last executing test programs: 10m40.25934841s ago: executing program 32 (id=519): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/29, 0x1d}], 0x1, 0x0, 0x0) 9m15.624757424s ago: executing program 33 (id=1319): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x14, 0xa, 0x0, 0x0, @ipv6=@loopback={0x200000000000000}}]}, 0x28}}, 0x84) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x1000, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000800), 0x0, 0x2) ioctl$VIDIOC_QUERY_EXT_CTRL(r5, 0xc0e85667, &(0x7f00000000c0)={0x40980001, 0x0, "bf5dff0f258c6b1765c2141433ae000000000000000000000000000000008000", 0x0, 0x0, 0x0, 0x0, 0x0, 0xc28c}) splice(r0, 0x0, r4, 0x0, 0x80, 0x0) write$binfmt_aout(r1, &(0x7f00000004c0)=ANY=[], 0x120) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$nci(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f00000000c0)=0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x24, r9, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}}, 0x0) 6m4.541570531s ago: executing program 34 (id=2933): rt_tgsigqueueinfo(0x0, 0x0, 0x30, &(0x7f0000000100)={0x1a, 0x1, 0xb}) ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 5m53.743377s ago: executing program 2 (id=3014): mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='rpc_pipefs\x00', 0x200000000000000, 0x0) 5m53.691309723s ago: executing program 2 (id=3016): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, r1) r2 = getpgid(r1) setpgid(0x0, r2) lstat(&(0x7f0000002500)='./file1\x00', &(0x7f0000002540)) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 5m53.455786528s ago: executing program 2 (id=3020): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x5, 0xa, 0x4}) (async) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x5, 0xa, 0x4}) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000140)) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f00000000c0)={0x1, 0x2}) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0086401, &(0x7f0000000000)={0x0, 0x0}) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x14) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000240)=0x7ffb, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20010, r2, 0x45805000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x20010, r2, 0x45805000) accept4$x25(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0x12, 0x80000) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000000040)="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") epoll_create1(0x0) (async) r5 = epoll_create1(0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x280, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x4, 0x5}, 0x0) syz_io_uring_setup(0xcbf, &(0x7f00000000c0)={0x0, 0xd94b, 0x40, 0x3, 0x39a}, 0x0, 0x0) (async) syz_io_uring_setup(0xcbf, &(0x7f00000000c0)={0x0, 0xd94b, 0x40, 0x3, 0x39a}, 0x0, 0x0) read$nci(r6, &(0x7f0000001040)=""/110, 0x6e) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r8, &(0x7f0000000100)={0x20000014}) recvmmsg(r7, &(0x7f0000007b00)=[{{0x0, 0x0, 0x0}, 0x73c}], 0x1, 0x20882ecd3203f66c, 0x0) (async) recvmmsg(r7, &(0x7f0000007b00)=[{{0x0, 0x0, 0x0}, 0x73c}], 0x1, 0x20882ecd3203f66c, 0x0) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 5m52.779340463s ago: executing program 2 (id=3028): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, r1) r2 = getpgid(r1) setpgid(0x0, r2) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 5m52.661490654s ago: executing program 2 (id=3030): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0xf0ffffff, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',cache=fscache']) 5m52.255191119s ago: executing program 2 (id=3032): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x21, 0x0, "0000000000000000000000000000000000000000000000000000aa00"}, 0xd8) 5m51.89973658s ago: executing program 35 (id=3032): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x20000000005, 0x21, 0x0, "0000000000000000000000000000000000000000000000000000aa00"}, 0xd8) 5m25.102935759s ago: executing program 1 (id=3217): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect(r0, &(0x7f0000000b80)=@vsock={0x28, 0x0, 0x5eb131dfbc48959b, @hyper}, 0x80) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000b40)={'syztnl2\x00', &(0x7f0000000ac0)={'ip6tnl0\x00', 0x0, 0x29, 0xb, 0x8, 0x5, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7, 0x7, 0x1, 0x8}}) sendmmsg$inet(r1, &(0x7f0000002c80)=[{{&(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="7c620205a528e7e66f0d1d7c8306d3b8a362125e5d1d58607f8bb4798d0d92a45526129a0bb40e9a1ac19385527b189651ec8cbf021f752041b336c84e747d9a444313509dc2c8251df6984223119493cf5fcd1939cdb17764b97c529f9c3d12162a2fd9a9293fee0fb3de89bb4ce5380a4ff7497304941eda9d5d91276e18bc10e26e78851d07c907b12d285fcf3355297185fe2fe1473757add79313098afa1482", 0xa2}, {&(0x7f0000000280)="92825f2bac28db22171ef4d8664dc7cc143eaca9ea155359c819229d7d9551a694d251adaaab3180427b6ce0886aedfbdd610597634b399ce31392a9feef51d4ded473f919bc41b5994ac7b5edee82f2af6c029538d357ea1c37acbc811fd6a6a0bac9210ae2d1e53b37e1bb11dadc1c31b8324e5a57a42d5e592a9d74e1f6e53395e591f0f5f08b6b0c2e9d4b0dded7165c7eea4e61cd970f5e83220e084aa903dfe43fa049332ec71c9bd466cf4e340e124efb78b641623d8221db3cdf68182b30ba6652f9f47bb58e5751ad46edc291059c090703c691572aa6cb59dbf9a250c426be181dbff23f58378ead37acde6b", 0xf1}, {&(0x7f00000001c0)="1979752c4290d41219d9a527f8167f00302799765961e7fe7d545bb016fd7fb29bb1f473fa723f021eb858da25a1bb83e9377ffa827a3d6a6bef4bf9cbef81ad0c1336a34e2a8909289f9c2ebfddd0c1737c913a7a197e49a7bc3a3f13650b55d44758c14e85e96f60f35c0ce149eb738cd5451d2398e0f6031cea50", 0x7c}, {&(0x7f0000000380)="5396376921295d700cbf3b960b7a7c055434e04a8df8f7a546cd644def4bd47a72d710f1986af6d5fb49549d43e4d1283647e89561b64e441c2345ebb1ae4505cad6efc916106a99fed76c74771bf5825b19f4394736f62583ed9a3c86708baf461bcc87010d5ae37e644751a1d12c205e9c8c5641a9ed7c925719dd19187005daf4e06b346fd99c7aa1fdd56fa790c90d155c9c86c1d66034e0321273d9707a387c82c735b46b77112e57fd", 0xac}, {&(0x7f0000000440)="0d3391246d", 0x5}], 0x5}}, {{&(0x7f0000000540)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000580)="680195f733da347306d7a453fa8f27ce7d75f6347e9906909ac5742d005a63adcdc17390b77eb06a6fdf435e4fbd28c0704a8ef3d588df2f0d3646365e8b54c27f23cf3957ffc7b7ab9c953df877ad36736d7f1468a06d7c2da08aa0a3351f382cc3bfce932e18c58ae332acc2e9cb474db0e666", 0x74}, {&(0x7f0000000600)="d3b198630bc53bfaeb8b6c776710ada7d4044ef125aad8b388a62f4e43ddb2bd2298a160939a64e480701b561ca03b0b57f20e3bf72e8b431e68fe4f166ebf6a2465a02d108b9ba2c2e1f9fcafa624270e32500bae0249f031e482f58c41c456beda09e2b29c13484b3ea393d7cd3270fd7cc40cbd25571b1a8f8b8c0e153757b5c46bfffed56af40a7d2196029476a06d9d464ace385885c2df13181210", 0x9e}, {&(0x7f00000006c0)="b696abb66cd3344ec793f5f665a5327de9fcac72ab55b614c3ca41262b69722365e11f457d081502e5120611dc0d08dab18874b0a14dd64e8e6ea57d466b366a06d6269f669813dbf5513e4187e531a8f7471fd4485f705e4c91cf14a3db87da14", 0x61}, {&(0x7f0000000740)="0db646d828969b5af2364fbbf74a79590ee2254b691818cbfd4816c8fd62befee5e66ebf022234a278befd4a1b8f46a661feb2d3cc4496c8f3b12ca3c2e9e43641832887033926865d5754cbdbb4e44933d087547126ffc78696ed3e1e9dea09856ebe684dda0450a536fe9ef5d12e659f3750cfbcc953d9f299b9710bd6a88a226ca9bdebbcabeaaaa18d995fb2e79256ee480d22ed2770f675e2d4dd77e2c57035", 0xa2}, {&(0x7f0000000800)="70dc26276d49d6238df7df969fe6a828370e2e73e86c68325573bda002523c04c9d874b750d7b37c985eae40e4357272288e5ff2576bf6ecf113948a85c23e4f2465d8587bde3c41aa2a202e8d669151ec85bcda8e75cc6e6b741f2fab0d3d20bf2287925346f7ba57", 0x69}, {&(0x7f0000000880)="3576b622b78971e3d2655df23d80d7e563a5a46e395270cbc500c265939fb776921de22d82379d42e63b2beba530eadc8037de978b1229f70c77b786f496a7200dca7638ea9f8791fc2a06643ec0aa842ebb13c0e98d10742d6bf28c10c294", 0x5f}, {&(0x7f0000000900)="64979b1ee1036258963f5565c9ca84b8c0ea12e6f415fef1ac8047ced716658b11bb3bd31aa914c6f33a8cc2722df8b129071f9dce951e841525e825e50f606712775efc1eea7d2c24df053f94f3dfeb244bbc0edb60e3e6e92d3e129815bc1ce2c790d7edab0f069c1e7c97331935efb293082b23d692c4093c37bf4bec1047a25267367685a8dc95d3ed6196f463dc2d2546e3eb620d0c5fc81ade1f75e6bfd00861e64ef10576acd8d99deb2574385cc929c9667eebac17e667ee2124bbb2331313b698db012f06988b33064f896e13336bc3bf82748f32720a7a784a4cdf847066a0b5057ee78bc75397a35d66e5f30cd44492bd", 0xf6}, {&(0x7f0000000a00)="51dd98cf8caa79252bd9b58a588bf669544a0fa87a50f8f987cc3e969f00ad7426", 0x21}], 0x8, &(0x7f0000002e00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2000}}, @ip_retopts={{0x78, 0x0, 0x7, {[@end, @cipso={0x86, 0x4a, 0x3, [{0x0, 0x12, "42021b89930a5ca0352f2a3eeeae98b4"}, {0x0, 0xb, "308a7b97f034bb8968"}, {0x2, 0x8, "a76bce904b2b"}, {0x1, 0xd, "b3c8b382d892976cfb11a8"}, {0x7, 0xc, "693ee96855776e2f0740"}, {0x7, 0x6, "debed823"}]}, @lsrr={0x83, 0x17, 0xf7, [@rand_addr=0x64010100, @broadcast, @local, @rand_addr=0x64010100, @multicast1]}, @ra={0x94, 0x4}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @multicast1}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xf8}}, {{&(0x7f0000000c40)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000c80)="fc2f811a05b0122f8e5de4cf7eff22cacdf836da0b0465337456d3cf763fb4", 0x1f}, {&(0x7f0000000cc0)="22c722c39ae1d69e9fc8b8f3443788ded05ae7ab855788bbbdeae29908f9fb78a7e7fa015879ec0f13ba3e71b1c2ac6194b61bbfffb9289e4df840fd9de62aa924578aff4492ed33084b75a1e3366ff6d9d41d07ab96452864223eaa5ed1b47d32314fe75f7d498050584e5cfcf402853a9733257bbe69817dda2b981a57", 0x7e}, {&(0x7f0000000d40)="ff5bef1017aad3e61df928a82c0c9e1c25b52578ea69532d9c0544e067c95a25fec80d0ddd175b51cf75e9b375a4d3e34a32614f0a5eb204ae7f5b775ad73663840399bad493", 0x46}, {&(0x7f0000000dc0)="c6d5388eacdf9b91d03543728d2597552ce3f111783ce7d48b4a313d890e401dcf8d8aa5040b90e82d7d0e0f4e78db11f35e05625fc0d821ff57c1740fd539b9b9a37ec7d4ed3b3eaaea5472ce81ada564d76fdc6aa113bf0c7bb3b07b5f4e81f31fd0c744e8", 0x66}], 0x4, &(0x7f0000000e80)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc0e7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fffffff}}], 0x48}}, {{&(0x7f0000000f00)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000011c0)=[{&(0x7f0000000f40)="31e63074fdc414113924124df3d939e46563", 0x12}, {&(0x7f0000000f80)="24827f5fe7e730fa520fa9ab67913e7decf50c0d9ea3", 0x16}, {&(0x7f0000000fc0)="252584cb56b1ccaf52cea9c17b3fcf69050119c1f9bd7c2634e5bd5622783756059e24f4e6c2686fe64838c934c31d1f24dc43b92d8da1feb2b222a5e17421a0b3bb09081995ae38eea1195c3ab69e071e881f1b1805a3ff2478f7d402c708bbf134f7dc511761ed909dc0819d7b5058d9599c19fabdb1a360f833e96c71412b0387c8eef6577584ef8faa797847fddaacb547495dd0f45dba570ab3dd7eca8d0356d1ab362cd21419b623743fcdf7c6028e9e9c7df7ecd441", 0xb9}, {&(0x7f0000001080)="dc2c0c907bd17549737a39775a22990d44f0fa2867b3a7c27337c880a7f1723c85025ff1ee52bdb63eb930baaff6aa421e0dc59ac034e6bedce82529dec0f111aa93928f082a68aa20b9dccbe4350aab84cd3ef410af25c85e43e4d5fbc86f8cf7eb35a83e2309c4583fe5e14972901c28d6", 0x72}, {&(0x7f0000001100)="548683712f43b8c834a435be364958b75702bf77970e1ed9de4b3cfc514d689f0eaa1a1fc4689556e8c9c2884655bb2dd3ad98068158d09b2abcd73ccc222db9ba4104ba6872b2bd068674f7424f33a30bbaec24586fb651e053ab4444a7a4af072083c28a0275eab664e3082526986b7deb8abbebf58cb3e63bfcc555bab1618fa002e9bf3b1231", 0x88}], 0x5, &(0x7f0000001240)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}], 0x18}}, {{&(0x7f0000001280)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000001880)=[{&(0x7f00000012c0)="36bd8350723113c517d419de3667119dfc3442b876250cc8e219f0a472b1fbcd7066b9197f3ca3167b", 0x29}, {&(0x7f0000001300)="4e884a824f4dcd5adc1a2ed25125033457ffec6a6e8dc54488253c3e22278a6dced8384286f33f221d54f316e90d1980a1ba6f0a3a395504faf28397a2691bb0304eeeb781998854c538281b8c65b988580162be93fdf583042be67ceed0cc0b738e24d900cbeb73bb63ffa9450258b05bbc4695a75583a88cb65981df50732227cbdeae27c723d859fbf5d0ba3714627310e7c4e87ac65622687385351f65e45a5fb80f3a1870c3f11604139f99a62c45208b99038f5eeb1a04aabb3ec4ce10ace5596bf11a4aadcbaff269e1296a9cb1e14b49066b5c6fd0c0191e01671566f06b7a68208e33084001dc8c3e5ed1f38bebae5afb", 0xf5}, {&(0x7f0000001400)="73ce30c0a560e37ea7c883a6049d38ce3235601755480129f8dc27e6ff473aa19c120aa0ae7d3194af297535dee9c63d9eaabe49821221b2d48280fbb6bdbcc0c90fc72f9cec6c0b6ff3782548f46910b3f19cc5b5b02fb6706535ac9469bfb132862a39c520f74891826a0ddf4ddac06839359101bc0fc11c22b3ed3744b0c16e83d28ba1313801ef7ec60beee63b65f2ff4676a9b547ddab7c526120570bdc", 0xa0}, {&(0x7f00000014c0)="2b8ef0806d19cb12a63c8089e43001b3af82866dcd84680ad32efe810619d9e0c79ce6ef615919ce23a085e72e8644c182f70ae6fbca67275e255a8dfd6ad236666023799d40bc9c386d5edb12c0b014c463460fb916f88bfd2baa91a8f3f766bf9463856a5f08d63815e7c1b45359092d85fb1a95e036698690c3d84b001b790e31992088d727e8d591cbb60388d2a70074ea6b16452952acf3623a396eb1", 0x9f}, {&(0x7f0000001580)="9bf05819e61f7c2ff87632e6d6d7a9488d90dfbc6ac1e98c020de84d5607", 0x1e}, {&(0x7f00000015c0)="a57d3fbbe784f961c49bcb61587b5ec9544f487eedd99aa4", 0x18}, {&(0x7f0000001600)="a57757b88c29dd99556539e07767ce15619abc99bab1d9bb5f88004443ea36577597e9dfc566782c9933d4fba8abd114c8a92b904779d96f7c8aa5a331038e10167da2804f91e05ba9420b9e1a713c69188225c9f5974a1ea0ae7579232e74e5e0c5a0d26a2d0ec7a8154e264832e6f85fa2f09e7585edad278184b234b5fd7b343649e4c82a6919cf07c5169b6d82bef70b06593b90cb8aeba1dac774d2dcb9fe1448f2530bc77a39a25ba0da70a4fbf2845b389c36d26a2370ee41ee3a87c4a1f1a86889505b81c092723a266a7a3b4a3dae34f08f7b44c7401b485798e90117967d092c", 0xe5}, {&(0x7f0000001700)="3f11c586c5d1401ead6e5d60d0429d5966a1e6cb330361aed60107f9905d0378bdb3cbc261e12f0ea3eefa6ada3ffd601a501cf79c3831dddc9137a806c521cd3485d1f4ad549d27f43a4d990f7bd6dd6145c83dba5ade573f026f4c888f0b5bd98a6af27ef26cc746a87f5e8f11ad030f967a504edbe0c03ca3245701f686c9e4ab9c5bb58820732b566f561a47d88a190a36a63124d374988b30e11fe39fb8c0cdbe053c18e5fe", 0xa8}, {&(0x7f00000017c0)="cf5296afd224a236c498a2865b9ebea7ec489de9e4580f425fafa359207a810c52d94fd62ea198c7b52dd8da773158e57eb139768f065bde4d1c01fb38d86654ee774367540dbebd1ccbce5d71a20ad212b95aef841a0056030a0cec430a441c7824c1ec6e11c6a1895f10d15b98bba0f7805919c5423c33b182378b3355d676f164a6a32dca69a62dfc9b50e07e790d965b3259e37f967f146dcf1e07b586dac439e5828b8e1d11d40296a1f42f0c0a663f8cba92c4e63f29", 0xb9}], 0x9, &(0x7f0000001940)=[@ip_retopts={{0x30, 0x0, 0x7, {[@rr={0x7, 0x1f, 0x9b, [@multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0xc}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @loopback, @rand_addr=0x64010101]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x61}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0x90}}, {{&(0x7f0000001a00)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10, &(0x7f0000001b80)=[{&(0x7f0000001a40)="5036d50b9eddc4879c8493bc8a92ce88658e248839e51a547680e7177f44f0bf10e814d03a1922f75b049ee79d108b0e1203197c2f6f224b1d19e15d365bd3d4", 0x40}, {&(0x7f0000001a80)="8c557ca8630ea284e5da26f5c8cbd5e6c6eb5853367084ec3c26106d667cfa040cc3e0f3f33c2d52c33d36307d21ec0afb2d24fd3eff42c02764bf3ca4cc9777d69b1e2dadfe25d77621249bdf", 0x4d}, {&(0x7f0000001b00)="d0369e328f07d0718dc29c54a4d7a543b54e638c6cdaa8dde62133abb1732c6304fc41b7b5f197a44f953d147586f0b3f07b003a083b4b85cdc5538540132ae8facdd491a143a42aa7e66b23da9d35e413d5d058ae45", 0x56}], 0x3}}], 0x6, 0x8010) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) recvmmsg(r1, &(0x7f000000a400)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001c80)=""/4093, 0xffd}], 0x1}, 0x40}], 0x1, 0x10120, 0x0) 5m24.992546426s ago: executing program 1 (id=3219): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70020ff000008009e"], 0x44}, 0x1, 0x0, 0x0, 0x4048020}, 0x28000) 5m24.82877655s ago: executing program 1 (id=3221): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000001900000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c800e6800c00018008000140000000032400a8b088973c72a41f00070800014000000008080001400000000908000140000000080c000180080001400000000a24000180080001400000000608000140000000ff080001400000000208000140000000013400018008000140764f15e2080001400000000008000140000000070800014000000000080001400000000908000140000000001c000180080001400000002808000140000000cb0800014000000003140001800800014000000006080001400000000108000340000000a4"], 0x140}}, 0x0) 5m24.671318474s ago: executing program 1 (id=3223): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, r1) r2 = getpgid(r1) setpgid(0x0, r2) lstat(&(0x7f0000002500)='./file1\x00', &(0x7f0000002540)) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 5m24.62156253s ago: executing program 1 (id=3224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000a00000002000000140001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 5m24.258429542s ago: executing program 1 (id=3225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000f4fe00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d2140000"], 0x68}, 0x1, 0x0, 0x0, 0x4014}, 0x4048080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) 5m24.090224481s ago: executing program 36 (id=3225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000f4fe00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d2140000"], 0x68}, 0x1, 0x0, 0x0, 0x4014}, 0x4048080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) 2m42.544999488s ago: executing program 8 (id=4465): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="fde465744a", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x8000}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) unshare(0x22020400) r2 = socket$vsock_stream(0x28, 0x1, 0x0) shutdown(r2, 0x8c5d47e95537ac9b) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000440)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@redirect_dir_off}]}) 2m42.331042673s ago: executing program 8 (id=4468): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000031000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021501700001e0a05010000000000000000070000000900020073797a31000000000900010073797a300000000024170380300000802c000180250001007bb0c03ce8ed22d039cce454fd98ae614b08a9f3d4ddf1f742d55995afac076948000000f01600800c00054000000000000000000c00054000000000000000000c00044000000000000000000c00044000000000000000000600064019d20000ac0201802800028008000340000000000900020073797a310000000008000340000000000800018000000000380002800800034000000000080001800000000008000340000000000800034000000000090002"], 0x17d4}}, 0x0) 2m42.187271877s ago: executing program 8 (id=4471): socket$inet(0x2, 0x4000000000000001, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00'}) r1 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)='O', 0x28}], 0x1, 0x0, 0xf5ff, 0x2f00}}], 0x1, 0x0) 2m42.063234236s ago: executing program 8 (id=4472): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(0x0, &(0x7f0000000180)='./file0\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, r1) r2 = getpgid(r1) setpgid(0x0, r2) lstat(&(0x7f0000002500)='./file1\x00', &(0x7f0000002540)) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 2m41.946152753s ago: executing program 8 (id=4475): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRESDEC=0x0], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f"], 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg(r4, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='7', 0x1}], 0x1}}], 0x1, 0x1) r5 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r5, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={0x48, r6, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x12, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_b, @device_a, @initial, {0x7, 0xf95}, @value=@ver_80211n={0x0, 0x2, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x1, 0x3, 0x25c, @val={0x10, 0x1, 0x50}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r7 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4010, r0, 0x45809000) ioctl$HIDIOCSREPORT(r7, 0x400c4808, &(0x7f0000000000)={0x2, 0x300, 0xf}) 2m41.437560304s ago: executing program 8 (id=4478): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4000) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x80fe}, {{0x0, 0x0, 0x0}, 0x5431f000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000cc0)=""/260, 0x104}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f0000000800)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x7243}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe9c}, 0x7}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/154, 0x9a}, {&(0x7f0000000940)=""/238, 0xee}, {&(0x7f0000002b80)=""/4098, 0x1002}, {&(0x7f0000003e40)=""/4111, 0x100f}, {&(0x7f00000003c0)=""/101, 0x65}], 0x5}, 0x1452}, {{0x0, 0x0, 0x0}, 0x80000000}], 0x8, 0x22, 0x0) 2m40.963733849s ago: executing program 37 (id=4478): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4000) recvmmsg(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}, 0x80fe}, {{0x0, 0x0, 0x0}, 0x5431f000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000cc0)=""/260, 0x104}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f0000000800)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x7243}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0xe9c}, 0x7}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/154, 0x9a}, {&(0x7f0000000940)=""/238, 0xee}, {&(0x7f0000002b80)=""/4098, 0x1002}, {&(0x7f0000003e40)=""/4111, 0x100f}, {&(0x7f00000003c0)=""/101, 0x65}], 0x5}, 0x1452}, {{0x0, 0x0, 0x0}, 0x80000000}], 0x8, 0x22, 0x0) 2m39.96647383s ago: executing program 5 (id=4494): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x2000, 0x2) 2m39.829830936s ago: executing program 5 (id=4495): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x7, @any, 0x0, 0x1}, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000140)='securityfs\x00', 0x3b270b7, &(0x7f0000000280)='ts2j\xcc\xdb\x90a\xf1\xd9H\x7f*b\x99.:R\xa8A\xb7R\xd6;\xab\x8c!\xa4\x01\x88VD\xd7\xd8\x0e\x85\xa5\x14<}F\xb8\xa3\xd18I\xf6i\xadM\xa9\xeah\xab,\x9clo\xebC\xb0\xd4wd\xb0\r^\xc3Aa\x0e\xcb\x19\xe2\x96WKS\x02u7\xe83\x17\x95%\xfdGBc\xd4\x17\x95J\xcc\xb2f\xd7\xe9w\xb9~\x8a\xf4\xcb\x8ay\x93\xb2eM\x1e\x93\xae\xa0') chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x8, 0x80000001, 0x5, 0x2002, 0x20000000006, 0x7fffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 2m39.661842048s ago: executing program 5 (id=4497): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044940, &(0x7f0000000100)=0x14) mlockall(0x3) read(r2, &(0x7f00000019c0)=""/4093, 0xffd) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000400)={0xf0f002, 0x5}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) 2m37.566745114s ago: executing program 5 (id=4503): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, r1) r2 = getpgid(r1) setpgid(0x0, r2) lstat(&(0x7f0000002500)='./file1\x00', &(0x7f0000002540)) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) 2m37.362379487s ago: executing program 5 (id=4504): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d80d1f7f1dbb33f596"], 0xfc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000914) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601020301090222000100000000090400000129fddd00090500000000fff200070594ef"], 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000a40)=ANY=[@ANYRESOCT]) r4 = syz_usb_connect(0x0, 0xfffffffffffffdee, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x1d, 0x89, 0xfa, 0x40, 0x1b3d, 0x1da, 0x6a90, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0xffffffffffffff0f, 0x0, 0xff, 0x1, 0xa0}}]}}, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc0405519, 0x0) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r6, &(0x7f0000000600)=[{&(0x7f0000000140)="02000000", 0x4}, {0x0}], 0x2, 0x0, 0x0) syz_usb_ep_write(r4, 0xfc, 0x70, &(0x7f0000000180)="babee55c276386267c78dd777c3107bb599786875f555abc86f394feedc67e847d1cabe992e8d0234c44e6bd4cb2d919b0fbe563c94238ddfaa37d869251a61850d614c7a9e8b73d9b0fe468c95f3774302a95016e4b2284ede021d0ced2e37fea62e6b779aee06fc068ca5017e94e8f") r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000000)=0x3, 0x4) sendto$packet(r7, &(0x7f00000000c0)="3f031c00eee8140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) socket(0xf, 0x1, 0x7) r10 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r10, 0x112, 0x4, 0x0, 0x0) r11 = syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x10, 0x3, [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x7, 0x1, 0x3, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x1, 0x1, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x7f, 0x4}}]}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x200, 0x2, 0x26, 0xfe, 0x70, 0xb}, 0x12c, &(0x7f0000000300)={0x5, 0xf, 0x12c, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0xa, "dbf83b1284bc376cede92a0f94c221fd"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x14, 0x1, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x1, 0x3, 0x1, 0xff}, @generic={0xfe, 0x10, 0x1, "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"}]}, 0x2, [{0x9c, &(0x7f0000000440)=@string={0x9c, 0x3, "1069291f5b358fd91f82854a27eb4fc32d6574486d99d45f323678d6f9093f27265d9ee7d864c6126180f6e051ea6ec45778297dd5ee9e1d4f120bafc15ca9890f39e04b2333ce192e76562ad8f32ed5c0715959c7099b9a16621b3b50a6d4049ad3302997fb704ebf3ee66895d7bf99aa36ccb79f399f6b19ed1b47bc88ad11ae1a632fd7e6ae1ce2418921cfe9fec876075cfc18a399a6d381"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc1a}}]}) syz_usb_control_io$printer(r11, &(0x7f00000005c0)={0x14, &(0x7f0000000640)={0x0, 0x10, 0xa2, {0xa2, 0xf, "737c25ab16734f67bb1392fe8ca832c67a886a2755dd10365174d5b3b4be3908b78a08c00e834fe6d0f968660fd9d5fece377dd52f1ec5f3e023155c7bbef334af5022ef079870f74e8bba88acd99d88ca7acb9127827afa90d80fc302f8094d32670c7bc54beb8313d74ca80ceed6ac6a2312f15be9b9c709fbe3b53d971822ff10795535a730076a5e1cd48f8dd25d96a713807f481d78ab667707a08480c9"}}, &(0x7f0000000700)={0x0, 0x3, 0x81, @string={0x81, 0x3, "9504ec9e84917fb5bec907d002f98aa9b53fc14643d4a3620588baca6ef9e1c5f427e5681ba1acc32dc8770587cd769ab7e4a5e5308d8f5ee06d4319ced69526c30e8abe8a97c568aa30b5e189645270c354fc41d56fb0e0ed19f93a68a527ce2a2f91c9ccce541dca3e587ede4d2e4e01d1da585e807551f781238444c8ab"}}}, &(0x7f0000000a00)={0x34, &(0x7f00000007c0)={0x0, 0x3, 0x1b, "ebb79637046c1ef67e9070b7f39f4d1eda824d2b1a689889863abf"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x54}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000880)={0x20, 0x0, 0xd5, {0xd3, "be741f06591810901c8893507af17d9899ea06dc9d73eeaff32b4e3f86f2446e6ec045882c6ad3bbff760953688218815fe8d13b7063162d7bf79b6054b8964d30938276bda18a9a863e607c2a95eaf37dcdff27efb58771e8ac7cce79eb2f7b1970925e08e876391c3cdee28a2be658b2475da8d755a7db496d8c1a888441a1835dbb15b807f7b095f1ea39e8efa62465f20a633ff185e0e9638bf33d6aa20f3b516eed0bdab6187c261684e588ec2964ffa1971dea6e783161a614b7757524357d87ceba1abff5a01a092363a69c86b31cae"}}, &(0x7f0000000980)={0x20, 0x1, 0x1, 0x9}, &(0x7f00000009c0)={0x20, 0x0, 0x1, 0x1f}}) 2m36.221494255s ago: executing program 5 (id=4505): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}], 0x1, 0x1, 0x0, 0x0, 0x42, 0x5c}) r2 = socket$caif_seqpacket(0x25, 0x5, 0x2) connect(r2, &(0x7f00000002c0)=@nfc_llcp={0x27, 0x0, 0x1, 0x0, 0x8, 0x1, "aeadc233a20573f54110b96dc87683a424a5e4d81b7da7682cd74ab71687086a5f45f7c0511960fdce705f69ab3351a1f1dc10c10d8360ec7ad46a07bc3319", 0x27}, 0x80) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 2m35.773583635s ago: executing program 38 (id=4505): r0 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x83}], 0x1, 0x1, 0x0, 0x0, 0x42, 0x5c}) r2 = socket$caif_seqpacket(0x25, 0x5, 0x2) connect(r2, &(0x7f00000002c0)=@nfc_llcp={0x27, 0x0, 0x1, 0x0, 0x8, 0x1, "aeadc233a20573f54110b96dc87683a424a5e4d81b7da7682cd74ab71687086a5f45f7c0511960fdce705f69ab3351a1f1dc10c10d8360ec7ad46a07bc3319", 0x27}, 0x80) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 1m40.598469034s ago: executing program 6 (id=4885): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/253, 0xfd}], 0x1, 0x2, 0x7ff) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000002c0)=0xd) ioctl$TCFLSH(r1, 0x540b, 0x0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x11c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffbef}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff8}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7ff}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000855) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext3\x00', 0x400, 0x0) 1m40.227303788s ago: executing program 6 (id=4888): rt_sigqueueinfo(0x0, 0x21, &(0x7f0000002d00)={0xfffffffe, 0x0, 0xfffffff8}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r2 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000480)={0x0, "d53c0eb582cba9f1bc16e9ca85647283ccf9e9b7cfa617c953f8334fb77453e9d63eafb578307ceb8c0de24e1a2799fbe25a20bdffddd2b9708a52e314708472", 0x3d}, 0x48, r1) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xfffffffffffffffe) socketpair(0x26, 0x80000, 0x5, &(0x7f0000000600)) r3 = socket(0x10, 0x3, 0x0) fsopen(0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001e00010a"], 0x14}}, 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) splice(r3, 0x0, r5, 0x0, 0x8002, 0x0) dup(0xffffffffffffffff) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100006e40b740e1092151c1400102030109021200010000800000000000003cac2400"], 0x0) r7 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$IPC_INFO(r7, 0x3, &(0x7f0000001180)=""/4096) clock_gettime(0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x52418e567e5a9d8b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) syz_usb_control_io$printer(r6, 0x0, 0x0) 1m36.990997031s ago: executing program 6 (id=4913): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x81, 0x6a, 0xa, 0xbcf3}, {0x6, 0xf, 0xac, 0xc}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x49de, 0x0, 0x0, 0xf7, 0x0, "ec28a144f13d7607"}) (async) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) (async) r5 = syz_open_pts(r0, 0x0) r6 = dup3(r5, r0, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x44) r7 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000040)=0x1c) setsockopt$inet6_int(r7, 0x29, 0xce, &(0x7f0000000080)=0x5, 0x4) 1m35.959817584s ago: executing program 6 (id=4925): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000001c0)={0x0, 0x112, 0x7}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) dup2(r4, r1) flock(r1, 0x6) syz_emit_vhci(&(0x7f00000018c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x6, 0x1, 0x41c}}}, 0x7) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x1}) 1m35.593005634s ago: executing program 6 (id=4929): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0xfffffffe, @loopback}, 0x1c) (async, rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (rerun: 64) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000003100)=@gcm_128={{0x303}, "0000780000800008", "0dd12f0d004fcf0000e8bfff1a8600", "cf0f00", "8657e2b7e63b34e4"}, 0x28) (async) write$binfmt_script(r1, &(0x7f0000001300), 0x8f) (async, rerun: 64) recvmmsg(r1, 0x0, 0x0, 0x40000002, 0x0) (async, rerun: 64) writev(r1, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000013c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001380)=0x40) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000380)="ac", 0x1}], 0x1) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000380)={0x1, 0x10, 0xfa00, {0x0}}, 0x18) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000100)='xfs\x00', 0x208083, 0x0) 1m34.943384474s ago: executing program 6 (id=4933): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00?', @ANYRES16=r1, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb06001b004e230000050021"], 0x6c}}, 0x0) 1m34.39458846s ago: executing program 39 (id=4933): openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\x00\x00?', @ANYRES16=r1, @ANYBLOB="17090010000000000000010000000500070000000000080009000000000008000a0000080000060002000000000014001f00000000000000000000000000000000001400200000000000000000000000ffffac1414bb06001b004e230000050021"], 0x6c}}, 0x0) 1m0.140638859s ago: executing program 9 (id=5148): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r2 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000480)={0x0, "d53c0eb582cba9f1bc16e9ca85647283ccf9e9b7cfa617c953f8334fb77453e9d63eafb578307ceb8c0de24e1a2799fbe25a20bdffddd2b9708a52e314708472", 0x3d}, 0x48, r1) keyctl$KEYCTL_WATCH_KEY(0x20, r2, 0xffffffffffffffff, 0xfffffffffffffffe) socketpair(0x26, 0x80000, 0x5, &(0x7f0000000600)) r3 = socket(0x10, 0x3, 0x0) fsopen(0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001e00010a"], 0x14}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) splice(r3, 0x0, r5, 0x0, 0x8002, 0x0) dup(0xffffffffffffffff) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100006e40b740e1092151c1400102030109021200010000800000000000003cac2400"], 0x0) r7 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) shmat(r7, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) shmctl$IPC_INFO(r7, 0x3, &(0x7f0000001180)=""/4096) clock_gettime(0x0, 0x0) r8 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r8, 0x29, 0x37, &(0x7f0000000100)={0x11}, 0x8) keyctl$invalidate(0x15, r1) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r8, 0x29, 0x37, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x52418e567e5a9d8b, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) syz_usb_control_io$printer(r6, 0x0, 0x0) 56.743625716s ago: executing program 9 (id=5168): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000005f00)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r2, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}, 0x1, 0xd000000, 0x0, 0x4048020}, 0x28000) 56.527144024s ago: executing program 9 (id=5169): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x80000, 0x4) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000200)=""/4096, 0x1000) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8100, r2}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x1ff) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000180)={0x1, 0x14, 0x4, 0xfffd, 0x5f, 0x40, &(0x7f0000000480)="c9ea87d1c0e550f1a28fbc590fe3489fc3b1fa4828b551545d337b76b362d12de25d965d8ebc69c08ff64b72f94c9fde5b730f488f9a6f961aead38ece4e5a72e772805d1e5192819db1d15a6571e6c30246899c933f27eb61a36c978d828f"}) r3 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000080)="bc5d", 0x2, r3) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000001200)={0x10002, 0x5, 0x10000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) mount(&(0x7f0000000180)=@rnullb, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='jfs\x00', 0x8010, 0x0) 55.880559195s ago: executing program 9 (id=5174): pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1048001, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x2, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='./file0\x00') r1 = syz_clone(0x904000, 0x0, 0x5f, 0x0, 0x0, 0x0) setpgid(r1, r1) r2 = getpgid(r1) setpgid(0x0, r2) lstat(&(0x7f0000002500)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) (fail_nth: 5) 55.522177479s ago: executing program 9 (id=5178): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000f4fe00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d2140000"], 0x68}, 0x1, 0x0, 0x0, 0x4014}, 0x4048080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) 55.126081887s ago: executing program 9 (id=5181): mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f00000000c0)=0xc000000, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89b0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}, @broadcast, 0x0, 0x7}}) stat(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)) 54.489326968s ago: executing program 40 (id=5181): mount(&(0x7f0000000100)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='udf\x00', 0x200000, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x43, &(0x7f00000000c0)=0xc000000, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89b0, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @empty}, @broadcast, 0x0, 0x7}}) stat(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)) 7.474977845s ago: executing program 0 (id=5499): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x1, 0x100000, 0x1000, &(0x7f000076d000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f00007c7000/0x18000)=nil, &(0x7f0000000480)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, 0x0) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x12, r3, 0x99b33000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x10000000000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 7.259328929s ago: executing program 0 (id=5500): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) 7.233669314s ago: executing program 0 (id=5502): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) futex(0x0, 0xd, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x7ffffffe, 0xd, 0x0, 0x0, 0x0, 0x0) r1 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000b00)={0x34, &(0x7f0000000900)={0x40, 0x17, 0x1, "92"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000480)={0x0, "d53c0eb582cba9f1bc16e9ca85647283ccf9e9b7cfa617c953f8334fb77453e9d63eafb578307ceb8c0de24e1a2799fbe25a20bdffddd2b9708a52e314708472", 0x3d}, 0x48, r1) keyctl$KEYCTL_WATCH_KEY(0x20, r3, 0xffffffffffffffff, 0xfffffffffffffffe) socketpair(0x26, 0x80000, 0x5, &(0x7f0000000600)) r4 = socket(0x10, 0x3, 0x0) fsopen(0x0, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) pipe(&(0x7f0000000380)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socket$packet(0x11, 0x3, 0x300) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 3.917381264s ago: executing program 0 (id=5519): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x4, @remote, 'batadv_slave_1\x00'}}, 0x1e) r1 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r3, 0xc0884113, &(0x7f0000000240)={0x1, 0x8, 0x200, 0x10000, 0x2, 0x8, 0x1, 0x80000000008, 0x2, 0x2c, 0x7, 0x2}) sync() ioctl$PPPOEIOCSFWD(r0, 0x40047452, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x61901, 0x0) open_by_handle_at(r4, &(0x7f00000002c0)=@ocfs2={0xc, 0x1, {0x3c, 0x7fffffff, 0x7fffffff}}, 0x22000) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r3, {0x2}}, './file0\x00'}) 3.666958446s ago: executing program 7 (id=5522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r1, &(0x7f0000000a40)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000100)="02", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x5, 0x4, 0x9}, &(0x7f0000000040)=0x10) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB="b01100001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200002000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000f50300000000000000020000000000000000000000000000000104000000000000000000000000000002000000000000000300000000200000000000000000000000000000000000000100000000000000440005007f000001000000000000000000000000000000042b0000000a000000fe8000000000000000000000000000aa0000000004000b000000000000000000000000000c1008000810080000810010"], 0x11b0}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) close(r0) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r4 = syz_open_dev$rtc(0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) r5 = socket$kcm(0x10, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a90000000060a0b0400000000000000000200000064000480600001800a000100696e6e65720000005000028008000240000000840800034000000007080004400000000f08000140130000002c0005800c0001007061796c6f6164001c000280080004400000001c08000340000000b908000240000000000900010073797a30000000000900020073797a32"], 0xb8}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000240)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000034c0)=""/4092, 0xffc}, {&(0x7f00000007c0)=""/131, 0x83}, {&(0x7f0000001cc0)=""/207, 0xcf}, {&(0x7f00000044c0)=""/4091, 0xffb}, {&(0x7f0000000600)=""/95, 0x5f}, {&(0x7f0000001e80)=""/249, 0xf9}, {&(0x7f0000001c40)=""/73, 0x49}, {&(0x7f0000000440)=""/61, 0x3d}, {&(0x7f0000000a00)=""/204, 0xcc}, {&(0x7f0000001dc0)=""/143, 0x8f}, {&(0x7f0000000b80)=""/4096, 0x1000}], 0xb}, 0x40016002) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0) 2.894744587s ago: executing program 0 (id=5528): r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ntfs3\x00', 0x8000, 0x0) mknodat$loop(r0, &(0x7f0000000040)='./file0\x00', 0x6000, 0x0) 2.687387629s ago: executing program 4 (id=5530): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) 2.687129634s ago: executing program 0 (id=5531): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103000000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000400)={0x20, 0x15, 0xc2, "74ac64092df230ae5c9e6ee7130d3d61a4ee2278d8a44f4635c5286e998c9fc72f90ea337881b3e27c63b3a66e0dbc2b82961821e5b6615f472b6fb7eefaa48084ad9ac49d6861bfb6b52c05c475cb97715164a77822291e59d9ad85a75c088a7fb6f6bffdfef64c7617918dfc4fc8175bc6049fbb2c6ff4f5333cff5ed45e390c57d2cf213f605ef9fc6fc55d86051cfb667720173a0e6ab7440ec502b33f1c407b52c40214c94b7a56315d40103428b3f2b0eaf1c6f3001c688b6f06a75746c6bf"}, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x40, 0x7, 0x2, 0x9}, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, &(0x7f0000000780)={0x40, 0x17, 0x6}, &(0x7f00000007c0)={0x40, 0x19, 0x2, "9f21"}, &(0x7f0000000800)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000840)={0x40, 0x1c, 0x1, 0x4}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8010, r1, 0x9ec0b000) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000080)) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x453}, {}, {}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x2d, 0x2, 0x0, 0x5}) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) 2.5797152s ago: executing program 7 (id=5532): prlimit64(0x0, 0x8, &(0x7f0000000580)={0x8, 0x88}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = shmget(0x1, 0x2000, 0x200, &(0x7f0000ffc000/0x2000)=nil) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x1, 0x51e5, 0xd78, 0x9a, 0x1, 0x268], 0x1, 0x0, 0x0, [{}]}, 0x88) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'ip_vti0\x00', 0x400}) r2 = socket(0xa, 0x3, 0x3a) r3 = socket(0x840000000002, 0x3, 0xfa) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000080)=0x800, 0x4) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x1, 0x26}, 0xc) shmctl$SHM_LOCK(r0, 0xb) syz_emit_vhci(&(0x7f0000006300)=ANY=[@ANYBLOB="0407ff02aaaaaaaaaa1025"], 0x102) 2.5139192s ago: executing program 4 (id=5534): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000002c0)="b5640aae1e407af01eec", 0xa}], 0x1}, 0x40080c0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd050056002e005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 2.359015319s ago: executing program 7 (id=5535): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x4e00, 0x0, 0x730, 0xbdff, 0x10, "feeeff000000001b"}) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x7d, 0x0, 0x0, "0022c9ff00"}) r1 = syz_open_pts(r0, 0x8182) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00051400000000000000000000000800120000000200c06b6e000000000006000000000000000000000000000000e00000020000000000000000000000000000000000000000000000000000000105000500008000000a0000000000000000000000000000000000000000000001000000000000000005000600ff4700000a"], 0xa0}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xc040, 0x0, 0x0) r5 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x17) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000006140), 0x101082, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000006180)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) sendmmsg$alg(r5, &(0x7f0000005f80)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18}, @iv={0x38, 0x117, 0x2, 0x20, "6943e1467f2eb4c34696ee1aebec978b33baf22ea06b1961793cec3509217460"}, @iv={0xc8, 0x117, 0x2, 0xb1, "9c0f94bde99378c78b6f6e837e97d24abeb0255d5d00f62e7c5cd02bcf9661f5b64e659f3da160c2fd3b79d348c13e052f15654560ca8928a8b4efebb10e8e42d84199cbc92bce3fa987cd95485a9f0d612764be900a228b3cd96f59639de5e4f7492a6fd45bbb649c5dcd26568b0f8909eb6191975bef1111f17bfa53cc5d7c2d1a5f7667d2111cb0ca32fe4653f2114739ed8d1b5bc68ece635b4d5f1d785fa9b856bb30f308e767ebe0cacffcbed3e0"}, @op={0x18}], 0x1148, 0x20000004}, {0x0, 0x0, &(0x7f0000002480)=[{&(0x7f00000011c0)="3314b62534009c", 0x7}, {&(0x7f0000001200)="9dda8cd2aadc79077800f81f3ffe07648f43d1043416bbb855d78a716ddbc6e95dca2829634260265808601a328cd82dd0f71b3fc163858b52a3177da5cf5dae42e0a8578ac0c71079c9690c3ce4a64391e2ca8d7ce0af4b735e91e8dd3a26be64f1767a9c93e445391a7bdc664e0204c20e133569a4cefc0e52fa2b54201f1dc79c75394f8c042b4c7ef4852ae93d17dfbd1f407402e45b97596c6459a808221d4f54f8e6ad8839e59d6d919d7b9640e8c030366f9252925831e50891f718c4739b77be0214c3beed15be805a165629f6166e365c335edae842a4dab3", 0xdd}, {&(0x7f0000001300)="f9c4b171b35d3b8de295139e426b92ed02a152a50ae3141dd4771b1161f639bda040f1b284dbca3ea95c309196a67aa60bb04d8a77c7c91caf7e298368bca3300399833824d12efc82a3c0b2b02d90fbac2de842880cccae4893f5c8cc2fc6da3b7fea144929f17e64381a6622274b5e75483499c9efdffeac3c89e8db320b8c8a9621", 0x83}, {&(0x7f00000013c0)="c5109d0a5c23b4fda369a0ab70a42f60d97b3354056874f281bdf7f1af7f4fcb1d0be9435c1c9fb430", 0x29}, {&(0x7f0000001400)="ac09f7391f7cf2d8ee6208a9800f619e6d449dd203da8913b53c90283f6a17d39eba98234ee9fbe2d8e665e63cd54617d6957cd05ddbbb01e5d4f44206a6074cdc118acb3f92fe969d8b16a270f537573ed2f4ed3e8065251b143317117368f00edbe088", 0x64}, {&(0x7f0000001480)="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", 0x1000}], 0x6, &(0x7f0000002500)=[@op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xffffffff}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0xf0, 0x117, 0x2, 0xda, "27355ebb93841dc461c24c620b95e818e0861cc697df4084a450a582d64f7116f612a00925914274a7d784e7c34651fdb61d36c8196e578368b0dab9a8214b8ddcd1c2fb1e8845a117b64f72b3c63ac4c0470e57819b9ab753b638ea167c3d9d75f7c6c2a5114cfbe9bcfb1ffc449c0243c60a60963135179ed6f2580441b4bea025dcf9bfb76544286ed2365bd2b04c3fc15c57294031793a1a21eef62d1b7c7f03847529a8063c9bb38561d18a76db954a833fc6fcc75ec9fc893ae31d0f3b73da0570310a78ad335c19c6e4f9c9908b9d47b00d65a6e52957"}, @iv={0x68, 0x117, 0x2, 0x4f, "5b5180f8a2c87e9bf4bb84ac6852ccdb0d9862d048386793a6660148246777765ddbf362402e396f6c56159cc580282f17400e22658d6a6c6e7d0b00729669d27e261a8536295b0eea6e10382f510b"}, @iv={0x60, 0x117, 0x2, 0x4c, "1cd56e91d369d4204119a9f5d7dabe54bfce6c24deb89f007bb21dc0956122d97c3bf0eeb2cca045a842ce927af9bad1dd74ad4dd86f070b2c3b96319eca4a6d17dde771567eb21f2bbcd8ed"}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0xe590000}, @iv={0x90, 0x117, 0x2, 0x7b, "0ad979ece482574093b877cce7f084c554b9568e61ccefc5563d6d62435ce2a81b6d0b75f923459aba7a8d1274625a56308561d863fe401c6b2b4be40cd42df931837dba7e4fae893ecf96d5c1d64d72d046b29850a95065a6b887a7c92da333bacdee94bbbd7a605ba4cd5ec10dbd4a320eff9eefddf1074a2263"}], 0x2d8, 0x2400d0c0}, {0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002800)="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", 0xfe}, {&(0x7f0000002900)="87c17589730db6ae064c2050", 0xc}, {&(0x7f0000002940)="4f7928d67f1d5099e01bfc0a66bd3f0da0561d42ac8473a7d48a770534a75cb950e37ac7a28ba0940c2c0c89db8a01044cfe20663e0318f0b4f5641800f8041c36fb57e88cec81cf26c1c4dfceec2dd03a5836d2bc505a6b08024170f8189b6f8c7a5c35e72dccfe56e3ec3fb20e6b081c42d2a53961ac41252e779ec096535e1ddd8d27ea762854968d4926553af9bdcbfe96ca", 0x94}, {&(0x7f0000002a00)="7c7612733c38fefeeeaf994c146dcad54b2b93221a5ef8e0e24827db0926eeb8a21e664fdff42cbd86d979abe640e46d29cd058336fdab613f", 0x39}, {&(0x7f0000002a40)="45155ecba19df4a9b4e33e790fce22e50848624a0e191a8df834a0020288182c3d200850b217c92f2b82348d8d31be1f121ed9d8b46f36ae154ef3b0ff623e0ee494fa7eab3ead79be182407711c9ff50c209d8cbeca377345f31b3293054738d109e0474cca5cfa6061cccdf83a243fe365900c39127d03f20e3af6fd4c6bb2f69d3112181fc8d4b443cef4211d34cb54b2bdbee499e9ce7155548d8b8713efae6510e4e36e193f4e119e1a", 0xac}, {&(0x7f0000002b00)="f46b51bb9896a5cb9806d05ea63430cf411f9acf2ed8e0470a2b3f5c29", 0x1d}], 0x6, &(0x7f0000002bc0)=[@iv={0xd0, 0x117, 0x2, 0xbb, "0a7afaa33c15b4fde836ba7c775c9c28cd203d854c859b24443aa77afd728ae8c7cf3ed7ee946c399977be9f5316489f8e6fcd375e291f65700947f8205ce801deb6b258013fb74942dc6c429749c9ccddd59d92e33b645d0c0fb0f1adbbc3b62f6e3f340fced623b554b0a9b63214b9f16a70d462d777ce72c4ff36af3028157b1de5427d2e5de0f76cc87ec0ea163ac38b5b67b697e64ec51fcc04c41892977c297ba63408e27b1eb7d97ffc99c8567346bb405e9d536f53cf46"}, @op={0x18}, @iv={0x108, 0x117, 0x2, 0xf2, "331cd23b7182db94783a7778d82564926f10ee0319b20edd6f01da913a05a5f10f7aa21bd912a266582683326f69ab4c8c0ae499fed47bdd3088b7ce0c1c9f5599a426d8176d2d638e5402e465157682fde4ac0ecc9857c235d8ac44caf4cb7721728b37aa8f4c57ea4ca3acec9508f46c4e8d55038df7959c2d7a01bec7e3055a81857f5a5e2dd5458eebd07a3b5a2cc4cb3e77b548318c058eabb794a2280031b4fd9a5c3eef57d7cdb6e1b26ed18da584efc303e03c2e2a549d73f8261b37755899d4222fb10259e3f44586e11cbbdaec32119c5a063aea64c8337985d2a575f4aecb8651c7a8e43102399ae82e4145d5"}], 0x1f0, 0x20000040}, {0x0, 0x0, &(0x7f00000050c0)=[{&(0x7f0000002dc0)="f1ee74ec4720523184865ad62c929909a0addaea5f79f4f8346d46971565e32ecae256e21e4b451324a8d3e37281516f4d09da03e7a60add8a9809e9c37ca3bec990fdf2d3f4d2c848e27f54001e34bf1e6e596aa60c8f4a985aa8b4a123f9106bcb5502635924ded524861155aed7399061c19dd6c5ea5274deb8f567842cadc005545db4a9c22864dd4c15d0ed9fc34c64adc5dc83934b056ea2a6dbf435fe68da7f3b60ec02ad03622ad485b4e0ae4cb65021df", 0xb5}, {&(0x7f0000002e80)="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", 0x1000}, {&(0x7f0000003e80)="a27ada8639a327e0ce89e965c20082e50e775bf78d6f6e3f476847aa2267f12d22b8ff8e696df6e59083b58cfa9b53381cdd96fec22ab01a9a7bd503c6ecb41e9360040a3a715a9345129d4c52b6be10cf8528adce350190b369da638250daa1b016cc2b5c129765ddf31540ff0fe51643305177ab8cbc23a09ecc494f2750db4b0d2af361f1d10d163ea57534db454ba4597cc876a2c951acf5929eda0f4e0ab61d81", 0xa3}, {&(0x7f0000003f40)="e3626f59f7e24b72b4b3845c84da77e496e0d2ec4305c23ce06caa834fc35a30976f6cc51066429034d241d377f432ba3c1ef858d9119f41acfc132c11a818adbc37c7d83392dcd14c0d7fad2c5f6275704f2d1f8987cccc896093252f50e15d69997d8d2014f0a3fff1648c7a", 0x6d}, {&(0x7f0000003fc0)="39fee068dddacf4c35fa522c33ffcf338edf99883b5972cd08eb9ece627aa94a14a1ecc3917c8932587bbfef52e2d5d092594be5c749b46c857197c2d494e9320d6a297f651e2d6fdb5bdb2fbd9d163b15ef1ea820585bbc79ce82c43cd4348cd114db8d0cc8848d93ac3cdd845c03e9184862d3b4f491dda5c96bd7a76fb5fe6773f87016a886ce4544dc223da750839150f3ee2edf51f20a7520d8f0a8f3779fc9f77805e039d8b96eca9eb74be1f99459a537ae2973dffd395e5c185dc0a50c881877ca918b1c0cbd4bf02cee2cc8af2447b6c1", 0xd5}, {&(0x7f00000040c0)="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", 0x1000}], 0x6, &(0x7f0000005140)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x50, 0x117, 0x2, 0x3a, "b700201bb834edb620409eed9840b1e44e9b932b83eba8c9680c45ae893b64dfa886a69e8af1b50eab739d658de2c04d26259745ac9a98081b2b"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x40, 0x117, 0x2, 0x29, "bf9784d052c0964a0d1896aeca0bdd3c12d3057e529ba285878e935db45dab27547c5a984c71ba4709"}], 0xc0, 0xc801}, {0x0, 0x0, &(0x7f0000005400)=[{&(0x7f0000005200)="9c3648f445511531ae243f09bf8d6d70afb6acd1d22c500f66af76a5e4d13906e255e7d1403f4bcbbf99cf99675973574e8a77f7c1927e61bd21dbef82cc066e9ba187acf54e051a3ab051611145926fc62c230ccdc9118627942c973eada17732ecb1fa717a7ffcd9c6f19490eeba353d1e4eecd0c4c1f94ae3c2ef5395d1178e918749d0876d0404c6d82fe6fc74587fb962f9386e98f0", 0x98}, {&(0x7f00000052c0)="9fd5b3bf11334407b5ed72377e2c7e4ac3f92fb3b242b0b6c454273e577a453e168fb9f8f6f3a46e69486d73c464981ea2ae167d86efc65d4964eee4de1b9a29bd09e85784d6064a63098a95d69513e25cc052d7803a5d53ffbb6d804bb527e3b5943869dfda8d2ede0725eb0318bba617fd2fcbc41cc5c697e1df417e06df05e78fe9e3e2576089d987ce78c110eb0ee8514689bc5c5b5f551d838fe6c5f2b029d71a559f0781aa94ffbe753f2f9c528eb355618d1eeee540d1799306b908f50f80b3b02b2dee63", 0xc8}, {&(0x7f00000053c0)="09ad3be63c684c4824bc2cd4a435aaa0ee37eeeb9a5f6d2162fde7106fa30b0314070deee7", 0x25}], 0x3, &(0x7f0000005440)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x70, 0x117, 0x2, 0x56, "ddad05515228589f88708ece5ed6f2f6a62064d52e5a3e2b6d4402315f6357511cf0aec8ec2afcf44a50b7700a566e1c49185f8325d60c0b50b5404972e4f383a1847c9f501fc2caceb174a6e79de85287248f00e9c4"}], 0x88, 0x10050}, {0x0, 0x0, &(0x7f0000005840)=[{&(0x7f0000005500)="ddc8364908c79c20fb630b024e094ddae40378e2a959a3dfcac8f8a1a1cfd694b39b17dc5c10a5f975ef4912bd42fa62ef6235f2030f611561d5756d97363ccda12208cd15a65e5f488763ab562f0e9c8711628d8211e08623f05a2a88a79e", 0x5f}, {&(0x7f0000005580)="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", 0xfd}, {&(0x7f0000005680)="9f906b8a36cb893bab014185d66a4e0bc38afec409d265b12230e0a09f81d07bc06bb3470462ed445b6b9add67c342ab637169c46804dc30a080e85d1b0e80803232f407efabc9946e7b7891bf812bb12cce8cf49e409d2920536733181e153b3d00", 0x62}, {&(0x7f0000005700)="a9b1b9b4f2f9b9b52c9bd074d4e9d770cc0e3ce151fec99e7ab41297dea969dd30362382e4750a9d0e25e75676272499490e8df79d7d26d5a4a7b11cc9ad9216b2a1a703b1b2dde9e65449d1e697acade4", 0x51}, {&(0x7f0000005780)="3caf35a9e306c99083", 0x9}, {&(0x7f00000057c0)="38f3d8f9ce2126e913fb11211acb3f76689b1fceb036061ab4058e4a4a120e1386ae6891733720fc97941365d6d500c3aec7276ca6c1ccb766dd8524882269f10e42b600fc4fadc54c7bf44548ea0f69019381dd4cd118198a0566e8209ba4be7fc2afc3df73da038ee3056ec37b155d663763b2f3a1d6ab09", 0x79}], 0x6, &(0x7f00000058c0)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x74f1e3fd}, @iv={0xb0, 0x117, 0x2, 0x9b, "24bef722161bae7fef180ff91ddc4982c922310804213d7ef715fd3657e386190e6a4013333f0334ade31ab95ecddc7adffb6753b7aa172b3c719f0fdff342025f0d604e95a9304d0f33799bd3bb09626ce5a901ea11e3f34462f8f54e9794815637701ebabc8d8684fcfdb77484fbda898465b8c8ecd46a75cfed5d5fab8fcceffa6c468d040cf242d9b45d37a0fe0ee5749ce7523d3d027065ea"}, @iv={0xa8, 0x117, 0x2, 0x8f, "56b431c03032b03042361b47ba329ee1f9ef16aca45b5a83c986567232e511446a83eb0019da12f3962422db913bb1260d2ff498219cb76c342d68db0ee19a2d960f4d2193a69e2be9544b85c5d0150c495d21bc7c4c2aeafae464a646492aa8cdaf3a863ce2186e7505bf74793f7a9f174e4726007df9806ab9437917d303f041fba4fa02d2a885f1b93f63c9443b"}, @assoc={0x18, 0x117, 0x4, 0x1}, @iv={0x90, 0x117, 0x2, 0x7b, "f681ae971e4ddf2162aa0d1b60e3c46fc62b975e6e66a7ff8abdd771da85f20d16d4e279debf6e3914583282bf4cdd1a08261f3044d1ae47f8494d35493129d4e7585dfb59e6d428419238bcda832f5742a1e6025479563b8fe2b34fd36f77e49c2af348b901d8f680af8b0582f1c3bdf6e4ee1f3a137d81d130fd"}, @assoc={0x18, 0x117, 0x4, 0x773}, @iv={0xf8, 0x117, 0x2, 0xde, "67df83b4def8525cda053d899317dab5ad5f4937427db92240c326efa7463ca6d0b119c12dfea5ce27b76b72c377b3ed1df520dcfea1c058b3a335bffdb9225ac594c4d470c9c87e490391c77f08edc9af3b39eb84af37d6eaa865e96a4b085e88a97b33982b94f718978386d0a26314bb9182b3f1be846ddcd53668f72703dedea1a1f1347d691bdbc984dbcc2710351502d2eeeae91310d9bd12e60ea413b23a341225e19668fd9b0dbc96c3fa88d7dd4a83962254b4c850fe57871e352d7b2892cd1158b8755c6469d81b0641161244a105bc7233232e3ada6e6ede58"}, @assoc={0x18, 0x117, 0x4, 0x5}], 0x370, 0x805}, {0x0, 0x0, &(0x7f0000005e40)=[{&(0x7f0000005c40)="af84dcd4a0ea2851172f61151552873528012ecaa91d098805b953ebda5e3d625e0b24c6daa8ff6304381459ef16273de900af44cf183281fa9ade71af27a7a19a8c2164f46ee228621d0cac4bd40dbfd1f309e3e56cda447354f9a78db3eb1d6e24d9cccd171ef13ad2daf3a6bdd685", 0x70}, {&(0x7f0000005cc0)="de3f890c45dc430faeb6ab27314d31ae84cbb0eeabb145afe928920012512a0b07bf8ab47cecd3f3ebeaff13f1fab546c6c3683f726e5a60bed081297026f629473318a5821e522cd94b616c0796e6f61c7776d93d125cdacd8c7e3b1c568670d5f010c682fe72b6e2639887d1bd93d75aea87b3248ef533a74c12d7d216e79d010506cc4dbe4962e20755031c45a22f1bf5f76317e6318de9ec3265dbbc8c9fe5fbc01a6c22c676595e6388d06652d516220619626fd9e2947e121a18e58e636768c0aa53dc5b74a43ba265faad61e44b6ec361eb83d2905f203b2c29935e4a1748e38d1d3ce09e", 0xe8}, {&(0x7f0000005dc0)="8cef33de0ea0677173dc23da337c5b6cac3e79482a1656612ff8a7e832242be93a90a709d40fcde7d048ecacf42870e4a9cd0074e81af68e28a299ce3acfc52733c16b05cd40c7bc44", 0x49}], 0x3, &(0x7f0000005e80)=[@iv={0xd8, 0x117, 0x2, 0xbf, "5bc9db7043b9d78e43712c3b1d959aa954306047109e8e319d63aee1a6fca80de48c01feae7d79a248183c52ceee5d817e3cbf89335ca73ee738c960dc1357d49716f0ed995d5c35b6afc35aa4f8059536fcebe3efa5afe714aadffff87e7508e9eb6c19e1b0ecb1b8f2ecefc37c11800e871aa30d8af66c1af548e74b58446bb61bfe2ccabbae3129472f75b47be751f0463d462069d1d546184db735a6f2367d62161cb182f935a7ea243f586690423cabdbae7033ea027134a44c9df5b4"}, @assoc={0x18, 0x117, 0x4, 0x800}], 0xf0, 0x20050811}], 0x7, 0x40840) 2.154968221s ago: executing program 4 (id=5536): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007018400000000000000027c00000400fc800c0001800600060008"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1.988303689s ago: executing program 4 (id=5537): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) fadvise64(r0, 0x1000, 0x1, 0x2) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_THP_DISABLE(0x41, 0x3) mmap(&(0x7f00002ea000/0x1000)=nil, 0x1000, 0x37fffff, 0x4002011, 0xffffffffffffffff, 0x0) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) (fail_nth: 14) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 1.329530953s ago: executing program 7 (id=5538): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='romfs\x00', 0x8000, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x24000, 0x0) 1.327366303s ago: executing program 3 (id=5539): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000200002"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) 1.197509699s ago: executing program 3 (id=5540): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r1, 0x1a, &(0x7f00000000c0)=[&(0x7f0000000200)={0x0, 0x1008, 0x8, 0x0, 0x0, r0, &(0x7f0000000000)='%', 0x1a000}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) 751.316816ms ago: executing program 3 (id=5541): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000dd000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x8}}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "e7a6f6264f"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x24000000, {0x452369c81ff10127}}}, 0x88}}, 0x0) 751.124801ms ago: executing program 4 (id=5542): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xc) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=']) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000000300)={0x2020}, 0x2020) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) 664.240954ms ago: executing program 3 (id=5543): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000280)) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'veth0_virt_wifi\x00', 0x4000}) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) 615.100349ms ago: executing program 4 (id=5544): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="29a3f41c0f672ab8dc4410db08ec299836f9e68586bb73e6e2e5de6ec5de9a1e2242160c0df907ff73a0fc261f6b3975697a9a68dce4397aa39bfd3a3db85ca61dcaa47ac04f05c85b023767050b5e34fdacd27ade938604b33fc20548ba", 0x5e}], 0x1}}], 0x1, 0x20000000) prlimit64(0x0, 0x7, &(0x7f0000000080), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x58) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) lseek(r0, 0x5, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x1000) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x664001) getpriority(0x2, 0x0) socket$kcm(0x10, 0x2, 0x4) syz_usb_connect(0x2, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000043242108d813010062300102030109021200010000000009040002002f979d003ad8d5dd34efb0210720ec9d73d9ca035e68c9064d3cd64a19c5bd02aa78137ec57265e27fba81dd8b160eb48291d8b418385a90a9bf04b6252756b19f0eaf6f3a65ad7ce90b538d46c51b5627337343519ef0b2b06e3fb4d1ad07"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000480)={'lo\x00', @local}) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x60b, 0x1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x20, 0x92, [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x3, 0x1, 0x2, 0x4, {0x9, 0x21, 0xf4dc, 0x3d, 0x1, {0x22, 0xd73}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0xff, 0x7, 0x40}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x40, 0x3, 0xd0}}]}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x200, 0xf, 0x0, 0x94, 0xff, 0x1}, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="050f30000407100202d0030007100204c105000a100302080005e0090013100b46ec0d90949d21b2baae6583f64c7a31"], 0x3, [{0xd6, &(0x7f0000000280)=@string={0xd6, 0x3, "af96cadcdcc15f27e3146ef74c972bbd6a73e619e6a7e00fb1964c8842027a1d68a77940feaf8569036785009a8245cddb8bd3680c6a64a006e5a4167ee378185351eb246b7c8230cb986ab74fe96b000931ceaa18557b3a23114636fcff4fe13f9f4a735ae15b7aabff71a848d012d8b1701757371e8551daa5c6e9a203b0b224bc11d00f2a64a2a43388b86fd98ba83b03a0dc8f7052d78e8be72531fdef8a42bb81967f6c6b561f2b6b0d3a68f0c1f63079193f6a87c12161aa9b413ab5eff5d7cd08cc5fac6b59acba3a7e884bb303543b8d"}}, {0x7, &(0x7f0000000500)=ANY=[@ANYBLOB="07038e206054aa5701531cb81c3127a391f5f9bab78bd372ad72bf816f09829589210d8d8b9ba1a01589c896748fdbed84504d8b1cb3d6c4b56c304c8fd44ed12dc4f01e0ebe989008f01f7f4f"]}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x439}}]}) mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000002200)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 83.265295ms ago: executing program 3 (id=5545): r0 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0x10000000, 0xb, 0x3, 0x3, 0x2, "df0a199f323ad80869c301567abe1ec813c32d"}) 79.013852ms ago: executing program 7 (id=5546): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={&(0x7f00000002c0)=[0x0], 0x1, r3, r2, 0x0, 0x0, 0x100, 0x800, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x20, 0x5, 0x4cab, 0xe156, 0x0, 0x0, 0x10, 0x0, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 25.906308ms ago: executing program 3 (id=5547): syz_open_dev$tty20(0xc, 0x4, 0x0) io_setup(0x1ff, &(0x7f0000000200)=0x0) io_submit(r0, 0x0, &(0x7f00000000c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$video(&(0x7f0000000080), 0x8, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e451992a564475498a4e85e9484c9a357c08060637ee267f307d605e87225cb4175be29", 0xc1}], 0x1}, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r4, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xfa}], 0x1) ioctl$VIDIOC_S_AUDOUT(r3, 0x40345632, &(0x7f00000000c0)={0x0, "d8b580886fa7a00299eb3a2b3ddf3b6c733b2618ff901fd4813bd5f8e6c179e5"}) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000000900020073797a3000000000050004000000000012000300686173683a6e65742c706f727400000005000500070000000500010006000000b89d74245bc4a145bbce30c0e80b10687dd321d8d91b"], 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="e673cc9b0315bc8d76fb9da79749cd06ffbe2a5356cec4248e98581a9725632334f97eb84636c35fc2215942f6b5c37d2e8ab1889eb3f39259f46080a76a93669fcd5d63c06c782a4616e92f01e9b84659ba2045a6464a3d7efc342ca2ae1ac91a90ccbae818974d091c246ac94b5fbc5a5b5183e62e8d50488057e015786f2d9f1cf260badb95ce7661aa04408df26ec4de9e7d8ceec7b6f5930b10c18111a24d508c145c8dc76664361a8ae7d2c04e172d02feb96300c73795e7b12ee8687d01624e93124ac1a3f4af97585690b8f79f9e3bbc37966970a387626a0b2e55d9"], 0x17c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 0s ago: executing program 7 (id=5548): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={&(0x7f00000002c0)=[0x0], 0x1, r4, r3, 0x0, 0x0, 0x100, 0x800, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x2, 0x5, 0xe156, 0xe156, 0x0, 0x0, 0x10, 0x0, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) kernel console output (not intermixed with test programs): ][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 665.548216][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 665.578349][ T5896] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 665.598417][ T5896] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 665.630212][ T5896] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.661292][ T5896] usb 7-1: config 0 descriptor?? [ 666.116839][ T5896] hid_parser_main: 5 callbacks suppressed [ 666.116866][ T5896] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 666.149905][ T5896] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 666.157443][ T5896] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 666.174366][ T5896] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 666.185046][ T5896] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 666.196362][ T5896] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 666.206504][ T5896] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 666.216943][ T5896] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 666.239359][ T5896] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 666.246878][ T5896] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 666.291719][ T5896] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 666.490343][ T5940] usb 7-1: USB disconnect, device number 62 [ 666.624303][T20341] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4606'. [ 666.640806][T20341] netlink: 1752 bytes leftover after parsing attributes in process `syz.9.4606'. [ 666.656208][T20340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.001385][ T5940] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 667.165930][ T5940] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 667.208616][ T5940] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 667.268178][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 667.313773][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 667.355047][ T5940] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 667.407228][T20366] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4613'. [ 667.420381][T20365] loop6: detected capacity change from 0 to 63 [ 667.425642][ T5940] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 667.434838][T13340] buffer_io_error: 7 callbacks suppressed [ 667.434860][T13340] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.446025][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.482005][ T5940] usb 4-1: Product: syz [ 667.489669][ T5940] usb 4-1: Manufacturer: syz [ 667.494302][ T5940] usb 4-1: SerialNumber: syz [ 667.498006][T13340] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.517828][ T5940] usb 4-1: config 0 descriptor?? [ 667.531391][T13340] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.549284][T20362] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.566749][T13340] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.582085][T20362] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.599918][T13340] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.614663][T20362] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.637563][T20362] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.659427][T20362] Buffer I/O error on dev loop6, logical block 0, async page read [ 667.725233][ T5940] rc_core: IR keymap rc-imon-rsc not found [ 667.740619][ T5940] Registered IR keymap rc-empty [ 667.772511][ T5940] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 667.773651][T20379] netlink: 'syz.6.4616': attribute type 21 has an invalid length. [ 667.811643][ T5940] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input40 [ 667.852160][T20379] netlink: 128 bytes leftover after parsing attributes in process `syz.6.4616'. [ 667.872594][ T5940] imon_raw 4-1:0.0: probe with driver imon_raw failed with error -90 [ 667.894172][T20379] netlink: 'syz.6.4616': attribute type 5 has an invalid length. [ 667.923467][T20379] netlink: 'syz.6.4616': attribute type 6 has an invalid length. [ 667.935359][T20379] netlink: 3 bytes leftover after parsing attributes in process `syz.6.4616'. [ 667.964307][T20382] tipc: Enabled bearer , priority 0 [ 667.974646][ T5940] usb 4-1: USB disconnect, device number 6 [ 668.024178][T20381] tipc: Disabling bearer [ 668.444325][ T30] audit: type=1326 audit(1751733940.593:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20400 comm="syz.6.4623" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe31778e929 code=0x0 [ 668.472077][T20402] tipc: Enabling of bearer rejected, failed to enable media [ 668.538225][ T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 668.741206][ T10] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 668.767049][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 668.796706][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 668.817584][ T10] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 668.879959][ T10] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 668.910338][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.971222][ T10] usb 10-1: config 0 descriptor?? [ 669.117072][T20433] usb usb8: usbfs: process 20433 (syz.7.4631) did not claim interface 7 before use [ 669.168993][ T5940] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 669.343444][ T5940] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 669.367713][ T5940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.392818][ T5940] usb 7-1: Product: syz [ 669.409814][ T5940] usb 7-1: Manufacturer: syz [ 669.423875][ T5940] usb 7-1: SerialNumber: syz [ 669.443448][ T10] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 669.474858][ T5940] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 669.506713][ T5896] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 669.771063][ T5940] usb 7-1: USB disconnect, device number 63 [ 669.858821][ T10] usb 10-1: USB disconnect, device number 7 [ 670.470304][T20475] netlink: 112 bytes leftover after parsing attributes in process `syz.7.4639'. [ 670.538419][ T43] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 670.621760][ T5896] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 670.644988][ T5896] ath9k_htc: Failed to initialize the device [ 670.669663][ T5940] usb 7-1: ath9k_htc: USB layer deinitialized [ 670.708145][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 670.715071][ T43] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 670.739713][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 670.746462][ T43] usb 4-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 670.757428][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.779303][ T43] usb 4-1: config 0 descriptor?? [ 670.859279][T20485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 670.899045][ T5903] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 671.038299][ T5903] usb 10-1: device descriptor read/64, error -71 [ 671.135028][ T30] audit: type=1326 audit(1751733943.283:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20495 comm="syz.7.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58bf8e929 code=0x7ffc0000 [ 671.157439][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.180580][ T30] audit: type=1326 audit(1751733943.283:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20495 comm="syz.7.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58bf8e929 code=0x7ffc0000 [ 671.202995][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.222942][ T43] uclogic 0003:5543:0042.0023: unbalanced delimiter at end of report description [ 671.246456][ T43] uclogic 0003:5543:0042.0023: parse failed [ 671.263842][ T43] uclogic 0003:5543:0042.0023: probe with driver uclogic failed with error -22 [ 671.275424][ T30] audit: type=1326 audit(1751733943.323:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20495 comm="syz.7.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe58bf8d290 code=0x7ffc0000 [ 671.298499][ T5903] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 671.334999][ T30] audit: type=1326 audit(1751733943.323:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20495 comm="syz.7.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58bf8e929 code=0x7ffc0000 [ 671.357386][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.371921][ T30] audit: type=1326 audit(1751733943.323:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20495 comm="syz.7.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58bf8e929 code=0x7ffc0000 [ 671.395932][ T30] audit: type=1326 audit(1751733943.323:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20495 comm="syz.7.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe58bf8e929 code=0x7ffc0000 [ 671.423502][ T30] audit: type=1326 audit(1751733943.323:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20495 comm="syz.7.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58bf8e929 code=0x7ffc0000 [ 671.448411][ T5903] usb 10-1: device descriptor read/64, error -71 [ 671.455379][ T30] audit: type=1326 audit(1751733943.323:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20495 comm="syz.7.4645" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe58bf8e929 code=0x7ffc0000 [ 671.558871][ T5903] usb usb10-port1: attempt power cycle [ 671.898196][ T5903] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 671.969004][ T5903] usb 10-1: device descriptor read/8, error -71 [ 672.218729][ T5903] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 672.249444][ T5903] usb 10-1: device descriptor read/8, error -71 [ 672.371546][ T5903] usb usb10-port1: unable to enumerate USB device [ 672.473005][T20625] /dev/rnullb0: Can't open blockdev [ 672.481862][T20625] tipc: Enabling of bearer rejected, failed to enable media [ 672.649888][T20650] netlink: 'syz.7.4653': attribute type 4 has an invalid length. [ 672.697789][T20650] netlink: 'syz.7.4653': attribute type 4 has an invalid length. [ 673.200445][T20467] workqueue: Failed to create a rescuer kthread for wq "nfc60_nci_rx_wq": -EINTR [ 674.000123][T20746] syz.7.4658: attempt to access beyond end of device [ 674.000123][T20746] loop7: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 674.052620][T20746] EXT4-fs (loop7): unable to read superblock [ 674.114806][T20750] netlink: 20 bytes leftover after parsing attributes in process `syz.6.4659'. [ 674.645977][ T10] usb 4-1: USB disconnect, device number 7 [ 675.042195][T20779] No buffer was provided with the request [ 675.312048][ T5863] Bluetooth: hci3: connection err: -111 [ 675.554350][T20797] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 675.936930][T20813] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4676'. [ 675.947399][T20813] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4676'. [ 676.138835][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 676.312349][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 676.326289][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 676.337617][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 676.363837][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 676.393687][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.435181][ T9] usb 4-1: Product: syz [ 676.443620][ T9] usb 4-1: Manufacturer: syz [ 676.449123][ T9] usb 4-1: SerialNumber: syz [ 676.480060][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 676.487886][ T9] hub 4-1:1.0: probe with driver hub failed with error -5 [ 676.696911][ T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 676.800541][T20833] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4681'. [ 677.399351][T20855] No control pipe specified [ 677.628418][T20810] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 677.728208][ T43] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 677.794275][T20810] usb 4-1: device descriptor read/64, error -71 [ 677.910957][ T43] usb 7-1: Using ep0 maxpacket: 32 [ 677.952328][ T43] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 677.968143][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 678.005423][ T43] usb 7-1: config 0 descriptor?? [ 678.048195][T20810] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 678.190915][T20810] usb 4-1: device descriptor read/64, error -71 [ 678.258762][ T43] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 678.289144][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 678.309461][ T43] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 678.327250][ T43] usb 7-1: media controller created [ 678.430370][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 678.465807][T20810] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 678.501585][T20810] usb 4-1: device descriptor read/8, error -71 [ 678.758747][T20810] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 678.793468][T20810] usb 4-1: device descriptor read/8, error -71 [ 678.932528][ T10] usb 4-1: USB disconnect, device number 8 [ 678.968346][ T10] usblp0: removed [ 679.836807][T20902] Invalid source name [ 679.844281][T20902] UBIFS error (pid: 20902): cannot open "./file0", error -22 [ 679.869522][T20902] vxfs: WRONG superblock magic 00000000 at 1 [ 679.923724][T20902] vxfs: WRONG superblock magic 00000000 at 8 [ 679.954118][T20902] vxfs: can't find superblock. [ 680.108164][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 680.286299][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 680.315847][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 680.352017][ T10] usb 4-1: config 128 has an invalid interface number: 180 but max is 0 [ 680.406607][ T10] usb 4-1: config 128 has no interface number 0 [ 680.429760][ T10] usb 4-1: config 128 interface 180 has no altsetting 0 [ 680.443895][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice=be.9c [ 680.466098][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 680.563912][ T10] usb 4-1: Product: syz [ 680.568616][ T10] usb 4-1: Manufacturer: syz [ 680.573356][ T43] az6027: usb out operation failed. (-71) [ 680.575667][ T10] usb 4-1: SerialNumber: syz [ 680.600360][ T43] az6027: usb out operation failed. (-71) [ 680.637717][ T43] stb0899_attach: Driver disabled by Kconfig [ 680.696629][ T43] az6027: no front-end attached [ 680.696629][ T43] [ 680.741470][ T43] az6027: usb out operation failed. (-71) [ 680.747280][ T43] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 680.855902][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input41 [ 680.899869][ T10] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.180/input/input42 [ 680.937272][ T43] dvb-usb: schedule remote query interval to 400 msecs. [ 680.999348][ T43] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 680.999837][ T10] usb 4-1: USB disconnect, device number 10 [ 681.026147][ T43] usb 7-1: USB disconnect, device number 65 [ 681.046283][ T5204] bcm5974 4-1:128.180: could not read from device [ 681.316573][ T43] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 682.147767][T20942] /dev/rnullb0: Can't open blockdev [ 682.160955][T20942] tipc: Enabling of bearer rejected, failed to enable media [ 682.408248][ T5863] Bluetooth: hci2: ACL packet too small [ 682.637487][T20959] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4709'. [ 683.288181][ T5940] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 683.460223][ T5940] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 683.482935][ T5940] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 683.495519][ T5940] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 683.515774][ T5940] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 683.533313][ T5940] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 683.546916][ T5940] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 683.556679][ T5940] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 683.565367][ T5940] usb 7-1: Product: syz [ 683.573233][ T5940] usb 7-1: Manufacturer: syz [ 683.599779][ T5940] cdc_wdm 7-1:1.0: skipping garbage [ 683.613390][ T5940] cdc_wdm 7-1:1.0: skipping garbage [ 683.623509][ T5940] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 683.633424][ T5940] cdc_wdm 7-1:1.0: Unknown control protocol [ 684.042011][T21008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 684.162004][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -EPIPE [ 684.370470][T20979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 684.400174][T20979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 684.409883][T20979] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4716'. [ 684.432058][ T5903] usb 7-1: USB disconnect, device number 66 [ 685.352998][T21045] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4726'. [ 685.383843][T21045] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4726'. [ 685.731266][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.737855][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.163841][T21072] netlink: 'syz.7.4734': attribute type 3 has an invalid length. [ 686.174197][T21071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 686.405421][T21079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 686.424145][ T10] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 686.562281][ T10] usb 10-1: device descriptor read/64, error -71 [ 686.792384][ T10] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 686.943810][ T10] usb 10-1: device descriptor read/64, error -71 [ 687.068396][ T10] usb usb10-port1: attempt power cycle [ 687.423787][ T10] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 687.496308][ T10] usb 10-1: device descriptor read/8, error -71 [ 687.720247][T21117] loop6: detected capacity change from 0 to 63 [ 687.728867][ T10] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 687.746945][T21114] buffer_io_error: 13 callbacks suppressed [ 687.746967][T21114] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.777558][T21114] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.778376][ T10] usb 10-1: device descriptor read/8, error -71 [ 687.803519][T21114] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.826798][T13340] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.853648][T13340] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.874491][T21114] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.884107][T13340] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.899691][T21114] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.912807][T13340] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.921270][T21114] Buffer I/O error on dev loop6, logical block 0, async page read [ 687.934952][ T10] usb usb10-port1: unable to enumerate USB device [ 688.036560][ T5859] Bluetooth: hci2: command 0x0405 tx timeout [ 688.143320][T21123] /dev/rnullb0: Can't open blockdev [ 688.149491][T21123] tipc: Enabling of bearer rejected, failed to enable media [ 688.459802][T21137] /dev/rnullb0: Can't open blockdev [ 688.601220][T21143] netlink: 'syz.3.4749': attribute type 10 has an invalid length. [ 688.658181][T21143] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4749'. [ 688.722664][T21146] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4749'. [ 689.022185][T21155] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4755'. [ 689.369257][T21155] : (slave bond_slave_0): Releasing backup interface [ 689.649934][T21179] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 689.655691][T21175] FAULT_INJECTION: forcing a failure. [ 689.655691][T21175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 689.695310][T21179] Error validating options; rc = [-22] [ 689.726688][T21175] CPU: 1 UID: 0 PID: 21175 Comm: syz.9.4759 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 689.726721][T21175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 689.726736][T21175] Call Trace: [ 689.726746][T21175] [ 689.726755][T21175] dump_stack_lvl+0x189/0x250 [ 689.726793][T21175] ? __pfx____ratelimit+0x10/0x10 [ 689.726818][T21175] ? __pfx_dump_stack_lvl+0x10/0x10 [ 689.726851][T21175] ? __pfx__printk+0x10/0x10 [ 689.726884][T21175] ? __might_fault+0xb0/0x130 [ 689.726930][T21175] should_fail_ex+0x414/0x560 [ 689.726970][T21175] _copy_from_iter+0x1db/0x16f0 [ 689.727000][T21175] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 689.727025][T21175] ? __mutex_lock+0x51b/0xe80 [ 689.727060][T21175] ? __pfx__copy_from_iter+0x10/0x10 [ 689.727090][T21175] ? policy_nodemask+0x27c/0x720 [ 689.727131][T21175] ? page_copy_sane+0x4e/0x280 [ 689.727163][T21175] copy_page_from_iter+0xdd/0x170 [ 689.727198][T21175] anon_pipe_write+0x99a/0x1360 [ 689.727250][T21175] ? __pfx_anon_pipe_write+0x10/0x10 [ 689.727275][T21175] ? common_file_perm+0x199/0x200 [ 689.727312][T21175] ? bpf_lsm_file_permission+0x9/0x20 [ 689.727341][T21175] ? security_file_permission+0x75/0x290 [ 689.727378][T21175] vfs_write+0x548/0xa90 [ 689.727430][T21175] ? __pfx_anon_pipe_write+0x10/0x10 [ 689.727455][T21175] ? __pfx_vfs_write+0x10/0x10 [ 689.727498][T21175] ? __fget_files+0x2a/0x420 [ 689.727532][T21175] ksys_write+0x145/0x250 [ 689.727567][T21175] ? __pfx_ksys_write+0x10/0x10 [ 689.727591][T21175] ? do_syscall_64+0xbe/0x3b0 [ 689.727618][T21175] do_syscall_64+0xfa/0x3b0 [ 689.727645][T21175] ? lockdep_hardirqs_on+0x9c/0x150 [ 689.727667][T21175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.727688][T21175] ? clear_bhb_loop+0x60/0xb0 [ 689.727713][T21175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.727732][T21175] RIP: 0033:0x7f6922f8e929 [ 689.727750][T21175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.727769][T21175] RSP: 002b:00007f6923d7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 689.727790][T21175] RAX: ffffffffffffffda RBX: 00007f69231b6080 RCX: 00007f6922f8e929 [ 689.727805][T21175] RDX: 000000000000fdef RSI: 0000200000000980 RDI: 0000000000000007 [ 689.727819][T21175] RBP: 00007f6923d7a090 R08: 0000000000000000 R09: 0000000000000000 [ 689.727832][T21175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.727844][T21175] R13: 0000000000000001 R14: 00007f69231b6080 R15: 00007ffe4d45f308 [ 689.727875][T21175] [ 689.984138][ C1] vkms_vblank_simulate: vblank timer overrun [ 690.017906][T21185] /dev/rnullb0: Can't open blockdev [ 690.598889][T21212] fuseblk: Unknown parameter 'measure' [ 690.779059][T21216] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 690.832109][T21221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.884169][T21221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.911877][T21227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.936772][T21227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.072273][T21231] netlink: 'syz.7.4774': attribute type 10 has an invalid length. [ 691.107182][ T5941] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 691.420074][ T5940] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 691.614961][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 691.632329][ T5940] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 691.669096][ T5940] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 691.703700][ T5940] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 691.738433][ T5940] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.795232][ T5940] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 691.822560][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.075551][ T5940] usb 4-1: GET_CAPABILITIES returned 0 [ 692.082385][ T9] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 692.090476][ T5940] usbtmc 4-1:16.0: can't read capabilities [ 692.152989][T21276] openvswitch: netlink: Tunnel attr 294 out of range max 16 [ 692.272860][T21281] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 692.292967][ T9] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12336, setting to 64 [ 692.305585][ T43] usb 4-1: USB disconnect, device number 11 [ 692.312273][ T9] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 692.348452][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 692.379377][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 692.411616][ T9] usb 10-1: SerialNumber: syz [ 692.680958][ T9] usbtest 10-1:1.0: couldn't get endpoints, -22 [ 692.687337][ T9] usbtest 10-1:1.0: probe with driver usbtest failed with error -22 [ 692.740618][ T9] usb 10-1: USB disconnect, device number 16 [ 692.765173][T21296] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 692.779014][T21296] UDF-fs: Scanning with blocksize 4096 failed [ 693.592680][T21329] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4801'. [ 693.627127][T21329] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4801'. [ 693.845712][T21338] openvswitch: netlink: Tunnel attr 294 out of range max 16 [ 694.092304][T21346] netlink: 'syz.9.4808': attribute type 2 has an invalid length. [ 694.136924][T21349] NILFS (rnullb0): couldn't find nilfs on the device [ 694.152515][T21349] tipc: Enabling of bearer rejected, failed to enable media [ 694.382200][T21361] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4812'. [ 695.153571][T21388] NILFS (rnullb0): couldn't find nilfs on the device [ 695.171894][T21388] tipc: Enabling of bearer rejected, failed to enable media [ 695.655783][T21407] binder: Binderfs stats mode cannot be changed during a remount [ 696.043339][T21427] NILFS (rnullb0): couldn't find nilfs on the device [ 696.086475][T21427] tipc: Enabling of bearer rejected, failed to enable media [ 696.271837][ T43] usb 7-1: new full-speed USB device number 68 using dummy_hcd [ 696.447326][ T43] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 696.490228][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.512357][ T43] usb 7-1: config 0 descriptor?? [ 696.544403][ T43] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 696.822946][T21456] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 697.230559][T21461] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4841'. [ 697.324028][T21461] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4841'. [ 697.970323][T21461] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4841'. [ 698.027139][T21470] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4841'. [ 698.039993][T21465] NILFS (rnullb0): couldn't find nilfs on the device [ 698.078466][T21470] netlink: 8 bytes leftover after parsing attributes in process `syz.9.4841'. [ 698.108165][T21465] tipc: Enabling of bearer rejected, failed to enable media [ 698.554663][T21484] NILFS (rnullb0): couldn't find nilfs on the device [ 698.951087][ T43] gp8psk: usb out operation failed. [ 698.959864][ T43] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 698.999670][ T43] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 699.096605][T21503] tmpfs: Unknown parameter 'usrquota“JÕˆbE‘[ÃÏ;„ºãè Ôþ}Žo' [ 699.276583][ T43] usb 7-1: USB disconnect, device number 68 [ 699.339490][T21507] NILFS (rnullb0): couldn't find nilfs on the device [ 699.347267][T21507] tipc: Enabling of bearer rejected, failed to enable media [ 699.652645][T21520] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4857'. [ 699.750141][T21520] openvswitch: netlink: Flow key attr not present in new flow. [ 700.403170][T21544] NILFS (rnullb0): couldn't find nilfs on the device [ 700.410750][T21544] tipc: Enabling of bearer rejected, failed to enable media [ 700.471120][T21545] netlink: 'syz.3.4866': attribute type 10 has an invalid length. [ 700.554294][T21545] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4866'. [ 700.609068][T21547] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4866'. [ 700.896590][T21560] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 700.906923][T21560] syz.6.4869: attempt to access beyond end of device [ 700.906923][T21560] loop6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 701.451056][T21582] netlink: 'syz.6.4876': attribute type 10 has an invalid length. [ 701.494585][ T43] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 701.677444][ T43] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 701.698003][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 701.738066][ T43] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 701.754244][ T43] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 701.784199][ T43] usb 4-1: Manufacturer: syz [ 701.828386][ T43] usb 4-1: config 0 descriptor?? [ 701.865641][ T43] igorplugusb 4-1:0.0: incorrect number of endpoints [ 702.055563][T21572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 702.073084][T21572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 702.178605][ T5903] usb 4-1: USB disconnect, device number 12 [ 702.372120][ T43] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 702.420180][T21611] NILFS (rnullb0): couldn't find nilfs on the device [ 702.574090][ T43] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 702.594356][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 702.607761][ T43] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 702.630312][ T43] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 702.657334][ T43] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 702.687046][T21620] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 702.688733][ T43] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.736078][ T43] usb 10-1: config 0 descriptor?? [ 702.898184][T21625] /dev/rnullb0: Can't open blockdev [ 702.908152][T21625] tipc: Enabling of bearer rejected, failed to enable media [ 703.177172][ T43] hid_parser_main: 20 callbacks suppressed [ 703.177196][ T43] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 703.216019][ T43] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 703.223488][ T43] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 703.245681][ T43] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 703.253147][ T43] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 703.297212][ T43] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 703.309932][ T1211] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 703.321357][ T43] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 703.329076][ T43] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 703.352195][ T43] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 703.359658][ T43] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 703.450753][ T43] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 703.505761][ T1211] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 703.515766][ T43] usb 10-1: USB disconnect, device number 17 [ 703.535892][ T1211] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 703.577989][ T1211] usb 7-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 703.608762][ T1211] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 703.634616][ T1211] usb 7-1: Product: syz [ 703.645827][ T1211] usb 7-1: Manufacturer: syz [ 703.654120][ T1211] usb 7-1: SerialNumber: syz [ 703.667096][T21641] fido_id[21641]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 703.689498][ T1211] usb 7-1: config 0 descriptor?? [ 703.927610][ T30] audit: type=1800 audit(1751733976.338:826): pid=21629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4888" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 704.288497][T21647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 704.502476][T21664] NILFS (rnullb0): couldn't find nilfs on the device [ 704.533445][T21664] tipc: Enabling of bearer rejected, failed to enable media [ 705.354924][T21693] fuse: Unknown parameter 'hash' [ 705.589566][T21701] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4903'. [ 705.922592][T21715] netlink: 'syz.3.4908': attribute type 10 has an invalid length. [ 706.054192][T21719] NILFS (rnullb0): couldn't find nilfs on the device [ 706.082278][T21719] tipc: Enabling of bearer rejected, failed to enable media [ 706.235196][T21726] openvswitch: netlink: Tunnel attr 294 out of range max 16 [ 706.331070][ T30] audit: type=1326 audit(1751733978.593:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21731 comm="syz.6.4913" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe31778e929 code=0x0 [ 706.378836][ T1211] usb 7-1: USB disconnect, device number 69 [ 706.965031][T21757] NILFS (rnullb0): couldn't find nilfs on the device [ 706.974119][T21757] tipc: Enabling of bearer rejected, failed to enable media [ 707.142562][T21761] overlayfs: failed to resolve './file1': -2 [ 707.757043][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 707.961608][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 707.987124][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 708.022845][ T10] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 708.043766][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 708.072481][ T10] usb 4-1: Product: syz [ 708.076816][ T10] usb 4-1: Manufacturer: syz [ 708.117411][ T10] usb 4-1: SerialNumber: syz [ 708.138949][ T10] usb 4-1: config 0 descriptor?? [ 708.211038][T21790] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 708.365566][ T30] audit: type=1800 audit(1751733980.492:828): pid=21775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4926" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 708.490899][ T65] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.713508][ T65] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.737883][T21801] netlink: 'syz.7.4932': attribute type 4 has an invalid length. [ 708.766218][T21801] netlink: 'syz.7.4932': attribute type 7 has an invalid length. [ 708.791335][T21801] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.4932'. [ 708.866894][ T65] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.008339][ T65] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.522184][ T65] bridge_slave_1: left allmulticast mode [ 709.542690][ T65] bridge_slave_1: left promiscuous mode [ 709.550800][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.627613][ T65] bridge_slave_0: left allmulticast mode [ 709.644282][ T65] bridge_slave_0: left promiscuous mode [ 709.674700][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.683275][ T5859] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 709.695274][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 709.704583][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 709.720106][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 709.730298][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 709.742677][T21826] NILFS (rnullb0): couldn't find nilfs on the device [ 709.842939][T21832] ieee802154 phy0 wpan0: encryption failed: -22 [ 710.185599][ T65] dvmrp18 (unregistering): left allmulticast mode [ 710.474972][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.485254][ T65] bond0 (unregistering): Released all slaves [ 710.513707][T21826] tipc: Enabling of bearer rejected, failed to enable media [ 710.662362][ T65] tipc: Left network mode [ 710.737828][ T5896] usb 4-1: USB disconnect, device number 13 [ 711.009654][T21857] /dev/rnullb0: Can't open blockdev [ 711.188864][ T43] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 711.260321][ T65] hsr_slave_0: left promiscuous mode [ 711.296338][ T65] hsr_slave_1: left promiscuous mode [ 711.302539][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 711.324915][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 711.359821][ T43] usb 10-1: device descriptor read/64, error -71 [ 711.415650][ T65] veth1_macvtap: left promiscuous mode [ 711.421262][ T65] veth0_macvtap: left promiscuous mode [ 711.442492][T21870] /dev/rnullb0: Can't open blockdev [ 711.448330][ T65] veth1_vlan: left promiscuous mode [ 711.455679][ T65] veth0_vlan: left promiscuous mode [ 711.616027][ T43] usb 10-1: new full-speed USB device number 19 using dummy_hcd [ 711.782675][ T5896] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 711.790411][ T43] usb 10-1: device descriptor read/64, error -71 [ 711.905024][ T43] usb usb10-port1: attempt power cycle [ 711.948336][ T5859] Bluetooth: hci1: command tx timeout [ 711.973300][ T5896] usb 4-1: Using ep0 maxpacket: 8 [ 711.982694][ T5896] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 712.007755][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.018336][ T5896] usb 4-1: Product: syz [ 712.023386][ T5896] usb 4-1: Manufacturer: syz [ 712.028008][ T5896] usb 4-1: SerialNumber: syz [ 712.048223][ T5896] usb 4-1: config 0 descriptor?? [ 712.169457][ T65] team0 (unregistering): Port device team_slave_1 removed [ 712.235614][ T65] team0 (unregistering): Port device team_slave_0 removed [ 712.273406][T21872] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 712.303955][ T43] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 712.344105][ T43] usb 10-1: device descriptor read/8, error -71 [ 712.602455][ T43] usb 10-1: new full-speed USB device number 21 using dummy_hcd [ 712.632967][ T43] usb 10-1: device descriptor read/8, error -71 [ 712.763483][ T43] usb usb10-port1: unable to enumerate USB device [ 712.774075][T21821] chnl_net:caif_netlink_parms(): no params data found [ 712.953594][T21821] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.961107][T21821] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.969052][T21821] bridge_slave_0: entered allmulticast mode [ 712.977384][T21821] bridge_slave_0: entered promiscuous mode [ 712.987295][T21821] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.994775][T21821] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.002948][T21821] bridge_slave_1: entered allmulticast mode [ 713.018334][T21821] bridge_slave_1: entered promiscuous mode [ 713.149296][T21821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 713.169543][T21821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.261157][T21821] team0: Port device team_slave_0 added [ 713.281391][T21821] team0: Port device team_slave_1 added [ 713.290852][ T65] IPVS: stop unused estimator thread 0... [ 713.372922][T21821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.383052][T21821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.410045][T21821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.427054][T21821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.435810][T21821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.464579][T21821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.557451][T21821] hsr_slave_0: entered promiscuous mode [ 713.567767][T21821] hsr_slave_1: entered promiscuous mode [ 713.594670][T21821] debugfs: 'hsr0' already exists in 'hsr' [ 713.600474][T21821] Cannot create hsr debugfs directory [ 714.173028][ T5859] Bluetooth: hci1: command tx timeout [ 714.233014][T21907] NILFS (rnullb0): couldn't find nilfs on the device [ 714.255391][T21907] tipc: Enabling of bearer rejected, failed to enable media [ 714.692899][ T5896] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 714.721044][ T5896] gspca_sunplus: reg_w_riv err -71 [ 714.733452][ T5896] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 714.783340][ T5896] usb 4-1: USB disconnect, device number 14 [ 714.920478][T21916] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 715.078434][T21821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 715.142587][T21821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 715.170713][T21821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 715.201797][T21821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 715.445942][T21821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 715.535665][T21821] 8021q: adding VLAN 0 to HW filter on device team0 [ 715.577996][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 715.585214][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 715.658735][T12392] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.665956][T12392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.767361][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880338d4800: rx timeout, send abort [ 716.302010][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880338d4000: rx timeout, send abort [ 716.310815][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880338d4800: abort rx timeout. Force session deactivation [ 716.397363][ T5859] Bluetooth: hci1: command tx timeout [ 716.474808][T21955] FAT-fs (nullb0): bogus number of reserved sectors [ 716.524022][T21955] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 716.772810][T21821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 716.844021][T21958] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4965'. [ 716.844860][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880338d4000: abort rx timeout. Force session deactivation [ 716.920015][T21821] veth0_vlan: entered promiscuous mode [ 716.979211][T21821] veth1_vlan: entered promiscuous mode [ 717.067570][T21821] veth0_macvtap: entered promiscuous mode [ 717.084659][T21821] veth1_macvtap: entered promiscuous mode [ 717.176477][ T1211] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 717.200477][T21821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 717.256774][T21821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.304336][ T1332] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.345379][ T1332] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.405107][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.413864][ T1211] usb 4-1: Using ep0 maxpacket: 16 [ 717.432098][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.432883][ T1211] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.464495][ T1211] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 717.473685][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.514059][ T1211] usb 4-1: config 0 descriptor?? [ 717.652417][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.679521][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.783133][ T1332] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.827197][ T1332] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.967760][ T1211] hid_parser_main: 5 callbacks suppressed [ 717.967784][ T1211] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 718.050169][ T1211] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 718.062468][ T1211] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 718.081333][ T1211] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 718.094489][ T1211] mcp2221 0003:04D8:00DD.0025: unknown main item tag 0x0 [ 718.114245][ T1211] mcp2221 0003:04D8:00DD.0025: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 718.149358][T21984] netlink: 'syz.0.4935': attribute type 10 has an invalid length. [ 718.237594][T21964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.247060][T21964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.581646][T21964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 718.611310][T21964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 718.618522][ T5859] Bluetooth: hci1: command tx timeout [ 718.926016][T21993] NILFS (rnullb0): couldn't find nilfs on the device [ 718.940137][T21993] tipc: Started in network mode [ 718.956797][T21993] tipc: Node identity 000000000000002d0000000000000001, cluster identity 4711 [ 718.992667][T21993] tipc: Enabling of bearer rejected, failed to enable media [ 719.693791][T22007] sctp: [Deprecated]: syz.0.4980 (pid 22007) Use of int in maxseg socket option. [ 719.693791][T22007] Use struct sctp_assoc_value instead [ 720.212519][ T10] usb 4-1: USB disconnect, device number 15 [ 720.837342][T22028] NILFS (rnullb0): couldn't find nilfs on the device [ 720.867036][T22028] tipc: Enabling of bearer rejected, failed to enable media [ 721.049211][ T5940] usb 10-1: new full-speed USB device number 22 using dummy_hcd [ 721.216205][ T5940] usb 10-1: device descriptor read/64, error -71 [ 721.235463][T22040] netlink: 'syz.7.4990': attribute type 21 has an invalid length. [ 721.266238][T22040] netlink: 128 bytes leftover after parsing attributes in process `syz.7.4990'. [ 721.298406][T22040] netlink: 'syz.7.4990': attribute type 5 has an invalid length. [ 721.323072][T22040] netlink: 'syz.7.4990': attribute type 6 has an invalid length. [ 721.354003][T22040] netlink: 3 bytes leftover after parsing attributes in process `syz.7.4990'. [ 721.473867][ T5940] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 721.665344][ T5940] usb 10-1: device descriptor read/64, error -71 [ 721.793037][T22058] tipc: Enabling of bearer rejected, failed to enable media [ 721.794146][ T5940] usb usb10-port1: attempt power cycle [ 721.818482][T22062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 721.837449][T22061] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4998'. [ 721.963536][T22066] overlay: ./file0 is not a directory [ 722.189040][ T5940] usb 10-1: new full-speed USB device number 24 using dummy_hcd [ 722.256161][ T5940] usb 10-1: device descriptor read/8, error -71 [ 722.520978][ T5940] usb 10-1: new full-speed USB device number 25 using dummy_hcd [ 722.540169][T22088] loop6: detected capacity change from 0 to 63 [ 722.555387][ T5940] usb 10-1: device descriptor read/8, error -71 [ 722.577484][T13340] buffer_io_error: 7 callbacks suppressed [ 722.577505][T13340] Buffer I/O error on dev loop6, logical block 0, async page read [ 722.611948][T22087] Buffer I/O error on dev loop6, logical block 0, async page read [ 722.624758][T13340] Buffer I/O error on dev loop6, logical block 0, async page read [ 722.633758][T13340] Buffer I/O error on dev loop6, logical block 0, async page read [ 722.645290][T22087] Buffer I/O error on dev loop6, logical block 0, async page read [ 722.655384][T13340] Buffer I/O error on dev loop6, logical block 0, async page read [ 722.664858][T22087] Buffer I/O error on dev loop6, logical block 0, async page read [ 722.673683][T13340] Buffer I/O error on dev loop6, logical block 0, async page read [ 722.685009][T22087] Buffer I/O error on dev loop6, logical block 0, async page read [ 722.702826][ T5940] usb usb10-port1: unable to enumerate USB device [ 722.737969][T22087] Buffer I/O error on dev loop6, logical block 0, async page read [ 723.028218][T22105] FAULT_INJECTION: forcing a failure. [ 723.028218][T22105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 723.057664][T22105] CPU: 0 UID: 0 PID: 22105 Comm: syz.0.5008 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 723.057709][T22105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 723.057723][T22105] Call Trace: [ 723.057731][T22105] [ 723.057740][T22105] dump_stack_lvl+0x189/0x250 [ 723.057776][T22105] ? __pfx____ratelimit+0x10/0x10 [ 723.057800][T22105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 723.057829][T22105] ? __pfx__printk+0x10/0x10 [ 723.057867][T22105] ? __might_fault+0xb0/0x130 [ 723.057907][T22105] should_fail_ex+0x414/0x560 [ 723.057943][T22105] _copy_from_user+0x2d/0xb0 [ 723.057972][T22105] ___sys_recvmsg+0x12e/0x510 [ 723.058007][T22105] ? __pfx____sys_recvmsg+0x10/0x10 [ 723.058079][T22105] ? __fget_files+0x3a0/0x420 [ 723.058115][T22105] __x64_sys_recvmsg+0x198/0x260 [ 723.058149][T22105] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 723.058190][T22105] ? __pfx_ksys_write+0x10/0x10 [ 723.058208][T22105] ? rcu_is_watching+0x15/0xb0 [ 723.058241][T22105] ? do_syscall_64+0xbe/0x3b0 [ 723.058270][T22105] do_syscall_64+0xfa/0x3b0 [ 723.058293][T22105] ? lockdep_hardirqs_on+0x9c/0x150 [ 723.058316][T22105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.058338][T22105] ? clear_bhb_loop+0x60/0xb0 [ 723.058365][T22105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.058386][T22105] RIP: 0033:0x7f01cc58e929 [ 723.058406][T22105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 723.058437][T22105] RSP: 002b:00007f01cd3b9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 723.058459][T22105] RAX: ffffffffffffffda RBX: 00007f01cc7b5fa0 RCX: 00007f01cc58e929 [ 723.058474][T22105] RDX: 0000000040016002 RSI: 0000200000000000 RDI: 0000000000000003 [ 723.058488][T22105] RBP: 00007f01cd3b9090 R08: 0000000000000000 R09: 0000000000000000 [ 723.058502][T22105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.058514][T22105] R13: 0000000000000000 R14: 00007f01cc7b5fa0 R15: 00007ffda31600e8 [ 723.058544][T22105] [ 723.267536][ C0] vkms_vblank_simulate: vblank timer overrun [ 724.171821][T22141] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 724.376544][T22148] NILFS (rnullb0): couldn't find nilfs on the device [ 724.384766][T22148] tipc: Enabling of bearer rejected, failed to enable media [ 724.732391][T22161] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5025'. [ 724.926528][T22169] netlink: 'syz.3.5027': attribute type 2 has an invalid length. [ 724.947206][T22169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5027'. [ 726.172511][T22205] MTD: Couldn't look up './cgroup': -15 [ 726.178439][T22205] ./cgroup: Can't lookup blockdev [ 726.560326][T22214] program syz.7.5038 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 726.590317][T22214] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 726.651576][T22219] hpfs: Bad magic ... probably not HPFS [ 726.976548][T22224] 9pnet_fd: Insufficient options for proto=fd [ 727.172981][T22226] NILFS (rnullb0): couldn't find nilfs on the device [ 727.197600][T22229] netlink: 20 bytes leftover after parsing attributes in process `syz.7.5042'. [ 727.215897][T22226] tipc: Enabling of bearer rejected, failed to enable media [ 727.862000][T22245] hpfs: Bad magic ... probably not HPFS [ 728.203882][T22254] netlink: 'syz.0.5049': attribute type 10 has an invalid length. [ 728.253820][T22254] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5049'. [ 728.285040][T22259] openvswitch: netlink: Tunnel attr 294 out of range max 16 [ 728.390223][T22254] batman_adv: batadv0: Adding interface: virt_wifi0 [ 728.411255][T22254] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.436839][ C0] vkms_vblank_simulate: vblank timer overrun [ 728.459449][T22264] NILFS (rnullb0): couldn't find nilfs on the device [ 728.470117][T22254] batman_adv: batadv0: Interface activated: virt_wifi0 [ 728.501401][T22264] tipc: Enabling of bearer rejected, failed to enable media [ 728.914972][ T5940] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 729.098297][ T5940] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 729.121289][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 729.139837][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 729.170412][ T5940] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 729.193622][ T5940] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 729.220134][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.246589][ T5940] usb 4-1: config 0 descriptor?? [ 729.510007][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032cd5000: rx timeout, send abort [ 729.677846][T22296] FAULT_INJECTION: forcing a failure. [ 729.677846][T22296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.692469][ T5940] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 729.695217][T22296] CPU: 0 UID: 0 PID: 22296 Comm: syz.0.5058 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 729.695251][T22296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 729.695265][T22296] Call Trace: [ 729.695275][T22296] [ 729.695287][T22296] dump_stack_lvl+0x189/0x250 [ 729.695336][T22296] ? __pfx____ratelimit+0x10/0x10 [ 729.695364][T22296] ? __pfx_dump_stack_lvl+0x10/0x10 [ 729.695399][T22296] ? __pfx__printk+0x10/0x10 [ 729.695435][T22296] ? __might_fault+0xb0/0x130 [ 729.695499][T22296] should_fail_ex+0x414/0x560 [ 729.695537][T22296] _copy_from_user+0x2d/0xb0 [ 729.695572][T22296] input_event_from_user+0xb2/0x280 [ 729.695606][T22296] ? __pfx_input_event_from_user+0x10/0x10 [ 729.695642][T22296] ? input_inject_event+0xbc/0x320 [ 729.695671][T22296] evdev_write+0x2a6/0x480 [ 729.695727][T22296] ? __pfx_evdev_write+0x10/0x10 [ 729.695761][T22296] ? bpf_lsm_file_permission+0x9/0x20 [ 729.695791][T22296] ? security_file_permission+0x75/0x290 [ 729.695823][T22296] ? rw_verify_area+0x258/0x650 [ 729.695859][T22296] ? __pfx_evdev_write+0x10/0x10 [ 729.695891][T22296] vfs_write+0x27e/0xa90 [ 729.695940][T22296] ? __pfx_vfs_write+0x10/0x10 [ 729.695979][T22296] ? __fget_files+0x2a/0x420 [ 729.696010][T22296] ? __fget_files+0x2a/0x420 [ 729.696035][T22296] ? __fget_files+0x3a0/0x420 [ 729.696059][T22296] ? __fget_files+0x2a/0x420 [ 729.696096][T22296] ksys_write+0x145/0x250 [ 729.696121][T22296] ? __pfx_ksys_write+0x10/0x10 [ 729.696140][T22296] ? rcu_is_watching+0x15/0xb0 [ 729.696179][T22296] ? do_syscall_64+0xbe/0x3b0 [ 729.696210][T22296] do_syscall_64+0xfa/0x3b0 [ 729.696256][T22296] ? lockdep_hardirqs_on+0x9c/0x150 [ 729.696282][T22296] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.696307][T22296] ? clear_bhb_loop+0x60/0xb0 [ 729.696353][T22296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.696376][T22296] RIP: 0033:0x7f01cc58e929 [ 729.696400][T22296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 729.696421][T22296] RSP: 002b:00007f01cd3b9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 729.696449][T22296] RAX: ffffffffffffffda RBX: 00007f01cc7b5fa0 RCX: 00007f01cc58e929 [ 729.696468][T22296] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000003 [ 729.696485][T22296] RBP: 00007f01cd3b9090 R08: 0000000000000000 R09: 0000000000000000 [ 729.696501][T22296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 729.696515][T22296] R13: 0000000000000000 R14: 00007f01cc7b5fa0 R15: 00007ffda31600e8 [ 729.696553][T22296] [ 729.992064][ T5940] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 730.003840][ T5940] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 730.014567][ T5940] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 730.034652][ T5940] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 730.052999][ C1] vcan0: j1939_tp_rxtimer: 0xffff888032cd5000: abort rx timeout. Force session deactivation [ 730.081280][ T5940] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 730.110522][ T5940] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 730.139899][ T5940] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 730.165826][ T5940] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 730.206104][ T5940] plantronics 0003:047F:FFFF.0026: unknown main item tag 0x0 [ 730.296579][ T5940] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 730.328515][T22314] NILFS (rnullb0): couldn't find nilfs on the device [ 730.348548][T22316] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 730.364002][ T5940] usb 4-1: USB disconnect, device number 16 [ 730.380512][T22314] tipc: Enabling of bearer rejected, failed to enable media [ 730.468665][T22315] fido_id[22315]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 730.956343][T22331] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5065'. [ 731.195226][ T5940] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 731.372521][ T5940] usb 10-1: Using ep0 maxpacket: 8 [ 731.408304][ T5940] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 731.432537][ T5940] usb 10-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 731.458252][ T5940] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.489582][ T5940] usb 10-1: config 0 descriptor?? [ 731.655212][T22355] NILFS (rnullb0): couldn't find nilfs on the device [ 731.683453][T22355] tipc: Enabling of bearer rejected, failed to enable media [ 731.974851][ T5940] aureal 0003:0755:2626.0027: hidraw0: USB HID v4.00 Device [HID 0755:2626] on usb-dummy_hcd.9-1/input0 [ 732.250830][T22328] vcan0: entered allmulticast mode [ 732.323056][T22328] ntfs3(rnullb0): Primary boot signature is not NTFS. [ 732.346350][T22328] ntfs3(rnullb0): Alternative boot signature is not NTFS. [ 733.492001][T22392] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 733.622953][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5077'. [ 733.660569][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5077'. [ 733.689167][T22397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5077'. [ 733.734172][T22400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5077'. [ 733.754316][T22400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5077'. [ 734.167385][ T9] usb 10-1: USB disconnect, device number 26 [ 734.313149][T22415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5081'. [ 734.975621][ T1211] usb 10-1: new full-speed USB device number 27 using dummy_hcd [ 735.017764][T22435] netlink: 'syz.3.5087': attribute type 10 has an invalid length. [ 735.211157][ T1211] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 735.233455][ T1211] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 735.264318][ T1211] usb 10-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 735.297870][ T1211] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 735.333010][ T1211] usb 10-1: config 0 descriptor?? [ 735.380721][T22447] syz.3.5091: attempt to access beyond end of device [ 735.380721][T22447] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 735.397485][T22447] syz.3.5091: attempt to access beyond end of device [ 735.397485][T22447] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 735.418067][T22445] veth1_macvtap: entered allmulticast mode [ 735.427743][T22447] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 735.465154][T22447] syz.3.5091: attempt to access beyond end of device [ 735.465154][T22447] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 735.506117][T22447] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 735.540076][T22447] syz.3.5091: attempt to access beyond end of device [ 735.540076][T22447] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 735.597363][T22447] syz.3.5091: attempt to access beyond end of device [ 735.597363][T22447] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 735.615501][T22447] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 735.633260][T22447] syz.3.5091: attempt to access beyond end of device [ 735.633260][T22447] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 735.675377][T22447] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 735.703203][T22447] syz.3.5091: attempt to access beyond end of device [ 735.703203][T22447] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 735.738539][T22447] syz.3.5091: attempt to access beyond end of device [ 735.738539][T22447] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 735.754345][T22447] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 735.768818][T22447] syz.3.5091: attempt to access beyond end of device [ 735.768818][T22447] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 735.783051][T22447] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 735.801913][ T1211] bigben 0003:146B:0902.0028: unexpected rdesc, please submit for review [ 735.820434][ T1211] bigben 0003:146B:0902.0028: item fetching failed at offset 1/5 [ 735.829380][T22447] syz.3.5091: attempt to access beyond end of device [ 735.829380][T22447] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 735.836928][T22462] netlink: 'syz.7.5093': attribute type 10 has an invalid length. [ 735.843200][ T1211] bigben 0003:146B:0902.0028: parse failed [ 735.856798][ T1211] bigben 0003:146B:0902.0028: probe with driver bigben failed with error -22 [ 735.866166][T22447] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 735.879787][T22447] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 735.890281][T22447] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 736.110437][ T10] usb 10-1: USB disconnect, device number 27 [ 736.117059][T22465] tmpfs: Bad value for 'mpol' [ 736.306878][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.329812][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.361242][T22477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.372612][T22480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 736.891278][T22498] /dev/rnullb0: Can't open blockdev [ 736.904795][T22498] tipc: Enabling of bearer rejected, failed to enable media [ 737.075762][T22503] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5098'. [ 737.086323][T22503] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5098'. [ 737.420979][T22518] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5102'. [ 737.448978][T22518] openvswitch: netlink: Missing key (keys=40, expected=80) [ 737.601298][T22525] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 737.617860][T22525] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 738.019039][T22541] netlink: 80 bytes leftover after parsing attributes in process `syz.7.5107'. [ 738.129488][T22544] /dev/rnullb0: Can't open blockdev [ 738.151199][T22544] tipc: Enabling of bearer rejected, failed to enable media [ 738.476030][T22560] misc userio: Begin command sent, but we're already running [ 738.556630][ T10] usb 10-1: new high-speed USB device number 28 using dummy_hcd [ 738.728568][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 738.739490][ T10] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 738.772145][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 738.823609][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 738.857662][ T10] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 738.879513][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.909250][ T10] usb 10-1: config 0 descriptor?? [ 738.925929][T22552] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 738.982966][ T10] hub 10-1:0.0: USB hub found [ 739.192900][ T10] hub 10-1:0.0: 2 ports detected [ 739.255779][T22583] NILFS (rnullb0): couldn't find nilfs on the device [ 739.296211][T22583] tipc: Enabling of bearer rejected, failed to enable media [ 739.489117][T22587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.501168][ T10] hub 10-1:0.0: hub_hub_status failed (err = -71) [ 739.514044][ T10] hub 10-1:0.0: config failed, can't get hub status (err -71) [ 739.531254][ T10] usbhid 10-1:0.0: can't add hid device: -71 [ 739.538449][ T10] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 739.592264][ T10] usb 10-1: USB disconnect, device number 28 [ 740.454137][T22617] ISOFS: unsupported/invalid hardware sector size 4096 [ 740.542146][T22621] netlink: 'syz.9.5125': attribute type 10 has an invalid length. [ 740.566359][T22621] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5125'. [ 740.620692][T22621] batman_adv: batadv0: Adding interface: virt_wifi0 [ 740.627365][T22621] batman_adv: batadv0: Interface activated: virt_wifi0 [ 740.678830][T22625] netlink: 36 bytes leftover after parsing attributes in process `syz.9.5125'. [ 740.785569][T22619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.995543][T22640] NILFS (rnullb0): couldn't find nilfs on the device [ 741.003293][T22640] tipc: Enabling of bearer rejected, failed to enable media [ 741.110174][T22645] overlayfs: missing 'lowerdir' [ 741.483474][T22655] hfs: can't find a HFS filesystem on dev rnullb0 [ 741.638085][T22661] netlink: 'syz.3.5132': attribute type 10 has an invalid length. [ 741.863069][T22667] openvswitch: netlink: Tunnel attr 294 out of range max 16 [ 741.916890][T22670] netlink: 2384 bytes leftover after parsing attributes in process `syz.9.5136'. [ 741.967204][T22671] netlink: 2384 bytes leftover after parsing attributes in process `syz.9.5136'. [ 742.334039][T22688] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5141'. [ 743.506254][ T10] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 743.700539][ T10] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.748723][ T10] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 743.786121][ T10] usb 10-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 743.805412][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.813540][ T10] usb 10-1: Product: syz [ 743.826821][ T10] usb 10-1: Manufacturer: syz [ 743.831552][ T10] usb 10-1: SerialNumber: syz [ 743.850603][ T10] usb 10-1: config 0 descriptor?? [ 744.014680][T22745] openvswitch: netlink: Tunnel attr 294 out of range max 16 [ 744.087945][ T30] audit: type=1800 audit(1751734013.913:829): pid=22717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.5148" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 744.321404][T22755] NILFS (rnullb0): couldn't find nilfs on the device [ 744.329040][T22755] tipc: Enabling of bearer rejected, failed to enable media [ 744.560647][T22761] hpfs: Bad magic ... probably not HPFS [ 744.667467][ T5859] Bluetooth: hci3: unexpected event for opcode 0x2031 [ 744.669459][T22768] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5157'. [ 745.031268][ T5859] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 745.039557][ T5859] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 745.361648][T22799] NILFS (rnullb0): couldn't find nilfs on the device [ 745.393506][T22799] tipc: Enabling of bearer rejected, failed to enable media [ 745.566034][T22802] netlink: 'syz.3.5165': attribute type 10 has an invalid length. [ 745.592361][T22802] veth0_vlan: left promiscuous mode [ 745.602871][T22802] veth0_vlan: entered promiscuous mode [ 745.625514][T22802] team0: Device veth0_vlan failed to register rx_handler [ 746.497743][ T5940] usb 10-1: USB disconnect, device number 29 [ 747.061870][T22835] /dev/rnullb0: Can't open blockdev [ 748.352658][ T1088] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.548708][ T1088] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.716019][ T1088] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.945969][ T1088] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.119020][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 749.353808][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 134 [ 749.381187][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 749.392199][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.400708][ T9] usb 4-1: Product: syz [ 749.405194][ T1088] bridge_slave_1: left allmulticast mode [ 749.426568][ T1088] bridge_slave_1: left promiscuous mode [ 749.437340][ T9] usb 4-1: Manufacturer: syz [ 749.442319][ T1088] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.455722][ T9] usb 4-1: SerialNumber: syz [ 749.502631][ T1088] bridge_slave_0: left allmulticast mode [ 749.530178][ T1088] bridge_slave_0: left promiscuous mode [ 749.546635][ T1088] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.745098][T22875] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 749.860913][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 749.880648][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 749.890621][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 749.901522][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 749.909946][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 750.011521][T22902] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5187'. [ 750.195545][T22907] /dev/rnullb0: Can't open blockdev [ 750.406336][T22875] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 750.568693][ T1088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.581658][ T1088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.592450][ T1088] bond0 (unregistering): Released all slaves [ 750.623853][T22907] tipc: Enabling of bearer rejected, failed to enable media [ 750.631900][T22875] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 750.649819][T22875] /dev/rnullb0: Can't open blockdev [ 750.662885][T22875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 750.733856][T22875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 750.828376][ T9] cdc_ncm 4-1:1.0: failed to get mac address [ 750.859951][ T1088] tipc: Left network mode [ 750.882956][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.889299][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 750.900372][ T9] cdc_ncm 4-1:1.0: bind() failure [ 750.932471][ T9] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 750.991100][ T9] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 751.018455][ T9] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 751.082479][ T9] usb 4-1: USB disconnect, device number 17 [ 751.853870][T22944] tipc: Cannot configure node identity twice [ 751.884130][T22944] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 751.904308][T22945] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 751.926127][T22944] /dev/rnullb0: Can't open blockdev [ 751.938439][T22945] /dev/rnullb0: Can't open blockdev [ 751.958114][ T1088] hsr_slave_0: left promiscuous mode [ 752.028368][ T1088] hsr_slave_1: left promiscuous mode [ 752.056479][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.112144][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.147591][ T5859] Bluetooth: hci0: command tx timeout [ 752.171201][ T1088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.232844][ T1088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.265115][ T1088] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 752.294321][ T1088] batman_adv: batadv0: Removing interface: virt_wifi0 [ 752.354381][ T1088] veth1_macvtap: left promiscuous mode [ 752.363138][ T1088] veth0_macvtap: left promiscuous mode [ 752.369433][ T1088] veth1_vlan: left promiscuous mode [ 752.374910][ T1088] veth0_vlan: left promiscuous mode [ 752.537898][T22965] /dev/rnullb0: Can't open blockdev [ 753.441980][ T1088] team0 (unregistering): Port device team_slave_1 removed [ 753.604902][ T1088] team0 (unregistering): Port device team_slave_0 removed [ 754.375401][ T5859] Bluetooth: hci0: command tx timeout [ 754.564717][T22965] tipc: Enabling of bearer rejected, failed to enable media [ 754.860666][T22997] netlink: 'syz.3.5208': attribute type 10 has an invalid length. [ 754.945110][T22899] chnl_net:caif_netlink_parms(): no params data found [ 755.054744][T23005] /dev/rnullb0: Can't open blockdev [ 755.386199][T23018] /dev/rnullb0: Can't open blockdev [ 755.503952][T23018] tipc: Enabling of bearer rejected, failed to enable media [ 755.526557][T22899] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.548991][T22899] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.567251][T22899] bridge_slave_0: entered allmulticast mode [ 755.586084][T22899] bridge_slave_0: entered promiscuous mode [ 755.593213][T23027] ptm ptm12: ldisc open failed (-12), clearing slot 12 [ 755.623549][T22899] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.661550][T22899] bridge0: port 2(bridge_slave_1) entered disabled state [ 755.678474][T22899] bridge_slave_1: entered allmulticast mode [ 755.697790][T22899] bridge_slave_1: entered promiscuous mode [ 755.880036][T22899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 755.911233][T22899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 756.042992][T22899] team0: Port device team_slave_0 added [ 756.056340][T22899] team0: Port device team_slave_1 added [ 756.084297][T23047] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 756.104652][T12392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.118593][T12392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.158985][T22899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 756.183406][T22899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.209453][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.223948][T22899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 756.237971][T22899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 756.253815][T22899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 756.279730][ C0] vkms_vblank_simulate: vblank timer overrun [ 756.288509][T22899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 756.429227][T23052] netlink: 'syz.3.5223': attribute type 10 has an invalid length. [ 756.446617][T22899] hsr_slave_0: entered promiscuous mode [ 756.454021][T22899] hsr_slave_1: entered promiscuous mode [ 756.460559][T22899] debugfs: 'hsr0' already exists in 'hsr' [ 756.467016][T22899] Cannot create hsr debugfs directory [ 756.471688][T23052] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5223'. [ 756.591979][ T5859] Bluetooth: hci0: command tx timeout [ 756.817734][T22899] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.985055][T22899] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.030548][T23068] /dev/rnullb0: Can't open blockdev [ 757.041992][T23069] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 757.046502][T23068] tipc: Enabling of bearer rejected, failed to enable media [ 757.153993][T22899] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.263520][T22899] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 757.454292][T22899] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 757.477073][T22899] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 757.495660][T22899] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 757.515391][T22899] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 757.677426][T22899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.733424][T22899] 8021q: adding VLAN 0 to HW filter on device team0 [ 757.753980][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.761194][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.805908][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.813131][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.268322][T22899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.515930][T15804] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 758.692548][T22899] veth0_vlan: entered promiscuous mode [ 758.707745][T15804] usb 4-1: unable to get BOS descriptor or descriptor too short [ 758.727848][T15804] usb 4-1: config 7 has an invalid interface number: 25 but max is 0 [ 758.739760][T22899] veth1_vlan: entered promiscuous mode [ 758.745889][T15804] usb 4-1: config 7 has no interface number 0 [ 758.755472][T15804] usb 4-1: config 7 interface 25 has no altsetting 0 [ 758.772121][T15804] usb 4-1: New USB device found, idVendor=8087, idProduct=0a5a, bcdDevice=60.b2 [ 758.786080][T15804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.810988][T15804] usb 4-1: Product: syz [ 758.815583][ T5859] Bluetooth: hci0: command tx timeout [ 758.827922][T22899] veth0_macvtap: entered promiscuous mode [ 758.839500][T15804] usb 4-1: Manufacturer: syz [ 758.844154][T15804] usb 4-1: SerialNumber: syz [ 758.861816][T22899] veth1_macvtap: entered promiscuous mode [ 758.888121][T22899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.928007][T22899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.975952][T21965] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.001303][T21965] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.024527][T21965] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.051701][T21965] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.101714][ T30] audit: type=1326 audit(1751734027.954:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23110 comm="syz.3.5232" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5bed8e929 code=0x0 [ 759.316143][ T1088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.336690][ T1088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.390542][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 759.400688][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.614957][T23151] /dev/rnullb0: Can't open blockdev [ 759.640190][T23151] tipc: Enabling of bearer rejected, failed to enable media [ 759.772578][T23155] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5235'. [ 759.881230][T23161] /dev/rnullb0: Can't open blockdev [ 759.900443][T23162] netlink: 'syz.4.5237': attribute type 21 has an invalid length. [ 759.911529][T23162] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5237'. [ 759.921391][T23162] netlink: 'syz.4.5237': attribute type 5 has an invalid length. [ 759.930041][T23162] netlink: 'syz.4.5237': attribute type 6 has an invalid length. [ 759.938478][T23162] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5237'. [ 760.805342][T23187] loop6: detected capacity change from 0 to 63 [ 760.828666][ T8240] buffer_io_error: 8 callbacks suppressed [ 760.828685][ T8240] Buffer I/O error on dev loop6, logical block 0, async page read [ 760.869407][ T8240] Buffer I/O error on dev loop6, logical block 0, async page read [ 760.889852][T23186] Buffer I/O error on dev loop6, logical block 0, async page read [ 760.898205][T23186] Buffer I/O error on dev loop6, logical block 0, async page read [ 760.942749][T23186] Buffer I/O error on dev loop6, logical block 0, async page read [ 760.966944][ T8240] Buffer I/O error on dev loop6, logical block 0, async page read [ 760.987306][ T8240] Buffer I/O error on dev loop6, logical block 0, async page read [ 761.012569][T23186] Buffer I/O error on dev loop6, logical block 0, async page read [ 761.026526][T23186] Buffer I/O error on dev loop6, logical block 0, async page read [ 761.039811][T23186] Buffer I/O error on dev loop6, logical block 0, async page read [ 761.207408][T23199] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 761.521932][T15804] usb 4-1: USB disconnect, device number 18 [ 762.282597][T23240] /dev/rnullb0: Can't open blockdev [ 762.288691][T23240] tipc: Started in network mode [ 762.295692][T23240] tipc: Node identity 000000000000002d0000000000000001, cluster identity 4711 [ 762.304755][T23240] tipc: Enabling of bearer rejected, failed to enable media [ 762.484392][T23243] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 763.113548][T15804] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 763.302228][T15804] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.323336][T15804] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 763.344571][T15804] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 763.364851][T15804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.385450][T15804] usb 4-1: Product: syz [ 763.409931][T15804] usb 4-1: Manufacturer: syz [ 763.414943][T15804] usb 4-1: SerialNumber: syz [ 763.451297][T15804] usb 4-1: config 0 descriptor?? [ 763.700689][ T30] audit: type=1800 audit(1751734288.248:831): pid=23258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5257" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 763.701430][ T1211] usb 4-1: USB disconnect, device number 19 [ 764.331556][T23270] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 764.554590][T23270] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.600872][T23270] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 764.614466][T23270] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 764.624682][T23270] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.642397][T23270] usb 5-1: Product: syz [ 764.651908][T23270] usb 5-1: Manufacturer: syz [ 764.657502][T23270] usb 5-1: SerialNumber: syz [ 764.680825][T23270] cdc_mbim 5-1:1.0: skipping garbage [ 764.696071][T23325] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 764.717256][T23334] /dev/rnullb0: Can't open blockdev [ 764.726170][T23325] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 764.739470][T23334] tipc: Enabling of bearer rejected, failed to enable media [ 764.769881][T23325] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 764.822001][T23325] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 764.833722][T23325] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 764.839945][T23325] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 764.860706][T23325] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 764.872438][T23325] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 764.879619][T23325] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 764.902516][T23301] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 764.910325][T23325] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 765.238860][T23350] syzkaller1: entered promiscuous mode [ 765.255131][T23350] syzkaller1: entered allmulticast mode [ 765.550719][ T1211] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 765.578961][T23301] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 765.593706][T23270] cdc_mbim 5-1:1.0: setting tx_max = 184 [ 765.601394][T23270] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 765.628475][T23270] wwan wwan0: port wwan0mbim0 attached [ 765.663629][T23270] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, da:a2:86:91:91:70 [ 765.732217][ T1211] usb 4-1: Using ep0 maxpacket: 8 [ 765.742198][ T1211] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 765.766772][ T1211] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 765.782178][ T1211] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 765.792797][ T1211] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 765.812931][ T1211] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 765.822454][ T1211] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.036414][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 766.043172][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 766.049608][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 766.056363][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 766.062983][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 766.069410][ T1211] usb 4-1: GET_CAPABILITIES returned 0 [ 766.069811][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 766.075573][ T1211] usbtmc 4-1:16.0: can't read capabilities [ 766.084604][ C1] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 766.093935][ C1] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 766.104899][T15804] usb 5-1: USB disconnect, device number 64 [ 766.130280][T15804] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 766.227840][T15804] wwan wwan0: port wwan0mbim0 disconnected [ 766.325026][ T5903] usb 4-1: USB disconnect, device number 20 [ 766.854961][ T5859] Bluetooth: hci3: command 0x0405 tx timeout [ 766.940221][ T5859] Bluetooth: hci2: command 0x0405 tx timeout [ 767.002674][T23402] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5281'. [ 767.026028][ T5859] Bluetooth: hci0: command 0x0c1a tx timeout [ 767.028038][ T5863] Bluetooth: hci1: command 0x0c1a tx timeout [ 767.244437][ T30] audit: type=1326 audit(1751734291.568:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23407 comm="syz.3.5283" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb5bed8e929 code=0x0 [ 767.266800][T23410] /dev/rnullb0: Can't open blockdev [ 767.284910][T23410] tipc: Enabling of bearer rejected, failed to enable media [ 767.752605][T23423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5287'. [ 767.771261][T23423] openvswitch: netlink: Flow key attr not present in new flow. [ 767.998535][ T1211] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 768.169356][ T1211] usb 4-1: device descriptor read/64, error -71 [ 768.427899][ T1211] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 768.589009][ T1211] usb 4-1: device descriptor read/64, error -71 [ 768.758290][ T1211] usb usb4-port1: attempt power cycle [ 768.819876][ T30] audit: type=1326 audit(1751734293.046:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23454 comm="syz.0.5294" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f01cc58e929 code=0x0 [ 768.960623][T15804] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 769.142203][T15804] usb 5-1: Using ep0 maxpacket: 32 [ 769.147585][ T1211] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 769.171092][ T5863] Bluetooth: hci2: command 0x0405 tx timeout [ 769.183849][ T1211] usb 4-1: device descriptor read/8, error -71 [ 769.249850][ T5863] Bluetooth: hci1: command 0x0c1a tx timeout [ 769.252966][ T5859] Bluetooth: hci0: command 0x0c1a tx timeout [ 769.395946][T15804] usb 5-1: unable to get BOS descriptor or descriptor too short [ 769.411376][T15804] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 769.419705][T15804] usb 5-1: can't read configurations, error -71 [ 769.452084][ T1211] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 769.480953][ T1211] usb 4-1: device descriptor read/8, error -71 [ 769.612918][ T1211] usb usb4-port1: unable to enumerate USB device [ 769.743872][T23485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 769.754939][T23485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.388455][ T5859] Bluetooth: hci2: command 0x0405 tx timeout [ 771.480636][ T5859] Bluetooth: hci0: command 0x0c1a tx timeout [ 771.484828][ T5863] Bluetooth: hci1: command 0x0c1a tx timeout [ 771.735736][T23541] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5307'. [ 772.039550][ T5903] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 772.223377][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 772.254434][ T5903] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 772.305585][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 772.328372][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 772.338176][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 772.377978][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 772.396064][T23556] No control pipe specified [ 772.427760][ T5903] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 772.456361][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.464423][ T5903] usb 5-1: Product: syz [ 772.481788][ T5903] usb 5-1: Manufacturer: syz [ 772.486433][ T5903] usb 5-1: SerialNumber: syz [ 772.512952][ T5903] usb 5-1: config 0 descriptor?? [ 772.955978][ T5903] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 772.981703][ T5903] input input46: Device does not respond to id packet M [ 773.027730][ T5903] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 773.035298][ T5903] input input46: Device does not respond to id packet P [ 773.059263][ T5903] iforce 5-1:0.0: usb_submit_urb failed: -32 [ 773.073479][ T5903] input input46: Device does not respond to id packet B [ 773.273211][T23581] /dev/rnullb0: Can't open blockdev [ 773.310336][ T5903] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 773.328957][ T5903] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 773.354874][ T5903] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 773.380786][ T5903] iforce 5-1:0.0: usb_submit_urb failed: -71 [ 773.415249][ T5903] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input46 [ 773.504404][ T5903] usb 5-1: USB disconnect, device number 67 [ 773.662920][T23589] /dev/rnullb0: Can't open blockdev [ 773.669226][T23589] tipc: Enabling of bearer rejected, failed to enable media [ 773.719087][T23592] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5317'. [ 773.895315][T23596] /dev/rnullb0: Can't open blockdev [ 774.540936][ T5903] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 774.722896][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 774.736151][ T5903] usb 5-1: unable to get BOS descriptor or descriptor too short [ 774.758221][ T5903] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 774.769372][T23623] /dev/rnullb0: Can't open blockdev [ 774.781019][ T5903] usb 5-1: config 1 has no interface number 1 [ 774.793556][ T5903] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 774.831337][ T5903] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 774.841395][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.859859][ T5903] usb 5-1: Product: syz [ 774.876523][ T5903] usb 5-1: Manufacturer: syz [ 774.886436][ T5903] usb 5-1: SerialNumber: syz [ 775.140360][ T5903] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 775.183058][ T5903] usb 5-1: USB disconnect, device number 68 [ 775.226006][T13340] udevd[13340]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 775.668246][T23645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 775.832734][T23653] /dev/rnullb0: Can't open blockdev [ 776.468565][T23669] /dev/rnullb0: Can't open blockdev [ 776.498632][T23669] tipc: Enabling of bearer rejected, failed to enable media [ 776.878330][T23687] /dev/rnullb0: Can't open blockdev [ 777.739386][T23719] netlink: 80 bytes leftover after parsing attributes in process `syz.0.5344'. [ 777.911362][T23728] netlink: 'syz.0.5345': attribute type 21 has an invalid length. [ 777.929905][T23728] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5345'. [ 777.951759][T23728] netlink: 'syz.0.5345': attribute type 5 has an invalid length. [ 777.959520][T23728] netlink: 'syz.0.5345': attribute type 6 has an invalid length. [ 777.985211][T23728] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5345'. [ 778.111693][ T5903] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 778.304662][ T5903] usb 4-1: Using ep0 maxpacket: 32 [ 778.325791][ T5903] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 778.344724][ T5903] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 778.360705][ T5903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 778.384526][ T5903] usb 4-1: config 0 has no interface number 0 [ 778.392547][ T5903] usb 4-1: config 0 interface 12 altsetting 2 has an invalid endpoint descriptor of length 5, skipping [ 778.419215][ T5903] usb 4-1: config 0 interface 12 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 778.443190][ T5903] usb 4-1: config 0 interface 12 has no altsetting 0 [ 778.466720][ T5903] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 778.492397][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.503753][ T5903] usb 4-1: Product: syz [ 778.509489][ T5903] usb 4-1: Manufacturer: syz [ 778.514105][ T5903] usb 4-1: SerialNumber: syz [ 778.525645][ T5903] usb 4-1: config 0 descriptor?? [ 778.542901][ T5903] f81534 4-1:0.12: required endpoints missing [ 779.913277][T23107] usb 4-1: USB disconnect, device number 25 [ 779.977256][T23791] netlink: 6 bytes leftover after parsing attributes in process `syz.7.5349'. [ 780.071599][T23798] /dev/rnullb0: Can't open blockdev [ 780.261251][T23805] /dev/rnullb0: Can't open blockdev [ 780.407163][ T5863] Bluetooth: hci2: unexpected event for opcode 0x203d [ 781.641859][T23852] netlink: 'syz.7.5365': attribute type 10 has an invalid length. [ 782.003267][T23873] openvswitch: netlink: Tunnel attr 294 out of range max 16 [ 782.349264][T23885] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 782.860131][T23911] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5380'. [ 783.008826][T23915] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 783.212246][T23921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5384'. [ 783.497902][T23931] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5389'. [ 783.858611][T23940] /dev/rnullb0: Can't open blockdev [ 784.422345][T23956] /dev/rnullb0: Can't open blockdev [ 784.738985][T23971] /dev/rnullb0: Can't open blockdev [ 784.753493][T23972] openvswitch: netlink: Tunnel attr 294 out of range max 16 [ 785.095679][T23984] /dev/rnullb0: Can't open blockdev [ 785.304448][T23992] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5407'. [ 785.645194][T24004] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 785.669958][ T5903] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 785.743114][T24006] FAULT_INJECTION: forcing a failure. [ 785.743114][T24006] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 785.793082][T24006] CPU: 1 UID: 0 PID: 24006 Comm: syz.0.5410 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 785.793110][T24006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 785.793122][T24006] Call Trace: [ 785.793130][T24006] [ 785.793139][T24006] dump_stack_lvl+0x189/0x250 [ 785.793174][T24006] ? __pfx____ratelimit+0x10/0x10 [ 785.793195][T24006] ? __pfx_dump_stack_lvl+0x10/0x10 [ 785.793223][T24006] ? __pfx__printk+0x10/0x10 [ 785.793251][T24006] ? fs_reclaim_acquire+0x7d/0x100 [ 785.793279][T24006] should_fail_ex+0x414/0x560 [ 785.793313][T24006] prepare_alloc_pages+0x213/0x610 [ 785.793341][T24006] __alloc_frozen_pages_noprof+0x123/0x370 [ 785.793362][T24006] ? __mutex_lock+0x51b/0xe80 [ 785.793384][T24006] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 785.793419][T24006] ? __pfx__copy_from_iter+0x10/0x10 [ 785.793443][T24006] ? policy_nodemask+0x27c/0x720 [ 785.793476][T24006] alloc_pages_mpol+0x232/0x4a0 [ 785.793528][T24006] alloc_pages_noprof+0xa9/0x190 [ 785.793562][T24006] anon_pipe_write+0xb85/0x1360 [ 785.793609][T24006] ? __pfx_anon_pipe_write+0x10/0x10 [ 785.793632][T24006] ? common_file_perm+0x199/0x200 [ 785.793665][T24006] ? bpf_lsm_file_permission+0x9/0x20 [ 785.793692][T24006] ? security_file_permission+0x75/0x290 [ 785.793725][T24006] vfs_write+0x548/0xa90 [ 785.793762][T24006] ? __pfx_anon_pipe_write+0x10/0x10 [ 785.793786][T24006] ? __pfx_vfs_write+0x10/0x10 [ 785.793829][T24006] ? __fget_files+0x2a/0x420 [ 785.793861][T24006] ksys_write+0x145/0x250 [ 785.793883][T24006] ? __pfx_ksys_write+0x10/0x10 [ 785.793899][T24006] ? rcu_is_watching+0x15/0xb0 [ 785.793932][T24006] ? do_syscall_64+0xbe/0x3b0 [ 785.793959][T24006] do_syscall_64+0xfa/0x3b0 [ 785.793981][T24006] ? lockdep_hardirqs_on+0x9c/0x150 [ 785.794002][T24006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.794023][T24006] ? clear_bhb_loop+0x60/0xb0 [ 785.794049][T24006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.794069][T24006] RIP: 0033:0x7f01cc58e929 [ 785.794088][T24006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 785.794110][T24006] RSP: 002b:00007f01cd398038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 785.794132][T24006] RAX: ffffffffffffffda RBX: 00007f01cc7b6080 RCX: 00007f01cc58e929 [ 785.794147][T24006] RDX: 000000000000fdef RSI: 0000200000000980 RDI: 0000000000000007 [ 785.794161][T24006] RBP: 00007f01cd398090 R08: 0000000000000000 R09: 0000000000000000 [ 785.794175][T24006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 785.794187][T24006] R13: 0000000000000001 R14: 00007f01cc7b6080 R15: 00007ffda31600e8 [ 785.794219][T24006] [ 786.061961][ C1] vkms_vblank_simulate: vblank timer overrun [ 786.135189][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.146458][ T5903] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 786.155607][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.167838][ T5903] usb 4-1: config 0 descriptor?? [ 786.604690][T24022] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5414'. [ 786.608669][ T5903] keytouch 0003:0926:3333.0029: fixing up Keytouch IEC report descriptor [ 786.665945][ T5903] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0029/input/input47 [ 786.940501][ T5903] keytouch 0003:0926:3333.0029: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 787.511001][T24043] FAULT_INJECTION: forcing a failure. [ 787.511001][T24043] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 787.540888][T24043] CPU: 0 UID: 0 PID: 24043 Comm: syz.4.5420 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 787.540918][T24043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 787.540932][T24043] Call Trace: [ 787.540940][T24043] [ 787.540950][T24043] dump_stack_lvl+0x189/0x250 [ 787.540984][T24043] ? __pfx____ratelimit+0x10/0x10 [ 787.541006][T24043] ? __pfx_dump_stack_lvl+0x10/0x10 [ 787.541036][T24043] ? __pfx__printk+0x10/0x10 [ 787.541065][T24043] ? __might_fault+0xb0/0x130 [ 787.541106][T24043] should_fail_ex+0x414/0x560 [ 787.541142][T24043] _copy_from_user+0x2d/0xb0 [ 787.541173][T24043] input_event_from_user+0xb2/0x280 [ 787.541204][T24043] ? __pfx_input_event_from_user+0x10/0x10 [ 787.541238][T24043] ? input_inject_event+0xbc/0x320 [ 787.541270][T24043] evdev_write+0x2a6/0x480 [ 787.541304][T24043] ? __pfx_evdev_write+0x10/0x10 [ 787.541332][T24043] ? bpf_lsm_file_permission+0x9/0x20 [ 787.541358][T24043] ? security_file_permission+0x75/0x290 [ 787.541383][T24043] ? rw_verify_area+0x258/0x650 [ 787.541414][T24043] ? __pfx_evdev_write+0x10/0x10 [ 787.541443][T24043] vfs_write+0x27e/0xa90 [ 787.541484][T24043] ? __pfx_vfs_write+0x10/0x10 [ 787.541517][T24043] ? __fget_files+0x2a/0x420 [ 787.541543][T24043] ? __fget_files+0x2a/0x420 [ 787.541566][T24043] ? __fget_files+0x3a0/0x420 [ 787.541587][T24043] ? __fget_files+0x2a/0x420 [ 787.541618][T24043] ksys_write+0x145/0x250 [ 787.541640][T24043] ? __pfx_ksys_write+0x10/0x10 [ 787.541657][T24043] ? rcu_is_watching+0x15/0xb0 [ 787.541688][T24043] ? do_syscall_64+0xbe/0x3b0 [ 787.541717][T24043] do_syscall_64+0xfa/0x3b0 [ 787.541739][T24043] ? lockdep_hardirqs_on+0x9c/0x150 [ 787.541760][T24043] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.541780][T24043] ? clear_bhb_loop+0x60/0xb0 [ 787.541805][T24043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.541825][T24043] RIP: 0033:0x7f555898e929 [ 787.541843][T24043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 787.541861][T24043] RSP: 002b:00007f5559795038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 787.541883][T24043] RAX: ffffffffffffffda RBX: 00007f5558bb5fa0 RCX: 00007f555898e929 [ 787.541898][T24043] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000003 [ 787.541912][T24043] RBP: 00007f5559795090 R08: 0000000000000000 R09: 0000000000000000 [ 787.541924][T24043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 787.541937][T24043] R13: 0000000000000000 R14: 00007f5558bb5fa0 R15: 00007ffd1c3489a8 [ 787.541967][T24043] [ 787.829701][T24046] openvswitch: netlink: Tunnel attr 294 out of range max 16 [ 788.215687][T24056] /dev/rnullb0: Can't open blockdev [ 788.232879][T24056] tipc: Enabling of bearer rejected, failed to enable media [ 788.267345][T24053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.353661][T24053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.543322][T24064] /dev/rnullb0: Can't open blockdev [ 788.608553][T15804] usb 4-1: USB disconnect, device number 26 [ 789.954746][T24112] trusted_key: encrypted_key: insufficient parameters specified [ 790.675208][T24139] FAULT_INJECTION: forcing a failure. [ 790.675208][T24139] name failslab, interval 1, probability 0, space 0, times 0 [ 790.699633][T24139] CPU: 0 UID: 0 PID: 24139 Comm: syz.4.5442 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 790.699665][T24139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 790.699678][T24139] Call Trace: [ 790.699687][T24139] [ 790.699697][T24139] dump_stack_lvl+0x189/0x250 [ 790.699735][T24139] ? __pfx____ratelimit+0x10/0x10 [ 790.699779][T24139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 790.699811][T24139] ? __pfx__printk+0x10/0x10 [ 790.699845][T24139] ? __pfx___might_resched+0x10/0x10 [ 790.699872][T24139] ? fs_reclaim_acquire+0x7d/0x100 [ 790.699898][T24139] should_fail_ex+0x414/0x560 [ 790.699933][T24139] should_failslab+0xa8/0x100 [ 790.699953][T24139] __kmalloc_noprof+0xcb/0x4f0 [ 790.699982][T24139] ? do_pagemap_cmd+0x3ea/0xbb0 [ 790.700009][T24139] do_pagemap_cmd+0x3ea/0xbb0 [ 790.700040][T24139] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 790.700080][T24139] ? __fget_files+0x2a/0x420 [ 790.700106][T24139] ? __fget_files+0x2a/0x420 [ 790.700127][T24139] ? __fget_files+0x3a0/0x420 [ 790.700167][T24139] ? __fget_files+0x2a/0x420 [ 790.700194][T24139] ? bpf_lsm_file_ioctl+0x9/0x20 [ 790.700223][T24139] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 790.700248][T24139] __se_sys_ioctl+0xf9/0x170 [ 790.700281][T24139] do_syscall_64+0xfa/0x3b0 [ 790.700304][T24139] ? lockdep_hardirqs_on+0x9c/0x150 [ 790.700327][T24139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.700348][T24139] ? clear_bhb_loop+0x60/0xb0 [ 790.700373][T24139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.700394][T24139] RIP: 0033:0x7f555898e929 [ 790.700413][T24139] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.700432][T24139] RSP: 002b:00007f5559795038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 790.700454][T24139] RAX: ffffffffffffffda RBX: 00007f5558bb5fa0 RCX: 00007f555898e929 [ 790.700468][T24139] RDX: 00002000000001c0 RSI: 00000000c0606610 RDI: 0000000000000003 [ 790.700483][T24139] RBP: 00007f5559795090 R08: 0000000000000000 R09: 0000000000000000 [ 790.700496][T24139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 790.700509][T24139] R13: 0000000000000000 R14: 00007f5558bb5fa0 R15: 00007ffd1c3489a8 [ 790.700541][T24139] [ 790.926369][ C0] vkms_vblank_simulate: vblank timer overrun [ 790.961938][T24143] /dev/rnullb0: Can't open blockdev [ 790.968127][T24143] tipc: Enabling of bearer rejected, failed to enable media [ 791.025870][T24117] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 791.032288][T24117] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 791.043387][T24117] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 791.049983][T24117] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 791.270951][T24156] /dev/rnullb0: Can't open blockdev [ 791.463966][T24166] comedi comedi0: pcm3724: I/O port conflict (0x4,16) [ 791.579467][T24171] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 791.692476][T23270] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 791.806285][ T1211] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 791.870439][T23270] usb 4-1: Using ep0 maxpacket: 8 [ 791.878285][T23270] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 791.892703][T23270] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 791.902844][T23270] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 791.913984][T23270] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 791.927237][T23270] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 791.945218][T23270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.988183][ T1211] usb 5-1: Using ep0 maxpacket: 32 [ 791.998011][ T1211] usb 5-1: too many configurations: 63, using maximum allowed: 8 [ 792.011866][ T1211] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 792.024974][ T1211] usb 5-1: can't read configurations, error -61 [ 792.037367][T24183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5459'. [ 792.046560][T24183] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5459'. [ 792.149190][T24185] /dev/rnullb0: Can't open blockdev [ 792.170388][ T1211] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 792.182218][T24164] sctp: [Deprecated]: syz.3.5454 (pid 24164) Use of int in max_burst socket option. [ 792.182218][T24164] Use struct sctp_assoc_value instead [ 792.201294][T23270] usb 4-1: GET_CAPABILITIES returned 0 [ 792.218026][T23270] usbtmc 4-1:16.0: can't read capabilities [ 792.351784][ T1211] usb 5-1: Using ep0 maxpacket: 32 [ 792.358272][ T1211] usb 5-1: too many configurations: 63, using maximum allowed: 8 [ 792.372512][T24189] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 792.381432][ T1211] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 792.390640][ T1211] usb 5-1: can't read configurations, error -61 [ 792.417677][T24164] usbtmc 4-1:16.0: send_request_dev_dep_msg_in returned -90 [ 792.429791][ T5941] usb 4-1: USB disconnect, device number 27 [ 792.438168][T24072] Bluetooth: hci3: command 0x0405 tx timeout [ 792.452480][ T1211] usb usb5-port1: attempt power cycle [ 792.832748][ T1211] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 792.876398][ T1211] usb 5-1: Using ep0 maxpacket: 32 [ 792.883938][ T1211] usb 5-1: too many configurations: 63, using maximum allowed: 8 [ 792.895128][ T1211] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 792.905965][ T1211] usb 5-1: can't read configurations, error -61 [ 793.022644][T24205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 793.051992][ T1211] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 793.079248][ T1211] usb 5-1: Using ep0 maxpacket: 32 [ 793.085194][ T1211] usb 5-1: too many configurations: 63, using maximum allowed: 8 [ 793.094659][ T1211] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 793.107018][ T1211] usb 5-1: can't read configurations, error -61 [ 793.114064][ T1211] usb usb5-port1: unable to enumerate USB device [ 793.205167][T24221] /dev/rnullb0: Can't open blockdev [ 793.210945][T24072] Bluetooth: hci0: command 0x0c1a tx timeout [ 793.218835][T24072] Bluetooth: hci1: command 0x0c1a tx timeout [ 793.225202][T24072] Bluetooth: hci2: command 0x0405 tx timeout [ 793.526284][T24235] /dev/rnullb0: Can't open blockdev [ 793.649216][T24240] tipc: Enabling of bearer rejected, failed to enable media [ 793.824917][T24247] netlink: 80 bytes leftover after parsing attributes in process `syz.3.5483'. [ 793.915492][T24250] netlink: 'syz.3.5484': attribute type 21 has an invalid length. [ 793.928015][T24250] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5484'. [ 793.939375][ T5863] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 793.941840][T24250] netlink: 'syz.3.5484': attribute type 5 has an invalid length. [ 793.973150][T24250] netlink: 'syz.3.5484': attribute type 6 has an invalid length. [ 793.984729][T24250] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5484'. [ 794.248961][T24268] /dev/rnullb0: Can't open blockdev [ 794.255287][T24268] tipc: Enabling of bearer rejected, failed to enable media [ 794.374394][T24276] /dev/rnullb0: Can't open blockdev [ 794.498838][T24283] loop6: detected capacity change from 0 to 63 [ 794.519172][T13340] buffer_io_error: 8 callbacks suppressed [ 794.519188][T13340] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.538139][T24281] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.551633][T24281] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.560354][T24281] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.569935][T13340] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.588131][T24281] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.596073][T13340] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.605672][T24281] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.614583][T24281] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.623083][T24281] Buffer I/O error on dev loop6, logical block 0, async page read [ 794.671362][T23270] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 794.876584][T23270] usb 4-1: config 1 has an invalid descriptor of length 199, skipping remainder of the config [ 794.887248][T23270] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 794.896775][T23270] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 794.913309][T23270] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 794.923271][T23270] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.931452][T23270] usb 4-1: Product: syz [ 794.935758][T23270] usb 4-1: Manufacturer: syz [ 794.940466][T23270] usb 4-1: SerialNumber: syz [ 795.120597][ T9] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 795.291487][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 795.300248][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 795.311729][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 795.321978][ T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 795.332074][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 795.347248][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 795.357310][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 795.365403][ T9] usb 5-1: SerialNumber: syz [ 795.381451][T24286] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 795.389876][T24286] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 795.391344][T24275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.402366][ T9] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 795.419425][T24275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.420216][ T5863] Bluetooth: hci0: command 0x0c1a tx timeout [ 795.452140][T23270] usb 4-1: USB disconnect, device number 28 [ 795.632332][T24286] /dev/rnullb0: Can't open blockdev [ 795.663100][ T9] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 795.684260][ T9] usb 5-1: USB disconnect, device number 73 [ 796.083424][T24307] /dev/rnullb0: Can't open blockdev [ 796.089548][T24307] tipc: Enabling of bearer rejected, failed to enable media [ 796.435346][ T5903] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 796.611748][ T5903] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 796.627746][ T5903] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 796.637955][ T5903] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 796.647287][ T5903] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 796.660042][ T5903] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 796.677457][ T5903] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 796.709922][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 796.718509][ T5903] usb 4-1: Product: syz [ 796.722693][ T5903] usb 4-1: Manufacturer: syz [ 796.741793][ T5903] cdc_wdm 4-1:1.0: skipping garbage [ 796.748682][ T5903] cdc_wdm 4-1:1.0: skipping garbage [ 796.761097][ T5903] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 796.775504][ T5903] cdc_wdm 4-1:1.0: Unknown control protocol [ 797.493938][ T5941] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 797.669037][ T5941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 797.697085][ T5941] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 797.729096][ T5941] usb 5-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 797.738540][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.752426][ T5941] usb 5-1: Product: syz [ 797.756666][ T5941] usb 5-1: Manufacturer: syz [ 797.761667][ T5941] usb 5-1: SerialNumber: syz [ 797.783128][ T5941] usb 5-1: config 0 descriptor?? [ 798.147932][T24344] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5516'. [ 798.460784][T24352] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5518'. [ 799.479836][ T5903] usb 4-1: USB disconnect, device number 29 [ 799.581512][T24380] /dev/rnullb0: Can't open blockdev [ 799.598519][T24380] tipc: Enabling of bearer rejected, failed to enable media [ 799.711977][T24382] netlink: 168 bytes leftover after parsing attributes in process `syz.7.5522'. [ 799.785261][T24386] nbd: must specify at least one socket [ 800.431885][T24415] /dev/rnullb0: Can't open blockdev [ 800.517741][T15804] usb 5-1: USB disconnect, device number 74 [ 800.653571][T24423] 9pnet_fd: Insufficient options for proto=fd [ 801.190142][T24442] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5536'. [ 801.201931][T24442] openvswitch: netlink: Missing key (keys=40, expected=80) [ 801.486478][T24449] FAULT_INJECTION: forcing a failure. [ 801.486478][T24449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 801.531133][T24449] CPU: 0 UID: 0 PID: 24449 Comm: syz.4.5537 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 801.531163][T24449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 801.531176][T24449] Call Trace: [ 801.531184][T24449] [ 801.531193][T24449] dump_stack_lvl+0x189/0x250 [ 801.531226][T24449] ? __pfx____ratelimit+0x10/0x10 [ 801.531249][T24449] ? __pfx_dump_stack_lvl+0x10/0x10 [ 801.531277][T24449] ? __pfx__printk+0x10/0x10 [ 801.531304][T24449] ? __might_fault+0xb0/0x130 [ 801.531343][T24449] should_fail_ex+0x414/0x560 [ 801.531377][T24449] _copy_from_iter+0x1db/0x16f0 [ 801.531402][T24449] ? __alloc_frozen_pages_noprof+0x1d6/0x370 [ 801.531424][T24449] ? __mutex_lock+0x51b/0xe80 [ 801.531453][T24449] ? __pfx__copy_from_iter+0x10/0x10 [ 801.531478][T24449] ? policy_nodemask+0x27c/0x720 [ 801.531514][T24449] ? page_copy_sane+0x4e/0x280 [ 801.531540][T24449] copy_page_from_iter+0xdd/0x170 [ 801.531570][T24449] anon_pipe_write+0x99a/0x1360 [ 801.531615][T24449] ? __pfx_anon_pipe_write+0x10/0x10 [ 801.531635][T24449] ? common_file_perm+0x199/0x200 [ 801.531665][T24449] ? bpf_lsm_file_permission+0x9/0x20 [ 801.531694][T24449] ? security_file_permission+0x75/0x290 [ 801.531725][T24449] vfs_write+0x548/0xa90 [ 801.531759][T24449] ? __pfx_anon_pipe_write+0x10/0x10 [ 801.531783][T24449] ? __pfx_vfs_write+0x10/0x10 [ 801.531822][T24449] ? __fget_files+0x2a/0x420 [ 801.531853][T24449] ksys_write+0x145/0x250 [ 801.531873][T24449] ? __pfx_ksys_write+0x10/0x10 [ 801.531897][T24449] ? do_syscall_64+0xbe/0x3b0 [ 801.531923][T24449] do_syscall_64+0xfa/0x3b0 [ 801.531943][T24449] ? lockdep_hardirqs_on+0x9c/0x150 [ 801.531963][T24449] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.531988][T24449] ? clear_bhb_loop+0x60/0xb0 [ 801.532030][T24449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.532050][T24449] RIP: 0033:0x7f555898e929 [ 801.532068][T24449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 801.532086][T24449] RSP: 002b:00007f5559774038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 801.532108][T24449] RAX: ffffffffffffffda RBX: 00007f5558bb6080 RCX: 00007f555898e929 [ 801.532123][T24449] RDX: 000000000000fdef RSI: 0000200000000980 RDI: 0000000000000007 [ 801.532147][T24449] RBP: 00007f5559774090 R08: 0000000000000000 R09: 0000000000000000 [ 801.532160][T24449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 801.532188][T24449] R13: 0000000000000001 R14: 00007f5558bb6080 R15: 00007ffd1c3489a8 [ 801.532220][T24449] [ 801.787665][ C0] vkms_vblank_simulate: vblank timer overrun [ 801.985905][T24463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5539'. [ 802.054361][T24465] /dev/rnullb0: Can't open blockdev [ 802.564913][T24478] 9pnet_fd: Insufficient options for proto=fd [ 803.344608][ T65] [ 803.346991][ T65] ============================================ [ 803.353156][ T65] WARNING: possible recursive locking detected [ 803.359328][ T65] 6.16.0-rc4-next-20250704-syzkaller #0 Not tainted [ 803.365926][ T65] -------------------------------------------- [ 803.372079][ T65] kworker/u8:4/65 is trying to acquire lock: [ 803.378059][ T65] ffffe8ffffd24a88 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x73e/0xb80 [ 803.387305][ T65] [ 803.387305][ T65] but task is already holding lock: [ 803.394678][ T65] ffffe8ffffd34a88 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 803.403929][ T65] [ 803.403929][ T65] other info that might help us debug this: [ 803.412000][ T65] Possible unsafe locking scenario: [ 803.412000][ T65] [ 803.419452][ T65] CPU0 [ 803.422733][ T65] ---- [ 803.426021][ T65] lock(&pd_list->lock); [ 803.430357][ T65] lock(&pd_list->lock); [ 803.434696][ T65] [ 803.434696][ T65] *** DEADLOCK *** [ 803.434696][ T65] [ 803.442853][ T65] May be due to missing lock nesting notation [ 803.442853][ T65] [ 803.451168][ T65] 3 locks held by kworker/u8:4/65: [ 803.456293][ T65] #0: ffff88801ffd3148 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 803.468249][ T65] #1: ffffc9000213fbc0 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 803.480107][ T65] #2: ffffe8ffffd34a88 (&pd_list->lock){+...}-{3:3}, at: padata_do_serial+0x5b5/0xb80 [ 803.489792][ T65] [ 803.489792][ T65] stack backtrace: [ 803.495689][ T65] CPU: 1 UID: 0 PID: 65 Comm: kworker/u8:4 Not tainted 6.16.0-rc4-next-20250704-syzkaller #0 PREEMPT(full) [ 803.495711][ T65] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 803.495724][ T65] Workqueue: pencrypt_parallel padata_parallel_worker [ 803.495753][ T65] Call Trace: [ 803.495762][ T65] [ 803.495773][ T65] dump_stack_lvl+0x189/0x250 [ 803.495800][ T65] ? __pfx_dump_stack_lvl+0x10/0x10 [ 803.495830][ T65] ? __pfx__printk+0x10/0x10 [ 803.495856][ T65] ? print_lock_name+0xde/0x100 [ 803.495881][ T65] print_deadlock_bug+0x28b/0x2a0 [ 803.495905][ T65] validate_chain+0x1a3f/0x2140 [ 803.495930][ T65] ? irqentry_exit+0x74/0x90 [ 803.495948][ T65] ? lockdep_hardirqs_on+0x9c/0x150 [ 803.495965][ T65] ? look_up_lock_class+0x74/0x170 [ 803.495983][ T65] ? register_lock_class+0x51/0x320 [ 803.496005][ T65] __lock_acquire+0xab9/0xd20 [ 803.496026][ T65] ? padata_do_serial+0x73e/0xb80 [ 803.496049][ T65] lock_acquire+0x120/0x360 [ 803.496069][ T65] ? padata_do_serial+0x73e/0xb80 [ 803.496093][ T65] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 803.496122][ T65] _raw_spin_lock+0x2e/0x40 [ 803.496148][ T65] ? padata_do_serial+0x73e/0xb80 [ 803.496171][ T65] padata_do_serial+0x73e/0xb80 [ 803.496199][ T65] ? padata_parallel_worker+0x44/0x1d0 [ 803.496224][ T65] padata_parallel_worker+0x72/0x1d0 [ 803.496248][ T65] ? process_scheduled_works+0x9ef/0x17b0 [ 803.496269][ T65] process_scheduled_works+0xae1/0x17b0 [ 803.496301][ T65] ? __pfx_process_scheduled_works+0x10/0x10 [ 803.496329][ T65] worker_thread+0x8a0/0xda0 [ 803.496351][ T65] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 803.496371][ T65] ? __kthread_parkme+0x7b/0x200 [ 803.496397][ T65] kthread+0x70e/0x8a0 [ 803.496424][ T65] ? __pfx_worker_thread+0x10/0x10 [ 803.496445][ T65] ? __pfx_kthread+0x10/0x10 [ 803.496470][ T65] ? _raw_spin_unlock_irq+0x23/0x50 [ 803.496485][ T65] ? lockdep_hardirqs_on+0x9c/0x150 [ 803.496502][ T65] ? __pfx_kthread+0x10/0x10 [ 803.496527][ T65] ret_from_fork+0x3fc/0x770 [ 803.496550][ T65] ? __pfx_ret_from_fork+0x10/0x10 [ 803.496573][ T65] ? __switch_to_asm+0x39/0x70 [ 803.496587][ T65] ? __switch_to_asm+0x33/0x70 [ 803.496602][ T65] ? __pfx_kthread+0x10/0x10 [ 803.496628][ T65] ret_from_fork_asm+0x1a/0x30 [ 803.496649][ T65] [ 803.751142][T24498] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5547'. [ 803.760542][T24498] openvswitch: netlink: Flow actions attr not present in new flow. [ 803.771924][T24503] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5550'.