last executing test programs: 15m47.95694124s ago: executing program 1 (id=361): mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f00000017c0)="a2", 0x1}], 0x1, 0xc) r1 = memfd_secret(0x0) renameat2(r0, &(0x7f0000000080)='./cgroup\x00', r1, &(0x7f0000000100)='./cgroup\x00', 0xb) 15m47.86776107s ago: executing program 1 (id=363): r0 = creat(&(0x7f0000000140)='./file0\x00', 0x71) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x21, 0x3, 0x0, {0x4}}, 0x21) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x71) (async) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x21, 0x3, 0x0, {0x4}}, 0x21) (async) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='hfsplus\x00', 0x208083, 0x0) (async) 15m47.686532058s ago: executing program 1 (id=366): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x31008003, 0xfffe}}, 0x50) read$FUSE(r0, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x3da, 0x4) sendto$packet(r3, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r5, r0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r6, 0x400454c9, 0x13) ioctl$TUNSETGROUP(r6, 0x400454ce, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/profiling', 0x101a02, 0x0) 15m47.410966407s ago: executing program 1 (id=369): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140), &(0x7f0000000200)=0x4) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0xc4, &(0x7f00000001c0)=[{&(0x7f0000000040)='\x00 \x00\x00\x00\x00\x00', 0x20}], 0x0, 0x0, 0x0, 0x4000}, 0x48855) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f000000ac40)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) setns(r4, 0x4000000) chdir(&(0x7f0000000080)='./file1\x00') r6 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) setpgid(r6, 0x0) setpgid(0x0, r6) open(&(0x7f0000000180)='./file1\x00', 0x60840, 0x114) r7 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa8300, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1d984a16, 0x30, r7, 0x7dfff000) 15m47.281758282s ago: executing program 1 (id=371): mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x808000, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f0000000000)='./cgroup\x00', r0, 0xffffffffffffffff) 15m47.024235724s ago: executing program 1 (id=375): timer_create(0x3, 0x0, &(0x7f0000000000)=0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d01090050001180"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r4, 0x8}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r5, 0x3b70, 0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 15m46.781698171s ago: executing program 32 (id=375): timer_create(0x3, 0x0, &(0x7f0000000000)=0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="840100001900010000000000000000001d01090050001180"], 0x184}, 0x1, 0x0, 0x0, 0x5}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={r4, 0x8}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r5, 0x3b70, 0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 13m17.12132234s ago: executing program 3 (id=1570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRES32=r0], 0x118}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) syz_genetlink_get_family_id$mptcp(0x0, r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x200000c0) ftruncate(r4, 0x2007ffb) sendfile(r4, r4, 0x0, 0x1000000201005) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r6, r5, 0x0, 0x7ffff000) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000004, 0x12, r1, 0x0) ioctl$UI_GET_VERSION(r1, 0x8004552d, &(0x7f00000000c0)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x1, @tid=r7}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r8 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, 0x0) write(r8, &(0x7f0000000000)="fb196d", 0x3) 13m16.760697597s ago: executing program 3 (id=1571): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000100)='./file1\x00', &(0x7f0000000180)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa0000, 0x80) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) (fail_nth: 17) 13m16.606161839s ago: executing program 3 (id=1572): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) timer_create(0x80d5b643adfce43f, 0x0, &(0x7f00000017c0)) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r2, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) mount(&(0x7f0000000200)=@filename='./file7\x00', &(0x7f0000000280)='./file7\x00', &(0x7f00000002c0)='ramfs\x00', 0x2082419, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x14) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r7 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r7, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x0) close(r5) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r3}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000002140)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0xe0, 0x0, {0x0, 0x0, 0x4, 0xcbe, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r0, r1, 0x80000) r8 = creat(&(0x7f0000001380)='./file0\x00', 0x4) write$cgroup_int(r8, &(0x7f00000001c0)=0x2, 0x12) r9 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="02"], 0x48}}, 0x40884) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)={[{@mpol={'mpol', 0x3d, {'default', '=relative', @val={0x3a, [0x34, 0x2d, 0x30, 0x2c, 0x31]}}}}]}) 13m13.375100152s ago: executing program 3 (id=1598): creat(&(0x7f0000001380)='./file0\x00', 0x12c) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000002300)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x40001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)=0x10) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='omfs\x00', 0x8002, 0x0) 13m13.324480128s ago: executing program 3 (id=1599): clock_gettime(0x1, &(0x7f0000000100)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="9c010000010a050000000000000000000a00000a0c0004400000000000000005090001"], 0x19c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x8, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) (async) accept(r1, 0x0, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='msdos\x00', 0x1200021, 0x0) 13m12.248077948s ago: executing program 3 (id=1603): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000540)=[@acquire={0x40046305, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 13m12.094554657s ago: executing program 33 (id=1603): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x4c, 0x0, &(0x7f0000000540)=[@acquire={0x40046305, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 11m0.434953424s ago: executing program 4 (id=2356): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x13}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, r2, &(0x7f0000000180)={0x8, 0x5, 0x8, 0x7ff, 0x0, 0x7fff, 0xdb8, 0x8, 0x80000000}) 11m0.406658679s ago: executing program 4 (id=2357): syz_open_dev$vim2m(&(0x7f0000000000), 0x7f, 0x2) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev_mcast\x00') pread64(r0, 0x0, 0x0, 0x8) unshare(0x6a040000) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="120086dd0000120000000000000060ec97000f982c00fb8000000000000000000000000000aaff02000000000000000000"], 0xfce) 11m0.146075955s ago: executing program 4 (id=2360): r0 = socket$inet6(0xa, 0x80002, 0x88) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000426bd7000ffdbdf2500772d4da32a00000008000400ac1414bb14000b00fc02000000000000000014000c00000000000000000000000000000000010800020001000000060006000100000008000400e0000002060006000000000000"], 0x64}, 0x1, 0x0, 0x0, 0x24040088}, 0x24000410) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x5c}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r4, &(0x7f00000002c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) recvmmsg(r0, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}, 0x7f}], 0x1, 0x60, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) 11m0.031946097s ago: executing program 4 (id=2361): setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000), 0x4) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x800, 0x4, [0x0, 0x6, 0x0, 0x7]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r1, 0x1}, &(0x7f0000000100)=0x8) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x4010, r0, 0x30f19000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000140)={'\x00', 0x8, 0xffffffff, 0x2, 0x0, 0xe9a, 0x0}) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f00000001c0)=r3) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000200)) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000240)) r4 = syz_open_dev$swradio(&(0x7f0000000280), 0x1, 0x2) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x1010, r4, 0x12f4d000) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r5) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000300)={0x2, 0x5, 0x8001, 0x3, 0x8cce, 0x8, 0xa, 0x9, r2}, &(0x7f0000000340)=0x20) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000380)={r6, 0x0, 0x5, 0x5, 0x6, 0x8}, &(0x7f00000003c0)=0x14) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001ac0)={{0x1, 0x1, 0x18, r5, {0x0, 0x0}}, './file0\x00'}) r9 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f0000001b00), 0x0) r10 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001b40), 0x103001, 0x0) r11 = getgid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002cc0)={{0x1, 0x1, 0x18, r5, {0xee01, 0xee01}}, './file0\x00'}) getgroups(0x3, &(0x7f0000002d00)=[0xee01, 0xee01, 0xffffffffffffffff]) r14 = accept$alg(0xffffffffffffffff, 0x0, 0x0) fstat(r5, &(0x7f0000003040)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r5, &(0x7f00000030c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000003140)=0x0) statx(0xffffffffffffff9c, &(0x7f0000003180)='./file0\x00', 0x100, 0x2, &(0x7f00000031c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r19 = getgid() fstat(r5, &(0x7f00000032c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r7, &(0x7f0000003d00)=[{{&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001a00)=[{&(0x7f00000004c0)="2acc3ddc21b306de861dd0d6e680daf12a9190e4009d98a4ee721de11927d4a8a1bff29f0596e86202933081236140f28e9857467ac2e86a71e09f75beed08fc0a47cd848c1ffedce2f48604f620693b04dec82ca60019d946b5f28a65caa3a5492828", 0x63}, {&(0x7f0000000540)="42b05e6188e1c6e5fdfdc683f006d5d6c9c1e80ee01a52db4e24ae43688f30c10444ff16ff35d6dcb7d49ad450c1ace6657cd19f85f51246b8db99fa4f6cf122a0020d3e55332458bf9f1b75423471efad7fbe276f9ee1332b8bbaebc52dc6fa0c38d68a37c1f03468939ae4d82a74fc8da2d1c53f3779bd1f56ba42d4edc32309bb3bd6163aad5f8c6442e1bd2f98cac088e055d4179268667d39e1010864a784b48b333d00b2e8d0acc73c9558aad47cffda3a24e90be7", 0xb8}, {&(0x7f0000000600)="9bb3e800eaacd24658d6d8e716853f6472b046f8571f053845da3296829b864adda081a07d66b4187ac348180afaf4b98a1b354639f37aa57330384d4661a1ed12bb27ad170254f7dbce49e868e4cbbb49520fa34326c50ead341b9902c91cc9195754521e0691d6ede8e3e57f0f90170b536fa0df9ca4c7478b440351f09bfa54eada1d1f2f68c0449be172b9eff6494537bc4737aa03ba02eb6744c7a4ca4548", 0xa1}, {&(0x7f00000006c0)="4ab4a286aa7467baf97d4b4e92655f0a97deaaaea754a3c890f89b434a51e2257a37d73bb82056bc6e51987af9bb7c7c416f772a30ea60660f2eca0b08e957fa7e946f3b48b3", 0x46}, {&(0x7f0000000740)="5875a5df8082aeef2268835198fb0107f0e641a3019029b989580c5cd52c0639617a9a62cf240f54af718f6b7980e5fbce3ba751676d34e1502f6bfd7a30347d0ef1c7b11a6d319bfb90422d8d25db0f6e25c1f6673de94d187a98754916b927388b327df6bcc445bbf0c715bde771bd10858baee958a58ba628593e2e587cd9f457b5215fd2173a8978727662a6d0ed7b19d7e48fdf8f9e", 0x98}, {&(0x7f0000000800)="4e4c81656d8cf579c38190da37f8751eb2ce01ab165e381e71f1297489e7086543e4b14c42c56a4d364fb8cf100b9cb067c4c642091e2c8fb72196210fdbddc0aedd2b7f7f65936f940cfec98bf70976c1ae339c744aeb93c965ac9f1c447cb67f630fb925ae4a3f4d3c5a46a7fd5397aae794b78e2412616a0d467dbb28f9f3bb12882f6a9a8bcb19cd768db65b5b1d4c944fea258f1cbc", 0x98}, {&(0x7f00000008c0)="481810eb47a5a526df715f111d64800038f46a30843f150c999afb47d2c9b97e14b64f87c37f2e3f0dabbb3561564f1211654df2b4bc5e55fe2840d927e665f6a7701702489eeda4fdf7fd75f73bf5e1afc491df6d3371c4da18603f3555a3004f7deea1f235be7ab0cbe235a4f31ad619821961f3c98799c8c60e790735ea2ea7dd8cef51ecfcb7698fe21a817080946d9b4f", 0x93}, {&(0x7f0000000980)="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", 0x1000}, {&(0x7f0000001980)="01377cce6cd683eea3b3e43ce155cc08fccc04bc66028980732ef1a3500ac259a24e18ab461ea13b3e72dbe31dc6fece91985ef31e1ae452ba1e50bba138620f2434c3267e2a794fd6d2cd2b2dfeb0ae429501e6583c7f8cb59a4f3a210cc75102e45d59e373066f4df0a6ef112d759f9979588b9c5ad0ef226f3304ea", 0x7d}], 0x9, &(0x7f0000001b80)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00, r8}}}, @rights={{0x34, 0x1, 0x1, [r4, r5, r4, r5, r0, r4, r0, r9, r5]}}, @rights={{0x14, 0x1, 0x1, [r10]}}], 0x70, 0x24048011}}, {{&(0x7f0000001c00)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002c80)=[{&(0x7f0000001c80)="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", 0x1000}], 0x1, &(0x7f0000002d40)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee00, r11}}}, @rights={{0x30, 0x1, 0x1, [r0, r0, r0, r5, r0, r5, r0, r4]}}, @cred={{0x1c, 0x1, 0x2, {r3, r12, r13}}}, @rights={{0x24, 0x1, 0x1, [r5, r4, r4, r14, r5]}}], 0x98, 0x8c1}}, {{0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002e00)="4189ccc7a58053129126cb0b9626d47279b355f2a8d306ff8fa5b8a8b775e5c45c9ad8da63c6bc27696ca966fd6ee410e0fcdd03c52c3f3d5a30d2b72ac5b4083d9e67d581b165976a200cecfbb35ee4766d88df7670d89a7eea29e7aa9949cdd2f4f9eae57a28437debb52cadc66a753e8a998b2852c39584f30065ef22341b6e8ed237cd3f696a5baa10bf28d4af817bb58c4c2a68f77163237c230dd8e9c3cc788cb28f1a127ec6bab397554a58e7e039927af13190a566d90ec2ef62f11d43386530085d4cef2812521827cbcb4c082065dba5c9bb2da62bdbed589740be254bc708572c1174ffba4b8931052ec0", 0xf0}, {&(0x7f0000002f00)="72a9419cd5b18325c9cad305184264350aef0a2bc1b42cffdd8c173a4f292204817442e916510844e0512ad4eb6899b1eae43de8063f9bb9205ebd64b92e36ccbfc774c3f646a6d8f0152e2b2e7e845607a46fd139ebf3dc84a0ee21dd5826f4affff29a9f5ef35d07d7153c51c85040010ff904b7a45522b6d7610c4c", 0x7d}, {&(0x7f0000002f80)="6df9e6e79b70b4187739af4e32b230833778587b2f8c4fca06f860213ecc6c2a27848b6e4142d62259f5c22e7d7c031445eb5fca57d107267a0d44fd3f250e81acb94e423d1fb94fb5863d6490ddf34f58ad3481cdbfe15603d85c91abb41453656ea29d2af377dbd0c58b08e1", 0x6d}], 0x3, &(0x7f0000003500)=[@rights={{0x18, 0x1, 0x1, [r5, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, r15, r16}}}, @cred={{0x1c, 0x1, 0x2, {r17, r18, r19}}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00, r20}}}, @rights={{0x20, 0x1, 0x1, [r4, r0, r0, r5]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r0, r4, 0xffffffffffffffff, r0, r5]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}], 0x128, 0x20040010}}, {{&(0x7f0000003640)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000003700)=[{&(0x7f00000036c0)="121a8e1205a0a8166d7f684393", 0xd}], 0x1, &(0x7f0000003bc0)=[@rights={{0x34, 0x1, 0x1, [r4, r4, r5, r4, r4, r5, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0x0, 0xffffffffffffffff}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x38, 0x1, 0x1, [r4, r0, r0, 0xffffffffffffffff, r5, r4, r4, r0, r4, r4]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, r5, r0, r4, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x2c, 0x1, 0x1, [r4, r0, 0xffffffffffffffff, r4, 0xffffffffffffffff, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00}}}], 0x140, 0x4000000}}], 0x4, 0x20000000) 10m59.934961838s ago: executing program 4 (id=2362): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@remote, 0x0, 0xfff9, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x4}, {0x2, 0x4, 0x40000000}, {0x2000000}, 0x70bd25, 0x0, 0xa, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}, 0x64}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x144}, 0x1, 0x0, 0x0, 0x44}, 0x4810) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x36, @mcast1, 0x6}, 0x1c) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x2}}, 0x2e) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) syz_clone(0x8204400, &(0x7f0000000100)="625034a1137a601066dff0db7332b56dcb54694e942b6fd1d2a7a162affa4ca40fcfded2bdcc88c8bd38", 0x2a, &(0x7f0000000180), &(0x7f0000000340), &(0x7f0000000380)="cfcfd8024a2de42c2e36cba25242116e1c71e73fbd251bf2c7b6ba02e109dcb5fd177c9a1653f61dd363570ee1655494116dd1d41e87345b715d125a657ec866925c08fee5ade97ebf314572649b1df4ef8fcb6496fabf7e2a304db3f3c5e9864147981f6cf45fb5b8a894af22b1c1500a7f13a66290f24c16d5722d27c8ccfeb16967c037a2bc427299f3687b9c3efbdc9d0c23ced12aea33ff8f9f1d6a09cfebcaa21bdeb92179b7d7") pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') pivot_root(&(0x7f0000000140)='./file0/file0/../file0\x00', &(0x7f0000000240)='./file0/../file0/../file0\x00') creat(&(0x7f0000001380)='./file0\x00', 0x19) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@remote, 0x0, 0xfff9, 0x2000, 0x1, 0x0, 0x0, 0x0, 0x3b, 0x0, 0xffffffffffffffff}, {@in=@rand_addr=0x64010102, 0x0, 0x6c}, @in=@remote, {0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffd, 0x4}, {0x2, 0x4, 0x40000000}, {0x2000000}, 0x70bd25, 0x0, 0xa, 0x0, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}, 0x64}}, @offload={0xc, 0x1c, {0x0, 0x2}}]}, 0x144}, 0x1, 0x0, 0x0, 0x44}, 0x4810) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x36, @mcast1, 0x6}, 0x1c) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast1}, 0x2, 0x0, 0x2}}, 0x2e) (async) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') (async) mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) (async) syz_clone(0x8204400, &(0x7f0000000100)="625034a1137a601066dff0db7332b56dcb54694e942b6fd1d2a7a162affa4ca40fcfded2bdcc88c8bd38", 0x2a, &(0x7f0000000180), &(0x7f0000000340), &(0x7f0000000380)="cfcfd8024a2de42c2e36cba25242116e1c71e73fbd251bf2c7b6ba02e109dcb5fd177c9a1653f61dd363570ee1655494116dd1d41e87345b715d125a657ec866925c08fee5ade97ebf314572649b1df4ef8fcb6496fabf7e2a304db3f3c5e9864147981f6cf45fb5b8a894af22b1c1500a7f13a66290f24c16d5722d27c8ccfeb16967c037a2bc427299f3687b9c3efbdc9d0c23ced12aea33ff8f9f1d6a09cfebcaa21bdeb92179b7d7") (async) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') (async) pivot_root(&(0x7f0000000140)='./file0/file0/../file0\x00', &(0x7f0000000240)='./file0/../file0/../file0\x00') (async) creat(&(0x7f0000001380)='./file0\x00', 0x19) (async) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) (async) 10m59.745298447s ago: executing program 4 (id=2363): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xfc}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x48000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40804) 10m44.175003705s ago: executing program 34 (id=2363): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x30, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xfc}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x48000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100008}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xf8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40804) 8m2.96924344s ago: executing program 2 (id=3369): r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f00000001c0)=[@uexit={0x0, 0x18, 0x6}, @code={0x1, 0x69, {"b9800000c00f3235000400000f30c7442400db330c7fc744240200000000c7442406000000000f011c240f2f5c528e0f01c4656764acc462f92391f788000066b886000f00d80f005a00c44279788100a00000660fc4e50a"}}, @uexit={0x0, 0x18, 0xa13e}, @code={0x1, 0x5d, {"c4e16967e566ba400066ed0fc7b024000000672e440f18c2c421455eae0efa00003666400f6b3a66ba4100ec48b827000000000000000f23c80f21f835040000000f23f836430f20910f221f"}}, @cpuid={0x2, 0x18, {0x7, 0x9}}], 0x10e}) ioctl$KVM_RUN(r0, 0xae80, 0x0) mount(&(0x7f0000000000)=@md0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x8) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='c 2'], 0x8) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x10040, 0x0) r3 = getuid() setreuid(r3, r3) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r4, &(0x7f0000002f80)={0xa0, 0x0, r5, {{0x2, 0x2, 0x6, 0x4, 0x7, 0x7, {0x1, 0xe, 0x100, 0x7b, 0xf, 0x400, 0x3, 0x6, 0x8, 0x8000, 0x10001, r6, r7, 0x9, 0x8}}, {0x0, 0x1d}}}, 0xa0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r3, r7}}, './cgroup\x00'}) mknod$loop(&(0x7f0000000180)='./cgroup\x00', 0x3, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000080)) 8m2.855076594s ago: executing program 2 (id=3370): mount(&(0x7f0000000080)=@md0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='btrfs\x00', 0x18a0b902b2d2257e, 0x0) 8m2.843597568s ago: executing program 2 (id=3371): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001300)={0x84, &(0x7f0000000e40)={0x0, 0x0, 0x3, "0b3b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="200103070000000000000052c63e7d"], 0xfffffffffffffffd}) 7m59.790686611s ago: executing program 2 (id=3397): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x4) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8000000, 0x0, 0xff, 0xd, 0x933, 0x4}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) read$FUSE(r0, &(0x7f00000013c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) stat(&(0x7f0000000180)='./file1\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x805000, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other}], [{@dont_measure}, {@pcr={'pcr', 0x3d, 0x14}}, {@appraise_type}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@seclabel}, {@smackfsfloor={'smackfsfloor', 0x3d, '{'}}, {@smackfsdef={'smackfsdef', 0x3d, '/,'}}]}}) ptrace$getregset(0x4204, r2, 0x3, &(0x7f0000000040)={&(0x7f0000000140)=""/3, 0x3}) 7m59.623005306s ago: executing program 2 (id=3398): r0 = socket(0x11, 0xa, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r4, 0x227b, &(0x7f00000000c0)=0x1) read(r4, &(0x7f0000000180)=""/163, 0xa3) mkdir(&(0x7f00000000c0)='./cgroup\x00', 0x108) mount$9p_tcp(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f0000000400), 0x1, &(0x7f0000000440)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@privport}]}}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)={0x48, r3, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x5}, @device_a, @broadcast, @initial, {0x3, 0xffb}, @value=@ver_80211n={0x0, 0xead, 0x3, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0x1, 0x1, 0x58, @void}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x6a845ecb4f20be71}, 0x24008090) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x67, 0x0, 0xee01}, {0x20}, {0x0, 0x63c}, 0xc6, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d2, 0x32}, 0xa, @in6=@remote, 0x0, 0x2}}, 0xe8) sendmmsg$inet6(r5, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x0, 0x0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0x84, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x48, 0x22, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x200}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xa0d1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xf}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}]}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x26}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x1}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xd}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x8810) 7m59.420320085s ago: executing program 2 (id=3399): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000340)={0x14, 0x33, 0x1, 0x70bd28, 0x25dfdbfb, "", [@typed={0x4, 0x8d, 0x0, 0x0, @binary}]}, 0x14}], 0x1, 0x0, 0x0, 0x4040}, 0x14) (async) write$UHID_INPUT(r0, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 7m59.255364279s ago: executing program 35 (id=3399): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000340)={0x14, 0x33, 0x1, 0x70bd28, 0x25dfdbfb, "", [@typed={0x4, 0x8d, 0x0, 0x0, @binary}]}, 0x14}], 0x1, 0x0, 0x0, 0x4040}, 0x14) (async) write$UHID_INPUT(r0, &(0x7f0000000d00)={0x8, {"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", 0x1000}}, 0x1006) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x1200051, 0x0) 3m47.795262369s ago: executing program 0 (id=4623): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 3m47.795108209s ago: executing program 0 (id=4624): openat$full(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) 3m47.761725408s ago: executing program 0 (id=4625): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) writev(r0, &(0x7f0000002140)=[{&(0x7f0000002080)='T01\n', 0x4}], 0x1) pwrite64(r0, &(0x7f0000000280)="aca8beffd29f71a14497826f6e35d4aeda9cbec86e414e9ac4ad63d055aa6c3d37ce5a1804c84b680f050bf853b3d02a", 0x30, 0x10001) 3m47.729907091s ago: executing program 0 (id=4626): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs(r1, 0x0) 3m47.655094236s ago: executing program 0 (id=4627): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002780)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r1, r3, r4) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 3m47.654919074s ago: executing program 0 (id=4628): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) symlink(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 3m32.600110165s ago: executing program 36 (id=4628): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) symlink(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) 31.59887694s ago: executing program 8 (id=6089): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000000)) sendmsg$sock(r0, &(0x7f0000000240)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0xffffffff, @hyper}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="e7677a9b5b39c64799bfe1395c6f58cdcd838ce404c42f480ac76a6471d8df43078ce70ea052eeaf32da4f42d4ce3b01e828a1e1e3025e7e3d765e85c33d343837ef56f60f6b2cd657550c5343f06e99c45c5e906e76af56a9f5ba18c21edcc64f6be1f15203a7ac7a222254dee1130d1f9f", 0x72}], 0x1, &(0x7f0000000180)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0xd12d}}, @timestamping={{0x14, 0x1, 0x25, 0xcc}}, @timestamping={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x5991}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0xa8}, 0x11) readlink(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=""/171, 0xab) setsockopt$inet_buf(r0, 0x0, 0x24, &(0x7f0000000380), 0x0) ioctl$int_out(r0, 0x0, &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, r3) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000500)=@filename='./file0\x00', r2, &(0x7f0000000540)) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) timer_create(0x0, &(0x7f0000000580)={0x0, 0xd, 0x4}, &(0x7f00000005c0)=0x0) timer_settime(r5, 0x1, &(0x7f0000000600)={{0x77359400}}, &(0x7f0000000640)) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) fsetxattr$security_capability(r4, &(0x7f0000000680), &(0x7f00000006c0)=@v2={0x2000000, [{0x7, 0x7}, {0x1, 0x5}]}, 0x14, 0x2) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x30, 0x0, 0x9, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x401}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000880)={0x3, 0x8, 0x41, &(0x7f0000000800)=""/65}) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfe000/0x400000)=nil) ioctl$VIDIOC_QUERYMENU(r1, 0xc02c5625, &(0x7f00000008c0)={0x81, 0xf689, @name="821555e852cc54bab26f611a411ecce81b8760a0dfb8e24ab671332f3427c558"}) syz_usb_disconnect(0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000940)={&(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$I2C_FUNCS(r6, 0x705, &(0x7f0000000980)=0xffffffffffff9333) setsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f00000009c0)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000a00)={0x0, 0x41}, &(0x7f0000000a40)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r6, 0x84, 0x23, &(0x7f0000000a80)={r7, 0x200}, 0x8) pread64(r4, &(0x7f0000000ac0)=""/216, 0xd8, 0x4) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000c00)={0x28}, 0x0) 30.687065335s ago: executing program 8 (id=6097): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = socket(0x1e, 0x805, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xee01}}, './file0\x00'}) listen(r2, 0xfffa) accept$packet(r1, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r3 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) recvmsg$kcm(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2020) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) 29.676055172s ago: executing program 8 (id=6102): mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='openpromfs\x00', 0x2208080, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000000)={'macvtap0\x00', 0x620}) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$phonet(0x23, 0x2, 0x1) (async) r2 = socket$phonet(0x23, 0x2, 0x1) recvmmsg(r2, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x10020, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000ec0)={0x14, 0x28, 0x1, 0x4, 0x25dfdbfc, "", [@nested={0x4, 0xf2}]}, 0x14}], 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = dup(r4) fadvise64(r4, 0x6, 0x9, 0x2) (async) fadvise64(r4, 0x6, 0x9, 0x2) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000000)={0x2f, {0x0, 0x0, 0x10000007}}) (async) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f0000000000)={0x2f, {0x0, 0x0, 0x10000007}}) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x24081, 0x0) (async) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x24081, 0x0) write$P9_RAUTH(r6, &(0x7f0000000140)={0x14, 0x67, 0x2, {0x80, 0x3, 0x4}}, 0x14) 28.850811674s ago: executing program 6 (id=6111): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x28100, 0x0) (async) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_LNS_MODE={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (async) r2 = syz_open_dev$dmmidi(&(0x7f0000000180), 0x1e58f32e, 0x400400) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), r0) sendmsg$FOU_CMD_ADD(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r4, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x2f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20048040) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r1, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x12}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44080) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00', 0x0}) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000440)={0x0, 0x3, 0x200}, &(0x7f0000000480)=0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f0000000540)={0x98, r7, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x37}}}}, [@NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_PMKID={0x14, 0x55, "615315cd2d267af632fb4533a985d851"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x30}, @NL80211_ATTR_SSID={0x7, 0x34, @random="416282"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "51a64d8fd0400509dfaa84885a7638b9"}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x30}]}, 0x98}, 0x1, 0x0, 0x0, 0x20040080}, 0x4001) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000a40)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000740)={0x284, r8, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TESTDATA={0x60, 0x45, "a89694a12874591a4ca6aea9affd221301e13bcbb391b82e291e87c333046e754f90afab45301d6314a739517b586addf7bdcb6ed936e5c92a18e2349c7985bcabaf462abaf5cc807771aa3747bde905f42e7a4578dba8873e69ffb5"}, @NL80211_ATTR_TESTDATA={0x3f, 0x45, "7b9c6aebf34b439fdf40f34eb96ed49add751c0f19967e65f13cc2dc6d5bbdfbe5f3b66dffe7298a019efe6f006cb8a0ef5591fee3f804d62542dc"}, @NL80211_ATTR_TESTDATA={0x71, 0x45, "7534465ca950974eafca06ed857c6f887b4ff12717bbc85d9b2f4b435e4887c45a091ed06d052b4579c55cea3899f53352348633377a8e475782182a716cea328f10195b292f6daa759a2b1ee8d1f7564388048149b8aeb8d573efec47ce0779b9fb8a10c9724d10738e619912"}, @NL80211_ATTR_TESTDATA={0xb5, 0x45, "90f1b04ba8aa7196d54462fa245863b460a39edcd550e416a0d4f0f02d4291c79d4e47f461ae1b7d0bbab89ad56bc8d18af3a8111ad52c4f7bcebda9396691e3fafc9e7879c306a30a439f8bd2c6c4516f2b5bfeac2828f70c85fd5225a8cfbd8d5393c1774a199a91302fe79a80991ac230159ac745518f0a93d6b42de039e91784bf7af42d9f6f1d86bcffe759d4c18223928978b53456f5c3e08b5ed0f794c1739e2fe9ac44e0a2555661c12ec9dec1"}, @NL80211_ATTR_TESTDATA={0x23, 0x45, "b7a6b99702f1f4870b7133d7aaaa66a055190807020f65fa28fef326f0c074"}, @NL80211_ATTR_TESTDATA={0x76, 0x45, "f01bc1e88f3939d5146b9624a09a86468117a11ad8eaca51b374c12fd1082952132fc2a976851bd9734cb3103d29d37748d68819c35a26313ce5b0088ea32795ec2aa7e82633b97874de67d87deb75b5d63976336f1b90ce00b2c330c0e12b0541ffa26ef354c627be0d1b55ac2364524b62"}]}, 0x284}, 0x1, 0x0, 0x0, 0x4050}, 0x100) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r10, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000b40)={&(0x7f0000000b00)={0x14, r11, 0x200, 0x70bd2a, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x800) r12 = accept4$llc(r0, &(0x7f0000000bc0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000c00)=0x10, 0x80800) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r13, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, r4, 0x804, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_IFINDEX={0x8, 0xb, r6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000845}, 0x80) (async) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004) (async) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d80)={0x78, 0x0, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_SECRET={0xc, 0x4, [0xb46, 0x4]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x46}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xcea}]}, 0x78}, 0x1, 0x0, 0x0, 0x8083}, 0x4040) (async) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, &(0x7f0000000e80)={0x2, [0x5, 0x3], 0x4000}, 0x10) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000ec0)=0x400) (async) ioctl$int_out(r5, 0x5460, &(0x7f0000000f00)) (async) getpeername$llc(r12, &(0x7f0000000f40), &(0x7f0000000f80)=0x10) (async) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001000), r0) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f00000010c0)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x3c, r14, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004}, 0x4010) 28.807423411s ago: executing program 6 (id=6112): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000090, &(0x7f00000005c0)={0xa, 0x4e20, 0xa3, @loopback, 0x1ff}, 0x1c) socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="640100004a00010200000000000000000a"], 0x164}}, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 28.650949278s ago: executing program 8 (id=6114): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='numa_maps\x00') sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0xd4, 0x3, 0x1, 0x3, 0x0, 0x0, {0x1}, [@CTA_NAT_DST={0x58, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x11}}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @private=0xa010100}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1d}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @loopback}}, @CTA_NAT_V4_MINIP={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x19}}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x1}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}}}]}, @CTA_FILTER={0x1c, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x828}, @CTA_FILTER_ORIG_FLAGS={0x8}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x5e9}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20004884) shmat(0x0, &(0x7f00006b2000/0x1000)=nil, 0x5000) read$FUSE(r0, &(0x7f0000007940)={0x2020}, 0x2020) 28.64887037s ago: executing program 6 (id=6115): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000980)={0x110, 0x22, 0x1, 0x0, 0x0, "", [@nested={0x100, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000cb748edb353d70010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be"]}]}, 0x110}], 0x1}, 0x80) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) 28.564048061s ago: executing program 6 (id=6117): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETSW(r1, 0x5403, &(0x7f0000000000)={0x7ffe, 0x0, 0x0, 0x10000, 0x0, "af99799d517effffffb429295e821a7b2364ee"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000240)) write(r0, &(0x7f0000000000)="fb196dec69a10b2284f761", 0xb) 28.486826316s ago: executing program 8 (id=6118): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x24044000) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000001180)={{r0}, "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"}) ioctl$TCXONC(r2, 0x4b45, 0x3) io_setup(0x30, &(0x7f0000000600)) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) (async) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x24044000) (async) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000001180)={{r0}, "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"}) (async) ioctl$TCXONC(r2, 0x4b45, 0x3) (async) io_setup(0x30, &(0x7f0000000600)) (async) 28.438236765s ago: executing program 6 (id=6120): ioperm(0x0, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3d, 0x0, 0x0, 0x2, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x8600, 0x0) fcntl$lock(r1, 0x7, &(0x7f00000000c0)={0x1, 0x0, 0x7fffffffffffffff, 0xc0}) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r2, 0x4b45, 0x3) io_setup(0x30, &(0x7f0000000600)) 28.354304389s ago: executing program 8 (id=6121): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000002bc0), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000003e00)=ANY=[@ANYBLOB="64800000", @ANYRES16=r1, @ANYBLOB="370426bd7000fcdbdf250400000005000a000100000008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x4) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f00000a8000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r2, 0x45808000) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0xff}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}], 0x1}}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000001c0)={0x0, 0x3f, "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"}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b041000e0ff021202004788aa96a13bb1000000000088641183", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) 28.253615931s ago: executing program 6 (id=6122): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x4aaa02, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2c, 0x2, r1, 0x29, r2}, 0x10) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000980)={0x0, 0x9, 0x0, &(0x7f00000000c0)=[{0x80000000}, {}, {}, {0x80000000}, {0x80000000}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f00000007c0)=[{0x0, 0x80000000, 0x0, {0x0}}, {0x0, 0x80000000, 0x0, {0x0}}, {0x0, 0x80000000, 0x0, {0x0}}, {0x0, 0x80000000, 0x0, {0x0}}, {}], 0x5, 0x0, &(0x7f0000000880)=[{}, {}, {}, {}, {}]}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x134, r10, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1918a0c3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x2a}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4f}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x90}, 0x0) bind$bt_sco(r0, &(0x7f0000000c40)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000d40)={&(0x7f0000000c80), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x44, 0x0, 0x100, 0x7fff, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}}, 0x5) r11 = syz_open_dev$media(&(0x7f0000000ec0), 0x0, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000fc0)={r3, &(0x7f0000000f00), &(0x7f0000000f40)=[{{}, {0x80000000}}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r11, 0xc0347c03, &(0x7f0000001000)={{r13, r6, 0x2, [0x35, 0x3ff]}, {r4, r9, 0x6, [0xe06, 0xff]}, 0x10000000, [0x4, 0x2]}) r14 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r14, &(0x7f0000005dc0)=[{{&(0x7f0000001040)=@hci, 0x80, &(0x7f0000004500)=[{&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/216, 0xd8}, {&(0x7f00000031c0)=""/176, 0xb0}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/231, 0xe7}, {&(0x7f0000004380)=""/79, 0x4f}, {&(0x7f0000004400)=""/250, 0xfa}], 0x8, &(0x7f0000004580)=""/215, 0xd7}, 0x283c}, {{&(0x7f0000004680)=@isdn, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004700)=""/22, 0x16}, {&(0x7f0000004740)=""/136, 0x88}, {&(0x7f0000004800)=""/166, 0xa6}, {&(0x7f00000048c0)=""/122, 0x7a}, {&(0x7f0000004940)=""/73, 0x49}], 0x5, &(0x7f0000004a40)=""/253, 0xfd}, 0x80}, {{&(0x7f0000004b40)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000005d80)=[{&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/86, 0x56}, {&(0x7f0000005c40)=""/253, 0xfd}, {&(0x7f0000005d40)=""/59, 0x3b}], 0x4}, 0x2}], 0x3, 0x101, &(0x7f0000005e80)) ioctl$MEDIA_IOC_G_TOPOLOGY(r11, 0xc0487c04, &(0x7f0000006240)={0x0, 0x1, 0x0, &(0x7f0000005ec0)=[{}], 0x3, 0x0, &(0x7f0000005f40)=[{}, {}, {}], 0x6, 0x0, &(0x7f00000060c0)=[{}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000006180)=[{}, {}, {}, {}]}) r15 = openat$nci(0xffffffffffffff9c, &(0x7f00000062c0), 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r15, 0x9408, 0x0) read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) connect$vsock_stream(r0, &(0x7f0000008340), 0x10) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000008380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x90, 0xf9, [{{0x9, 0x4, 0x0, 0x87, 0x2, 0x7, 0x1, 0x2, 0x12, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x9, 0x8, 0x8}}}}}]}}]}}, &(0x7f00000085c0)={0xa, &(0x7f00000083c0)={0xa, 0x6, 0x110, 0x37, 0x2, 0x4, 0x20, 0x40}, 0x19, &(0x7f0000008400)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x5, 0x0, 0x10, [0xc000, 0x3f]}]}, 0x3, [{0x4, &(0x7f0000008440)=@lang_id={0x4, 0x3, 0x410}}, {0xf2, &(0x7f0000008480)=@string={0xf2, 0x3, "5c690292f5a7730398fbb8cef73c03babab69a95476c1469b94a87298ce48a84ab0b4bd8895fa57816fed2ff6f0b940b4bd552bbeff0046dfb47c48d33141be84b31f99396d9a001b57ae8e783979058e38c158927614246e538c319d08452d66fdc217e3b530d840bc73c8e554b2a7ec7d2aa027af2f7941266446adae10eb6029979f5d72dcef31ec300f93435d2a6b8360c57a2d54ec060a47a42b994c39cec35056dff6e693f49a332070423ba99923ff5885171de9bf22f4bf532a4585dd53196ec6df73d2029aa8bd631f3bbdcee28ead8aaacea04068c2afc6a69968166b03c6f2a513f0102e69e066c99f399"}}, {0x4, &(0x7f0000008580)=@lang_id={0x4, 0x3, 0xc0c}}]}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000086c0)={&(0x7f0000008600), 0xc, &(0x7f0000008680)={&(0x7f0000008640)={0x30, 0x1405, 0x400, 0x70bd2b, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) r16 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000008700), 0x400000, 0x0) r17 = syz_open_dev$media(&(0x7f0000008740), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r17, 0xc0347c03, &(0x7f0000008780)={{r12, r8, 0x1, [0x8, 0x7]}, {r5, r7, 0x2, [0x9, 0x8]}, 0x1, [0x62, 0x8]}) r18 = syz_genetlink_get_family_id$ethtool(&(0x7f0000008800), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000088c0)={&(0x7f00000087c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000008880)={&(0x7f0000008840)={0x1c, r18, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x80}]}, 0x1c}}, 0x40001) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000008a00)={&(0x7f0000008900)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f00000089c0)={&(0x7f0000008940)={0x48, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) ioctl$VT_WAITACTIVE(r16, 0x5607) 22.395002049s ago: executing program 7 (id=6138): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x800) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000000)={{0x0, 0x81, 0x8, 0x6, 0x4, 0x4, 0x8000000000000000, 0xc, 0x8a, 0x8, 0x80, 0x6, 0x1, 0xffff, 0x3}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f00000000c0)={{r3, 0x6, 0xfffffffffffffffa, 0x3, 0x2, 0x8000000000000000, 0xfffffffffffffff8, 0x0, 0x80, 0xc2e2, 0x1, 0x6, 0x8, 0x800, 0x6}, 0x20, [0x0, 0x0, 0x0, 0x0]}) ioctl$TCXONC(r2, 0x4b45, 0x3) io_setup(0x30, &(0x7f0000000600)) 22.382210351s ago: executing program 7 (id=6139): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000000)=@x86={0x9, 0x7, 0x8c, 0x0, 0x7, 0x8, 0xff, 0xb, 0xc, 0xf9, 0x2, 0xfb, 0x0, 0x8, 0x5, 0xb, 0x3, 0x7, 0x9, '\x00', 0x1c, 0x6}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000080)=@s={0x5, @SEQ_MIDIPUTC=0xf6}) ioctl$KVM_RUN(r1, 0xae80, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) prctl$PR_GET_THP_DISABLE(0x2a) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x180000f, 0x13, r5, 0x1000) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r7 = dup(r6) r8 = memfd_create(&(0x7f0000002180)='\t^\x1ax1\xc7\xbe\xa1\xc6F\xfa\x9cq\xb8w&\xdfP\xba\xdf%\x7f\xb7\xac\x952\x8d\xa0\x15\xbc\xf4nS\x11X\x95\xc0~srQ\xeaS\x88\xad\xd1Js\\\xb2\xc5\xed\xe8\x7f\xdc(\x01\xcey\xc7\x15?\n\xad\xe7Z\x9e\xe1K\xfd\xc95f@O}\\\xdd\xca!;\xf38\'D9\xcb\xda\xa1\xc1\v\xb9\xad\xb7}l\xbe\x95p\xd4)\x18x\x17\xab7\x06\x9f\xe3X\v\xf2\xcc\x05\xb4( m\xde\x0f\xf3\xf8\x1b\vW\x00\x90\x01\xfe\x1e<\xabL-3\xe6\x81V\x8d3\x1b\xe4}\xe3\x7f\x06\xce\xe1D\x94&\xac\x88\x95\xff\xda\x14d\xcbx\x93x\x95\xab\xcb@\x8d\xa0\xe4I\xff\x87\x90\xd9\x89O\x98\x90\x86\xff\xcc\xc1\xf5\r\xea\x19c\xba\xa9\"d$\x01h\x0f&/B\xa5\x18%\xc7\x7f\x81X)s\xc8\xc7ex#\xb0\xe4\x1b\xce\x0f\xear,\x8ch=:F$\xe6\x87\xf0AF\xd5\x84c\xd5\xd5(\xb3\xac\x9b\x80\x81y\xf1\a\x0f\x00\x00\x00\x00\xff\xff\xff\xff\xb8~\xaa-', 0xb) fchmod(r8, 0x1c0) setsockopt$PNPIPE_HANDLE(r5, 0x113, 0x3, &(0x7f0000000040)=0x3, 0x4) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r9, 0xc06864b8, &(0x7f0000000580)={0x0, 0x2000, 0x80, 0x3231564e, 0x3, [0x2], [0x2000], [], [0x400000000000001]}) sendmmsg$unix(r5, 0x0, 0x0, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) 21.838490291s ago: executing program 7 (id=6140): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) mlock(&(0x7f0000950000/0x2000)=nil, 0x2000) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b010203010902240001000000000904"], 0x0) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) 19.639089769s ago: executing program 5 (id=6144): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001040)=""/4095, 0xfff}, {&(0x7f0000003240)=""/4132, 0x1024}, {&(0x7f0000002040)=""/287, 0x171}, {&(0x7f0000000340)=""/198, 0xcb}, {&(0x7f0000000540)=""/228, 0xe4}], 0x5}, 0x0) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) recvmsg$kcm(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f0000723000/0x4000)=nil, 0x4000, 0x1000001, 0x20010, r1, 0x1da21000) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310d2dbd7000ffdbdf002500000008000300", @ANYRES32=r5, @ANYBLOB="05000800000000000a00340001010101010100000800350007000300080026006c090000090007004121c2c5be0000000800090001ac0f000a0006"], 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000c}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x80, r4, 0x20, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x35}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x29}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x36}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4c}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}]}, 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4004) 19.411375952s ago: executing program 5 (id=6145): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) writev(r1, &(0x7f00000014c0)=[{&(0x7f0000000240)="a3", 0x1}], 0x1) r2 = syz_open_dev$video(&(0x7f0000000040), 0x4, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05640, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x8, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x5, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x1006, 0x129432e6, 0xc9, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x1cb0, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x8, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x6, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x800a9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x0, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d694, 0xa1f, 0xd40, 0xb, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) syz_open_dev$vim2m(&(0x7f00000001c0), 0x80000001, 0x2) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x40005, 0x2) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmmsg(r3, 0x0, 0x0, 0x4000000) (async) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000654000/0x2000)=nil, 0x2000}) (async) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000140), 0x4) (async) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x80184151, 0x0) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x98}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r5, 0xffffffdb}, 0x8) 19.302957478s ago: executing program 5 (id=6146): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="6d706f6c037072656665723d72656c61746976652c00"]) creat(&(0x7f0000001380)='./file0\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr(r0, &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0)='/\x00', 0x2, 0x1) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r1, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) capset(&(0x7f00000020c0)={0x19980330}, &(0x7f0000002100)={0x0, 0x3}) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000240)=0x7) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000080)='selinuxfs\x00', 0x8000, 0x0) 19.191675969s ago: executing program 5 (id=6147): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x2c, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x19}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) creat(&(0x7f0000001380)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) 19.178135324s ago: executing program 5 (id=6148): ioprio_set$pid(0x1, 0x0, 0x0) mq_unlink(&(0x7f0000001dc0)='-.\x00') socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r1 = socket$inet6(0xa, 0xa, 0xfffffffc) r2 = mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x6000007, 0x4f833, r0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x35, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f0000000200)=ANY=[@ANYRESOCT=r2, @ANYRES32=r1, @ANYRESDEC=r1], 0x9) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0, 0x4d) lseek(r4, 0x101, 0x1) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0xc002, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffe) preadv(r5, &(0x7f0000000180), 0x0, 0x1ff, 0x8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(r3, 0x0, 0x0, 0x2, &(0x7f0000000440)={0x2, 0x4e20, @remote}, 0x10) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r7, &(0x7f0000000340)='ns/net\x00') 18.784339496s ago: executing program 7 (id=6149): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) r3 = socket(0x22, 0x2, 0x4) ioctl$IMGETCOUNT(r3, 0x80044943, &(0x7f00000001c0)) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x481, 0x0) r5 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r5, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r5, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000b40)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="400100000b01edff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r5, 0x0, &(0x7f00000009c0)={0x84, &(0x7f00000002c0)={0x0, 0xf, 0x2, "e911"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f00000027c0)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xfffffffd}}, 0x4f, 0x7}, &(0x7f0000002880)=0x90) ioctl$SNAPSHOT_SET_SWAP_AREA(r4, 0x400c330d, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, 0x0) r7 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r7, 0xc014563b, &(0x7f0000000100)={0x7}) fchdir(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fstat(r8, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, r9) quotactl_fd$Q_SETINFO(r0, 0xffffffff00000c00, r9, &(0x7f00000000c0)={0x7f, 0x3, 0x1, 0x2}) 16.090968363s ago: executing program 5 (id=6150): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x54) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x20000008}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r2, &(0x7f0000000040)={0x4000000b}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000300)={0x5000200d}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) capset(&(0x7f00000001c0)={0x20080522, r5}, &(0x7f0000000200)={0x6, 0x66e1, 0x4, 0x8, 0x10000, 0x2a}) epoll_pwait2(r4, &(0x7f0000000080)=[{}], 0x1, 0x0, &(0x7f0000000180)={[0x4]}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000006000900030073797a320000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800b0001007470726f78790000090002800800024000000000000003400000000208000140000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}]}], {0x14}}, 0xcc}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x800000, &(0x7f0000000080)={[{@inode32}]}) socket(0x40000000015, 0x5, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r9, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464b4, &(0x7f0000000080)={r10}) 15.738085024s ago: executing program 7 (id=6151): mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x1200000, 0x0) 15.689694914s ago: executing program 7 (id=6152): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f00000001c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r10, 0x4, 0x40800) (async) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r11, 0x2000009) (async) sendfile(r10, r11, 0x0, 0x7ffff004) (async) open_tree(r11, &(0x7f0000000100)='./file0\x00', 0x1000) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r9}) (async) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) write(r7, &(0x7f0000000040)="240000001a005f0214f9f4070009001f000100"/36, 0x24) (async) ioctl$FICLONE(r6, 0x40049409, r5) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0xfffb, 0x8004, 0x6, 0x1, r4}, &(0x7f0000000280)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 12.669143907s ago: executing program 37 (id=6121): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000002bc0), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000003e00)=ANY=[@ANYBLOB="64800000", @ANYRES16=r1, @ANYBLOB="370426bd7000fcdbdf250400000005000a000100000008000100", @ANYRES32=0x0, @ANYBLOB], 0x24}}, 0x4) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) mmap(&(0x7f00000a8000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r2, 0x45808000) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r3, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1, 0xff}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}], 0x1}}], 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f00000001c0)={0x0, 0x3f, "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"}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x200, 0x4) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000001c0)={'veth0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000180)="0b041000e0ff021202004788aa96a13bb1000000000088641183", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) 12.59631864s ago: executing program 38 (id=6122): r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x4aaa02, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000080)={0x2c, 0x2, r1, 0x29, r2}, 0x10) ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000980)={0x0, 0x9, 0x0, &(0x7f00000000c0)=[{0x80000000}, {}, {}, {0x80000000}, {0x80000000}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x5, 0x0, &(0x7f00000007c0)=[{0x0, 0x80000000, 0x0, {0x0}}, {0x0, 0x80000000, 0x0, {0x0}}, {0x0, 0x80000000, 0x0, {0x0}}, {0x0, 0x80000000, 0x0, {0x0}}, {}], 0x5, 0x0, &(0x7f0000000880)=[{}, {}, {}, {}, {}]}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000a40), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x134, r10, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1000}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7f}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1918a0c3}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0x2a}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x31}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4f}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6c}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x5}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x90}, 0x0) bind$bt_sco(r0, &(0x7f0000000c40)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000d40)={&(0x7f0000000c80), 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x14, 0x0, 0x10, 0x70bd29, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x44, 0x0, 0x100, 0x7fff, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x44}}, 0x5) r11 = syz_open_dev$media(&(0x7f0000000ec0), 0x0, 0x4000) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000fc0)={r3, &(0x7f0000000f00), &(0x7f0000000f40)=[{{}, {0x80000000}}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r11, 0xc0347c03, &(0x7f0000001000)={{r13, r6, 0x2, [0x35, 0x3ff]}, {r4, r9, 0x6, [0xe06, 0xff]}, 0x10000000, [0x4, 0x2]}) r14 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r14, &(0x7f0000005dc0)=[{{&(0x7f0000001040)=@hci, 0x80, &(0x7f0000004500)=[{&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/216, 0xd8}, {&(0x7f00000031c0)=""/176, 0xb0}, {&(0x7f0000003280)=""/4096, 0x1000}, {&(0x7f0000004280)=""/231, 0xe7}, {&(0x7f0000004380)=""/79, 0x4f}, {&(0x7f0000004400)=""/250, 0xfa}], 0x8, &(0x7f0000004580)=""/215, 0xd7}, 0x283c}, {{&(0x7f0000004680)=@isdn, 0x80, &(0x7f00000049c0)=[{&(0x7f0000004700)=""/22, 0x16}, {&(0x7f0000004740)=""/136, 0x88}, {&(0x7f0000004800)=""/166, 0xa6}, {&(0x7f00000048c0)=""/122, 0x7a}, {&(0x7f0000004940)=""/73, 0x49}], 0x5, &(0x7f0000004a40)=""/253, 0xfd}, 0x80}, {{&(0x7f0000004b40)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f0000005d80)=[{&(0x7f0000004bc0)=""/4096, 0x1000}, {&(0x7f0000005bc0)=""/86, 0x56}, {&(0x7f0000005c40)=""/253, 0xfd}, {&(0x7f0000005d40)=""/59, 0x3b}], 0x4}, 0x2}], 0x3, 0x101, &(0x7f0000005e80)) ioctl$MEDIA_IOC_G_TOPOLOGY(r11, 0xc0487c04, &(0x7f0000006240)={0x0, 0x1, 0x0, &(0x7f0000005ec0)=[{}], 0x3, 0x0, &(0x7f0000005f40)=[{}, {}, {}], 0x6, 0x0, &(0x7f00000060c0)=[{}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000006180)=[{}, {}, {}, {}]}) r15 = openat$nci(0xffffffffffffff9c, &(0x7f00000062c0), 0x2, 0x0) ioctl$BTRFS_IOC_SYNC(r15, 0x9408, 0x0) read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) connect$vsock_stream(r0, &(0x7f0000008340), 0x10) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000008380)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x90, 0xf9, [{{0x9, 0x4, 0x0, 0x87, 0x2, 0x7, 0x1, 0x2, 0x12, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x9, 0x8, 0x8}}}}}]}}]}}, &(0x7f00000085c0)={0xa, &(0x7f00000083c0)={0xa, 0x6, 0x110, 0x37, 0x2, 0x4, 0x20, 0x40}, 0x19, &(0x7f0000008400)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0x7, 0x2, 0x5, 0x0, 0x10, [0xc000, 0x3f]}]}, 0x3, [{0x4, &(0x7f0000008440)=@lang_id={0x4, 0x3, 0x410}}, {0xf2, &(0x7f0000008480)=@string={0xf2, 0x3, "5c690292f5a7730398fbb8cef73c03babab69a95476c1469b94a87298ce48a84ab0b4bd8895fa57816fed2ff6f0b940b4bd552bbeff0046dfb47c48d33141be84b31f99396d9a001b57ae8e783979058e38c158927614246e538c319d08452d66fdc217e3b530d840bc73c8e554b2a7ec7d2aa027af2f7941266446adae10eb6029979f5d72dcef31ec300f93435d2a6b8360c57a2d54ec060a47a42b994c39cec35056dff6e693f49a332070423ba99923ff5885171de9bf22f4bf532a4585dd53196ec6df73d2029aa8bd631f3bbdcee28ead8aaacea04068c2afc6a69968166b03c6f2a513f0102e69e066c99f399"}}, {0x4, &(0x7f0000008580)=@lang_id={0x4, 0x3, 0xc0c}}]}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000086c0)={&(0x7f0000008600), 0xc, &(0x7f0000008680)={&(0x7f0000008640)={0x30, 0x1405, 0x400, 0x70bd2b, 0x25dfdbff, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x4000001) r16 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000008700), 0x400000, 0x0) r17 = syz_open_dev$media(&(0x7f0000008740), 0x2, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(r17, 0xc0347c03, &(0x7f0000008780)={{r12, r8, 0x1, [0x8, 0x7]}, {r5, r7, 0x2, [0x9, 0x8]}, 0x1, [0x62, 0x8]}) r18 = syz_genetlink_get_family_id$ethtool(&(0x7f0000008800), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000088c0)={&(0x7f00000087c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000008880)={&(0x7f0000008840)={0x1c, r18, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x80}]}, 0x1c}}, 0x40001) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000008a00)={&(0x7f0000008900)={0x10, 0x0, 0x0, 0x8020000}, 0xc, &(0x7f00000089c0)={&(0x7f0000008940)={0x48, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'pim6reg1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x40000) ioctl$VT_WAITACTIVE(r16, 0x5607) 1.020998497s ago: executing program 39 (id=6150): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x54) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)={0x20000008}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r2, &(0x7f0000000040)={0x4000000b}) epoll_ctl$EPOLL_CTL_MOD(r4, 0x3, r0, &(0x7f0000000300)={0x5000200d}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) capset(&(0x7f00000001c0)={0x20080522, r5}, &(0x7f0000000200)={0x6, 0x66e1, 0x4, 0x8, 0x10000, 0x2a}) epoll_pwait2(r4, &(0x7f0000000080)=[{}], 0x1, 0x0, &(0x7f0000000180)={[0x4]}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000006000900030073797a320000000058000000060a010400000000000000000100000008000b4000000000300004802c0001800b0001007470726f78790000090002800800024000000000000003400000000208000140000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xcc}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}]}], {0x14}}, 0xcc}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000240), 0x800000, &(0x7f0000000080)={[{@inode32}]}) socket(0x40000000015, 0x5, 0x0) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r9, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464b4, &(0x7f0000000080)={r10}) 0s ago: executing program 40 (id=6152): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f00000001c0)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'batadv_slave_1\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r7 = socket(0x10, 0x3, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) (async) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r10, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r10, 0x4, 0x40800) (async) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r11, 0x2000009) (async) sendfile(r10, r11, 0x0, 0x7ffff004) (async) open_tree(r11, &(0x7f0000000100)='./file0\x00', 0x1000) (async) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r8, 0x3b87, &(0x7f0000000600)={0x18, 0x1, 0x1, 0x0, r9}) (async) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) (async) write(r7, &(0x7f0000000040)="240000001a005f0214f9f4070009001f000100"/36, 0x24) (async) ioctl$FICLONE(r6, 0x40049409, r5) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0xfffb, 0x8004, 0x6, 0x1, r4}, &(0x7f0000000280)=0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) kernel console output (not intermixed with test programs): gs: Mfr=1, Product=2, SerialNumber=3 [ 985.528732][T20750] usb 6-1: Product: syz [ 985.533463][T20750] usb 6-1: Manufacturer: syz [ 985.538165][T20750] usb 6-1: SerialNumber: syz [ 985.547550][T20750] usb 6-1: config 0 descriptor?? [ 985.558558][T25605] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 985.567090][T25605] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 985.585839][ T5942] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input183 [ 985.598878][ T5187] bcm5974 9-1:1.0: could not read from device [ 985.639537][ T5942] usb 9-1: USB disconnect, device number 31 [ 985.797279][T25605] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 985.804966][T25605] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 985.927108][T25617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 985.940791][T25617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 985.956648][T25617] fuse: Unknown parameter '0x000000000000000c' [ 986.162747][ T5833] usb 7-1: new high-speed USB device number 123 using dummy_hcd [ 986.232787][ T5942] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 986.294309][ T5833] usb 7-1: device descriptor read/64, error -71 [ 986.402754][ T5942] usb 9-1: Using ep0 maxpacket: 8 [ 986.411456][ T5942] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 986.421714][ T5942] usb 9-1: config 0 has no interfaces? [ 986.428205][ T5942] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 986.437489][T20750] asix 6-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0xa9 [ 986.446680][ T5942] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.462779][ T5942] usb 9-1: config 0 descriptor?? [ 986.532674][ T5833] usb 7-1: new high-speed USB device number 124 using dummy_hcd [ 986.640048][T25605] Can't find a SQUASHFS superblock on rnullb0 [ 986.662707][ T5833] usb 7-1: device descriptor read/64, error -71 [ 986.694147][ T5942] usb 6-1: USB disconnect, device number 103 [ 986.773529][ T5833] usb usb7-port1: attempt power cycle [ 987.078518][T25623] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 987.086150][T25623] cramfs: wrong magic [ 987.112772][ T5833] usb 7-1: new high-speed USB device number 125 using dummy_hcd [ 987.135246][ T5833] usb 7-1: device descriptor read/8, error -71 [ 987.238054][T25625] FAULT_INJECTION: forcing a failure. [ 987.238054][T25625] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 987.256836][T25625] CPU: 0 UID: 0 PID: 25625 Comm: syz.5.5584 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 987.256855][T25625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 987.256862][T25625] Call Trace: [ 987.256867][T25625] [ 987.256872][T25625] dump_stack_lvl+0x189/0x250 [ 987.256890][T25625] ? __pfx____ratelimit+0x10/0x10 [ 987.256906][T25625] ? __pfx_dump_stack_lvl+0x10/0x10 [ 987.256917][T25625] ? __pfx__printk+0x10/0x10 [ 987.256935][T25625] should_fail_ex+0x414/0x560 [ 987.256954][T25625] strncpy_from_user+0x36/0x290 [ 987.256972][T25625] getname_flags+0xf3/0x540 [ 987.256989][T25625] __x64_sys_newlstat+0xcc/0x170 [ 987.257004][T25625] ? __pfx___x64_sys_newlstat+0x10/0x10 [ 987.257028][T25625] ? __pfx_ksys_write+0x10/0x10 [ 987.257043][T25625] ? do_syscall_64+0xbe/0x3b0 [ 987.257054][T25625] do_syscall_64+0xfa/0x3b0 [ 987.257063][T25625] ? lockdep_hardirqs_on+0x9c/0x150 [ 987.257079][T25625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.257089][T25625] ? clear_bhb_loop+0x60/0xb0 [ 987.257101][T25625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 987.257111][T25625] RIP: 0033:0x7f7ff018e929 [ 987.257122][T25625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 987.257131][T25625] RSP: 002b:00007f7ff1003038 EFLAGS: 00000246 ORIG_RAX: 0000000000000006 [ 987.257143][T25625] RAX: ffffffffffffffda RBX: 00007f7ff03b5fa0 RCX: 00007f7ff018e929 [ 987.257151][T25625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 987.257158][T25625] RBP: 00007f7ff1003090 R08: 0000000000000000 R09: 0000000000000000 [ 987.257164][T25625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 987.257171][T25625] R13: 0000000000000000 R14: 00007f7ff03b5fa0 R15: 00007fff7dad9008 [ 987.257186][T25625] [ 987.526191][ T5833] usb 7-1: new high-speed USB device number 126 using dummy_hcd [ 987.553666][ T5833] usb 7-1: device descriptor read/8, error -71 [ 987.659859][T25636] qnx4: no qnx4 filesystem (no root dir). [ 987.665486][ T5833] usb usb7-port1: unable to enumerate USB device [ 987.755219][T25639] afs: Unknown parameter 'mask' [ 988.901722][T20750] usb 9-1: USB disconnect, device number 32 [ 989.459179][T25667] qnx4: no qnx4 filesystem (no root dir). [ 989.486625][T25670] syz.8.5602: attempt to access beyond end of device [ 989.486625][T25670] nbd8: rw=0, sector=2, nr_sectors = 1 limit=0 [ 989.656715][T25677] input: syz1 as /devices/virtual/input/input184 [ 990.037565][T25685] FAULT_INJECTION: forcing a failure. [ 990.037565][T25685] name failslab, interval 1, probability 0, space 0, times 0 [ 990.050519][T25685] CPU: 1 UID: 0 PID: 25685 Comm: syz.6.5607 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 990.050545][T25685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 990.050557][T25685] Call Trace: [ 990.050565][T25685] [ 990.050574][T25685] dump_stack_lvl+0x189/0x250 [ 990.050601][T25685] ? __pfx____ratelimit+0x10/0x10 [ 990.050632][T25685] ? __pfx_dump_stack_lvl+0x10/0x10 [ 990.050653][T25685] ? __pfx__printk+0x10/0x10 [ 990.050681][T25685] ? __pfx___might_resched+0x10/0x10 [ 990.050701][T25685] ? fs_reclaim_acquire+0x7d/0x100 [ 990.050730][T25685] should_fail_ex+0x414/0x560 [ 990.050766][T25685] should_failslab+0xa8/0x100 [ 990.050790][T25685] __kmalloc_noprof+0xcb/0x4f0 [ 990.050808][T25685] ? kfree+0x4d/0x440 [ 990.050824][T25685] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 990.050856][T25685] tomoyo_realpath_from_path+0xe3/0x5d0 [ 990.050883][T25685] ? tomoyo_domain+0xd9/0x130 [ 990.050914][T25685] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 990.050935][T25685] tomoyo_path_number_perm+0x1e8/0x5a0 [ 990.050958][T25685] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 990.050997][T25685] ? __lock_acquire+0xab9/0xd20 [ 990.051047][T25685] ? __fget_files+0x2a/0x420 [ 990.051076][T25685] ? __fget_files+0x2a/0x420 [ 990.051100][T25685] ? __fget_files+0x3a0/0x420 [ 990.051124][T25685] ? __fget_files+0x2a/0x420 [ 990.051153][T25685] security_file_ioctl+0xcb/0x2d0 [ 990.051174][T25685] __se_sys_ioctl+0x47/0x170 [ 990.051198][T25685] do_syscall_64+0xfa/0x3b0 [ 990.051215][T25685] ? lockdep_hardirqs_on+0x9c/0x150 [ 990.051243][T25685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.051263][T25685] ? clear_bhb_loop+0x60/0xb0 [ 990.051287][T25685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 990.051306][T25685] RIP: 0033:0x7f7f6af8e929 [ 990.051324][T25685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 990.051341][T25685] RSP: 002b:00007f7f6bd77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 990.051361][T25685] RAX: ffffffffffffffda RBX: 00007f7f6b1b5fa0 RCX: 00007f7f6af8e929 [ 990.051377][T25685] RDX: 0000200000000180 RSI: 000000004040534e RDI: 0000000000000003 [ 990.051396][T25685] RBP: 00007f7f6bd77090 R08: 0000000000000000 R09: 0000000000000000 [ 990.051412][T25685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 990.051424][T25685] R13: 0000000000000000 R14: 00007f7f6b1b5fa0 R15: 00007ffc3dbf1218 [ 990.051455][T25685] [ 990.051464][T25685] ERROR: Out of memory at tomoyo_realpath_from_path. [ 990.367551][T25691] XFS (rnullb0): Invalid superblock magic number [ 990.456017][ T5922] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 990.612759][ T5922] usb 9-1: Using ep0 maxpacket: 8 [ 990.622795][ T5922] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 990.631838][ T5922] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.640449][ T5922] usb 9-1: Product: syz [ 990.645163][ T5922] usb 9-1: Manufacturer: syz [ 990.649761][ T5922] usb 9-1: SerialNumber: syz [ 990.656847][ T5922] usb 9-1: config 0 descriptor?? [ 990.864760][ T5922] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 990.911977][ T5922] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 990.961868][ T5922] usb 9-1: USB disconnect, device number 33 [ 991.742684][ T5922] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 991.892658][ T5922] usb 9-1: Using ep0 maxpacket: 32 [ 991.915359][ T5922] usb 9-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 991.952664][ T5922] usb 9-1: config 0 interface 0 has no altsetting 0 [ 991.959330][ T5922] usb 9-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 992.007431][ T5922] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.036440][ T5922] usb 9-1: config 0 descriptor?? [ 992.087412][ T5922] usbhid 9-1:0.0: can't add hid device: -22 [ 992.102730][ T5922] usbhid 9-1:0.0: probe with driver usbhid failed with error -22 [ 992.987500][T25758] fuse: Unknown parameter '' [ 993.332755][ T43] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 993.494655][ T43] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 993.512640][ T43] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 993.538924][ T43] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 993.557215][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 7 [ 993.569756][ T43] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 993.584609][ T43] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 993.597467][ T43] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 993.605954][ T43] usb 6-1: Product: syz [ 993.610309][ T43] usb 6-1: Manufacturer: syz [ 993.648387][ T43] cdc_wdm 6-1:1.0: skipping garbage [ 993.664750][ T43] cdc_wdm 6-1:1.0: skipping garbage [ 993.677125][ T43] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 993.868662][T25762] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 994.427258][ T5833] usb 6-1: USB disconnect, device number 104 [ 994.510193][T25720] overlayfs: statfs failed on './file0' [ 994.566099][ T43] usb 9-1: USB disconnect, device number 34 [ 994.762314][T25783] /dev/rnullb0: Can't open blockdev [ 995.120425][T25802] syzkaller1: renamed from hsr0 (while UP) [ 995.132686][ T43] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 995.292747][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 995.305022][ T43] usb 6-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 995.316853][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.336768][ T43] usb 6-1: Product: syz [ 995.342253][ T43] usb 6-1: Manufacturer: syz [ 995.350782][ T43] usb 6-1: SerialNumber: syz [ 995.365526][ T43] usb 6-1: config 0 descriptor?? [ 995.384512][ T43] usb-storage 6-1:0.0: USB Mass Storage device detected [ 995.407156][ T43] usb-storage 6-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 995.426344][ T43] usb-storage 6-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.16.0-rc3-next-20250624-syzkaller) [ 995.426344][ T43] Please send a copy of this message to and [ 995.587638][T25789] fuse: Bad value for 'fd' [ 995.606395][ T43] usb 6-1: USB disconnect, device number 105 [ 996.155978][ T5833] usb 7-1: new high-speed USB device number 127 using dummy_hcd [ 996.228496][T25850] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 996.327895][ T5833] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 996.352665][ T5833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 996.384517][ T5833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 996.422711][T23159] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 996.430485][ T5833] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 996.463251][ T5833] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 996.480138][ T5833] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.503951][ T5833] usb 7-1: config 0 descriptor?? [ 996.630803][T23159] usb 9-1: unable to get BOS descriptor or descriptor too short [ 996.641876][T23159] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 996.675269][T23159] usb 9-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 996.698567][T23159] usb 9-1: config 1 interface 0 has no altsetting 1 [ 996.712264][T23159] usb 9-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 996.729512][ T5833] plantronics 0003:047F:FFFF.0061: ignoring exceeding usage max [ 996.741328][T23159] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.769990][T23159] usb 9-1: Product: syz [ 996.777040][T23159] usb 9-1: Manufacturer: syz [ 996.808318][ T5833] plantronics 0003:047F:FFFF.0061: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 996.832368][T23159] usb 9-1: SerialNumber: syz [ 996.873309][T23159] smsusb:smsusb_probe: board id=8, interface number 0 [ 996.890803][ T30] audit: type=1326 audit(2000000573.176:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25867 comm="syz.5.5664" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7ff018e929 code=0x0 [ 996.912504][ C0] vkms_vblank_simulate: vblank timer overrun [ 996.960177][T25871] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 996.989776][T25871] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 997.380203][T23159] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 997.392853][T23159] smsusb 9-1:1.0: probe with driver smsusb failed with error -71 [ 997.421734][T23159] usb 9-1: USB disconnect, device number 35 [ 998.471640][T25911] /dev/rnullb0: Can't open blockdev [ 999.082746][ T5922] usb 7-1: reset high-speed USB device number 127 using dummy_hcd [ 999.093402][T25933] /dev/rnullb0: Can't open blockdev [ 999.279036][ T5922] usb 7-1: device firmware changed [ 999.300943][T25937] FAULT_INJECTION: forcing a failure. [ 999.300943][T25937] name failslab, interval 1, probability 0, space 0, times 0 [ 999.313211][T23159] usb 7-1: USB disconnect, device number 127 [ 999.334317][T25937] CPU: 1 UID: 0 PID: 25937 Comm: syz.8.5682 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 999.334343][T25937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 999.334355][T25937] Call Trace: [ 999.334364][T25937] [ 999.334372][T25937] dump_stack_lvl+0x189/0x250 [ 999.334400][T25937] ? __pfx____ratelimit+0x10/0x10 [ 999.334430][T25937] ? __pfx_dump_stack_lvl+0x10/0x10 [ 999.334452][T25937] ? __pfx__printk+0x10/0x10 [ 999.334477][T25937] ? __pfx___might_resched+0x10/0x10 [ 999.334498][T25937] ? fs_reclaim_acquire+0x7d/0x100 [ 999.334527][T25937] should_fail_ex+0x414/0x560 [ 999.334563][T25937] should_failslab+0xa8/0x100 [ 999.334588][T25937] __kmalloc_noprof+0xcb/0x4f0 [ 999.334606][T25937] ? tomoyo_mount_permission+0x27a/0x970 [ 999.334629][T25937] ? tomoyo_encode+0x28b/0x550 [ 999.334657][T25937] tomoyo_encode+0x28b/0x550 [ 999.334685][T25937] ? tomoyo_mount_permission+0x27a/0x970 [ 999.334710][T25937] tomoyo_mount_permission+0x331/0x970 [ 999.334751][T25937] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 999.334834][T25937] security_sb_mount+0xec/0x350 [ 999.334863][T25937] path_mount+0xbc/0xfe0 [ 999.334886][T25937] ? user_path_at+0x44/0x60 [ 999.334902][T25937] ? kmem_cache_free+0x18f/0x400 [ 999.334932][T25937] __se_sys_mount+0x317/0x410 [ 999.334964][T25937] ? __pfx___se_sys_mount+0x10/0x10 [ 999.334996][T25937] ? do_syscall_64+0xbe/0x3b0 [ 999.335013][T25937] ? __x64_sys_mount+0x20/0xc0 [ 999.335040][T25937] do_syscall_64+0xfa/0x3b0 [ 999.335055][T25937] ? lockdep_hardirqs_on+0x9c/0x150 [ 999.335081][T25937] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.335099][T25937] ? clear_bhb_loop+0x60/0xb0 [ 999.335123][T25937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.335141][T25937] RIP: 0033:0x7fce1b38e929 [ 999.335158][T25937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 999.335175][T25937] RSP: 002b:00007fce1c277038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 999.335195][T25937] RAX: ffffffffffffffda RBX: 00007fce1b5b5fa0 RCX: 00007fce1b38e929 [ 999.335209][T25937] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 999.335223][T25937] RBP: 00007fce1c277090 R08: 0000200000000500 R09: 0000000000000000 [ 999.335236][T25937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 999.335248][T25937] R13: 0000000000000000 R14: 00007fce1b5b5fa0 R15: 00007ffd5eba38e8 [ 999.335279][T25937] [ 999.482670][T23159] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 999.642967][T20750] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 999.708689][T25942] 9p: Unknown uid 00000000004294967295 [ 999.794678][T20750] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 999.806341][T20750] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.825710][T25942] Mount JFS Failure: -22 [ 999.830137][T25942] jfs_mount failed w/return code = -22 [ 999.840291][T20750] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.866050][T20750] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 999.890846][T20750] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 999.894231][T23159] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 999.905491][T20750] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 999.928600][T23159] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 999.935128][T20750] usb 6-1: Manufacturer: syz [ 999.970185][T20750] usb 6-1: config 0 descriptor?? [ 999.971360][T23159] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1000.004740][T23159] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 1000.027470][T23159] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.049221][T25919] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1000.301172][T25948] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1000.405750][T20750] appleir 0003:05AC:8243.0062: item fetching failed at offset 0/1 [ 1000.423378][T20750] appleir 0003:05AC:8243.0062: parse failed [ 1000.429409][T20750] appleir 0003:05AC:8243.0062: probe with driver appleir failed with error -22 [ 1000.531724][T23159] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 1000.568629][T23159] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input185 [ 1000.653114][T23159] usb 7-1: USB disconnect, device number 2 [ 1000.659007][ C0] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1000.915856][ T5922] usb 6-1: USB disconnect, device number 106 [ 1000.928854][T25980] FAT-fs (rnullb0): bogus number of reserved sectors [ 1000.958019][T25980] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1001.293415][T26001] overlayfs: missing 'workdir' [ 1001.415960][T26006] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1001.440857][T26006] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1001.678985][T26028] /dev/rnullb0: Can't open blockdev [ 1001.702821][T23159] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1001.873308][T23159] usb 7-1: Using ep0 maxpacket: 8 [ 1001.910718][T23159] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1001.936549][T26037] overlayfs: missing 'workdir' [ 1001.941414][T23159] usb 7-1: config 0 has no interfaces? [ 1001.963710][T23159] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1002.006947][T23159] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.049683][T23159] usb 7-1: config 0 descriptor?? [ 1002.260593][T26043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5716'. [ 1002.286371][T26044] /dev/rnullb0: Can't open blockdev [ 1002.468768][T26048] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1002.626692][T26052] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1002.643438][T26052] cramfs: wrong magic [ 1002.732761][ T43] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 1002.783049][T23159] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1002.904886][T26060] overlayfs: missing 'workdir' [ 1002.918889][ T43] usb 6-1: Using ep0 maxpacket: 16 [ 1002.944395][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 144, changing to 11 [ 1002.955849][ T43] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34627, setting to 1024 [ 1002.966720][T23159] usb 9-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1002.967576][ T43] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1002.991894][ T43] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1002.996697][T23159] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.001450][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.017446][T23159] usb 9-1: Product: syz [ 1003.021690][T23159] usb 9-1: Manufacturer: syz [ 1003.028137][T23159] usb 9-1: SerialNumber: syz [ 1003.032757][ T43] usb 6-1: config 0 descriptor?? [ 1003.034202][T26048] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1003.054670][T23159] usb 9-1: config 0 descriptor?? [ 1003.128892][T26064] fuse: Unknown parameter '0x00000000000000040x00000000000000040000000000000000000000400000000000000000000004' [ 1003.274093][T23159] usb 9-1: ignoring: probably an ADSL modem [ 1003.470216][ T43] microsoft 0003:045E:07DA.0063: global environment stack underflow [ 1003.492728][ T43] microsoft 0003:045E:07DA.0063: item 0 0 1 11 parsing failed [ 1003.500963][ T43] microsoft 0003:045E:07DA.0063: parse failed [ 1003.522685][ T43] microsoft 0003:045E:07DA.0063: probe with driver microsoft failed with error -22 [ 1003.675338][T23159] cxacru 9-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1003.675539][T26048] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 1003.689850][T26048] UDF-fs: Scanning with blocksize 4096 failed [ 1003.699302][ T43] usb 6-1: USB disconnect, device number 107 [ 1003.885395][T26046] Mount JFS Failure: -22 [ 1003.889730][T26046] jfs_mount failed w/return code = -22 [ 1003.897115][T26046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.910198][T26046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.065658][ T43] usb 9-1: USB disconnect, device number 36 [ 1004.174650][T26074] qnx4: no qnx4 filesystem (no root dir). [ 1004.335503][T26084] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1004.452026][ T43] usb 7-1: USB disconnect, device number 3 [ 1004.517187][T26090] fuse: Bad value for 'rootmode' [ 1004.736265][T26100] /dev/rnullb0: Can't open blockdev [ 1004.919057][T26109] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1005.120153][T26115] /dev/rnullb0: Can't open blockdev [ 1005.234752][T26119] fuse: Bad value for 'fd' [ 1005.425715][T26125] FAT-fs (rnullb0): bogus number of reserved sectors [ 1005.432439][T26125] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1005.470744][T26129] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 1005.478669][T26129] UDF-fs: Scanning with blocksize 4096 failed [ 1005.657852][ T30] audit: type=1326 audit(2000000581.946:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26132 comm="syz.5.5753" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ff018e929 code=0x0 [ 1005.706968][T26133] netlink: 'syz.5.5753': attribute type 29 has an invalid length. [ 1005.715447][T26133] netlink: 'syz.5.5753': attribute type 29 has an invalid length. [ 1005.723751][T26133] netlink: 'syz.5.5753': attribute type 29 has an invalid length. [ 1005.732016][T26133] netlink: 'syz.5.5753': attribute type 29 has an invalid length. [ 1005.745229][ T43] usb 9-1: new full-speed USB device number 37 using dummy_hcd [ 1005.882686][ T43] usb 9-1: device descriptor read/64, error -71 [ 1006.009977][T26138] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1006.116451][T26143] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 1006.144634][T26143] UDF-fs: Scanning with blocksize 4096 failed [ 1006.150858][ T43] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 1006.293149][ T43] usb 9-1: device descriptor read/64, error -71 [ 1006.403224][ T43] usb usb9-port1: attempt power cycle [ 1006.418957][T26157] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1006.454230][T26157] overlayfs: failed to set xattr on upper [ 1006.459992][T26157] overlayfs: ...falling back to index=off. [ 1006.471686][T26157] overlayfs: ...falling back to uuid=null. [ 1006.782737][ T43] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 1006.814177][ T43] usb 9-1: device descriptor read/8, error -71 [ 1007.052856][ T43] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 1007.103358][ T43] usb 9-1: device descriptor read/8, error -71 [ 1007.132845][ T5923] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1007.230267][ T43] usb usb9-port1: unable to enumerate USB device [ 1007.282896][ T5923] usb 7-1: Using ep0 maxpacket: 32 [ 1007.289169][T26201] autofs4:pid:26201:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 1007.290098][ T5923] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 1007.308857][ T5923] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.319580][ T5923] usb 7-1: config 0 has no interface number 0 [ 1007.325955][ T5923] usb 7-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1007.336163][ T5923] usb 7-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1007.358416][ T5923] usb 7-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 1007.367543][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.378404][ T5923] usb 7-1: Product: syz [ 1007.384169][ T5923] usb 7-1: Manufacturer: syz [ 1007.388959][ T5923] usb 7-1: SerialNumber: syz [ 1007.399893][ T5923] usb 7-1: config 0 descriptor?? [ 1007.406337][T26180] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1007.420367][ T5923] usb-storage 7-1:0.231: USB Mass Storage device detected [ 1007.635877][ T5923] usb 7-1: USB disconnect, device number 4 [ 1007.938973][T26211] Can't find a SQUASHFS superblock on rnullb0 [ 1008.087542][T26221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.107494][T26221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.120105][T26223] /dev/sg0: Can't lookup blockdev [ 1008.332679][T26232] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5783'. [ 1008.419660][T26240] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 1008.429437][T26232] sctp: [Deprecated]: syz.7.5783 (pid 26232) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1008.429437][T26232] Use struct sctp_sack_info instead [ 1008.798450][ T5922] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 1008.873230][ T5923] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 1008.985922][ T5922] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1009.013529][ T5922] usb 6-1: config 0 has no interface number 0 [ 1009.030006][ T5922] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1009.054011][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.064032][ T5923] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1009.083213][ T5923] usb 9-1: not running at top speed; connect to a high speed hub [ 1009.091109][ T5922] usb 6-1: Product: syz [ 1009.096188][ T5922] usb 6-1: Manufacturer: syz [ 1009.104388][ T5923] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1009.111213][ T5922] usb 6-1: SerialNumber: syz [ 1009.118105][ T5923] usb 9-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.40 [ 1009.129031][ T5923] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.140229][ T5922] usb 6-1: config 0 descriptor?? [ 1009.145731][ T5923] usb 9-1: Product: 漭ꔔ槢塈꒬悛ꦘ࢟샗숧䜴Ԋㅃℇ儢엠㏏ॽ⎄ꋰ䘣跰䆓씰箢빒뀠㎯끨댈僡쉗ᲀ઒ᄃӾ寒祰૧讦덟耳믝椢癄ㄺ扄Ꜯ [ 1009.181303][ T5923] usb 9-1: Manufacturer: 娌刣㚽♗┮ﭝ캩ꥅ즾茗㾓ቄ窻壇刐赶䧽ᙺ撡錕怜棋꾃竤锄Ξ많럹㼓鈱륤훍ࠦ䡕祋鋔눺钴ꒄಹതЃ绎ŏ츋뱲簒쓥朹ஞ캸Ꮱ腊퉔䜟풥⠃撢壑ា뗔唙⊈묪鬨眥扱튠剝陴冑错ꐇ턬梍ⵢ헰塧အデ㟷⏖쏥ᢳ㟈ꖃ髏몢㦅в [ 1009.216040][ T5923] usb 9-1: SerialNumber: 䣊絎〰ퟝ⡬츫晿㺫ꀾ臫ꪽꊒࢀ梌謰ᝨ⻊澻畢͏悰䶱紲␘䋜왪፠부䓎ੀ妍ꢻްࡾ빉瞱굁茷烪괫럐榷係붐錪㬟ⴊ䊍簽ャ顆◻脬ꌾ䞿냻簨픸㲁⨂胙偦 [ 1009.366674][ T5922] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 1009.377530][ T5922] usb 6-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 1009.389493][ T5922] usb 6-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 1009.494187][ T5923] usbhid 9-1:1.0: can't add hid device: -71 [ 1009.512257][ T5923] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 1009.534293][ T5923] usb 9-1: USB disconnect, device number 41 [ 1009.692967][T26270] Can't find a SQUASHFS superblock on rnullb0 [ 1010.091254][T26280] kvm: emulating exchange as write [ 1010.707377][T26285] can0: slcan on ttyS3. [ 1010.774530][T26291] can0 (unregistered): slcan off ttyS3. [ 1010.861970][T26277] Mount JFS Failure: -22 [ 1011.135097][T26307] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5807'. [ 1011.154849][T26307] /dev/rnullb0: Can't open blockdev [ 1011.493293][T23159] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1011.616771][ T30] audit: type=1800 audit(2000000587.906:98): pid=26313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5810" name="bus" dev="overlay" ino=2348 res=0 errno=0 [ 1011.662788][T23159] usb 7-1: Using ep0 maxpacket: 32 [ 1011.677622][T23159] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1011.691763][T23159] usb 7-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 1011.703462][T23159] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1011.714867][T23159] usb 7-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.40 [ 1011.724782][T23159] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.732855][T23159] usb 7-1: Product: syz [ 1011.737160][T23159] usb 7-1: Manufacturer: syz [ 1011.741758][T23159] usb 7-1: SerialNumber: syz [ 1011.986773][T23159] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input186 [ 1012.007171][ T5187] bcm5974 7-1:1.0: could not read from device [ 1012.081831][T23159] usb 7-1: USB disconnect, device number 5 [ 1012.095659][ T5187] bcm5974 7-1:1.0: could not read from device [ 1012.186056][T26324] FAULT_INJECTION: forcing a failure. [ 1012.186056][T26324] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.198987][T26324] CPU: 0 UID: 0 PID: 26324 Comm: syz.8.5814 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1012.199014][T26324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1012.199026][T26324] Call Trace: [ 1012.199034][T26324] [ 1012.199043][T26324] dump_stack_lvl+0x189/0x250 [ 1012.199078][T26324] ? __pfx____ratelimit+0x10/0x10 [ 1012.199108][T26324] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1012.199130][T26324] ? __pfx__printk+0x10/0x10 [ 1012.199155][T26324] ? __pfx___might_resched+0x10/0x10 [ 1012.199176][T26324] ? fs_reclaim_acquire+0x7d/0x100 [ 1012.199206][T26324] should_fail_ex+0x414/0x560 [ 1012.199241][T26324] should_failslab+0xa8/0x100 [ 1012.199265][T26324] __kmalloc_noprof+0xcb/0x4f0 [ 1012.199285][T26324] ? tomoyo_encode+0x28b/0x550 [ 1012.199314][T26324] tomoyo_encode+0x28b/0x550 [ 1012.199345][T26324] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1012.199382][T26324] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1012.199403][T26324] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1012.199427][T26324] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1012.199465][T26324] ? __lock_acquire+0xab9/0xd20 [ 1012.199515][T26324] ? __fget_files+0x2a/0x420 [ 1012.199545][T26324] ? __fget_files+0x2a/0x420 [ 1012.199568][T26324] ? __fget_files+0x3a0/0x420 [ 1012.199593][T26324] ? __fget_files+0x2a/0x420 [ 1012.199622][T26324] security_file_ioctl+0xcb/0x2d0 [ 1012.199644][T26324] __se_sys_ioctl+0x47/0x170 [ 1012.199667][T26324] do_syscall_64+0xfa/0x3b0 [ 1012.199684][T26324] ? lockdep_hardirqs_on+0x9c/0x150 [ 1012.199713][T26324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.199733][T26324] ? clear_bhb_loop+0x60/0xb0 [ 1012.199758][T26324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.199777][T26324] RIP: 0033:0x7fce1b38e929 [ 1012.199796][T26324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1012.199813][T26324] RSP: 002b:00007fce1c277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1012.199834][T26324] RAX: ffffffffffffffda RBX: 00007fce1b5b5fa0 RCX: 00007fce1b38e929 [ 1012.199850][T26324] RDX: 0000200000000080 RSI: 00000000402c542d RDI: 0000000000000003 [ 1012.199863][T26324] RBP: 00007fce1c277090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.199877][T26324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.199889][T26324] R13: 0000000000000000 R14: 00007fce1b5b5fa0 R15: 00007ffd5eba38e8 [ 1012.199921][T26324] [ 1012.199989][T26324] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1012.963276][ T43] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1013.112774][ T43] usb 9-1: Using ep0 maxpacket: 8 [ 1013.127491][ T43] usb 9-1: config 16 has 1 interface, different from the descriptor's value: 28 [ 1013.138445][ T43] usb 9-1: config 16 has no interface number 0 [ 1013.145187][ T43] usb 9-1: config 16 interface 18 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1013.157847][ T43] usb 9-1: config 16 interface 18 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1013.169698][ T43] usb 9-1: config 16 interface 18 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1013.181647][ T43] usb 9-1: config 16 interface 18 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1013.198148][ T43] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1013.207624][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.341646][T26348] FAULT_INJECTION: forcing a failure. [ 1013.341646][T26348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1013.356268][T26348] CPU: 1 UID: 0 PID: 26348 Comm: syz.6.5824 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1013.356284][T26348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1013.356292][T26348] Call Trace: [ 1013.356297][T26348] [ 1013.356302][T26348] dump_stack_lvl+0x189/0x250 [ 1013.356319][T26348] ? __pfx____ratelimit+0x10/0x10 [ 1013.356335][T26348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1013.356347][T26348] ? __pfx__printk+0x10/0x10 [ 1013.356362][T26348] ? __might_fault+0xb0/0x130 [ 1013.356379][T26348] should_fail_ex+0x414/0x560 [ 1013.356398][T26348] _copy_from_user+0x2d/0xb0 [ 1013.356409][T26348] set_termios+0x184/0x6c0 [ 1013.356420][T26348] ? __pfx_set_termios+0x10/0x10 [ 1013.356433][T26348] ? tty_ldisc_ref_wait+0x25/0x70 [ 1013.356450][T26348] tty_mode_ioctl+0x47e/0x740 [ 1013.356461][T26348] ? __pfx_tty_mode_ioctl+0x10/0x10 [ 1013.356469][T26348] ? tty_ldisc_ref_wait+0x25/0x70 [ 1013.356479][T26348] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1013.356494][T26348] ? n_hdlc_tty_ioctl+0x1d7/0x620 [ 1013.356511][T26348] ? n_tty_ioctl_helper+0x8e/0x340 [ 1013.356520][T26348] ? __pfx_n_hdlc_tty_ioctl+0x10/0x10 [ 1013.356531][T26348] tty_ioctl+0x9c3/0xde0 [ 1013.356542][T26348] ? __pfx_tty_ioctl+0x10/0x10 [ 1013.356553][T26348] __se_sys_ioctl+0xfc/0x170 [ 1013.356565][T26348] do_syscall_64+0xfa/0x3b0 [ 1013.356574][T26348] ? lockdep_hardirqs_on+0x9c/0x150 [ 1013.356590][T26348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.356600][T26348] ? clear_bhb_loop+0x60/0xb0 [ 1013.356624][T26348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.356639][T26348] RIP: 0033:0x7f7f6af8e929 [ 1013.356649][T26348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1013.356659][T26348] RSP: 002b:00007f7f6bd77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1013.356671][T26348] RAX: ffffffffffffffda RBX: 00007f7f6b1b5fa0 RCX: 00007f7f6af8e929 [ 1013.356679][T26348] RDX: 0000200000000080 RSI: 00000000402c542d RDI: 0000000000000003 [ 1013.356686][T26348] RBP: 00007f7f6bd77090 R08: 0000000000000000 R09: 0000000000000000 [ 1013.356692][T26348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1013.356699][T26348] R13: 0000000000000000 R14: 00007f7f6b1b5fa0 R15: 00007ffc3dbf1218 [ 1013.356715][T26348] [ 1013.641478][ T43] usb 9-1: GET_CAPABILITIES returned 0 [ 1013.650104][ T43] usbtmc 9-1:16.18: can't read capabilities [ 1013.828999][T26360] FAULT_INJECTION: forcing a failure. [ 1013.828999][T26360] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.852651][T26360] CPU: 1 UID: 0 PID: 26360 Comm: syz.7.5827 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1013.852680][T26360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1013.852692][T26360] Call Trace: [ 1013.852701][T26360] [ 1013.852710][T26360] dump_stack_lvl+0x189/0x250 [ 1013.852737][T26360] ? __pfx____ratelimit+0x10/0x10 [ 1013.852767][T26360] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1013.852788][T26360] ? __pfx__printk+0x10/0x10 [ 1013.852812][T26360] ? __pfx___might_resched+0x10/0x10 [ 1013.852833][T26360] ? fs_reclaim_acquire+0x7d/0x100 [ 1013.852861][T26360] should_fail_ex+0x414/0x560 [ 1013.852896][T26360] should_failslab+0xa8/0x100 [ 1013.852918][T26360] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 1013.852938][T26360] ? p9_client_create+0x314/0xfe0 [ 1013.852971][T26360] kstrdup+0x42/0x100 [ 1013.852997][T26360] p9_client_create+0x314/0xfe0 [ 1013.853030][T26360] ? __pfx_p9_client_create+0x10/0x10 [ 1013.853068][T26360] ? rcu_is_watching+0x15/0xb0 [ 1013.853093][T26360] ? __raw_spin_lock_init+0x45/0x100 [ 1013.853122][T26360] v9fs_session_init+0x1d7/0x19a0 [ 1013.853166][T26360] ? __pfx_v9fs_session_init+0x10/0x10 [ 1013.853196][T26360] ? __kasan_kmalloc+0x93/0xb0 [ 1013.853218][T26360] ? v9fs_mount+0xb2/0xa50 [ 1013.853244][T26360] v9fs_mount+0xc8/0xa50 [ 1013.853268][T26360] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1013.853293][T26360] ? __pfx_v9fs_mount+0x10/0x10 [ 1013.853315][T26360] ? rcu_is_watching+0x15/0xb0 [ 1013.853340][T26360] legacy_get_tree+0xfa/0x1a0 [ 1013.853365][T26360] ? __pfx_v9fs_mount+0x10/0x10 [ 1013.853388][T26360] vfs_get_tree+0x8f/0x2b0 [ 1013.853413][T26360] do_new_mount+0x24a/0xa40 [ 1013.853446][T26360] __se_sys_mount+0x317/0x410 [ 1013.853479][T26360] ? __pfx___se_sys_mount+0x10/0x10 [ 1013.853502][T26360] ? rcu_is_watching+0x15/0xb0 [ 1013.853528][T26360] ? do_syscall_64+0xbe/0x3b0 [ 1013.853546][T26360] ? __x64_sys_mount+0x20/0xc0 [ 1013.853574][T26360] do_syscall_64+0xfa/0x3b0 [ 1013.853591][T26360] ? lockdep_hardirqs_on+0x9c/0x150 [ 1013.853618][T26360] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.853636][T26360] ? clear_bhb_loop+0x60/0xb0 [ 1013.853660][T26360] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1013.853679][T26360] RIP: 0033:0x7f9cb438e929 [ 1013.853696][T26360] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1013.853713][T26360] RSP: 002b:00007f9cb5127038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1013.853733][T26360] RAX: ffffffffffffffda RBX: 00007f9cb45b5fa0 RCX: 00007f9cb438e929 [ 1013.853747][T26360] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 1013.853761][T26360] RBP: 00007f9cb5127090 R08: 0000200000000500 R09: 0000000000000000 [ 1013.853775][T26360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1013.853787][T26360] R13: 0000000000000000 R14: 00007f9cb45b5fa0 R15: 00007fff385d8ad8 [ 1013.853816][T26360] [ 1014.218908][ T30] audit: type=1800 audit(2000000590.506:99): pid=26363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5828" name="bus" dev="overlay" ino=2738 res=0 errno=0 [ 1014.298809][T26366] afs: Unknown parameter 'fsmagic' [ 1014.677109][T26368] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1014.830185][T26368] hpfs: Bad magic ... probably not HPFS [ 1015.036707][T26376] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 1015.048137][T26376] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 1015.058983][T26376] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 1015.067568][T26376] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 1015.421156][ T30] audit: type=1800 audit(2000000591.706:100): pid=26388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5836" name="bus" dev="overlay" ino=2734 res=0 errno=0 [ 1015.424132][T26388] FAULT_INJECTION: forcing a failure. [ 1015.424132][T26388] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.454850][T26388] CPU: 0 UID: 0 PID: 26388 Comm: syz.6.5836 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1015.454877][T26388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1015.454889][T26388] Call Trace: [ 1015.454898][T26388] [ 1015.454906][T26388] dump_stack_lvl+0x189/0x250 [ 1015.454923][T26388] ? __pfx____ratelimit+0x10/0x10 [ 1015.454940][T26388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1015.454951][T26388] ? __pfx__printk+0x10/0x10 [ 1015.454964][T26388] ? __pfx___might_resched+0x10/0x10 [ 1015.454976][T26388] ? fs_reclaim_acquire+0x7d/0x100 [ 1015.454991][T26388] should_fail_ex+0x414/0x560 [ 1015.455011][T26388] should_failslab+0xa8/0x100 [ 1015.455024][T26388] __kmalloc_noprof+0xcb/0x4f0 [ 1015.455034][T26388] ? tomoyo_encode+0x28b/0x550 [ 1015.455049][T26388] tomoyo_encode+0x28b/0x550 [ 1015.455065][T26388] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1015.455084][T26388] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1015.455095][T26388] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1015.455107][T26388] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1015.455132][T26388] ? __lock_acquire+0xab9/0xd20 [ 1015.455179][T26388] ? __fget_files+0x2a/0x420 [ 1015.455207][T26388] ? __fget_files+0x2a/0x420 [ 1015.455223][T26388] ? __fget_files+0x3a0/0x420 [ 1015.455235][T26388] ? __fget_files+0x2a/0x420 [ 1015.455250][T26388] security_file_ioctl+0xcb/0x2d0 [ 1015.455262][T26388] __se_sys_ioctl+0x47/0x170 [ 1015.455274][T26388] do_syscall_64+0xfa/0x3b0 [ 1015.455283][T26388] ? lockdep_hardirqs_on+0x9c/0x150 [ 1015.455298][T26388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.455309][T26388] ? clear_bhb_loop+0x60/0xb0 [ 1015.455322][T26388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.455332][T26388] RIP: 0033:0x7f7f6af8e929 [ 1015.455342][T26388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1015.455352][T26388] RSP: 002b:00007f7f6bd77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1015.455364][T26388] RAX: ffffffffffffffda RBX: 00007f7f6b1b5fa0 RCX: 00007f7f6af8e929 [ 1015.455372][T26388] RDX: 00002000000002c0 RSI: 00000000c020660b RDI: 0000000000000003 [ 1015.455379][T26388] RBP: 00007f7f6bd77090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.455385][T26388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.455392][T26388] R13: 0000000000000000 R14: 00007f7f6b1b5fa0 R15: 00007ffc3dbf1218 [ 1015.455408][T26388] [ 1015.455421][T26388] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1015.736424][T14922] usb 9-1: USB disconnect, device number 42 [ 1015.831311][ T30] audit: type=1800 audit(2000000592.116:101): pid=26392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5837" name="bus" dev="overlay" ino=2748 res=0 errno=0 [ 1016.134669][T26402] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1016.222691][T14922] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1016.367161][ T30] audit: type=1800 audit(2000000592.656:102): pid=26410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5845" name="bus" dev="overlay" ino=2782 res=0 errno=0 [ 1016.376372][T14922] usb 9-1: Using ep0 maxpacket: 32 [ 1016.388646][T26410] FAULT_INJECTION: forcing a failure. [ 1016.388646][T26410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1016.411376][T14922] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1016.414327][T26410] CPU: 1 UID: 0 PID: 26410 Comm: syz.6.5845 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1016.414353][T26410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1016.414367][T26410] Call Trace: [ 1016.414375][T26410] [ 1016.414383][T26410] dump_stack_lvl+0x189/0x250 [ 1016.414410][T26410] ? __pfx____ratelimit+0x10/0x10 [ 1016.414439][T26410] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1016.414460][T26410] ? __pfx__printk+0x10/0x10 [ 1016.414482][T26410] ? __might_fault+0xb0/0x130 [ 1016.414512][T26410] should_fail_ex+0x414/0x560 [ 1016.414546][T26410] _copy_from_user+0x2d/0xb0 [ 1016.414565][T26410] do_vfs_ioctl+0x960/0x1990 [ 1016.414589][T26410] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1016.414614][T26410] ? kasan_quarantine_put+0xdd/0x220 [ 1016.414653][T26410] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1016.414674][T26410] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1016.414694][T26410] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 1016.414714][T26410] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1016.414734][T26410] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1016.414770][T26410] ? __lock_acquire+0xab9/0xd20 [ 1016.414818][T26410] ? __fget_files+0x2a/0x420 [ 1016.414846][T26410] ? __fget_files+0x2a/0x420 [ 1016.414878][T26410] ? __fget_files+0x3a0/0x420 [ 1016.414901][T26410] ? __fget_files+0x2a/0x420 [ 1016.414929][T26410] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1016.414949][T26410] __se_sys_ioctl+0x82/0x170 [ 1016.414971][T26410] do_syscall_64+0xfa/0x3b0 [ 1016.414989][T26410] ? lockdep_hardirqs_on+0x9c/0x150 [ 1016.415016][T26410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.415035][T26410] ? clear_bhb_loop+0x60/0xb0 [ 1016.415058][T26410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.415076][T26410] RIP: 0033:0x7f7f6af8e929 [ 1016.415094][T26410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1016.415112][T26410] RSP: 002b:00007f7f6bd77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1016.415132][T26410] RAX: ffffffffffffffda RBX: 00007f7f6b1b5fa0 RCX: 00007f7f6af8e929 [ 1016.415146][T26410] RDX: 00002000000002c0 RSI: 00000000c020660b RDI: 0000000000000003 [ 1016.415160][T26410] RBP: 00007f7f6bd77090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.415172][T26410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.415184][T26410] R13: 0000000000000000 R14: 00007f7f6b1b5fa0 R15: 00007ffc3dbf1218 [ 1016.415217][T26410] [ 1016.664327][T14922] usb 9-1: too many configurations: 248, using maximum allowed: 8 [ 1016.688074][T14922] usb 9-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 1016.711843][T14922] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1016.720994][T14922] usb 9-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 1016.733859][T14922] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1016.741694][T14922] usb 9-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 1016.753765][T14922] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1016.761490][T14922] usb 9-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 1016.773810][T14922] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1016.793742][T14922] usb 9-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 1016.805564][T14922] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1016.816093][T14922] usb 9-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 1016.844361][T14922] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1016.857394][T14922] usb 9-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 1016.879115][T14922] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1016.889438][T14922] usb 9-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 1016.900817][T14922] usb 9-1: config 1 interface 0 has no altsetting 0 [ 1016.912668][T14922] usb 9-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.40 [ 1016.921883][T14922] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.930751][T14922] usb 9-1: Product: syz [ 1016.935650][T14922] usb 9-1: Manufacturer: syz [ 1016.940699][T14922] usb 9-1: SerialNumber: syz [ 1017.197964][ T5942] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1017.244077][T14922] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/input/input187 [ 1017.258470][ T5187] bcm5974 9-1:1.0: could not read from device [ 1017.341287][T14922] usb 9-1: USB disconnect, device number 43 [ 1017.363407][ T5187] bcm5974 9-1:1.0: could not read from device [ 1017.372666][ T5942] usb 7-1: Using ep0 maxpacket: 32 [ 1017.392497][ T5942] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1017.402257][ T5942] usb 7-1: config 0 has no interface number 0 [ 1017.410502][T20285] bcm5974 9-1:1.0: could not read from device [ 1017.424863][ T5942] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1017.434328][ T5942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.449816][ T5942] usb 7-1: Product: syz [ 1017.454067][ T5942] usb 7-1: Manufacturer: syz [ 1017.458662][ T5942] usb 7-1: SerialNumber: syz [ 1017.477487][ T5942] usb 7-1: config 0 descriptor?? [ 1017.485238][ T5942] smsc95xx v2.0.0 [ 1017.572379][T26433] IPVS: set_ctl: invalid protocol: 58 100.1.1.1:20004 [ 1017.871614][T26443] gfs2: not a GFS2 filesystem [ 1017.893294][ T5942] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1017.905021][ T5942] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1017.953329][ T5942] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1017.967011][ T5942] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 1018.192744][ T24] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1018.342768][ T24] usb 9-1: device descriptor read/64, error -71 [ 1018.592744][ T24] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1018.680228][ T43] usb 7-1: USB disconnect, device number 6 [ 1018.734358][ T24] usb 9-1: device descriptor read/64, error -71 [ 1018.857603][ T24] usb usb9-port1: attempt power cycle [ 1018.896373][T26456] FAULT_INJECTION: forcing a failure. [ 1018.896373][T26456] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.910646][T26456] CPU: 1 UID: 0 PID: 26456 Comm: syz.7.5860 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1018.910673][T26456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1018.910685][T26456] Call Trace: [ 1018.910694][T26456] [ 1018.910702][T26456] dump_stack_lvl+0x189/0x250 [ 1018.910730][T26456] ? __pfx____ratelimit+0x10/0x10 [ 1018.910759][T26456] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1018.910781][T26456] ? __pfx__printk+0x10/0x10 [ 1018.910809][T26456] ? __pfx___might_resched+0x10/0x10 [ 1018.910829][T26456] ? fs_reclaim_acquire+0x7d/0x100 [ 1018.910858][T26456] should_fail_ex+0x414/0x560 [ 1018.910898][T26456] should_failslab+0xa8/0x100 [ 1018.910922][T26456] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1018.910942][T26456] ? p9_client_prepare_req+0x171/0xeb0 [ 1018.910974][T26456] p9_client_prepare_req+0x171/0xeb0 [ 1018.911004][T26456] ? __lock_acquire+0xab9/0xd20 [ 1018.911041][T26456] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 1018.911066][T26456] ? do_raw_spin_lock+0x121/0x290 [ 1018.911093][T26456] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1018.911131][T26456] p9_client_rpc+0x188/0xa70 [ 1018.911154][T26456] ? lockdep_hardirqs_on+0x9c/0x150 [ 1018.911184][T26456] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1018.911216][T26456] ? add_wait_queue+0xba/0x170 [ 1018.911243][T26456] ? __pfx_p9_client_rpc+0x10/0x10 [ 1018.911270][T26456] ? __pfx_pipe_poll+0x10/0x10 [ 1018.911295][T26456] ? p9_conn_create+0x52c/0x5b0 [ 1018.911317][T26456] ? p9_fd_create+0x312/0x3f0 [ 1018.911342][T26456] p9_client_create+0x954/0xfe0 [ 1018.911380][T26456] ? __pfx_p9_client_create+0x10/0x10 [ 1018.911430][T26456] ? __raw_spin_lock_init+0x45/0x100 [ 1018.911461][T26456] v9fs_session_init+0x1d7/0x19a0 [ 1018.911505][T26456] ? __pfx_v9fs_session_init+0x10/0x10 [ 1018.911535][T26456] ? __kasan_kmalloc+0x93/0xb0 [ 1018.911558][T26456] ? v9fs_mount+0xb2/0xa50 [ 1018.911583][T26456] v9fs_mount+0xc8/0xa50 [ 1018.911606][T26456] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1018.911631][T26456] ? __pfx_v9fs_mount+0x10/0x10 [ 1018.911653][T26456] ? rcu_is_watching+0x15/0xb0 [ 1018.911679][T26456] legacy_get_tree+0xfa/0x1a0 [ 1018.911710][T26456] ? __pfx_v9fs_mount+0x10/0x10 [ 1018.911734][T26456] vfs_get_tree+0x8f/0x2b0 [ 1018.911760][T26456] do_new_mount+0x24a/0xa40 [ 1018.911793][T26456] __se_sys_mount+0x317/0x410 [ 1018.911824][T26456] ? __pfx___se_sys_mount+0x10/0x10 [ 1018.911855][T26456] ? do_syscall_64+0xbe/0x3b0 [ 1018.911872][T26456] ? __x64_sys_mount+0x20/0xc0 [ 1018.911898][T26456] do_syscall_64+0xfa/0x3b0 [ 1018.911914][T26456] ? lockdep_hardirqs_on+0x9c/0x150 [ 1018.911938][T26456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.911955][T26456] ? clear_bhb_loop+0x60/0xb0 [ 1018.911978][T26456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.911996][T26456] RIP: 0033:0x7f9cb438e929 [ 1018.912012][T26456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1018.912030][T26456] RSP: 002b:00007f9cb5127038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1018.912051][T26456] RAX: ffffffffffffffda RBX: 00007f9cb45b5fa0 RCX: 00007f9cb438e929 [ 1018.912065][T26456] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 1018.912080][T26456] RBP: 00007f9cb5127090 R08: 0000200000000500 R09: 0000000000000000 [ 1018.912093][T26456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1018.912105][T26456] R13: 0000000000000000 R14: 00007f9cb45b5fa0 R15: 00007fff385d8ad8 [ 1018.912136][T26456] [ 1019.306986][T26459] omfs: Invalid superblock (0) [ 1019.358994][T26461] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5862'. [ 1019.376779][T26461] netlink: 60 bytes leftover after parsing attributes in process `syz.7.5862'. [ 1019.502662][ T43] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1019.552856][ T24] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1019.576028][ T24] usb 9-1: device descriptor read/8, error -71 [ 1019.652668][ T43] usb 7-1: Using ep0 maxpacket: 8 [ 1019.660170][ T43] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1019.672673][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.689003][ T43] usb 7-1: config 0 descriptor?? [ 1019.813169][ T24] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1019.843609][ T24] usb 9-1: device descriptor read/8, error -71 [ 1019.954241][ T24] usb usb9-port1: unable to enumerate USB device [ 1020.134925][ T30] audit: type=1800 audit(2000000596.426:103): pid=26467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5864" name="bus" dev="overlay" ino=2402 res=0 errno=0 [ 1020.161269][T26467] FAULT_INJECTION: forcing a failure. [ 1020.161269][T26467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.175365][T26467] CPU: 1 UID: 0 PID: 26467 Comm: syz.5.5864 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1020.175394][T26467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1020.175407][T26467] Call Trace: [ 1020.175416][T26467] [ 1020.175424][T26467] dump_stack_lvl+0x189/0x250 [ 1020.175451][T26467] ? __pfx____ratelimit+0x10/0x10 [ 1020.175480][T26467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1020.175503][T26467] ? __pfx__printk+0x10/0x10 [ 1020.175545][T26467] should_fail_ex+0x414/0x560 [ 1020.175580][T26467] _copy_to_user+0x31/0xb0 [ 1020.175601][T26467] simple_read_from_buffer+0xe1/0x170 [ 1020.175632][T26467] proc_fail_nth_read+0x1df/0x250 [ 1020.175663][T26467] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1020.175695][T26467] ? rw_verify_area+0x258/0x650 [ 1020.175716][T26467] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1020.175746][T26467] vfs_read+0x1fd/0x980 [ 1020.175773][T26467] ? __pfx___mutex_lock+0x10/0x10 [ 1020.175792][T26467] ? __pfx_vfs_read+0x10/0x10 [ 1020.175816][T26467] ? __fget_files+0x2a/0x420 [ 1020.175846][T26467] ? __fget_files+0x3a0/0x420 [ 1020.175871][T26467] ? __fget_files+0x2a/0x420 [ 1020.175905][T26467] ksys_read+0x145/0x250 [ 1020.175926][T26467] ? __fget_files+0x3a0/0x420 [ 1020.175953][T26467] ? __pfx_ksys_read+0x10/0x10 [ 1020.175980][T26467] ? do_syscall_64+0xbe/0x3b0 [ 1020.176004][T26467] do_syscall_64+0xfa/0x3b0 [ 1020.176024][T26467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.176042][T26467] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1020.176063][T26467] ? clear_bhb_loop+0x60/0xb0 [ 1020.176087][T26467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.176106][T26467] RIP: 0033:0x7f7ff018d33c [ 1020.176123][T26467] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1020.176142][T26467] RSP: 002b:00007f7ff1003030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1020.176162][T26467] RAX: ffffffffffffffda RBX: 00007f7ff03b5fa0 RCX: 00007f7ff018d33c [ 1020.176178][T26467] RDX: 000000000000000f RSI: 00007f7ff10030a0 RDI: 0000000000000004 [ 1020.176191][T26467] RBP: 00007f7ff1003090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.176203][T26467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1020.176216][T26467] R13: 0000000000000000 R14: 00007f7ff03b5fa0 R15: 00007fff7dad9008 [ 1020.176247][T26467] [ 1020.816013][T26478] overlayfs: missing 'lowerdir' [ 1020.831601][T26479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1020.853288][T26479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1020.930599][T26485] FAULT_INJECTION: forcing a failure. [ 1020.930599][T26485] name failslab, interval 1, probability 0, space 0, times 0 [ 1020.944628][T26485] CPU: 1 UID: 0 PID: 26485 Comm: syz.5.5870 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1020.944653][T26485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1020.944666][T26485] Call Trace: [ 1020.944674][T26485] [ 1020.944682][T26485] dump_stack_lvl+0x189/0x250 [ 1020.944709][T26485] ? __pfx____ratelimit+0x10/0x10 [ 1020.944741][T26485] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1020.944763][T26485] ? __pfx__printk+0x10/0x10 [ 1020.944789][T26485] ? __pfx___might_resched+0x10/0x10 [ 1020.944809][T26485] ? fs_reclaim_acquire+0x7d/0x100 [ 1020.944838][T26485] should_fail_ex+0x414/0x560 [ 1020.944874][T26485] should_failslab+0xa8/0x100 [ 1020.944898][T26485] __kmalloc_noprof+0xcb/0x4f0 [ 1020.944918][T26485] ? p9_client_prepare_req+0x383/0xeb0 [ 1020.944945][T26485] ? p9_msg_buf_size+0x16aa/0x1ee0 [ 1020.944976][T26485] p9_client_prepare_req+0x383/0xeb0 [ 1020.945017][T26485] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 1020.945041][T26485] ? do_raw_spin_lock+0x121/0x290 [ 1020.945067][T26485] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1020.945102][T26485] p9_client_rpc+0x188/0xa70 [ 1020.945124][T26485] ? lockdep_hardirqs_on+0x9c/0x150 [ 1020.945154][T26485] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1020.945187][T26485] ? add_wait_queue+0xba/0x170 [ 1020.945216][T26485] ? __pfx_p9_client_rpc+0x10/0x10 [ 1020.945243][T26485] ? __pfx_pipe_poll+0x10/0x10 [ 1020.945269][T26485] ? p9_conn_create+0x52c/0x5b0 [ 1020.945290][T26485] ? p9_fd_create+0x312/0x3f0 [ 1020.945315][T26485] p9_client_create+0x954/0xfe0 [ 1020.945348][T26485] ? __pfx_p9_client_create+0x10/0x10 [ 1020.945395][T26485] ? __raw_spin_lock_init+0x45/0x100 [ 1020.945426][T26485] v9fs_session_init+0x1d7/0x19a0 [ 1020.945470][T26485] ? __pfx_v9fs_session_init+0x10/0x10 [ 1020.945494][T26485] ? v9fs_mount+0xb2/0xa50 [ 1020.945518][T26485] ? __kasan_kmalloc+0x93/0xb0 [ 1020.945548][T26485] ? v9fs_mount+0xb2/0xa50 [ 1020.945573][T26485] v9fs_mount+0xc8/0xa50 [ 1020.945596][T26485] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1020.945621][T26485] ? __pfx_v9fs_mount+0x10/0x10 [ 1020.945644][T26485] ? rcu_is_watching+0x15/0xb0 [ 1020.945671][T26485] legacy_get_tree+0xfa/0x1a0 [ 1020.945697][T26485] ? __pfx_v9fs_mount+0x10/0x10 [ 1020.945721][T26485] vfs_get_tree+0x8f/0x2b0 [ 1020.945748][T26485] do_new_mount+0x24a/0xa40 [ 1020.945781][T26485] __se_sys_mount+0x317/0x410 [ 1020.945813][T26485] ? __pfx___se_sys_mount+0x10/0x10 [ 1020.945844][T26485] ? do_syscall_64+0xbe/0x3b0 [ 1020.945861][T26485] ? __x64_sys_mount+0x20/0xc0 [ 1020.945889][T26485] do_syscall_64+0xfa/0x3b0 [ 1020.945907][T26485] ? lockdep_hardirqs_on+0x9c/0x150 [ 1020.945935][T26485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.945955][T26485] ? clear_bhb_loop+0x60/0xb0 [ 1020.945980][T26485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.945999][T26485] RIP: 0033:0x7f7ff018e929 [ 1020.946017][T26485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1020.946035][T26485] RSP: 002b:00007f7ff1003038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1020.946056][T26485] RAX: ffffffffffffffda RBX: 00007f7ff03b5fa0 RCX: 00007f7ff018e929 [ 1020.946071][T26485] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 1020.946085][T26485] RBP: 00007f7ff1003090 R08: 0000200000000500 R09: 0000000000000000 [ 1020.946099][T26485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1020.946111][T26485] R13: 0000000000000000 R14: 00007f7ff03b5fa0 R15: 00007fff7dad9008 [ 1020.946141][T26485] [ 1021.307375][T26486] hfs: can't find a HFS filesystem on dev rnullb0 [ 1021.525759][T26498] Can't find a SQUASHFS superblock on rnullb0 [ 1022.185237][T26505] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.5877'. [ 1022.195165][T26505] netlink: zone id is out of range [ 1022.200338][T26505] netlink: zone id is out of range [ 1022.206142][T26505] netlink: zone id is out of range [ 1022.211273][T26505] netlink: zone id is out of range [ 1022.216491][T26505] netlink: zone id is out of range [ 1022.221631][T26505] netlink: get zone limit has 8 unknown bytes [ 1022.272660][ T5942] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1022.372226][T26507] fuse: Unknown parameter 'geoup_idi' [ 1022.379198][T26507] fuse: Unknown parameter 'rootmode~#L5A@[R' [ 1022.521529][T26511] FAULT_INJECTION: forcing a failure. [ 1022.521529][T26511] name failslab, interval 1, probability 0, space 0, times 0 [ 1022.534577][T26511] CPU: 1 UID: 0 PID: 26511 Comm: syz.8.5880 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1022.534604][T26511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1022.534617][T26511] Call Trace: [ 1022.534626][T26511] [ 1022.534635][T26511] dump_stack_lvl+0x189/0x250 [ 1022.534663][T26511] ? __pfx____ratelimit+0x10/0x10 [ 1022.534691][T26511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1022.534713][T26511] ? __pfx__printk+0x10/0x10 [ 1022.534739][T26511] ? __pfx___might_resched+0x10/0x10 [ 1022.534759][T26511] ? fs_reclaim_acquire+0x7d/0x100 [ 1022.534787][T26511] should_fail_ex+0x414/0x560 [ 1022.534821][T26511] should_failslab+0xa8/0x100 [ 1022.534845][T26511] __kmalloc_noprof+0xcb/0x4f0 [ 1022.534865][T26511] ? p9_client_prepare_req+0x579/0xeb0 [ 1022.534898][T26511] p9_client_prepare_req+0x579/0xeb0 [ 1022.534937][T26511] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 1022.534963][T26511] ? do_raw_spin_lock+0x121/0x290 [ 1022.534991][T26511] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1022.535029][T26511] p9_client_rpc+0x188/0xa70 [ 1022.535053][T26511] ? lockdep_hardirqs_on+0x9c/0x150 [ 1022.535082][T26511] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1022.535115][T26511] ? add_wait_queue+0xba/0x170 [ 1022.535149][T26511] ? __pfx_p9_client_rpc+0x10/0x10 [ 1022.535175][T26511] ? __pfx_pipe_poll+0x10/0x10 [ 1022.535199][T26511] ? p9_conn_create+0x52c/0x5b0 [ 1022.535222][T26511] ? p9_fd_create+0x312/0x3f0 [ 1022.535246][T26511] p9_client_create+0x954/0xfe0 [ 1022.535278][T26511] ? __pfx_p9_client_create+0x10/0x10 [ 1022.535324][T26511] ? __raw_spin_lock_init+0x45/0x100 [ 1022.535354][T26511] v9fs_session_init+0x1d7/0x19a0 [ 1022.535397][T26511] ? __pfx_v9fs_session_init+0x10/0x10 [ 1022.535421][T26511] ? v9fs_mount+0xb2/0xa50 [ 1022.535445][T26511] ? __kasan_kmalloc+0x93/0xb0 [ 1022.535467][T26511] ? v9fs_mount+0xb2/0xa50 [ 1022.535492][T26511] v9fs_mount+0xc8/0xa50 [ 1022.535516][T26511] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1022.535540][T26511] ? __pfx_v9fs_mount+0x10/0x10 [ 1022.535562][T26511] ? rcu_is_watching+0x15/0xb0 [ 1022.535588][T26511] legacy_get_tree+0xfa/0x1a0 [ 1022.535613][T26511] ? __pfx_v9fs_mount+0x10/0x10 [ 1022.535637][T26511] vfs_get_tree+0x8f/0x2b0 [ 1022.535662][T26511] do_new_mount+0x24a/0xa40 [ 1022.535696][T26511] __se_sys_mount+0x317/0x410 [ 1022.535724][T26511] ? __pfx___se_sys_mount+0x10/0x10 [ 1022.535755][T26511] ? do_syscall_64+0xbe/0x3b0 [ 1022.535772][T26511] ? __x64_sys_mount+0x20/0xc0 [ 1022.535799][T26511] do_syscall_64+0xfa/0x3b0 [ 1022.535819][T26511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.535837][T26511] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1022.535857][T26511] ? clear_bhb_loop+0x60/0xb0 [ 1022.535881][T26511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.535900][T26511] RIP: 0033:0x7fce1b38e929 [ 1022.535917][T26511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1022.535935][T26511] RSP: 002b:00007fce1c277038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1022.535955][T26511] RAX: ffffffffffffffda RBX: 00007fce1b5b5fa0 RCX: 00007fce1b38e929 [ 1022.535970][T26511] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 1022.535983][T26511] RBP: 00007fce1c277090 R08: 0000200000000500 R09: 0000000000000000 [ 1022.535997][T26511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1022.536009][T26511] R13: 0000000000000000 R14: 00007fce1b5b5fa0 R15: 00007ffd5eba38e8 [ 1022.536039][T26511] [ 1023.066652][ T43] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1023.076664][ T43] asix 7-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1023.085109][T26515] netlink: 'syz.8.5882': attribute type 29 has an invalid length. [ 1023.093288][ T43] asix 7-1:0.0: probe with driver asix failed with error -71 [ 1023.106324][ T43] usb 7-1: USB disconnect, device number 7 [ 1023.142996][T26516] netlink: 'syz.8.5882': attribute type 29 has an invalid length. [ 1023.151364][T26515] netlink: 'syz.8.5882': attribute type 29 has an invalid length. [ 1023.161167][T26515] netlink: 'syz.8.5882': attribute type 29 has an invalid length. [ 1023.573425][T26536] fuse: Unknown parameter 'fd30x0000000000000004' [ 1023.892374][T26549] cgroup: Invalid name [ 1023.917974][T26549] 9pnet_fd: Insufficient options for proto=fd [ 1024.027742][T26553] Can't find a SQUASHFS superblock on rnullb0 [ 1024.270932][T26566] XFS (rnullb0): Invalid superblock magic number [ 1024.295964][T26565] /dev/rnullb0: Can't open blockdev [ 1024.363852][T26574] delete_channel: no stack [ 1024.538558][T26576] /dev/rnullb0: Can't open blockdev [ 1024.797904][T26585] 9pnet_fd: Insufficient options for proto=fd [ 1024.908898][ T5923] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1024.912965][T26590] omfs: Invalid superblock (0) [ 1025.063258][T26593] Mount JFS Failure: -22 [ 1025.103652][ T5923] usb 7-1: config 4 has an invalid interface number: 223 but max is 1 [ 1025.111845][ T5923] usb 7-1: config 4 has an invalid interface number: 12 but max is 1 [ 1025.141276][ T5923] usb 7-1: config 4 has no interface number 0 [ 1025.162702][ T5923] usb 7-1: config 4 has no interface number 1 [ 1025.168869][ T5923] usb 7-1: config 4 interface 223 altsetting 85 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1025.197837][ T5923] usb 7-1: config 4 interface 223 altsetting 85 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 1025.225361][ T5923] usb 7-1: config 4 interface 223 has no altsetting 0 [ 1025.243035][ T5923] usb 7-1: config 4 interface 12 has no altsetting 0 [ 1025.257454][ T5923] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0112, bcdDevice=e0.78 [ 1025.276143][ T5923] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.302998][ T5923] usb 7-1: Product: syz [ 1025.307181][ T5923] usb 7-1: Manufacturer: syz [ 1025.311757][ T5923] usb 7-1: SerialNumber: syz [ 1025.327606][T26581] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1025.352950][T26581] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1025.577132][T26581] Can't find a SQUASHFS superblock on rnullb0 [ 1025.599006][ T5923] kvaser_usb 7-1:4.223: error -ENODEV: Cannot get usb endpoint(s) [ 1025.628083][ T5923] kvaser_usb 7-1:4.12: error -ENODEV: Cannot get usb endpoint(s) [ 1025.644604][ T5923] usb 7-1: USB disconnect, device number 8 [ 1025.744813][T26604] macvlan0: entered promiscuous mode [ 1025.752360][T26604] omfs: Invalid superblock (0) [ 1025.758245][T26603] macvlan0: left promiscuous mode [ 1025.956823][T26618] vxfs: WRONG superblock magic 00000000 at 1 [ 1025.963032][T26618] vxfs: WRONG superblock magic 00000000 at 8 [ 1025.969030][T26618] vxfs: can't find superblock. [ 1026.725122][T26647] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5923'. [ 1027.008317][ T30] audit: type=1800 audit(2000000603.296:104): pid=26654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5926" name="bus" dev="overlay" ino=2916 res=0 errno=0 [ 1027.111954][T26660] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5928'. [ 1027.168243][T26661] vxfs: WRONG superblock magic 00000000 at 1 [ 1027.174814][T26661] vxfs: WRONG superblock magic 00000000 at 8 [ 1027.181472][T26661] vxfs: can't find superblock. [ 1027.722292][T26672] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 1027.819763][ T30] audit: type=1800 audit(2000000604.106:105): pid=26680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5936" name="bus" dev="overlay" ino=2848 res=0 errno=0 [ 1028.090708][ T30] audit: type=1800 audit(2000000604.376:106): pid=26683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5937" name="bus" dev="overlay" ino=1603 res=0 errno=0 [ 1028.418339][T26699] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 1029.043810][T26721] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1029.753742][T26736] omfs: Invalid superblock (0) [ 1029.761691][T26734] input: syz0 as /devices/virtual/input/input188 [ 1029.770961][ T5923] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1029.938041][ T5923] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1029.949641][ T5923] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1030.008884][ T5923] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1030.038334][ T5923] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1030.068647][ T5923] usb 7-1: SerialNumber: syz [ 1030.291269][ T5923] usb 7-1: 0:2 : does not exist [ 1030.337550][ T5923] usb 7-1: USB disconnect, device number 9 [ 1030.389131][T23709] udevd[23709]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1030.981308][T26757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.996814][T26757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1031.414844][ T5942] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1031.597114][ T5942] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1031.608175][ T5942] usb 7-1: config 0 has no interface number 0 [ 1031.648643][ T5942] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1031.668066][ T5942] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.690352][ T5942] usb 7-1: Product: syz [ 1031.702890][ T5942] usb 7-1: Manufacturer: syz [ 1031.720464][ T5942] usb 7-1: SerialNumber: syz [ 1031.740058][ T5942] usb 7-1: config 0 descriptor?? [ 1031.979727][T26763] overlayfs: failed to resolve './file1': -2 [ 1031.988297][T26783] hpfs: Bad magic ... probably not HPFS [ 1032.012689][ T5942] dvb_usb_ec168 7-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 1032.054209][ T5942] usb 7-1: USB disconnect, device number 10 [ 1032.397232][T26801] ./cgroup: Can't lookup blockdev [ 1032.572775][ T5923] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1032.583282][T26803] Mount JFS Failure: -22 [ 1032.587548][T26803] jfs_mount failed w/return code = -22 [ 1032.742891][ T5923] usb 9-1: Using ep0 maxpacket: 8 [ 1032.754561][ T5923] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.779631][ T5923] usb 9-1: config 0 has no interfaces? [ 1032.795735][ T5923] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1032.822950][ T5923] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.861004][ T5923] usb 9-1: config 0 descriptor?? [ 1033.084127][T26799] tipc: Enabling of bearer rejected, failed to enable media [ 1033.112939][ T5942] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1033.296068][ T5942] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1033.313488][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1033.325020][ T5942] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1033.335150][ T5942] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1033.349551][ T5942] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1033.359187][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.376072][ T5942] usb 7-1: config 0 descriptor?? [ 1033.457299][T26821] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 1033.464551][T26821] cramfs: wrong magic [ 1033.807007][ T5942] plantronics 0003:047F:FFFF.0064: ignoring exceeding usage max [ 1033.823504][ T5942] plantronics 0003:047F:FFFF.0064: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1034.119649][T26824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.129969][T26824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.330562][ T5923] usb 9-1: USB disconnect, device number 49 [ 1035.473626][ T43] usb 7-1: USB disconnect, device number 11 [ 1035.625138][ T43] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 1035.799022][ T43] usb 7-1: config 0 has an invalid interface number: 40 but max is 0 [ 1035.817765][ T43] usb 7-1: config 0 has no interface number 0 [ 1035.836186][ T43] usb 7-1: config 0 interface 40 altsetting 46 endpoint 0x7 has invalid maxpacket 16, setting to 8 [ 1035.879840][ T43] usb 7-1: config 0 interface 40 altsetting 46 endpoint 0x6 has invalid maxpacket 16, setting to 8 [ 1035.909813][ T43] usb 7-1: config 0 interface 40 altsetting 46 endpoint 0x8 has invalid maxpacket 512, setting to 8 [ 1035.933685][ T43] usb 7-1: config 0 interface 40 has no altsetting 0 [ 1035.944824][T26832] overlayfs: failed to resolve './file1': -2 [ 1036.238872][T26846] /dev/rnullb0: Can't open blockdev [ 1036.410192][T26852] FAULT_INJECTION: forcing a failure. [ 1036.410192][T26852] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.426947][T26852] CPU: 1 UID: 0 PID: 26852 Comm: syz.8.5997 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1036.426976][T26852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1036.426992][T26852] Call Trace: [ 1036.427001][T26852] [ 1036.427010][T26852] dump_stack_lvl+0x189/0x250 [ 1036.427037][T26852] ? __pfx____ratelimit+0x10/0x10 [ 1036.427068][T26852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1036.427090][T26852] ? __pfx__printk+0x10/0x10 [ 1036.427118][T26852] ? __pfx___might_resched+0x10/0x10 [ 1036.427144][T26852] should_fail_ex+0x414/0x560 [ 1036.427179][T26852] ? seq_read_iter+0x1fd/0xe10 [ 1036.427198][T26852] should_failslab+0xa8/0x100 [ 1036.427222][T26852] __kvmalloc_node_noprof+0x161/0x5f0 [ 1036.427245][T26852] ? seq_read_iter+0x1fd/0xe10 [ 1036.427271][T26852] seq_read_iter+0x1fd/0xe10 [ 1036.427293][T26852] ? look_up_lock_class+0x74/0x170 [ 1036.427329][T26852] ? __asan_memset+0x22/0x50 [ 1036.427371][T26852] seq_read+0x2e2/0x3d0 [ 1036.427401][T26852] ? __pfx_seq_read+0x10/0x10 [ 1036.427435][T26852] ? rw_verify_area+0x258/0x650 [ 1036.427456][T26852] ? __pfx_seq_read+0x10/0x10 [ 1036.427479][T26852] vfs_read+0x1fd/0x980 [ 1036.427506][T26852] ? __pfx___mutex_lock+0x10/0x10 [ 1036.427526][T26852] ? __pfx_vfs_read+0x10/0x10 [ 1036.427549][T26852] ? __fget_files+0x2a/0x420 [ 1036.427579][T26852] ? __fget_files+0x3a0/0x420 [ 1036.427604][T26852] ? __fget_files+0x2a/0x420 [ 1036.427639][T26852] ksys_read+0x145/0x250 [ 1036.427663][T26852] ? __pfx_ksys_read+0x10/0x10 [ 1036.427682][T26852] ? rcu_is_watching+0x15/0xb0 [ 1036.427708][T26852] ? do_syscall_64+0xbe/0x3b0 [ 1036.427731][T26852] do_syscall_64+0xfa/0x3b0 [ 1036.427749][T26852] ? lockdep_hardirqs_on+0x9c/0x150 [ 1036.427777][T26852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.427797][T26852] ? clear_bhb_loop+0x60/0xb0 [ 1036.427821][T26852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.427840][T26852] RIP: 0033:0x7fce1b38e929 [ 1036.427858][T26852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1036.427875][T26852] RSP: 002b:00007fce1c277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1036.427896][T26852] RAX: ffffffffffffffda RBX: 00007fce1b5b5fa0 RCX: 00007fce1b38e929 [ 1036.427911][T26852] RDX: 0000000000002020 RSI: 0000200000007940 RDI: 0000000000000003 [ 1036.427921][T26852] RBP: 00007fce1c277090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.427933][T26852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.427945][T26852] R13: 0000000000000000 R14: 00007fce1b5b5fa0 R15: 00007ffd5eba38e8 [ 1036.427973][T26852] [ 1036.761095][T26855] overlayfs: failed to resolve './file1': -2 [ 1036.886421][T26863] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1036.975846][T26868] vxfs: WRONG superblock magic 00000000 at 1 [ 1036.981925][T26868] vxfs: WRONG superblock magic 00000000 at 8 [ 1036.988976][T26868] vxfs: can't find superblock. [ 1037.095726][T26874] FAULT_INJECTION: forcing a failure. [ 1037.095726][T26874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1037.112888][T26874] CPU: 0 UID: 0 PID: 26874 Comm: syz.8.6006 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1037.112917][T26874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1037.112930][T26874] Call Trace: [ 1037.112939][T26874] [ 1037.112947][T26874] dump_stack_lvl+0x189/0x250 [ 1037.112975][T26874] ? __pfx____ratelimit+0x10/0x10 [ 1037.113005][T26874] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1037.113028][T26874] ? __pfx__printk+0x10/0x10 [ 1037.113060][T26874] ? __might_fault+0xb0/0x130 [ 1037.113093][T26874] should_fail_ex+0x414/0x560 [ 1037.113129][T26874] _copy_to_iter+0x3f5/0x16f0 [ 1037.113171][T26874] ? __pfx__copy_to_iter+0x10/0x10 [ 1037.113200][T26874] ? m_stop+0xd2/0x1e0 [ 1037.113230][T26874] ? m_stop+0x180/0x1e0 [ 1037.113257][T26874] seq_read_iter+0xbeb/0xe10 [ 1037.113296][T26874] seq_read+0x2e2/0x3d0 [ 1037.113326][T26874] ? __pfx_seq_read+0x10/0x10 [ 1037.113360][T26874] ? rw_verify_area+0x258/0x650 [ 1037.113381][T26874] ? __pfx_seq_read+0x10/0x10 [ 1037.113402][T26874] vfs_read+0x1fd/0x980 [ 1037.113429][T26874] ? __pfx___mutex_lock+0x10/0x10 [ 1037.113448][T26874] ? __pfx_vfs_read+0x10/0x10 [ 1037.113469][T26874] ? __fget_files+0x2a/0x420 [ 1037.113499][T26874] ? __fget_files+0x3a0/0x420 [ 1037.113524][T26874] ? __fget_files+0x2a/0x420 [ 1037.113559][T26874] ksys_read+0x145/0x250 [ 1037.113584][T26874] ? __pfx_ksys_read+0x10/0x10 [ 1037.113603][T26874] ? rcu_is_watching+0x15/0xb0 [ 1037.113630][T26874] ? do_syscall_64+0xbe/0x3b0 [ 1037.113653][T26874] do_syscall_64+0xfa/0x3b0 [ 1037.113671][T26874] ? lockdep_hardirqs_on+0x9c/0x150 [ 1037.113699][T26874] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.113718][T26874] ? clear_bhb_loop+0x60/0xb0 [ 1037.113742][T26874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1037.113760][T26874] RIP: 0033:0x7fce1b38e929 [ 1037.113778][T26874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1037.113796][T26874] RSP: 002b:00007fce1c277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1037.113818][T26874] RAX: ffffffffffffffda RBX: 00007fce1b5b5fa0 RCX: 00007fce1b38e929 [ 1037.113834][T26874] RDX: 0000000000002020 RSI: 0000200000007940 RDI: 0000000000000003 [ 1037.113847][T26874] RBP: 00007fce1c277090 R08: 0000000000000000 R09: 0000000000000000 [ 1037.113860][T26874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1037.113871][T26874] R13: 0000000000000000 R14: 00007fce1b5b5fa0 R15: 00007ffd5eba38e8 [ 1037.113902][T26874] [ 1037.366831][ C0] vkms_vblank_simulate: vblank timer overrun [ 1037.450122][T26880] /dev/rnullb0: Can't open blockdev [ 1037.878200][T26888] XFS (rnullb0): Invalid superblock magic number [ 1037.911848][T26895] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1038.097507][T26899] Invalid/unusable pipe [ 1038.110619][T26899] /dev/rnullb0: Can't open blockdev [ 1038.191788][ T43] usb 7-1: New USB device found, idVendor=1410, idProduct=a014, bcdDevice=9f.99 [ 1038.205252][ T43] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.242053][ T43] usb 7-1: config 0 descriptor?? [ 1038.253823][ T43] usb 7-1: can't set config #0, error -71 [ 1038.263238][T26901] : entered promiscuous mode [ 1038.274909][ T43] usb 7-1: USB disconnect, device number 12 [ 1038.501175][T26909] FAULT_INJECTION: forcing a failure. [ 1038.501175][T26909] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1038.519238][T26909] CPU: 0 UID: 0 PID: 26909 Comm: syz.6.6016 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1038.519266][T26909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1038.519279][T26909] Call Trace: [ 1038.519287][T26909] [ 1038.519296][T26909] dump_stack_lvl+0x189/0x250 [ 1038.519322][T26909] ? __pfx____ratelimit+0x10/0x10 [ 1038.519351][T26909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1038.519369][T26909] ? __pfx__printk+0x10/0x10 [ 1038.519391][T26909] ? fs_reclaim_acquire+0x7d/0x100 [ 1038.519423][T26909] should_fail_ex+0x414/0x560 [ 1038.519456][T26909] prepare_alloc_pages+0x213/0x610 [ 1038.519489][T26909] __alloc_frozen_pages_noprof+0x123/0x370 [ 1038.519519][T26909] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1038.519554][T26909] ? policy_nodemask+0x27c/0x720 [ 1038.519573][T26909] ? __lock_acquire+0xab9/0xd20 [ 1038.519607][T26909] alloc_pages_mpol+0x232/0x4a0 [ 1038.519635][T26909] vma_alloc_folio_noprof+0xe4/0x200 [ 1038.519660][T26909] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1038.519703][T26909] folio_prealloc+0x30/0x180 [ 1038.519727][T26909] __handle_mm_fault+0x2ab9/0x5440 [ 1038.519763][T26909] ? __pfx___handle_mm_fault+0x10/0x10 [ 1038.519802][T26909] ? find_vma+0xe7/0x160 [ 1038.519821][T26909] ? __pfx_find_vma+0x10/0x10 [ 1038.519841][T26909] handle_mm_fault+0x40a/0x8e0 [ 1038.519872][T26909] do_user_addr_fault+0x764/0x1390 [ 1038.519917][T26909] exc_page_fault+0x76/0xf0 [ 1038.519957][T26909] asm_exc_page_fault+0x26/0x30 [ 1038.519974][T26909] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1038.519999][T26909] Code: ff 03 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f ff 03 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1038.520016][T26909] RSP: 0018:ffffc9000c3078f8 EFLAGS: 00050206 [ 1038.520033][T26909] RAX: ffffffff84cac501 RBX: ffff88801c762000 RCX: 00000000000007bd [ 1038.520048][T26909] RDX: 0000000000000000 RSI: ffff88801c762000 RDI: 0000200000007940 [ 1038.520062][T26909] RBP: ffffc9000c307a50 R08: ffff88801c7627bc R09: 1ffff110038ec4f7 [ 1038.520077][T26909] R10: dffffc0000000000 R11: ffffed10038ec4f8 R12: dffffc0000000000 [ 1038.520091][T26909] R13: 0000000000000000 R14: 00007ffffffff000 R15: 00000000000007bd [ 1038.520112][T26909] ? _copy_to_iter+0x431/0x16f0 [ 1038.520147][T26909] _copy_to_iter+0x484/0x16f0 [ 1038.520187][T26909] ? __pfx__copy_to_iter+0x10/0x10 [ 1038.520214][T26909] ? m_stop+0xd2/0x1e0 [ 1038.520246][T26909] ? m_stop+0x180/0x1e0 [ 1038.520272][T26909] seq_read_iter+0xbeb/0xe10 [ 1038.520314][T26909] seq_read+0x2e2/0x3d0 [ 1038.520343][T26909] ? __pfx_seq_read+0x10/0x10 [ 1038.520376][T26909] ? rw_verify_area+0x258/0x650 [ 1038.520396][T26909] ? __pfx_seq_read+0x10/0x10 [ 1038.520414][T26909] vfs_read+0x1fd/0x980 [ 1038.520439][T26909] ? __pfx___mutex_lock+0x10/0x10 [ 1038.520457][T26909] ? __pfx_vfs_read+0x10/0x10 [ 1038.520479][T26909] ? __fget_files+0x2a/0x420 [ 1038.520509][T26909] ? __fget_files+0x3a0/0x420 [ 1038.520532][T26909] ? __fget_files+0x2a/0x420 [ 1038.520566][T26909] ksys_read+0x145/0x250 [ 1038.520589][T26909] ? __pfx_ksys_read+0x10/0x10 [ 1038.520607][T26909] ? rcu_is_watching+0x15/0xb0 [ 1038.520632][T26909] ? do_syscall_64+0xbe/0x3b0 [ 1038.520655][T26909] do_syscall_64+0xfa/0x3b0 [ 1038.520672][T26909] ? lockdep_hardirqs_on+0x9c/0x150 [ 1038.520699][T26909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.520718][T26909] ? clear_bhb_loop+0x60/0xb0 [ 1038.520740][T26909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.520759][T26909] RIP: 0033:0x7f7f6af8e929 [ 1038.520777][T26909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1038.520793][T26909] RSP: 002b:00007f7f6bd77038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1038.520813][T26909] RAX: ffffffffffffffda RBX: 00007f7f6b1b5fa0 RCX: 00007f7f6af8e929 [ 1038.520828][T26909] RDX: 0000000000002020 RSI: 0000200000007940 RDI: 0000000000000003 [ 1038.520840][T26909] RBP: 00007f7f6bd77090 R08: 0000000000000000 R09: 0000000000000000 [ 1038.520852][T26909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1038.520864][T26909] R13: 0000000000000000 R14: 00007f7f6b1b5fa0 R15: 00007ffc3dbf1218 [ 1038.520891][T26909] [ 1038.929577][ C0] vkms_vblank_simulate: vblank timer overrun [ 1039.553120][ T24] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1039.707532][T26920] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1039.719123][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 1039.725980][ T24] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 1039.754674][ T24] usb 7-1: config 0 has no interface number 0 [ 1039.773749][ T24] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1039.813316][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.841649][ T24] usb 7-1: Product: syz [ 1039.852356][T26922] ISOFS: unsupported/invalid hardware sector size 4096 [ 1039.859156][ T24] usb 7-1: Manufacturer: syz [ 1039.869786][ T24] usb 7-1: SerialNumber: syz [ 1039.882191][ T24] usb 7-1: config 0 descriptor?? [ 1039.887984][T26925] /dev/rnullb0: Can't open blockdev [ 1039.900529][ T24] smsc95xx v2.0.0 [ 1040.169749][T26934] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1040.180687][ T24] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1040.185791][T26935] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1040.236126][ T24] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1040.258466][ T24] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1040.286436][ T24] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -71 [ 1040.339774][ T24] usb 7-1: USB disconnect, device number 13 [ 1040.972098][T26952] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1041.003834][ T43] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1041.186676][ T43] usb 9-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1041.207149][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.216178][ T43] usb 9-1: Product: syz [ 1041.220586][ T43] usb 9-1: Manufacturer: syz [ 1041.227465][ T43] usb 9-1: SerialNumber: syz [ 1041.242886][ T43] usb 9-1: config 0 descriptor?? [ 1041.256390][ T43] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1041.344265][T26961] /dev/rnullb0: Can't open blockdev [ 1041.831027][T26969] FAULT_INJECTION: forcing a failure. [ 1041.831027][T26969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1041.847379][T26969] CPU: 1 UID: 0 PID: 26969 Comm: syz.6.6036 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1041.847409][T26969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1041.847422][T26969] Call Trace: [ 1041.847430][T26969] [ 1041.847439][T26969] dump_stack_lvl+0x189/0x250 [ 1041.847469][T26969] ? __pfx____ratelimit+0x10/0x10 [ 1041.847498][T26969] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1041.847519][T26969] ? __pfx__printk+0x10/0x10 [ 1041.847554][T26969] should_fail_ex+0x414/0x560 [ 1041.847589][T26969] _copy_to_user+0x31/0xb0 [ 1041.847610][T26969] simple_read_from_buffer+0xe1/0x170 [ 1041.847640][T26969] proc_fail_nth_read+0x1df/0x250 [ 1041.847671][T26969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1041.847700][T26969] ? rw_verify_area+0x258/0x650 [ 1041.847721][T26969] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1041.847749][T26969] vfs_read+0x1fd/0x980 [ 1041.847776][T26969] ? __pfx___mutex_lock+0x10/0x10 [ 1041.847796][T26969] ? __pfx_vfs_read+0x10/0x10 [ 1041.847819][T26969] ? __fget_files+0x2a/0x420 [ 1041.847848][T26969] ? __fget_files+0x3a0/0x420 [ 1041.847872][T26969] ? __fget_files+0x2a/0x420 [ 1041.847904][T26969] ksys_read+0x145/0x250 [ 1041.847929][T26969] ? __pfx_ksys_read+0x10/0x10 [ 1041.847948][T26969] ? rcu_is_watching+0x15/0xb0 [ 1041.847980][T26969] ? do_syscall_64+0xbe/0x3b0 [ 1041.848003][T26969] do_syscall_64+0xfa/0x3b0 [ 1041.848018][T26969] ? lockdep_hardirqs_on+0x9c/0x150 [ 1041.848044][T26969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.848061][T26969] ? clear_bhb_loop+0x60/0xb0 [ 1041.848082][T26969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1041.848100][T26969] RIP: 0033:0x7f7f6af8d33c [ 1041.848118][T26969] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1041.848135][T26969] RSP: 002b:00007f7f6bd77030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1041.848155][T26969] RAX: ffffffffffffffda RBX: 00007f7f6b1b5fa0 RCX: 00007f7f6af8d33c [ 1041.848171][T26969] RDX: 000000000000000f RSI: 00007f7f6bd770a0 RDI: 0000000000000004 [ 1041.848183][T26969] RBP: 00007f7f6bd77090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.848196][T26969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.848208][T26969] R13: 0000000000000000 R14: 00007f7f6b1b5fa0 R15: 00007ffc3dbf1218 [ 1041.848239][T26969] [ 1042.601460][T26977] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1043.042299][ T43] gspca_sunplus: reg_r err -71 [ 1043.047249][ T43] sunplus 9-1:0.0: probe with driver sunplus failed with error -71 [ 1043.059585][ T43] usb 9-1: USB disconnect, device number 50 [ 1043.519284][T26993] overlayfs: missing 'workdir' [ 1043.711738][T26998] FAULT_INJECTION: forcing a failure. [ 1043.711738][T26998] name failslab, interval 1, probability 0, space 0, times 0 [ 1043.742651][T26998] CPU: 0 UID: 0 PID: 26998 Comm: syz.8.6048 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1043.742680][T26998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1043.742693][T26998] Call Trace: [ 1043.742701][T26998] [ 1043.742710][T26998] dump_stack_lvl+0x189/0x250 [ 1043.742737][T26998] ? __pfx____ratelimit+0x10/0x10 [ 1043.742763][T26998] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1043.742782][T26998] ? __pfx__printk+0x10/0x10 [ 1043.742805][T26998] ? __pfx___might_resched+0x10/0x10 [ 1043.742832][T26998] ? fs_reclaim_acquire+0x7d/0x100 [ 1043.742859][T26998] should_fail_ex+0x414/0x560 [ 1043.742889][T26998] should_failslab+0xa8/0x100 [ 1043.742912][T26998] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1043.742930][T26998] ? __kernfs_new_node+0xd7/0x7e0 [ 1043.742960][T26998] __kernfs_new_node+0xd7/0x7e0 [ 1043.742986][T26998] ? __lock_acquire+0xab9/0xd20 [ 1043.743020][T26998] ? __pfx___kernfs_new_node+0x10/0x10 [ 1043.743048][T26998] ? kernfs_root+0x1c/0x230 [ 1043.743078][T26998] ? kernfs_root+0x1c/0x230 [ 1043.743101][T26998] ? kernfs_root+0x1c/0x230 [ 1043.743123][T26998] ? kernfs_root+0x1c/0x230 [ 1043.743153][T26998] kernfs_new_node+0x102/0x210 [ 1043.743187][T26998] __kernfs_create_file+0x4b/0x2e0 [ 1043.743212][T26998] sysfs_add_file_mode_ns+0x238/0x300 [ 1043.743246][T26998] internal_create_group+0x66d/0x1110 [ 1043.743284][T26998] ? kernfs_remove_by_name_ns+0xee/0x130 [ 1043.743306][T26998] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1043.743328][T26998] ? __pfx_internal_create_group+0x10/0x10 [ 1043.743367][T26998] sysfs_slab_add+0x14a/0x290 [ 1043.743393][T26998] do_kmem_cache_create+0x488/0x690 [ 1043.743421][T26998] __kmem_cache_create_args+0x1c2/0x320 [ 1043.743446][T26998] p9_client_create+0xac3/0xfe0 [ 1043.743481][T26998] ? __pfx_p9_client_create+0x10/0x10 [ 1043.743531][T26998] ? __raw_spin_lock_init+0x45/0x100 [ 1043.743562][T26998] v9fs_session_init+0x1d7/0x19a0 [ 1043.743607][T26998] ? __pfx_v9fs_session_init+0x10/0x10 [ 1043.743637][T26998] ? __kasan_kmalloc+0x93/0xb0 [ 1043.743660][T26998] ? v9fs_mount+0xb2/0xa50 [ 1043.743687][T26998] v9fs_mount+0xc8/0xa50 [ 1043.743711][T26998] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1043.743736][T26998] ? __pfx_v9fs_mount+0x10/0x10 [ 1043.743759][T26998] ? rcu_is_watching+0x15/0xb0 [ 1043.743785][T26998] legacy_get_tree+0xfa/0x1a0 [ 1043.743810][T26998] ? __pfx_v9fs_mount+0x10/0x10 [ 1043.743842][T26998] vfs_get_tree+0x8f/0x2b0 [ 1043.743867][T26998] do_new_mount+0x24a/0xa40 [ 1043.743898][T26998] __se_sys_mount+0x317/0x410 [ 1043.743930][T26998] ? __pfx___se_sys_mount+0x10/0x10 [ 1043.743953][T26998] ? rcu_is_watching+0x15/0xb0 [ 1043.743978][T26998] ? do_syscall_64+0xbe/0x3b0 [ 1043.743995][T26998] ? __x64_sys_mount+0x20/0xc0 [ 1043.744023][T26998] do_syscall_64+0xfa/0x3b0 [ 1043.744040][T26998] ? lockdep_hardirqs_on+0x9c/0x150 [ 1043.744068][T26998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.744087][T26998] ? clear_bhb_loop+0x60/0xb0 [ 1043.744111][T26998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1043.744131][T26998] RIP: 0033:0x7fce1b38e929 [ 1043.744149][T26998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1043.744167][T26998] RSP: 002b:00007fce1c277038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1043.744188][T26998] RAX: ffffffffffffffda RBX: 00007fce1b5b5fa0 RCX: 00007fce1b38e929 [ 1043.744203][T26998] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 1043.744217][T26998] RBP: 00007fce1c277090 R08: 0000200000000500 R09: 0000000000000000 [ 1043.744230][T26998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1043.744243][T26998] R13: 0000000000000000 R14: 00007fce1b5b5fa0 R15: 00007ffd5eba38e8 [ 1043.744274][T26998] [ 1043.745510][T26998] SLUB: Unable to add cache 9p-fcall-cache-74 to sysfs [ 1043.839596][T27000] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1044.505728][T14922] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1044.664927][T14922] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.676231][T14922] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.687140][T14922] usb 7-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1044.700673][T14922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.716738][T14922] usb 7-1: config 0 descriptor?? [ 1044.866546][T27019] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 1044.874280][T27019] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 1045.172674][ T43] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1045.326341][ T43] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1045.337952][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1045.352597][ T43] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1045.371950][ T43] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1045.385408][ T43] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1045.400973][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1045.413076][ T43] usb 9-1: config 0 descriptor?? [ 1045.597683][T14922] usbhid 7-1:0.0: can't add hid device: -71 [ 1045.603911][T14922] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1045.615310][T14922] usb 7-1: USB disconnect, device number 14 [ 1045.826863][ T43] plantronics 0003:047F:FFFF.0065: ignoring exceeding usage max [ 1045.842032][ T43] plantronics 0003:047F:FFFF.0065: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 1046.153017][ T5923] usb 9-1: USB disconnect, device number 51 [ 1046.445227][T27032] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6056'. [ 1046.466142][ T30] audit: type=1800 audit(2000000622.756:107): pid=27032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6056" name="bus" dev="overlay" ino=2975 res=0 errno=0 [ 1046.585384][T27037] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1046.666383][T27039] FAULT_INJECTION: forcing a failure. [ 1046.666383][T27039] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.700786][T27039] CPU: 1 UID: 0 PID: 27039 Comm: syz.6.6059 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1046.700817][T27039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1046.700830][T27039] Call Trace: [ 1046.700838][T27039] [ 1046.700848][T27039] dump_stack_lvl+0x189/0x250 [ 1046.700875][T27039] ? __pfx____ratelimit+0x10/0x10 [ 1046.700904][T27039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1046.700926][T27039] ? __pfx__printk+0x10/0x10 [ 1046.700954][T27039] ? __pfx___might_resched+0x10/0x10 [ 1046.700974][T27039] ? fs_reclaim_acquire+0x7d/0x100 [ 1046.701003][T27039] should_fail_ex+0x414/0x560 [ 1046.701038][T27039] should_failslab+0xa8/0x100 [ 1046.701066][T27039] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1046.701086][T27039] ? __kernfs_new_node+0xd7/0x7e0 [ 1046.701119][T27039] __kernfs_new_node+0xd7/0x7e0 [ 1046.701146][T27039] ? __lock_acquire+0xab9/0xd20 [ 1046.701183][T27039] ? __pfx___kernfs_new_node+0x10/0x10 [ 1046.701212][T27039] ? kernfs_root+0x1c/0x230 [ 1046.701244][T27039] ? kernfs_root+0x1c/0x230 [ 1046.701269][T27039] ? kernfs_root+0x1c/0x230 [ 1046.701291][T27039] ? kernfs_root+0x1c/0x230 [ 1046.701321][T27039] kernfs_new_node+0x102/0x210 [ 1046.701353][T27039] __kernfs_create_file+0x4b/0x2e0 [ 1046.701378][T27039] sysfs_add_file_mode_ns+0x238/0x300 [ 1046.701417][T27039] internal_create_group+0x66d/0x1110 [ 1046.701454][T27039] ? kernfs_remove_by_name_ns+0xee/0x130 [ 1046.701476][T27039] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1046.701498][T27039] ? __pfx_internal_create_group+0x10/0x10 [ 1046.701536][T27039] sysfs_slab_add+0x14a/0x290 [ 1046.701562][T27039] do_kmem_cache_create+0x488/0x690 [ 1046.701589][T27039] __kmem_cache_create_args+0x1c2/0x320 [ 1046.701614][T27039] p9_client_create+0xac3/0xfe0 [ 1046.701649][T27039] ? __pfx_p9_client_create+0x10/0x10 [ 1046.701703][T27039] ? __raw_spin_lock_init+0x45/0x100 [ 1046.701734][T27039] v9fs_session_init+0x1d7/0x19a0 [ 1046.701776][T27039] ? __pfx_v9fs_session_init+0x10/0x10 [ 1046.701800][T27039] ? v9fs_mount+0xb2/0xa50 [ 1046.701824][T27039] ? __kasan_kmalloc+0x93/0xb0 [ 1046.701847][T27039] ? v9fs_mount+0xb2/0xa50 [ 1046.701872][T27039] v9fs_mount+0xc8/0xa50 [ 1046.701897][T27039] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1046.701922][T27039] ? __pfx_v9fs_mount+0x10/0x10 [ 1046.701944][T27039] ? rcu_is_watching+0x15/0xb0 [ 1046.701971][T27039] legacy_get_tree+0xfa/0x1a0 [ 1046.701996][T27039] ? __pfx_v9fs_mount+0x10/0x10 [ 1046.702020][T27039] vfs_get_tree+0x8f/0x2b0 [ 1046.702046][T27039] do_new_mount+0x24a/0xa40 [ 1046.702081][T27039] __se_sys_mount+0x317/0x410 [ 1046.702113][T27039] ? __pfx___se_sys_mount+0x10/0x10 [ 1046.702137][T27039] ? rcu_is_watching+0x15/0xb0 [ 1046.702162][T27039] ? do_syscall_64+0xbe/0x3b0 [ 1046.702179][T27039] ? __x64_sys_mount+0x20/0xc0 [ 1046.702207][T27039] do_syscall_64+0xfa/0x3b0 [ 1046.702224][T27039] ? lockdep_hardirqs_on+0x9c/0x150 [ 1046.702252][T27039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.702272][T27039] ? clear_bhb_loop+0x60/0xb0 [ 1046.702296][T27039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.702315][T27039] RIP: 0033:0x7f7f6af8e929 [ 1046.702334][T27039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1046.702352][T27039] RSP: 002b:00007f7f6bd77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1046.702373][T27039] RAX: ffffffffffffffda RBX: 00007f7f6b1b5fa0 RCX: 00007f7f6af8e929 [ 1046.702387][T27039] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 1046.702401][T27039] RBP: 00007f7f6bd77090 R08: 0000200000000500 R09: 0000000000000000 [ 1046.702414][T27039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1046.702425][T27039] R13: 0000000000000000 R14: 00007f7f6b1b5fa0 R15: 00007ffc3dbf1218 [ 1046.702456][T27039] [ 1047.183375][T27039] SLUB: Unable to add cache 9p-fcall-cache-75 to sysfs [ 1047.275446][T27044] netlink: 'syz.8.6061': attribute type 6 has an invalid length. [ 1047.485281][T27056] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 1047.491839][T27056] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1047.513900][T27062] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1047.516397][T27058] overlayfs: failed to resolve './file0': -2 [ 1047.525580][T27056] vhci_hcd vhci_hcd.0: Device attached [ 1047.713380][T20750] vhci_hcd: vhci_device speed not set [ 1047.774111][T27059] vhci_hcd: connection closed [ 1047.774401][ T36] vhci_hcd: stop threads [ 1047.782962][T20750] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 1047.783921][ T36] vhci_hcd: release socket [ 1047.795480][ T36] vhci_hcd: disconnect device [ 1048.363149][T27077] /dev/rnullb0: Can't open blockdev [ 1048.466170][T27079] FAULT_INJECTION: forcing a failure. [ 1048.466170][T27079] name failslab, interval 1, probability 0, space 0, times 0 [ 1048.479267][T27079] CPU: 1 UID: 0 PID: 27079 Comm: syz.8.6071 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1048.479296][T27079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1048.479309][T27079] Call Trace: [ 1048.479317][T27079] [ 1048.479325][T27079] dump_stack_lvl+0x189/0x250 [ 1048.479353][T27079] ? __pfx____ratelimit+0x10/0x10 [ 1048.479383][T27079] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1048.479405][T27079] ? __pfx__printk+0x10/0x10 [ 1048.479433][T27079] ? __pfx___might_resched+0x10/0x10 [ 1048.479453][T27079] ? fs_reclaim_acquire+0x7d/0x100 [ 1048.479489][T27079] should_fail_ex+0x414/0x560 [ 1048.479524][T27079] should_failslab+0xa8/0x100 [ 1048.479548][T27079] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1048.479568][T27079] ? __kernfs_new_node+0xd7/0x7e0 [ 1048.479601][T27079] __kernfs_new_node+0xd7/0x7e0 [ 1048.479627][T27079] ? __lock_acquire+0xab9/0xd20 [ 1048.479663][T27079] ? __pfx___kernfs_new_node+0x10/0x10 [ 1048.479692][T27079] ? kernfs_root+0x1c/0x230 [ 1048.479724][T27079] ? kernfs_root+0x1c/0x230 [ 1048.479750][T27079] ? kernfs_root+0x1c/0x230 [ 1048.479774][T27079] ? kernfs_root+0x1c/0x230 [ 1048.479806][T27079] kernfs_new_node+0x102/0x210 [ 1048.479840][T27079] __kernfs_create_file+0x4b/0x2e0 [ 1048.479865][T27079] sysfs_add_file_mode_ns+0x238/0x300 [ 1048.479898][T27079] internal_create_group+0x66d/0x1110 [ 1048.479935][T27079] ? kernfs_remove_by_name_ns+0xee/0x130 [ 1048.479957][T27079] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1048.479977][T27079] ? __pfx_internal_create_group+0x10/0x10 [ 1048.480015][T27079] sysfs_slab_add+0x14a/0x290 [ 1048.480040][T27079] do_kmem_cache_create+0x488/0x690 [ 1048.480068][T27079] __kmem_cache_create_args+0x1c2/0x320 [ 1048.480092][T27079] p9_client_create+0xac3/0xfe0 [ 1048.480126][T27079] ? __pfx_p9_client_create+0x10/0x10 [ 1048.480178][T27079] ? __raw_spin_lock_init+0x45/0x100 [ 1048.480209][T27079] v9fs_session_init+0x1d7/0x19a0 [ 1048.480254][T27079] ? __pfx_v9fs_session_init+0x10/0x10 [ 1048.480284][T27079] ? __kasan_kmalloc+0x93/0xb0 [ 1048.480307][T27079] ? v9fs_mount+0xb2/0xa50 [ 1048.480332][T27079] v9fs_mount+0xc8/0xa50 [ 1048.480356][T27079] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1048.480382][T27079] ? __pfx_v9fs_mount+0x10/0x10 [ 1048.480405][T27079] ? rcu_is_watching+0x15/0xb0 [ 1048.480430][T27079] legacy_get_tree+0xfa/0x1a0 [ 1048.480455][T27079] ? __pfx_v9fs_mount+0x10/0x10 [ 1048.480488][T27079] vfs_get_tree+0x8f/0x2b0 [ 1048.480515][T27079] do_new_mount+0x24a/0xa40 [ 1048.480547][T27079] __se_sys_mount+0x317/0x410 [ 1048.480576][T27079] ? __pfx___se_sys_mount+0x10/0x10 [ 1048.480599][T27079] ? rcu_is_watching+0x15/0xb0 [ 1048.480624][T27079] ? do_syscall_64+0xbe/0x3b0 [ 1048.480641][T27079] ? __x64_sys_mount+0x20/0xc0 [ 1048.480668][T27079] do_syscall_64+0xfa/0x3b0 [ 1048.480684][T27079] ? lockdep_hardirqs_on+0x9c/0x150 [ 1048.480713][T27079] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.480732][T27079] ? clear_bhb_loop+0x60/0xb0 [ 1048.480756][T27079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1048.480775][T27079] RIP: 0033:0x7fce1b38e929 [ 1048.480793][T27079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1048.480811][T27079] RSP: 002b:00007fce1c277038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1048.480832][T27079] RAX: ffffffffffffffda RBX: 00007fce1b5b5fa0 RCX: 00007fce1b38e929 [ 1048.480847][T27079] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 1048.480861][T27079] RBP: 00007fce1c277090 R08: 0000200000000500 R09: 0000000000000000 [ 1048.480874][T27079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1048.480886][T27079] R13: 0000000000000000 R14: 00007fce1b5b5fa0 R15: 00007ffd5eba38e8 [ 1048.480918][T27079] [ 1048.481287][T27079] SLUB: Unable to add cache 9p-fcall-cache-76 to sysfs [ 1048.668783][T27082] /dev/rnullb0: Can't open blockdev [ 1049.006216][T27092] could not allocate digest TFM handle blake2s-224 [ 1049.014126][T27092] /dev/rnullb0: Can't open blockdev [ 1049.050098][T27096] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1049.172727][ T5833] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1049.324923][ T5833] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1049.337739][ T5833] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 64 [ 1049.351813][ T5833] usb 7-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 1049.361792][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.370678][ T5833] usb 7-1: Product: syz [ 1049.372619][ T5942] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1049.376272][ T5833] usb 7-1: Manufacturer: syz [ 1049.387508][ T5833] usb 7-1: SerialNumber: syz [ 1049.394844][ T5833] usb 7-1: config 0 descriptor?? [ 1049.402851][T27090] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1049.411773][ T5833] keyspan 7-1:0.0: Keyspan 1 port adapter converter detected [ 1049.420749][ T5833] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 87 [ 1049.429026][ T5833] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 7 [ 1049.438415][ T5833] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 1 [ 1049.446104][ T5833] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 2 [ 1049.453987][ T5833] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 85 [ 1049.461665][ T5833] keyspan 7-1:0.0: found no endpoint descriptor for endpoint 5 [ 1049.470543][ T5833] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1049.532761][ T5942] usb 9-1: Using ep0 maxpacket: 32 [ 1049.540183][ T5942] usb 9-1: config 157 has an invalid interface number: 184 but max is 0 [ 1049.549030][ T5942] usb 9-1: config 157 has an invalid descriptor of length 1, skipping remainder of the config [ 1049.559449][ T5942] usb 9-1: config 157 has no interface number 0 [ 1049.565792][ T5942] usb 9-1: config 157 interface 184 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 1049.579214][ T5942] usb 9-1: config 157 interface 184 has no altsetting 0 [ 1049.587977][ T5942] usb 9-1: New USB device found, idVendor=12d1, idProduct=f399, bcdDevice=4a.f6 [ 1049.597044][ T5942] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.605132][ T5942] usb 9-1: Product: syz [ 1049.609275][ T5942] usb 9-1: Manufacturer: Ч [ 1049.613970][ T5942] usb 9-1: SerialNumber: syz [ 1049.629506][T27090] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6074'. [ 1049.694598][ T43] usb 7-1: USB disconnect, device number 15 [ 1049.709283][ T43] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1049.720454][ T43] keyspan 7-1:0.0: device disconnected [ 1050.032709][ T5942] option 9-1:157.184: GSM modem (1-port) converter detected [ 1050.046311][ T5942] usb 9-1: USB disconnect, device number 52 [ 1050.054842][ T5942] option 9-1:157.184: device disconnected [ 1050.397726][T27105] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6079'. [ 1050.408933][T27105] overlayfs: failed to resolve './file1': -2 [ 1050.420096][T27105] netlink: 184 bytes leftover after parsing attributes in process `syz.6.6079'. [ 1050.447484][T27107] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6080'. [ 1050.621945][T27118] FAULT_INJECTION: forcing a failure. [ 1050.621945][T27118] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.640283][T27118] CPU: 1 UID: 0 PID: 27118 Comm: syz.8.6083 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1050.640311][T27118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1050.640324][T27118] Call Trace: [ 1050.640338][T27118] [ 1050.640347][T27118] dump_stack_lvl+0x189/0x250 [ 1050.640375][T27118] ? __pfx____ratelimit+0x10/0x10 [ 1050.640404][T27118] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1050.640427][T27118] ? __pfx__printk+0x10/0x10 [ 1050.640455][T27118] ? __pfx___might_resched+0x10/0x10 [ 1050.640474][T27118] ? fs_reclaim_acquire+0x7d/0x100 [ 1050.640504][T27118] should_fail_ex+0x414/0x560 [ 1050.640539][T27118] should_failslab+0xa8/0x100 [ 1050.640563][T27118] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1050.640583][T27118] ? __kernfs_new_node+0xd7/0x7e0 [ 1050.640616][T27118] __kernfs_new_node+0xd7/0x7e0 [ 1050.640643][T27118] ? __lock_acquire+0xab9/0xd20 [ 1050.640680][T27118] ? __pfx___kernfs_new_node+0x10/0x10 [ 1050.640709][T27118] ? kernfs_root+0x1c/0x230 [ 1050.640742][T27118] ? kernfs_root+0x1c/0x230 [ 1050.640768][T27118] ? kernfs_root+0x1c/0x230 [ 1050.640792][T27118] ? kernfs_root+0x1c/0x230 [ 1050.640824][T27118] kernfs_new_node+0x102/0x210 [ 1050.640857][T27118] __kernfs_create_file+0x4b/0x2e0 [ 1050.640883][T27118] sysfs_add_file_mode_ns+0x238/0x300 [ 1050.640916][T27118] internal_create_group+0x66d/0x1110 [ 1050.640953][T27118] ? kernfs_remove_by_name_ns+0xee/0x130 [ 1050.640975][T27118] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1050.640996][T27118] ? __pfx_internal_create_group+0x10/0x10 [ 1050.641035][T27118] sysfs_slab_add+0x14a/0x290 [ 1050.641061][T27118] do_kmem_cache_create+0x488/0x690 [ 1050.641087][T27118] __kmem_cache_create_args+0x1c2/0x320 [ 1050.641109][T27118] p9_client_create+0xac3/0xfe0 [ 1050.641144][T27118] ? __pfx_p9_client_create+0x10/0x10 [ 1050.641193][T27118] ? __raw_spin_lock_init+0x45/0x100 [ 1050.641225][T27118] v9fs_session_init+0x1d7/0x19a0 [ 1050.641271][T27118] ? __pfx_v9fs_session_init+0x10/0x10 [ 1050.641295][T27118] ? v9fs_mount+0xb2/0xa50 [ 1050.641319][T27118] ? __kasan_kmalloc+0x93/0xb0 [ 1050.641355][T27118] ? v9fs_mount+0xb2/0xa50 [ 1050.641380][T27118] v9fs_mount+0xc8/0xa50 [ 1050.641404][T27118] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1050.641429][T27118] ? __pfx_v9fs_mount+0x10/0x10 [ 1050.641452][T27118] ? rcu_is_watching+0x15/0xb0 [ 1050.641479][T27118] legacy_get_tree+0xfa/0x1a0 [ 1050.641505][T27118] ? __pfx_v9fs_mount+0x10/0x10 [ 1050.641528][T27118] vfs_get_tree+0x8f/0x2b0 [ 1050.641555][T27118] do_new_mount+0x24a/0xa40 [ 1050.641589][T27118] __se_sys_mount+0x317/0x410 [ 1050.641621][T27118] ? __pfx___se_sys_mount+0x10/0x10 [ 1050.641653][T27118] ? do_syscall_64+0xbe/0x3b0 [ 1050.641669][T27118] ? __x64_sys_mount+0x20/0xc0 [ 1050.641697][T27118] do_syscall_64+0xfa/0x3b0 [ 1050.641714][T27118] ? lockdep_hardirqs_on+0x9c/0x150 [ 1050.641742][T27118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.641762][T27118] ? clear_bhb_loop+0x60/0xb0 [ 1050.641786][T27118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.641804][T27118] RIP: 0033:0x7fce1b38e929 [ 1050.641820][T27118] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1050.641836][T27118] RSP: 002b:00007fce1c277038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1050.641856][T27118] RAX: ffffffffffffffda RBX: 00007fce1b5b5fa0 RCX: 00007fce1b38e929 [ 1050.641870][T27118] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 1050.641883][T27118] RBP: 00007fce1c277090 R08: 0000200000000500 R09: 0000000000000000 [ 1050.641895][T27118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1050.641907][T27118] R13: 0000000000000000 R14: 00007fce1b5b5fa0 R15: 00007ffd5eba38e8 [ 1050.641937][T27118] [ 1050.642232][T27118] SLUB: Unable to add cache 9p-fcall-cache-77 to sysfs [ 1050.759530][T27126] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1051.511907][T27143] qnx4: no qnx4 filesystem (no root dir). [ 1051.905631][T27153] /dev/rnullb0: Can't open blockdev [ 1051.911447][T27155] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1052.104931][T27157] FAULT_INJECTION: forcing a failure. [ 1052.104931][T27157] name failslab, interval 1, probability 0, space 0, times 0 [ 1052.137610][T27157] CPU: 1 UID: 0 PID: 27157 Comm: syz.6.6095 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1052.137640][T27157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1052.137653][T27157] Call Trace: [ 1052.137661][T27157] [ 1052.137671][T27157] dump_stack_lvl+0x189/0x250 [ 1052.137698][T27157] ? __pfx____ratelimit+0x10/0x10 [ 1052.137727][T27157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1052.137749][T27157] ? __pfx__printk+0x10/0x10 [ 1052.137778][T27157] ? __pfx___might_resched+0x10/0x10 [ 1052.137798][T27157] ? fs_reclaim_acquire+0x7d/0x100 [ 1052.137827][T27157] should_fail_ex+0x414/0x560 [ 1052.137863][T27157] should_failslab+0xa8/0x100 [ 1052.137887][T27157] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1052.137907][T27157] ? __kernfs_new_node+0xd7/0x7e0 [ 1052.137941][T27157] __kernfs_new_node+0xd7/0x7e0 [ 1052.137968][T27157] ? __lock_acquire+0xab9/0xd20 [ 1052.138010][T27157] ? __pfx___kernfs_new_node+0x10/0x10 [ 1052.138043][T27157] ? kernfs_root+0x1c/0x230 [ 1052.138076][T27157] ? kernfs_root+0x1c/0x230 [ 1052.138102][T27157] ? kernfs_root+0x1c/0x230 [ 1052.138126][T27157] ? kernfs_root+0x1c/0x230 [ 1052.138158][T27157] kernfs_new_node+0x102/0x210 [ 1052.138191][T27157] __kernfs_create_file+0x4b/0x2e0 [ 1052.138217][T27157] sysfs_add_file_mode_ns+0x238/0x300 [ 1052.138250][T27157] internal_create_group+0x66d/0x1110 [ 1052.138287][T27157] ? kernfs_remove_by_name_ns+0xee/0x130 [ 1052.138309][T27157] ? __pfx_kobject_init_and_add+0x10/0x10 [ 1052.138331][T27157] ? __pfx_internal_create_group+0x10/0x10 [ 1052.138369][T27157] sysfs_slab_add+0x14a/0x290 [ 1052.138395][T27157] do_kmem_cache_create+0x488/0x690 [ 1052.138422][T27157] __kmem_cache_create_args+0x1c2/0x320 [ 1052.138447][T27157] p9_client_create+0xac3/0xfe0 [ 1052.138482][T27157] ? __pfx_p9_client_create+0x10/0x10 [ 1052.138531][T27157] ? __raw_spin_lock_init+0x45/0x100 [ 1052.138563][T27157] v9fs_session_init+0x1d7/0x19a0 [ 1052.138610][T27157] ? __pfx_v9fs_session_init+0x10/0x10 [ 1052.138634][T27157] ? v9fs_mount+0xb2/0xa50 [ 1052.138658][T27157] ? __kasan_kmalloc+0x93/0xb0 [ 1052.138681][T27157] ? v9fs_mount+0xb2/0xa50 [ 1052.138707][T27157] v9fs_mount+0xc8/0xa50 [ 1052.138731][T27157] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1052.138756][T27157] ? __pfx_v9fs_mount+0x10/0x10 [ 1052.138779][T27157] ? rcu_is_watching+0x15/0xb0 [ 1052.138806][T27157] legacy_get_tree+0xfa/0x1a0 [ 1052.138831][T27157] ? __pfx_v9fs_mount+0x10/0x10 [ 1052.138855][T27157] vfs_get_tree+0x8f/0x2b0 [ 1052.138882][T27157] do_new_mount+0x24a/0xa40 [ 1052.138916][T27157] __se_sys_mount+0x317/0x410 [ 1052.138948][T27157] ? __pfx___se_sys_mount+0x10/0x10 [ 1052.138979][T27157] ? rcu_is_watching+0x15/0xb0 [ 1052.139005][T27157] ? do_syscall_64+0xbe/0x3b0 [ 1052.139021][T27157] ? __x64_sys_mount+0x20/0xc0 [ 1052.139050][T27157] do_syscall_64+0xfa/0x3b0 [ 1052.139067][T27157] ? lockdep_hardirqs_on+0x9c/0x150 [ 1052.139095][T27157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.139114][T27157] ? clear_bhb_loop+0x60/0xb0 [ 1052.139139][T27157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.139158][T27157] RIP: 0033:0x7f7f6af8e929 [ 1052.139176][T27157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1052.139193][T27157] RSP: 002b:00007f7f6bd77038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1052.139214][T27157] RAX: ffffffffffffffda RBX: 00007f7f6b1b5fa0 RCX: 00007f7f6af8e929 [ 1052.139229][T27157] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 1052.139243][T27157] RBP: 00007f7f6bd77090 R08: 0000200000000500 R09: 0000000000000000 [ 1052.139257][T27157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1052.139269][T27157] R13: 0000000000000000 R14: 00007f7f6b1b5fa0 R15: 00007ffc3dbf1218 [ 1052.139300][T27157] [ 1052.510181][T27157] SLUB: Unable to add cache 9p-fcall-cache-78 to sysfs [ 1053.022693][T20750] vhci_hcd: vhci_device speed not set [ 1053.297357][T27179] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6103'. [ 1053.308782][T27176] ksmbd: Unknown IPC event: 4, ignore. [ 1053.324651][T27179] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 1053.335906][T27179] netlink: 'syz.6.6103': attribute type 4 has an invalid length. [ 1053.363583][T27181] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1053.658309][T27192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1053.669586][T27192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1053.949907][T27198] >: renamed from veth0_vlan (while UP) [ 1054.084962][T27207] /dev/rnullb0: Can't open blockdev [ 1054.097413][T27208] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1054.474290][T27223] kvm: apic: phys broadcast and lowest prio [ 1054.797881][T27237] netlink: 'syz.8.6121': attribute type 1 has an invalid length. [ 1054.836580][T27223] /dev/rnullb0: Can't open blockdev [ 1054.992669][ T5833] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 1055.207160][ T5833] usb 7-1: config 1 interface 0 altsetting 135 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1055.248302][ T5833] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1055.286416][T27250] /dev/rnullb0: Can't open blockdev [ 1055.296295][ T5833] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1055.316379][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1055.336592][ T5833] usb 7-1: Product: ఌ [ 1055.340784][ T5833] usb 7-1: Manufacturer: 楜鈂Ꟶͳﮘ캸㳷먃뚺閚汇椔䪹⦇蒊஫徉碥︖ￒ୯ஔ핋뭒洄䟻跄ᐳㅋ鏹Ơ窵鞃墐賣褕愧䙂㣥ᧃ蓐홒縡医萍윋踼䭕縪틇ʪ铷昒橄똎餂⷗쌞豈㔴ꛒ㚸圌햢쁎ꑠ䉺钹鳃㗬洅滿㽩ꍉܲ⌄馺㾒裵煑鯞⿲ꐲ嵘㇕‽ꨩ횋⣮겪Ӫ谆ﰪ楪膖끦漼優Ŀڞ饬駳 [ 1055.374542][ C0] vkms_vblank_simulate: vblank timer overrun [ 1055.418393][ T5833] usb 7-1: SerialNumber: syz [ 1055.429714][T27230] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1055.438121][T27230] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1055.445969][T27253] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1055.703572][ T5833] usb 7-1: USB disconnect, device number 17 [ 1058.058830][T27308] /dev/rnullb0: Can't open blockdev [ 1058.869520][T27310] /dev/rnullb0: Can't open blockdev [ 1058.908709][T27312] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1058.960346][T27314] /dev/rnullb0: Can't open blockdev [ 1063.108487][T27340] /dev/rnullb0: Can't open blockdev [ 1063.196734][T27343] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6144'. [ 1063.206077][T27342] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6144'. [ 1063.216217][T27343] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6144'. [ 1063.523538][T27350] tmpfs: Unknown parameter 'mpolprefer' [ 1063.591053][T27353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1063.601510][T27353] /dev/rnullb0: Can't open blockdev [ 1063.609269][T27354] /dev/rnullb0: Can't open blockdev [ 1064.049158][T27358] random: crng reseeded on system resumption [ 1069.711919][ T5922] usb 6-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-ec168.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1069.728107][ T5922] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -110 [ 1069.743021][ T5922] usb 6-1: USB disconnect, device number 108 [ 1202.833851][ T5900] kworker/0:4 (5900) used greatest stack depth: 16312 bytes left [ 1216.912885][ T31] INFO: task kworker/1:8:5942 blocked for more than 143 seconds. [ 1216.920779][ T31] Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 [ 1216.927972][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1216.936768][ T31] task:kworker/1:8 state:D stack:20728 pid:5942 tgid:5942 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1216.948933][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 1216.955679][ T31] Call Trace: [ 1216.958972][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1216.961919][ T31] __schedule+0x16f5/0x4d00 [ 1216.966556][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1216.971979][ T31] ? schedule+0x165/0x360 [ 1216.976743][ T31] ? __pfx___schedule+0x10/0x10 [ 1216.981643][ T31] ? schedule+0x91/0x360 [ 1216.986039][ T31] schedule+0x165/0x360 [ 1216.990226][ T31] schedule_preempt_disabled+0x13/0x30 [ 1216.995775][ T31] __mutex_lock+0x724/0xe80 [ 1217.000297][ T31] ? look_up_lock_class+0x74/0x170 [ 1217.005479][ T31] ? __mutex_lock+0x51b/0xe80 [ 1217.010177][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 1217.016523][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1217.021570][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1217.027345][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1217.058379][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 1217.068806][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1217.075040][ T31] process_scheduled_works+0xade/0x17b0 [ 1217.080640][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1217.094768][ T31] worker_thread+0x8a0/0xda0 [ 1217.099408][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1217.109481][ T31] ? __kthread_parkme+0x7b/0x200 [ 1217.115614][ T31] kthread+0x711/0x8a0 [ 1217.119705][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1217.125113][ T31] ? __pfx_kthread+0x10/0x10 [ 1217.129811][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1217.135098][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1217.140314][ T31] ? __pfx_kthread+0x10/0x10 [ 1217.144967][ T31] ret_from_fork+0x3fc/0x770 [ 1217.149575][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1217.154780][ T31] ? __switch_to_asm+0x39/0x70 [ 1217.159555][ T31] ? __switch_to_asm+0x33/0x70 [ 1217.164377][ T31] ? __pfx_kthread+0x10/0x10 [ 1217.168980][ T31] ret_from_fork_asm+0x1a/0x30 [ 1217.173833][ T31] [ 1217.176917][ T31] INFO: task syz.8.6121:27230 blocked for more than 143 seconds. [ 1217.184677][ T31] Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 [ 1217.191782][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1217.207006][ T31] task:syz.8.6121 state:D stack:25448 pid:27230 tgid:27229 ppid:22706 task_flags:0x400140 flags:0x00004006 [ 1217.219573][ T31] Call Trace: [ 1217.223501][ T31] [ 1217.226454][ T31] __schedule+0x16f5/0x4d00 [ 1217.230981][ T31] ? __lock_acquire+0xab9/0xd20 [ 1217.235874][ T31] ? schedule+0x165/0x360 [ 1217.240228][ T31] ? __pfx___schedule+0x10/0x10 [ 1217.245141][ T31] ? schedule+0x91/0x360 [ 1217.249399][ T31] schedule+0x165/0x360 [ 1217.253577][ T31] schedule_preempt_disabled+0x13/0x30 [ 1217.259051][ T31] __mutex_lock+0x724/0xe80 [ 1217.263577][ T31] ? __lock_acquire+0xab9/0xd20 [ 1217.268450][ T31] ? __mutex_lock+0x51b/0xe80 [ 1217.273236][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 1217.278540][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1217.283618][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1217.288830][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1217.294749][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1217.301115][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1217.306908][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 1217.312029][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 1217.317814][ T31] rfkill_set_block+0x1cf/0x440 [ 1217.322714][ T31] rfkill_fop_write+0x44b/0x570 [ 1217.327575][ T31] ? common_file_perm+0x199/0x200 [ 1217.333588][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1217.338980][ T31] ? security_file_permission+0x70/0x290 [ 1217.345534][ T31] ? rw_verify_area+0x258/0x650 [ 1217.350397][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1217.355802][ T31] vfs_write+0x27b/0xa90 [ 1217.360111][ T31] ? __pfx_vfs_write+0x10/0x10 [ 1217.364904][ T31] ? __fget_files+0x2a/0x420 [ 1217.369508][ T31] ? __fget_files+0x2a/0x420 [ 1217.374232][ T31] ? __fget_files+0x3a0/0x420 [ 1217.378924][ T31] ? __fget_files+0x2a/0x420 [ 1217.383573][ T31] ksys_write+0x145/0x250 [ 1217.387913][ T31] ? __pfx_ksys_write+0x10/0x10 [ 1217.392806][ T31] ? rcu_is_watching+0x15/0xb0 [ 1217.397579][ T31] ? do_syscall_64+0xbe/0x3b0 [ 1217.402244][ T31] do_syscall_64+0xfa/0x3b0 [ 1217.406771][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1217.411982][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.418066][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1217.422791][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.428690][ T31] RIP: 0033:0x7fce1b38e929 [ 1217.433144][ T31] RSP: 002b:00007fce1c277038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1217.441572][ T31] RAX: ffffffffffffffda RBX: 00007fce1b5b5fa0 RCX: 00007fce1b38e929 [ 1217.449609][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000006 [ 1217.457650][ T31] RBP: 00007fce1b410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1217.465733][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1217.473845][ T31] R13: 0000000000000000 R14: 00007fce1b5b5fa0 R15: 00007ffd5eba38e8 [ 1217.481845][ T31] [ 1217.484913][ T31] INFO: task syz.6.6122:27231 blocked for more than 143 seconds. [ 1217.492679][ T31] Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 [ 1217.499789][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1217.508493][ T31] task:syz.6.6122 state:D stack:26952 pid:27231 tgid:27231 ppid:20176 task_flags:0x400040 flags:0x00004006 [ 1217.520442][ T31] Call Trace: [ 1217.523749][ T31] [ 1217.526685][ T31] __schedule+0x16f5/0x4d00 [ 1217.531184][ T31] ? __lock_acquire+0xab9/0xd20 [ 1217.536075][ T31] ? schedule+0x165/0x360 [ 1217.540419][ T31] ? __pfx___schedule+0x10/0x10 [ 1217.545557][ T31] ? schedule+0x91/0x360 [ 1217.549829][ T31] schedule+0x165/0x360 [ 1217.554250][ T31] schedule_preempt_disabled+0x13/0x30 [ 1217.559728][ T31] __mutex_lock+0x724/0xe80 [ 1217.564262][ T31] ? kobject_put+0x43f/0x480 [ 1217.568857][ T31] ? __mutex_lock+0x51b/0xe80 [ 1217.573579][ T31] ? rfkill_unregister+0xc8/0x220 [ 1217.578624][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1217.583687][ T31] ? __pfx_device_del+0x10/0x10 [ 1217.588569][ T31] rfkill_unregister+0xc8/0x220 [ 1217.593480][ T31] nfc_unregister_device+0x96/0x2a0 [ 1217.598697][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 1217.604477][ T31] virtual_ncidev_close+0x56/0x90 [ 1217.609507][ T31] __fput+0x449/0xa70 [ 1217.613539][ T31] task_work_run+0x1d4/0x260 [ 1217.618142][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1217.623299][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1217.628773][ T31] exit_to_user_mode_loop+0xec/0x110 [ 1217.634103][ T31] do_syscall_64+0x2bd/0x3b0 [ 1217.638699][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.644815][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1217.650977][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1217.655674][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.661576][ T31] RIP: 0033:0x7f7f6af8e929 [ 1217.666010][ T31] RSP: 002b:00007ffc3dbf1378 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1217.674474][ T31] RAX: 0000000000000000 RBX: 0000000000101761 RCX: 00007f7f6af8e929 [ 1217.682490][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1217.690467][ T31] RBP: 00007f7f6b1b7ba0 R08: 0000000000000001 R09: 0000001e3dbf166f [ 1217.698491][ T31] R10: 00007f7f6ae00000 R11: 0000000000000246 R12: 00007f7f6b1b5fac [ 1217.706527][ T31] R13: 00007f7f6b1b5fa0 R14: ffffffffffffffff R15: 00007ffc3dbf1490 [ 1217.714571][ T31] [ 1217.717602][ T31] INFO: task syz.5.6150:27360 blocked for more than 144 seconds. [ 1217.725403][ T31] Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 [ 1217.732547][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1217.741219][ T31] task:syz.5.6150 state:D stack:27736 pid:27360 tgid:27359 ppid:20989 task_flags:0x400040 flags:0x00004004 [ 1217.753212][ T31] Call Trace: [ 1217.756506][ T31] [ 1217.759439][ T31] __schedule+0x16f5/0x4d00 [ 1217.763979][ T31] ? __lock_acquire+0xab9/0xd20 [ 1217.768846][ T31] ? schedule+0x165/0x360 [ 1217.773218][ T31] ? __pfx___schedule+0x10/0x10 [ 1217.778107][ T31] ? schedule+0x91/0x360 [ 1217.782343][ T31] schedule+0x165/0x360 [ 1217.786681][ T31] schedule_preempt_disabled+0x13/0x30 [ 1217.792248][ T31] __mutex_lock+0x724/0xe80 [ 1217.796803][ T31] ? __mutex_lock+0x51b/0xe80 [ 1217.801489][ T31] ? rfkill_fop_open+0x12d/0x820 [ 1217.806445][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1217.811479][ T31] ? __raw_spin_lock_init+0x45/0x100 [ 1217.816787][ T31] ? __init_waitqueue_head+0xa9/0x150 [ 1217.822173][ T31] rfkill_fop_open+0x12d/0x820 [ 1217.826989][ T31] ? __pfx_rfkill_fop_open+0x10/0x10 [ 1217.832287][ T31] misc_open+0x2b9/0x330 [ 1217.836565][ T31] chrdev_open+0x4cc/0x5e0 [ 1217.840999][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1217.845991][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1217.850948][ T31] do_dentry_open+0xdf3/0x1970 [ 1217.855901][ T31] vfs_open+0x3b/0x340 [ 1217.860092][ T31] ? path_openat+0x2ecd/0x3830 [ 1217.864943][ T31] path_openat+0x2ee5/0x3830 [ 1217.869549][ T31] ? arch_stack_walk+0xfc/0x150 [ 1217.874503][ T31] ? __pfx_path_openat+0x10/0x10 [ 1217.879450][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.885553][ T31] do_filp_open+0x1fa/0x410 [ 1217.890070][ T31] ? __lock_acquire+0xab9/0xd20 [ 1217.894968][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1217.900011][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1217.904895][ T31] ? alloc_fd+0x64c/0x6c0 [ 1217.909242][ T31] do_sys_openat2+0x121/0x1c0 [ 1217.913954][ T31] ? __se_sys_futex+0x36f/0x400 [ 1217.918816][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1217.924040][ T31] ? __pfx___se_sys_futex+0x10/0x10 [ 1217.929251][ T31] ? fput+0xa0/0xd0 [ 1217.933110][ T31] __x64_sys_openat+0x138/0x170 [ 1217.937992][ T31] do_syscall_64+0xfa/0x3b0 [ 1217.942528][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1217.947739][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.953855][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1217.958539][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1217.964491][ T31] RIP: 0033:0x7f7ff018e929 [ 1217.968914][ T31] RSP: 002b:00007f7ff1003038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1217.977373][ T31] RAX: ffffffffffffffda RBX: 00007f7ff03b5fa0 RCX: 00007f7ff018e929 [ 1217.985380][ T31] RDX: 0000000000000000 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 1217.993394][ T31] RBP: 00007f7ff0210b39 R08: 0000000000000000 R09: 0000000000000000 [ 1218.001367][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1218.009362][ T31] R13: 0000000000000000 R14: 00007f7ff03b5fa0 R15: 00007fff7dad9008 [ 1218.017366][ T31] [ 1218.020385][ T31] INFO: task syz.7.6152:27366 blocked for more than 144 seconds. [ 1218.028206][ T31] Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 [ 1218.035328][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1218.044024][ T31] task:syz.7.6152 state:D stack:27560 pid:27366 tgid:27365 ppid:17921 task_flags:0x400140 flags:0x00004004 [ 1218.055984][ T31] Call Trace: [ 1218.059257][ T31] [ 1218.062205][ T31] __schedule+0x16f5/0x4d00 [ 1218.066744][ T31] ? __kasan_slab_free+0x62/0x70 [ 1218.071689][ T31] ? security_file_open+0xb1/0x270 [ 1218.076829][ T31] ? do_dentry_open+0x35e/0x1970 [ 1218.081788][ T31] ? __lock_acquire+0xab9/0xd20 [ 1218.086672][ T31] ? schedule+0x165/0x360 [ 1218.091017][ T31] ? __pfx___schedule+0x10/0x10 [ 1218.095903][ T31] ? schedule+0x91/0x360 [ 1218.100161][ T31] schedule+0x165/0x360 [ 1218.104404][ T31] schedule_preempt_disabled+0x13/0x30 [ 1218.109884][ T31] __mutex_lock+0x724/0xe80 [ 1218.114431][ T31] ? __mutex_lock+0x51b/0xe80 [ 1218.119125][ T31] ? misc_open+0x51/0x330 [ 1218.123520][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1218.128560][ T31] misc_open+0x51/0x330 [ 1218.132751][ T31] chrdev_open+0x4cc/0x5e0 [ 1218.137183][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1218.142114][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1218.147079][ T31] do_dentry_open+0xdf3/0x1970 [ 1218.151873][ T31] vfs_open+0x3b/0x340 [ 1218.155990][ T31] ? path_openat+0x2ecd/0x3830 [ 1218.160764][ T31] path_openat+0x2ee5/0x3830 [ 1218.165385][ T31] ? arch_stack_walk+0xfc/0x150 [ 1218.170266][ T31] ? __pfx_path_openat+0x10/0x10 [ 1218.175237][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.181323][ T31] do_filp_open+0x1fa/0x410 [ 1218.185852][ T31] ? __lock_acquire+0xab9/0xd20 [ 1218.190718][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1218.195800][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1218.200664][ T31] ? alloc_fd+0x64c/0x6c0 [ 1218.205032][ T31] do_sys_openat2+0x121/0x1c0 [ 1218.209725][ T31] ? __se_sys_futex+0x36f/0x400 [ 1218.214607][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1218.219825][ T31] ? rcu_is_watching+0x15/0xb0 [ 1218.224620][ T31] __x64_sys_openat+0x138/0x170 [ 1218.229494][ T31] do_syscall_64+0xfa/0x3b0 [ 1218.234042][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1218.239261][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.245353][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1218.250017][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.255931][ T31] RIP: 0033:0x7f9cb438e929 [ 1218.260352][ T31] RSP: 002b:00007f9cb5127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1218.268798][ T31] RAX: ffffffffffffffda RBX: 00007f9cb45b5fa0 RCX: 00007f9cb438e929 [ 1218.276793][ T31] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1218.284784][ T31] RBP: 00007f9cb4410b39 R08: 0000000000000000 R09: 0000000000000000 [ 1218.292798][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1218.300770][ T31] R13: 0000000000000000 R14: 00007f9cb45b5fa0 R15: 00007fff385d8ad8 [ 1218.308772][ T31] [ 1218.311808][ T31] INFO: task syz-executor:27372 blocked for more than 144 seconds. [ 1218.319727][ T31] Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 [ 1218.326858][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1218.335548][ T31] task:syz-executor state:D stack:28040 pid:27372 tgid:27372 ppid:1 task_flags:0x400040 flags:0x00004000 [ 1218.347509][ T31] Call Trace: [ 1218.350797][ T31] [ 1218.353781][ T31] __schedule+0x16f5/0x4d00 [ 1218.358314][ T31] ? __kasan_slab_free+0x62/0x70 [ 1218.363305][ T31] ? security_file_open+0xb1/0x270 [ 1218.368423][ T31] ? do_dentry_open+0x35e/0x1970 [ 1218.373420][ T31] ? __lock_acquire+0xab9/0xd20 [ 1218.378385][ T31] ? schedule+0x165/0x360 [ 1218.382781][ T31] ? __pfx___schedule+0x10/0x10 [ 1218.387650][ T31] ? schedule+0x91/0x360 [ 1218.391883][ T31] schedule+0x165/0x360 [ 1218.396076][ T31] schedule_preempt_disabled+0x13/0x30 [ 1218.401562][ T31] __mutex_lock+0x724/0xe80 [ 1218.406082][ T31] ? __mutex_lock+0x51b/0xe80 [ 1218.410774][ T31] ? misc_open+0x51/0x330 [ 1218.415146][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1218.420188][ T31] misc_open+0x51/0x330 [ 1218.424381][ T31] chrdev_open+0x4cc/0x5e0 [ 1218.428812][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1218.433791][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1218.438741][ T31] do_dentry_open+0xdf3/0x1970 [ 1218.443579][ T31] vfs_open+0x3b/0x340 [ 1218.447659][ T31] ? path_openat+0x2ecd/0x3830 [ 1218.452409][ T31] path_openat+0x2ee5/0x3830 [ 1218.457032][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 1218.462548][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1218.467872][ T31] ? __pfx_path_openat+0x10/0x10 [ 1218.472855][ T31] ? __pfx___up_read+0x10/0x10 [ 1218.477635][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 1218.482998][ T31] do_filp_open+0x1fa/0x410 [ 1218.487507][ T31] ? __lock_acquire+0xab9/0xd20 [ 1218.492349][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1218.497409][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1218.502272][ T31] ? alloc_fd+0x64c/0x6c0 [ 1218.506713][ T31] do_sys_openat2+0x121/0x1c0 [ 1218.511411][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1218.516823][ T31] ? fd_install+0x97/0x540 [ 1218.521257][ T31] ? fd_install+0x30d/0x540 [ 1218.525789][ T31] __x64_sys_openat+0x138/0x170 [ 1218.530660][ T31] do_syscall_64+0xfa/0x3b0 [ 1218.535179][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1218.540405][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.546491][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1218.551178][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.557088][ T31] RIP: 0033:0x7f74de78d211 [ 1218.561514][ T31] RSP: 002b:00007ffd8d714d80 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1218.569961][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f74de78d211 [ 1218.577959][ T31] RDX: 0000000000000002 RSI: 00007f74de811506 RDI: 00000000ffffff9c [ 1218.586199][ T31] RBP: 00007f74de811506 R08: 0000000000000000 R09: 00007f74df4ed6c0 [ 1218.594502][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1218.602645][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1218.610786][ T31] [ 1218.614001][ T31] INFO: task syz-executor:27373 blocked for more than 145 seconds. [ 1218.621905][ T31] Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 [ 1218.629679][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1218.638523][ T31] task:syz-executor state:D stack:28040 pid:27373 tgid:27373 ppid:1 task_flags:0x400040 flags:0x00004000 [ 1218.650601][ T31] Call Trace: [ 1218.654286][ T31] [ 1218.657287][ T31] __schedule+0x16f5/0x4d00 [ 1218.661795][ T31] ? __kasan_slab_free+0x62/0x70 [ 1218.666909][ T31] ? security_file_open+0xb1/0x270 [ 1218.672039][ T31] ? do_dentry_open+0x35e/0x1970 [ 1218.677145][ T31] ? __lock_acquire+0xab9/0xd20 [ 1218.682031][ T31] ? schedule+0x165/0x360 [ 1218.686480][ T31] ? __pfx___schedule+0x10/0x10 [ 1218.691356][ T31] ? schedule+0x91/0x360 [ 1218.695736][ T31] schedule+0x165/0x360 [ 1218.699911][ T31] schedule_preempt_disabled+0x13/0x30 [ 1218.705423][ T31] __mutex_lock+0x724/0xe80 [ 1218.709935][ T31] ? __mutex_lock+0x51b/0xe80 [ 1218.714738][ T31] ? misc_open+0x51/0x330 [ 1218.719088][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1218.724227][ T31] misc_open+0x51/0x330 [ 1218.728419][ T31] chrdev_open+0x4cc/0x5e0 [ 1218.732996][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1218.737955][ T31] ? __pfx_chrdev_open+0x10/0x10 [ 1218.742975][ T31] do_dentry_open+0xdf3/0x1970 [ 1218.747761][ T31] vfs_open+0x3b/0x340 [ 1218.751823][ T31] ? path_openat+0x2ecd/0x3830 [ 1218.756755][ T31] path_openat+0x2ee5/0x3830 [ 1218.761378][ T31] ? __pfx_css_rstat_updated+0x10/0x10 [ 1218.767236][ T31] ? count_memcg_event_mm+0x21/0x260 [ 1218.772685][ T31] ? __pfx_path_openat+0x10/0x10 [ 1218.777643][ T31] ? __pfx___up_read+0x10/0x10 [ 1218.782401][ T31] ? do_user_addr_fault+0xbc1/0x1390 [ 1218.787747][ T31] do_filp_open+0x1fa/0x410 [ 1218.792258][ T31] ? __lock_acquire+0xab9/0xd20 [ 1218.797238][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1218.802313][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1218.807205][ T31] ? alloc_fd+0x64c/0x6c0 [ 1218.811558][ T31] do_sys_openat2+0x121/0x1c0 [ 1218.816466][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1218.821689][ T31] ? fd_install+0x97/0x540 [ 1218.826642][ T31] ? fd_install+0x30d/0x540 [ 1218.831178][ T31] __x64_sys_openat+0x138/0x170 [ 1218.836256][ T31] do_syscall_64+0xfa/0x3b0 [ 1218.840840][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1218.846192][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.852276][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1218.857118][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.863086][ T31] RIP: 0033:0x7f4b8f18d211 [ 1218.867520][ T31] RSP: 002b:00007ffe80d45ca0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1218.876395][ T31] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f4b8f18d211 [ 1218.884450][ T31] RDX: 0000000000000002 RSI: 00007f4b8f211506 RDI: 00000000ffffff9c [ 1218.892413][ T31] RBP: 00007f4b8f211506 R08: 0000000000000000 R09: 00007f4b8feed6c0 [ 1218.900492][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1218.908853][ T31] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 1218.916971][ T31] [ 1218.920037][ T31] [ 1218.920037][ T31] Showing all locks held in the system: [ 1218.928627][ T31] 1 lock held by khungtaskd/31: [ 1218.933570][ T31] #0: ffffffff8e33df20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1218.943537][ T31] 3 locks held by kworker/1:8/5942: [ 1218.948739][ T31] #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1218.959762][ T31] #1: ffffc9000465fbc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1218.973494][ T31] #2: ffffffff8fa05b68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 1218.985298][ T31] 2 locks held by getty/23531: [ 1218.990077][ T31] #0: ffff8880302540a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1218.999974][ T31] #1: ffffc900055852f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1219.010160][ T31] 2 locks held by syz.8.6121/27230: [ 1219.015690][ T31] #0: ffffffff8fa05b68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 1219.025923][ T31] #1: ffff88807c5d7100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 1219.036693][ T31] 2 locks held by syz.6.6122/27231: [ 1219.041902][ T31] #0: ffff88807c5d7100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 1219.051678][ T31] #1: ffffffff8fa05b68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 1219.061883][ T31] 2 locks held by syz.5.6150/27360: [ 1219.067227][ T31] #0: ffffffff8ebd7da8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1219.075733][ T31] #1: ffffffff8fa05b68 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 1219.085782][ T31] 1 lock held by syz.7.6152/27366: [ 1219.090894][ T31] #0: ffffffff8ebd7da8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1219.099618][ T31] 1 lock held by syz-executor/27372: [ 1219.104953][ T31] #0: ffffffff8ebd7da8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1219.113585][ T31] 1 lock held by syz-executor/27373: [ 1219.118880][ T31] #0: ffffffff8ebd7da8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1219.127474][ T31] 1 lock held by syz-executor/27388: [ 1219.132802][ T31] #0: ffffffff8ebd7da8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1219.141281][ T31] 1 lock held by syz-executor/27390: [ 1219.146620][ T31] #0: ffffffff8ebd7da8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1219.155162][ T31] 1 lock held by syz-executor/27403: [ 1219.160451][ T31] #0: ffffffff8ebd7da8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1219.169071][ T31] 1 lock held by syz-executor/27404: [ 1219.174742][ T31] #0: ffffffff8ebd7da8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1219.183273][ T31] 1 lock held by syz-executor/27415: [ 1219.188556][ T31] #0: ffffffff8ebd7da8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1219.197071][ T31] 1 lock held by syz-executor/27418: [ 1219.202357][ T31] #0: ffffffff8ebd7da8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1219.210959][ T31] 1 lock held by syz-executor/27434: [ 1219.216271][ T31] #0: ffffffff8ebd7da8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1219.224742][ T31] 1 lock held by syz-executor/27435: [ 1219.230021][ T31] #0: ffffffff8ebd7da8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1219.238494][ T31] 1 lock held by syz-executor/27442: [ 1219.243819][ T31] #0: ffffffff8ebd7da8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1219.252296][ T31] 1 lock held by syz-executor/27445: [ 1219.257618][ T31] #0: ffffffff8ebd7da8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 1219.266162][ T31] 1 lock held by dhcpcd/27454: [ 1219.270919][ T31] #0: ffff88804c1bb808 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1219.281172][ T31] [ 1219.283538][ T31] ============================================= [ 1219.283538][ T31] [ 1219.291966][ T31] NMI backtrace for cpu 1 [ 1219.291982][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1219.292001][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1219.292012][ T31] Call Trace: [ 1219.292019][ T31] [ 1219.292026][ T31] dump_stack_lvl+0x189/0x250 [ 1219.292048][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1219.292071][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1219.292090][ T31] ? __pfx__printk+0x10/0x10 [ 1219.292117][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1219.292140][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1219.292159][ T31] ? _printk+0xcf/0x120 [ 1219.292180][ T31] ? __pfx__printk+0x10/0x10 [ 1219.292199][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1219.292226][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1219.292249][ T31] watchdog+0xfee/0x1030 [ 1219.292273][ T31] ? watchdog+0x1de/0x1030 [ 1219.292301][ T31] kthread+0x711/0x8a0 [ 1219.292329][ T31] ? __pfx_watchdog+0x10/0x10 [ 1219.292350][ T31] ? __pfx_kthread+0x10/0x10 [ 1219.292372][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1219.292394][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1219.292416][ T31] ? __pfx_kthread+0x10/0x10 [ 1219.292441][ T31] ret_from_fork+0x3fc/0x770 [ 1219.292461][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1219.292483][ T31] ? __switch_to_asm+0x39/0x70 [ 1219.292504][ T31] ? __switch_to_asm+0x33/0x70 [ 1219.292525][ T31] ? __pfx_kthread+0x10/0x10 [ 1219.292546][ T31] ret_from_fork_asm+0x1a/0x30 [ 1219.292577][ T31] [ 1219.442872][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1219.448089][ C0] NMI backtrace for cpu 0 [ 1219.448104][ C0] CPU: 0 UID: 0 PID: 23996 Comm: kworker/u8:14 Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1219.448126][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1219.448139][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 1219.448165][ C0] RIP: 0010:mark_lock+0x2d/0x190 [ 1219.448184][ C0] Code: 41 56 41 55 41 54 53 8b 46 20 89 c1 81 e1 00 00 03 00 83 f9 01 bb 09 00 00 00 83 db 00 83 fa 08 0f 45 da bd 01 00 00 00 89 d9 e5 25 ff 1f 00 00 48 0f a3 05 c4 ba 2c 12 73 10 48 69 c0 c8 00 [ 1219.448199][ C0] RSP: 0018:ffffc9000c54f2d0 EFLAGS: 00000046 [ 1219.448213][ C0] RAX: 0000000000020007 RBX: 0000000000000009 RCX: 0000000000000009 [ 1219.448225][ C0] RDX: 0000000000000008 RSI: ffff88804aa1a990 RDI: ffff88804aa19e00 [ 1219.448238][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff8172ec65 [ 1219.448250][ C0] R10: ffffc9000c54f558 R11: ffffffff81acc440 R12: 0000000000000003 [ 1219.448263][ C0] R13: 0000000000000001 R14: ffff88804aa1a990 R15: ffff88804aa1a9b0 [ 1219.448276][ C0] FS: 0000000000000000(0000) GS:ffff8881259ed000(0000) knlGS:0000000000000000 [ 1219.448291][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1219.448303][ C0] CR2: 00007ffe535e2610 CR3: 000000000e138000 CR4: 00000000003526f0 [ 1219.448318][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000004144 [ 1219.448329][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1219.448340][ C0] Call Trace: [ 1219.448347][ C0] [ 1219.448357][ C0] __lock_acquire+0x6a8/0xd20 [ 1219.448385][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1219.448403][ C0] lock_acquire+0x120/0x360 [ 1219.448427][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1219.448448][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1219.448466][ C0] ? nsim_dev_trap_report_work+0x29a/0xb80 [ 1219.448486][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1219.448504][ C0] unwind_next_frame+0xc2/0x2390 [ 1219.448521][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1219.448541][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1219.448559][ C0] ? __alloc_skb+0x142/0x2d0 [ 1219.448580][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1219.448602][ C0] arch_stack_walk+0x11c/0x150 [ 1219.448624][ C0] ? nsim_dev_trap_report_work+0x29a/0xb80 [ 1219.448646][ C0] stack_trace_save+0x9c/0xe0 [ 1219.448665][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1219.448687][ C0] ? rcu_is_watching+0x15/0xb0 [ 1219.448705][ C0] kasan_save_track+0x3e/0x80 [ 1219.448721][ C0] ? kasan_save_track+0x3e/0x80 [ 1219.448735][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 1219.448751][ C0] ? __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 1219.448771][ C0] ? kmalloc_reserve+0x136/0x290 [ 1219.448790][ C0] ? __alloc_skb+0x142/0x2d0 [ 1219.448808][ C0] ? nsim_dev_trap_report_work+0x29a/0xb80 [ 1219.448846][ C0] __kasan_kmalloc+0x93/0xb0 [ 1219.448864][ C0] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 1219.448882][ C0] ? __alloc_skb+0x142/0x2d0 [ 1219.448902][ C0] ? __alloc_skb+0x142/0x2d0 [ 1219.448921][ C0] kmalloc_reserve+0x136/0x290 [ 1219.448940][ C0] ? gfs2_alloc_blocks+0xac0/0x2080 [ 1219.448961][ C0] __alloc_skb+0x142/0x2d0 [ 1219.448981][ C0] nsim_dev_trap_report_work+0x29a/0xb80 [ 1219.449008][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1219.449026][ C0] process_scheduled_works+0xade/0x17b0 [ 1219.449053][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1219.449081][ C0] worker_thread+0x8a0/0xda0 [ 1219.449108][ C0] kthread+0x711/0x8a0 [ 1219.449129][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1219.449146][ C0] ? __pfx_kthread+0x10/0x10 [ 1219.449168][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1219.449190][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1219.449214][ C0] ? __pfx_kthread+0x10/0x10 [ 1219.449235][ C0] ret_from_fork+0x3fc/0x770 [ 1219.449252][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1219.449270][ C0] ? __switch_to_asm+0x39/0x70 [ 1219.449291][ C0] ? __switch_to_asm+0x33/0x70 [ 1219.449310][ C0] ? __pfx_kthread+0x10/0x10 [ 1219.449331][ C0] ret_from_fork_asm+0x1a/0x30 [ 1219.449358][ C0] [ 1219.845853][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1219.852725][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-next-20250624-syzkaller #0 PREEMPT(full) [ 1219.864008][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1219.874070][ T31] Call Trace: [ 1219.877423][ T31] [ 1219.880355][ T31] dump_stack_lvl+0x99/0x250 [ 1219.884946][ T31] ? __asan_memcpy+0x40/0x70 [ 1219.889542][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1219.894740][ T31] ? __pfx__printk+0x10/0x10 [ 1219.899338][ T31] panic+0x2db/0x790 [ 1219.903231][ T31] ? __pfx_panic+0x10/0x10 [ 1219.907638][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1219.913443][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1219.918814][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1219.924967][ T31] watchdog+0x102d/0x1030 [ 1219.929296][ T31] ? watchdog+0x1de/0x1030 [ 1219.933715][ T31] kthread+0x711/0x8a0 [ 1219.937798][ T31] ? __pfx_watchdog+0x10/0x10 [ 1219.942487][ T31] ? __pfx_kthread+0x10/0x10 [ 1219.947086][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1219.952288][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1219.957487][ T31] ? __pfx_kthread+0x10/0x10 [ 1219.962079][ T31] ret_from_fork+0x3fc/0x770 [ 1219.966674][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1219.971889][ T31] ? __switch_to_asm+0x39/0x70 [ 1219.976663][ T31] ? __switch_to_asm+0x33/0x70 [ 1219.981427][ T31] ? __pfx_kthread+0x10/0x10 [ 1219.986019][ T31] ret_from_fork_asm+0x1a/0x30 [ 1219.990792][ T31] [ 1219.994044][ T31] Kernel Offset: disabled [ 1219.998357][ T31] Rebooting in 86400 seconds..