8302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.793184][ T30] audit: type=1326 audit(1750660693.235:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8320 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dd98e929 code=0x7ffc0000 [ 306.973990][ T3461] Bluetooth: Error in BCSP hdr checksum [ 307.041262][ T8302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.092071][ T30] audit: type=1326 audit(1750660693.235:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8320 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dd98e929 code=0x7ffc0000 [ 307.229316][ T3001] Bluetooth: Error in BCSP hdr checksum [ 307.315860][ T30] audit: type=1326 audit(1750660693.235:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8320 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f71dd98e929 code=0x7ffc0000 [ 307.388269][ T30] audit: type=1326 audit(1750660693.825:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8320 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dd98e929 code=0x7ffc0000 [ 307.409896][ T30] audit: type=1326 audit(1750660693.825:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8320 comm="syz.3.619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dd98e929 code=0x7ffc0000 [ 308.647292][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 308.735165][ T5827] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 308.735501][ T51] Bluetooth: hci6: command 0x1003 tx timeout [ 308.848247][ T30] audit: type=1326 audit(1750660695.285:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8334 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c18e929 code=0x7ffc0000 [ 308.907290][ T5908] usb 1-1: USB disconnect, device number 18 [ 309.158964][ T30] audit: type=1326 audit(1750660695.285:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8334 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c18e929 code=0x7ffc0000 [ 309.358391][ T30] audit: type=1326 audit(1750660695.285:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8334 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=162 compat=0 ip=0x7f449c18e929 code=0x7ffc0000 [ 309.527078][ T8347] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(19) [ 309.533879][ T8347] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 309.565036][ T30] audit: type=1326 audit(1750660695.995:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8334 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c18e929 code=0x7ffc0000 [ 309.616194][ T8347] vhci_hcd vhci_hcd.0: Device attached [ 309.618927][ T8348] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(22) [ 309.628404][ T8348] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 309.755380][ T8348] vhci_hcd vhci_hcd.0: Device attached [ 309.765424][ T30] audit: type=1326 audit(1750660696.005:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8334 comm="syz.0.626" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449c18e929 code=0x7ffc0000 [ 309.786896][ T9] vhci_hcd: vhci_device speed not set [ 309.893816][ T9] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 310.236106][ T8347] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 310.259051][ T8348] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(25) [ 310.265695][ T8348] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 310.373398][ T8366] netlink: 'syz.4.630': attribute type 10 has an invalid length. [ 310.381358][ T8366] netlink: 40 bytes leftover after parsing attributes in process `syz.4.630'. [ 310.442189][ T8366] team0: Port device geneve0 added [ 310.869246][ T8348] vhci_hcd vhci_hcd.0: Device attached [ 310.936661][ T8359] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(28) [ 310.943302][ T8359] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 311.176858][ T8359] vhci_hcd vhci_hcd.0: Device attached [ 311.484662][ T8360] vhci_hcd: connection closed [ 311.545631][ T758] vhci_hcd: stop threads [ 311.549497][ T8364] vhci_hcd: connection closed [ 311.551271][ T758] vhci_hcd: release socket [ 311.577862][ T8349] vhci_hcd: connection reset by peer [ 311.583448][ T8354] vhci_hcd: connection closed [ 311.593009][ T8371] fuse: Unknown parameter '0x0000000000000003' [ 311.619039][ T758] vhci_hcd: disconnect device [ 311.627708][ T758] vhci_hcd: stop threads [ 311.631990][ T758] vhci_hcd: release socket [ 311.637458][ T758] vhci_hcd: disconnect device [ 311.646984][ T758] vhci_hcd: stop threads [ 311.651263][ T758] vhci_hcd: release socket [ 311.677295][ T758] vhci_hcd: disconnect device [ 311.701270][ T758] vhci_hcd: stop threads [ 311.714685][ T758] vhci_hcd: release socket [ 311.738011][ T758] vhci_hcd: disconnect device [ 311.890513][ T5939] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 312.129735][ T5939] usb 5-1: Using ep0 maxpacket: 8 [ 312.163100][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 312.163266][ T30] audit: type=1326 audit(1750660698.535:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8377 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dd98e929 code=0x7ffc0000 [ 312.185243][ T5939] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 312.225366][ T5939] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 312.233967][ T30] audit: type=1326 audit(1750660698.565:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8377 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dd98e929 code=0x7ffc0000 [ 312.400446][ T5939] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 312.410774][ T30] audit: type=1326 audit(1750660698.655:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8377 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f71dd98d290 code=0x7ffc0000 [ 312.410819][ T30] audit: type=1326 audit(1750660698.665:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8377 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dd98e929 code=0x7ffc0000 [ 312.464726][ T30] audit: type=1326 audit(1750660698.665:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8377 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dd98e929 code=0x7ffc0000 [ 312.508590][ T30] audit: type=1326 audit(1750660698.665:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8377 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f71dd98e929 code=0x7ffc0000 [ 312.530253][ T30] audit: type=1326 audit(1750660698.665:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8377 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dd98e929 code=0x7ffc0000 [ 312.618254][ T5939] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 312.631830][ T5939] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 312.641026][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.653849][ T30] audit: type=1326 audit(1750660698.665:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8377 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dd98e929 code=0x7ffc0000 [ 312.684260][ T30] audit: type=1326 audit(1750660698.665:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8377 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f71dd98e929 code=0x7ffc0000 [ 313.202878][ T30] audit: type=1326 audit(1750660698.665:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8377 comm="syz.3.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71dd98e929 code=0x7ffc0000 [ 313.277546][ T5939] usb 5-1: usb_control_msg returned -32 [ 313.300879][ T5939] usbtmc 5-1:16.0: can't read capabilities [ 313.458802][ T5939] usb 5-1: USB disconnect, device number 15 [ 314.157111][ T8402] netlink: 12 bytes leftover after parsing attributes in process `syz.3.640'. [ 314.687116][ T8412] FAULT_INJECTION: forcing a failure. [ 314.687116][ T8412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.687817][ T8412] [ 314.687823][ T8412] ====================================================== [ 314.687829][ T8412] WARNING: possible circular locking dependency detected [ 314.687839][ T8412] 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 Not tainted [ 314.687847][ T8412] ------------------------------------------------------ [ 314.687853][ T8412] syz.4.646/8412 is trying to acquire lock: [ 314.687859][ T8412] ffffffff8e133080 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 314.687888][ T8412] [ 314.687888][ T8412] but task is already holding lock: [ 314.687891][ T8412] ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 314.687915][ T8412] [ 314.687915][ T8412] which lock already depends on the new lock. [ 314.687915][ T8412] [ 314.687919][ T8412] [ 314.687919][ T8412] the existing dependency chain (in reverse order) is: [ 314.687922][ T8412] [ 314.687922][ T8412] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 314.687934][ T8412] lock_acquire+0x120/0x360 [ 314.687945][ T8412] _raw_spin_lock_nested+0x32/0x50 [ 314.687958][ T8412] raw_spin_rq_lock_nested+0x2a/0x140 [ 314.687969][ T8412] task_rq_lock+0xbc/0x470 [ 314.687980][ T8412] cgroup_move_task+0x9a/0x590 [ 314.687992][ T8412] css_set_move_task+0x658/0x9e0 [ 314.688001][ T8412] cgroup_post_fork+0x1ef/0x790 [ 314.688008][ T8412] copy_process+0x3862/0x3c00 [ 314.688020][ T8412] kernel_clone+0x224/0x7f0 [ 314.688028][ T8412] user_mode_thread+0xdd/0x140 [ 314.688035][ T8412] rest_init+0x23/0x300 [ 314.688044][ T8412] start_kernel+0x47d/0x500 [ 314.688055][ T8412] x86_64_start_reservations+0x24/0x30 [ 314.688064][ T8412] x86_64_start_kernel+0x143/0x1c0 [ 314.688071][ T8412] common_startup_64+0x13e/0x147 [ 314.688080][ T8412] [ 314.688080][ T8412] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 314.688092][ T8412] lock_acquire+0x120/0x360 [ 314.688102][ T8412] _raw_spin_lock_irqsave+0xa7/0xf0 [ 314.688112][ T8412] try_to_wake_up+0x6e/0x1290 [ 314.688120][ T8412] __wake_up_common_lock+0x137/0x1f0 [ 314.688129][ T8412] tty_port_default_wakeup+0xa2/0xf0 [ 314.688139][ T8412] serial8250_tx_chars+0x72e/0x970 [ 314.688152][ T8412] serial8250_handle_irq+0x633/0xbb0 [ 314.688165][ T8412] serial8250_default_handle_irq+0xbf/0x1b0 [ 314.688174][ T8412] serial8250_interrupt+0xa2/0x1d0 [ 314.688185][ T8412] __handle_irq_event_percpu+0x28c/0x980 [ 314.688194][ T8412] handle_irq_event+0x8b/0x1e0 [ 314.688202][ T8412] handle_edge_irq+0x267/0x9c0 [ 314.688214][ T8412] __common_interrupt+0x140/0x250 [ 314.688225][ T8412] common_interrupt+0xb6/0xe0 [ 314.688233][ T8412] asm_common_interrupt+0x26/0x40 [ 314.688241][ T8412] pv_native_safe_halt+0x13/0x20 [ 314.688253][ T8412] default_idle+0x13/0x20 [ 314.688260][ T8412] default_idle_call+0x74/0xb0 [ 314.688267][ T8412] do_idle+0x1e8/0x510 [ 314.688279][ T8412] cpu_startup_entry+0x44/0x60 [ 314.688291][ T8412] rest_init+0x2de/0x300 [ 314.688299][ T8412] start_kernel+0x47d/0x500 [ 314.688309][ T8412] x86_64_start_reservations+0x24/0x30 [ 314.688318][ T8412] x86_64_start_kernel+0x143/0x1c0 [ 314.688325][ T8412] common_startup_64+0x13e/0x147 [ 314.688333][ T8412] [ 314.688333][ T8412] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 314.688346][ T8412] lock_acquire+0x120/0x360 [ 314.688356][ T8412] _raw_spin_lock_irqsave+0xa7/0xf0 [ 314.688366][ T8412] __wake_up_common_lock+0x2f/0x1f0 [ 314.688375][ T8412] tty_port_default_wakeup+0xa2/0xf0 [ 314.688383][ T8412] serial8250_tx_chars+0x72e/0x970 [ 314.688396][ T8412] serial8250_handle_irq+0x633/0xbb0 [ 314.688408][ T8412] serial8250_default_handle_irq+0xbf/0x1b0 [ 314.688417][ T8412] serial8250_interrupt+0xa2/0x1d0 [ 314.688428][ T8412] __handle_irq_event_percpu+0x28c/0x980 [ 314.688437][ T8412] handle_irq_event+0x8b/0x1e0 [ 314.688444][ T8412] handle_edge_irq+0x267/0x9c0 [ 314.688457][ T8412] __common_interrupt+0x140/0x250 [ 314.688466][ T8412] common_interrupt+0xb6/0xe0 [ 314.688474][ T8412] asm_common_interrupt+0x26/0x40 [ 314.688482][ T8412] _raw_spin_unlock_irqrestore+0xa8/0x110 [ 314.688492][ T8412] uart_port_unlock_deref+0x111/0x2f0 [ 314.688505][ T8412] uart_write+0xe8/0x130 [ 314.688517][ T8412] n_tty_write+0xd32/0x11d0 [ 314.688526][ T8412] file_tty_write+0x503/0x990 [ 314.688538][ T8412] vfs_write+0x548/0xa90 [ 314.688547][ T8412] ksys_write+0x145/0x250 [ 314.688556][ T8412] do_syscall_64+0xfa/0x3b0 [ 314.688568][ T8412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.688576][ T8412] [ 314.688576][ T8412] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 314.688588][ T8412] lock_acquire+0x120/0x360 [ 314.688598][ T8412] _raw_spin_lock_irqsave+0xa7/0xf0 [ 314.688608][ T8412] serial8250_console_write+0x17e/0x1ba0 [ 314.688616][ T8412] console_flush_all+0x728/0xc40 [ 314.688624][ T8412] console_unlock+0xc4/0x270 [ 314.688636][ T8412] vprintk_emit+0x5b7/0x7a0 [ 314.688648][ T8412] _printk+0xcf/0x120 [ 314.688656][ T8412] register_console+0xa8b/0xf90 [ 314.688663][ T8412] univ8250_console_init+0x52/0x90 [ 314.688677][ T8412] console_init+0x1a1/0x670 [ 314.688690][ T8412] start_kernel+0x2cc/0x500 [ 314.688700][ T8412] x86_64_start_reservations+0x24/0x30 [ 314.688708][ T8412] x86_64_start_kernel+0x143/0x1c0 [ 314.688716][ T8412] common_startup_64+0x13e/0x147 [ 314.688724][ T8412] [ 314.688724][ T8412] -> #0 (console_owner){-.-.}-{0:0}: [ 314.688740][ T8412] validate_chain+0xb9b/0x2140 [ 314.688753][ T8412] __lock_acquire+0xab9/0xd20 [ 314.688763][ T8412] lock_acquire+0x120/0x360 [ 314.688772][ T8412] console_flush_all+0x6d2/0xc40 [ 314.688780][ T8412] console_unlock+0xc4/0x270 [ 314.688792][ T8412] vprintk_emit+0x5b7/0x7a0 [ 314.688804][ T8412] _printk+0xcf/0x120 [ 314.688811][ T8412] should_fail_ex+0x3f5/0x560 [ 314.688820][ T8412] strncpy_from_user+0x36/0x290 [ 314.688829][ T8412] strncpy_from_user_nofault+0x72/0x150 [ 314.688841][ T8412] bpf_probe_read_compat_str+0xe2/0x180 [ 314.688854][ T8412] bpf_prog_b0c6ebf0b810dd9c+0x5a/0x60 [ 314.688861][ T8412] bpf_trace_run2+0x284/0x4b0 [ 314.688869][ T8412] __bpf_trace_tlb_flush+0xf5/0x150 [ 314.688880][ T8412] trace_tlb_flush+0x115/0x140 [ 314.688888][ T8412] switch_mm_irqs_off+0x53e/0x7a0 [ 314.688895][ T8412] __schedule+0x1070/0x4cb0 [ 314.688905][ T8412] preempt_schedule_common+0x83/0xd0 [ 314.688916][ T8412] preempt_schedule+0xae/0xc0 [ 314.688927][ T8412] preempt_schedule_thunk+0x16/0x30 [ 314.688937][ T8412] __mutex_lock+0x344/0xe80 [ 314.688949][ T8412] __se_sys_fsconfig+0x758/0x8d0 [ 314.688963][ T8412] do_syscall_64+0xfa/0x3b0 [ 314.688975][ T8412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.688983][ T8412] [ 314.688983][ T8412] other info that might help us debug this: [ 314.688983][ T8412] [ 314.688986][ T8412] Chain exists of: [ 314.688986][ T8412] console_owner --> &p->pi_lock --> &rq->__lock [ 314.688986][ T8412] [ 314.689001][ T8412] Possible unsafe locking scenario: [ 314.689001][ T8412] [ 314.689004][ T8412] CPU0 CPU1 [ 314.689008][ T8412] ---- ---- [ 314.689010][ T8412] lock(&rq->__lock); [ 314.689016][ T8412] lock(&p->pi_lock); [ 314.689023][ T8412] lock(&rq->__lock); [ 314.689029][ T8412] lock(console_owner); [ 314.689035][ T8412] [ 314.689035][ T8412] *** DEADLOCK *** [ 314.689035][ T8412] [ 314.689041][ T8412] 5 locks held by syz.4.646/8412: [ 314.689046][ T8412] #0: ffff88803455a470 (&fc->uapi_mutex){+.+.}-{4:4}, at: __se_sys_fsconfig+0x758/0x8d0 [ 314.689075][ T8412] #1: ffff8880b8639e18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xad/0x140 [ 314.689100][ T8412] #2: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run2+0x186/0x4b0 [ 314.689121][ T8412] #3: ffffffff8e1330e0 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x120 [ 314.689140][ T8412] #4: ffffffff8e01a9b0 (console_srcu){....}-{0:0}, at: console_flush_all+0x13a/0xc40 [ 314.689160][ T8412] [ 314.689160][ T8412] stack backtrace: [ 314.689166][ T8412] CPU: 0 UID: 0 PID: 8412 Comm: syz.4.646 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 314.689177][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 314.689187][ T8412] Call Trace: [ 314.689191][ T8412] [ 314.689196][ T8412] dump_stack_lvl+0x189/0x250 [ 314.689212][ T8412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 314.689224][ T8412] ? __pfx__printk+0x10/0x10 [ 314.689233][ T8412] ? print_lock_name+0xde/0x100 [ 314.689249][ T8412] print_circular_bug+0x2ee/0x310 [ 314.689264][ T8412] check_noncircular+0x134/0x160 [ 314.689279][ T8412] validate_chain+0xb9b/0x2140 [ 314.689296][ T8412] __lock_acquire+0xab9/0xd20 [ 314.689309][ T8412] ? console_flush_all+0x13a/0xc40 [ 314.689317][ T8412] lock_acquire+0x120/0x360 [ 314.689327][ T8412] ? console_flush_all+0x13a/0xc40 [ 314.689337][ T8412] ? do_raw_spin_unlock+0x122/0x240 [ 314.689347][ T8412] ? console_flush_all+0x13a/0xc40 [ 314.689355][ T8412] console_flush_all+0x6d2/0xc40 [ 314.689363][ T8412] ? console_flush_all+0x13a/0xc40 [ 314.689372][ T8412] ? console_flush_all+0x13a/0xc40 [ 314.689382][ T8412] ? __pfx_console_flush_all+0x10/0x10 [ 314.689393][ T8412] ? is_printk_cpu_sync_owner+0x32/0x40 [ 314.689403][ T8412] console_unlock+0xc4/0x270 [ 314.689417][ T8412] ? __pfx_console_unlock+0x10/0x10 [ 314.689431][ T8412] ? is_printk_cpu_sync_owner+0x32/0x40 [ 314.689441][ T8412] vprintk_emit+0x5b7/0x7a0 [ 314.689455][ T8412] ? __pfx_vprintk_emit+0x10/0x10 [ 314.689468][ T8412] ? kernelmode_fixup_or_oops+0x7c/0xf0 [ 314.689479][ T8412] ? __bad_area_nosemaphore+0x11a/0x780 [ 314.689490][ T8412] ? unwind_next_frame+0xa5/0x2390 [ 314.689502][ T8412] ? rcu_is_watching+0x15/0xb0 [ 314.689517][ T8412] _printk+0xcf/0x120 [ 314.689525][ T8412] ? __pfx____ratelimit+0x10/0x10 [ 314.689538][ T8412] ? __pfx__printk+0x10/0x10 [ 314.689548][ T8412] should_fail_ex+0x3f5/0x560 [ 314.689559][ T8412] strncpy_from_user+0x36/0x290 [ 314.689570][ T8412] strncpy_from_user_nofault+0x72/0x150 [ 314.689582][ T8412] bpf_probe_read_compat_str+0xe2/0x180 [ 314.689595][ T8412] bpf_prog_b0c6ebf0b810dd9c+0x5a/0x60 [ 314.689603][ T8412] bpf_trace_run2+0x284/0x4b0 [ 314.689612][ T8412] ? bpf_trace_run2+0x186/0x4b0 [ 314.689622][ T8412] ? __pfx_bpf_trace_run2+0x10/0x10 [ 314.689632][ T8412] ? kvm_sched_clock_read+0x11/0x20 [ 314.689643][ T8412] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 314.689654][ T8412] __bpf_trace_tlb_flush+0xf5/0x150 [ 314.689665][ T8412] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 314.689677][ T8412] ? psi_group_change+0xbc7/0x1210 [ 314.689690][ T8412] ? rcu_read_lock_sched_held+0x89/0x100 [ 314.689705][ T8412] trace_tlb_flush+0x115/0x140 [ 314.689713][ T8412] switch_mm_irqs_off+0x53e/0x7a0 [ 314.689722][ T8412] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 314.689730][ T8412] ? psi_task_switch+0x318/0x6d0 [ 314.689749][ T8412] __schedule+0x1070/0x4cb0 [ 314.689762][ T8412] ? irqentry_enter+0x51/0x60 [ 314.689775][ T8412] ? preempt_schedule_common+0x83/0xd0 [ 314.689788][ T8412] ? __pfx___schedule+0x10/0x10 [ 314.689801][ T8412] ? irqentry_exit+0x74/0x90 [ 314.689813][ T8412] ? lockdep_hardirqs_on+0x9c/0x150 [ 314.689826][ T8412] ? preempt_schedule+0xae/0xc0 [ 314.689837][ T8412] preempt_schedule_common+0x83/0xd0 [ 314.689849][ T8412] preempt_schedule+0xae/0xc0 [ 314.689860][ T8412] ? __pfx_preempt_schedule+0x10/0x10 [ 314.689872][ T8412] ? __mutex_trylock_common+0x153/0x260 [ 314.689886][ T8412] ? __pfx___mutex_trylock_common+0x10/0x10 [ 314.689900][ T8412] preempt_schedule_thunk+0x16/0x30 [ 314.689912][ T8412] __mutex_lock+0x344/0xe80 [ 314.689927][ T8412] ? __se_sys_fsconfig+0x758/0x8d0 [ 314.689940][ T8412] ? __pfx___mutex_lock+0x10/0x10 [ 314.689956][ T8412] ? strlen+0x1f/0x70 [ 314.689964][ T8412] __se_sys_fsconfig+0x758/0x8d0 [ 314.689979][ T8412] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 314.689993][ T8412] ? rcu_is_watching+0x15/0xb0 [ 314.690007][ T8412] ? do_syscall_64+0xbe/0x3b0 [ 314.690020][ T8412] ? __x64_sys_fsconfig+0x20/0xc0 [ 314.690034][ T8412] do_syscall_64+0xfa/0x3b0 [ 314.690047][ T8412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.690055][ T8412] ? asm_sysvec_call_function_single+0x1a/0x20 [ 314.690064][ T8412] ? clear_bhb_loop+0x60/0xb0 [ 314.690074][ T8412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.690083][ T8412] RIP: 0033:0x7feda3d8e929 [ 314.690090][ T8412] Code: Unable to access opcode bytes at 0x7feda3d8e8ff. [ 314.690095][ T8412] RSP: 002b:00007feda4cb4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 314.690104][ T8412] RAX: ffffffffffffffda RBX: 00007feda3fb6080 RCX: 00007feda3d8e929 [ 314.690111][ T8412] RDX: 0000200000000200 RSI: 0000000000000001 RDI: 0000000000000005 [ 314.690117][ T8412] RBP: 00007feda4cb4090 R08: 0000000000000000 R09: 0000000000000000 [ 314.690123][ T8412] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.690128][ T8412] R13: 0000000000000000 R14: 00007feda3fb6080 R15: 00007fffac91b7d8 [ 314.690138][ T8412] [ 315.963261][ T8412] CPU: 0 UID: 0 PID: 8412 Comm: syz.4.646 Not tainted 6.16.0-rc2-syzkaller-00378-gb67ec639010f #0 PREEMPT(full) [ 315.963276][ T8412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 315.963282][ T8412] Call Trace: [ 315.963289][ T8412] [ 315.963296][ T8412] dump_stack_lvl+0x189/0x250 [ 315.963313][ T8412] ? __pfx____ratelimit+0x10/0x10 [ 315.963327][ T8412] ? __pfx_dump_stack_lvl+0x10/0x10 [ 315.963340][ T8412] ? __pfx__printk+0x10/0x10 [ 315.963351][ T8412] should_fail_ex+0x414/0x560 [ 315.963364][ T8412] strncpy_from_user+0x36/0x290 [ 315.963375][ T8412] strncpy_from_user_nofault+0x72/0x150 [ 315.963389][ T8412] bpf_probe_read_compat_str+0xe2/0x180 [ 315.963404][ T8412] bpf_prog_b0c6ebf0b810dd9c+0x5a/0x60 [ 315.963413][ T8412] bpf_trace_run2+0x284/0x4b0 [ 315.963423][ T8412] ? bpf_trace_run2+0x186/0x4b0 [ 315.963433][ T8412] ? __pfx_bpf_trace_run2+0x10/0x10 [ 315.963443][ T8412] ? kvm_sched_clock_read+0x11/0x20 [ 315.963456][ T8412] ? __bpf_trace_tlb_flush+0xe0/0x150 [ 315.963468][ T8412] __bpf_trace_tlb_flush+0xf5/0x150 [ 315.963480][ T8412] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 315.963492][ T8412] ? psi_group_change+0xbc7/0x1210 [ 315.963506][ T8412] ? rcu_read_lock_sched_held+0x89/0x100 [ 315.963521][ T8412] trace_tlb_flush+0x115/0x140 [ 315.963531][ T8412] switch_mm_irqs_off+0x53e/0x7a0 [ 315.963545][ T8412] ? __pfx_switch_mm_irqs_off+0x10/0x10 [ 315.963553][ T8412] ? psi_task_switch+0x318/0x6d0 [ 315.963568][ T8412] __schedule+0x1070/0x4cb0 [ 315.963583][ T8412] ? irqentry_enter+0x51/0x60 [ 315.963596][ T8412] ? preempt_schedule_common+0x83/0xd0 [ 315.963609][ T8412] ? __pfx___schedule+0x10/0x10 [ 315.963622][ T8412] ? irqentry_exit+0x74/0x90 [ 315.963634][ T8412] ? lockdep_hardirqs_on+0x9c/0x150 [ 315.963647][ T8412] ? preempt_schedule+0xae/0xc0 [ 315.963659][ T8412] preempt_schedule_common+0x83/0xd0 [ 315.963671][ T8412] preempt_schedule+0xae/0xc0 [ 315.963683][ T8412] ? __pfx_preempt_schedule+0x10/0x10 [ 315.963694][ T8412] ? __mutex_trylock_common+0x153/0x260 [ 315.963709][ T8412] ? __pfx___mutex_trylock_common+0x10/0x10 [ 315.963723][ T8412] preempt_schedule_thunk+0x16/0x30 [ 315.963736][ T8412] __mutex_lock+0x344/0xe80 [ 315.963751][ T8412] ? __se_sys_fsconfig+0x758/0x8d0 [ 315.963766][ T8412] ? __pfx___mutex_lock+0x10/0x10 [ 315.963781][ T8412] ? strlen+0x1f/0x70 [ 315.963790][ T8412] __se_sys_fsconfig+0x758/0x8d0 [ 315.963805][ T8412] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 315.963820][ T8412] ? rcu_is_watching+0x15/0xb0 [ 315.963834][ T8412] ? do_syscall_64+0xbe/0x3b0 [ 315.963847][ T8412] ? __x64_sys_fsconfig+0x20/0xc0 [ 315.963860][ T8412] do_syscall_64+0xfa/0x3b0 [ 315.963874][ T8412] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.963882][ T8412] ? asm_sysvec_call_function_single+0x1a/0x20 [ 315.963891][ T8412] ? clear_bhb_loop+0x60/0xb0 [ 315.963901][ T8412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.963910][ T8412] RIP: 0033:0x7feda3d8e929 [ 315.963918][ T8412] Code: Unable to access opcode bytes at 0x7feda3d8e8ff. [ 315.963923][ T8412] RSP: 002b:00007feda4cb4038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 315.963934][ T8412] RAX: ffffffffffffffda RBX: 00007feda3fb6080 RCX: 00007feda3d8e929 [ 315.963941][ T8412] RDX: 0000200000000200 RSI: 0000000000000001 RDI: 0000000000000005 [ 315.963947][ T8412] RBP: 00007feda4cb4090 R08: 0000000000000000 R09: 0000000000000000 [ 315.963952][ T8412] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 315.963958][ T8412] R13: 0000000000000000 R14: 00007feda3fb6080 R15: 00007fffac91b7d8 [ 315.963967][ T8412] [ 315.964006][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.309175][ C0] vkms_vblank_simulate: vblank timer overrun [ 316.595557][ T9] vhci_hcd: vhci_device speed not set [ 317.129368][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.135770][ T1299] ieee802154 phy1 wpan1: encryption failed: -22