last executing test programs: 20m35.994188916s ago: executing program 1 (id=9): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000140)={0x50, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}]}}) unshare(0x22020600) r2 = socket$tipc(0x1e, 0x2, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='system.posix_acl_access\x00') r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) ioctl$sock_netrom_SIOCADDRT(r4, 0x890b, &(0x7f0000000140)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x8, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x41d8, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast]}) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000080007000d000000", 0x24) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r6], 0xc4}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r3, 0x2000) 20m35.625673544s ago: executing program 1 (id=11): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r1 = open(0x0, 0x80242, 0x1df2a23c5997fa5f) sendfile(r1, r1, 0x0, 0x7f03) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x81, &(0x7f0000001280)=""/4092, &(0x7f00000000c0)=0xffc) sendfile(r0, r0, 0x0, 0x7ffff000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 20m35.226386971s ago: executing program 1 (id=15): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) munmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000024000103000000000000000400ae0000000000", @ANYRES8=r0, @ANYRES8=0x0], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4001) r2 = gettid() capset(&(0x7f0000000280)={0x19980330, r2}, 0x0) recvmmsg(r1, 0x0, 0x0, 0x40000020, 0x0) 20m35.001000748s ago: executing program 1 (id=17): r0 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x1e, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000140)='./file0\x00', 0x71) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x0, 0x8, 0x0, "a386bcb957f6ee650a88e81a5cb3b0852da5b6b13aa9aed3e923ad05392be7124f3883a973ec229f5fabf4bff94f46103f6fb8ed729eed0700000000000000de12709700"}, 0xd8) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r2, 0x4068aea3, &(0x7f0000000000)={0x79}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000100)=0x4) writev(0xffffffffffffffff, &(0x7f0000000900)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f00000018c0)}], 0x5) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x68, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000001c0)=0x1fff) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='bfs\x00', 0x208003, 0x0) 20m34.711040692s ago: executing program 1 (id=19): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r1, @ANYBLOB="3f9d00000000fedbdf25170000008c003080040001803c000180050002000300000005000200020000000800010002000000200003800c0004000200aaaaaaaaaaaa06000100ffff00000600010001000000050002000500000014000400de067486d928a27e16fa9e9bf01d2cf02c000180080001000000000020000380080002000300000006000100010000000c0004000202aaaaaaaaaaaa08000300", @ANYRES32=r2], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r4 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r5 = getpgid(r4) setpgid(0x0, r5) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000180)=@sr0, &(0x7f0000001440)='./file1\x00', &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) 20m33.059568337s ago: executing program 1 (id=21): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e34708", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c40)='\\', 0x1}], 0x1}}], 0x2, 0x4004894) sendmmsg$inet(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000f00)="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", 0x3e4}], 0x1}}], 0x1, 0x80) 20m22.451022417s ago: executing program 2 (id=67): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002540)=ANY=[@ANYBLOB='X\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="07000000ff"], 0x58) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x200002, 0x0) 20m22.375614691s ago: executing program 2 (id=69): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) mbind(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x2, &(0x7f0000000000)=0xa0000100000001, 0x4, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001280)=ANY=[@ANYBLOB="3a2f080000030300010000170000006400000211907800000000ac1414bb4e234e2200089078"], 0x2a) 20m22.178101863s ago: executing program 2 (id=70): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x2d, 0x0, 0x1, 0xfffffffc}, {0x4}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000000)={0xd, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r2, 0x3b86, &(0x7f00000002c0)={0x18, r3}) sendto$inet(r1, 0x0, 0x0, 0x28040ffd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x8c0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x20, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x193a, 0x4) recvmmsg(r1, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000100)=""/47, 0x2f}, {&(0x7f00000002c0)=""/57, 0x39}, {0x0}], 0x3, &(0x7f0000005240)=""/221, 0xdd}, 0x4}], 0x1, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000080)) 20m21.300948538s ago: executing program 2 (id=71): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r1, @ANYBLOB="3f9d00000000fedbdf25170000008c003080040001803c000180050002000300000005000200020000000800010002000000200003800c0004000200aaaaaaaaaaaa06000100ffff00000600010001000000050002000500000014000400de067486d928a27e16fa9e9bf01d2cf02c000180080001000000000020000380080002000300000006000100010000000c0004000202aaaaaaaaaaaa08000300", @ANYRES32=r2], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r4 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r5 = getpgid(r4) setpgid(0x0, r5) mount(&(0x7f0000000180)=@sr0, &(0x7f0000001440)='./file1\x00', &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) 20m20.413950423s ago: executing program 2 (id=73): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000140)={0x50, 0x0, 0x0, 0x0, {}, {{}, 0x0, 0x0, [{}, {}]}}) unshare(0x22020600) r2 = socket$tipc(0x1e, 0x2, 0x0) fremovexattr(r2, &(0x7f00000000c0)=@known='system.posix_acl_access\x00') openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}}}) ioctl$sock_netrom_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={'rose', 0x0}, 0x8, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x41d8, 0x1, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @bcast]}) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000100)="240000001e005f1814fffffffffffff807000000b800000000000000080007000d000000", 0x24) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r5], 0xc4}}, 0x0) 20m20.377123617s ago: executing program 32 (id=10): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x24}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r7 = dup(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000) r8 = syz_open_dev$vbi(0x0, 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r8, 0xc0745645, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 20m20.03683367s ago: executing program 2 (id=75): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) syz_clone(0x2211000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="d8b07da8a079e98f7663074742d57c4d12f7ca8dabf267b0617ef36c3f0682b946f2270ab4edbe20facf6f1d6052d5fe92744ca46439ef57826bb82875d02c450a2ae26f") r0 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x602, 0x0, 0x0, {0x2}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14}}, 0x50}}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f00000000c0)={0x14}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e23, @private=0xa010101}, 0x10) connect$inet(r8, &(0x7f0000000100), 0x10) ioctl$KVM_RUN(r7, 0xae80, 0x0) 20m19.64102363s ago: executing program 33 (id=75): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) syz_clone(0x2211000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="d8b07da8a079e98f7663074742d57c4d12f7ca8dabf267b0617ef36c3f0682b946f2270ab4edbe20facf6f1d6052d5fe92744ca46439ef57826bb82875d02c450a2ae26f") r0 = syz_open_dev$sndpcmp(&(0x7f0000000280), 0x0, 0x0) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r1 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850a9d7", 0x6, 0xfffffffffffffffe) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x602, 0x0, 0x0, {0x2}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}}], {0x14}}, 0x50}}, 0x0) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f00000000c0)={0x14}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r8, &(0x7f0000000140)={0x2, 0x4e23, @private=0xa010101}, 0x10) connect$inet(r8, &(0x7f0000000100), 0x10) ioctl$KVM_RUN(r7, 0xae80, 0x0) 20m17.662488596s ago: executing program 34 (id=21): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e34708", 0x6e}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000c40)='\\', 0x1}], 0x1}}], 0x2, 0x4004894) sendmmsg$inet(r0, &(0x7f0000007340)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000f00)="f1bf762b2df497800dcf425815085540a84b34e45a2dd0c3d6959de25e4b4099be1063e1fa1aa0551a8a566a38d445c8402a7de6a415fdc02268a82f7a81246c1d9fd8535d43baacb265ad29f678e05a457003a96a3366bdeb013a8071a7c7121d79215fb3719541d13bcd571cdfd0f947dfc4bf39462818ec015a8cc563478821a523aae22623dcd131f619735980753532d31e06529ec717b0f44ecb205014e379fcccf44f79c6b1ffe1efcc6c6022124d077a367b1b00bc79158a55cb6ba852541a52f84cd61dc7be74d97a5f79ea1d9722c68345ab2e57ac77785d14de0f1c63b1fecae05e09a1e7220f122dbc127d26ca959ad4d4360b6de6661599c2c8dfa01462b1679baa2fa10c1f48db81126af7c6b960441310102ed902635b36f2f209a5062564acd554ab4fc7205500378435c802d64ef48edcd0c92a8c538f490e8ac794fd0d456b9e05781ea508e419bd33fa70cd8df0c041bbdd73a1101ccbb9b58b8d89ce948816dd6ecb61ef15161f1ba4c5dea93adc83f810ae92f1243894aa582464ad805e150f0aca68bbbb2e4fe3d8c2053d8eeccdbbe259dc9a557124492a5e3105ae0b32ae5fc87194ac37455dad4712dd68e9102b26ebb7cdb137a7acb653442c97b5d8fdc76069555375f185b1b1385ef606528aedbbfc75082be35f1bf77ec19dfcd506fe9094e95d78da6ba8b1526f30658e501471b8edbfe9e117c7aee5a3a484fcde922fba28a3960750ab5f52f1dd27841d977e4b5883f1cceabb8478487bfd031e1e5f0896cbf8489cce0280b4cf914ea97445df382b63ce9c82ae56a05699287ca6bbeaf1fa24393203a4366a89388d8e260dc7e9d0d5d8345e2764650dfe8f8414f37cf750c516ed99e5ba59926b1eb3c0cc16a289d42682fd9fdf7eff5566da634983d7ba64621290fd3a616da3c6be3e854c8d27d8ce28363506c0ea41527be5d9d1bdf49be227f2949298c29a0c6d2ed07038a6cab167bd60b8a71f3a25de8242ca88c6f9166c6bf0996c4484b632898cc4b1de741b153093d85b3ac83849a361147deb3d5eb77e21491c88b4adc955c9b1e5fd41f1d7379d01cb36e165703fe0de180fd236e892fe2901a361fd1168e7fa25d0f6eb21a2a3ab290ea4e6f8f611dec443a089efb13fc92477d3aa7a977b74e6a6e85cf99b98e2dfbe717870b987729c4aa98a98311d822bd662060fe3bb55adb9d9c44d95b50cd214b8da99ad6fe849fb3acd9eedbe6c78761e2c6887774eb2e942cebcf4be4a662fe6166e7be02217d90d09ef84d3edd40ddb253004f09d1221c8ef2aa68e0a80cd0ba83fdce38e30a6e50cc99804c3f7802cfd2fee86e9ee88ae506eb57c632620d9777b3890c0854ec5e6562c9b0af383a332368c1534eec05ba36e91d0", 0x3e4}], 0x1}}], 0x1, 0x80) 20m3.81804558s ago: executing program 5 (id=105): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x103}, {{0x0, 0x0, 0x0}, 0x6f92}, {{0x0, 0x0, 0x0}, 0x400003}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000004c0)=""/230, 0xe6}, {&(0x7f0000000640)=""/80, 0x50}, {&(0x7f0000000d80)=""/4102, 0x1006}, {&(0x7f0000004f80)=""/226, 0xe2}, {&(0x7f00000008c0)=""/47, 0x2f}, {&(0x7f0000000b00)=""/213, 0xd5}, {&(0x7f0000000340)=""/202, 0xca}], 0x7}, 0x401}], 0x4, 0x20, 0x0) r1 = fsopen(&(0x7f0000000440)='9p\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000500)=ANY=[@ANYBLOB="01000000000000008300004000000000091c97000000000006b1d507698f21ad59637fa41537f153bc62fec04d6421407f13415572ba3579bb1c2d313b0811fb20c91c27d006e95cc8df35ab242014ea9d37ea58a3f99a38bd5b0dced91c2ec2d3a3ea3cdf0d1e6948a3a34f948ff53ddfefe2827cfea778fd2524d4834fece9e14f1e41e333f66b94fabbb88a472e1fcb5114adb49e0ae9f0c41cc33993f04db0186370e0750798923fafa4bb453dd5244d1c187665c364c9a6f5b8f29a009a34779db615f08461c69ef7b70486e7d67a639615b9b6c1aca02c788b3565e2ab863a18efd4e9e753df8a65cc10e0e00e8d76aeefd084d8b4554bfa80ddf1e1df9211639e385a5e63e60f160f1a29d5a04ebe9747611be9ca709b1ebdf5120ebfb7a73496c5b639ffeda382af1b5eb10eaee58be69a842d"]) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r6 = open(0x0, 0x80242, 0x1df2a23c5997fa5f) sendfile(r6, r6, 0x0, 0x7f03) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f00000000c0)={0x1d, r8}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000800)="d8000000140081044e81f782db44b9040a1d080206000000040000a118000200fe05000000000e1208000f0100810401a80016ea1f00010000005f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5e835913b04e18a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f52eb4edbb57a5025ccca9e00360d8bcc00400040fad95667e00600010000d5e1cace81b341139fe3cd4032e8edb12d1d2eb0c0ed0bfffdccfa5df947e5e0", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x8000) sendmsg$can_bcm(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=ANY=[@ANYBLOB="04000000400800"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="00000000010015325bc900008009000000870000ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18ff0000004dc77098b18fd964df81213608ec503db52d42f1a78c97722f4ae4c8dc89cf2b144062351919f8ebb29d9ea8"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendfile(r5, r5, 0x0, 0x7ffff000) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_TABLE(r10, 0x29, 0xcf, &(0x7f0000000000), 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) 20m3.243807508s ago: executing program 5 (id=107): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000380)={0x2, @pix={0x0, 0x0, 0x32315559}}) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYRES64=r1], 0xc4}}, 0x4000000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x8000000000007ff, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="20000400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000640)={0x24, &(0x7f0000000240)={0x0, 0x31, 0x4d, {0x4d, 0x3d, "b772a7064dd4d763b0e09b22789bd00b7f09c83dea044f9160aaa05bed9f801a03fdac150dcf59dd8496135b483e8d3f184cbe3e96aa3859f313b7981fc9f49d14ae2f78331e5c4eba5cb9"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}, &(0x7f00000005c0)=ANY=[@ANYBLOB="0022080000af61401b644fbd0438"], &(0x7f0000000600)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0x6, 0x1, {0x22, 0xc5a}}}}, &(0x7f00000008c0)={0x2c, &(0x7f0000000680)={0x20, 0x1, 0x9d, "efe1a29f3f7e6c71125f454ab2748613bc44ee9ef1495baf3e53b03b95a7fb630c18bfc1fcac3f1687528b85cf627a5f8c359297255aa039c9048726291934e45024025a6697a8b814920a0dd660d4c15cbbf4831f48e758e46955a0d0bbe35a1446e173998cef1eb40f9dd72ac68df44865a13c4dbba5a0fbb873eb6d8aec392786ebcc539afdd5ee78e05478f7d080faf4836931bbe1d79f2115f082"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000007c0)={0x20, 0x1, 0x88, "8be85d6333f5dab11c9c617dbb6ab9361ce90dccfdbd5a42d12ed3eaf9bbed476a2bc8115e808797bc2d3001562574ed67ea9fd117290b271f87bd76f30b36cc4f6cd82545b8dbdf7c6b9bc013ae30fbda5f21aa36e4b4aed89501ffab4dca32e15a486e0b3b0328eb792ae243873d5e2039574108e3313c4cdbb3714e4726e52817a88bf1fa5ad9"}, &(0x7f0000000880)={0x20, 0x3, 0x1, 0x4}}) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r6) sendmsg$IEEE802154_LLSEC_SETPARAMS(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0500000a00000000000022000000004562ade04d04b5f60f2fcdffc7915571722bfdebb5d1577f30f4d8108c2ad06efe44fe6fb7222d9c6e5309233e135e9374c4dc6bb9697da67631734d82a4df676b9f2d9f0fa1ab2ef3fc9b4eafb751145b0dfa266b4d585c0a1016bc7bd5dfe9a56fa481d861e94d01821d5af5c7a95842f03ae81ee0a0dd4a46653a16dc8352e01420e2fbf92b41804c7ce177e82de58d95d2ca8ce752ffe0be9e8c4deb041b1111220c42617a068381071e3ed87efab5a8b01eb26f819817dbf4d3f5195816dbf331a9b709079a6f8d1d95d06b82eecb"], 0x14}}, 0x4000000) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000000)) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r5, 0xc0305602, &(0x7f00000000c0)={0x0, 0x3}) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000100)={0x10001, 0x18, '\x00', 0x1, &(0x7f00000000c0)=[0x0, 0x0, 0x0]}) r9 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) read$usbfs(0xffffffffffffffff, &(0x7f0000000400)=""/146, 0x92) mmap$dsp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000002, 0x12, 0xffffffffffffffff, 0x0) fcntl$lock(r9, 0x6, &(0x7f0000000040)={0x1, 0x2, 0x8000000000006, 0x5}) dup3(r9, r9, 0x0) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x5, 0x0}) 20m2.954298714s ago: executing program 4 (id=110): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) (fail_nth: 1) 20m2.550077004s ago: executing program 4 (id=111): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 20m2.535834824s ago: executing program 5 (id=112): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) write(r3, &(0x7f0000000440)="a3939583b21e824ea9f0669f180f0624a7a4c44e824edd876e5e233193da872327a6afa63ff8c013c45ab4381cdb12674902abaefab4c9bb05a65270b3fe67c98ebb06f23188b99f101b1c32a2283877d19b5de6d1291163300dcc60718b2c54149f344e9bf3b869dd0d9814b982c7d841ab4568b824c24ba1ba433ae149541f476eb04c32f1da3bb13e112da28653d65b0f869c913d12ff191aae3d5cf9cdab5515da39f11f3cc4d3df7e6349a5be37881e3480504d701bedf79a4841ebef620b103fad93b82e03c5efefd7435824f4d99bd19bc9b42d09356eae566e6f5bfd4acc08ac1e25740e465a22aeba7efdc9d72f415c589c4f", 0xf7) write$UHID_CREATE2(r2, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000000)=0xf, 0xfffffffffffffed9) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000180)=[@increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) r5 = dup3(r4, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x1000, 0x0) mmap$binder(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x11, r7, 0x61) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffea6, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x3, 0x2, 0x201}, 0x14}}, 0x0) ioctl$sock_qrtr_TIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000540)) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12015002000000ff371701054000010203010902240001013fd0090904000b020301060d092107000801225f0b09058103200004fd20"], 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100"], 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x4bc}, 0x1, 0x0, 0x0, 0x44}, 0x84) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d", @ANYRES64], 0xf8) r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bind$alg(r8, &(0x7f0000000280)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 20m2.294180758s ago: executing program 4 (id=114): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x2d, 0x0, 0x1, 0xfffffffc}, {0x4}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xd, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f00000002c0)={0x18, r4}) sendto$inet(r2, 0x0, 0x0, 0x28040ffd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)}, 0x8c0) socket$nl_generic(0x10, 0x3, 0x10) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080)) 20m2.016486243s ago: executing program 4 (id=119): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r1, @ANYBLOB="3f9d00000000fedbdf25170000008c003080040001803c000180050002000300000005000200020000000800010002000000200003800c0004000200aaaaaaaaaaaa06000100ffff00000600010001000000050002000500000014000400de067486d928a27e16fa9e9bf01d2cf02c000180080001000000000020000380080002000300000006000100010000000c0004000202aaaaaaaaaaaa08000300", @ANYRES32=r2], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r4 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) setpgid(0x0, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000180)=@sr0, &(0x7f0000001440)='./file1\x00', &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) 20m1.713140415s ago: executing program 4 (id=122): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000005b00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x120) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 20m1.386132711s ago: executing program 4 (id=123): socket(0x2, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "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", "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"}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x0) mkdirat(r3, &(0x7f0000000080)='./file1\x00', 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20m0.933420566s ago: executing program 35 (id=123): socket(0x2, 0x5, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000005700)={{0x0, 0x0, 0x80, {0x100000, 0x2}}, "cb31455c9e9d288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9d7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97af85a08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf97a8b7b53058b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bf762c94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b99d5376cd928c431fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029ec7c33830a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf87b55ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f3147414eff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf28053732472dc313b5fedfc583fc702a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22470812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa3181b74ec7dae2e42c9caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae3a8aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64eec45208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c0e7faf2ea7d3f5271028fc558a44799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d03ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db632ec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e50100cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab774d1598d9816abc77b0e693880beca5f330c626774ab5cb6967fb0ea8e14efce120947092c3b6f8a22f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6f9338183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77c4bb94543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c6df4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b76de44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd5828b0218ffe40f375d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b31500", "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"}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x100, 0x0) mkdirat(r3, &(0x7f0000000080)='./file1\x00', 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r4 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000340)={0x2000, r3}, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19m59.340325952s ago: executing program 5 (id=130): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r1, @ANYBLOB="3f9d00000000fedbdf25170000008c003080040001803c000180050002000300000005000200020000000800010002000000200003800c0004000200aaaaaaaaaaaa06000100ffff00000600010001000000050002000500000014000400de067486d928a27e16fa9e9bf01d2cf02c000180080001000000000020000380080002000300000006000100010000000c0004000202aaaaaaaaaaaa08000300", @ANYRES32=r2], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r4 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r4, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) setpgid(0x0, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000180)=@sr0, &(0x7f0000001440)='./file1\x00', &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) 19m59.060877315s ago: executing program 5 (id=132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x44000) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) 19m57.114372218s ago: executing program 5 (id=136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x2d, 0x0, 0x1, 0xfffffffc}, {0x4}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xd, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f00000002c0)={0x18, r4}) sendto$inet(r2, 0x0, 0x0, 0x28040ffd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080)) 19m56.684069357s ago: executing program 36 (id=136): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x3, &(0x7f0000000440)=[{0x2d, 0x0, 0x1, 0xfffffffc}, {0x4}, {0x6, 0xfc, 0x0, 0x7fff0000}]}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xd, 0x0, 0x0}) ioctl$IOMMU_IOAS_UNMAP(r3, 0x3b86, &(0x7f00000002c0)={0x18, r4}) sendto$inet(r2, 0x0, 0x0, 0x28040ffd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000080)) 19m50.279075258s ago: executing program 6 (id=165): r0 = syz_open_dev$amidi(&(0x7f0000000080), 0x7, 0x0) close(r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x200000, 0x0) syz_open_dev$amidi(&(0x7f0000000080), 0x7, 0x0) (async) close(r0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_procs(r1, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) (async) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x200000, 0x0) (async) 19m49.994432197s ago: executing program 6 (id=166): syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a"], 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0x40085507, 0x0) 19m48.545904362s ago: executing program 6 (id=168): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000080)={0x38, r1, 0x1, 0x1070bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_KEY={0x1c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004415}, 0x20000000) 19m48.304738499s ago: executing program 6 (id=169): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r0, 0xf648e000) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) (async) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0x44, 0x6d, 0xcd, 0x40, 0x1bc7, 0x1080, 0xefcd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa0, 0x1, 0x80, 0xf, [{{0x9, 0x4, 0xcf, 0x4, 0x0, 0xff, 0x7a, 0x96}}]}}]}}, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000400)={&(0x7f00000002c0)={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0202}}}, 0xb, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x20004004}, 0x8008100) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x244983) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r3, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r6 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x10, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRESDEC=r6, @ANYRES32=r6, @ANYRES8=r0]) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) socket$inet_sctp(0x2, 0x1, 0x84) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='freezer.state\x00', 0x26e1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$can_bcm(0x1d, 0x2, 0x2) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000140)={'virt_wifi0\x00', @remote}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r7, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x1, 0x0, 0xd, 0x6}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000080)={0x200, 0x8000, 0xc76, 0x400, r9}, 0x10) 19m45.094225539s ago: executing program 6 (id=183): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r1, @ANYBLOB="3f9d00000000fedbdf25170000008c003080040001803c000180050002000300000005000200020000000800010002000000200003800c0004000200aaaaaaaaaaaa06000100ffff00000600010001000000050002000500000014000400de067486d928a27e16fa9e9bf01d2cf02c000180080001000000000020000380080002000300000006000100010000000c0004000202aaaaaaaaaaaa08000300", @ANYRES32=r2], 0xa8}, 0x1, 0x0, 0x0, 0x10}, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x100000, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000180)='./file1\x00') r4 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r5 = getpgid(r4) setpgid(0x0, r5) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000000180)=@sr0, &(0x7f0000001440)='./file1\x00', &(0x7f0000000080)='hfsplus\x00', 0x0, 0x0) 19m44.957816058s ago: executing program 6 (id=184): r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x20000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)={0x0, @bt={0x80000000, 0x6, 0x1, 0x3, 0x1, 0x30, 0x4, 0x4, 0x7, 0x1000, 0xe768, 0x81, 0xa, 0x9, 0x8, 0x20, {0x9, 0xcd0f}, 0x6, 0x7}}) r1 = accept(0xffffffffffffffff, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000180)=0x80) r2 = dup(r1) recvmmsg(r2, &(0x7f0000001d40)=[{{&(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)=""/196, 0xc4}, {&(0x7f0000000340)=""/25, 0x19}], 0x2, &(0x7f00000003c0)=""/4096, 0x1000}, 0x2}, {{&(0x7f00000013c0)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001440)=""/200, 0xc8}, {&(0x7f0000001540)=""/134, 0x86}, {&(0x7f0000001600)=""/6, 0x6}, {&(0x7f0000001640)=""/49, 0x31}], 0x4, &(0x7f00000016c0)=""/207, 0xcf}, 0x7}, {{&(0x7f00000017c0)=@tipc, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001840)=""/181, 0xb5}, {&(0x7f0000001900)=""/106, 0x6a}, {&(0x7f0000001980)=""/91, 0x5b}, {&(0x7f0000001a00)=""/204, 0xcc}, {&(0x7f0000001b00)=""/64, 0x40}, {&(0x7f0000001b40)=""/210, 0xd2}], 0x6, &(0x7f0000001cc0)=""/75, 0x4b}, 0x6}], 0x3, 0x40000000, &(0x7f0000001e00)={0x77359400}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000001e40)=0x2) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001e80)={{{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000001f80)=0xe8) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000001fc0)={0x3, @bcast, r4}) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000002280)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002240)={&(0x7f0000002040)={0x1cc, 0x2, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SYNPROXY={0x4c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1fb}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x10}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x81}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xd9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x80}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000001) r5 = accept4$ax25(r1, 0x0, &(0x7f00000022c0), 0x800) recvfrom$ax25(r5, &(0x7f0000002300)=""/117, 0x75, 0x0, &(0x7f0000002380)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4}, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$inet6(r2, &(0x7f0000002400)="d18864a42a6a898b0697a2b031f8640e96db0a65f51530e91e8561", 0x1b, 0x4000800, &(0x7f0000002440)={0xa, 0x4e20, 0x3, @empty, 0x1}, 0x1c) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000024c0), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000002500)=0x0, &(0x7f0000002540)=0x4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x34, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000002640)=0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r8, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048801}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r9 = socket$inet6(0xa, 0x3, 0x57) r10 = eventfd2(0x8, 0x800) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002c00), 0x1c1000, 0x0) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(0x0, 0x7, &(0x7f0000002ec0)=[&(0x7f00000028c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000027c0)="c167ff00c1449c35daca710879e230823ab38a4d63e31989e6e662ab5883f11a479c2cfacf219b0c2944fa1266d3878d7f5021ab27fd59e0bc6516a555c76529d59e393ff23f9cb04d72e158fbe239502c206b31f3acff6c01a6e569152d0ea48333ac526a39a88a42c3d1b2f651af9353dcbbf3ee600a1ae92ca023482b018c22b9f1f8974dfaab99d820d6957259a210c05571697b22ee4a84eb3cebed7799381f7d18ded96c17e13eba29c35f9599dea5d1f47e1b01b393355e6827b7f1a66d51ae3a097edd998d62dea5590aa02941d89ac3e20b64591a82e269e3cfb3", 0xdf, 0xd, 0x0, 0x4, r10}, &(0x7f0000002980)={0x0, 0x0, 0x0, 0xa, 0x1, r5, &(0x7f0000002900)="ce3f9bd2bbd4b66db7cfa9b61c8ebe6c2110eae561277676bf5c5ea434d14c7df469487e77297a74b5790062eea25fe9ccdb9c03c4bd2f1931c934049d54ae312def33ff311efd269eca907af1d09e28f79bfee08b12dc292f03f6a3ec5115d4adbdf0", 0x63, 0x8, 0x0, 0x2}, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x1, 0x3, r1, &(0x7f00000029c0)="af1628450845334c4a7fb1d547ca6846ce3c219915c98b406d1fdf478d7fa649be410ab4c6f923e04465e43b3921cf45e31f0437fc5a6d7f282fce3e14dd812d47d5984519521e802efb9c0fc1ab989b5b58f2924182fd217a8275125fbec49841e01bd917992d19753fd16075a566e96b2f83680ba85129793b5f0ca2afe3bb01be741bcda636b4c5424b9c317d9b005f9eb6adafd181707fbeb55be72288633984285d26b0d6b620859624e5b6822014e18cbec8", 0xb5, 0x9, 0x0, 0x0, r2}, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x5, 0x3, r9, &(0x7f0000002ac0)="48c7b0c3633c1834a4c9deaabe3cdc6f59523a7815ae67b58562af822aeceeaf487a58233508f31cd28076c7635de67b82921cb23224497294aac85bf3e1671c6b0b46f107f52a1a6792decb9d0f1c3003f282d1dffe694feba969c4e3ca048f096da595d5", 0x65, 0x1df2}, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0xaf7868545b1232c5, 0x3, r0, &(0x7f0000002b80)="e53eb223df6f6848c911cbea4eaa341a64a1e53c73c6c766178f9eb0101a84781df63635f1245b7f0fdcd137d891010dfb182633d9b7602a930507854537b9318753224f850d6396b87dbadb7b3c0c0ffa829cd7322556b18a36fdb83e0823eae621107f5aa24b", 0x67, 0x8, 0x0, 0x2, r11}, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x3, 0x9f3, r12, &(0x7f0000002c80)="8fd48d354c640ceabfbfd18c9b101bd68c665b7d6667aa0ab11c6813a3b4d46767059ae4d0fca7b45b6003a8c6b46e8c312adb10cd62901fff01d1afcd28fd51d9891f7adc9f978592b39562859d5c3c19df6058aad35e7b7184bef65aa8325646b9b5a21f608268c38f6c7fc66b386a76da0358797e676abb9c60ac30e1bd303e162187dfa1ced04d7d4e11515fce58531376205bd6eacc1a977c04aa9e349ebb778a92fcf98939f13de7fec3260b05f5786c1c9c32809333e3cbcd58dd346d044a6e87179eab7fb94102af01b85906f4470903303ea238ee533046b227457938c43212f89c804bea23281f", 0xec, 0x2, 0x0, 0x1, r2}, &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, 0x7f, r2, &(0x7f0000002dc0)="a28edf02ffb94be66ad03f9a24d7a42f3b4758c74984e3c3001a1d2f18c9fd20e9304c7e3a0ac2e4a224c7df6ba2f0bf35171581ae84fb9cbbd846cb31ac5483d0bc6a05087bf8bf6b19dece3691927cf445f32539dfb2d8c1c59e628dabbc984a7ae9fba25a0a8fe29c3b5cf9abe257e3cd5213246043763570c79ee3abf6b61e65454415ed22e24d0c8fd9632fcbd88c8a2d805c2b2b1320a0896f225cc84420d9f8a13907f8c9ad74b6390fdd", 0xae, 0x81, 0x0, 0x2}]) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000002f00), 0x34882, 0x0) ioctl$TUNGETIFF(r13, 0x800454d2, &(0x7f0000002f40)={'batadv_slave_0\x00'}) r14 = syz_genetlink_get_family_id$team(&(0x7f0000002fc0), r2) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000003000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r11, &(0x7f0000003780)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003740)={&(0x7f0000003140)={0x5e0, r14, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x148, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa0}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r7}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}]}}, {{0x8, 0x1, r3}, {0x178, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r15}, {0xe8, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x9, 0x5, 0xf2, 0x10000}, {0x4, 0x7, 0x8, 0x2}, {0x1, 0x1, 0x4, 0x3}, {0x0, 0x6, 0x2, 0xb26}, {0x0, 0x8, 0x0, 0xac}, {0xffff, 0xb, 0x10, 0x9}, {0x7, 0x4, 0x2, 0x3}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x5e0}, 0x1, 0x0, 0x0, 0x24008001}, 0x8000) 19m29.200635235s ago: executing program 37 (id=184): r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x20000) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000040)={0x0, @bt={0x80000000, 0x6, 0x1, 0x3, 0x1, 0x30, 0x4, 0x4, 0x7, 0x1000, 0xe768, 0x81, 0xa, 0x9, 0x8, 0x20, {0x9, 0xcd0f}, 0x6, 0x7}}) r1 = accept(0xffffffffffffffff, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f0000000180)=0x80) r2 = dup(r1) recvmmsg(r2, &(0x7f0000001d40)=[{{&(0x7f00000001c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000240)=""/196, 0xc4}, {&(0x7f0000000340)=""/25, 0x19}], 0x2, &(0x7f00000003c0)=""/4096, 0x1000}, 0x2}, {{&(0x7f00000013c0)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000001680)=[{&(0x7f0000001440)=""/200, 0xc8}, {&(0x7f0000001540)=""/134, 0x86}, {&(0x7f0000001600)=""/6, 0x6}, {&(0x7f0000001640)=""/49, 0x31}], 0x4, &(0x7f00000016c0)=""/207, 0xcf}, 0x7}, {{&(0x7f00000017c0)=@tipc, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001840)=""/181, 0xb5}, {&(0x7f0000001900)=""/106, 0x6a}, {&(0x7f0000001980)=""/91, 0x5b}, {&(0x7f0000001a00)=""/204, 0xcc}, {&(0x7f0000001b00)=""/64, 0x40}, {&(0x7f0000001b40)=""/210, 0xd2}], 0x6, &(0x7f0000001cc0)=""/75, 0x4b}, 0x6}], 0x3, 0x40000000, &(0x7f0000001e00)={0x77359400}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000001e40)=0x2) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001e80)={{{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in6=@loopback}}, &(0x7f0000001f80)=0xe8) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000001fc0)={0x3, @bcast, r4}) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000002280)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002240)={&(0x7f0000002040)={0x1cc, 0x2, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x8c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x1}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}, @CTA_SYNPROXY={0x4c, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x1fb}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x10}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x81}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0xd9}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_TSOFF={0x8}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x6}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x80}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}]}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_NAT_SRC={0x70, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @private1}, @CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MINIP={0x8, 0x1, @local}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000001) r5 = accept4$ax25(r1, 0x0, &(0x7f00000022c0), 0x800) recvfrom$ax25(r5, &(0x7f0000002300)=""/117, 0x75, 0x0, &(0x7f0000002380)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x4}, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) sendto$inet6(r2, &(0x7f0000002400)="d18864a42a6a898b0697a2b031f8640e96db0a65f51530e91e8561", 0x1b, 0x4000800, &(0x7f0000002440)={0xa, 0x4e20, 0x3, @empty, 0x1}, 0x1c) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000024c0), 0xffffffffffffffff) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000002500)=0x0, &(0x7f0000002540)=0x4) sendmsg$ETHTOOL_MSG_COALESCE_GET(r2, &(0x7f0000002600)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x34, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000002640)=0x1) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r8, &(0x7f0000002780)={&(0x7f0000002680)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002740)={&(0x7f00000026c0)={0x70, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}]}, 0x70}, 0x1, 0x0, 0x0, 0x20048801}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r9 = socket$inet6(0xa, 0x3, 0x57) r10 = eventfd2(0x8, 0x800) r11 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002c00), 0x1c1000, 0x0) r12 = socket$inet6_udplite(0xa, 0x2, 0x88) io_submit(0x0, 0x7, &(0x7f0000002ec0)=[&(0x7f00000028c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000027c0)="c167ff00c1449c35daca710879e230823ab38a4d63e31989e6e662ab5883f11a479c2cfacf219b0c2944fa1266d3878d7f5021ab27fd59e0bc6516a555c76529d59e393ff23f9cb04d72e158fbe239502c206b31f3acff6c01a6e569152d0ea48333ac526a39a88a42c3d1b2f651af9353dcbbf3ee600a1ae92ca023482b018c22b9f1f8974dfaab99d820d6957259a210c05571697b22ee4a84eb3cebed7799381f7d18ded96c17e13eba29c35f9599dea5d1f47e1b01b393355e6827b7f1a66d51ae3a097edd998d62dea5590aa02941d89ac3e20b64591a82e269e3cfb3", 0xdf, 0xd, 0x0, 0x4, r10}, &(0x7f0000002980)={0x0, 0x0, 0x0, 0xa, 0x1, r5, &(0x7f0000002900)="ce3f9bd2bbd4b66db7cfa9b61c8ebe6c2110eae561277676bf5c5ea434d14c7df469487e77297a74b5790062eea25fe9ccdb9c03c4bd2f1931c934049d54ae312def33ff311efd269eca907af1d09e28f79bfee08b12dc292f03f6a3ec5115d4adbdf0", 0x63, 0x8, 0x0, 0x2}, &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x1, 0x3, r1, &(0x7f00000029c0)="af1628450845334c4a7fb1d547ca6846ce3c219915c98b406d1fdf478d7fa649be410ab4c6f923e04465e43b3921cf45e31f0437fc5a6d7f282fce3e14dd812d47d5984519521e802efb9c0fc1ab989b5b58f2924182fd217a8275125fbec49841e01bd917992d19753fd16075a566e96b2f83680ba85129793b5f0ca2afe3bb01be741bcda636b4c5424b9c317d9b005f9eb6adafd181707fbeb55be72288633984285d26b0d6b620859624e5b6822014e18cbec8", 0xb5, 0x9, 0x0, 0x0, r2}, &(0x7f0000002b40)={0x0, 0x0, 0x0, 0x5, 0x3, r9, &(0x7f0000002ac0)="48c7b0c3633c1834a4c9deaabe3cdc6f59523a7815ae67b58562af822aeceeaf487a58233508f31cd28076c7635de67b82921cb23224497294aac85bf3e1671c6b0b46f107f52a1a6792decb9d0f1c3003f282d1dffe694feba969c4e3ca048f096da595d5", 0x65, 0x1df2}, &(0x7f0000002c40)={0x0, 0x0, 0x0, 0xaf7868545b1232c5, 0x3, r0, &(0x7f0000002b80)="e53eb223df6f6848c911cbea4eaa341a64a1e53c73c6c766178f9eb0101a84781df63635f1245b7f0fdcd137d891010dfb182633d9b7602a930507854537b9318753224f850d6396b87dbadb7b3c0c0ffa829cd7322556b18a36fdb83e0823eae621107f5aa24b", 0x67, 0x8, 0x0, 0x2, r11}, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x3, 0x9f3, r12, &(0x7f0000002c80)="8fd48d354c640ceabfbfd18c9b101bd68c665b7d6667aa0ab11c6813a3b4d46767059ae4d0fca7b45b6003a8c6b46e8c312adb10cd62901fff01d1afcd28fd51d9891f7adc9f978592b39562859d5c3c19df6058aad35e7b7184bef65aa8325646b9b5a21f608268c38f6c7fc66b386a76da0358797e676abb9c60ac30e1bd303e162187dfa1ced04d7d4e11515fce58531376205bd6eacc1a977c04aa9e349ebb778a92fcf98939f13de7fec3260b05f5786c1c9c32809333e3cbcd58dd346d044a6e87179eab7fb94102af01b85906f4470903303ea238ee533046b227457938c43212f89c804bea23281f", 0xec, 0x2, 0x0, 0x1, r2}, &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, 0x7f, r2, &(0x7f0000002dc0)="a28edf02ffb94be66ad03f9a24d7a42f3b4758c74984e3c3001a1d2f18c9fd20e9304c7e3a0ac2e4a224c7df6ba2f0bf35171581ae84fb9cbbd846cb31ac5483d0bc6a05087bf8bf6b19dece3691927cf445f32539dfb2d8c1c59e628dabbc984a7ae9fba25a0a8fe29c3b5cf9abe257e3cd5213246043763570c79ee3abf6b61e65454415ed22e24d0c8fd9632fcbd88c8a2d805c2b2b1320a0896f225cc84420d9f8a13907f8c9ad74b6390fdd", 0xae, 0x81, 0x0, 0x2}]) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000002f00), 0x34882, 0x0) ioctl$TUNGETIFF(r13, 0x800454d2, &(0x7f0000002f40)={'batadv_slave_0\x00'}) r14 = syz_genetlink_get_family_id$team(&(0x7f0000002fc0), r2) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000003000)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r11, &(0x7f0000003780)={&(0x7f0000002f80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003740)={&(0x7f0000003140)={0x5e0, r14, 0x400, 0x70bd28, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r3}, {0x148, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xa0}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r7}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}]}}, {{0x8, 0x1, r3}, {0x178, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r3}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r15}, {0xe8, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x9, 0x5, 0xf2, 0x10000}, {0x4, 0x7, 0x8, 0x2}, {0x1, 0x1, 0x4, 0x3}, {0x0, 0x6, 0x2, 0xb26}, {0x0, 0x8, 0x0, 0xac}, {0xffff, 0xb, 0x10, 0x9}, {0x7, 0x4, 0x2, 0x3}]}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r7}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x5e0}, 0x1, 0x0, 0x0, 0x24008001}, 0x8000) 2m36.874566228s ago: executing program 0 (id=5443): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="be", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x8000) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x8044010) (fail_nth: 1) 2m36.700902367s ago: executing program 0 (id=5444): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close_range(r0, 0xffffffffffffffff, 0x0) 2m36.463135113s ago: executing program 0 (id=5445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m36.324929978s ago: executing program 0 (id=5446): syz_usb_connect(0x0, 0x3d7, &(0x7f00000007c0)=ANY=[@ANYBLOB="120100004cefc008e10593085bfd010203010902c50301000000000904"], 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r0, 0xc1004111, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='hpfs\x00', 0x208002, 0x0) 2m35.063054776s ago: executing program 0 (id=5451): mount(&(0x7f0000000040)=@rnullb, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) r0 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x800455ca, 0x400000009) r3 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000980)=ANY=[@ANYBLOB='Cpids'], 0x1f) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r7, &(0x7f0000000080)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000540)='O', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r7, 0x1) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000040), &(0x7f0000000140)=0x8) setsockopt(r4, 0x2, 0x6, &(0x7f00000002c0)="fc70ddb689a05b89b254cb7a375ca2f3c8b95634de616188768fbd272228f32be8a4e6fdece6070aa4cadbfe965214b41ca888236baf804bee2f4b17b7150f46aea7701d79a7b03438d4fa2c4bf2d4657da9ddf52e69da0529dbce127e736f394ebeaebaf89a364efa2029ff2abd4002b0295da382346ded282a2b53bc2153a960a46f8dce5bdba78944237808e3a2cbfc53183a4529c647ddae0ab9dc41f450244ed11f347a899337cf1044026627ff23cfc504e8fe3b50e8d2eb261aadf002fa2e95eaa035d0d3cdd599f5ced32f7c914f45f50914187d69c68fd221f5839861af07943d49da79b55121d956db3215ccb8c404", 0xf4) setreuid(0x0, r6) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000602, r6, &(0x7f00000000c0)={0xa43, 0x7, 0x0, 0x2}) 2m34.931009386s ago: executing program 0 (id=5452): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x1262, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x54, 0x0, 0xfffffffffffffd9c) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m19.22551333s ago: executing program 38 (id=5452): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$IOC_PR_PREEMPT(r3, 0x1262, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x54, 0x0, 0xfffffffffffffd9c) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.847697313s ago: executing program 3 (id=6210): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000340)="1400000023003517d25a806f8b6394f90324fc60", 0x14}], 0x1}, 0x1000000000000) 6.695130324s ago: executing program 3 (id=6212): socket$rds(0x15, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 6.608299217s ago: executing program 3 (id=6213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fchown(r0, 0x0, 0xee01) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1038, 0x12b6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f0000000080)={0x0, 0x10, 0xa, {0xa, 0x4, "c46c32155d690f22"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) r2 = openat$ptp0(0xffffff9c, &(0x7f0000000240), 0x2642, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f00000002c0)={0x5}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f1b85000d2000"/18], 0x15) 4.537815602s ago: executing program 9 (id=6228): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0xd1}, 0xe) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x4, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'ip6gretap0\x00', &(0x7f0000000440)=@ethtool_per_queue_op={0x4b, 0xf, [0xfffffffb, 0x6, 0xfff, 0x3, 0x3, 0x7, 0x7, 0x6, 0x3, 0x3, 0x80000000, 0x3, 0x9, 0x1, 0x8, 0x8001, 0x9, 0x7, 0x4, 0x2, 0x2, 0x2a1d, 0x2000000, 0xcfc, 0x1, 0x9b, 0x5, 0x4d, 0xbee3, 0x5, 0x9, 0x4, 0xfb92, 0x9b, 0x23, 0xe6, 0x1, 0xffff, 0x0, 0xcdba, 0x80000001, 0x0, 0x7, 0x7d, 0xfffffffe, 0xaa76, 0x8, 0x80000000, 0x8, 0xd5, 0x2, 0x4, 0x3, 0x8, 0x4, 0x50, 0x3de7, 0x4, 0x8, 0x3af24361, 0x6c, 0x8, 0x8, 0x1, 0x3, 0x1, 0xfffffff7, 0x2, 0x6, 0x200, 0x1, 0x800, 0x80000001, 0x3, 0xa, 0xfffffff9, 0x5, 0x3f8, 0xcf, 0x9, 0x7, 0x400, 0x4, 0x2, 0xfffffffc, 0x4, 0x6, 0xffff7fff, 0x8, 0x3, 0x10000, 0x7, 0x2, 0xffffffff, 0x4000000, 0x4, 0xffffff81, 0x2c, 0xb, 0x7, 0x10001, 0x8, 0x5, 0x2, 0x8, 0xfffffbff, 0x800, 0x0, 0x2, 0x40, 0x800000, 0x0, 0x4, 0x0, 0x5cf3, 0x80, 0xfffffff7, 0xb, 0xfffffffd, 0x7, 0x4, 0x61cc, 0x8, 0x208, 0x9, 0x8, 0x2, 0x4]}}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 4.287022797s ago: executing program 9 (id=6230): r0 = socket(0x28, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000600)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x2, 0x6, 0xfffffffe, 0x38, @dev={0x12, 0x80, '\x00', 0xfe}, @mcast2={0xff, 0x3}, 0x40, 0xba08, 0x3, 0x7}}) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x4, 0x2, 0x81, 0xcf57, 0xff00, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0x300}, 0x8000, 0x0, 0x0, 0x300}}) (async) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20011, r2, 0xf648e000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f00000001c0), 0x95) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2005}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3c}, 0x1, 0x0, 0x0, 0x2c004880}, 0x10000030) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf25270000000e0001006e657464657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_io_uring_setup(0x275b, &(0x7f00000008c0)={0x0, 0x21d7, 0x40, 0x0, 0x2ad}, 0x0, 0x0) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="1c0100002b00010000000000fcdbdf250a01f2800c00090008ac0f0000000000140001"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) mlock(&(0x7f0000904000/0x1000)=nil, 0x1000) (async) mlock(&(0x7f0000a3c000/0x2000)=nil, 0x2000) 4.050365992s ago: executing program 3 (id=6231): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x0, 0x83, 0xec}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4.007274762s ago: executing program 9 (id=6234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a2c000000030a030000000000000000000200000a0c000240000000000000000109000100"], 0x54}}, 0x4000) 3.861476875s ago: executing program 7 (id=6235): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x10) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x4b22, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000040)={0xde3, 0x7}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x10b}) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000140)=0x1000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="25003300d0000000080211000001080211000000505050505050"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.809355022s ago: executing program 9 (id=6236): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) chmod(&(0x7f0000000040)='.\x00', 0x35e) setuid(0xee01) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x77359400}}) syz_fuse_handle_req(r1, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1000000000000000, {0xffffffffffffffff, 0x2, 0x7, 0x0, 0x0, 0x0, {0x40, 0x3, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0xa, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$TIOCGPTPEER(r2, 0x4004092b, 0x8) 3.670404524s ago: executing program 7 (id=6237): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="be", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x8000) 3.606647145s ago: executing program 7 (id=6238): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) shmctl$IPC_SET(0x0, 0x1, 0x0) 3.474876018s ago: executing program 7 (id=6240): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009ef6230700000000a3a82f07070d240701060000fd800000001a4824030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x5, @string={0x5, 0x3, "a952a3"}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.846425773s ago: executing program 9 (id=6241): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600001900000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000000d0a010e0000000000000000010000000900010073797a30000000000900020073797a32"], 0x2c}}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000002c0)=0x20) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000000)={0x4, [0x3, 0x7ff, 0x9400, 0x0]}, 0xc) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.514321391s ago: executing program 3 (id=6250): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x129000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r3, 0x89e2, &(0x7f0000000040)=@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000200)=[0x6], 0x0, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) futex(&(0x7f0000000000), 0x100, 0x2, &(0x7f0000000080)={r4, r5+60000000}, &(0x7f00000000c0)=0x1, 0x2) ioctl$KVM_SET_CPUID(r2, 0x4188aea7, &(0x7f0000000240)=ANY=[@ANYRESDEC=r0]) 1.370339195s ago: executing program 3 (id=6251): r0 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x200000) ioctl$NBD_CLEAR_SOCK(r0, 0xab04) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x800) read$qrtrtun(r2, 0x0, 0x0) r3 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYRES16=r1], 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000040)="bd7637bce38f108a93747932a1db8eac0433dad1a6d626a552ddac215b484440f35625372a9c8fdbcc8234de5e2050cae4207892b77281c17b8e716687986e93b1c790612a6f15437daba76830a3eb4288ee6950bdad7839f6fdd46ccd903c02fa8d9050d1fdddb68f96e44fff726ac76a43fcf8c8cf77f43783b5053766546fcdfb61133f574421ca6eb0ed6bb25ca984195d9eaef1285cc8818dbac3397e1e80ab5770cc99b8e0e7539092a457c1ec1c2c5657cbb111c22308a35d5424af11a93bab6b5d84766061f19e7da740d504e092ae3672231c3dd4236fe07433850c9b8dff", 0xe3}, {&(0x7f0000000140)="0c57f3ad7fc55fa6157506654e50bc213891debdfed65fbb8a2eee1ef18d5f7b0e", 0x21}, {&(0x7f0000000180)="05190c86ff9cc65cb41ae134de2c57778fb10cd528f6e9107e5863ac26acc044352cf0f840e1447c1ca70b9f3c93944e9da714f54ab5c1326438674c58c463433a4cbc5796a9847bde783843a144a28ae4a3359691dcbd52107107326d07a485766c32e7c801b4248b270c2f26a24bd646d5a13d73caaa75964fd073fee4a9a6f58e867069248ec05e79e1b9486d5bc3b4bac11e3ac0", 0x96}], 0x3) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x4c, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000193c0)=ANY=[@ANYBLOB="24000000330001002bbd7000fedbdb25040000000800040002000000080005"], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) close_range(r1, 0xffffffffffffffff, 0x0) 509.296482ms ago: executing program 8 (id=6254): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="be", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x8000) accept4(r1, 0x0, 0x0, 0x0) 438.720218ms ago: executing program 7 (id=6255): syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) 437.840065ms ago: executing program 8 (id=6256): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/67, 0x43) (async) sendfile(r0, r0, 0x0, 0x7ffff000) 356.155937ms ago: executing program 7 (id=6257): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/reserved_size', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1f22, 0x12) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000040)={&(0x7f0000001080)={0x554, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x187b26f6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x47}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1559}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x101}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x110, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_PROP={0x4}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x583c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb8f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffeffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x70}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ip_vti0\x00'}}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10000}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0xd4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x79}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x200}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}]}, @TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}]}, @TIPC_NLA_LINK={0x40, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc97a}]}]}, @TIPC_NLA_NODE={0x120, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd7, 0x3, "fcd5b142856e04fbd557cc79c9e5951e44e6aaae0a24aebfd65a4822a933a77aa64fdf89abd61920f25b360e8f051b78da5cf0d3b996d025164aecf42c116e485f743b652ad04040c2c8ffd328bd74fef2aa9c43837fe60ba1dcd251f7924916d2a0ee912d135b2397161a45b851473f0919e29e4a02cf6eeec5280c3b5836fc2e49854f7b3d2b15333feaa2d0a277b782879d3c25c02f91c8a0a36828a8d35f31ab0642ac90783977d375005800960c13d98ce43a4f0a7e6bc4d2c11a3a8c493b5a031d388c0373e0cc694adb476c3443aae7"}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "b55a2280c79c2cd971dc0bc062d4c0c9753bec34eb7cd76f22d6d994"}}]}]}, 0x554}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="be", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x8000) r3 = accept4(r0, 0x0, 0x0, 0x80800) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) writev(r4, &(0x7f0000001040)=[{&(0x7f0000000e00)="a019", 0x2}], 0x1) sendmsg$unix(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x8044010) 294.343598ms ago: executing program 8 (id=6258): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) r1 = socket$nl_audit(0x10, 0x3, 0x9) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @any, 0xd1}, 0xe) getsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x4, 0x0, &(0x7f0000000000)) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'ip6gretap0\x00', &(0x7f0000000440)=@ethtool_per_queue_op={0x4b, 0xf, [0xfffffffb, 0x6, 0xfff, 0x3, 0x3, 0x7, 0x7, 0x6, 0x3, 0x3, 0x80000000, 0x3, 0x9, 0x1, 0x8, 0x8001, 0x9, 0x7, 0x4, 0x2, 0x2, 0x2a1d, 0x2000000, 0xcfc, 0x1, 0x9b, 0x5, 0x4d, 0xbee3, 0x5, 0x9, 0x4, 0xfb92, 0x9b, 0x23, 0xe6, 0x1, 0xffff, 0x0, 0xcdba, 0x80000001, 0x0, 0x7, 0x7d, 0xfffffffe, 0xaa76, 0x8, 0x80000000, 0x8, 0xd5, 0x2, 0x4, 0x3, 0x8, 0x4, 0x50, 0x3de7, 0x4, 0x8, 0x3af24361, 0x6c, 0x8, 0x8, 0x1, 0x3, 0x1, 0xfffffff7, 0x2, 0x6, 0x200, 0x1, 0x800, 0x80000001, 0x3, 0xa, 0xfffffff9, 0x5, 0x3f8, 0xcf, 0x9, 0x7, 0x400, 0x4, 0x2, 0xfffffffc, 0x4, 0x6, 0xffff7fff, 0x8, 0x3, 0x10000, 0x7, 0x2, 0xffffffff, 0x4000000, 0x4, 0xffffff81, 0x2c, 0xb, 0x7, 0x10001, 0x8, 0x5, 0x2, 0x8, 0xfffffbff, 0x800, 0x0, 0x2, 0x40, 0x800000, 0x0, 0x4, 0x0, 0x5cf3, 0x80, 0xfffffff7, 0xb, 0xfffffffd, 0x7, 0x4, 0x61cc, 0x8, 0x208, 0x9, 0x8, 0x2, 0x4]}}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 270.088028ms ago: executing program 8 (id=6259): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000540)="be", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x8000) accept4(r1, 0x0, 0x0, 0x0) (fail_nth: 2) 142.075413ms ago: executing program 8 (id=6261): r0 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) sendfile(r0, r0, 0x0, 0x24002de8) 26.243907ms ago: executing program 9 (id=6262): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000006c0), r0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DISABLE_SE(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004041}, 0x400) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x11, r3, 0xf648e000) socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r4, 0x40047459, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000600)=ANY=[], 0x110) r6 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) setgid(r7) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace', 0x121262, 0x1b2) write$cgroup_pid(r10, &(0x7f0000000000), 0x12) write$cgroup_subtree(r10, &(0x7f0000000000)=ANY=[], 0x33fe0) 0s ago: executing program 8 (id=6263): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009ef6230700000000a3a82f07070d240701060000fd800000001a4824030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x43f}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x5, @string={0x5, 0x3, "a952a3"}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 1216.761191][ T5930] usb 10-1: Product: syz [ 1216.787813][ T5930] usb 10-1: Manufacturer: syz [ 1216.790835][ T5896] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 1216.795753][ T5930] usb 10-1: SerialNumber: syz [ 1216.829284][ T5896] usb 4-1: USB disconnect, device number 9 [ 1216.857608][ T5896] garmin_gps 4-1:8.206: device disconnected [ 1217.062471][ T5930] cxacru 10-1:16.34: cxacru_bind: interface has incorrect endpoints [ 1217.077783][ T5930] cxacru 10-1:16.34: usbatm_usb_probe: bind failed: -19! [ 1217.107269][ T5930] usb 10-1: USB disconnect, device number 85 [ 1217.755374][T23750] binder: BINDER_SET_CONTEXT_MGR already set [ 1217.761472][T23750] binder: 23745:23750 ioctl 4018620d 200000000040 returned -16 [ 1217.789057][T23750] binder: 23745:23750 ioctl c0306201 200000000240 returned -11 [ 1217.967103][T23759] batadv_slave_1: entered promiscuous mode [ 1218.017187][T23755] batadv_slave_1: left promiscuous mode [ 1218.534559][ T5896] usb 10-1: new high-speed USB device number 86 using dummy_hcd [ 1218.715252][ T5896] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.743514][ T5896] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1218.768771][ T5896] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.803422][ T5896] usb 10-1: config 0 descriptor?? [ 1218.824131][ T5896] pwc: Askey VC010 type 2 USB webcam detected. [ 1218.873265][T23787] netlink: 'syz.3.5628': attribute type 12 has an invalid length. [ 1218.913083][T23787] netlink: 'syz.3.5628': attribute type 1 has an invalid length. [ 1218.920904][T23787] netlink: 220 bytes leftover after parsing attributes in process `syz.3.5628'. [ 1219.018362][ T5896] pwc: send_video_command error -71 [ 1219.032521][ T5896] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1219.317411][ T5896] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71 [ 1219.390559][ T5896] usb 10-1: USB disconnect, device number 86 [ 1219.633239][ T30] audit: type=1800 audit(6044117979.724:169): pid=23802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5632" name="nullb0" dev="tmpfs" ino=1500 res=0 errno=0 [ 1219.702242][ T30] audit: type=1800 audit(6044117979.724:170): pid=23802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5632" name="nullb0" dev="tmpfs" ino=1500 res=0 errno=0 [ 1219.722503][ T5896] usb 10-1: new high-speed USB device number 87 using dummy_hcd [ 1219.904288][ T5896] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.936581][ T5896] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1219.958149][ T5896] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1219.989018][ T5896] usb 10-1: config 0 descriptor?? [ 1220.030699][ T5896] pwc: Askey VC010 type 2 USB webcam detected. [ 1220.299753][T23819] FAULT_INJECTION: forcing a failure. [ 1220.299753][T23819] name failslab, interval 1, probability 0, space 0, times 0 [ 1220.317559][T23819] CPU: 0 UID: 0 PID: 23819 Comm: syz.3.5635 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1220.317591][T23819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1220.317605][T23819] Call Trace: [ 1220.317614][T23819] [ 1220.317623][T23819] dump_stack_lvl+0x189/0x250 [ 1220.317660][T23819] ? __pfx____ratelimit+0x10/0x10 [ 1220.317687][T23819] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1220.317717][T23819] ? __pfx__printk+0x10/0x10 [ 1220.317754][T23819] ? __pfx___might_resched+0x10/0x10 [ 1220.317780][T23819] ? fs_reclaim_acquire+0x7d/0x100 [ 1220.317809][T23819] should_fail_ex+0x414/0x560 [ 1220.317847][T23819] should_failslab+0xa8/0x100 [ 1220.317871][T23819] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1220.317902][T23819] ? fuse_get_req+0x7b9/0x10b0 [ 1220.317934][T23819] fuse_get_req+0x7b9/0x10b0 [ 1220.317974][T23819] ? __pfx_fuse_get_req+0x10/0x10 [ 1220.318020][T23819] __fuse_simple_request+0x2aa/0x18d0 [ 1220.318052][T23819] ? __lock_acquire+0xab9/0xd20 [ 1220.318079][T23819] ? __pfx___fuse_simple_request+0x10/0x10 [ 1220.318123][T23819] ? is_bpf_text_address+0x26/0x2b0 [ 1220.318154][T23819] ? is_bpf_text_address+0x292/0x2b0 [ 1220.318179][T23819] ? is_bpf_text_address+0x26/0x2b0 [ 1220.318212][T23819] fuse_do_getattr+0x33b/0x620 [ 1220.318241][T23819] ? unwind_get_return_address+0x4d/0x90 [ 1220.318276][T23819] ? __pfx_fuse_do_getattr+0x10/0x10 [ 1220.318317][T23819] ? look_up_lock_class+0x74/0x170 [ 1220.318370][T23819] fuse_permission+0x4e5/0xdc0 [ 1220.318403][T23819] ? __pfx_fuse_permission+0x10/0x10 [ 1220.318428][T23819] ? do_raw_spin_lock+0x121/0x290 [ 1220.318475][T23819] ? leave_rcu+0xef/0x160 [ 1220.318513][T23819] inode_permission+0x282/0x470 [ 1220.318541][T23819] ? __pfx_fuse_permission+0x10/0x10 [ 1220.318567][T23819] may_open+0x325/0x4c0 [ 1220.318592][T23819] path_openat+0x2d91/0x3830 [ 1220.318650][T23819] ? __pfx_path_openat+0x10/0x10 [ 1220.318670][T23819] ? unwind_get_return_address+0x4d/0x90 [ 1220.318697][T23819] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1220.318730][T23819] ? arch_stack_walk+0xfc/0x150 [ 1220.318777][T23819] do_filp_open+0x1fa/0x410 [ 1220.318796][T23819] ? stack_depot_save_flags+0x40/0x900 [ 1220.318832][T23819] ? __pfx_do_filp_open+0x10/0x10 [ 1220.318886][T23819] ? do_open_execat+0x93/0x560 [ 1220.318913][T23819] do_open_execat+0x135/0x560 [ 1220.318934][T23819] ? __pfx_do_open_execat+0x10/0x10 [ 1220.318971][T23819] alloc_bprm+0x28/0x5c0 [ 1220.318999][T23819] do_execveat_common+0x1b3/0x6a0 [ 1220.319035][T23819] __x64_sys_execve+0x94/0xb0 [ 1220.319061][T23819] do_syscall_64+0xfa/0x3b0 [ 1220.319082][T23819] ? lockdep_hardirqs_on+0x9c/0x150 [ 1220.319102][T23819] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.319124][T23819] ? clear_bhb_loop+0x60/0xb0 [ 1220.319150][T23819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1220.319170][T23819] RIP: 0033:0x7f362378e929 [ 1220.319190][T23819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1220.319208][T23819] RSP: 002b:00007f36245d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1220.319239][T23819] RAX: ffffffffffffffda RBX: 00007f36239b6080 RCX: 00007f362378e929 [ 1220.319255][T23819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 1220.319268][T23819] RBP: 00007f36245d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1220.319281][T23819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1220.319293][T23819] R13: 0000000000000001 R14: 00007f36239b6080 R15: 00007ffe91377318 [ 1220.319324][T23819] [ 1220.723982][ T5896] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1220.731885][ T5896] pwc: recv_control_msg error -32 req 02 val 2700 [ 1220.744764][ T5896] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1220.752317][ T5896] pwc: recv_control_msg error -32 req 04 val 1000 [ 1220.759803][ T5896] pwc: recv_control_msg error -32 req 04 val 1300 [ 1220.772123][ T5896] pwc: recv_control_msg error -32 req 04 val 1400 [ 1220.791056][ T5896] pwc: recv_control_msg error -32 req 02 val 2000 [ 1220.810967][ T5896] pwc: recv_control_msg error -32 req 02 val 2100 [ 1220.819351][ T5896] pwc: recv_control_msg error -71 req 04 val 1500 [ 1220.831360][ T5896] pwc: recv_control_msg error -71 req 02 val 2500 [ 1220.840368][ T5896] pwc: recv_control_msg error -71 req 02 val 2400 [ 1220.853114][ T5896] pwc: recv_control_msg error -71 req 02 val 2600 [ 1220.861412][ T5896] pwc: recv_control_msg error -71 req 02 val 2900 [ 1220.888220][ T5896] pwc: recv_control_msg error -71 req 02 val 2800 [ 1220.914377][ T5896] pwc: recv_control_msg error -71 req 04 val 1100 [ 1220.925362][ T5896] pwc: recv_control_msg error -71 req 04 val 1200 [ 1220.938128][ T5896] pwc: Registered as video103. [ 1220.948904][ T5896] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input156 [ 1220.974190][ T5896] usb 10-1: USB disconnect, device number 87 [ 1221.508841][T23842] fuse: Bad value for 'fd' [ 1222.185205][T23858] vxfs: WRONG superblock magic 00000000 at 1 [ 1222.193921][T23858] vxfs: WRONG superblock magic 00000000 at 8 [ 1222.200008][T23858] vxfs: can't find superblock. [ 1222.360354][T23865] FAULT_INJECTION: forcing a failure. [ 1222.360354][T23865] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.374959][T23865] CPU: 1 UID: 0 PID: 23865 Comm: syz.7.5646 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1222.374990][T23865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1222.375004][T23865] Call Trace: [ 1222.375013][T23865] [ 1222.375030][T23865] dump_stack_lvl+0x189/0x250 [ 1222.375065][T23865] ? __pfx____ratelimit+0x10/0x10 [ 1222.375087][T23865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1222.375117][T23865] ? __pfx__printk+0x10/0x10 [ 1222.375154][T23865] ? __pfx___might_resched+0x10/0x10 [ 1222.375180][T23865] ? fs_reclaim_acquire+0x7d/0x100 [ 1222.375209][T23865] should_fail_ex+0x414/0x560 [ 1222.375248][T23865] should_failslab+0xa8/0x100 [ 1222.375271][T23865] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 1222.375303][T23865] ? snd_timer_instance_new+0x6a/0x220 [ 1222.375335][T23865] kstrdup+0x42/0x100 [ 1222.375363][T23865] snd_timer_instance_new+0x6a/0x220 [ 1222.375390][T23865] snd_seq_timer_open+0x237/0x5f0 [ 1222.375421][T23865] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 1222.375441][T23865] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1222.375478][T23865] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1222.375509][T23865] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1222.375542][T23865] ? kfree+0x18e/0x440 [ 1222.375579][T23865] snd_seq_queue_timer_open+0xc2/0x130 [ 1222.375615][T23865] snd_seq_ioctl_set_queue_timer+0x21c/0x360 [ 1222.375651][T23865] snd_seq_ioctl+0x254/0x420 [ 1222.375687][T23865] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 1222.375737][T23865] ? __fget_files+0x3a0/0x420 [ 1222.375762][T23865] ? __fget_files+0x2a/0x420 [ 1222.375794][T23865] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1222.375822][T23865] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 1222.375850][T23865] __se_sys_ioctl+0xfc/0x170 [ 1222.375875][T23865] do_syscall_64+0xfa/0x3b0 [ 1222.375896][T23865] ? lockdep_hardirqs_on+0x9c/0x150 [ 1222.375917][T23865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.375938][T23865] ? clear_bhb_loop+0x60/0xb0 [ 1222.375965][T23865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.375985][T23865] RIP: 0033:0x7fbebc98e929 [ 1222.376005][T23865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1222.376029][T23865] RSP: 002b:00007fbebd723038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1222.376052][T23865] RAX: ffffffffffffffda RBX: 00007fbebcbb6080 RCX: 00007fbebc98e929 [ 1222.376068][T23865] RDX: 0000200000000280 RSI: 0000000040605346 RDI: 0000000000000007 [ 1222.376082][T23865] RBP: 00007fbebd723090 R08: 0000000000000000 R09: 0000000000000000 [ 1222.376095][T23865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1222.376107][T23865] R13: 0000000000000000 R14: 00007fbebcbb6080 R15: 00007ffd2780b778 [ 1222.376140][T23865] [ 1222.563992][ T5896] usb 10-1: new high-speed USB device number 88 using dummy_hcd [ 1222.818153][ T5896] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.830060][ T5896] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1222.855627][ T5896] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.870662][ T5896] usb 10-1: config 0 descriptor?? [ 1222.887438][ T5896] pwc: Askey VC010 type 2 USB webcam detected. [ 1223.087629][ T5896] pwc: send_video_command error -71 [ 1223.095196][ T5896] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1223.103286][ T5896] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71 [ 1223.115335][ T5896] usb 10-1: USB disconnect, device number 88 [ 1223.532306][ T5896] usb 10-1: new high-speed USB device number 89 using dummy_hcd [ 1223.693826][ T5896] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1223.704314][ T5896] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1223.713850][ T5896] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.726504][ T5896] usb 10-1: config 0 descriptor?? [ 1223.740889][ T5896] pwc: Askey VC010 type 2 USB webcam detected. [ 1224.137604][ T5896] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1224.145243][ T5896] pwc: recv_control_msg error -32 req 02 val 2700 [ 1224.158031][ T5896] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1224.165359][ T5896] pwc: recv_control_msg error -32 req 04 val 1000 [ 1224.177037][ T5896] pwc: recv_control_msg error -32 req 04 val 1300 [ 1224.186336][ T5896] pwc: recv_control_msg error -32 req 04 val 1400 [ 1224.195084][ T5896] pwc: recv_control_msg error -32 req 02 val 2000 [ 1224.204364][ T5896] pwc: recv_control_msg error -32 req 02 val 2100 [ 1224.211834][ T5896] pwc: recv_control_msg error -71 req 04 val 1500 [ 1224.220628][ T5896] pwc: recv_control_msg error -71 req 02 val 2500 [ 1224.231999][ T5896] pwc: recv_control_msg error -71 req 02 val 2400 [ 1224.239246][ T5896] pwc: recv_control_msg error -71 req 02 val 2600 [ 1224.253776][ T5896] pwc: recv_control_msg error -71 req 02 val 2900 [ 1224.266869][ T5896] pwc: recv_control_msg error -71 req 02 val 2800 [ 1224.275474][ T5896] pwc: recv_control_msg error -71 req 04 val 1100 [ 1224.284731][ T5896] pwc: recv_control_msg error -71 req 04 val 1200 [ 1224.297927][ T5896] pwc: Registered as video103. [ 1224.318085][ T5896] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input157 [ 1224.342722][ T5896] usb 10-1: USB disconnect, device number 89 [ 1225.001785][ T5930] usb 10-1: new high-speed USB device number 90 using dummy_hcd [ 1225.153420][ T5930] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.166013][ T5930] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1225.175968][ T5930] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1225.190369][ T5930] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1225.199666][ T5930] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.212687][ T5930] usb 10-1: config 0 descriptor?? [ 1225.665825][ T5930] plantronics 0003:047F:FFFF.002F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 1225.996460][ T5930] usb 10-1: USB disconnect, device number 90 [ 1226.791883][ T5896] usb 10-1: new high-speed USB device number 91 using dummy_hcd [ 1226.943776][ T5896] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1226.956018][ T5896] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1226.970770][ T5896] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.986242][ T5896] usb 10-1: config 0 descriptor?? [ 1227.000369][ T5896] pwc: Askey VC010 type 2 USB webcam detected. [ 1227.205695][ T5896] pwc: send_video_command error -71 [ 1227.211060][ T5896] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1227.218781][ T5896] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71 [ 1227.232578][ T5896] usb 10-1: USB disconnect, device number 91 [ 1227.651903][ T5910] usb 10-1: new high-speed USB device number 92 using dummy_hcd [ 1227.743730][T23914] FAULT_INJECTION: forcing a failure. [ 1227.743730][T23914] name failslab, interval 1, probability 0, space 0, times 0 [ 1227.757957][T23914] CPU: 1 UID: 0 PID: 23914 Comm: syz.3.5667 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1227.757983][T23914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1227.757994][T23914] Call Trace: [ 1227.758001][T23914] [ 1227.758009][T23914] dump_stack_lvl+0x189/0x250 [ 1227.758039][T23914] ? __pfx____ratelimit+0x10/0x10 [ 1227.758057][T23914] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1227.758081][T23914] ? __pfx__printk+0x10/0x10 [ 1227.758108][T23914] ? __pfx___might_resched+0x10/0x10 [ 1227.758129][T23914] ? fs_reclaim_acquire+0x7d/0x100 [ 1227.758152][T23914] should_fail_ex+0x414/0x560 [ 1227.758184][T23914] should_failslab+0xa8/0x100 [ 1227.758206][T23914] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1227.758233][T23914] ? ep_ptable_queue_proc+0x5c/0x200 [ 1227.758261][T23914] ep_ptable_queue_proc+0x5c/0x200 [ 1227.758282][T23914] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1227.758307][T23914] snd_pcm_oss_poll+0x47c/0x8a0 [ 1227.758336][T23914] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1227.758365][T23914] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1227.758387][T23914] ep_insert+0x115e/0x19e0 [ 1227.758420][T23914] ? __pfx_ep_insert+0x10/0x10 [ 1227.758446][T23914] ? __pfx___mutex_lock+0x10/0x10 [ 1227.758466][T23914] ? __fget_files+0x2a/0x420 [ 1227.758490][T23914] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 1227.758513][T23914] ? __fget_files+0x3a0/0x420 [ 1227.758534][T23914] ? __fget_files+0x2a/0x420 [ 1227.758563][T23914] do_epoll_ctl+0x7f4/0xe90 [ 1227.758594][T23914] __x64_sys_epoll_ctl+0x163/0x1a0 [ 1227.758618][T23914] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1227.758638][T23914] ? rcu_is_watching+0x15/0xb0 [ 1227.758666][T23914] ? do_syscall_64+0xbe/0x3b0 [ 1227.758687][T23914] do_syscall_64+0xfa/0x3b0 [ 1227.758705][T23914] ? lockdep_hardirqs_on+0x9c/0x150 [ 1227.758722][T23914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.758738][T23914] ? clear_bhb_loop+0x60/0xb0 [ 1227.758759][T23914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.758776][T23914] RIP: 0033:0x7f362378e929 [ 1227.758792][T23914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1227.758807][T23914] RSP: 002b:00007f36245f5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 1227.758826][T23914] RAX: ffffffffffffffda RBX: 00007f36239b5fa0 RCX: 00007f362378e929 [ 1227.758839][T23914] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 1227.758849][T23914] RBP: 00007f36245f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1227.758859][T23914] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000001 [ 1227.758870][T23914] R13: 0000000000000000 R14: 00007f36239b5fa0 R15: 00007ffe91377318 [ 1227.758898][T23914] [ 1228.074207][ T5910] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.086027][ T5910] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1228.095376][ T5910] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.105873][ T5910] usb 10-1: config 0 descriptor?? [ 1228.118151][ T5910] pwc: Askey VC010 type 2 USB webcam detected. [ 1228.310170][T23918] XFS (rnullb0): Invalid superblock magic number [ 1228.536954][ T5910] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1228.544935][ T5910] pwc: recv_control_msg error -32 req 02 val 2700 [ 1228.564416][ T5910] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1228.591811][ T5910] pwc: recv_control_msg error -32 req 04 val 1000 [ 1228.613038][ T5910] pwc: recv_control_msg error -32 req 04 val 1300 [ 1228.632629][ T5910] pwc: recv_control_msg error -32 req 04 val 1400 [ 1228.639817][ T5910] pwc: recv_control_msg error -32 req 02 val 2000 [ 1228.649493][ T5910] pwc: recv_control_msg error -32 req 02 val 2100 [ 1228.657946][ T5910] pwc: recv_control_msg error -71 req 04 val 1500 [ 1228.670565][ T5910] pwc: recv_control_msg error -71 req 02 val 2500 [ 1228.685521][ T5910] pwc: recv_control_msg error -71 req 02 val 2400 [ 1228.693966][T23933] /dev/rnullb0: Can't lookup blockdev [ 1228.697842][ T5910] pwc: recv_control_msg error -71 req 02 val 2600 [ 1228.717525][ T5910] pwc: recv_control_msg error -71 req 02 val 2900 [ 1228.729812][ T5910] pwc: recv_control_msg error -71 req 02 val 2800 [ 1228.738066][ T5910] pwc: recv_control_msg error -71 req 04 val 1100 [ 1228.758665][ T5910] pwc: recv_control_msg error -71 req 04 val 1200 [ 1228.797234][ T5910] pwc: Registered as video103. [ 1228.820900][ T5910] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input159 [ 1228.869072][ T5910] usb 10-1: USB disconnect, device number 92 [ 1229.055926][T23944] 9p filesystem being mounted at /301/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 1229.501946][ T5910] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1229.512941][T23956] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 1229.663068][ T5910] usb 4-1: Using ep0 maxpacket: 8 [ 1229.669750][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.681116][ T5910] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1229.692972][ T5910] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 1229.709284][ T5910] usb 4-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 1229.722430][ T5910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.734721][T23964] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1229.742930][ T5910] usb 4-1: config 0 descriptor?? [ 1230.176050][ T5910] hid_parser_main: 5 callbacks suppressed [ 1230.176077][ T5910] sony 0003:054C:0268.0030: unknown main item tag 0x0 [ 1230.188916][ T5910] sony 0003:054C:0268.0030: unknown main item tag 0x0 [ 1230.195919][ T5910] sony 0003:054C:0268.0030: unknown main item tag 0x0 [ 1230.205541][ T5910] sony 0003:054C:0268.0030: unknown main item tag 0x0 [ 1230.212588][ T5910] sony 0003:054C:0268.0030: unknown main item tag 0x0 [ 1230.219430][ T5910] sony 0003:054C:0268.0030: unknown main item tag 0x0 [ 1230.226330][ T5910] sony 0003:054C:0268.0030: unknown main item tag 0x0 [ 1230.233559][ T5910] sony 0003:054C:0268.0030: unknown main item tag 0x0 [ 1230.240380][ T5910] sony 0003:054C:0268.0030: unknown main item tag 0x0 [ 1230.247353][ T5910] sony 0003:054C:0268.0030: unknown main item tag 0x0 [ 1230.262395][ T5910] sony 0003:054C:0268.0030: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0 [ 1230.278266][ T5910] sony 0003:054C:0268.0030: failed to claim input [ 1230.594581][ T5910] usb 4-1: USB disconnect, device number 10 [ 1231.674863][T23078] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1231.831778][T23078] usb 4-1: Using ep0 maxpacket: 32 [ 1231.840618][T23078] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1231.851049][T23078] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1231.860976][T23078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.869783][T23078] usb 4-1: Product: syz [ 1231.878332][T23078] usb 4-1: Manufacturer: syz [ 1231.883092][T23078] usb 4-1: SerialNumber: syz [ 1231.890181][T23078] usb 4-1: config 0 descriptor?? [ 1231.899851][T23078] gs_usb 4-1:0.0: Required endpoints not found [ 1231.925994][ T25] block nbd2: Possible stuck request ffff888025c97000: control (read@0,1024B). Runtime 180 seconds [ 1231.937458][ T25] block nbd2: Possible stuck request ffff888025c971c0: control (read@1024,1024B). Runtime 180 seconds [ 1231.951109][ T25] block nbd2: Possible stuck request ffff888025c97380: control (read@2048,1024B). Runtime 180 seconds [ 1231.962417][ T25] block nbd2: Possible stuck request ffff888025c97540: control (read@3072,1024B). Runtime 180 seconds [ 1232.844492][T23993] /dev/rnullb0: Can't open blockdev [ 1233.091720][T23078] usb 10-1: new high-speed USB device number 93 using dummy_hcd [ 1233.250213][T23078] usb 10-1: config 1 interface 0 altsetting 128 bulk endpoint 0x1 has invalid maxpacket 1023 [ 1233.264971][T23078] usb 10-1: config 1 interface 0 altsetting 128 bulk endpoint 0x82 has invalid maxpacket 1023 [ 1233.277073][T23078] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1233.287752][T23078] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1233.332770][T23078] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.340922][T23078] usb 10-1: Product: syz [ 1233.349598][T23078] usb 10-1: Manufacturer: syz [ 1233.356518][T23078] usb 10-1: SerialNumber: syz [ 1233.374366][T23993] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1233.391062][T23993] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 1234.973294][T18249] usb 4-1: USB disconnect, device number 11 [ 1235.482231][T18249] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1235.617696][T23078] usblp 10-1:1.0: usblp0: USB Bidirectional printer dev 93 if 0 alt 128 proto 3 vid 0x0525 pid 0xA4A8 [ 1235.645977][T23078] usb 10-1: USB disconnect, device number 93 [ 1235.667214][T18249] usb 4-1: config 0 has no interfaces? [ 1235.677367][T23078] usblp0: removed [ 1235.678118][T18249] usb 4-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e [ 1235.698095][T18249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.724532][T18249] usb 4-1: Product: syz [ 1235.737781][T18249] usb 4-1: Manufacturer: syz [ 1235.758923][T18249] usb 4-1: SerialNumber: syz [ 1235.768489][T18249] usb 4-1: config 0 descriptor?? [ 1236.007538][ T30] audit: type=1326 audit(6044117996.094:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24005 comm="syz.3.5695" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f362378e929 code=0x0 [ 1236.567952][T24027] pimreg: entered allmulticast mode [ 1236.652005][ T5910] usb 10-1: new high-speed USB device number 94 using dummy_hcd [ 1236.818449][ T5910] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.829164][ T5910] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1236.842573][ T5910] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.862086][ T5910] usb 10-1: config 0 descriptor?? [ 1236.877433][ T5910] pwc: Askey VC010 type 2 USB webcam detected. [ 1237.078331][ T5910] pwc: send_video_command error -71 [ 1237.083935][ T5910] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1237.091796][ T5910] Philips webcam 10-1:0.0: probe with driver Philips webcam failed with error -71 [ 1237.109365][ T5910] usb 10-1: USB disconnect, device number 94 [ 1237.591751][ T5910] usb 10-1: new high-speed USB device number 95 using dummy_hcd [ 1237.743764][ T5910] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.754287][ T5910] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1237.763674][ T5910] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.776589][ T5910] usb 10-1: config 0 descriptor?? [ 1237.791277][ T5910] pwc: Askey VC010 type 2 USB webcam detected. [ 1238.111535][ T5896] usb 4-1: USB disconnect, device number 12 [ 1238.218818][ T5910] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1238.240056][ T5910] pwc: recv_control_msg error -32 req 02 val 2700 [ 1238.271378][ T5910] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1238.280260][ T5910] pwc: recv_control_msg error -32 req 04 val 1000 [ 1238.298391][ T5910] pwc: recv_control_msg error -32 req 04 val 1300 [ 1238.307227][ T5910] pwc: recv_control_msg error -32 req 04 val 1400 [ 1238.316477][ T5910] pwc: recv_control_msg error -32 req 02 val 2000 [ 1238.529950][ T5910] pwc: recv_control_msg error -71 req 04 val 1500 [ 1238.551241][ T5910] pwc: recv_control_msg error -71 req 02 val 2500 [ 1238.558626][ T5910] pwc: recv_control_msg error -71 req 02 val 2400 [ 1238.567638][ T5910] pwc: recv_control_msg error -71 req 02 val 2600 [ 1238.574628][ T5910] pwc: recv_control_msg error -71 req 02 val 2900 [ 1238.582701][ T5910] pwc: recv_control_msg error -71 req 02 val 2800 [ 1238.590094][ T5910] pwc: recv_control_msg error -71 req 04 val 1100 [ 1238.599341][ T5910] pwc: recv_control_msg error -71 req 04 val 1200 [ 1238.627852][ T5910] pwc: Registered as video103. [ 1238.662540][ T5910] input: PWC snapshot button as /devices/platform/dummy_hcd.9/usb10/10-1/input/input160 [ 1238.692236][ T5910] usb 10-1: USB disconnect, device number 95 [ 1238.976797][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.771839][ T5896] usb 10-1: new high-speed USB device number 96 using dummy_hcd [ 1239.932106][ T5896] usb 10-1: Using ep0 maxpacket: 16 [ 1239.953343][ T5896] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.964021][ T5896] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1239.985587][ T5896] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1240.000021][ T5896] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.021176][ T5896] usb 10-1: Product: syz [ 1240.040980][ T5896] usb 10-1: Manufacturer: syz [ 1240.051420][ T5896] usb 10-1: SerialNumber: syz [ 1240.597463][T24103] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5726'. [ 1240.892629][ T11] block nbd0: Possible stuck request ffff888025c15080: control (read@0,1024B). Runtime 930 seconds [ 1240.903486][ T11] block nbd0: Possible stuck request ffff888025c15240: control (read@1024,1024B). Runtime 930 seconds [ 1240.915999][ T11] block nbd0: Possible stuck request ffff888025c15400: control (read@2048,1024B). Runtime 930 seconds [ 1240.927098][ T11] block nbd0: Possible stuck request ffff888025c155c0: control (read@3072,1024B). Runtime 930 seconds [ 1241.524161][ T25] block nbd1: Possible stuck request ffff888025c6e000: control (read@0,1024B). Runtime 930 seconds [ 1241.535245][ T25] block nbd1: Possible stuck request ffff888025c6e1c0: control (read@1024,1024B). Runtime 930 seconds [ 1241.557068][ T25] block nbd1: Possible stuck request ffff888025c6e380: control (read@2048,1024B). Runtime 930 seconds [ 1241.569972][ T25] block nbd1: Possible stuck request ffff888025c6e540: control (read@3072,1024B). Runtime 930 seconds [ 1242.198994][T24124] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5734'. [ 1242.811075][ T5896] usb 10-1: invalid UAC_HEADER (v1) [ 1242.885558][ T5896] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1242.900914][ T5896] usb 10-1: USB disconnect, device number 96 [ 1242.956047][T10562] udevd[10562]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1243.502912][ T5910] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1243.642451][ T5910] usb 4-1: device descriptor read/64, error -71 [ 1243.893383][ T5910] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1244.061894][ T5910] usb 4-1: device descriptor read/64, error -71 [ 1244.188781][ T5910] usb usb4-port1: attempt power cycle [ 1244.269906][T24157] FAULT_INJECTION: forcing a failure. [ 1244.269906][T24157] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.285911][T24157] CPU: 1 UID: 0 PID: 24157 Comm: syz.7.5745 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1244.285940][T24157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1244.285954][T24157] Call Trace: [ 1244.285963][T24157] [ 1244.285972][T24157] dump_stack_lvl+0x189/0x250 [ 1244.286008][T24157] ? __pfx____ratelimit+0x10/0x10 [ 1244.286029][T24157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1244.286059][T24157] ? __pfx__printk+0x10/0x10 [ 1244.286092][T24157] ? __pfx___might_resched+0x10/0x10 [ 1244.286119][T24157] ? fs_reclaim_acquire+0x7d/0x100 [ 1244.286148][T24157] should_fail_ex+0x414/0x560 [ 1244.286185][T24157] should_failslab+0xa8/0x100 [ 1244.286208][T24157] __kmalloc_noprof+0xcb/0x4f0 [ 1244.286238][T24157] ? tomoyo_mount_permission+0x27a/0x970 [ 1244.286270][T24157] ? tomoyo_encode+0x28b/0x550 [ 1244.286302][T24157] tomoyo_encode+0x28b/0x550 [ 1244.286332][T24157] ? tomoyo_mount_permission+0x27a/0x970 [ 1244.286360][T24157] tomoyo_mount_permission+0x331/0x970 [ 1244.286394][T24157] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 1244.286485][T24157] security_sb_mount+0xec/0x350 [ 1244.286517][T24157] path_mount+0xbc/0xfe0 [ 1244.286542][T24157] ? user_path_at+0x44/0x60 [ 1244.286558][T24157] ? kmem_cache_free+0x18f/0x400 [ 1244.286599][T24157] __se_sys_mount+0x317/0x410 [ 1244.286639][T24157] ? __pfx___se_sys_mount+0x10/0x10 [ 1244.286674][T24157] ? do_syscall_64+0xbe/0x3b0 [ 1244.286694][T24157] ? __x64_sys_mount+0x20/0xc0 [ 1244.286724][T24157] do_syscall_64+0xfa/0x3b0 [ 1244.286744][T24157] ? lockdep_hardirqs_on+0x9c/0x150 [ 1244.286765][T24157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.286786][T24157] ? clear_bhb_loop+0x60/0xb0 [ 1244.286812][T24157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.286832][T24157] RIP: 0033:0x7fbebc98e929 [ 1244.286851][T24157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1244.286869][T24157] RSP: 002b:00007fbebd744038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1244.286891][T24157] RAX: ffffffffffffffda RBX: 00007fbebcbb5fa0 RCX: 00007fbebc98e929 [ 1244.286906][T24157] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000200000000000 [ 1244.286921][T24157] RBP: 00007fbebd744090 R08: 0000000000000000 R09: 0000000000000000 [ 1244.286934][T24157] R10: 0000000000208002 R11: 0000000000000246 R12: 0000000000000001 [ 1244.286946][T24157] R13: 0000000000000001 R14: 00007fbebcbb5fa0 R15: 00007ffd2780b778 [ 1244.286979][T24157] [ 1244.607704][T24160] netlink: 148 bytes leftover after parsing attributes in process `syz.8.5746'. [ 1244.674989][ T5910] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1244.732362][ T5910] usb 4-1: device descriptor read/8, error -71 [ 1244.973660][ T5910] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1245.002308][ T5910] usb 4-1: device descriptor read/8, error -71 [ 1245.069932][T24170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1245.121959][ T5910] usb usb4-port1: unable to enumerate USB device [ 1246.051785][ T5910] usb 10-1: new high-speed USB device number 97 using dummy_hcd [ 1246.244571][ T5910] usb 10-1: Using ep0 maxpacket: 16 [ 1246.256788][ T5910] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1246.270892][ T5910] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.301698][ T5910] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1246.325047][ T5910] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1246.334780][ T5910] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.361714][ T5910] usb 10-1: Product: syz [ 1246.368616][ T5910] usb 10-1: Manufacturer: syz [ 1246.379275][ T5910] usb 10-1: SerialNumber: syz [ 1246.827852][ T5910] usb 10-1: 0:2 : does not exist [ 1247.232159][T19001] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 1247.288831][T24212] /dev/rnullb0: Can't lookup blockdev [ 1247.361746][T19001] usb 4-1: device descriptor read/64, error -71 [ 1247.601816][T19001] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 1247.741738][T19001] usb 4-1: device descriptor read/64, error -71 [ 1247.858122][T19001] usb usb4-port1: attempt power cycle [ 1248.005425][T24223] binder: BINDER_SET_CONTEXT_MGR already set [ 1248.014142][T24223] binder: 24222:24223 ioctl 4018620d 2000000000c0 returned -16 [ 1248.028094][T24223] binder: BINDER_SET_CONTEXT_MGR already set [ 1248.035624][T24223] binder: 24222:24223 ioctl 4018620d 200000000040 returned -16 [ 1248.201799][T19001] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 1248.223474][T19001] usb 4-1: device descriptor read/8, error -71 [ 1248.461739][T19001] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 1248.482273][T19001] usb 4-1: device descriptor read/8, error -71 [ 1248.605692][T19001] usb usb4-port1: unable to enumerate USB device [ 1248.750531][T24233] netlink: 'syz.8.5774': attribute type 4 has an invalid length. [ 1248.831231][T19001] usb 10-1: USB disconnect, device number 97 [ 1248.994090][T24241] netlink: 168 bytes leftover after parsing attributes in process `syz.8.5777'. [ 1249.904311][T23078] usb 10-1: new high-speed USB device number 98 using dummy_hcd [ 1250.071079][T23078] usb 10-1: Using ep0 maxpacket: 16 [ 1250.095351][T23078] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1250.111742][T23078] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.128031][T23078] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1250.141422][T23078] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1250.155923][T23078] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.182847][T23078] usb 10-1: Product: syz [ 1250.190070][T23078] usb 10-1: Manufacturer: syz [ 1250.198922][T23078] usb 10-1: SerialNumber: syz [ 1250.693714][ C0] raw-gadget.2 gadget.9: ignoring, device is not running [ 1250.702371][T23078] usb 10-1: 0:2 : does not exist [ 1250.713787][T23078] usb 10-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1250.739871][T23078] usb 10-1: USB disconnect, device number 98 [ 1250.775721][T10562] udevd[10562]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1251.385419][T24303] tmpfs: Unknown parameter 'usrquota' [ 1251.751832][ T894] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1251.892022][T19001] usb 10-1: new high-speed USB device number 99 using dummy_hcd [ 1251.931829][ T894] usb 4-1: Using ep0 maxpacket: 16 [ 1251.939594][ T894] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1251.955714][ T894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1251.983353][ T894] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1251.997069][ T894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.020241][ T894] usb 4-1: Product: syz [ 1252.025482][ T894] usb 4-1: Manufacturer: syz [ 1252.030142][ T894] usb 4-1: SerialNumber: syz [ 1252.043671][ T894] usb 4-1: config 0 descriptor?? [ 1252.053003][T19001] usb 10-1: Using ep0 maxpacket: 8 [ 1252.060521][ T894] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1252.076227][T19001] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1252.089940][ T894] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1252.093406][T19001] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.117061][T19001] usb 10-1: Product: syz [ 1252.121394][T19001] usb 10-1: Manufacturer: syz [ 1252.147661][T19001] usb 10-1: SerialNumber: syz [ 1252.178094][T19001] usb 10-1: config 0 descriptor?? [ 1252.293075][T24328] netlink: 'syz.8.5812': attribute type 4 has an invalid length. [ 1252.399777][T19001] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1252.680959][ T894] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1252.693337][ T894] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1253.322170][ T894] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 1253.330847][ T894] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 1253.345174][T24344] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1253.521904][ T894] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 1253.530602][ T894] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 1253.706776][ T894] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 1253.716490][ T894] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 1253.723733][ T894] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 1253.730701][ T894] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 1253.741331][ T894] usb 4-1: USB disconnect, device number 21 [ 1253.820732][T19001] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1253.837702][T19001] usb 10-1: USB disconnect, device number 99 [ 1254.561192][T24356] No control pipe specified [ 1254.596380][T24361] No control pipe specified [ 1254.804931][T19001] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1254.991688][T19001] usb 4-1: Using ep0 maxpacket: 16 [ 1255.004339][T19001] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1255.015772][T19001] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.040125][T19001] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1255.052815][T19001] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1255.062344][T19001] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.070375][T19001] usb 4-1: Product: syz [ 1255.074654][T19001] usb 4-1: Manufacturer: syz [ 1255.079324][T19001] usb 4-1: SerialNumber: syz [ 1255.506387][T19001] usb 4-1: 0:2 : does not exist [ 1255.515642][T19001] usb 4-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1255.537983][T19001] usb 4-1: USB disconnect, device number 22 [ 1255.579670][T10562] udevd[10562]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1255.901802][T21127] usb 10-1: new high-speed USB device number 100 using dummy_hcd [ 1256.061871][T21127] usb 10-1: Using ep0 maxpacket: 8 [ 1256.079328][T21127] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1256.088876][T21127] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1256.097432][T21127] usb 10-1: Product: syz [ 1256.101881][T21127] usb 10-1: Manufacturer: syz [ 1256.110600][T21127] usb 10-1: SerialNumber: syz [ 1256.128383][T21127] usb 10-1: config 0 descriptor?? [ 1256.183960][T24380] FAULT_INJECTION: forcing a failure. [ 1256.183960][T24380] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1256.197441][T24380] CPU: 1 UID: 0 PID: 24380 Comm: syz.3.5832 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1256.197472][T24380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1256.197485][T24380] Call Trace: [ 1256.197495][T24380] [ 1256.197504][T24380] dump_stack_lvl+0x189/0x250 [ 1256.197540][T24380] ? __pfx____ratelimit+0x10/0x10 [ 1256.197562][T24380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1256.197591][T24380] ? __pfx__printk+0x10/0x10 [ 1256.197614][T24380] ? fs_reclaim_acquire+0x7d/0x100 [ 1256.197639][T24380] should_fail_ex+0x414/0x560 [ 1256.197679][T24380] prepare_alloc_pages+0x213/0x610 [ 1256.197710][T24380] __alloc_frozen_pages_noprof+0x123/0x370 [ 1256.197741][T24380] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1256.197762][T24380] ? hidp_connection_add+0x366/0x1a50 [ 1256.197794][T24380] ? policy_nodemask+0x27c/0x720 [ 1256.197827][T24380] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1256.197856][T24380] alloc_pages_mpol+0x232/0x4a0 [ 1256.197896][T24380] ___kmalloc_large_node+0x5f/0x1b0 [ 1256.197923][T24380] __kmalloc_large_noprof+0x1a/0x90 [ 1256.197947][T24380] hidp_connection_add+0x3c6/0x1a50 [ 1256.197993][T24380] hidp_sock_ioctl+0x36c/0x560 [ 1256.198016][T24380] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 1256.198073][T24380] ? do_vfs_ioctl+0xbe8/0x1430 [ 1256.198098][T24380] sock_do_ioctl+0xdc/0x300 [ 1256.198134][T24380] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1256.198163][T24380] ? __lock_acquire+0xab9/0xd20 [ 1256.198203][T24380] sock_ioctl+0x576/0x790 [ 1256.198226][T24380] ? __pfx_sock_ioctl+0x10/0x10 [ 1256.198248][T24380] ? __fget_files+0x2a/0x420 [ 1256.198273][T24380] ? __fget_files+0x3a0/0x420 [ 1256.198300][T24380] ? __fget_files+0x2a/0x420 [ 1256.198330][T24380] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1256.198360][T24380] ? __pfx_sock_ioctl+0x10/0x10 [ 1256.198388][T24380] __se_sys_ioctl+0xfc/0x170 [ 1256.198410][T24380] do_syscall_64+0xfa/0x3b0 [ 1256.198429][T24380] ? lockdep_hardirqs_on+0x9c/0x150 [ 1256.198450][T24380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.198472][T24380] ? clear_bhb_loop+0x60/0xb0 [ 1256.198497][T24380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.198517][T24380] RIP: 0033:0x7f362378e929 [ 1256.198535][T24380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1256.198548][T24380] RSP: 002b:00007f36245f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1256.198564][T24380] RAX: ffffffffffffffda RBX: 00007f36239b5fa0 RCX: 00007f362378e929 [ 1256.198575][T24380] RDX: 0000200000000340 RSI: 00000000400448c8 RDI: 0000000000000004 [ 1256.198591][T24380] RBP: 00007f36245f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.198604][T24380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1256.198617][T24380] R13: 0000000000000000 R14: 00007f36239b5fa0 R15: 00007ffe91377318 [ 1256.198648][T24380] [ 1256.511738][T21127] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1256.711109][T24388] FAULT_INJECTION: forcing a failure. [ 1256.711109][T24388] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.726632][T24388] CPU: 1 UID: 0 PID: 24388 Comm: syz.3.5836 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1256.726664][T24388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1256.726677][T24388] Call Trace: [ 1256.726686][T24388] [ 1256.726695][T24388] dump_stack_lvl+0x189/0x250 [ 1256.726729][T24388] ? __pfx____ratelimit+0x10/0x10 [ 1256.726752][T24388] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1256.726782][T24388] ? __pfx__printk+0x10/0x10 [ 1256.726815][T24388] ? __pfx___might_resched+0x10/0x10 [ 1256.726841][T24388] ? fs_reclaim_acquire+0x7d/0x100 [ 1256.726869][T24388] should_fail_ex+0x414/0x560 [ 1256.726908][T24388] should_failslab+0xa8/0x100 [ 1256.726930][T24388] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1256.726963][T24388] ? __alloc_skb+0x112/0x2d0 [ 1256.726989][T24388] __alloc_skb+0x112/0x2d0 [ 1256.727017][T24388] alloc_skb_with_frags+0xca/0x890 [ 1256.727053][T24388] ? is_bpf_text_address+0x26/0x2b0 [ 1256.727083][T24388] sock_alloc_send_pskb+0x857/0x990 [ 1256.727111][T24388] ? __lock_acquire+0xab9/0xd20 [ 1256.727154][T24388] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1256.727185][T24388] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1256.727217][T24388] ? lockdep_hardirqs_on+0x9c/0x150 [ 1256.727238][T24388] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1256.727269][T24388] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1256.727305][T24388] __ip_append_data+0x2ce8/0x40c0 [ 1256.727357][T24388] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1256.727408][T24388] ? __pfx___ip_append_data+0x10/0x10 [ 1256.727435][T24388] ? ipv4_mtu+0x4b2/0x5c0 [ 1256.727463][T24388] ? ip_setup_cork+0x577/0x9a0 [ 1256.727501][T24388] ip_make_skb+0x1de/0x3f0 [ 1256.727536][T24388] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1256.727566][T24388] ? __pfx_ip_make_skb+0x10/0x10 [ 1256.727616][T24388] udp_sendmsg+0x1925/0x2300 [ 1256.727654][T24388] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1256.727688][T24388] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 1256.727717][T24388] ? __pfx_udp_sendmsg+0x10/0x10 [ 1256.727756][T24388] ? count_memcg_event_mm+0x21/0x260 [ 1256.727793][T24388] ? count_memcg_event_mm+0x21/0x260 [ 1256.727843][T24388] ? sock_rps_record_flow+0x19/0x410 [ 1256.727877][T24388] ? inet_sendmsg+0x29c/0x370 [ 1256.727906][T24388] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1256.727936][T24388] __sock_sendmsg+0x19c/0x270 [ 1256.727973][T24388] ____sys_sendmsg+0x52d/0x830 [ 1256.728005][T24388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1256.728041][T24388] ? import_iovec+0x74/0xa0 [ 1256.728074][T24388] ___sys_sendmsg+0x21f/0x2a0 [ 1256.728103][T24388] ? __pfx____sys_sendmsg+0x10/0x10 [ 1256.728169][T24388] ? __fget_files+0x2a/0x420 [ 1256.728196][T24388] ? __fget_files+0x3a0/0x420 [ 1256.728235][T24388] __sys_sendmmsg+0x227/0x430 [ 1256.728267][T24388] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1256.728292][T24388] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 1256.728344][T24388] ? ksys_write+0x22a/0x250 [ 1256.728370][T24388] ? __pfx_ksys_write+0x10/0x10 [ 1256.728391][T24388] ? rcu_is_watching+0x15/0xb0 [ 1256.728425][T24388] __x64_sys_sendmmsg+0xa0/0xc0 [ 1256.728454][T24388] do_syscall_64+0xfa/0x3b0 [ 1256.728483][T24388] ? lockdep_hardirqs_on+0x9c/0x150 [ 1256.728503][T24388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.728524][T24388] ? clear_bhb_loop+0x60/0xb0 [ 1256.728549][T24388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.728570][T24388] RIP: 0033:0x7f362378e929 [ 1256.728590][T24388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1256.728608][T24388] RSP: 002b:00007f36245f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1256.728630][T24388] RAX: ffffffffffffffda RBX: 00007f36239b5fa0 RCX: 00007f362378e929 [ 1256.728646][T24388] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 1256.728659][T24388] RBP: 00007f36245f5090 R08: 0000000000000000 R09: 0000000000000000 [ 1256.728672][T24388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1256.728684][T24388] R13: 0000000000000000 R14: 00007f36239b5fa0 R15: 00007ffe91377318 [ 1256.728716][T24388] [ 1257.139150][ T5896] IPVS: starting estimator thread 0... [ 1257.241945][T24389] IPVS: using max 26 ests per chain, 62400 per kthread [ 1257.309904][T24394] syzkaller0: entered promiscuous mode [ 1257.316555][T24394] syzkaller0: entered allmulticast mode [ 1258.174234][T21127] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1258.186646][T21127] usb 10-1: USB disconnect, device number 100 [ 1261.235429][ T5215] udevd[5215]: worker [5856] /devices/virtual/block/nbd0 timeout; kill it [ 1261.245605][ T5215] udevd[5215]: seq 16773 '/devices/virtual/block/nbd0' killed [ 1261.254955][ T5215] udevd[5215]: worker [5843] /devices/virtual/block/nbd2 timeout; kill it [ 1261.266480][ T5215] udevd[5215]: seq 35746 '/devices/virtual/block/nbd2' killed [ 1261.275154][ T5215] udevd[5215]: worker [5857] /devices/virtual/block/nbd1 timeout; kill it [ 1261.284383][ T5215] udevd[5215]: seq 16786 '/devices/virtual/block/nbd1' killed [ 1262.004157][ T25] block nbd2: Possible stuck request ffff888025c97000: control (read@0,1024B). Runtime 210 seconds [ 1262.015143][ T25] block nbd2: Possible stuck request ffff888025c971c0: control (read@1024,1024B). Runtime 210 seconds [ 1262.026195][ T25] block nbd2: Possible stuck request ffff888025c97380: control (read@2048,1024B). Runtime 210 seconds [ 1262.037265][ T25] block nbd2: Possible stuck request ffff888025c97540: control (read@3072,1024B). Runtime 210 seconds [ 1268.435063][T24440] FAT-fs (rnullb0): bogus number of reserved sectors [ 1268.442173][T24440] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 1268.588623][T24444] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5853'. [ 1269.172174][T24458] netlink: 232 bytes leftover after parsing attributes in process `syz.3.5855'. [ 1269.206602][T24458] netlink: 'syz.3.5855': attribute type 4 has an invalid length. [ 1269.229641][T24458] netlink: 'syz.3.5855': attribute type 4 has an invalid length. [ 1270.113123][T24463] netlink: 'syz.8.5857': attribute type 2 has an invalid length. [ 1270.120923][T24463] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5857'. [ 1270.487284][T24477] 9pnet_fd: Insufficient options for proto=fd [ 1270.581197][T24477] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5862'. [ 1270.656668][T24480] gfs2: not a GFS2 filesystem [ 1270.793151][T24482] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5864'. [ 1270.966718][ T11] block nbd0: Possible stuck request ffff888025c15080: control (read@0,1024B). Runtime 960 seconds [ 1270.978385][ T11] block nbd0: Possible stuck request ffff888025c15240: control (read@1024,1024B). Runtime 960 seconds [ 1270.991044][ T11] block nbd0: Possible stuck request ffff888025c15400: control (read@2048,1024B). Runtime 960 seconds [ 1271.002260][ T11] block nbd0: Possible stuck request ffff888025c155c0: control (read@3072,1024B). Runtime 960 seconds [ 1271.031725][T23078] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1271.149318][T24497] XFS (rnullb0): Invalid superblock magic number [ 1271.191299][T23078] usb 4-1: Using ep0 maxpacket: 8 [ 1271.205599][T23078] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1271.231641][T23078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.239707][T23078] usb 4-1: Product: syz [ 1271.246717][T23078] usb 4-1: Manufacturer: syz [ 1271.251376][T23078] usb 4-1: SerialNumber: syz [ 1271.268869][T23078] usb 4-1: config 0 descriptor?? [ 1271.496500][T23078] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1271.611501][ T25] block nbd1: Possible stuck request ffff888025c6e000: control (read@0,1024B). Runtime 960 seconds [ 1271.623931][ T25] block nbd1: Possible stuck request ffff888025c6e1c0: control (read@1024,1024B). Runtime 960 seconds [ 1271.635122][ T25] block nbd1: Possible stuck request ffff888025c6e380: control (read@2048,1024B). Runtime 960 seconds [ 1271.647386][ T25] block nbd1: Possible stuck request ffff888025c6e540: control (read@3072,1024B). Runtime 960 seconds [ 1272.065665][T24525] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5878'. [ 1272.229565][T24532] nbd: couldn't find a device at index -373156329 [ 1272.318159][T24534] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5880'. [ 1272.603448][T24546] syzkaller1: entered promiscuous mode [ 1272.609281][T24546] syzkaller1: entered allmulticast mode [ 1272.664993][T24548] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5887'. [ 1272.917234][T23078] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1272.960879][T23078] usb 4-1: USB disconnect, device number 23 [ 1273.034037][T24561] FAULT_INJECTION: forcing a failure. [ 1273.034037][T24561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1273.049431][T24561] CPU: 1 UID: 0 PID: 24561 Comm: syz.9.5891 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1273.049462][T24561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1273.049476][T24561] Call Trace: [ 1273.049484][T24561] [ 1273.049494][T24561] dump_stack_lvl+0x189/0x250 [ 1273.049529][T24561] ? __pfx____ratelimit+0x10/0x10 [ 1273.049551][T24561] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1273.049580][T24561] ? __pfx__printk+0x10/0x10 [ 1273.049611][T24561] ? __might_fault+0xb0/0x130 [ 1273.049656][T24561] should_fail_ex+0x414/0x560 [ 1273.049695][T24561] _copy_from_iter+0x1db/0x16f0 [ 1273.049726][T24561] ? rcu_is_watching+0x15/0xb0 [ 1273.049755][T24561] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1273.049789][T24561] ? __pfx__copy_from_iter+0x10/0x10 [ 1273.049816][T24561] ? __build_skb_around+0x257/0x3e0 [ 1273.049844][T24561] ? netlink_sendmsg+0x642/0xb30 [ 1273.049866][T24561] ? skb_put+0x11b/0x210 [ 1273.049893][T24561] netlink_sendmsg+0x6b2/0xb30 [ 1273.049925][T24561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1273.049953][T24561] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1273.049982][T24561] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1273.050008][T24561] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1273.050033][T24561] __sock_sendmsg+0x21c/0x270 [ 1273.050069][T24561] ____sys_sendmsg+0x505/0x830 [ 1273.050100][T24561] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1273.050137][T24561] ? import_iovec+0x74/0xa0 [ 1273.050170][T24561] ___sys_sendmsg+0x21f/0x2a0 [ 1273.050205][T24561] ? __pfx____sys_sendmsg+0x10/0x10 [ 1273.050271][T24561] ? __fget_files+0x2a/0x420 [ 1273.050297][T24561] ? __fget_files+0x3a0/0x420 [ 1273.050335][T24561] __x64_sys_sendmsg+0x19b/0x260 [ 1273.050364][T24561] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1273.050400][T24561] ? __pfx_ksys_write+0x10/0x10 [ 1273.050430][T24561] ? do_syscall_64+0xbe/0x3b0 [ 1273.050457][T24561] do_syscall_64+0xfa/0x3b0 [ 1273.050478][T24561] ? lockdep_hardirqs_on+0x9c/0x150 [ 1273.050498][T24561] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.050519][T24561] ? clear_bhb_loop+0x60/0xb0 [ 1273.050545][T24561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.050565][T24561] RIP: 0033:0x7fbea898e929 [ 1273.050584][T24561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1273.050601][T24561] RSP: 002b:00007fbea98bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1273.050622][T24561] RAX: ffffffffffffffda RBX: 00007fbea8bb5fa0 RCX: 00007fbea898e929 [ 1273.050638][T24561] RDX: 000000002000c0c0 RSI: 0000200000000e40 RDI: 0000000000000004 [ 1273.050652][T24561] RBP: 00007fbea98bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1273.050666][T24561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1273.050679][T24561] R13: 0000000000000000 R14: 00007fbea8bb5fa0 R15: 00007ffc06610f28 [ 1273.050711][T24561] [ 1273.409112][T24563] No control pipe specified [ 1273.467522][T24565] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5893'. [ 1273.504996][T24567] syzkaller1: entered promiscuous mode [ 1273.510547][T24567] syzkaller1: entered allmulticast mode [ 1273.578572][T24569] Can't find a SQUASHFS superblock on rnullb0 [ 1273.789310][T24573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5896'. [ 1274.021718][ T5910] usb 10-1: new high-speed USB device number 101 using dummy_hcd [ 1274.202365][ T5910] usb 10-1: no configurations [ 1274.207114][ T5910] usb 10-1: can't read configurations, error -22 [ 1274.361747][ T5910] usb 10-1: new high-speed USB device number 102 using dummy_hcd [ 1274.544065][ T5910] usb 10-1: no configurations [ 1274.548864][ T5910] usb 10-1: can't read configurations, error -22 [ 1274.556130][ T5910] usb usb10-port1: attempt power cycle [ 1274.635090][T24586] FAULT_INJECTION: forcing a failure. [ 1274.635090][T24586] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.648319][T24586] CPU: 1 UID: 0 PID: 24586 Comm: syz.7.5901 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1274.648348][T24586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1274.648363][T24586] Call Trace: [ 1274.648372][T24586] [ 1274.648382][T24586] dump_stack_lvl+0x189/0x250 [ 1274.648418][T24586] ? __pfx____ratelimit+0x10/0x10 [ 1274.648441][T24586] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1274.648471][T24586] ? __pfx__printk+0x10/0x10 [ 1274.648508][T24586] ? __lock_acquire+0xab9/0xd20 [ 1274.648539][T24586] should_fail_ex+0x414/0x560 [ 1274.648578][T24586] should_failslab+0xa8/0x100 [ 1274.648602][T24586] kmem_cache_alloc_noprof+0x73/0x3c0 [ 1274.648634][T24586] ? skb_clone+0x212/0x3a0 [ 1274.648658][T24586] ? run_filter+0x23/0x270 [ 1274.648684][T24586] skb_clone+0x212/0x3a0 [ 1274.648706][T24586] ? packet_rcv+0x567/0x1590 [ 1274.648728][T24586] packet_rcv+0x6d6/0x1590 [ 1274.648753][T24586] ? __pfx_packet_rcv+0x10/0x10 [ 1274.648784][T24586] __netif_receive_skb_core+0x3104/0x4010 [ 1274.648825][T24586] ? __pfx___skb_flow_dissect+0x10/0x10 [ 1274.648851][T24586] ? inet6_lookup_reuseport+0x7d/0x150 [ 1274.648872][T24586] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1274.648899][T24586] ? udp6_lib_lookup2+0x177/0x4d0 [ 1274.648918][T24586] ? udp6_lib_lookup2+0x4ce/0x4d0 [ 1274.648943][T24586] ? __udp6_lib_lookup+0x7e9/0xa30 [ 1274.648960][T24586] ? __udp6_lib_lookup+0x8c1/0xa30 [ 1274.648988][T24586] __netif_receive_skb_list_core+0x23f/0x800 [ 1274.649027][T24586] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 1274.649058][T24586] ? __pfx_udp6_gro_receive+0x10/0x10 [ 1274.649094][T24586] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 1274.649119][T24586] netif_receive_skb_list_internal+0x975/0xcc0 [ 1274.649149][T24586] ? netif_receive_skb_list_internal+0x4fd/0xcc0 [ 1274.649179][T24586] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 1274.649204][T24586] ? dev_gro_receive+0x10f4/0x23b0 [ 1274.649221][T24586] ? dev_gro_receive+0x1020/0x23b0 [ 1274.649238][T24586] ? eth_type_trans+0x3a8/0x760 [ 1274.649268][T24586] napi_complete_done+0x2f2/0x7c0 [ 1274.649300][T24586] ? __pfx_napi_complete_done+0x10/0x10 [ 1274.649325][T24586] ? rcu_is_watching+0x15/0xb0 [ 1274.649347][T24586] ? napi_gro_frags+0x975/0x1030 [ 1274.649373][T24586] ? tun_get_user+0x266c/0x3e20 [ 1274.649395][T24586] tun_get_user+0x28d5/0x3e20 [ 1274.649428][T24586] ? tun_get_user+0x266c/0x3e20 [ 1274.649450][T24586] ? aa_file_perm+0x13e/0x11b0 [ 1274.649474][T24586] ? aa_file_perm+0x3ed/0x11b0 [ 1274.649497][T24586] ? __pfx_tun_get_user+0x10/0x10 [ 1274.649528][T24586] ? __lock_acquire+0xab9/0xd20 [ 1274.649552][T24586] ? ref_tracker_alloc+0x318/0x460 [ 1274.649567][T24586] ? __lock_acquire+0xab9/0xd20 [ 1274.649588][T24586] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1274.649610][T24586] ? tun_get+0x1c/0x2f0 [ 1274.649635][T24586] ? tun_get+0x1c/0x2f0 [ 1274.649656][T24586] ? tun_get+0x1c/0x2f0 [ 1274.649681][T24586] tun_chr_write_iter+0x113/0x200 [ 1274.649705][T24586] vfs_write+0x54b/0xa90 [ 1274.649728][T24586] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1274.649750][T24586] ? __pfx_vfs_write+0x10/0x10 [ 1274.649778][T24586] ? __fget_files+0x2a/0x420 [ 1274.649808][T24586] ksys_write+0x145/0x250 [ 1274.649830][T24586] ? __pfx_ksys_write+0x10/0x10 [ 1274.649847][T24586] ? rcu_is_watching+0x15/0xb0 [ 1274.649873][T24586] ? do_syscall_64+0xbe/0x3b0 [ 1274.649895][T24586] do_syscall_64+0xfa/0x3b0 [ 1274.649912][T24586] ? lockdep_hardirqs_on+0x9c/0x150 [ 1274.649928][T24586] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.649945][T24586] ? clear_bhb_loop+0x60/0xb0 [ 1274.649966][T24586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.649982][T24586] RIP: 0033:0x7fbebc98e929 [ 1274.649998][T24586] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1274.650013][T24586] RSP: 002b:00007fbebd744038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1274.650032][T24586] RAX: ffffffffffffffda RBX: 00007fbebcbb5fa0 RCX: 00007fbebc98e929 [ 1274.650044][T24586] RDX: 000000000000004b RSI: 0000200000000200 RDI: 0000000000000005 [ 1274.650055][T24586] RBP: 00007fbebd744090 R08: 0000000000000000 R09: 0000000000000000 [ 1274.650071][T24586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1274.650082][T24586] R13: 0000000000000000 R14: 00007fbebcbb5fa0 R15: 00007ffd2780b778 [ 1274.650107][T24586] [ 1275.232773][T23078] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1275.371718][ T5910] usb 10-1: new high-speed USB device number 103 using dummy_hcd [ 1275.386537][T23078] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 1275.399762][T23078] usb 4-1: config 0 has no interface number 0 [ 1275.403422][ T5910] usb 10-1: no configurations [ 1275.410736][ T5910] usb 10-1: can't read configurations, error -22 [ 1275.421808][T23078] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1275.438643][T23078] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1275.449069][T23078] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1275.469951][T23078] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1275.481223][T23078] usb 4-1: config 0 descriptor?? [ 1275.551800][ T5910] usb 10-1: new high-speed USB device number 104 using dummy_hcd [ 1275.584654][ T5910] usb 10-1: no configurations [ 1275.589406][ T5910] usb 10-1: can't read configurations, error -22 [ 1275.602716][ T5910] usb usb10-port1: unable to enumerate USB device [ 1275.928997][T23078] prodikeys 0003:041E:2801.0031: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 1275.978242][T23078] hid_prodikeys: hid-prodikeys: failed to find output report [ 1275.978242][T23078] [ 1276.189564][T24610] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5907'. [ 1276.205028][T24610] overlayfs: failed to clone upperpath [ 1276.474518][T24626] netlink: 'syz.8.5911': attribute type 2 has an invalid length. [ 1276.485188][T24626] netlink: 132 bytes leftover after parsing attributes in process `syz.8.5911'. [ 1277.528912][T24646] NILFS (rnullb0): couldn't find nilfs on the device [ 1277.545868][T24646] NILFS (rnullb0): couldn't find nilfs on the device [ 1277.695306][T23078] usb 4-1: USB disconnect, device number 24 [ 1278.213583][T24663] "syz.8.5922" (24663) uses obsolete ecb(arc4) skcipher [ 1278.351660][T23078] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1278.501760][T23078] usb 4-1: Using ep0 maxpacket: 8 [ 1278.510935][T23078] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1278.520138][T23078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1278.528246][T23078] usb 4-1: Product: syz [ 1278.534177][T23078] usb 4-1: Manufacturer: syz [ 1278.538816][T23078] usb 4-1: SerialNumber: syz [ 1278.546034][T23078] usb 4-1: config 0 descriptor?? [ 1278.762219][T23078] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1278.898397][T24683] syzkaller1: entered promiscuous mode [ 1278.904773][T24683] syzkaller1: entered allmulticast mode [ 1279.813742][T24716] syz.7.5936(24716): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1279.860526][T24718] 9p filesystem being mounted at /418/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 1279.996881][T24714] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1280.006399][T24714] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1280.036861][T24714] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1280.069472][T24714] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1280.074743][T24723] FAULT_INJECTION: forcing a failure. [ 1280.074743][T24723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1280.090177][T24723] CPU: 0 UID: 0 PID: 24723 Comm: syz.9.5940 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1280.090203][T24723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1280.090215][T24723] Call Trace: [ 1280.090223][T24723] [ 1280.090231][T24723] dump_stack_lvl+0x189/0x250 [ 1280.090262][T24723] ? __pfx____ratelimit+0x10/0x10 [ 1280.090281][T24723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1280.090312][T24723] ? __pfx__printk+0x10/0x10 [ 1280.090339][T24723] ? __might_fault+0xb0/0x130 [ 1280.090377][T24723] should_fail_ex+0x414/0x560 [ 1280.090409][T24723] _copy_from_iter+0x1db/0x16f0 [ 1280.090435][T24723] ? rcu_is_watching+0x15/0xb0 [ 1280.090458][T24723] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1280.090487][T24723] ? __pfx__copy_from_iter+0x10/0x10 [ 1280.090508][T24723] ? __build_skb_around+0x257/0x3e0 [ 1280.090538][T24723] ? netlink_sendmsg+0x642/0xb30 [ 1280.090556][T24723] ? skb_put+0x11b/0x210 [ 1280.090578][T24723] netlink_sendmsg+0x6b2/0xb30 [ 1280.090606][T24723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1280.090629][T24723] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1280.090654][T24723] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1280.090677][T24723] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1280.090700][T24723] __sock_sendmsg+0x21c/0x270 [ 1280.090735][T24723] ____sys_sendmsg+0x505/0x830 [ 1280.090768][T24723] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1280.090801][T24723] ? import_iovec+0x74/0xa0 [ 1280.090833][T24723] ___sys_sendmsg+0x21f/0x2a0 [ 1280.090862][T24723] ? __pfx____sys_sendmsg+0x10/0x10 [ 1280.090921][T24723] ? __fget_files+0x2a/0x420 [ 1280.090948][T24723] ? __fget_files+0x3a0/0x420 [ 1280.090985][T24723] __x64_sys_sendmsg+0x19b/0x260 [ 1280.091015][T24723] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1280.091052][T24723] ? __pfx_ksys_write+0x10/0x10 [ 1280.091072][T24723] ? rcu_is_watching+0x15/0xb0 [ 1280.091105][T24723] ? do_syscall_64+0xbe/0x3b0 [ 1280.091132][T24723] do_syscall_64+0xfa/0x3b0 [ 1280.091152][T24723] ? lockdep_hardirqs_on+0x9c/0x150 [ 1280.091173][T24723] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.091194][T24723] ? clear_bhb_loop+0x60/0xb0 [ 1280.091219][T24723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.091239][T24723] RIP: 0033:0x7fbea898e929 [ 1280.091258][T24723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1280.091274][T24723] RSP: 002b:00007fbea98bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1280.091296][T24723] RAX: ffffffffffffffda RBX: 00007fbea8bb5fa0 RCX: 00007fbea898e929 [ 1280.091312][T24723] RDX: 0000000044004094 RSI: 0000200000000a40 RDI: 0000000000000004 [ 1280.091325][T24723] RBP: 00007fbea98bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1280.091336][T24723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1280.091349][T24723] R13: 0000000000000000 R14: 00007fbea8bb5fa0 R15: 00007ffc06610f28 [ 1280.091378][T24723] [ 1280.373540][ C0] vkms_vblank_simulate: vblank timer overrun [ 1280.419817][T24714] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1280.450026][T24714] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1280.468054][T24714] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1280.526899][T24714] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1280.540737][T23078] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1280.557942][T23078] usb 4-1: USB disconnect, device number 25 [ 1280.698386][T24736] nbd: must specify a device to reconfigure [ 1280.845071][T24741] usb usb8: usbfs: process 24741 (syz.9.5946) did not claim interface 32 before use [ 1281.114157][ T5910] usb 10-1: new full-speed USB device number 105 using dummy_hcd [ 1281.296644][ T5910] usb 10-1: not running at top speed; connect to a high speed hub [ 1281.306662][ T5910] usb 10-1: config 2 has an invalid interface number: 113 but max is 1 [ 1281.315543][ T5910] usb 10-1: config 2 has an invalid interface number: 250 but max is 1 [ 1281.330717][ T5910] usb 10-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.342273][T24752] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5951'. [ 1281.344610][ T5910] usb 10-1: config 2 has no interface number 0 [ 1281.360631][ T5910] usb 10-1: config 2 has no interface number 1 [ 1281.366997][ T5910] usb 10-1: config 2 interface 113 altsetting 3 endpoint 0x2 has invalid maxpacket 1999, setting to 64 [ 1281.381812][ T5910] usb 10-1: config 2 interface 113 altsetting 3 has an endpoint descriptor with address 0x76, changing to 0x6 [ 1281.400585][ T5910] usb 10-1: config 2 interface 113 altsetting 3 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 1281.414038][T19001] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1281.421905][ T5910] usb 10-1: config 2 interface 113 altsetting 3 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1281.434225][ T5910] usb 10-1: config 2 interface 113 altsetting 3 has a duplicate endpoint with address 0x8F, skipping [ 1281.446783][ T5910] usb 10-1: config 2 interface 113 altsetting 3 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 1281.458275][ T5910] usb 10-1: config 2 interface 113 altsetting 3 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 1281.474396][ T5910] usb 10-1: config 2 interface 113 altsetting 3 has a duplicate endpoint with address 0x6, skipping [ 1281.485803][ T5910] usb 10-1: config 2 interface 113 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1281.497195][ T5910] usb 10-1: config 2 interface 113 altsetting 3 has 9 endpoint descriptors, different from the interface descriptor's value: 7 [ 1281.513063][ T5910] usb 10-1: config 2 interface 250 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1281.526834][ T5910] usb 10-1: config 2 interface 113 has no altsetting 0 [ 1281.533967][ T5910] usb 10-1: config 2 interface 250 has no altsetting 0 [ 1281.543550][ T5910] usb 10-1: New USB device found, idVendor=17e9, idProduct=fa89, bcdDevice=cb.99 [ 1281.552983][ T5910] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.561111][ T5910] usb 10-1: Product: syz [ 1281.565807][ T5910] usb 10-1: Manufacturer: 녖ᰩ嵫㔉烈醍荥ꬷ歳壣뽔♫곐Ɠꍈ蜺檖麤ᠿ걟施礙靘䩙跞⭃墐轤얐秨䀘釂칦㖽웫禘⁢ઋ䖕ࠢ痸굧셦嘼戁邒钁⯐笪㷓ጢꩋ㻕ᑥ᣺섌绋䤝ꕗ绞凊웨坎⸪迤爦鑦Ӫ [ 1281.614110][ T5910] usb 10-1: SerialNumber: syz [ 1281.625083][T19001] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.635578][T19001] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1281.648999][T24741] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1281.658984][T19001] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1281.674397][T19001] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1281.683676][T24741] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1281.691088][T19001] usb 4-1: SerialNumber: syz [ 1281.919655][T19001] usb 4-1: 0:2 : does not exist [ 1281.949357][ T5910] usb 10-1: USB disconnect, device number 105 [ 1281.963365][T19001] usb 4-1: USB disconnect, device number 26 [ 1282.002536][T13862] Bluetooth: hci1: command 0x0406 tx timeout [ 1282.036986][T10562] udevd[10562]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1282.081922][T13862] Bluetooth: hci2: command 0x0406 tx timeout [ 1282.561889][T22441] Bluetooth: hci3: command 0x0406 tx timeout [ 1282.569327][T13862] Bluetooth: hci4: command 0x0c1a tx timeout [ 1282.722116][T21127] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1282.841724][T23078] usb 10-1: new high-speed USB device number 106 using dummy_hcd [ 1282.881755][T21127] usb 4-1: Using ep0 maxpacket: 8 [ 1282.898834][T21127] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1282.908387][T21127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1282.919133][T21127] usb 4-1: Product: syz [ 1282.926910][T21127] usb 4-1: Manufacturer: syz [ 1282.930355][T24771] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5960'. [ 1282.935379][T21127] usb 4-1: SerialNumber: syz [ 1282.955725][T21127] usb 4-1: config 0 descriptor?? [ 1282.991801][T23078] usb 10-1: Using ep0 maxpacket: 8 [ 1283.001510][T23078] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 1283.014153][T23078] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1283.025632][T23078] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1283.037061][T23078] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1283.048688][T23078] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1283.059073][T23078] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1283.072398][T23078] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1283.081758][T23078] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1283.169202][T21127] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1283.301363][T23078] usb 10-1: GET_CAPABILITIES returned 0 [ 1283.307219][T23078] usbtmc 10-1:16.0: can't read capabilities [ 1283.513207][T24769] overlayfs: missing 'workdir' [ 1283.553411][ T894] usb 10-1: USB disconnect, device number 106 [ 1284.081796][T13862] Bluetooth: hci1: command 0x0406 tx timeout [ 1284.163135][T13862] Bluetooth: hci2: command 0x0406 tx timeout [ 1284.360975][T24785] /dev/rnullb0: Can't open blockdev [ 1284.371980][ T894] usb 10-1: new high-speed USB device number 107 using dummy_hcd [ 1284.533155][ T894] usb 10-1: Using ep0 maxpacket: 16 [ 1284.540637][ T894] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.554577][ T894] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.569883][ T894] usb 10-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1284.580658][ T894] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.600329][ T894] usb 10-1: config 0 descriptor?? [ 1284.608741][T21127] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1284.620174][T21127] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1284.636429][T21127] usb 4-1: media controller created [ 1284.651689][T13862] Bluetooth: hci4: command 0x0c1a tx timeout [ 1284.669484][T21127] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1284.694058][T21127] dvb_usb_rtl28xxu 4-1:0.0: unknown tuner MXL5007T [ 1285.842759][T18249] usb 4-1: USB disconnect, device number 27 [ 1285.953602][T24806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1285.964779][T24806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1286.200748][T24817] netlink: 'syz.9.5961': attribute type 2 has an invalid length. [ 1286.229231][T24817] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5961'. [ 1286.362661][T24816] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.5976'. [ 1286.372626][T24816] netlink: zone id is out of range [ 1286.377775][T24816] netlink: zone id is out of range [ 1286.383081][T24816] netlink: zone id is out of range [ 1286.388289][T24816] netlink: zone id is out of range [ 1286.393975][T24816] netlink: zone id is out of range [ 1286.399562][T24816] netlink: zone id is out of range [ 1286.405007][T24816] netlink: zone id is out of range [ 1286.410275][T24816] netlink: zone id is out of range [ 1286.421756][T24816] netlink: zone id is out of range [ 1286.426995][T24816] netlink: zone id is out of range [ 1286.722910][T13862] Bluetooth: hci4: command 0x0c1a tx timeout [ 1287.135147][ T894] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1287.291724][ T894] usb 4-1: Using ep0 maxpacket: 16 [ 1287.299419][ T894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1287.310516][ T894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1287.323559][ T894] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1287.333034][ T894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1287.349354][ T894] usb 4-1: config 0 descriptor?? [ 1287.383113][ T894] usb 10-1: USB disconnect, device number 107 [ 1287.435935][T24836] /dev/rnullb0: Can't open blockdev [ 1288.379227][T24796] Process accounting resumed [ 1288.539828][T24845] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.5987'. [ 1288.646975][T24853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1288.671247][T24853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1288.922228][T18249] usb 10-1: new high-speed USB device number 108 using dummy_hcd [ 1289.061818][T18249] usb 10-1: device descriptor read/64, error -71 [ 1289.301753][T18249] usb 10-1: new high-speed USB device number 109 using dummy_hcd [ 1289.431832][T18249] usb 10-1: device descriptor read/64, error -71 [ 1289.542292][T18249] usb usb10-port1: attempt power cycle [ 1289.881781][T18249] usb 10-1: new high-speed USB device number 110 using dummy_hcd [ 1289.902504][T18249] usb 10-1: device descriptor read/8, error -71 [ 1290.059703][T19001] usb 4-1: USB disconnect, device number 28 [ 1290.152245][T18249] usb 10-1: new high-speed USB device number 111 using dummy_hcd [ 1290.188046][T18249] usb 10-1: device descriptor read/8, error -71 [ 1290.312481][T18249] usb usb10-port1: unable to enumerate USB device [ 1290.441657][T19001] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1290.594326][T19001] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1290.603266][T19001] usb 4-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 1290.635473][T19001] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1290.654171][T19001] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1290.677134][T19001] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1290.677155][T24881] rdma_op ffff88806ccbd1f0 conn xmit_rdma 0000000000000000 [ 1290.693926][T19001] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1290.702319][T19001] usb 4-1: Product: syz [ 1290.706536][T19001] usb 4-1: Manufacturer: syz [ 1290.724173][T19001] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1290.934963][T24879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.947253][T24879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.957053][T18249] usb 4-1: USB disconnect, device number 29 [ 1291.198402][T24879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5998'. [ 1291.707083][T24900] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.6008'. [ 1291.722002][T24900] net_ratelimit: 22 callbacks suppressed [ 1291.722021][T24900] netlink: zone id is out of range [ 1291.734925][T24900] netlink: get zone limit has 8 unknown bytes [ 1291.845956][T24902] tipc: Enabling of bearer rejected, failed to enable media [ 1291.910595][T24908] FAULT_INJECTION: forcing a failure. [ 1291.910595][T24908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1291.930036][T24908] CPU: 0 UID: 0 PID: 24908 Comm: syz.9.6011 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1291.930067][T24908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1291.930081][T24908] Call Trace: [ 1291.930090][T24908] [ 1291.930100][T24908] dump_stack_lvl+0x189/0x250 [ 1291.930135][T24908] ? __pfx____ratelimit+0x10/0x10 [ 1291.930157][T24908] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1291.930188][T24908] ? __pfx__printk+0x10/0x10 [ 1291.930218][T24908] ? __might_fault+0xb0/0x130 [ 1291.930262][T24908] should_fail_ex+0x414/0x560 [ 1291.930301][T24908] _copy_from_iter+0x1db/0x16f0 [ 1291.930333][T24908] ? rcu_is_watching+0x15/0xb0 [ 1291.930361][T24908] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1291.930396][T24908] ? __pfx__copy_from_iter+0x10/0x10 [ 1291.930431][T24908] ? __build_skb_around+0x257/0x3e0 [ 1291.930460][T24908] ? netlink_sendmsg+0x642/0xb30 [ 1291.930482][T24908] ? skb_put+0x11b/0x210 [ 1291.930509][T24908] netlink_sendmsg+0x6b2/0xb30 [ 1291.930543][T24908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1291.930570][T24908] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1291.930596][T24908] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1291.930622][T24908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1291.930647][T24908] __sock_sendmsg+0x21c/0x270 [ 1291.930682][T24908] ____sys_sendmsg+0x505/0x830 [ 1291.930715][T24908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1291.930752][T24908] ? import_iovec+0x74/0xa0 [ 1291.930786][T24908] ___sys_sendmsg+0x21f/0x2a0 [ 1291.930816][T24908] ? __pfx____sys_sendmsg+0x10/0x10 [ 1291.930883][T24908] ? __fget_files+0x2a/0x420 [ 1291.930910][T24908] ? __fget_files+0x3a0/0x420 [ 1291.930949][T24908] __x64_sys_sendmsg+0x19b/0x260 [ 1291.930979][T24908] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1291.931017][T24908] ? __pfx_ksys_write+0x10/0x10 [ 1291.931039][T24908] ? rcu_is_watching+0x15/0xb0 [ 1291.931072][T24908] ? do_syscall_64+0xbe/0x3b0 [ 1291.931099][T24908] do_syscall_64+0xfa/0x3b0 [ 1291.931120][T24908] ? lockdep_hardirqs_on+0x9c/0x150 [ 1291.931141][T24908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.931162][T24908] ? clear_bhb_loop+0x60/0xb0 [ 1291.931188][T24908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.931209][T24908] RIP: 0033:0x7fbea898e929 [ 1291.931228][T24908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1291.931245][T24908] RSP: 002b:00007fbea98bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1291.931267][T24908] RAX: ffffffffffffffda RBX: 00007fbea8bb5fa0 RCX: 00007fbea898e929 [ 1291.931283][T24908] RDX: 0000000020000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 1291.931296][T24908] RBP: 00007fbea98bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1291.931310][T24908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1291.931322][T24908] R13: 0000000000000000 R14: 00007fbea8bb5fa0 R15: 00007ffc06610f28 [ 1291.931354][T24908] [ 1292.267288][ T25] block nbd2: Possible stuck request ffff888025c97000: control (read@0,1024B). Runtime 240 seconds [ 1292.278749][ T25] block nbd2: Possible stuck request ffff888025c971c0: control (read@1024,1024B). Runtime 240 seconds [ 1292.289988][ T25] block nbd2: Possible stuck request ffff888025c97380: control (read@2048,1024B). Runtime 240 seconds [ 1292.301200][ T25] block nbd2: Possible stuck request ffff888025c97540: control (read@3072,1024B). Runtime 240 seconds [ 1292.450936][T24917] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6014'. [ 1292.815342][T24928] FAULT_INJECTION: forcing a failure. [ 1292.815342][T24928] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1292.835520][T24928] CPU: 1 UID: 0 PID: 24928 Comm: syz.3.6016 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1292.835552][T24928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1292.835565][T24928] Call Trace: [ 1292.835573][T24928] [ 1292.835583][T24928] dump_stack_lvl+0x189/0x250 [ 1292.835619][T24928] ? __pfx____ratelimit+0x10/0x10 [ 1292.835641][T24928] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1292.835672][T24928] ? __pfx__printk+0x10/0x10 [ 1292.835716][T24928] should_fail_ex+0x414/0x560 [ 1292.835754][T24928] strncpy_from_user+0x36/0x290 [ 1292.835791][T24928] getname_flags+0xf3/0x540 [ 1292.835826][T24928] user_path_at+0x24/0x60 [ 1292.835846][T24928] __se_sys_mount+0x2d3/0x410 [ 1292.835880][T24928] ? __pfx___se_sys_mount+0x10/0x10 [ 1292.835914][T24928] ? do_syscall_64+0xbe/0x3b0 [ 1292.835959][T24928] ? __x64_sys_mount+0x20/0xc0 [ 1292.835990][T24928] do_syscall_64+0xfa/0x3b0 [ 1292.836010][T24928] ? lockdep_hardirqs_on+0x9c/0x150 [ 1292.836031][T24928] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.836053][T24928] ? clear_bhb_loop+0x60/0xb0 [ 1292.836079][T24928] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.836098][T24928] RIP: 0033:0x7f362378e929 [ 1292.836116][T24928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1292.836134][T24928] RSP: 002b:00007f36245d4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1292.836157][T24928] RAX: ffffffffffffffda RBX: 00007f36239b6080 RCX: 00007f362378e929 [ 1292.836172][T24928] RDX: 0000000000000000 RSI: 0000200000001440 RDI: 0000000000000000 [ 1292.836185][T24928] RBP: 00007f36245d4090 R08: 0000000000000000 R09: 0000000000000000 [ 1292.836198][T24928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1292.836211][T24928] R13: 0000000000000001 R14: 00007f36239b6080 R15: 00007ffe91377318 [ 1292.836243][T24928] [ 1293.049231][T24931] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6019'. [ 1293.060563][T24931] hpfs: Bad magic ... probably not HPFS [ 1293.074559][T24934] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.6018'. [ 1293.084198][T24934] netlink: zone id is out of range [ 1293.089387][T24934] netlink: get zone limit has 8 unknown bytes [ 1293.278246][T24942] tipc: Started in network mode [ 1293.287322][T24942] tipc: Node identity a6cfb58013c1, cluster identity 4711 [ 1293.295176][T24942] tipc: Enabled bearer , priority 0 [ 1293.309115][T24942] syzkaller0: entered promiscuous mode [ 1293.317388][T24942] syzkaller0: entered allmulticast mode [ 1293.344447][T24942] FAULT_INJECTION: forcing a failure. [ 1293.344447][T24942] name failslab, interval 1, probability 0, space 0, times 0 [ 1293.369901][T24942] CPU: 0 UID: 0 PID: 24942 Comm: syz.7.6022 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1293.369931][T24942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1293.369945][T24942] Call Trace: [ 1293.369954][T24942] [ 1293.369965][T24942] dump_stack_lvl+0x189/0x250 [ 1293.369999][T24942] ? __pfx____ratelimit+0x10/0x10 [ 1293.370021][T24942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1293.370051][T24942] ? __pfx__printk+0x10/0x10 [ 1293.370094][T24942] ? __pfx___might_resched+0x10/0x10 [ 1293.370120][T24942] ? fs_reclaim_acquire+0x7d/0x100 [ 1293.370148][T24942] should_fail_ex+0x414/0x560 [ 1293.370186][T24942] should_failslab+0xa8/0x100 [ 1293.370209][T24942] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 1293.370241][T24942] ? rtnl_prop_list_size+0x1ba/0x1e0 [ 1293.370272][T24942] ? __alloc_skb+0x112/0x2d0 [ 1293.370300][T24942] __alloc_skb+0x112/0x2d0 [ 1293.370328][T24942] rtmsg_ifinfo_build_skb+0x84/0x260 [ 1293.370369][T24942] rtnetlink_event+0x1b7/0x270 [ 1293.370396][T24942] notifier_call_chain+0x1b3/0x3e0 [ 1293.370434][T24942] netif_set_mtu_ext+0x438/0x620 [ 1293.370459][T24942] ? __lock_acquire+0xab9/0xd20 [ 1293.370488][T24942] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 1293.370515][T24942] ? __mutex_trylock_common+0x153/0x260 [ 1293.370556][T24942] ? rcu_is_watching+0x15/0xb0 [ 1293.370591][T24942] netif_set_mtu+0xa4/0x150 [ 1293.370616][T24942] ? __pfx_netif_set_mtu+0x10/0x10 [ 1293.370638][T24942] ? __lock_acquire+0xab9/0xd20 [ 1293.370676][T24942] ? netdev_name_node_lookup+0xdf/0x120 [ 1293.370716][T24942] dev_set_mtu+0x126/0x260 [ 1293.370747][T24942] dev_ioctl+0x7b4/0x1150 [ 1293.370773][T24942] sock_do_ioctl+0x22c/0x300 [ 1293.370808][T24942] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1293.370836][T24942] ? __lock_acquire+0xab9/0xd20 [ 1293.370878][T24942] sock_ioctl+0x576/0x790 [ 1293.370910][T24942] ? __pfx_sock_ioctl+0x10/0x10 [ 1293.370941][T24942] ? __fget_files+0x2a/0x420 [ 1293.370967][T24942] ? __fget_files+0x3a0/0x420 [ 1293.370992][T24942] ? __fget_files+0x2a/0x420 [ 1293.371021][T24942] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1293.371051][T24942] ? __pfx_sock_ioctl+0x10/0x10 [ 1293.371090][T24942] __se_sys_ioctl+0xfc/0x170 [ 1293.371115][T24942] do_syscall_64+0xfa/0x3b0 [ 1293.371137][T24942] ? lockdep_hardirqs_on+0x9c/0x150 [ 1293.371157][T24942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.371178][T24942] ? clear_bhb_loop+0x60/0xb0 [ 1293.371204][T24942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.371225][T24942] RIP: 0033:0x7fbebc98e929 [ 1293.371244][T24942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1293.371262][T24942] RSP: 002b:00007fbebd744038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1293.371285][T24942] RAX: ffffffffffffffda RBX: 00007fbebcbb5fa0 RCX: 00007fbebc98e929 [ 1293.371300][T24942] RDX: 0000200000002280 RSI: 0000000000008922 RDI: 0000000000000005 [ 1293.371315][T24942] RBP: 00007fbebd744090 R08: 0000000000000000 R09: 0000000000000000 [ 1293.371328][T24942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1293.371341][T24942] R13: 0000000000000000 R14: 00007fbebcbb5fa0 R15: 00007ffd2780b778 [ 1293.371374][T24942] [ 1293.699254][T24942] tipc: Resetting bearer [ 1293.772191][T24939] tipc: Resetting bearer [ 1293.799562][T24947] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6025'. [ 1293.832457][T24939] tipc: Disabling bearer [ 1294.018582][T24958] FAULT_INJECTION: forcing a failure. [ 1294.018582][T24958] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1294.032798][T18249] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1294.057628][T24958] CPU: 0 UID: 0 PID: 24958 Comm: syz.9.6035 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1294.057658][T24958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1294.057671][T24958] Call Trace: [ 1294.057680][T24958] [ 1294.057689][T24958] dump_stack_lvl+0x189/0x250 [ 1294.057724][T24958] ? __pfx____ratelimit+0x10/0x10 [ 1294.057745][T24958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1294.057773][T24958] ? __pfx__printk+0x10/0x10 [ 1294.057803][T24958] ? __might_fault+0xb0/0x130 [ 1294.057846][T24958] should_fail_ex+0x414/0x560 [ 1294.057883][T24958] _copy_from_iter+0x1db/0x16f0 [ 1294.057915][T24958] ? rcu_is_watching+0x15/0xb0 [ 1294.057944][T24958] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 1294.057988][T24958] ? __pfx__copy_from_iter+0x10/0x10 [ 1294.058016][T24958] ? __build_skb_around+0x257/0x3e0 [ 1294.058043][T24958] ? netlink_sendmsg+0x642/0xb30 [ 1294.058064][T24958] ? skb_put+0x11b/0x210 [ 1294.058092][T24958] netlink_sendmsg+0x6b2/0xb30 [ 1294.058126][T24958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1294.058153][T24958] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1294.058181][T24958] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1294.058208][T24958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1294.058233][T24958] __sock_sendmsg+0x21c/0x270 [ 1294.058269][T24958] ____sys_sendmsg+0x505/0x830 [ 1294.058302][T24958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1294.058339][T24958] ? import_iovec+0x74/0xa0 [ 1294.058372][T24958] ___sys_sendmsg+0x21f/0x2a0 [ 1294.058401][T24958] ? __pfx____sys_sendmsg+0x10/0x10 [ 1294.058467][T24958] ? __fget_files+0x2a/0x420 [ 1294.058493][T24958] ? __fget_files+0x3a0/0x420 [ 1294.058532][T24958] __x64_sys_sendmsg+0x19b/0x260 [ 1294.058562][T24958] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1294.058599][T24958] ? __pfx_ksys_write+0x10/0x10 [ 1294.058620][T24958] ? rcu_is_watching+0x15/0xb0 [ 1294.058652][T24958] ? do_syscall_64+0xbe/0x3b0 [ 1294.058679][T24958] do_syscall_64+0xfa/0x3b0 [ 1294.058700][T24958] ? lockdep_hardirqs_on+0x9c/0x150 [ 1294.058720][T24958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.058740][T24958] ? clear_bhb_loop+0x60/0xb0 [ 1294.058766][T24958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.058786][T24958] RIP: 0033:0x7fbea898e929 [ 1294.058805][T24958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1294.058822][T24958] RSP: 002b:00007fbea98bd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1294.058844][T24958] RAX: ffffffffffffffda RBX: 00007fbea8bb5fa0 RCX: 00007fbea898e929 [ 1294.058860][T24958] RDX: 000000002000c0c0 RSI: 0000200000000e40 RDI: 0000000000000004 [ 1294.058874][T24958] RBP: 00007fbea98bd090 R08: 0000000000000000 R09: 0000000000000000 [ 1294.058887][T24958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1294.058899][T24958] R13: 0000000000000000 R14: 00007fbea8bb5fa0 R15: 00007ffc06610f28 [ 1294.058931][T24958] [ 1294.431764][T18249] usb 4-1: Using ep0 maxpacket: 16 [ 1294.439170][T24964] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.6030'. [ 1294.451086][T18249] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1294.472661][T18249] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1294.482707][T24964] netlink: zone id is out of range [ 1294.487888][T24964] netlink: get zone limit has 8 unknown bytes [ 1294.494536][T18249] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1294.508577][T18249] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1294.546739][T18249] usb 4-1: config 0 descriptor?? [ 1294.720884][T24972] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6034'. [ 1295.028600][T24983] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6040'. [ 1295.047251][T24984] /dev/rnullb0: Can't open blockdev [ 1295.096932][T24986] tipc: Enabled bearer , priority 0 [ 1295.117805][T24986] tipc: Resetting bearer [ 1295.129714][T24985] tipc: Disabling bearer [ 1295.544703][T25003] netlink: 'syz.9.6045': attribute type 4 has an invalid length. [ 1295.737363][T25013] FAULT_INJECTION: forcing a failure. [ 1295.737363][T25013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1295.762010][T25013] CPU: 0 UID: 0 PID: 25013 Comm: syz.9.6048 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1295.762042][T25013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1295.762055][T25013] Call Trace: [ 1295.762063][T25013] [ 1295.762073][T25013] dump_stack_lvl+0x189/0x250 [ 1295.762110][T25013] ? __pfx____ratelimit+0x10/0x10 [ 1295.762137][T25013] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1295.762168][T25013] ? __pfx__printk+0x10/0x10 [ 1295.762199][T25013] ? __might_fault+0xb0/0x130 [ 1295.762242][T25013] should_fail_ex+0x414/0x560 [ 1295.762280][T25013] _copy_from_user+0x2d/0xb0 [ 1295.762312][T25013] core_sys_select+0x4b7/0xa20 [ 1295.762350][T25013] ? __pfx_core_sys_select+0x10/0x10 [ 1295.762401][T25013] ? __pfx_set_user_sigmask+0x10/0x10 [ 1295.762439][T25013] __se_sys_pselect6+0x27a/0x300 [ 1295.762471][T25013] ? __pfx___se_sys_pselect6+0x10/0x10 [ 1295.762496][T25013] ? __pfx_ksys_write+0x10/0x10 [ 1295.762517][T25013] ? rcu_is_watching+0x15/0xb0 [ 1295.762549][T25013] ? __x64_sys_pselect6+0x21/0xf0 [ 1295.762578][T25013] do_syscall_64+0xfa/0x3b0 [ 1295.762599][T25013] ? lockdep_hardirqs_on+0x9c/0x150 [ 1295.762619][T25013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.762640][T25013] ? clear_bhb_loop+0x60/0xb0 [ 1295.762666][T25013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.762686][T25013] RIP: 0033:0x7fbea898e929 [ 1295.762705][T25013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1295.762723][T25013] RSP: 002b:00007fbea989c038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 1295.762746][T25013] RAX: ffffffffffffffda RBX: 00007fbea8bb6080 RCX: 00007fbea898e929 [ 1295.762762][T25013] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 1295.762776][T25013] RBP: 00007fbea989c090 R08: 0000000000000000 R09: 0000000000000000 [ 1295.762789][T25013] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 1295.762802][T25013] R13: 0000000000000000 R14: 00007fbea8bb6080 R15: 00007ffc06610f28 [ 1295.762841][T25013] [ 1295.765680][T25015] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6049'. [ 1295.879687][T25018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.995531][T25018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.132696][T25024] netlink: 'syz.3.6023': attribute type 2 has an invalid length. [ 1296.140597][T25024] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6023'. [ 1296.941291][T25043] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6060'. [ 1297.039677][T25048] MTD: Couldn't look up '/dev/rnullb0': -15 [ 1297.115547][T25052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1297.307323][T18249] usb 4-1: USB disconnect, device number 30 [ 1297.345685][T25054] netlink: 32 bytes leftover after parsing attributes in process `syz.8.6064'. [ 1297.552176][ T5910] usb 10-1: new high-speed USB device number 112 using dummy_hcd [ 1297.694062][ T5910] usb 10-1: device descriptor read/64, error -71 [ 1297.752006][T18249] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1297.941733][T18249] usb 4-1: Using ep0 maxpacket: 16 [ 1297.950454][T18249] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1297.959431][ T5910] usb 10-1: new high-speed USB device number 113 using dummy_hcd [ 1297.970126][T18249] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.999059][T18249] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1298.011385][T18249] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1298.021157][T18249] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.030388][T18249] usb 4-1: Product: syz [ 1298.034990][T18249] usb 4-1: Manufacturer: syz [ 1298.039627][T18249] usb 4-1: SerialNumber: syz [ 1298.131919][ T5910] usb 10-1: device descriptor read/64, error -71 [ 1298.252226][ T5910] usb usb10-port1: attempt power cycle [ 1298.464492][T18249] usb 4-1: 0:2 : does not exist [ 1298.591853][ T5910] usb 10-1: new high-speed USB device number 114 using dummy_hcd [ 1298.643154][ T5910] usb 10-1: device descriptor read/8, error -71 [ 1298.874570][T18249] usb 4-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1298.895159][ T5910] usb 10-1: new high-speed USB device number 115 using dummy_hcd [ 1298.904777][T18249] usb 4-1: USB disconnect, device number 31 [ 1298.932311][ T5910] usb 10-1: device descriptor read/8, error -71 [ 1298.944869][T10562] udevd[10562]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1299.042043][ T5910] usb usb10-port1: unable to enumerate USB device [ 1299.434818][T25075] netlink: 48 bytes leftover after parsing attributes in process `syz.8.6074'. [ 1299.485212][T25077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1300.093989][T25091] comedi comedi2: bad chanlist[0]=0x000001ff chan=511 range length=0 [ 1300.409195][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.672752][ T5844] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1300.831621][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 1300.843627][ T5844] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1300.872195][ T5844] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.884532][ T5844] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1300.904733][ T5844] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1300.921612][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1300.929753][ T5844] usb 4-1: Product: syz [ 1300.941639][ T5844] usb 4-1: Manufacturer: syz [ 1300.946308][ T5844] usb 4-1: SerialNumber: syz [ 1300.996497][T25109] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.6088'. [ 1301.007480][T25109] netlink: zone id is out of range [ 1301.012845][T25109] netlink: zone id is out of range [ 1301.018301][T25109] netlink: zone id is out of range [ 1301.026637][T25109] netlink: zone id is out of range [ 1301.037723][T25109] netlink: zone id is out of range [ 1301.045851][ T11] block nbd0: Possible stuck request ffff888025c15080: control (read@0,1024B). Runtime 990 seconds [ 1301.057108][ T11] block nbd0: Possible stuck request ffff888025c15240: control (read@1024,1024B). Runtime 990 seconds [ 1301.069989][ T11] block nbd0: Possible stuck request ffff888025c15400: control (read@2048,1024B). Runtime 990 seconds [ 1301.081402][ T11] block nbd0: Possible stuck request ffff888025c155c0: control (read@3072,1024B). Runtime 990 seconds [ 1301.100960][T25109] netlink: zone id is out of range [ 1301.106603][T25109] netlink: zone id is out of range [ 1301.112090][T25109] netlink: zone id is out of range [ 1301.117523][T25109] netlink: zone id is out of range [ 1301.123053][T25109] netlink: zone id is out of range [ 1301.386243][ T5844] usb 4-1: 0:2 : does not exist [ 1301.693163][ T25] block nbd1: Possible stuck request ffff888025c6e000: control (read@0,1024B). Runtime 990 seconds [ 1301.707913][ T25] block nbd1: Possible stuck request ffff888025c6e1c0: control (read@1024,1024B). Runtime 990 seconds [ 1301.719140][ T25] block nbd1: Possible stuck request ffff888025c6e380: control (read@2048,1024B). Runtime 990 seconds [ 1301.730291][ T25] block nbd1: Possible stuck request ffff888025c6e540: control (read@3072,1024B). Runtime 990 seconds [ 1301.796453][ T5844] usb 4-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1301.838883][ T5844] usb 4-1: USB disconnect, device number 32 [ 1301.880905][T10562] udevd[10562]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1302.022354][T25132] tmpfs: Bad value for 'mpol' [ 1302.050590][T25132] netlink: 'syz.9.6097': attribute type 29 has an invalid length. [ 1302.061481][T25133] netlink: 'syz.9.6097': attribute type 29 has an invalid length. [ 1302.652561][T21127] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1302.811855][T21127] usb 4-1: Using ep0 maxpacket: 16 [ 1302.827739][T21127] usb 4-1: config 7 has an invalid interface number: 247 but max is 0 [ 1302.839663][T21127] usb 4-1: config 7 has no interface number 0 [ 1302.848886][T21127] usb 4-1: config 7 interface 247 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1302.865372][T21127] usb 4-1: config 7 interface 247 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1302.878843][T21127] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=6c.22 [ 1302.891522][T21127] usb 4-1: New USB device strings: Mfr=1, Product=74, SerialNumber=147 [ 1302.900131][T21127] usb 4-1: Product: syz [ 1302.905875][T21127] usb 4-1: Manufacturer: syz [ 1302.910602][T21127] usb 4-1: SerialNumber: syz [ 1302.938079][T21127] ni6501 4-1:7.247: driver 'ni6501' failed to auto-configure device. [ 1303.192317][T21127] usb 4-1: USB disconnect, device number 33 [ 1303.647112][T25189] netlink: 212408 bytes leftover after parsing attributes in process `syz.9.6116'. [ 1303.696623][T25192] FAULT_INJECTION: forcing a failure. [ 1303.696623][T25192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1303.709968][T25192] CPU: 1 UID: 0 PID: 25192 Comm: syz.7.6120 Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1303.709997][T25192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1303.710011][T25192] Call Trace: [ 1303.710020][T25192] [ 1303.710030][T25192] dump_stack_lvl+0x189/0x250 [ 1303.710066][T25192] ? __pfx____ratelimit+0x10/0x10 [ 1303.710089][T25192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1303.710119][T25192] ? __pfx__printk+0x10/0x10 [ 1303.710150][T25192] ? __might_fault+0xb0/0x130 [ 1303.710196][T25192] should_fail_ex+0x414/0x560 [ 1303.710235][T25192] _copy_from_user+0x2d/0xb0 [ 1303.710265][T25192] memdup_user+0x5e/0xd0 [ 1303.710292][T25192] kvm_arch_vcpu_ioctl+0x1a78/0x2a80 [ 1303.710326][T25192] ? __lock_acquire+0xab9/0xd20 [ 1303.710349][T25192] ? kvm_arch_vcpu_ioctl+0x5f8/0x2a80 [ 1303.710378][T25192] ? __pfx_kvm_arch_vcpu_ioctl+0x10/0x10 [ 1303.710407][T25192] ? __lock_acquire+0xab9/0xd20 [ 1303.710454][T25192] ? is_bpf_text_address+0x26/0x2b0 [ 1303.710486][T25192] ? is_bpf_text_address+0x292/0x2b0 [ 1303.710511][T25192] ? is_bpf_text_address+0x26/0x2b0 [ 1303.710540][T25192] ? kernel_text_address+0xa5/0xe0 [ 1303.710562][T25192] ? __kernel_text_address+0xd/0x40 [ 1303.710581][T25192] ? unwind_get_return_address+0x4d/0x90 [ 1303.710610][T25192] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1303.710642][T25192] ? arch_stack_walk+0xfc/0x150 [ 1303.710688][T25192] ? stack_trace_save+0x9c/0xe0 [ 1303.710721][T25192] ? stack_depot_save_flags+0x40/0x900 [ 1303.710764][T25192] ? kasan_save_track+0x4f/0x80 [ 1303.710792][T25192] ? kasan_save_track+0x3e/0x80 [ 1303.710831][T25192] ? __lock_acquire+0xab9/0xd20 [ 1303.710863][T25192] ? __mutex_trylock_common+0x153/0x260 [ 1303.710895][T25192] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1303.710930][T25192] ? rcu_is_watching+0x15/0xb0 [ 1303.710957][T25192] ? trace_contention_end+0x39/0x120 [ 1303.710986][T25192] ? __mutex_lock+0x330/0xe80 [ 1303.711011][T25192] ? kasan_quarantine_put+0xdd/0x220 [ 1303.711046][T25192] ? kvm_vcpu_ioctl+0x22e/0xe90 [ 1303.711080][T25192] ? __pfx___mutex_lock+0x10/0x10 [ 1303.711104][T25192] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1303.711132][T25192] ? do_vfs_ioctl+0xbe8/0x1430 [ 1303.711157][T25192] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1303.711183][T25192] kvm_vcpu_ioctl+0x74d/0xe90 [ 1303.711222][T25192] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1303.711250][T25192] ? __lock_acquire+0xab9/0xd20 [ 1303.711293][T25192] ? __fget_files+0x2a/0x420 [ 1303.711349][T25192] ? __fget_files+0x2a/0x420 [ 1303.711376][T25192] ? __fget_files+0x3a0/0x420 [ 1303.711401][T25192] ? __fget_files+0x2a/0x420 [ 1303.711430][T25192] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1303.711458][T25192] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1303.711488][T25192] __se_sys_ioctl+0xfc/0x170 [ 1303.711510][T25192] do_syscall_64+0xfa/0x3b0 [ 1303.711535][T25192] ? lockdep_hardirqs_on+0x9c/0x150 [ 1303.711555][T25192] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.711576][T25192] ? clear_bhb_loop+0x60/0xb0 [ 1303.711602][T25192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1303.711622][T25192] RIP: 0033:0x7fbebc98e929 [ 1303.711641][T25192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1303.711659][T25192] RSP: 002b:00007fbebd744038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1303.711680][T25192] RAX: ffffffffffffffda RBX: 00007fbebcbb5fa0 RCX: 00007fbebc98e929 [ 1303.711694][T25192] RDX: 0000200000000040 RSI: 000000004008ae89 RDI: 0000000000000005 [ 1303.711707][T25192] RBP: 00007fbebd744090 R08: 0000000000000000 R09: 0000000000000000 [ 1303.711719][T25192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1303.711731][T25192] R13: 0000000000000000 R14: 00007fbebcbb5fa0 R15: 00007ffd2780b778 [ 1303.711761][T25192] [ 1304.823221][T25219] binder: BINDER_SET_CONTEXT_MGR already set [ 1304.829821][T25219] binder: 25218:25219 ioctl 4018620d 2000000000c0 returned -16 [ 1304.976673][T25225] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6134'. [ 1305.077948][T25219] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.6131'. [ 1305.421872][ T5844] usb 10-1: new high-speed USB device number 116 using dummy_hcd [ 1305.581915][ T5844] usb 10-1: Using ep0 maxpacket: 16 [ 1305.618339][ T5844] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1305.650129][ T5844] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1305.667987][T25247] netlink: 128 bytes leftover after parsing attributes in process `syz.8.6143'. [ 1305.677490][ T5844] usb 10-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1305.697263][ T5844] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.706770][T25247] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6143'. [ 1305.727216][ T5844] usb 10-1: config 0 descriptor?? [ 1305.795471][T25247] netlink: 'syz.8.6143': attribute type 10 has an invalid length. [ 1305.928222][T25247] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1306.189484][T25260] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.6148'. [ 1306.199109][T25260] net_ratelimit: 39 callbacks suppressed [ 1306.199122][T25260] netlink: zone id is out of range [ 1306.210991][T25260] netlink: zone id is out of range [ 1306.216524][T25260] netlink: zone id is out of range [ 1306.222211][T25260] netlink: zone id is out of range [ 1306.228018][T25260] netlink: zone id is out of range [ 1306.233347][T25260] netlink: zone id is out of range [ 1306.238497][T25260] netlink: zone id is out of range [ 1306.244228][T25260] netlink: zone id is out of range [ 1306.249646][T25260] netlink: zone id is out of range [ 1306.256891][T25260] netlink: zone id is out of range [ 1306.432251][T25268] syzkaller0: entered promiscuous mode [ 1306.439529][T25268] syzkaller0: entered allmulticast mode [ 1307.019602][T25273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1307.032749][T25273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1307.130826][T25274] netlink: 'syz.9.6137': attribute type 2 has an invalid length. [ 1307.139126][T25274] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6137'. [ 1317.636121][T25267] [U]  [ 1317.643588][ T5896] usb 10-1: USB disconnect, device number 116 [ 1317.876191][T25289] netlink: 128 bytes leftover after parsing attributes in process `syz.7.6157'. [ 1317.882366][T25288] /dev/rnullb0: Can't lookup blockdev [ 1317.890688][T25289] net_ratelimit: 5 callbacks suppressed [ 1317.890707][T25289] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1317.939322][T25289] netlink: 16 bytes leftover after parsing attributes in process `syz.7.6157'. [ 1318.057857][T25289] netlink: 'syz.7.6157': attribute type 10 has an invalid length. [ 1318.080606][T25299] netlink: 'syz.8.6160': attribute type 2 has an invalid length. [ 1318.088991][T25299] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6160'. [ 1318.155891][T25289] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1318.231796][ T5844] usb 10-1: new high-speed USB device number 117 using dummy_hcd [ 1318.324627][T25303] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.6161'. [ 1318.334721][T25303] netlink: zone id is out of range [ 1318.339907][T25303] netlink: zone id is out of range [ 1318.345786][T25303] netlink: zone id is out of range [ 1318.350959][T25303] netlink: zone id is out of range [ 1318.357766][T25303] netlink: zone id is out of range [ 1318.364451][T25303] netlink: get zone limit has 8 unknown bytes [ 1318.401681][ T5844] usb 10-1: Using ep0 maxpacket: 16 [ 1318.414043][ T5844] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1318.436939][ T5844] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1318.457489][ T5844] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1318.479786][ T5844] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1318.498005][ T5844] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1318.511741][ T5844] usb 10-1: Product: syz [ 1318.516142][ T5844] usb 10-1: Manufacturer: syz [ 1318.531480][ T5844] usb 10-1: SerialNumber: syz [ 1318.988372][ T5844] usb 10-1: 0:2 : does not exist [ 1318.992207][ T5896] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1319.164180][ T5896] usb 4-1: Using ep0 maxpacket: 16 [ 1319.179979][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1319.200096][ T5896] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1319.219407][ T5896] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 1319.237160][ T5896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1319.249269][ T5896] usb 4-1: config 0 descriptor?? [ 1319.417776][ T5844] usb 10-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1319.463452][ T5844] usb 10-1: USB disconnect, device number 117 [ 1319.509177][T10562] udevd[10562]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1319.965513][T25338] /dev/rnullb0: Can't open blockdev [ 1319.978010][T25340] /dev/rnullb0: Can't open blockdev [ 1320.224657][T25353] syz_tun: entered allmulticast mode [ 1320.256938][ T30] audit: type=1800 audit(6044118080.344:172): pid=25355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.6182" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1320.319140][T25357] binder: 25356:25357 ioctl c0306201 0 returned -14 [ 1320.328133][T25357] binder: 25356:25357 ioctl c0306201 2000000000c0 returned -11 [ 1320.564802][T25360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1320.575064][T25360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1320.607445][T25360] netlink: 'syz.3.6174': attribute type 2 has an invalid length. [ 1320.617664][T25360] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6174'. [ 1320.704926][T18249] usb 10-1: new high-speed USB device number 118 using dummy_hcd [ 1320.891707][T18249] usb 10-1: Using ep0 maxpacket: 16 [ 1320.913999][T18249] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1320.923123][T18249] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1320.936023][T18249] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1320.952097][T18249] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1320.961777][T18249] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.969980][T18249] usb 10-1: Product: syz [ 1320.975596][T18249] usb 10-1: Manufacturer: syz [ 1320.980404][T18249] usb 10-1: SerialNumber: syz [ 1321.015008][T25366] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.6186'. [ 1321.028604][T25366] netlink: zone id is out of range [ 1321.034017][T25366] netlink: zone id is out of range [ 1321.039203][T25366] netlink: zone id is out of range [ 1321.405698][T18249] usb 10-1: 0:2 : does not exist [ 1321.486062][T25378] /dev/rnullb0: Can't lookup blockdev [ 1321.617470][T18249] usb 10-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1321.668542][T18249] usb 10-1: USB disconnect, device number 118 [ 1321.710002][T10562] udevd[10562]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1321.785469][ T5896] usb 4-1: USB disconnect, device number 34 [ 1322.178877][T25393] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6198'. [ 1322.205387][T25395] fuse: Bad value for 'group_id' [ 1322.210395][T25395] fuse: Bad value for 'group_id' [ 1322.278256][T25397] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6200'. [ 1322.359927][T25399] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6201'. [ 1322.638818][T25411] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.6207'. [ 1322.808571][ T25] block nbd2: Possible stuck request ffff888025c97000: control (read@0,1024B). Runtime 270 seconds [ 1322.819672][ T25] block nbd2: Possible stuck request ffff888025c971c0: control (read@1024,1024B). Runtime 270 seconds [ 1322.834037][ T25] block nbd2: Possible stuck request ffff888025c97380: control (read@2048,1024B). Runtime 270 seconds [ 1322.845736][ T25] block nbd2: Possible stuck request ffff888025c97540: control (read@3072,1024B). Runtime 270 seconds [ 1323.201789][ T894] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1323.355269][ T894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1323.366564][ T894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1323.376699][ T894] usb 4-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1323.387157][ T894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1323.398894][ T894] usb 4-1: config 0 descriptor?? [ 1323.747686][T25440] __nla_validate_parse: 1 callbacks suppressed [ 1323.747734][T25440] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.6219'. [ 1323.773055][T25440] net_ratelimit: 8 callbacks suppressed [ 1323.773078][T25440] netlink: zone id is out of range [ 1323.793535][T25440] netlink: zone id is out of range [ 1323.799028][T25440] netlink: zone id is out of range [ 1323.804644][T25440] netlink: get zone limit has 8 unknown bytes [ 1323.817693][ T894] hid_parser_main: 60 callbacks suppressed [ 1323.817720][ T894] steelseries 0003:1038:12B6.0032: unknown main item tag 0x3 [ 1323.844696][ T894] steelseries 0003:1038:12B6.0032: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.3-1/input0 [ 1324.521382][T13862] Bluetooth: hci4: unexpected event 0x0f length: 18 > 4 [ 1324.523484][T13862] Bluetooth: hci4: unexpected event for opcode 0x200d [ 1324.542105][ T894] usb 4-1: USB disconnect, device number 35 [ 1325.068498][T25468] vxfs: WRONG superblock magic 00000000 at 1 [ 1325.094443][T25468] vxfs: WRONG superblock magic 00000000 at 8 [ 1325.111748][T25468] vxfs: can't find superblock. [ 1325.180733][T18249] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 1325.188601][T18249] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 1325.197753][T18249] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 1325.218083][T18249] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 1325.259940][T18249] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 1325.268955][T18249] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 1325.291768][T18249] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 1325.299257][T18249] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 1325.341993][T18249] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 1325.384762][T18249] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1325.629400][T25480] fido_id[25480]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1325.852218][ T894] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1326.019821][ T894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.041486][ T894] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1326.060669][ T894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.074346][ T894] usb 4-1: config 0 descriptor?? [ 1326.091224][ T894] pwc: Askey VC010 type 2 USB webcam detected. [ 1326.294954][ T894] pwc: send_video_command error -71 [ 1326.300990][ T894] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1326.308779][ T894] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 1326.320847][ T894] usb 4-1: USB disconnect, device number 36 [ 1326.761695][ T5930] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1326.915677][ T5930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1326.926382][ T5930] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1326.937214][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1326.951668][T18249] usb 10-1: new high-speed USB device number 119 using dummy_hcd [ 1326.959931][ T5930] usb 4-1: config 0 descriptor?? [ 1326.988404][ T5930] pwc: Askey VC010 type 2 USB webcam detected. [ 1327.066203][T25511] netlink: 128 bytes leftover after parsing attributes in process `syz.8.6243'. [ 1327.077665][T25511] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1327.152235][T18249] usb 10-1: Using ep0 maxpacket: 8 [ 1327.166750][T18249] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1327.177576][T18249] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.187209][T18249] usb 10-1: Product: syz [ 1327.191903][T18249] usb 10-1: Manufacturer: syz [ 1327.196673][T18249] usb 10-1: SerialNumber: syz [ 1327.212760][T18249] usb 10-1: config 0 descriptor?? [ 1327.287599][T25516] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.6245'. [ 1327.297264][T25516] netlink: zone id is out of range [ 1327.302982][T25516] netlink: zone id is out of range [ 1327.308134][T25516] netlink: zone id is out of range [ 1327.314804][T25516] netlink: get zone limit has 8 unknown bytes [ 1327.396991][ T5930] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1327.404681][ T5930] pwc: recv_control_msg error -32 req 02 val 2700 [ 1327.416064][ T5930] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1327.424108][ T5930] pwc: recv_control_msg error -32 req 04 val 1000 [ 1327.430835][T18249] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1327.441557][ T5930] pwc: recv_control_msg error -32 req 04 val 1300 [ 1327.449859][ T5930] pwc: recv_control_msg error -32 req 04 val 1400 [ 1327.461427][ T5930] pwc: recv_control_msg error -32 req 02 val 2000 [ 1327.470036][ T5930] pwc: recv_control_msg error -32 req 02 val 2100 [ 1327.488714][ T5930] pwc: recv_control_msg error -32 req 04 val 1500 [ 1327.497704][ T5930] pwc: recv_control_msg error -71 req 02 val 2500 [ 1327.506980][ T5930] pwc: recv_control_msg error -71 req 02 val 2400 [ 1327.517296][ T5930] pwc: recv_control_msg error -71 req 02 val 2600 [ 1327.528651][ T5930] pwc: recv_control_msg error -71 req 02 val 2900 [ 1327.538570][ T5930] pwc: recv_control_msg error -71 req 02 val 2800 [ 1327.547345][ T5930] pwc: recv_control_msg error -71 req 04 val 1100 [ 1327.554827][ T5930] pwc: recv_control_msg error -71 req 04 val 1200 [ 1327.570048][ T5930] pwc: Registered as video103. [ 1327.588824][ T5930] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input161 [ 1327.633280][ T5930] usb 4-1: USB disconnect, device number 37 [ 1327.767950][T25526] netlink: 'syz.8.6249': attribute type 2 has an invalid length. [ 1327.777737][T25526] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6249'. [ 1328.402302][ T5844] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1328.541712][ T5844] usb 4-1: device descriptor read/64, error -71 [ 1328.561885][T22441] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 1328.572943][T22441] Bluetooth: hci4: Injecting HCI hardware error event [ 1328.582157][T13862] Bluetooth: hci4: hardware error 0x00 [ 1328.783062][ T5844] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1328.873754][T18249] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1328.890959][T18249] usb 10-1: USB disconnect, device number 119 [ 1328.922121][ T5844] usb 4-1: device descriptor read/64, error -71 [ 1328.971411][T25536] netlink: 128 bytes leftover after parsing attributes in process `syz.8.6253'. [ 1328.981750][T25536] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1329.032421][ T5844] usb usb4-port1: attempt power cycle [ 1329.227265][T25549] /dev/rnullb0: Can't lookup blockdev [ 1329.373910][ T5844] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1329.425465][ T5844] usb 4-1: device descriptor read/8, error -71 [ 1329.681728][ T5844] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1329.722611][ T5844] usb 4-1: device descriptor read/8, error -71 [ 1329.841879][ T31] INFO: task syz.0.5452:22953 blocked for more than 143 seconds. [ 1329.849758][ T31] Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 [ 1329.857394][ T5844] usb usb4-port1: unable to enumerate USB device SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1329.891632][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1329.931974][ T31] task:syz.0.5452 state:D stack:26952 pid:22953 tgid:22952 ppid:18999 task_flags:0x400040 flags:0x00004004 [ 1329.961612][ T31] Call Trace: [ 1329.965050][ T31] [ 1329.968016][ T31] __schedule+0x16fd/0x4cf0 [ 1329.981801][ T31] ? do_filp_open+0x1fa/0x410 [ 1329.986559][ T31] ? do_sys_openat2+0x121/0x1c0 [ 1329.991465][ T31] ? __lock_acquire+0xab9/0xd20 [ 1330.021650][ T31] ? schedule+0x165/0x360 [ 1330.026166][ T31] ? __pfx___schedule+0x10/0x10 [ 1330.031086][ T31] ? schedule+0x91/0x360 [ 1330.091791][ T31] schedule+0x165/0x360 [ 1330.096141][ T31] schedule_preempt_disabled+0x13/0x30 [ 1330.121644][ T31] __mutex_lock+0x724/0xe80 [ 1330.126244][ T31] ? __mutex_lock+0x51b/0xe80 [ 1330.130964][ T31] ? bdev_open+0xe0/0xd30 [ 1330.175410][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1330.180516][ T31] ? wait_on_inode+0xc0/0x230 [ 1330.201698][ T31] ? kobject_get_unless_zero+0x161/0x1f0 [ 1330.207416][ T31] ? disk_block_events+0xab/0x120 [ 1330.242741][ T31] ? bdev_open+0xaf/0xd30 [ 1330.247163][ T31] bdev_open+0xe0/0xd30 [ 1330.251376][ T31] blkdev_open+0x3a8/0x510 [ 1330.281615][ T31] ? __pfx_blkdev_open+0x10/0x10 [ 1330.286658][ T31] do_dentry_open+0x950/0x13f0 [ 1330.291487][ T31] vfs_open+0x3b/0x340 [ 1330.325030][ T31] ? path_openat+0x2ecd/0x3830 [ 1330.329845][ T31] path_openat+0x2ee5/0x3830 [ 1330.358219][ T31] ? arch_stack_walk+0xfc/0x150 [ 1330.363542][ T31] ? __pfx_path_openat+0x10/0x10 [ 1330.368522][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.391678][ T31] do_filp_open+0x1fa/0x410 [ 1330.396258][ T31] ? __lock_acquire+0xab9/0xd20 [ 1330.401158][ T31] ? __pfx_do_filp_open+0x10/0x10 [ 1330.421682][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1330.426617][ T31] ? alloc_fd+0x64c/0x6c0 [ 1330.431014][ T31] do_sys_openat2+0x121/0x1c0 [ 1330.451691][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 1330.457072][ T31] ? exc_page_fault+0x76/0xf0 [ 1330.472039][ T31] ? do_user_addr_fault+0xc8a/0x1390 [ 1330.477411][ T31] __x64_sys_openat+0x138/0x170 [ 1330.502086][ T31] do_syscall_64+0xfa/0x3b0 [ 1330.506671][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1330.521018][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.541670][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1330.546576][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.571748][ T31] RIP: 0033:0x7f8f26f8d290 [ 1330.576326][ T31] RSP: 002b:00007f8f27e06b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1330.611707][ T31] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8f26f8d290 [ 1330.619760][ T31] RDX: 0000000000000000 RSI: 00007f8f27e06c10 RDI: 00000000ffffff9c [ 1330.652598][T13862] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1330.671652][ T31] RBP: 00007f8f27e06c10 R08: 0000000000000000 R09: 002364626e2f7665 [ 1330.691710][ T31] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 1330.699839][ T31] R13: 0000000000000000 R14: 00007f8f271b5fa0 R15: 00007ffd2e0e98a8 [ 1330.721701][ T31] [ 1330.731706][ T31] [ 1330.731706][ T31] Showing all locks held in the system: [ 1330.739486][ T31] 1 lock held by khungtaskd/31: [ 1330.764332][ T31] #0: ffffffff8e53e2e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1330.788994][ T31] 3 locks held by kworker/u8:6/1144: [ 1330.796007][ T31] #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1330.809980][ T31] #1: ffffc90003c07bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1330.827795][ T31] #2: ffffffff8f93cb08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1330.837195][ T31] 2 locks held by getty/5606: [ 1330.843999][ T31] #0: ffff888033dbf0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1330.871587][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1330.886274][ T31] 1 lock held by udevd/5843: [ 1330.890944][ T31] #0: ffff8880257ed358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1330.900391][ T31] 1 lock held by udevd/5856: [ 1330.905150][ T31] #0: ffff8880257b1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1330.914847][ T31] 1 lock held by udevd/5857: [ 1330.919486][ T31] #0: ffff8880257e9358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1330.928984][ T31] 1 lock held by syz.9.4804/21151: [ 1330.934932][ T31] #0: ffffffff8f93cb08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1330.944389][ T31] 1 lock held by syz.7.5346/22638: [ 1330.949551][ T31] #0: ffffffff8f93cb08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 1330.961509][ T31] 1 lock held by syz.0.5452/22953: [ 1330.966968][ T31] #0: ffff8880257b1358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1330.976397][ T31] 1 lock held by syz.3.6251/25531: [ 1330.981638][ T31] #0: ffffffff8e543e38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1330.995794][ T31] [ 1330.998181][ T31] ============================================= [ 1330.998181][ T31] [ 1331.007287][ T31] NMI backtrace for cpu 1 [ 1331.007306][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1331.007331][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1331.007344][ T31] Call Trace: [ 1331.007353][ T31] [ 1331.007361][ T31] dump_stack_lvl+0x189/0x250 [ 1331.007395][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1331.007430][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1331.007460][ T31] ? __pfx__printk+0x10/0x10 [ 1331.007503][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1331.007537][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1331.007564][ T31] ? _printk+0xcf/0x120 [ 1331.007598][ T31] ? __pfx__printk+0x10/0x10 [ 1331.007631][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1331.007659][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1331.007691][ T31] watchdog+0xfee/0x1030 [ 1331.007716][ T31] ? watchdog+0x1de/0x1030 [ 1331.007755][ T31] kthread+0x70e/0x8a0 [ 1331.007790][ T31] ? __pfx_watchdog+0x10/0x10 [ 1331.007812][ T31] ? __pfx_kthread+0x10/0x10 [ 1331.007844][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1331.007876][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1331.007895][ T31] ? __pfx_kthread+0x10/0x10 [ 1331.007925][ T31] ret_from_fork+0x3f9/0x770 [ 1331.007954][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1331.007987][ T31] ? __switch_to_asm+0x39/0x70 [ 1331.008005][ T31] ? __switch_to_asm+0x33/0x70 [ 1331.008023][ T31] ? __pfx_kthread+0x10/0x10 [ 1331.008055][ T31] ret_from_fork_asm+0x1a/0x30 [ 1331.008092][ T31] [ 1331.008100][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1331.134610][ T11] block nbd0: Possible stuck request ffff888025c15080: control (read@0,1024B). Runtime 1020 seconds [ 1331.137950][ C0] NMI backtrace for cpu 0 [ 1331.137965][ C0] CPU: 0 UID: 0 PID: 11 Comm: kworker/0:0H Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1331.137986][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1331.137999][ C0] Workqueue: kblockd blk_mq_timeout_work [ 1331.138026][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 1331.138046][ C0] Code: 89 fb e8 23 00 00 00 48 8b 3d 24 5e 29 0c 48 89 de 5b e9 03 f9 59 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 60 e7 92 65 8b 15 48 69 [ 1331.138062][ C0] RSP: 0018:ffffc900001067f0 EFLAGS: 00000293 [ 1331.138077][ C0] RAX: ffffffff8b7bc51f RBX: 0000000000000533 RCX: ffff88801d293c00 [ 1331.138090][ C0] RDX: 0000000000000000 RSI: 0000000000000533 RDI: 0000000005f5e0ff [ 1331.138102][ C0] RBP: ffffc90000106940 R08: ffffc900001068b7 R09: 0000000000000000 [ 1331.138114][ C0] R10: ffffc900001068a0 R11: fffff52000020d17 R12: 0000000000000533 [ 1331.138127][ C0] R13: 0000000000000533 R14: ffffc900001068a0 R15: 0000000005ffff0a [ 1331.138140][ C0] FS: 0000000000000000(0000) GS:ffff8881257aa000(0000) knlGS:0000000000000000 [ 1331.138154][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1331.138167][ C0] CR2: 0000562dd151c000 CR3: 0000000033206000 CR4: 00000000003526f0 [ 1331.138183][ C0] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 1331.138194][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1331.138205][ C0] Call Trace: [ 1331.138212][ C0] [ 1331.138219][ C0] put_dec+0xbf/0xe0 [ 1331.138245][ C0] number+0x2f8/0xf60 [ 1331.138270][ C0] ? number+0x41/0xf60 [ 1331.138294][ C0] ? __pfx_number+0x10/0x10 [ 1331.138319][ C0] ? format_decode+0x5a3/0xe30 [ 1331.138345][ C0] vsnprintf+0x91b/0xf00 [ 1331.138374][ C0] sprintf+0xd9/0x120 [ 1331.138397][ C0] ? number+0xd18/0xf60 [ 1331.138421][ C0] ? __pfx_sprintf+0x10/0x10 [ 1331.138442][ C0] ? number+0x41/0xf60 [ 1331.138465][ C0] ? desc_read+0x208/0x3f0 [ 1331.138491][ C0] info_print_prefix+0x155/0x310 [ 1331.138510][ C0] ? __pfx_info_print_prefix+0x10/0x10 [ 1331.138533][ C0] ? _prb_read_valid+0xa7b/0xa90 [ 1331.138554][ C0] ? desc_read+0x1b8/0x3f0 [ 1331.138579][ C0] record_print_text+0x154/0x430 [ 1331.138607][ C0] ? __pfx__prb_read_valid+0x10/0x10 [ 1331.138630][ C0] ? __pfx_record_print_text+0x10/0x10 [ 1331.138658][ C0] ? this_cpu_in_panic+0x4f/0x80 [ 1331.138684][ C0] printk_get_next_message+0x26d/0x7b0 [ 1331.138715][ C0] ? __pfx_printk_get_next_message+0x10/0x10 [ 1331.138743][ C0] ? __lock_acquire+0xab9/0xd20 [ 1331.138767][ C0] ? console_flush_all+0x13a/0xc40 [ 1331.138797][ C0] ? console_flush_all+0x476/0xc40 [ 1331.138825][ C0] console_flush_all+0x4ca/0xc40 [ 1331.138853][ C0] ? console_flush_all+0x13a/0xc40 [ 1331.138879][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1331.138908][ C0] ? __pfx_console_flush_all+0x10/0x10 [ 1331.138939][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1331.138959][ C0] console_unlock+0xc4/0x270 [ 1331.138983][ C0] ? __pfx_console_unlock+0x10/0x10 [ 1331.139008][ C0] ? vprintk_emit+0x444/0x7a0 [ 1331.139030][ C0] ? vprintk_emit+0x444/0x7a0 [ 1331.139053][ C0] vprintk_emit+0x5b7/0x7a0 [ 1331.139076][ C0] ? vprintk_emit+0x444/0x7a0 [ 1331.139099][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 1331.139124][ C0] ? __pfx_snprintf+0x10/0x10 [ 1331.139146][ C0] ? update_load_avg+0x572/0x1880 [ 1331.139175][ C0] dev_vprintk_emit+0x337/0x3f0 [ 1331.139203][ C0] ? __lock_acquire+0xab9/0xd20 [ 1331.139223][ C0] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 1331.139257][ C0] dev_printk_emit+0xe0/0x130 [ 1331.139282][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1331.139303][ C0] ? __pfx_dev_printk_emit+0x10/0x10 [ 1331.139328][ C0] ? trace_sched_exit_tp+0x38/0x120 [ 1331.139345][ C0] ? __schedule+0x171b/0x4cf0 [ 1331.139373][ C0] ? __dev_printk+0x131/0x190 [ 1331.139400][ C0] _dev_info+0x10a/0x160 [ 1331.139428][ C0] ? __pfx__dev_info+0x10/0x10 [ 1331.139454][ C0] ? nbd_get_config_unlocked+0x152/0x210 [ 1331.139477][ C0] ? __pfx_nbd_get_config_unlocked+0x10/0x10 [ 1331.139504][ C0] nbd_xmit_timeout+0x832/0xb30 [ 1331.139532][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1331.139561][ C0] blk_mq_handle_expired+0x16f/0x2c0 [ 1331.139587][ C0] ? __pfx_blk_mq_handle_expired+0x10/0x10 [ 1331.139611][ C0] bt_iter+0x2f3/0x3c0 [ 1331.139639][ C0] sbitmap_for_each_set+0x301/0x5e0 [ 1331.139670][ C0] ? __pfx_bt_iter+0x10/0x10 [ 1331.139695][ C0] ? __pfx_sbitmap_for_each_set+0x10/0x10 [ 1331.139721][ C0] ? xa_find+0x25b/0x2b0 [ 1331.139744][ C0] ? __pfx_blk_mq_handle_expired+0x10/0x10 [ 1331.139769][ C0] blk_mq_queue_tag_busy_iter+0x43b/0x770 [ 1331.139797][ C0] ? __pfx_blk_mq_handle_expired+0x10/0x10 [ 1331.139823][ C0] ? __pfx_blk_mq_queue_tag_busy_iter+0x10/0x10 [ 1331.139849][ C0] ? debug_object_free+0x2a2/0x340 [ 1331.139876][ C0] ? __pfx_blk_mq_handle_expired+0x10/0x10 [ 1331.139904][ C0] ? __synchronize_srcu+0x316/0x3a0 [ 1331.139924][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1331.139952][ C0] ? __pfx___synchronize_srcu+0x10/0x10 [ 1331.139972][ C0] ? __pfx_wakeme_after_rcu+0x10/0x10 [ 1331.140000][ C0] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 1331.140027][ C0] ? synchronize_srcu+0x295/0x2c0 [ 1331.140049][ C0] blk_mq_timeout_work+0x1d6/0x3e0 [ 1331.140072][ C0] ? __pfx_blk_mq_timeout_work+0x10/0x10 [ 1331.140098][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1331.140124][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1331.140146][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 1331.140168][ C0] process_scheduled_works+0xae1/0x17b0 [ 1331.140204][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1331.140234][ C0] worker_thread+0x8a0/0xda0 [ 1331.140268][ C0] kthread+0x70e/0x8a0 [ 1331.140296][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1331.140317][ C0] ? __pfx_kthread+0x10/0x10 [ 1331.140343][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1331.140369][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1331.140385][ C0] ? __pfx_kthread+0x10/0x10 [ 1331.140411][ C0] ret_from_fork+0x3f9/0x770 [ 1331.140434][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1331.140458][ C0] ? __switch_to_asm+0x39/0x70 [ 1331.140474][ C0] ? __switch_to_asm+0x33/0x70 [ 1331.140489][ C0] ? __pfx_kthread+0x10/0x10 [ 1331.140515][ C0] ret_from_fork_asm+0x1a/0x30 [ 1331.140543][ C0] [ 1331.391631][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1331.391661][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250716-syzkaller #0 PREEMPT(full) [ 1331.391691][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1331.391708][ T31] Call Trace: [ 1331.391719][ T31] [ 1331.391733][ T31] dump_stack_lvl+0x99/0x250 [ 1331.391781][ T31] ? __asan_memcpy+0x40/0x70 [ 1331.391815][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1331.391851][ T31] ? __pfx__printk+0x10/0x10 [ 1331.391901][ T31] vpanic+0x281/0x750 [ 1331.391935][ T31] ? __pfx_vpanic+0x10/0x10 [ 1331.391964][ T31] ? preempt_schedule+0xae/0xc0 [ 1331.392006][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1331.392052][ T31] panic+0xb9/0xc0 [ 1331.392080][ T31] ? __pfx_panic+0x10/0x10 [ 1331.392112][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1331.392149][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1331.392187][ T31] watchdog+0x102d/0x1030 [ 1331.392219][ T31] ? watchdog+0x1de/0x1030 [ 1331.392255][ T31] kthread+0x70e/0x8a0 [ 1331.392295][ T31] ? __pfx_watchdog+0x10/0x10 [ 1331.392342][ T31] ? __pfx_kthread+0x10/0x10 [ 1331.392383][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1331.392419][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1331.392441][ T31] ? __pfx_kthread+0x10/0x10 [ 1331.392478][ T31] ret_from_fork+0x3f9/0x770 [ 1331.392513][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1331.392551][ T31] ? __switch_to_asm+0x39/0x70 [ 1331.392572][ T31] ? __switch_to_asm+0x33/0x70 [ 1331.392595][ T31] ? __pfx_kthread+0x10/0x10 [ 1331.392632][ T31] ret_from_fork_asm+0x1a/0x30 [ 1331.392674][ T31] [ 1331.395295][ T31] Kernel Offset: disabled