last executing test programs: 1m37.354852409s ago: executing program 3 (id=705): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0x14}, @hci_ev_le_advertising_info={{}, {0x1, [{0x2, 0x0, @any, 0x8, "06bd0910de6e365c"}]}}}}, 0x17) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1c, 0x76c3d6d7c82f563b, 0xffffffffffffffff, 0x7dfff000) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x40, 0xfffffff8, 0x52ae, 0x0, 0x4, 0x82b, 0x639a000}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48040}, 0x1) mprotect(&(0x7f0000787000/0x1000)=nil, 0x1000, 0x2) 1m37.349112487s ago: executing program 3 (id=708): openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, 0xffffffffffffffff, 0x45809000) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x10000000000030, 0x0, 0x0) r1 = shmget$private(0x0, 0x800000, 0x880, &(0x7f0000173000/0x800000)=nil) r2 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mbind(&(0x7f000011b000/0x3000)=nil, 0x3000, 0x4000, 0x0, 0x8, 0x8) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, 0xffffffffffffffff, 0x45809000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0xb9) mount(&(0x7f00000002c0)=@nullb, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x100000}], 0x2, 0x0, 0x0, 0xb) mlock2(&(0x7f00002e5000/0xc00000)=nil, 0xc00000, 0x0) 1m37.348586716s ago: executing program 3 (id=709): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000300000c00430002"], 0x34}}, 0x1000) 1m37.254219663s ago: executing program 3 (id=711): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPTLCK(r0, 0x5420, &(0x7f0000001d40)) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) read$FUSE(r1, &(0x7f0000000f00)={0x2020}, 0x2020) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000030c0), 0x82200, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000003100)=0x3) ioctl$PPPIOCGNPMODE(r2, 0x4004743c, 0x0) 1m37.058764234s ago: executing program 3 (id=713): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000080)={0x6818, 0x5, 0xffffffffffffff01, 0x31, 0x0, 0x10, 0x9, 0xc47}, &(0x7f00000000c0)={0x3, 0x80, 0x7fffffff, 0xad3, 0x0, 0x8, 0x6, 0x8}, &(0x7f0000000140)={0x4, 0x0, 0xe, 0x100000001, 0x4a2, 0x2, 0x3, 0x7fffffffffffffff}, &(0x7f0000000240)={r0, r1+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x3]}, 0x8}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x101801, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="800100003e000701feffffff00000000047c00000800428004000800b80009"], 0x180}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) open(&(0x7f00000001c0)='.\x00', 0x141400, 0x0) 1m36.789735483s ago: executing program 3 (id=715): mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x44480, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d62690bbe608ae7a8e257d632a80e6e643a", @ANYRESDEC]) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc2400, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x8) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44", 0xe}], 0x1}, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002a00)={0xfffffffffffffe98, r9, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_UDP_CSUM={0x0, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}]}, 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x20) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r11, {0x2, 0x0, @multicast2}, 0x8000004}}, 0x2e) r13 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x5, 0x3, 0x1, 0x1}, {0x1, 0x2, 0x1, 0x65ff}, {0x0, 0xf7, 0x8, 0x3}, {0x4a, 0x0, 0x4, 0xda0b}]}, 0x10) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) clock_gettime(0x0, &(0x7f0000002980)) 1m36.528912077s ago: executing program 32 (id=715): mount(&(0x7f0000000080)=@filename='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='btrfs\x00', 0x44480, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6d706f6c3d62690bbe608ae7a8e257d632a80e6e643a", @ANYRESDEC]) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0xc2400, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x8) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000080)="bc5d", 0x2, 0xfffffffffffffffe) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44", 0xe}], 0x1}, 0x0) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r10, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002a00)={0xfffffffffffffe98, r9, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_UDP_CSUM={0x0, 0xd, 0x1}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1}]}, 0x58}, 0x1, 0x0, 0x0, 0x84}, 0x20) r11 = socket$inet6_udp(0xa, 0x2, 0x0) r12 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r12, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r11, {0x2, 0x0, @multicast2}, 0x8000004}}, 0x2e) r13 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) setsockopt$SO_ATTACH_FILTER(r13, 0x1, 0x1a, &(0x7f0000000180)={0x4, &(0x7f0000000140)=[{0x5, 0x3, 0x1, 0x1}, {0x1, 0x2, 0x1, 0x65ff}, {0x0, 0xf7, 0x8, 0x3}, {0x4a, 0x0, 0x4, 0xda0b}]}, 0x10) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) clock_gettime(0x0, &(0x7f0000002980)) 1m8.646635649s ago: executing program 1 (id=920): r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@bcast, @remote, @null, @null, @default, @default, @netrom, @netrom]}, &(0x7f0000000080)=0x48) getpeername$netrom(r0, &(0x7f00000000c0)={{0x3, @bcast}, [@rose, @netrom, @default, @netrom, @remote, @null, @null, @netrom]}, &(0x7f0000000140)=0x48) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @empty}}}, &(0x7f00000002c0)=0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000300)={r2, 0x3, 0x8, 0x7, 0xfffff21b, 0x218}, &(0x7f0000000340)=0x14) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000380)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000003c0)=0x10) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000400)={0x8000000000000, 0x6}) (async) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000000440)) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000480)={{0x0, 0x0, 0x3, 0x6, 0x0, 0xa000000, 0xffffffff, 0x1000, 0x0, 0x3, 0x0, 0x2, 0x1, 0xffffffffffffff19, 0x281}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000540)={{r5, 0x5aa3, 0xd, 0x6, 0x1ff, 0x0, 0x6, 0xc, 0xffffffff, 0x400, 0x3, 0x2, 0x7, 0x1, 0x3}}) r6 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r6, 0xc038563c, &(0x7f0000001540)={0x0, 0x0, {0x3, 0x0, 0x70f1, 0x725f}}) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001580), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f00000015c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) pidfd_send_signal(0xffffffffffffffff, 0x29, &(0x7f00000019c0)={0x15, 0x5}, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000001a40)={r3, 0x80000000, 0x20}, 0xc) r8 = fsmount(r6, 0x1, 0x80) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000001a80), &(0x7f0000001ac0)=0x4) (async) getsockopt$IP_VS_SO_GET_TIMEOUT(r4, 0x0, 0x486, &(0x7f0000001b00), &(0x7f0000001b40)=0xc) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000001b80)={0x4f3f, 0x72, 0xa, 0x407, 0x400, 0x4, 0x3, 0x34, r2}, &(0x7f0000001bc0)=0x20) (async) r10 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001c00), 0x2000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0xc018937a, &(0x7f0000001c40)={{0x1, 0x1, 0x18, r10, {0x5}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r11, 0xc0189378, &(0x7f0000001c80)={{0x1, 0x1, 0x18, r6, {r10}}, './file0\x00'}) ioctl$sock_ax25_SIOCADDRT(r12, 0x890b, &(0x7f0000001cc0)={@null, @null, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @bcast, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) (async) socket$packet(0x11, 0x2, 0x300) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r8, 0x84, 0xa, &(0x7f0000001d40)={0x62b, 0x401, 0x200, 0x8, 0x6ca7, 0x4, 0x1, 0x1, r9}, &(0x7f0000001d80)=0x20) (async) ioctl$BTRFS_IOC_QGROUP_LIMIT(r12, 0x8030942b, &(0x7f0000001dc0)={0xa, {0x2, 0xfff, 0x8, 0x1, 0x2}}) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000001e00), 0x42200, 0x0) 1m8.514987362s ago: executing program 1 (id=921): syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000280)={'syztnl0\x00', 0x0, 0x4, 0x1, 0x0, 0xffffffc3, 0x4d, @mcast1, @private2, 0x700, 0x0, 0x3}}) 1m8.489277892s ago: executing program 1 (id=923): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) (async, rerun: 64) gettid() (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) close(r2) (async, rerun: 64) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000000) (async, rerun: 32) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) (rerun: 32) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) (async, rerun: 64) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) (async, rerun: 64) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3, r4}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000300)={0x21, r6, r4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r0, 0x2000) 1m8.294787272s ago: executing program 1 (id=924): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000280)=""/189) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c0043001700000000000000fd11358084a64c4852ce59bc40427a1582ec7e9547999b7be18d57542e2971a2513a2b81d76f6ad9a7ceda50a48bcd2786f06ffd040009808cb297f99a3664c1952c24e42f729fc43262610d3652cef336adc19ee56c82ca3e707eb78d0148b668305d97f7ec33db8e3e9dc65e7c274e7bc24ed3a1184621df12504c07b14a737fcc8ef9009b890c6caeba9729fbfeca6b12211869a2716ea36f7399a7bd7c0f2377c94cfe62f2bcbff380ee256a7c3ec69110da7f9a6d89254f4ec5b539cbc7303ccdc6a8619996b6263165fa024adff951d4d8d2d6587b80d1c30440b0817f52c341360dc5df31f0b5639a5b96e26938d5bc55ea7bef35a4cf126c9183ac38fb34b319abe5f06082c1e8ce526cdb3066d523d12deb8697d8299c1f5edf46514913c4648f2fd1816a58beffaab5040d72e67ac75075da4c92fb2c60d17ee03c6cc004ceb9ef5abe60fe300faa63e19f5eefa54eaed41a4fa62c6a56be9ee7f691162545a8fd930f45517df0436b69efc7d5ac19e930a92ef86472205f87a61dd95dc35a6f258c8c7958a8175e8cd8dbf01f82cca2359aef93e3eb117014c231d67bc6da5248aeac9543ff47663c01581b945dd8507adb1689ac8244b010e66087ffd4c0b930f8ffc7408402d8ce7db0cfd9830cdd85aab9711919563d56d245801c371f040af5b8169de3c6fea317612f4c2317cc526e8ea8c8c1e953c791b20a1aaf4c62f6c906efa621b14e7d3e285aa55b7ef96e4feb652df2cf36e76132f396cedb9db9cf15eeaea7b13e1027ea5d1f5490e6688884e1f1df2a9853024e581c9ae87c12991f4f89aabc4020df65ac4683de032022e2d805273b2d6a62e841a74be316f2152002b87680d37f6b7faf2b24be1ebc0d7a95fc330a592d044fd05ed37465086402a1335ce622bc8526afbc6aad8bb1bc0b63bf46ff0496a8861f0ee2c990adaf568144fb15eb4492e049f762fe735ddf5d283433a9d2fb9faff70364046ed11752282c816611250cc1e14272470c12fbd96a06bd3b873da306810ed786bcdb8983bcc7acf941b819c4f59b132e6c81639b46b8ba630ae11e4751458aeaa9dc2cee291652e638a28d47ecd5e2df8830bc7267883dd7d77fe2392aa484b6dec167a1bf3e00c927b26832f5f8d67f5d1c0c935624bc6c917001dd4df77aea734fa05d4037db5b19cef7d161c5ad1e95b40dcdd369358fada0a2a04d7a99f0b93386f706aa3213c1c4428b8461062b29683b29e56748a65154e9c33eafd6dac22c2ef4f55c4ca8e4a6c0007b31305254a27425066fec4b41e11c8357bf67ce8e2a0facb1b26e1b19543cd5f075cc81b0873ec57bc7edf9a9fb8ae35d3a3ace676225b40a421e645301f304221763ecab8baa7515839ca7f29e9e646af9a1ff1fe8031b5b36a8f2d6d70ae3f514f1c2972df04bb4924373d39301c8708bdf1376d3be64f3614c183c5b5cf95edaf20d2e59ec124eb11526a7f2d28546b31566e161ff39233762c0e4b505f246454f3e27f8dbbedf1610464944ea873600ed8e95fa00d291fa3b1d9cb257ca29710f473ce1de492602202f23ab8102ec101110145fbafc73f41a830decc8fc46a9f8925e091fec25f87a69fa23f63621533da3e4f97d2ad78c1886b6783e46e2923fbc424bb010e5d586e5fce6f5191c161aac64eec1c3afb12b2c6b2047c9c9db9d6beeb10de8b1d8ed9b857c3c7e7c3b59e374c6a7407ef247c178147b3a0f82f8588b74ddbab03d4c78915750c463f68bc8f40f8e4ba87169bf6377c54d21d5a62cb0dcf466daa235ad887f5d2af2d8dd827047847190afa82fb866744bbfd38952705530e699270b1f13dc0b53fdc2de61de45ab153fd017274bb3b4b4c8b9fa2279dc3a6940e072e9fe87bc86011dcc0c1ab07b97868b0f51ff6208df234a2f5a10f896478a4c5d46ffbafaa810b45bb82368d0085f78e959d1b0f26dd7cff09a40d0d12285b1ccf203ef25f3a1cb5fd753c6aadf2a26c1a21b6355ec2ef8d29ac0f08cd44e94f9a9f6b8558c3e5d7db20ce3a8f147c0309fb3f4b856dec934af6072bc942de440d8cd0ec1944362cb579f75a91393e3ebaf5fc807c0df8367834bb0f08ca7c698991662d8b9e9e55dba84b968d316fce6311e5257ccf69348e06a693595bb94bdaba080fb1c0c88a33557c088a51948bd4f01c5544e9fbf5a8e09ae0dff397ea8522a4349d185f9a2f0b595093b29b88b5e2007e12e6b60ae8aed88bbc198dc7709c5e9181ead6ab91a0b7df795a0e9d349c1096bb29bf2e0643a0afc2f2ac9ffe3e5002a796b025da52dce5d89a8d76499a25bb4588202c18a12107b1fb9759f904ca3363921ed36d1fb3f0af559e771b0a708e26b39f00a87cf2e8489f53a6c0ae606ea8ced1b876895c1c21ece89b1955c4d827ffd4da4b994eb2dcff368ef534b34f6a566efd9480f1b6e308947684dc4960a083d3cf52960be62cf0c0d4ce6d256ff28141c274b7dc8dac819c04d4f1155a8bb4c29a2a00535ca4ea89ce1e218146b73e2103fadcf2c2de446e6c128cbe749c5f7aaf392e764a9397e06e443cb3e44d08af9a2ce55b0ef8cf1803f2167a67d59547d522d65934fba7875301db570cc4424f629a39a7bd36333029bdb818a3739f454966af6ffe4d237d6965cc81f335d8a787450abbe7c8ddfd2f8b749594cea4df455cdfb5eb5f7b0b4f67875adafb11b61639fd0be25bbf0d19cea430058fff31b0fb0ae36a84ad6ccd17038638fe38905fc24384bc60a15058c6b6defe60ed71c7697612b084d6a2cd0b15056f593335906c82265f38c47dcc1c1043da1ce74578a1919e03df4e155396b3dea89acd39d1449f00a9e8cf5ceb0684928432d21e6b7e83c099d285c126a430767e1e718c9dcaf83ae26120ed83c95d7d16a493d16c0a01f8bc05ac987bf8e378d7c8d28c201930890773c1d6ab6440cd3ff2454f17ced7e463d9753891a56833f5f673eb138d7e7ce6666b65ea74f6f0d3cc2d86dd7940ccf108ef7f0ad3c5c7da744c1988aee2a7fa5fd1bf52698221c6ed21de5077effb9bdb50b882523fa932bd1e3efe50b630599dfaf3b13167f57db1a12caeb51278b7fbd9768da62d45b1f056aac361b2da6cc4933a9159379a4152ad66a69362e347af0d414e8716c9869511034c2a366bfb5b125cfc5720c05af7895f4e318d89e85ad02e76c0d643b77c3bbab28865823d696dc5306e1731f56c29ddd25e378749493c762d9966e34b53049a84f4da9ff286bb20ea8c6918ae6df35bd82719ab07d197afe2c87cace76d139175fcfbb8ebc49a131d484244295baca1dec61526a5f844a6950899a0bfc13417b3df9b6580e5657a0d92bab2cfaab91e1513e0cb11c0f029841bf63da801ed3171aa7c039b45675b9197924a5429feeb52a7152d4b82304ff39f2d666edf8ccbfb35d2eee45af364ba98cc978ec7f4f361c4a9fb2bf1155e059c9874c9b00113b6d85ccfbeeb3bf33435ced0c94135a00162d1a1279041fca05ddb2ac02a0a34bbb15f5aac25ac3cdcc32cbb882b6456602bd011cb665661b483b20bcb6cadaf993b3d6fe59757e9fd2b00ebc3b6adfca5bd7bc016eac63adc33f450303dfc89a025d2e3e7fa99854cd468654428c4dbf40b078b24c939882bff81d871d19383b86a5d78e3dc5f53bbf31c56c9ceb28c43179b0f9829d9fdb9c126eaeee6858de67dc6cf0f75552fad19ab1dd381dfaf963790353816b68c1e4e0938d1312746e90d5ed32c32be83f2e1890ce24bd3594b8393280937ddd35475106a0336a61ef483202ca11d58dbb4345c5d68b41e949ad32a36b86983950a12dcb29e02b31880d041805197670fc30c8d6c30f736de8cf7955dd8ae6a46d6fa0d9955056abe5ef41acc00f94f9466327fa207f1f85aac9baceb25fcde2e8f1c6c5f68a66a62a7165c29afb66a17932c892fcd6c894c54abb3f56bbf1dd5901a60b2dc2a51615e6897e894aa15678403ce35a2dd94a31d03092a92e54be81c53adfefa653c00f63a76f2d6471625df5ccfdccffb30e1c545e435c3b3fad6249246d3c2f5796514a899d87905ef0a5bd1032c4718b467dc2df510183beb72b9140cf670e82c649460d782cbf33791088756a796c48d0f7df2b856a4b3e2914c7f8e707a05ed5956473c8eeca35aeb2b96c939b5bfd874e519b9d624e5b3fde44de50c1e9ccbd2642638ab2c1de38127c4c59c5d5710d82c619b634151b0fb1bb94a357e2e38b888f8fb30934009fbee693451b343f0cd656411565e4149433383a8ee7194bdf3907f8a9136296188c74bb3fb276da9cc275101882ac5046fa42b9142efce704014b17b72d0a7b2421b5efb3a0411da62d42019bf78d6a6c5c56f3e8e5fbd0240547c6db5404f1218ab391f361a5ecb9c2cd64c32693ca8dab991688b496daada1d02b5d9cd1b9df7f1258e1a9a70e22f229078b0b33f30cb3e4021335a4392548dbf11dd0ab1c138571179412f35b4106f9bfc0c5bf57b63909a5fd8892a584569cb7b9c330417ae9468d6583f2c923060e156d4a8c69114ac5281b8104b3dcee2abe8b94b7a0551079f6bc89dfe3c521a046b70b1d2a9f1df20fda6dd84adf9e57b34b795ffd5b3dca4c62c815177744c2c21046861135e70fed347985962f5409580c263a72cfd878fe10192902948c6bab642fab9be6b9b93fe41fdea762a9c78d1631f81c4d76c3187d23a26ad0d37ba1f44114afe994c18f8404f7ed02956eeec1ab8c87b0cf8450146705817beec015783b22e6d9125179887dc74b162b2890ffbf8c3443bf732c125f7d2ba0f75d0f81198eaf12e1251e85a34ebd23087ba790d6ad8a6c4cf0c85d410fef6bf6796e9a4c25699dd8bf51063b65b46aa5ad69ed243722b5ac050672fd3ba0c2d8b5e013f403dda3c30db4ca94da891a6d90ac9cfda97c0fce5bf7ed8c0d4b309ece7bbf0f536fcce750495dca0ba52c0c2e1972763f973a28925d8846b6a941bfc9dd1e96b889112336b1530327eaaddcb78ab1db7c35c4ef54a2888f770de481f0a6ba5b827a5013b6c9c0f9e6e629d7f0f65d260ee4ad62061305ba91ec2a29c27dc22b4d07cd090a66705f062ef25f632eaa2842b36dcf2807abb94403c458d78453a5bf20bae90912372db3e4ba83e66928dad13a734ecd912cff58640e8c3b4012ab0fd32f8679875b0f46812deb0f143d8c94b2d0c8d0d9bfc7c1f5eb6609179e1e4119e6c240d8ad581233f4b2bc55c39f3e46f4516ab2b2ac271f773809718f80efc4cd4fc28ebb09d7e8429203127de4aee25cb61bef5d71a3fd7b43741bb8d0f0b530f4d06e2c92c632930c8fec4c6a2b66f43efee55b50254dac26cbefde31cef6d044ce90e61bec3affde7682a14fd8327358b09b3445cc4af0bcf125d43d458d8089176f238d4253fc0e3f7b3b72fbd88bca0973539fdcab07ca1da7027a50ae01a071e080dd04718a82dc0ef72228a84598556d2f85777e72b4227475313a779b7cbc5c80314f7358cdb1e4ab8e178ef933e7192c60304770262e4b99d476b8f42c8eb2b10ba6ba0dd51a52710ac75d49f29ff6abfd791755a88c0456513b7e47915855ddb6b5c38b5955cac22aa6f2e96a135540b2da8d22b4c83590e585185946caf2307af83e4a9fc809301cb53284407cd5ed383477e0a0a1852b0b94c1c382d5a192ac2fc705f7eb05f2655a5c0220bc2eb03b8132290d7a2a3871d4c93fb48f0521c10590f35a90b813155483a2d64a408d21bcae12b5bf8977a42c7cf6810d7b300fcfe7b780688d227dba545cdb8104fc31d873f2ca8afe8a8ee1c8bfdc13663d5f4509b836e3901e41128bd694fef92737864630545ffba4afac3acc7b49a870566f245a2a3ed34ff266ff66ef1f45ecf83f33f548746c3f2d0868a2b0fda71312475a1e601c8b71a7b9231afa40936c42f7d1e3d053dc7dbf12956654590f55b12c6c77b9d7372d9805a84d6f99040e21b9791c62dda870814a60dbf27c4a82f3979410091ef1106220f96627d8f7f189de07ca85e0dab440efe5b8fdc8d7e434ba6162f0b5df11c0bd6489945c946953a21a2d0f0e8924337f401f42f96a87c26f76e4e6623eca76b8c81aa96741b248e07cc8fccb203903da21d364640549640aff4016c83c6e2586893212706aedd30c4b2b2c9c205d1332ea492d4aad97c2646c8082b6d769b5f5d606bec26fb762adf1308325c1c2ec38e2cfa424e41513718625a7d7004a7de11f937d177eee3da060e04b4f1311957fe7897e5f43d32f4c3b4234c3afdf3b069432ac235046efbe4e243c071f06c155bbc48cdac07171b38253c0de4afea667572ebbc28894cd2f9e21992d4d696710a0250acc1a355d951146cd46883787104494c20ca9abb33b07bb3e54b8c5861a1425f4d989029844ecdde4d851e57c9d39d757f473d55e4b0f0aeff40b304d3e04f6e2e9394b1e172d7482dad0b3ca2568aa3297391d614f912a08003300f50000000400238000000008004f00", @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x850}, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r3, 0x6b, 0x1, &(0x7f0000000400)=[{0x1, 0x2, {0x1, 0xff, 0x2}, {0x2, 0xf0, 0x5}, 0x1}, {0x0, 0x2, {0x0, 0xff, 0x1}, {0x2, 0xf0, 0x3}, 0xfe, 0xfe}, {0x2, 0x1, {0x2, 0xff, 0x4}, {0x1, 0x1}, 0xfd}, {0x3, 0x2, {0x1}, {0x0, 0xff}, 0xff, 0xfe}], 0x80) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x200) r7 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r7, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYRES8]) ioctl$KVM_GET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x8001, 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1b73404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00') ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000011ac0)={'wlan0\x00', 0x0}) r12 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x60800) ioctl$DRM_IOCTL_MODE_GETENCODER(r12, 0xc01464a6, &(0x7f00000014c0)) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000300)={0x30, r9, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x280a}, @NL80211_ATTR_BSSID={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004080}, 0x40000) 1m8.207989815s ago: executing program 1 (id=926): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e21, 0x9, @mcast2}, {0xa, 0x4e21, 0xb, @loopback={0xe0ff}}, r1}}, 0x48) 1m7.950952215s ago: executing program 1 (id=930): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8) (async) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)={0x1, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @pad1]}, 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r1, 0x409, 0x5) pwrite64(r1, &(0x7f0000000000)="48ed", 0x2, 0x3) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='qnx4\x00', 0x4000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x6) 1m7.839922492s ago: executing program 33 (id=930): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8) (async) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001, 0x1000009}, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000040)={0x1, 0x1, '\x00', [@jumbo={0xc2, 0x4, 0x3}, @pad1]}, 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r1 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r1, 0x409, 0x5) pwrite64(r1, &(0x7f0000000000)="48ed", 0x2, 0x3) creat(&(0x7f0000001380)='./file0\x00', 0x4) (async) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@nullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='qnx4\x00', 0x4000, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$inet6_sctp(0xa, 0x1, 0x84) open$dir(&(0x7f0000000080)='./file0\x00', 0x80000, 0x6) 16.592080415s ago: executing program 2 (id=1338): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x4}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x45, 0x7, 0x1, 0x0, "bdcd0b3fe35522cc2748be03f3f1670a00f572d22527a2150f1351373fbdb362cbfedb35083f3da836c2760c1f8c864749ddac9dd0effc106120a444fa61de6e1f"}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xec}}, 0x0) 16.463492705s ago: executing program 2 (id=1340): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x1100, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x2, [{0x0, 0x2}]}]}}}], 0x18}, 0x4000014) 16.331150034s ago: executing program 2 (id=1343): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x254, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x4, 0x90, 0x7, [{{0x9, 0x4, 0x0, 0x0, 0xc4, 0x3, 0x0, 0x2, 0xc, {0x9, 0x21, 0x9, 0x10, 0x1, {0x22, 0x36a}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xd, 0x0, 0x5}}}}}]}}]}}, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) futex_waitv(&(0x7f0000000dc0)=[{0x9, 0x0, 0xc3}], 0x1, 0x0, 0x0, 0x1) recvfrom(r0, 0x0, 0x0, 0x40002002, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x40000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000009, 0x12, r1, 0x99b33000) 13.209565099s ago: executing program 2 (id=1375): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockname$packet(r1, 0x0, &(0x7f00000032c0)) unshare(0x12000480) ioprio_set$uid(0x3, 0x0, 0x0) unshare(0xc040000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fstat(r2, &(0x7f0000000140)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendfile(r0, r0, 0x0, 0x1) openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x141342, 0x0) (async) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) getsockname$packet(r1, 0x0, &(0x7f00000032c0)) (async) unshare(0x12000480) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) unshare(0xc040000) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffff}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) fstat(r2, &(0x7f0000000140)) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) (async) sendfile(r0, r0, 0x0, 0x1) (async) 13.125336946s ago: executing program 2 (id=1376): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100ff2bbe11a5ce7879edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x381, 0x0, 0x0, 0x9e25}, 0x0, 0x0) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x10400000000000) 11.329590572s ago: executing program 2 (id=1379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0xf5ff, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 11.079234174s ago: executing program 34 (id=1379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0xf5ff, {0x3}}}, 0x54}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 6.52319393s ago: executing program 5 (id=1399): mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x300000, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1a) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x3a0, 0x1d0, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@private=0xa010101, @remote, 0x0, 0xff, 0x0, 0x6, {@mac=@broadcast, {[0xff, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0x1fe, 0xff, 0xff, 0x0, 0xff]}}, 0x5, 0x1, 0x6, 0x800, 0x2, 0x400, 'veth0_to_bond\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x111}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@arp={@remote, @empty, 0xffffff00, 0xff000000, 0x10, 0xc, {@empty, {[0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x27e, 0x6, 0xb4, 0xb, 0x7, 0x8001, 'macvlan1\x00', 'sit0\x00', {}, {0xff}, 0x0, 0x412}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x6}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x31}, @local, 0xff, 0x0, 0xd, 0x2, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x3e53, 0x7, 0x100, 0x2, 0x7ff, 0x22, 'caif0\x00', 'veth0\x00', {}, {}, 0x0, 0x40}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) lsetxattr$security_evm(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "1e7fec4bde00881bab48e2df6ae9c66c"}, 0x11, 0x1) statx(0xffffffffffffffff, &(0x7f0000000180)='./cgroup\x00', 0x6000, 0x40, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000902, r1, &(0x7f00000001c0)) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000100)=0x22) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="200900000000f1e8c8fe2fcdda626fa530b6af68aa181ac3beee12728958765fd59c28ce6b3e810d50c0717eb90553e04ffd3c54b5ae744ebbb4351595641e1ce3b4803256458b71fdbe7414db6bd35f9f19e720d9e2e1baa7592f82d9e520234459897a19ec220d43721f67c31a58dff80bbfeaa2591478d3ff2653db263d77d54f2321286075881cee42978899427030c4"], 0x0, 0x0, 0x0, 0x0}) 4.716254301s ago: executing program 5 (id=1410): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000005c0)={{0x3000, 0xd000, 0x9, 0x7, 0xe, 0x40, 0x9, 0x80, 0x0, 0x4, 0xb8, 0x9}, {0x8080000, 0x4, 0x4, 0xeb, 0xed, 0x1, 0x1, 0x8, 0x2c, 0x5, 0x2, 0x8}, {0x1, 0x2, 0x4, 0xb, 0x7, 0x40, 0x1, 0x0, 0x9, 0x4, 0xc, 0xc1}, {0x100000, 0x2000, 0x1, 0x9, 0xb5, 0x8, 0x4, 0x6, 0xa6, 0x8, 0x8, 0xb}, {0xdddd1000, 0xffff1000, 0xb, 0xc, 0xd0, 0xc, 0x3, 0xc, 0x4, 0x6, 0x10, 0x2b}, {0x0, 0x8000000, 0xd, 0x81, 0x6, 0xfb, 0x7, 0x5, 0x2, 0x67}, {0x8000000, 0x1000, 0x3, 0x8, 0x5, 0x3, 0x23, 0x0, 0xd, 0x8, 0x38}, {0x4, 0xeeee8000, 0x4, 0xc, 0x4, 0xb2, 0xbc, 0x80, 0x4, 0x9, 0x6, 0xb}, {0x102001, 0xa1b}, {0x6000, 0x7}, 0x0, 0x0, 0xeeee8000, 0x80, 0xc, 0x4000, 0x6000, [0x9, 0x81, 0x8, 0x8]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount(&(0x7f0000000000)=@rnullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='squashfs\x00', 0x208002, 0x0) 4.293083137s ago: executing program 5 (id=1412): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r0]) (async) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) 2.779315034s ago: executing program 6 (id=1380): syz_usb_connect(0x6, 0x2d, &(0x7f0000000240)=ANY=[@ANYRES16, @ANYRESDEC], 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000140)=[{0x1, 0x0, 0xfd}]}) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000001580), 0x2, 0x0) ioctl$VHOST_VDPA_GET_VRING_GROUP(r2, 0xc008af7b, &(0x7f00000015c0)={0x0, 0x80000000}) socketpair(0x22, 0x2, 0x11, &(0x7f0000000000)) ioctl$SIOCGETMIFCNT_IN6(r1, 0x89e0, &(0x7f0000000000)) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f00000003c0)={0x28, 0x0, 0x1ffffcb66, @host}, 0x10) r5 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r5, 0x45809000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect$uac1(0x0, 0x9a, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x3, 0x1, 0x6, 0xc0, 0xc, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0xf7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x8000, 0x3, 0x0, "6edfb4e11c57aa8344"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x0, 0x401, 0x7, "b8bd0fd6d20a69"}, @as_header={0x7, 0x24, 0x1, 0x2, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x5cf, 0x2, 0xbe, 0x5, {0x7, 0x25, 0x1, 0x2, 0x1, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x1, 0x3, 0xf7, {0x7, 0x25, 0x1, 0x0, 0x1, 0x4}}}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x31, 0x9, 0x7, 0x20, 0x3}, 0x11d, &(0x7f00000005c0)={0x5, 0xf, 0x11d, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xd, 0x5, 0x7, 0x6f}, @ss_container_id={0x14, 0x10, 0x4, 0xa2, "ade16eb0a9da699e1c2d20b8f19a45ba"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0x1, 0xc}, @generic={0xd3, 0x10, 0x2, "937a08f7696a502e2e3fd13dc0a58e12be2a21fd0d8dfb7e644a58518991d07d8f0a23a39c60609ac132b220e4c8fb566e8884c1befd314fcf96fb7d74128c9a0b447dfb4c3da79fde2653a38ed013ae43cfd93ed53d83607e5d07689c8f52ced5f593843781585562213112100ea7db59c535dc8877f97db3fc2e8123a115b7e69c95a940d64b26fbf86800e1c5ca93151387d85bee352fca8110002acecbb90299b4ec3a558481038cbcabed60de534832a1ac445ca3593a33b266be6bc3d1f1129f312ff5530240213a2daf18a9c5"}, @ssp_cap={0x20, 0x10, 0xa, 0x7, 0x5, 0x2, 0x780, 0x7, [0xc000, 0xcf, 0xff0000, 0xc0, 0x30]}]}}) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000180), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f0000000040)={{0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r7, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_STOP(r7, 0x54a1) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) accept4(r6, 0x0, 0x0, 0x800) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x163, &(0x7f0000000480)=ANY=[@ANYBLOB="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"]}) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="040e070e0514"], 0xa) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001600), 0x282, 0x0) ioctl$KVM_CHECK_EXTENSION(r8, 0xae03, 0x9f) socket$nl_generic(0x10, 0x3, 0x10) 1.430886681s ago: executing program 4 (id=1427): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @remote}, 0x10) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r2 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000040), 0x210400, 0x0) write$6lowpan_enable(r2, &(0x7f00000002c0)='1', 0x1) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000180)=0x3) syz_open_procfs$userns(0x0, &(0x7f0000000140)) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0xe, 0xc, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0xec, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_clone(0x231a00, &(0x7f00000000c0)="7275303b0b90d6e5540e67bd66be7e43c0d317fce87583230371279de9fb8767497f710f7f037d89b048facf7460abae54f55650f0bbbd28d9c1f1acc8d12b15968cf7d3fe51", 0x46, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200)="eea0cb908dbd381b44ad9d88eaea168b2b80942175e473184d") writev(r3, &(0x7f0000000640)=[{&(0x7f0000000240)="e67c", 0x2}], 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0x2, 0x6, 0x9, 0x100, 0x2000}}) 1.252107011s ago: executing program 4 (id=1429): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @remote}, 0x3}}, 0x2e) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x94ced4add106a01f}, 0x4040) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af03, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="cf0400000000fcffffff1200000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000100000c00430002"], 0x34}}, 0x1000) 1.126789372s ago: executing program 5 (id=1430): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) gettid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000040)) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) close(r2) inotify_add_watch(0xffffffffffffffff, 0x0, 0x80000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x50, r0, 0x2000) 1.039906579s ago: executing program 4 (id=1431): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000002000000000500000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000208000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a01010000000000000000070000000900020073797a31000000000900010073797a300000000018000300"], 0xc8}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) 811.12634ms ago: executing program 4 (id=1433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x44, 0x16, 0xa, 0x401, 0xf5ff, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x18, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10}}, 0x8c}, 0x1, 0x0, 0x0, 0x890}, 0x0) 811.016986ms ago: executing program 5 (id=1434): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[]) 703.462001ms ago: executing program 4 (id=1435): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="0100000000000800010100c0"]) 562.168809ms ago: executing program 0 (id=1436): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0x21, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100)=0x81, 0x4) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000040)='ext4\x00', 0x8000, 0x0) 528.02872ms ago: executing program 5 (id=1437): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfff, &(0x7f0000000300)={[0x7fff]}, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0xc0, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x78, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8c}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x40}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffefc5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x108}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="12015100000000107d0b38310000000000010902"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0x10b, &(0x7f0000000d00)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf9, 0x3, 0x1, 0x4, 0x30, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x5}, [@extension_unit={0x9, 0x24, 0x8, 0x6, 0xa6, 0x9, "c353"}, @mixer_unit={0xa, 0x24, 0x4, 0x6, 0x4, "93cdd740c5"}, @extension_unit={0x9, 0x24, 0x8, 0x3, 0x1, 0xbd, "ce25"}, @mixer_unit={0x7, 0x24, 0x4, 0x4, 0x9, "1d64"}, @feature_unit={0xd, 0x24, 0x6, 0x5, 0x3, 0x3, [0x6, 0x6, 0x9], 0x9}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x100, 0x4, 0x2, 0xd}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x32, 0xff}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x40, 0x1, 0x30, 0x31, "1374143dff"}, @as_header={0x7, 0x24, 0x1, 0xd, 0x7, 0x3}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x3a, 0x3, 0x6, 0x20, "19fa57e3dd"}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x3, 0x7, 0x3, "8515318ca3920760"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x3, 0x3, 0x80, 0x3b, "bc46", "4f7b1d"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x2, 0xfb, 0x1, {0x7, 0x25, 0x1, 0x1, 0x8, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4, 0x4, 0x76, 0x7, "79eb214021ea3f8d"}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x7, 0x4, 0xfd, 0xf5, "e4ee58"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xe, 0x6c, 0x3, {0x7, 0x25, 0x1, 0x80, 0x4, 0x2}}}}}}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000800)={0xa, 0x6, 0x110, 0x3, 0x6, 0x8, 0x20, 0x71}, 0x121, &(0x7f0000000e40)={0x5, 0xf, 0x121, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x6, 0x0, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0xe6, 0xd5, 0x8001}, @generic={0x55, 0x10, 0xc, "1605b49809c4537e009eea5e76fcf71e05a537e0a706a34fb020de3ca751d6444038fc5b67769d29e5626b8c64255961fe5fed1b55ac28b7c24e9c6b23f7f1254651b323a7563bda7def3e66655b104b0c0f"}, @ptm_cap={0x3}, @generic={0xb0, 0x10, 0x4, "9fbdf89f08a450b076f86996a8855c3ec9d509681bf2bf2a0643cfb03418150caa0658319864550aafffbed2ea3d20568623561ec0ae5dbca228c4477afbd38dae8aece60f8cf36b8df93600e40b44e4b255d46a23d84a12c8957fe2bf8bbf08298fc5dda93799e6ce043d824e89c3ef27b798fef6d0fded48c64de6a620f7678920ac6d92fb3c1d6c463d19806f757deaf97ca4ced75ef4e137b136f881a2a2de40320a2b7a4d0108c4a8552b"}]}, 0x1, [{0xe7, &(0x7f00000008c0)=ANY=[@ANYBLOB="e7032607574d31bbc5006abd18ef01bbd4cf860ba73955596d917634b6f77ef1cf16142b2ecadced579e401160e1842634112b2decf00e3e7fe9b88e2af656bef559699ccba08b3b864db624a5257c62134c6bb433b5ad7948fbcbf5295ab8a7bd0e81e992a9af915c4365ff7144f5540a51f044f5ef8dc6f4a8e1e384c325617c8d45134450bad81d5de558a76ef83adf32d976aef5f0a16ce2b4a070fadef351dfeac8a048be6a3559a75a7b76d9f28eea5ede3085abd798451bbdac04399c8176c2fe3743382437fffc1abed6fd83d486394ddecdb2459ca4569c0aed8bceca89f473ec2965"]}]}) syz_usb_control_io(r5, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000f80)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000380f0ffffeb2ebb4bbccc0fed6f8997ee1a2e2d5853406fb9edc3cdf49ce5dcc5d30d9cecd1c1cbd209d192c67fec3efbbcb48a5a23aec051d01fb611aedb85edf0958810d1eeb24163b422ae54ad01ca0e7879fac3140a43611aeb4a5da2d3391b44155be1295de13fa0ae3595fa524cc9643faa0f6a837cf944206d8cb8c74388ecdf8d30", 0xa4}], 0x1}, 0x0) r6 = syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x20, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x1, 0x60, "", {{{0x9, 0x5, 0x1, 0x2, 0x400, 0x81, 0x4, 0x8}}, [{{0x9, 0x5, 0x82, 0x2, 0x2ff, 0x5, 0x9, 0x9}}]}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0xe, 0xf8, 0xfc, 0x10, 0x3}, 0x10, &(0x7f00000000c0)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8a, 0xd, 0xfc, 0x400, 0xfb}]}, 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x820}}]}) syz_usb_control_io$printer(r6, &(0x7f00000003c0)={0x14, &(0x7f0000000280)={0x20, 0x4, 0xef, {0xef, 0xb, "5e5baf4a4ea90ed417cd2cb31cdf4044a50def033c6b5e1c8c568928cf9d522427f62df9845ff7735dd3281e57bb236dde6bf9c5a167c27fee3d321a19e128435fefe2eeb76fc48cefd368285aebb1410ae8ba1f6ffa9662040a5b124467c9e4f1b2972a6202c420a3c9c7ccf6abc66dfbcb89bfff15f69fe4ce3de3f3a22a97a4feef7639771805bea7bbef0f3b98995c380ce116247d4ef2907589b3c464f2192967a92d3b9c35ff3d8d4e2eac57ea8d2d8116e3532c941a6f979bdc915453c8951e7a99e2a01b9fc0135e082c5fda8335203ae499bf77fab2b2aae80da73fbd98901d1da4411cfc4893028a"}}, &(0x7f0000000380)={0x0, 0x3, 0x1a, @string={0x1a, 0x3, "952cfee29a9909e4da7c4ab3794eac41e7b2ad367f520ba8"}}}, &(0x7f0000000680)={0x34, &(0x7f0000000400)={0x20, 0x8, 0xf, "3ada4585c2e4edee418dcffe30c2f1"}, &(0x7f0000000440)={0x0, 0xa, 0x1}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000500)={0x20, 0x0, 0xca, {0xc8, "d8b790916c4fcbb9bd8d96ce5b41ef3bfc697489abf8d07268a2ae8672b6950c3c44af7128271ff4f833d3fd63e4e214e221614305770ccd647b6d066763337d0774bc557359522884ab9aeaae9c2a3649fc12e38061aedb1ea837f0b6d566f133f5b1bde45fd27addd85b83d8cd8de8ac9829db28375d2885aa7532f0bd015d3c814bcbe73287a506babf9b22fe8bc34d6cc77fcc1e476d14ccef1bd59692cbc0851baf443c0484559e85c0479690d66fe01a74a85c724fbc3f9c1f32098c7e536289af344ec28a"}}, &(0x7f0000000600)={0x20, 0x1, 0x1, 0x5}, &(0x7f0000000640)={0x20, 0x0, 0x1, 0xb2}}) r7 = socket(0x1f, 0x6, 0xe) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c", 0x15) sendmmsg$alg(r7, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100), 0xc}], 0x492492492492856, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000cc0)={0x68, 0x0, &(0x7f00000006c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000740)={@ptr={0x70742a85, 0x0, &(0x7f0000000a00)=""/223, 0xdf, 0x1, 0x36}, @flat=@weak_handle={0x77682a85, 0xb, 0x2}, @fda={0x66646185, 0x6, 0x0, 0x1d}}, &(0x7f0000000b80)={0x0, 0x28, 0x40}}}, @clear_death, @free_buffer, @release], 0x59, 0x0, &(0x7f0000000c40)="1c23eb1a113a09dccaa9673bd6b88106cc71ca22603a98929fe2b002d46cadb14e04a656bf78ccfc6e437e3d02724be30057aeb58a4fad67e3d3672228cbfb00373e7b605a04a84a78ce5980e3ea5e2efad1a8f20cbc0e8ae8"}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) 370.812264ms ago: executing program 0 (id=1438): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 370.324066ms ago: executing program 4 (id=1439): open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x3, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000010400)="61ddaf21c1282a5a6352f350c2f614ede5b0c406f5488574ed6fcb609ce20f648ee274c8dfeaa625b1fd332f70f776ae0b6e3f959c24f3876756c20e05c82079387520764f2446820d53242898a90e51c5b68297e39b7fcf558b450e9608326c3dc6704a054216a8c6f0d689e5eb6b8564854376910eff147682d2378b9c5b95a626493ce628b1bb6b524ed7e90ebe6eb0246399eac6d624dcf4e824be2de9c1d5d06eab13f2770577304eb676106fd9868a030192067ac009482e03a817f1abd909a94702479fe30b2594ca60b4acc37148cf04e8c0e76dd69e29d243596f8174129ac6ab9dbb79ace8f0fae14234845725102a027d4163f97f3971d207500defeaa2c7318f7e82e591701f9d3f78592ea7ec28806a53278a35a20251eeb2735fa9f37bf0045b5e6faf5f751c7ad31d8426be7b09027b2092f49247159a33b580d2691ebf00797962168bdc368f57282ce5b8526eacb80952ffba771626c0016b8a010546f0b4daf470814cee0ea418b76331c34616cea0459dbd1f196364c99e4a47bcdd64b518ef51833e6f8041fbbbe86e808bdbade7009885f2c4d7ffd76a0e7dc7d542bdee1d136d2096dfa997f98ac83c6341b306a3a8cf81642566d7777480d4dc61b0182f0d418ce95d74c9aadb182326d6671412a1f0c62c93a0ba873ff5daa4ece4b2fc73ed5b02b60890374acc0cd25cbf1707016a542fafd6af098f9737304c726712c8243dcd5eb15c0996e9e03dd741d519cb3e86ea214e20408c2cc5ea607585f1bfd268ba3084ffa69425512571d263fd1ae49b488b2964bd3e78943122006489cc22191dec2900a7fdf798c9f683461f2a7b940f4112b805dc077a7b99071b5b454f7c6d2b13a6b23091f74ecc65a24ac0d11e2ffd7332fb2b2b11aeec3c809d78cc2e168f126f38dddfe3e1d0ec1c6fb25f880690f97a70dc5fbea5d25dba3b24c01d9bd228c58deca660625511127a62220429c94be65d6ad4ce7e79e97af67931b46ccfabca5dbaea11e2dc76279b0244cc2845f31beff418fe4bd892d3676079d9d4eb0251dfead9e0a07a11c0a7e597ac89ec77de60a5f6e0ff4a62374856b8e1659e885d3a0d90293d9b0c7bb041cbcd54bf098b66b2ddec28dcba4cfbad969e3b97e4bf680f901485d1cd4b231a9115c22ab2f911415ad0efe0eb7f4bee15c6de7d0f818acd687a117286f9e3c33df5206df918ea4ac52927487968d88f4a18d4889a4060f20487e4cec19250fe48a16b1f9f7250a6ab81fbaa2ad451a936ee98021bf859b9a635132a0dcf7530c0e2c84a459241a1fc9fe45b4a4f32fa8e95185db92660292ece6b5ddbb0b9f69bd7435cd4944f8ff2ed51172f0683fbae1013cde202498f2e1be54d1a2e17b3984b17d1994915a477c87697f465781e41b44c6a40ae035e75a4d9f9c0926bec533db0d4c26d605cb1ae225e692ed315062e8c3283716929e25a22b25105e018d81c07cb7600d1bae16d8beec33c88f1cdb52ac988b4677ed604c28ff1cdeeeb74c332dc526cff5ee935016984cabf117694cccabae944de4d2d2daff8f281b6434475b52c1910210598c684da99c108000a53d2ca03afd42b0200691d92341616353a22a8dacd8cb7eee85953b251236603d2ef1e450675f8d0f3cd0e28ef36457f79c267d836d14ed758148e979b9749ddcef14aec903939c69567a1697aae8f9ed72a16be0267a3a967727937f609720802570287c4e08641b9b7b979c6541add0e8600dd2d75a1dc0822ceb7a7e4e1afda2940d127f488589963b46417d7a7474545e5b08a621c1a7637b3fcb62b0aee10d999505907bd14033370e391f6192ff7d718e1db3ef861d30b2d477f11cd45ecb296d4babcccc34901165e3fcdbef6fa1ee478a97f7d21dc5562582d67c448ae352d3157d83e8ab0122a2bb056bdff8043a91b8f3abe4d788fe741483997a8e3fe126626a14b4243d3ff8ada8dd555c95d5e30b68cc053dfbbb61940cbb552cc1fe211ea5ea13cbfb6a577cde339282d84e92f866145e7b1de4d5a1705fc24fc8843f1a69f4c604adf0d715ad88c6a4ac80a35375662610e0ed07af9c4c76326716a77b106ef87782804ca353eaade28a1ca522d706282ebe48c0b23fd42b2e0297f5997d3aab40615f143e868c6aaf920bc827224946db3e3b3e65ea66dbfa5fe6c45dab930877852e86df251024e4ae46ee8e04cf40f2b3239f4df40062cfddada61700959deaeed3a44fb185ce51685fcab793184435b3e668e7d80820a613acde8d61e24571b9de7ce4581a4751d70a28e8d098660e81941fe40b6844a3204b512457194e100c995c75921569f735afee321080ed6310610887ca842001f5112c5af8c9083e3d088a404b48ee82e1e8be16fd493a2a643816488447706f3e86d2d0ed48f7397aad0cf105a4a71d928a15413ab3813e42478cf7a5be2e03d15ccb90a625863cb2ca1059110f90186cf4c370469f4d7e1ccda56ed9c427cce46e7d1c82641554ffa0c7c42697cbc754702b62be5ab03c995ac8cda3145959c440c4dbcacea29d4554d2d95ed4444e9bcbd6ead7d6398faf189de77645a05a54d6c33c9678daec6e5ac0048f91e15b2fdb808d712e662007da5e228ddc7370f575723a0018a1da70fa27e6624c8c75047eb584bf3399a8fce999df94f6fb54fb6c1fc954b1d899459fcd2f459e57c214ae590513ed268ed2d1114d8276642510a2eb99feecb58d8476550553a9f3d1f04c9bb442dae6dd84628b60cc9fd3c1e5c4fe3b9ad5f43b5d06e31ba4644f7499c03fd68cd2207027eeb1908a8022d70eb8fc8f55fee7be7e3af525d4fb1ab3e9b458246cbb5371e8145e1d04762c62068e03795a5a6b48d8643a83927c47000b7766e320e0ef2339d5423813e8d7845b939a9567745f6e2d6070764669c905ea77943a31f0df838a5d046f25d516bb654336f759c05dcc0febbbf1d214382a76fa09aa32be9799252f1d0fd8bacfe3f32574fdc82c6ed77f1c08d4aef88c157cbdac947346e3e015af60125d3e36ec6bd8dc5127c7ab1ed773c8beffc9dba99bd9fa1498a5a49bcce4ddb13fb85e256fcac569aab1c815527710d2c350c7cc84db5a7eb243227973fd5e2d1d8450077ececa0d96884c90ac0146d37b13f1aacc1eaddec3f0d475df6ceafe73f9076fcfeaf496efcae22d09745453a5e4776876ecfb1d004361f82f76b2bfba050d0fd5060f50fd74f9908a62649955e2f90e4ac4a4f0b29484cf80eebcbecb12db8586ee58443c181a59c046c657ecbb067a1e70d4c548e8b291a5aa681624747d9a52a6184a5fc82d824d9ab6156ec5fd73a038b38d86974e7a89b55a95b609e12c98f4168c0e48139749fce33397948224641e9823588858f82247d9abf8f84250564189676325e43944e888cef6918cd2b842b3a42751475a37656b3f04a02430705f16908d638212f69cf96d5311038e00e048468810d1cfefb0a9aeaf46d1bd31f7156a97542d9373abd3c069aa096486244389312031398a35e0ebca6668ed06dbe80290ac9a2a15ac9c208cdbcb2c1e18f008741649b4fe2ac1e6ca0a19980b6276fa09c5c0e67e748c1669add6fd4c70ba522be4428df305c3313929a4eec348f03fc6a6dfd1d6740a61230a977555b6b4d5165c98323871d750e80f9205231af03ab430a720dcaad03d113f38574ebada74f5b34a05a6abb7ba9b8b280401a3a21dd7e1e026deb438ed020d09fc93ffd7376ced7b5d6c9c35072c7f28ddb7fea3ffa7b7e6766892be2015c20e2cc7fa8bcb5832b97e964947ae940d5ce215ff3a0d74851d5735f3573d533cca9b3a89f9494f150cb732139cc2282304f6a375ee1062f6f850ebf89548973b6c5e7aee8b98b18b443332d3be20fea086653d52756b40ec4f08ad52f4d0a5a61004c700f070b83548670ef36dcbd8daf13ae6d382aaba3c3bac3c1efd953781d69e7365e1393d2c3f34d3dc91999ab9a545bc167e50ea6874fe8f49e93e452ad4710d7127c430ab2caf3ec1627e6a2a6a57604a5da490087991b68cd58d456f6818f22e38007e1628c6a78f6a8a321e3f0d5d5e1bc7f9ef53c4780b451dad949962c8a6a464b25cb161159b72f40fed8280daec34135f77373b9432f411b232e9374e9cb3fcd85a599c20d0b8e294835c60c2e034eb8385c507095c6eb6748180fd1ad97cb0a4b2ffa70c90891d373459538f4106078162bc46b425572466aa4769153b994698bbff1a98b5948e40d98bb2900445eebe95c4892bcb92b4c28b734ea7e106accc9836767e0881f970c9d69063dd918de44a484ef3f860b0dcec58f22b3f1a0abb9c0c2b6cd5bdacdc194f188588c0888d6abfa2d0b79d0b33a41e3b6a0f9fbf811ba20f346025b3a4be17eb5ce583b860cad5424bcaf1ef4a255678706052c1cae9cd77cc78639f975f07737b791831c64f0c974b23a5c428091b8b8e17a037ac3c6d56da4b4c7e4752736cbbc8d67b1b823e87d51ffc95fe9752e8479fc15a6fe7b96fbd7b93dc2144381c424ec7782d7f8b2637010dca11ccdaab1bad652a9ecd8b6ba2c116fa419c8582a0ccf754a294d9de5b457d9b1a4120fd53667862e50cb028e2f92c73a38f77ff57c93b410e7f3257bd56e5aa504f0643bd2bcfae2168046ad2737a36b21f6d993de1fe7b31e9ef7c79d545e5364b65011a6d26e0a2f1018a5280ca88d3d1e30c68195f8cf1a3ece813f22e44d83867c9f711218203d1adf2869ed89babca094b8def7ae0abd0245f522930db59c4b2eeec4d564bfdb931d435a986daba4b604d5bf30b1cfdf6960986ba0dab216dfd7ad95ca2555e0573d073dccd407ddd5ed7920c788aa0213aec90b38981a91bc370ede38d171648316d59478e66c068eec33295345162e9896ffc82f8d94b995d3a3a7a4f459e564632b5918b4fd850da380937655f19e2820376e7deb48edb0f5e295521a9a153f5ef69de397d88acc20be99779d7ea2c38445bd70aeeb68cc6c68c1bc603ab580b632866497a3dbcbfd933e2074323f66f1db73129eec8331c8872aa92a33e2180fc0cf2e28d198faef4421064b8435f37b5bfb9b531332b3b0838015fe848f0ce859db8706f2e53fb07ce4d0fd017d85ac9ce2943ab172f08b13c948c3778d2469257d412b1a5305526cc8dcb4a8645f825cca66a63b7134d8b7c760db6a8fa21f2df3456e9b460867303a9d53fb01db8548800d800e49c08c8d731bbf9a642206f4cc6673e4fc0f7106661abfde1eb8a8d384b26d88c16d15f238556ff4b205145d860228038430cd8a342bc15849afd81666b55b358e3ec584fa96f119b77495c4ec36616070237bb170fc04d3befebdaff66643814eb8519abaaf1e9bf939bf5bfefa33c32fe9909055393e383268e426436305b370867db76991ca600bf6211dece3b6b7b4dc5cd4569ff4538080fec318a9e0cce4a8cf26aca8359b503781aaedc2d58b0bb1a82c163425e678b488bdc7362d0be24a7a8238deb31482c332d4d385005ca84c836933b0fce21685ec067adb9490d1a416f83e36e6e3b87d05ab6973f4e359a1fb5a4dbf2ff6a85d235e50d893f222c2a7d84252be9015e104ee3609c83cafdd796a8422257c9ca9172888d91c0f2f2afe36dccada9a713cfc026cf25e113fc543d522e9254f5e129d7ffd61b43ee25bdd63545a81a2b086b616e23abd380a7bb8e54b8341f42c663da1fc8451f21da7315aea416e6856d4d45128dcd34a0f3aeb7aed00c54c348f38888b8c8fec59028d38344a92249c95943d3ff8608bc11406102ebe8269892b2e909bd82ba467aabef127713a0993df779ba7b0816a990566699e4926d75fd47c3f1b9cae3e58771a6ae8776fdb672ee70f215fd908d6dfddb8a2ad10f27b749fa6e67171848d70d3ae135ee3defb2546bb35a3ad2d8ac0e838ff8abb1cd733d80047bc8626960a257b704b43bf0390b7fee656ca7831d23e8ba940533c16c17de68270bb3b2d3bf142b34899b3a106cf9569b4f46f148297c61390733ff9f399c669122dd045187d0a35fe54b4f17e4090c56cfcfa47498b1701a855827d35cf3624624906f997092b010b1da616325a090770694d028fae9874a91f8d21fea85804956594b8252c24d05df5775148ecbf8ab38f131c268cc263f6a2dcd375acfbf39a2defc97b9801a720d83add1ff01ac7fc389bc7e35c2eee2b44f808508e6e02ea31cf23ea9f2118bce520101e307b394e5fdd28e90870a327b0a1444b552b7227134a8e5397474a6c0e1ce89d918c899d292660ea44294e07b1645ff9e85f65156f92d55ae795e134250b5359dec6c31d4892d83f363cb09632bb738c4e7f351361adc3ab54776a5c55d6ff4895516c82cc6387b1a424f3af2bb0398d0d4a71fe44c5132b7ad5fdfa732bbcff9f02395df587714072caca65f5fc1215dc9068585e1fbcee22cd69c0386a6482230540ec9ff8e373018e4e2788b9502e5be3e3247f997800c68a634e4490c91d01144a63a7a55afbfa4f0ef5ad538aeec8ea203ef2716ff989e11ce4985263898b8e36b0d3386b816ce484e81404a01ac0ed9f18ef5643f93d46705c949acddca2b74ad53441090f658d22dd081aaf49a7bb07c93ab8dfb5213cba354b4d37d9899423d3b3d45e9463c506ccd69747162d2d64b54291d11fdc6c9b89114543d6948f10e68008973cc485df080b84e0d098f962715ba009f2aa1fb41f7199ea5b9b70df0e1c378da164f7257b4ed04a9fee7cc2de065ad35a60b882d78e26d5804942ed1f2bcf85fc63795fb9164a5f94ffe6bfbf838c9197bce2160d24f88dca14c3e733d18ff1fb7acb0ebdfc4e2ce268a676fb27cc34d4b6b5d7e8db29c020c4c498d793931b0fc7d91ad68d3d8463e36a267833edbdd7062f4d62aa9fd1cb7f8e561d3939bbfa118b897167168832c0aff17fb6cdcf75ad6ef0a18e2b37fb24c85d0866f2e5f191b2ef8fe9b5997635a74cb06aec67363435eb175559629c09316f96dc56de6c7785335d121fc2e4d47c2f50c37c5bf7950ae5de07b3b73830f4299d5009742d4eca98df821a95d244967a42b5a4f3375edc41c5281ca3104bd247c14e838912634d4764c1b6e440860d98f258aa8a24e8af643497366edc2b781aec0567451884aec0343ced1fbddfae585db1012a6d9245ad85c56aa33d5bc30307515bccc8d36d7848c99884db4a49d748e1953b4673e4286393fc97c233d529435faf7ed9f9aa64029814b7cd6a36c3dd9ca7be95e5c4d48e024a3d23651cc81c00a52e2fa2d094435ebdb4ae5be8e6b53cf628ddc87a4bc2dccc98ac38019c91789a40d103fb95785bde5992de08ecdca1dff2ab7cf5013420b3d29b8a7f0af455c4e86285422b986bdf482b87297061084b50684e936acbb075a84e720a2d03892efec7dc1af2fae2a7ce7725cf0d19f39403b273be262c7a4ff638898f6caf84bfb358c580ba4adfd8664bcc539b82792e39ab4f1d8393b1f98f6dd5aae14bc6b73feeeaef7c3accde4d9b098f2d5c7ed68621851f37d27980c4b44df095d865493eeef2724db90aa53a3c37bd345ea75b4e76e8878deae1b4f3204c2957f3806e36a03e995f7633de9b863ff6b3309d330ade917c82f3286d9500105755efac22a4220f457debd861df3c0925dc4ba8913cea12b8deb93cec87c972421bb8442ef2a2a9d638471108ae0152aefdc45eac6ff786dae370a21bfe1e5777df8070bcefba8596cb8f71a516b505b1f83de1129cee91d3a4d6383daac7b9de46a99bc34661f3d805d2e138a769fd6489e4d058a3ab35ccbc81251aa2f23f83d7740bd8869465634e10e114c62bdfd640d69cebf6e78eb0970fa442746f7c3bea77d8589ab131827a95b274dd63ea04fba4c822aed4f8d0cd83ed83177d90332c7e66f103d4eb1dffb9ec0f52094bc7324a7c59819dca343776d6adb6850e7e7e83e2316db1c32feb4ea1c6f47a2ee41bb09d0a931f4fa3cdf7ada2bac7fe5ae2b997e24b8f8c52b0bee1482b74af68b407f0d78f3767bdcb42557c9f3aff0c2c2ea7745a0f588b00a751c1c8d2124a8bfd4d7f756587d239cc43a8cae1d67cf15c73dc8569a1ebdd7b8559e969541a547c272e52d57e5924ced9afc87cd2cdcdf8e30f423ebe26170393ecec06afa093839fc3a10fdc3f9ae19e79e4df6a9af6027e1129a7a6cb4517607eac80fa2b5f7853fe84028a66976ec4b4af50abe9ca959b844d7b2ab94903efec6dfc99ed9df2c329c0e8449b4d2a0a5bc2506d170884d2c6ea8aefebcaaf2abbfa3c4d9e4d201369a47792124a7909e247dc98b777b60a30b1461d857f164e3df983d9a900f8b11bddbdcf47c29d483033c9250f30e268ddf97e0ecbdd99d6fb3dc4562bb75f8f1e03d1aec424293fa5fc786444411a512fc582a9b577d5e88fb9d6f7346bd489f6eb4296e576e25c45e114fb6a3d0b6b831fb4ffe7486daadf2f0ad78aad8f8f7eba17e524de06e81a5af9c1aa09019fcc51611afc45fd30b8ecd2a2ae19758a1ffa55f79cdf53ef1bb55e49cb58d8b291664be61586ace94c7b378d685e54aeee09af828a3ce7335f9d03f8daabcf3543b8099956f60913db6ab401a427aca83772df4fce9081409ab426dae09739b50a8ab4c04a6d2e63b2c4c0b5f7fbd9dc76722057ab6cefc9ccae3abf251259f999fe09dbe1232b8ecf0e26b3d88d13a1001840f6b5942359c3ac75bfc321d9504bcc0e3f4add741125941ece20b4f90416b1f14edb4ecb1ced79cef883aa1d5193f3efeeae7e103891ae4840978fbe74d2cc90b7e02b4d839f15c75576b74e05f7a8af71823317a851bf0ff9171bdb16ffa36f57ccdef61065a62d64ba434571db0d476995e2bf4f148f0a6276b2fad82f03b91fe53f9a7acff3ecdfcedcc1eae42e52e1f7443114b8edc8a9d5c8a55727f7ee1d20e1ca55b42e51b47fc4d2313458ab9a5f05c1411dc8f11e4c57d3fe87183763bd24cfb8dc583c82ce9c0abbeb76310666d2236e2ca164c66e6336fd571967f35b2b0ba847922f5aabf97aea061d19eb9cc3cd6e764da9651f9e66577d9c8870734fe8e03d20ba107e6e2997ef7c42f940b88410c6bf46635cb5e402113411a98c75e8cfd3760235d7a486bfeea1a1dc188b7886172ac66d45a4bd87f60b8502382888f3806e47ffb74d9aef2519e91536f7798b7c22ee70566e686ae2b577f6341f7c47dc1ae41f2af983b80f7db23a3466b4f14e2afd591b19d36375acbc0c8e03299eb1ac6e96bb282a33a6ea204aa266b7d627c53757daa176f6cde932e7e0342977dbf7d5668e8ba984bf05dc610e5450eb4c3dcf7965eedc9b168a9c274ef6a050e93234a9bb5488a5aefaea9c442729b5416dcee6bac23f238bea2f1f4615c863a3ff7c7a081558237f2097b9ffa869f4b69fa32784f62c0b7a458411efd3a9108735de667c63c34af2225e382a17600acecc118ac1f81ec5ed9a26fa966bee8dc6f55c17bbd89a94932bf930b081fd310ef94c490855453551e9eb809e9d568500e6662564b65701a721208dcbef9a07650f9faa5a503d37f2e1b1912fbfb437f1f4c2d4a830a2dcfae905d323fe9a6a01cc8d88ff82a26a1c228103396b6756659b6a8a9ff8b31494cd8bde6205d6f62e698d9ae43ec740fafc60d798a85e5f8598486b6e82f23506c6004ec2f733cde633c3b45d9ef14fb223c020a67f305e33b5d3b239b5026ca679004e212725a4090818734435247b918dc9c65d2f0c580722651217ce7a2dec34c0f8c49e3dc051c01f5d445dca8675339f5c8b30ddc19f51ffa9e9c513f5fc9892dbe5ee5bc148ebf3033635401c8675f0fb43e503d73cd432e3ae2f25bf29b4088a3193c208f5ba51882364202dc3eed6f3ab9a871b4afa960f1776cc92deb7098ae6f61af30e715ab60d44f378bbb79f8fb663de164a5f4f582e6a17fd7e553e677632d1e8489a8138bc780418de30c0a95ae3ec3b0cdee51901869acc318a6725c0c06273dc67d393129278225b9384d978512befdf449f85146fbbe92e6b52cf40028b13d77ccc68e7b65e0c1a25f1f9d17b06b17f216729684fec1b4c0c3fdaf40af5dd1a3f4492d49e018f60f41d91524bc5d750789fd39b6e69cb66b1d86b2c1405331e3e793fb38dc447161f1ba02cee1519b72727aee9ede2898c5195adb0dc1c29fe6eca6598c5612a7f98bfe0d1853e44f47c94ae57bfdaee16711135226c9b44440abbeca5ed53b0aa58d34fa0faf766087135599d7b88a04d5ba7d69c148f3ebaee211a06438146d762c9f85d9007a228edd7d71ad18fe69a1af0caa6176eade25bea11504c2f0498a450d4d265bf97dea5b23c10560c9844d761702a5814fb355827ed6f46bcebb61d0a06c21746625a438c38496a941f447c2150c9125990ff7feef9d551a7adcbe0fd828ef4397c0799507599899259f61ff914f76be6077d0daa67ac0ab9093ecd0f78455b605a7885cae38a88b2955cecd37f972841f440de12831263ae64c7c78970138a738bcc66aae8c1a5c3ca0e166dde9860bbfc4c7bdb854cdb3d94ad4c723b2de03a50dfd120041a9b3107a480e7e108f729484d0df0d8e47c3a6b7ce0376e642ec5a267a91dd2bb1f1b3fe56a5097edddba482627cf79b66801fdd4ecb733067ad52e8fb9970be01a397ede6a3eaee6b8524f8e1cf00e0c5aed165b8b1533afaaeeaa82153f9840760b58b8a12e8168956db4522f2dd5a13183cf861acb0c0bb2735ff5cb683f633bd99ba2bfa7f1fcdd0a54d3b4fa9a7d3de250d7e40bd7b3a829a4f04fd71c64ed4f2503094773b45fdd821688d10ced9da17089b7c954f7e4a7f3e56226abee46d7eb93a6f3d039a7cf3dc14c18dd7502aa0e29e1c54bd1c2182138e06326f3cd4cddcf1997c9739f9e4a0899ce919f20b2def0ff103e5a9e123a1db4a544d438f789a0ed26664523bd55902364f4a21b2a92fcc111392dcdcf7ac0ece18c474d47a11d544b64836a62e3e1e0e9d15f8066315f000b7d8603f772704ed5b96798f28e4f699a671023a4d49c5a1e30d14145b9179e4b0f3424fd46cc22ca48cde74904876cc037a04aee32b53d02e4869427b6b18bf0ce7b5ffb75268788ca5029d2d12b2df068219af12d4e17e56f83e581b0fd6cb7048204803342ab8b146b0c237d6ac7aeb2ee21550c00da60286994f1e7ca53de19d874f7bb27c8c5e263fa35e548ea28f4ac0cdfdc4c0d5096f2ab328d089dacb5e87f0a29814e8461470a22ee8a4a318f5e2b5317a027da39789b7b17bdcc9b26bdad1ba5e4580f671a3179a9fde91408aa41a68f47c71c524f8e413557b0656cc2a67e36da5a07ee7c55b0877ecf41a8616ec22f498bc9ab77224a7548ccdfa3de41ff44ee4bd32295a42d9fdac1a4c8484a7383a6bd5e39cb0249e939fe7f53075d6d4a54bcfbaec50853c5e4bfda256665ed56dcd20fbd04a1d40c200223ddac36a7229df6003f335227a6bde261f7e2f7c980e7e522c68abc63601b3b1a9ebdd4530e4f33b9986f582300", 0x2000, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x0, {0x7, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, 0x2, 0x0, 0x8001}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000061c0)="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", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x18, 0x0, 0xffa, {0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) write$FUSE_INIT(r3, &(0x7f0000000e80)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x20}}, 0x50) read$FUSE(r0, &(0x7f000000a200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f00000001c0)={0x78, 0x0, r4, {0x100000001, 0x0, 0x0, {0x0, 0x0, 0x0, 0x8000010001, 0x0, 0x7, 0x8, 0x0, 0x0, 0x0, 0x0, 0xee00, r2, 0x0, 0x4}}}, 0x78) 289.193625ms ago: executing program 0 (id=1440): ioprio_set$pid(0x1, 0x0, 0x0) (async) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) io_setup(0x504, &(0x7f0000000000)=0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) (async) r3 = eventfd2(0x8d1, 0x1) r4 = eventfd(0x0) (async) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0x121840, 0x0) r5 = eventfd(0x7) (async, rerun: 32) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) (rerun: 32) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r6, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) (async, rerun: 64) mount$9p_rdma(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x800, &(0x7f0000000800)={'trans=rdma,', {'port', 0x3d, 0x4e23}}) (rerun: 64) write$FUSE_INIT(r6, &(0x7f0000000280)={0x50, 0xfffffffffffffff5, r7, {0x7, 0x1f, 0x6, 0x80d804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x50) syz_fuse_handle_req(r6, 0x0, 0x0, 0x0) (async) io_submit(r1, 0x6, &(0x7f0000000580)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f00000000c0)="32050bb5b1198d52aa0cd675811b8d7c4f7fe3f252e75216b58864", 0x1b, 0x3ff, 0x0, 0x2, r3}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000140)="d9adbd", 0x3, 0x2, 0x0, 0x2, r4}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r0, &(0x7f00000001c0)="d2671ec6dbc58f459b77bfd8e2876f237893b556ec12dad4eb9c4d1d75d7f66866770caba1f9642666c769e97e4c36d55a8621005c3bd0adeffdaafc29d6cde7911508b690feed753ab92e62fb5eb20f50b405cfe270e9c0ec816db6c3cc041e8bb691661f528cac6fb61c934b6d02bfb42ce0b5d421e6e5d86b57939e46b23c29cf1e532c54891c841283e3298f6efb745a9c7d35dc", 0x96, 0x6, 0x0, 0x1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x6, 0xffff, r0, &(0x7f00000002c0)="e768465d7b6021bb788bd20ca62ed2e1dd13945cb5128f", 0x17, 0x5, 0x0, 0x1}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x2, 0x21, r0, &(0x7f0000000340)="4de75eebd7187aebec8ae21bf2c36ddb43c6cf085fa193ddbd871783b96e59d09ff2a6884e44b6d85d710fffbb260c2afdc78cd9cbc27efc936b4866bbae1564edbb6485a7c056a759afb8328557210536fc525580db5d5bdd5a88b3eed94dbf3948b86bb81f51b5c2d5a18811b2747721306c9e1dbd31d928fcd95e58a4f9bc406333e2d1313c0b2116403e0a70ea6720f99bed99b7b629a6e0ac0dd8432145a4b58afc29cbf2c9812bd0bb4b05713db5101bd2abf047260c19b46edf9d9f9b95a43bf4b9cf7ac1d95264b06615f01d0ee71487b19413889a", 0xd9, 0x9, 0x0, 0x1}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7, 0x5, r6, &(0x7f00000004c0)="f4933e9124bcecbfa78d2c954e63fb458d51bd2af44b3ea052317dd3b1565691f45768df94cf5447477b0c65c7ab8313858e93fff9fdc6c72d8e9cad6e2114794b3ee9470c3ad0d69606f0a2d2233282adb4327a6a6abba7bad787894204968f0bb4dbaa9e9057a786c4de58a809a7d88d390767cb", 0x75, 0xfffffffffffffffb, 0x0, 0x1, r5}]) (async, rerun: 32) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) (rerun: 32) 121.784103ms ago: executing program 0 (id=1441): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r0, 0x104, 0x2, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f0000000040)) readv(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)=""/37, 0x25}], 0x1) 22.92903ms ago: executing program 0 (id=1442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8915, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 0s ago: executing program 0 (id=1443): mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='hfs\x00', 0x300000, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000500)={'filter\x00', 0x7, 0x4, 0x3a0, 0x1d0, 0x1d0, 0xe8, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@private=0xa010101, @remote, 0x0, 0xff, 0x0, 0x6, {@mac=@broadcast, {[0xff, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0x1fe, 0xff, 0xff, 0x0, 0xff]}}, 0x5, 0x1, 0x6, 0x800, 0x2, 0x400, 'veth0_to_bond\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x111}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@arp={@remote, @empty, 0xffffff00, 0xff000000, 0x10, 0xc, {@empty, {[0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0xff, 0xff, 0xff]}}, 0x27e, 0x6, 0xb4, 0xb, 0x7, 0x8001, 'macvlan1\x00', 'sit0\x00', {}, {0xff}, 0x0, 0x412}, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x6}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x31}, @local, 0xff, 0x0, 0xd, 0x2, {@empty, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x3e53, 0x7, 0x100, 0x2, 0x7ff, 0x22, 'caif0\x00', 'veth0\x00', {}, {}, 0x0, 0x40}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) lsetxattr$security_evm(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0), &(0x7f0000000100)=@md5={0x1, "1e7fec4bde00881bab48e2df6ae9c66c"}, 0x11, 0x1) statx(0xffffffffffffffff, &(0x7f0000000180)='./cgroup\x00', 0x6000, 0x40, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETNEXTQUOTA(0xffffffffffffffff, 0xffffffff80000902, r1, &(0x7f00000001c0)) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000100)=0x22) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000480)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="200900000000f1e8c8fe2fcdda626fa530b6af68aa181ac3beee12728958765fd59c28ce6b3e810d50c0717eb90553e04ffd3c54b5ae744ebbb4351595641e1ce3b4803256458b71fdbe7414db6bd35f9f19e720d9e2e1baa7592f82d9e520234459897a19ec220d43721f67c31a58dff80bbfeaa2591478d3ff2653db263d77d54f2321286075881cee42978899427030c4"], 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 1.379455][ T8859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.394746][ T8859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.406629][ T8859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.437880][ T8859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.514788][ T8859] hsr_slave_0: entered promiscuous mode [ 211.524529][ T8859] hsr_slave_1: entered promiscuous mode [ 211.532532][ T8859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.543339][ T8859] Cannot create hsr debugfs directory [ 211.661767][ T10] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 211.696154][ T10] usb 5-1: device descriptor read/8, error -71 [ 211.772885][ T8859] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 211.785750][ T8859] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 211.797292][ T8859] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 211.809063][ T8859] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 211.928658][ T8859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.945642][ T10] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 211.970752][ T8859] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.978271][ T10] usb 5-1: device descriptor read/8, error -71 [ 211.991162][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.998374][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.030078][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.037243][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.101537][ T10] usb usb5-port1: unable to enumerate USB device [ 212.354854][ T8859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.751277][ T8859] veth0_vlan: entered promiscuous mode [ 212.763198][ T8895] XFS (rnullb0): Invalid superblock magic number [ 212.773260][ T8859] veth1_vlan: entered promiscuous mode [ 212.797731][ T5156] Bluetooth: hci0: command tx timeout [ 212.864413][ T8859] veth0_macvtap: entered promiscuous mode [ 212.914305][ T8859] veth1_macvtap: entered promiscuous mode [ 212.974593][ T8859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.996119][ T8859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.014571][ T36] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.032110][ T36] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.064554][ T36] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.087823][ T36] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.164182][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.181086][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.247565][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.271488][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.735584][ T7068] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 214.805208][ T5901] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 214.875487][ T5156] Bluetooth: hci0: command tx timeout [ 214.886869][ T7068] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 147, changing to 11 [ 214.899178][ T7068] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.915507][ T7068] usb 6-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.40 [ 214.925882][ T7068] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.933907][ T7068] usb 6-1: Product: syz [ 214.938615][ T7068] usb 6-1: Manufacturer: syz [ 214.943254][ T7068] usb 6-1: SerialNumber: syz [ 214.955378][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 214.971455][ T5901] usb 5-1: config 0 interface 0 has no altsetting 0 [ 214.980863][ T5901] usb 5-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.00 [ 214.992534][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.004110][ T5901] usb 5-1: config 0 descriptor?? [ 215.033409][ T8943] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 215.434512][ T7068] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input18 [ 215.446382][ T8953] FAULT_INJECTION: forcing a failure. [ 215.446382][ T8953] name failslab, interval 1, probability 0, space 0, times 0 [ 215.460046][ T5901] a4tech 0003:09DA:001A.0007: hidraw0: USB HID v0.00 Device [HID 09da:001a] on usb-dummy_hcd.4-1/input0 [ 215.464653][ T8953] CPU: 0 UID: 0 PID: 8953 Comm: syz.0.953 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 215.464681][ T8953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.464693][ T8953] Call Trace: [ 215.464701][ T8953] [ 215.464710][ T8953] dump_stack_lvl+0x189/0x250 [ 215.464738][ T8953] ? __pfx____ratelimit+0x10/0x10 [ 215.464763][ T8953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.464785][ T8953] ? __pfx__printk+0x10/0x10 [ 215.464812][ T8953] ? __pfx___might_resched+0x10/0x10 [ 215.464832][ T8953] ? fs_reclaim_acquire+0x7d/0x100 [ 215.464862][ T8953] should_fail_ex+0x414/0x560 [ 215.464896][ T8953] should_failslab+0xa8/0x100 [ 215.464922][ T8953] kmem_cache_alloc_noprof+0x73/0x3c0 [ 215.464943][ T8953] ? alloc_empty_file+0x55/0x1d0 [ 215.464977][ T8953] alloc_empty_file+0x55/0x1d0 [ 215.465007][ T8953] path_openat+0x107/0x3830 [ 215.465027][ T8953] ? arch_stack_walk+0xfc/0x150 [ 215.465078][ T8953] ? kasan_save_track+0x4f/0x80 [ 215.465096][ T8953] ? kasan_save_track+0x3e/0x80 [ 215.465112][ T8953] ? __kasan_slab_alloc+0x6c/0x80 [ 215.465133][ T8953] ? getname_flags+0xb8/0x540 [ 215.465159][ T8953] ? __pfx_path_openat+0x10/0x10 [ 215.465177][ T8953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.465216][ T8953] do_filp_open+0x1fa/0x410 [ 215.465236][ T8953] ? __lock_acquire+0xab9/0xd20 [ 215.465265][ T8953] ? __pfx_do_filp_open+0x10/0x10 [ 215.465316][ T8953] ? _raw_spin_unlock+0x28/0x50 [ 215.465334][ T8953] ? alloc_fd+0x64c/0x6c0 [ 215.465372][ T8953] do_sys_openat2+0x121/0x1c0 [ 215.465393][ T8953] ? __pfx_do_sys_openat2+0x10/0x10 [ 215.465412][ T8953] ? exc_page_fault+0x76/0xf0 [ 215.465438][ T8953] ? do_user_addr_fault+0xc8a/0x1390 [ 215.465469][ T8953] __x64_sys_openat+0x138/0x170 [ 215.465493][ T8953] do_syscall_64+0xfa/0x3b0 [ 215.465517][ T8953] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.465539][ T8953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.465559][ T8953] ? clear_bhb_loop+0x60/0xb0 [ 215.465583][ T8953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.465601][ T8953] RIP: 0033:0x7fac05b8d290 [ 215.465617][ T8953] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 215.465634][ T8953] RSP: 002b:00007fac06a69b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 215.465656][ T8953] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fac05b8d290 [ 215.465670][ T8953] RDX: 0000000000000000 RSI: 00007fac06a69c10 RDI: 00000000ffffff9c [ 215.465682][ T8953] RBP: 00007fac06a69c10 R08: 0000000000000000 R09: 007265636e657571 [ 215.465695][ T8953] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 215.465708][ T8953] R13: 0000000000000000 R14: 00007fac05db5fa0 R15: 00007fffe27540e8 [ 215.465738][ T8953] [ 215.756625][ T5191] bcm5974 6-1:1.0: could not read from device [ 215.784470][ T7068] usb 6-1: USB disconnect, device number 2 [ 215.784813][ T5191] bcm5974 6-1:1.0: could not read from device [ 215.797108][ T5901] usb 5-1: USB disconnect, device number 12 [ 215.884497][ T8958] openvswitch: netlink: Message has 16 unknown bytes. [ 215.892595][ T5944] udevd[5944]: Error opening device "/dev/input/event4": No such file or directory [ 215.902715][ T8959] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 215.905787][ T5944] udevd[5944]: Unable to EVIOCGABS device "/dev/input/event4" [ 215.928987][ T5944] udevd[5944]: Unable to EVIOCGABS device "/dev/input/event4" [ 215.937568][ T5944] udevd[5944]: Unable to EVIOCGABS device "/dev/input/event4" [ 215.949943][ T5944] udevd[5944]: Unable to EVIOCGABS device "/dev/input/event4" [ 216.538738][ T8971] /dev/rnullb0: Can't open blockdev [ 216.963962][ T5156] Bluetooth: hci0: command tx timeout [ 216.975315][ T5901] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 217.018773][ T8981] netlink: 232 bytes leftover after parsing attributes in process `syz.0.964'. [ 217.109008][ T8985] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.156111][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 217.164541][ T5901] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.177956][ T5901] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 217.190393][ T5901] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 217.201647][ T5901] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 217.215049][ T5901] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 217.224763][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.235172][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 217.385182][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 217.409075][ T10] usb 6-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice=81.67 [ 217.418600][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.428602][ T10] usb 6-1: Product: syz [ 217.432804][ T10] usb 6-1: Manufacturer: syz [ 217.438292][ T10] usb 6-1: SerialNumber: syz [ 217.453556][ T10] usb 6-1: config 0 descriptor?? [ 217.460483][ T5901] usb 5-1: GET_CAPABILITIES returned 0 [ 217.464113][ T10] ipw 6-1:0.0: IPWireless converter converter detected [ 217.475517][ T5901] usbtmc 5-1:16.0: can't read capabilities [ 217.998560][ T7068] usb 5-1: USB disconnect, device number 13 [ 218.734949][ T9000] Invalid logical block size (4194304) [ 218.901844][ T9007] /dev/rnullb0: Can't open blockdev [ 219.155316][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 219.315276][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 219.337498][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.348728][ T10] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 219.371050][ T10] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 219.379189][ T10] usb 5-1: Manufacturer: syz [ 219.397983][ T10] usb 5-1: config 0 descriptor?? [ 219.613290][ T10] usb 5-1: USB disconnect, device number 14 [ 220.008771][ T7068] usb 6-1: USB disconnect, device number 3 [ 220.016710][ T7068] ipw 6-1:0.0: device disconnected [ 220.392170][ T9014] binder: 9011:9014 unknown command 0 [ 220.401723][ T9014] binder: 9011:9014 ioctl c0306201 200000000540 returned -22 [ 220.523155][ T9021] FAULT_INJECTION: forcing a failure. [ 220.523155][ T9021] name failslab, interval 1, probability 0, space 0, times 0 [ 220.535987][ T9021] CPU: 0 UID: 0 PID: 9021 Comm: syz.4.980 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 220.536011][ T9021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 220.536021][ T9021] Call Trace: [ 220.536029][ T9021] [ 220.536036][ T9021] dump_stack_lvl+0x189/0x250 [ 220.536061][ T9021] ? __pfx____ratelimit+0x10/0x10 [ 220.536082][ T9021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.536101][ T9021] ? __pfx__printk+0x10/0x10 [ 220.536123][ T9021] ? __pfx___might_resched+0x10/0x10 [ 220.536140][ T9021] ? fs_reclaim_acquire+0x7d/0x100 [ 220.536166][ T9021] should_fail_ex+0x414/0x560 [ 220.536196][ T9021] should_failslab+0xa8/0x100 [ 220.536218][ T9021] __kmalloc_noprof+0xcb/0x4f0 [ 220.536237][ T9021] ? ip_options_get+0x51/0x4c0 [ 220.536267][ T9021] ip_options_get+0x51/0x4c0 [ 220.536293][ T9021] ? look_up_lock_class+0x74/0x170 [ 220.536317][ T9021] ip_cmsg_send+0x591/0xa70 [ 220.536349][ T9021] udp_sendmsg+0xc6b/0x2300 [ 220.536382][ T9021] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 220.536400][ T9021] ? __pfx_udp_sendmsg+0x10/0x10 [ 220.536445][ T9021] ? __local_bh_enable_ip+0x12d/0x1c0 [ 220.536462][ T9021] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 220.536480][ T9021] ? do_raw_spin_unlock+0x122/0x240 [ 220.536501][ T9021] ? inet_sendmsg+0x14f/0x370 [ 220.536521][ T9021] ? inet_sendmsg+0x29c/0x370 [ 220.536559][ T9021] __sock_sendmsg+0x19c/0x270 [ 220.536582][ T9021] ____sys_sendmsg+0x505/0x830 [ 220.536612][ T9021] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.536648][ T9021] ? import_iovec+0x74/0xa0 [ 220.536678][ T9021] ___sys_sendmsg+0x21f/0x2a0 [ 220.536706][ T9021] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.536765][ T9021] ? __fget_files+0x2a/0x420 [ 220.536788][ T9021] ? __fget_files+0x3a0/0x420 [ 220.536820][ T9021] __x64_sys_sendmsg+0x19b/0x260 [ 220.536850][ T9021] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.536885][ T9021] ? __pfx_ksys_write+0x10/0x10 [ 220.536910][ T9021] ? do_syscall_64+0xbe/0x3b0 [ 220.536936][ T9021] do_syscall_64+0xfa/0x3b0 [ 220.536957][ T9021] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.536977][ T9021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.536994][ T9021] ? clear_bhb_loop+0x60/0xb0 [ 220.537014][ T9021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.537031][ T9021] RIP: 0033:0x7fba84d8e929 [ 220.537046][ T9021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.537061][ T9021] RSP: 002b:00007fba85b87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.537079][ T9021] RAX: ffffffffffffffda RBX: 00007fba84fb5fa0 RCX: 00007fba84d8e929 [ 220.537092][ T9021] RDX: 0000000004000014 RSI: 0000200000000740 RDI: 0000000000000003 [ 220.537103][ T9021] RBP: 00007fba85b87090 R08: 0000000000000000 R09: 0000000000000000 [ 220.537114][ T9021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.537124][ T9021] R13: 0000000000000000 R14: 00007fba84fb5fa0 R15: 00007ffd13605f58 [ 220.537151][ T9021] [ 220.967461][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 221.125171][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 221.131753][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 221.143486][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 221.154006][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 221.164701][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 221.181622][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 221.190767][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.245180][ T7068] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 221.406485][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 221.412115][ T10] usbtmc 6-1:16.0: can't read capabilities [ 221.426721][ T7068] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.438308][ T7068] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 221.447610][ T7068] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.460329][ T7068] usb 5-1: config 0 descriptor?? [ 221.676506][ T7068] usbhid 5-1:0.0: can't add hid device: -71 [ 221.685721][ T7068] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 221.696163][ T7068] usb 5-1: USB disconnect, device number 15 [ 221.860282][ T9039] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 221.872780][ T9039] UDF-fs: Scanning with blocksize 4096 failed [ 222.007933][ T5923] usb 6-1: USB disconnect, device number 4 [ 222.135278][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 222.295370][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 222.306799][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.328621][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 222.341906][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.376157][ T10] usb 5-1: config 0 descriptor?? [ 222.784162][ T9028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.983'. [ 222.812622][ T10] hid (null): unknown global tag 0xe [ 222.835190][ T10] kye 0003:0458:5016.0008: control desc unexpectedly large [ 222.864908][ T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0008/input/input20 [ 222.970008][ T10] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0008/input/input21 [ 223.143134][ T10] kye 0003:0458:5016.0008: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 223.220986][ T9028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.292960][ T9028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.328814][ T7068] usb 5-1: USB disconnect, device number 16 [ 223.703045][ T9083] syzkaller1: entered promiscuous mode [ 223.709788][ T9083] syzkaller1: entered allmulticast mode [ 223.822873][ T9089] XFS (rnullb0): Invalid superblock magic number [ 224.071345][ T9109] Mount JFS Failure: -22 [ 224.168158][ T9113] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1007'. [ 224.195180][ T5924] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 224.806757][ T5924] usb 6-1: Using ep0 maxpacket: 8 [ 224.816326][ T5924] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.816353][ T5924] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.816385][ T5924] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.816409][ T5924] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.816449][ T5924] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 224.816476][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.028365][ T5924] usb 6-1: GET_CAPABILITIES returned 0 [ 225.033932][ T5924] usbtmc 6-1:16.0: can't read capabilities [ 225.438689][ T9135] /dev/rnullb0: Can't open blockdev [ 225.551522][ T9134] /dev/rnullb0: Can't open blockdev [ 225.692762][ T890] usb 6-1: USB disconnect, device number 5 [ 226.133203][ T9146] /dev/rnullb0: Can't open blockdev [ 226.457672][ T9155] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1022'. [ 226.615822][ T9157] FAULT_INJECTION: forcing a failure. [ 226.615822][ T9157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.637607][ T9157] CPU: 1 UID: 0 PID: 9157 Comm: syz.4.1024 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 226.637630][ T9157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.637641][ T9157] Call Trace: [ 226.637648][ T9157] [ 226.637656][ T9157] dump_stack_lvl+0x189/0x250 [ 226.637681][ T9157] ? __pfx____ratelimit+0x10/0x10 [ 226.637703][ T9157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.637723][ T9157] ? __pfx__printk+0x10/0x10 [ 226.637743][ T9157] ? __might_fault+0xb0/0x130 [ 226.637774][ T9157] should_fail_ex+0x414/0x560 [ 226.637805][ T9157] _copy_from_user+0x2d/0xb0 [ 226.637833][ T9157] kstrtouint_from_user+0xc4/0x170 [ 226.637859][ T9157] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 226.637896][ T9157] proc_fail_nth_write+0x88/0x240 [ 226.637924][ T9157] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 226.637961][ T9157] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 226.637989][ T9157] vfs_write+0x27b/0xa90 [ 226.638019][ T9157] ? __pfx_vfs_write+0x10/0x10 [ 226.638040][ T9157] ? __fget_files+0x2a/0x420 [ 226.638070][ T9157] ? __fget_files+0x3a0/0x420 [ 226.638092][ T9157] ? __fget_files+0x2a/0x420 [ 226.638123][ T9157] ksys_write+0x145/0x250 [ 226.638147][ T9157] ? __pfx_ksys_write+0x10/0x10 [ 226.638165][ T9157] ? rcu_is_watching+0x15/0xb0 [ 226.638188][ T9157] ? do_syscall_64+0xbe/0x3b0 [ 226.638215][ T9157] do_syscall_64+0xfa/0x3b0 [ 226.638235][ T9157] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.638256][ T9157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.638273][ T9157] ? clear_bhb_loop+0x60/0xb0 [ 226.638294][ T9157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.638311][ T9157] RIP: 0033:0x7fba84d8d3df [ 226.638326][ T9157] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 226.638340][ T9157] RSP: 002b:00007fba85b87030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 226.638359][ T9157] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fba84d8d3df [ 226.638371][ T9157] RDX: 0000000000000001 RSI: 00007fba85b870a0 RDI: 0000000000000004 [ 226.638382][ T9157] RBP: 00007fba85b87090 R08: 0000000000000000 R09: 0000000000000000 [ 226.638393][ T9157] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 226.638402][ T9157] R13: 0000000000000000 R14: 00007fba84fb5fa0 R15: 00007ffd13605f58 [ 226.638429][ T9157] [ 226.896336][ T9163] FAULT_INJECTION: forcing a failure. [ 226.896336][ T9163] name failslab, interval 1, probability 0, space 0, times 0 [ 226.910413][ T9163] CPU: 1 UID: 0 PID: 9163 Comm: syz.5.1025 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 226.910436][ T9163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 226.910447][ T9163] Call Trace: [ 226.910454][ T9163] [ 226.910461][ T9163] dump_stack_lvl+0x189/0x250 [ 226.910485][ T9163] ? __pfx____ratelimit+0x10/0x10 [ 226.910507][ T9163] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.910528][ T9163] ? __pfx__printk+0x10/0x10 [ 226.910552][ T9163] ? __pfx___might_resched+0x10/0x10 [ 226.910568][ T9163] ? fs_reclaim_acquire+0x7d/0x100 [ 226.910595][ T9163] should_fail_ex+0x414/0x560 [ 226.910626][ T9163] should_failslab+0xa8/0x100 [ 226.910649][ T9163] kmem_cache_alloc_noprof+0x73/0x3c0 [ 226.910668][ T9163] ? alloc_file_pseudo_noaccount+0x144/0x2c0 [ 226.910701][ T9163] alloc_file_pseudo_noaccount+0x144/0x2c0 [ 226.910731][ T9163] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 226.910772][ T9163] bdev_file_open_by_dev+0x181/0x240 [ 226.910802][ T9163] setup_bdev_super+0x5a/0x5b0 [ 226.910826][ T9163] get_tree_bdev_flags+0x366/0x4d0 [ 226.910848][ T9163] ? __pfx_fuse_fill_super+0x10/0x10 [ 226.910866][ T9163] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 226.910889][ T9163] ? __fget_files+0x2a/0x420 [ 226.910911][ T9163] ? __fget_files+0x3a0/0x420 [ 226.910940][ T9163] ? __fget_files+0x2a/0x420 [ 226.910968][ T9163] fuse_get_tree+0x23c/0x4e0 [ 226.910989][ T9163] vfs_get_tree+0x8f/0x2b0 [ 226.911013][ T9163] do_new_mount+0x24a/0xa40 [ 226.911044][ T9163] __se_sys_mount+0x317/0x410 [ 226.911073][ T9163] ? __pfx___se_sys_mount+0x10/0x10 [ 226.911095][ T9163] ? rcu_is_watching+0x15/0xb0 [ 226.911117][ T9163] ? do_syscall_64+0xbe/0x3b0 [ 226.911138][ T9163] ? __x64_sys_mount+0x20/0xc0 [ 226.911164][ T9163] do_syscall_64+0xfa/0x3b0 [ 226.911185][ T9163] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.911206][ T9163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.911223][ T9163] ? clear_bhb_loop+0x60/0xb0 [ 226.911244][ T9163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.911261][ T9163] RIP: 0033:0x7fc623b8e929 [ 226.911276][ T9163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.911292][ T9163] RSP: 002b:00007fc624a23038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 226.911310][ T9163] RAX: ffffffffffffffda RBX: 00007fc623db5fa0 RCX: 00007fc623b8e929 [ 226.911324][ T9163] RDX: 0000200000000100 RSI: 0000200000002480 RDI: 0000200000002440 [ 226.911335][ T9163] RBP: 00007fc624a23090 R08: 0000200000000600 R09: 0000000000000000 [ 226.911347][ T9163] R10: 0000000000008004 R11: 0000000000000246 R12: 0000000000000002 [ 226.911357][ T9163] R13: 0000000000000000 R14: 00007fc623db5fa0 R15: 00007ffe3dd32ce8 [ 226.911384][ T9163] [ 226.911492][ T9163] /dev/loop0: Can't open blockdev [ 227.431301][ T9173] FAULT_INJECTION: forcing a failure. [ 227.431301][ T9173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.461146][ T9173] CPU: 0 UID: 0 PID: 9173 Comm: syz.4.1030 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 227.461171][ T9173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 227.461182][ T9173] Call Trace: [ 227.461189][ T9173] [ 227.461197][ T9173] dump_stack_lvl+0x189/0x250 [ 227.461222][ T9173] ? __pfx____ratelimit+0x10/0x10 [ 227.461245][ T9173] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.461264][ T9173] ? __pfx__printk+0x10/0x10 [ 227.461284][ T9173] ? __might_fault+0xb0/0x130 [ 227.461314][ T9173] should_fail_ex+0x414/0x560 [ 227.461346][ T9173] _copy_from_user+0x2d/0xb0 [ 227.461379][ T9173] input_event_from_user+0xb2/0x280 [ 227.461406][ T9173] ? __pfx_input_event_from_user+0x10/0x10 [ 227.461435][ T9173] ? input_inject_event+0xbc/0x320 [ 227.461457][ T9173] evdev_write+0x2a6/0x480 [ 227.461485][ T9173] ? __pfx_evdev_write+0x10/0x10 [ 227.461510][ T9173] ? bpf_lsm_file_permission+0x9/0x20 [ 227.461525][ T9173] ? security_file_permission+0x75/0x290 [ 227.461552][ T9173] ? rw_verify_area+0x258/0x650 [ 227.461576][ T9173] ? __pfx_evdev_write+0x10/0x10 [ 227.461600][ T9173] vfs_write+0x27b/0xa90 [ 227.461629][ T9173] ? __pfx_vfs_write+0x10/0x10 [ 227.461652][ T9173] ? __fget_files+0x2a/0x420 [ 227.461678][ T9173] ? __fget_files+0x2a/0x420 [ 227.461700][ T9173] ? __fget_files+0x3a0/0x420 [ 227.461723][ T9173] ? __fget_files+0x2a/0x420 [ 227.461759][ T9173] ksys_write+0x145/0x250 [ 227.461782][ T9173] ? __pfx_ksys_write+0x10/0x10 [ 227.461801][ T9173] ? rcu_is_watching+0x15/0xb0 [ 227.461823][ T9173] ? do_syscall_64+0xbe/0x3b0 [ 227.461849][ T9173] do_syscall_64+0xfa/0x3b0 [ 227.461870][ T9173] ? lockdep_hardirqs_on+0x9c/0x150 [ 227.461896][ T9173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.461913][ T9173] ? clear_bhb_loop+0x60/0xb0 [ 227.461934][ T9173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.461951][ T9173] RIP: 0033:0x7fba84d8e929 [ 227.461967][ T9173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 227.461982][ T9173] RSP: 002b:00007fba85b87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 227.462001][ T9173] RAX: ffffffffffffffda RBX: 00007fba84fb5fa0 RCX: 00007fba84d8e929 [ 227.462014][ T9173] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003 [ 227.462025][ T9173] RBP: 00007fba85b87090 R08: 0000000000000000 R09: 0000000000000000 [ 227.462036][ T9173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 227.462046][ T9173] R13: 0000000000000000 R14: 00007fba84fb5fa0 R15: 00007ffd13605f58 [ 227.462077][ T9173] [ 227.719876][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.300640][ T9191] FAULT_INJECTION: forcing a failure. [ 228.300640][ T9191] name failslab, interval 1, probability 0, space 0, times 0 [ 228.313398][ T5923] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 228.313427][ T9191] CPU: 0 UID: 0 PID: 9191 Comm: syz.0.1036 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 228.313451][ T9191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 228.313467][ T9191] Call Trace: [ 228.313477][ T9191] [ 228.313487][ T9191] dump_stack_lvl+0x189/0x250 [ 228.313531][ T9191] ? __pfx____ratelimit+0x10/0x10 [ 228.313561][ T9191] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.313595][ T9191] ? __pfx__printk+0x10/0x10 [ 228.313626][ T9191] ? __pfx___might_resched+0x10/0x10 [ 228.313650][ T9191] should_fail_ex+0x414/0x560 [ 228.313685][ T9191] should_failslab+0xa8/0x100 [ 228.313712][ T9191] __kmalloc_noprof+0xcb/0x4f0 [ 228.313732][ T9191] ? snd_seq_oss_readq_new+0x81/0x250 [ 228.313762][ T9191] snd_seq_oss_readq_new+0x81/0x250 [ 228.313788][ T9191] snd_seq_oss_open+0x770/0xea0 [ 228.313844][ T9191] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 228.313887][ T9191] ? __lock_acquire+0xab9/0xd20 [ 228.313937][ T9191] ? rcu_is_watching+0x15/0xb0 [ 228.313958][ T9191] ? trace_contention_end+0x39/0x120 [ 228.313998][ T9191] ? __pfx___mutex_lock+0x10/0x10 [ 228.314029][ T9191] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 228.314047][ T9191] ? __pfx_free_devinfo+0x10/0x10 [ 228.314064][ T9191] ? do_raw_spin_unlock+0x122/0x240 [ 228.314092][ T9191] ? soundcore_open+0x2da/0x490 [ 228.314113][ T9191] odev_open+0x67/0xa0 [ 228.314142][ T9191] chrdev_open+0x4cc/0x5e0 [ 228.314173][ T9191] ? __pfx_chrdev_open+0x10/0x10 [ 228.314207][ T9191] ? __pfx_chrdev_open+0x10/0x10 [ 228.314232][ T9191] do_dentry_open+0xdf3/0x1970 [ 228.314278][ T9191] vfs_open+0x3b/0x340 [ 228.314309][ T9191] ? path_openat+0x2ecd/0x3830 [ 228.314333][ T9191] path_openat+0x2ee5/0x3830 [ 228.314353][ T9191] ? arch_stack_walk+0xfc/0x150 [ 228.314408][ T9191] ? __pfx_path_openat+0x10/0x10 [ 228.314426][ T9191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.314466][ T9191] do_filp_open+0x1fa/0x410 [ 228.314486][ T9191] ? __lock_acquire+0xab9/0xd20 [ 228.314516][ T9191] ? __pfx_do_filp_open+0x10/0x10 [ 228.314559][ T9191] ? _raw_spin_unlock+0x28/0x50 [ 228.314578][ T9191] ? alloc_fd+0x64c/0x6c0 [ 228.314616][ T9191] do_sys_openat2+0x121/0x1c0 [ 228.314638][ T9191] ? __pfx_do_sys_openat2+0x10/0x10 [ 228.314657][ T9191] ? ksys_write+0x22a/0x250 [ 228.314683][ T9191] ? __pfx_ksys_write+0x10/0x10 [ 228.314703][ T9191] ? rcu_is_watching+0x15/0xb0 [ 228.314726][ T9191] __x64_sys_open+0x11e/0x150 [ 228.314749][ T9191] do_syscall_64+0xfa/0x3b0 [ 228.314776][ T9191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.314794][ T9191] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 228.314819][ T9191] ? clear_bhb_loop+0x60/0xb0 [ 228.314843][ T9191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.314861][ T9191] RIP: 0033:0x7fac05b8e929 [ 228.314880][ T9191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.314897][ T9191] RSP: 002b:00007fac06a6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 228.314920][ T9191] RAX: ffffffffffffffda RBX: 00007fac05db5fa0 RCX: 00007fac05b8e929 [ 228.314935][ T9191] RDX: 0000000000000000 RSI: 0000000000141400 RDI: 00002000000001c0 [ 228.314948][ T9191] RBP: 00007fac06a6a090 R08: 0000000000000000 R09: 0000000000000000 [ 228.314961][ T9191] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 228.314973][ T9191] R13: 0000000000000000 R14: 00007fac05db5fa0 R15: 00007fffe27540e8 [ 228.315002][ T9191] [ 228.669916][ T7068] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 228.826443][ T7068] usb 6-1: Using ep0 maxpacket: 16 [ 228.831722][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 228.843534][ T7068] usb 6-1: config 0 has no interfaces? [ 228.851929][ T7068] usb 6-1: New USB device found, idVendor=0b7d, idProduct=3138, bcdDevice= 0.00 [ 228.866157][ T7068] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.874623][ T5923] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.889899][ T5923] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 228.903165][ T7068] usb 6-1: config 0 descriptor?? [ 228.915295][ T5923] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 228.951425][ T5923] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.973095][ T5923] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.982551][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.203478][ T5923] usb 5-1: GET_CAPABILITIES returned 0 [ 229.210673][ T5923] usbtmc 5-1:16.0: can't read capabilities [ 229.714211][ T5923] usb 5-1: USB disconnect, device number 17 [ 231.084278][ T5901] usb 6-1: USB disconnect, device number 6 [ 231.197266][ T9231] overlayfs: failed to clone lowerpath [ 231.605429][ T5923] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 231.662177][ T9249] hfs: can't find a HFS filesystem on dev rnullb0 [ 231.778621][ T5923] usb 6-1: Using ep0 maxpacket: 8 [ 231.785405][ T5923] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 231.804845][ T5923] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 231.830743][ T5923] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 231.843263][ T5923] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.862148][ T5923] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.879232][ T5923] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 231.888332][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.127641][ T5923] usb 6-1: usb_control_msg returned -32 [ 232.134389][ T5923] usbtmc 6-1:16.0: can't read capabilities [ 232.171755][ T9265] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 232.837666][ T9284] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 233.038684][ T5924] usb 6-1: USB disconnect, device number 7 [ 233.142625][ T9293] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 233.150266][ T9293] VFS: Can't find a romfs filesystem on dev rnullb0. [ 233.150266][ T9293] [ 233.775304][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 233.925298][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 233.951257][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 233.960873][ T10] usb 5-1: config 4 interface 0 has no altsetting 0 [ 233.974568][ T10] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 233.984139][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.996400][ T10] usb 5-1: Product: syz [ 234.000673][ T10] usb 5-1: Manufacturer: syz [ 234.008496][ T10] usb 5-1: SerialNumber: syz [ 234.053077][ T9320] FAULT_INJECTION: forcing a failure. [ 234.053077][ T9320] name failslab, interval 1, probability 0, space 0, times 0 [ 234.073573][ T9320] CPU: 1 UID: 0 PID: 9320 Comm: syz.5.1086 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 234.073597][ T9320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 234.073608][ T9320] Call Trace: [ 234.073616][ T9320] [ 234.073624][ T9320] dump_stack_lvl+0x189/0x250 [ 234.073649][ T9320] ? __pfx____ratelimit+0x10/0x10 [ 234.073671][ T9320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.073691][ T9320] ? __pfx__printk+0x10/0x10 [ 234.073716][ T9320] ? __pfx___might_resched+0x10/0x10 [ 234.073738][ T9320] should_fail_ex+0x414/0x560 [ 234.073770][ T9320] should_failslab+0xa8/0x100 [ 234.073793][ T9320] kmem_cache_alloc_noprof+0x73/0x3c0 [ 234.073812][ T9320] ? security_file_alloc+0x34/0x330 [ 234.073840][ T9320] security_file_alloc+0x34/0x330 [ 234.073867][ T9320] init_file+0x93/0x2f0 [ 234.073897][ T9320] alloc_file_pseudo_noaccount+0x15b/0x2c0 [ 234.073928][ T9320] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 234.073970][ T9320] bdev_file_open_by_dev+0x181/0x240 [ 234.074000][ T9320] setup_bdev_super+0x5a/0x5b0 [ 234.074025][ T9320] get_tree_bdev_flags+0x366/0x4d0 [ 234.074047][ T9320] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 234.074071][ T9320] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 234.074102][ T9320] vfs_get_tree+0x8f/0x2b0 [ 234.074126][ T9320] do_new_mount+0x24a/0xa40 [ 234.074156][ T9320] __se_sys_mount+0x317/0x410 [ 234.074186][ T9320] ? __pfx___se_sys_mount+0x10/0x10 [ 234.074215][ T9320] ? do_syscall_64+0xbe/0x3b0 [ 234.074236][ T9320] ? __x64_sys_mount+0x20/0xc0 [ 234.074270][ T9320] do_syscall_64+0xfa/0x3b0 [ 234.074291][ T9320] ? lockdep_hardirqs_on+0x9c/0x150 [ 234.074312][ T9320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.074329][ T9320] ? clear_bhb_loop+0x60/0xb0 [ 234.074350][ T9320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.074367][ T9320] RIP: 0033:0x7fc623b8e929 [ 234.074382][ T9320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.074397][ T9320] RSP: 002b:00007fc624a23038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 234.074415][ T9320] RAX: ffffffffffffffda RBX: 00007fc623db5fa0 RCX: 00007fc623b8e929 [ 234.074428][ T9320] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 234.074440][ T9320] RBP: 00007fc624a23090 R08: 0000000000000000 R09: 0000000000000000 [ 234.074452][ T9320] R10: 0000000001200051 R11: 0000000000000246 R12: 0000000000000002 [ 234.074463][ T9320] R13: 0000000000000001 R14: 00007fc623db5fa0 R15: 00007ffe3dd32ce8 [ 234.074490][ T9320] [ 234.074654][ T9320] /dev/rnullb0: Can't open blockdev [ 234.296956][ T10] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 234.410511][ T10] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 234.421479][ T10] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 234.441515][ T10] usb 5-1: media controller created [ 234.471304][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.536481][ T10] zl10353_read_register: readreg error (reg=127, ret==0) [ 234.601918][ T10] usb 5-1: USB disconnect, device number 18 [ 234.672970][ T7068] IPVS: starting estimator thread 0... [ 234.722978][ T65] wlan0: Trigger new scan to find an IBSS to join [ 234.775244][ T9331] IPVS: using max 30 ests per chain, 72000 per kthread [ 234.968248][ T9336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1091'. [ 235.267654][ T9345] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1095'. [ 235.356514][ T5924] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 235.497962][ T5924] usb 5-1: device descriptor read/64, error -71 [ 235.552480][ T9354] sctp: [Deprecated]: syz.5.1099 (pid 9354) Use of int in max_burst socket option. [ 235.552480][ T9354] Use struct sctp_assoc_value instead [ 235.735199][ T5924] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 235.861624][ T9364] /dev/rnullb0: Can't open blockdev [ 235.895191][ T5924] usb 5-1: device descriptor read/64, error -71 [ 235.940984][ T9367] netlink: 'syz.5.1105': attribute type 1 has an invalid length. [ 235.949307][ T9367] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1105'. [ 236.013402][ T5924] usb usb5-port1: attempt power cycle [ 236.261457][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1111'. [ 236.314804][ T9382] C: renamed from team_slave_0 (while UP) [ 236.325698][ T9382] netlink: 'syz.0.1112': attribute type 3 has an invalid length. [ 236.333550][ T9382] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1112'. [ 236.430012][ T9384] /dev/rnullb0: Can't open blockdev [ 236.553351][ T5924] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 236.691097][ T5924] usb 5-1: device descriptor read/8, error -71 [ 237.012085][ T9391] FAULT_INJECTION: forcing a failure. [ 237.012085][ T9391] name failslab, interval 1, probability 0, space 0, times 0 [ 237.026994][ T9391] CPU: 1 UID: 0 PID: 9391 Comm: syz.0.1114 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 237.027018][ T9391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 237.027030][ T9391] Call Trace: [ 237.027037][ T9391] [ 237.027045][ T9391] dump_stack_lvl+0x189/0x250 [ 237.027070][ T9391] ? __pfx____ratelimit+0x10/0x10 [ 237.027092][ T9391] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.027112][ T9391] ? __pfx__printk+0x10/0x10 [ 237.027135][ T9391] ? __pfx___might_resched+0x10/0x10 [ 237.027152][ T9391] ? fs_reclaim_acquire+0x7d/0x100 [ 237.027178][ T9391] should_fail_ex+0x414/0x560 [ 237.027209][ T9391] should_failslab+0xa8/0x100 [ 237.027238][ T9391] kmem_cache_alloc_noprof+0x73/0x3c0 [ 237.027257][ T9391] ? security_file_alloc+0x34/0x330 [ 237.027286][ T9391] security_file_alloc+0x34/0x330 [ 237.027312][ T9391] init_file+0x93/0x2f0 [ 237.027342][ T9391] alloc_empty_file+0x6e/0x1d0 [ 237.027369][ T9391] path_openat+0x107/0x3830 [ 237.027387][ T9391] ? arch_stack_walk+0xfc/0x150 [ 237.027431][ T9391] ? kasan_save_track+0x4f/0x80 [ 237.027447][ T9391] ? kasan_save_track+0x3e/0x80 [ 237.027462][ T9391] ? __kasan_slab_alloc+0x6c/0x80 [ 237.027479][ T9391] ? getname_flags+0xb8/0x540 [ 237.027503][ T9391] ? __pfx_path_openat+0x10/0x10 [ 237.027519][ T9391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.027554][ T9391] do_filp_open+0x1fa/0x410 [ 237.027570][ T9391] ? __lock_acquire+0xab9/0xd20 [ 237.027599][ T9391] ? __pfx_do_filp_open+0x10/0x10 [ 237.027637][ T9391] ? _raw_spin_unlock+0x28/0x50 [ 237.027654][ T9391] ? alloc_fd+0x64c/0x6c0 [ 237.027688][ T9391] do_sys_openat2+0x121/0x1c0 [ 237.027707][ T9391] ? __pfx_do_sys_openat2+0x10/0x10 [ 237.027724][ T9391] ? exc_page_fault+0x76/0xf0 [ 237.027748][ T9391] ? do_user_addr_fault+0xc8a/0x1390 [ 237.027775][ T9391] __x64_sys_openat+0x138/0x170 [ 237.027797][ T9391] do_syscall_64+0xfa/0x3b0 [ 237.027818][ T9391] ? lockdep_hardirqs_on+0x9c/0x150 [ 237.027838][ T9391] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.027855][ T9391] ? clear_bhb_loop+0x60/0xb0 [ 237.027875][ T9391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.027892][ T9391] RIP: 0033:0x7fac05b8d290 [ 237.027907][ T9391] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 237.027922][ T9391] RSP: 002b:00007fac06a69b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 237.027941][ T9391] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fac05b8d290 [ 237.027954][ T9391] RDX: 0000000000000000 RSI: 00007fac06a69c10 RDI: 00000000ffffff9c [ 237.027965][ T9391] RBP: 00007fac06a69c10 R08: 0000000000000000 R09: 007265636e657571 [ 237.027977][ T9391] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 237.027987][ T9391] R13: 0000000000000000 R14: 00007fac05db5fa0 R15: 00007fffe27540e8 [ 237.028014][ T9391] [ 237.135198][ T5924] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 237.266635][ C0] vkms_vblank_simulate: vblank timer overrun [ 237.355827][ T5924] usb 5-1: device descriptor read/8, error -71 [ 237.395146][ T982] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 237.465366][ T5924] usb usb5-port1: unable to enumerate USB device [ 237.557362][ T982] usb 6-1: config 0 has an invalid interface number: 101 but max is 0 [ 237.567477][ T982] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.577632][ T982] usb 6-1: config 0 has no interface number 0 [ 237.583761][ T982] usb 6-1: config 0 interface 101 has no altsetting 0 [ 237.591167][ T982] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 237.600736][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.615996][ T982] usb 6-1: config 0 descriptor?? [ 237.675288][ T65] wlan0: Trigger new scan to find an IBSS to join [ 238.089021][ T5923] usb 6-1: USB disconnect, device number 8 [ 238.501323][ T9423] Invalid logical block size (16777216) [ 238.557364][ T9425] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1127'. [ 238.567625][ T9425] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1127'. [ 238.579317][ T9425] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 238.748834][ T5923] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 238.937783][ T5923] usb 6-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice=cb.d7 [ 238.950242][ T5923] usb 6-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 238.960112][ T5923] usb 6-1: Product: syz [ 238.964397][ T5923] usb 6-1: Manufacturer: syz [ 238.973887][ T5923] usb 6-1: SerialNumber: syz [ 238.981721][ T5923] usb 6-1: config 0 descriptor?? [ 239.069977][ T9440] binder: 9439:9440 unknown command 0 [ 239.075497][ T9440] binder: 9439:9440 ioctl c0306201 200000000540 returned -22 [ 239.150728][ T9442] NILFS (rnullb0): couldn't find nilfs on the device [ 239.486425][ T9450] FAULT_INJECTION: forcing a failure. [ 239.486425][ T9450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.501404][ T9450] CPU: 0 UID: 0 PID: 9450 Comm: syz.4.1136 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 239.501429][ T9450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.501441][ T9450] Call Trace: [ 239.501448][ T9450] [ 239.501456][ T9450] dump_stack_lvl+0x189/0x250 [ 239.501482][ T9450] ? __pfx____ratelimit+0x10/0x10 [ 239.501505][ T9450] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.501530][ T9450] ? __pfx__printk+0x10/0x10 [ 239.501562][ T9450] should_fail_ex+0x414/0x560 [ 239.501592][ T9450] _copy_to_user+0x31/0xb0 [ 239.501606][ T9450] simple_read_from_buffer+0xe1/0x170 [ 239.501627][ T9450] proc_fail_nth_read+0x1df/0x250 [ 239.501649][ T9450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.501670][ T9450] ? rw_verify_area+0x258/0x650 [ 239.501685][ T9450] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.501705][ T9450] vfs_read+0x1fd/0x980 [ 239.501723][ T9450] ? __pfx___mutex_lock+0x10/0x10 [ 239.501741][ T9450] ? __pfx_vfs_read+0x10/0x10 [ 239.501758][ T9450] ? __fget_files+0x2a/0x420 [ 239.501779][ T9450] ? __fget_files+0x3a0/0x420 [ 239.501796][ T9450] ? __fget_files+0x2a/0x420 [ 239.501820][ T9450] ksys_read+0x145/0x250 [ 239.501837][ T9450] ? __pfx_ksys_read+0x10/0x10 [ 239.501850][ T9450] ? rcu_is_watching+0x15/0xb0 [ 239.501867][ T9450] ? do_syscall_64+0xbe/0x3b0 [ 239.501887][ T9450] do_syscall_64+0xfa/0x3b0 [ 239.501902][ T9450] ? lockdep_hardirqs_on+0x9c/0x150 [ 239.501918][ T9450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.501931][ T9450] ? clear_bhb_loop+0x60/0xb0 [ 239.501947][ T9450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.501960][ T9450] RIP: 0033:0x7fba84d8d33c [ 239.501972][ T9450] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 239.501983][ T9450] RSP: 002b:00007fba85b87030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.501997][ T9450] RAX: ffffffffffffffda RBX: 00007fba84fb5fa0 RCX: 00007fba84d8d33c [ 239.502012][ T9450] RDX: 000000000000000f RSI: 00007fba85b870a0 RDI: 0000000000000004 [ 239.502020][ T9450] RBP: 00007fba85b87090 R08: 0000000000000000 R09: 0000000000000000 [ 239.502028][ T9450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.502036][ T9450] R13: 0000000000000000 R14: 00007fba84fb5fa0 R15: 00007ffd13605f58 [ 239.502056][ T9450] [ 239.735002][ C0] vkms_vblank_simulate: vblank timer overrun [ 239.806545][ T9452] FAULT_INJECTION: forcing a failure. [ 239.806545][ T9452] name failslab, interval 1, probability 0, space 0, times 0 [ 239.819404][ T9452] CPU: 1 UID: 0 PID: 9452 Comm: syz.4.1137 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 239.819427][ T9452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 239.819445][ T9452] Call Trace: [ 239.819452][ T9452] [ 239.819459][ T9452] dump_stack_lvl+0x189/0x250 [ 239.819483][ T9452] ? __pfx____ratelimit+0x10/0x10 [ 239.819505][ T9452] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.819525][ T9452] ? __pfx__printk+0x10/0x10 [ 239.819547][ T9452] ? __pfx___might_resched+0x10/0x10 [ 239.819564][ T9452] ? fs_reclaim_acquire+0x7d/0x100 [ 239.819591][ T9452] should_fail_ex+0x414/0x560 [ 239.819622][ T9452] should_failslab+0xa8/0x100 [ 239.819644][ T9452] __kmalloc_noprof+0xcb/0x4f0 [ 239.819662][ T9452] ? nl80211_trigger_scan+0x5af/0x2170 [ 239.819688][ T9452] nl80211_trigger_scan+0x5af/0x2170 [ 239.819738][ T9452] genl_family_rcv_msg_doit+0x215/0x300 [ 239.819772][ T9452] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 239.819802][ T9452] ? bpf_lsm_capable+0x9/0x20 [ 239.819819][ T9452] ? security_capable+0x7e/0x2e0 [ 239.819844][ T9452] genl_rcv_msg+0x60e/0x790 [ 239.819867][ T9452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 239.819881][ T9452] ? ref_tracker_free+0x63a/0x7d0 [ 239.819896][ T9452] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 239.819911][ T9452] ? __pfx_nl80211_trigger_scan+0x10/0x10 [ 239.819930][ T9452] ? __pfx_nl80211_post_doit+0x10/0x10 [ 239.819947][ T9452] ? __pfx_ref_tracker_free+0x10/0x10 [ 239.819982][ T9452] netlink_rcv_skb+0x205/0x470 [ 239.820005][ T9452] ? __pfx_genl_rcv_msg+0x10/0x10 [ 239.820023][ T9452] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 239.820062][ T9452] ? down_read+0x1ad/0x2e0 [ 239.820088][ T9452] genl_rcv+0x28/0x40 [ 239.820102][ T9452] netlink_unicast+0x758/0x8d0 [ 239.820133][ T9452] netlink_sendmsg+0x805/0xb30 [ 239.820165][ T9452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.820192][ T9452] ? aa_sock_msg_perm+0xf1/0x1d0 [ 239.820212][ T9452] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 239.820236][ T9452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 239.820260][ T9452] __sock_sendmsg+0x21c/0x270 [ 239.820283][ T9452] ____sys_sendmsg+0x505/0x830 [ 239.820314][ T9452] ? __pfx_____sys_sendmsg+0x10/0x10 [ 239.820349][ T9452] ? import_iovec+0x74/0xa0 [ 239.820379][ T9452] ___sys_sendmsg+0x21f/0x2a0 [ 239.820407][ T9452] ? __pfx____sys_sendmsg+0x10/0x10 [ 239.820468][ T9452] ? __fget_files+0x2a/0x420 [ 239.820490][ T9452] ? __fget_files+0x3a0/0x420 [ 239.820523][ T9452] __x64_sys_sendmsg+0x19b/0x260 [ 239.820552][ T9452] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 239.820587][ T9452] ? __pfx_ksys_write+0x10/0x10 [ 239.820606][ T9452] ? rcu_is_watching+0x15/0xb0 [ 239.820628][ T9452] ? do_syscall_64+0xbe/0x3b0 [ 239.820653][ T9452] do_syscall_64+0xfa/0x3b0 [ 239.820674][ T9452] ? lockdep_hardirqs_on+0x9c/0x150 [ 239.820694][ T9452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.820711][ T9452] ? clear_bhb_loop+0x60/0xb0 [ 239.820732][ T9452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.820749][ T9452] RIP: 0033:0x7fba84d8e929 [ 239.820764][ T9452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.820779][ T9452] RSP: 002b:00007fba85b87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 239.820797][ T9452] RAX: ffffffffffffffda RBX: 00007fba84fb5fa0 RCX: 00007fba84d8e929 [ 239.820810][ T9452] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 239.820821][ T9452] RBP: 00007fba85b87090 R08: 0000000000000000 R09: 0000000000000000 [ 239.820831][ T9452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.820841][ T9452] R13: 0000000000000000 R14: 00007fba84fb5fa0 R15: 00007ffd13605f58 [ 239.820868][ T9452] [ 240.351372][ T9458] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20004 [ 240.444033][ T9460] FAULT_INJECTION: forcing a failure. [ 240.444033][ T9460] name failslab, interval 1, probability 0, space 0, times 0 [ 240.458081][ T9460] CPU: 0 UID: 0 PID: 9460 Comm: syz.4.1141 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 240.458104][ T9460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 240.458115][ T9460] Call Trace: [ 240.458122][ T9460] [ 240.458130][ T9460] dump_stack_lvl+0x189/0x250 [ 240.458154][ T9460] ? __pfx____ratelimit+0x10/0x10 [ 240.458176][ T9460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.458195][ T9460] ? __pfx__printk+0x10/0x10 [ 240.458220][ T9460] ? __pfx___might_resched+0x10/0x10 [ 240.458236][ T9460] ? fs_reclaim_acquire+0x7d/0x100 [ 240.458263][ T9460] should_fail_ex+0x414/0x560 [ 240.458293][ T9460] should_failslab+0xa8/0x100 [ 240.458316][ T9460] kmem_cache_alloc_noprof+0x73/0x3c0 [ 240.458335][ T9460] ? __kernfs_new_node+0xd7/0x7e0 [ 240.458359][ T9460] ? __lock_acquire+0xab9/0xd20 [ 240.458388][ T9460] __kernfs_new_node+0xd7/0x7e0 [ 240.458414][ T9460] ? __lock_acquire+0xab9/0xd20 [ 240.458445][ T9460] ? __pfx___kernfs_new_node+0x10/0x10 [ 240.458472][ T9460] ? kernfs_root+0x1c/0x230 [ 240.458503][ T9460] ? kernfs_root+0x1c/0x230 [ 240.458527][ T9460] ? kernfs_root+0x1c/0x230 [ 240.458549][ T9460] ? kernfs_root+0x1c/0x230 [ 240.458578][ T9460] kernfs_new_node+0x102/0x210 [ 240.458609][ T9460] kernfs_create_link+0xa7/0x200 [ 240.458633][ T9460] sysfs_do_create_link_sd+0x83/0x110 [ 240.458661][ T9460] iommu_device_link+0x105/0x1c0 [ 240.458684][ T9460] __iommu_probe_device+0x555/0x11f0 [ 240.458713][ T9460] iommu_bus_notifier+0x87/0x2c0 [ 240.458734][ T9460] notifier_call_chain+0x1b3/0x3e0 [ 240.458759][ T9460] blocking_notifier_call_chain+0x6a/0x90 [ 240.458780][ T9460] bus_notify+0x143/0x180 [ 240.458809][ T9460] device_add+0x54d/0xb50 [ 240.458829][ T9460] iommufd_test+0x2f95/0x5170 [ 240.458863][ T9460] ? __pfx_iommufd_test+0x10/0x10 [ 240.458887][ T9460] ? __lock_acquire+0xab9/0xd20 [ 240.458928][ T9460] ? __might_fault+0xb0/0x130 [ 240.458968][ T9460] iommufd_fops_ioctl+0x45e/0x580 [ 240.458991][ T9460] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 240.459013][ T9460] ? __fget_files+0x2a/0x420 [ 240.459042][ T9460] ? __fget_files+0x2a/0x420 [ 240.459069][ T9460] ? bpf_lsm_file_ioctl+0x9/0x20 [ 240.459086][ T9460] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 240.459103][ T9460] __se_sys_ioctl+0xfc/0x170 [ 240.459125][ T9460] do_syscall_64+0xfa/0x3b0 [ 240.459148][ T9460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.459164][ T9460] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 240.459182][ T9460] ? clear_bhb_loop+0x60/0xb0 [ 240.459202][ T9460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.459219][ T9460] RIP: 0033:0x7fba84d8e929 [ 240.459234][ T9460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.459248][ T9460] RSP: 002b:00007fba85b87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 240.459266][ T9460] RAX: ffffffffffffffda RBX: 00007fba84fb5fa0 RCX: 00007fba84d8e929 [ 240.459279][ T9460] RDX: 00002000000002c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 240.459291][ T9460] RBP: 00007fba85b87090 R08: 0000000000000000 R09: 0000000000000000 [ 240.459301][ T9460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 240.459311][ T9460] R13: 0000000000000000 R14: 00007fba84fb5fa0 R15: 00007ffd13605f58 [ 240.459338][ T9460] [ 240.785977][ C0] vkms_vblank_simulate: vblank timer overrun [ 240.797833][ T65] wlan0: Trigger new scan to find an IBSS to join [ 241.060408][ T9473] FAULT_INJECTION: forcing a failure. [ 241.060408][ T9473] name failslab, interval 1, probability 0, space 0, times 0 [ 241.074277][ T9473] CPU: 1 UID: 0 PID: 9473 Comm: syz.4.1146 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 241.074294][ T9473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 241.074302][ T9473] Call Trace: [ 241.074308][ T9473] [ 241.074313][ T9473] dump_stack_lvl+0x189/0x250 [ 241.074332][ T9473] ? __pfx____ratelimit+0x10/0x10 [ 241.074347][ T9473] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.074361][ T9473] ? __pfx__printk+0x10/0x10 [ 241.074380][ T9473] ? __pfx___might_resched+0x10/0x10 [ 241.074391][ T9473] ? fs_reclaim_acquire+0x7d/0x100 [ 241.074411][ T9473] should_fail_ex+0x414/0x560 [ 241.074433][ T9473] should_failslab+0xa8/0x100 [ 241.074450][ T9473] __kmalloc_cache_noprof+0x70/0x3d0 [ 241.074464][ T9473] ? vhost_task_create+0xf6/0x290 [ 241.074480][ T9473] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 241.074497][ T9473] vhost_task_create+0xf6/0x290 [ 241.074512][ T9473] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 241.074529][ T9473] ? __pfx_vhost_task_create+0x10/0x10 [ 241.074548][ T9473] ? __pfx_vhost_task_fn+0x10/0x10 [ 241.074569][ T9473] ? kasan_save_track+0x4f/0x80 [ 241.074580][ T9473] ? kasan_save_track+0x3e/0x80 [ 241.074595][ T9473] kvm_mmu_post_init_vm+0x147/0x2b0 [ 241.074615][ T9473] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 241.074636][ T9473] ? __mutex_trylock_common+0x153/0x260 [ 241.074652][ T9473] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 241.074671][ T9473] ? rcu_is_watching+0x15/0xb0 [ 241.074683][ T9473] ? look_up_lock_class+0x74/0x170 [ 241.074699][ T9473] ? register_lock_class+0x51/0x320 [ 241.074721][ T9473] ? __lock_acquire+0xab9/0xd20 [ 241.074757][ T9473] kvm_vcpu_ioctl+0x95c/0xe90 [ 241.074775][ T9473] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 241.074788][ T9473] ? __lock_acquire+0xab9/0xd20 [ 241.074818][ T9473] ? __fget_files+0x2a/0x420 [ 241.074838][ T9473] ? __fget_files+0x2a/0x420 [ 241.074860][ T9473] ? __fget_files+0x3a0/0x420 [ 241.074880][ T9473] ? __fget_files+0x2a/0x420 [ 241.074899][ T9473] ? bpf_lsm_file_ioctl+0x9/0x20 [ 241.074911][ T9473] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 241.074926][ T9473] __se_sys_ioctl+0xfc/0x170 [ 241.074941][ T9473] do_syscall_64+0xfa/0x3b0 [ 241.074957][ T9473] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.074972][ T9473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.074984][ T9473] ? clear_bhb_loop+0x60/0xb0 [ 241.075000][ T9473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.075012][ T9473] RIP: 0033:0x7fba84d8e929 [ 241.075022][ T9473] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.075033][ T9473] RSP: 002b:00007fba85b87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.075047][ T9473] RAX: ffffffffffffffda RBX: 00007fba84fb5fa0 RCX: 00007fba84d8e929 [ 241.075061][ T9473] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 241.075072][ T9473] RBP: 00007fba85b87090 R08: 0000000000000000 R09: 0000000000000000 [ 241.075083][ T9473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.075093][ T9473] R13: 0000000000000000 R14: 00007fba84fb5fa0 R15: 00007ffd13605f58 [ 241.075120][ T9473] [ 241.414833][ T5923] usb 6-1: USB disconnect, device number 9 [ 241.634354][ T9485] syzkaller1: entered promiscuous mode [ 241.640691][ T9485] syzkaller1: entered allmulticast mode [ 241.995693][ T1144] wlan0: Creating new IBSS network, BSSID 3a:f8:8a:35:d4:2a [ 242.145179][ T5923] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 242.295267][ T5923] usb 5-1: Using ep0 maxpacket: 16 [ 242.301890][ T5923] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 242.310845][ T5923] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 242.321012][ T5923] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.331771][ T5923] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 242.340865][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.348888][ T5923] usb 5-1: Product: syz [ 242.353062][ T5923] usb 5-1: Manufacturer: syz [ 242.357722][ T5923] usb 5-1: SerialNumber: syz [ 242.579613][ T5923] usb 5-1: 0:2 : does not exist [ 242.601147][ T5923] usb 5-1: USB disconnect, device number 23 [ 242.626795][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.145231][ T982] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 243.306897][ T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.317914][ T982] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 243.327785][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.338059][ T982] usb 6-1: config 0 descriptor?? [ 243.475197][ T10] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 243.550881][ T982] usbhid 6-1:0.0: can't add hid device: -71 [ 243.556991][ T982] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 243.567213][ T982] usb 6-1: USB disconnect, device number 10 [ 243.605182][ T10] usb 5-1: device descriptor read/64, error -71 [ 243.846707][ T10] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 243.985245][ T10] usb 5-1: device descriptor read/64, error -71 [ 244.077263][ T982] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 244.109231][ T10] usb usb5-port1: attempt power cycle [ 244.245290][ T982] usb 6-1: Using ep0 maxpacket: 16 [ 244.255615][ T982] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.271676][ T982] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 244.281174][ T982] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.297020][ T982] usb 6-1: config 0 descriptor?? [ 244.334423][ T9526] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.351026][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.358258][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.465396][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 244.511960][ T10] usb 5-1: device descriptor read/8, error -71 [ 244.785256][ T10] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 244.818041][ T10] usb 5-1: device descriptor read/8, error -71 [ 244.949474][ T10] usb usb5-port1: unable to enumerate USB device [ 245.320022][ T982] usbhid 6-1:0.0: can't add hid device: -71 [ 245.320119][ T982] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 245.328851][ T982] usb 6-1: USB disconnect, device number 11 [ 245.812258][ T9544] FAULT_INJECTION: forcing a failure. [ 245.812258][ T9544] name failslab, interval 1, probability 0, space 0, times 0 [ 245.825040][ T9544] CPU: 0 UID: 0 PID: 9544 Comm: syz.2.1178 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 245.825065][ T9544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 245.825077][ T9544] Call Trace: [ 245.825084][ T9544] [ 245.825091][ T9544] dump_stack_lvl+0x189/0x250 [ 245.825116][ T9544] ? __pfx____ratelimit+0x10/0x10 [ 245.825138][ T9544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 245.825157][ T9544] ? __pfx__printk+0x10/0x10 [ 245.825189][ T9544] ? __pfx___might_resched+0x10/0x10 [ 245.825205][ T9544] ? fs_reclaim_acquire+0x7d/0x100 [ 245.825232][ T9544] should_fail_ex+0x414/0x560 [ 245.825264][ T9544] should_failslab+0xa8/0x100 [ 245.825287][ T9544] __kmalloc_cache_noprof+0x70/0x3d0 [ 245.825306][ T9544] ? fuse_dev_alloc+0x52/0x2d0 [ 245.825329][ T9544] ? fuse_dax_conn_alloc+0x308/0x940 [ 245.825351][ T9544] fuse_dev_alloc+0x52/0x2d0 [ 245.825373][ T9544] fuse_fill_super_common+0x4e1/0x1100 [ 245.825401][ T9544] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 245.825426][ T9544] ? __pfx_snprintf+0x10/0x10 [ 245.825437][ T9544] ? set_blocksize+0x21e/0x500 [ 245.825462][ T9544] ? sb_set_blocksize+0x104/0x180 [ 245.825483][ T9544] fuse_fill_super+0x176/0x1f0 [ 245.825499][ T9544] get_tree_bdev_flags+0x40e/0x4d0 [ 245.825517][ T9544] ? __pfx_fuse_fill_super+0x10/0x10 [ 245.825531][ T9544] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 245.825549][ T9544] ? __fget_files+0x2a/0x420 [ 245.825568][ T9544] ? __fget_files+0x3a0/0x420 [ 245.825586][ T9544] ? __fget_files+0x2a/0x420 [ 245.825608][ T9544] fuse_get_tree+0x23c/0x4e0 [ 245.825624][ T9544] vfs_get_tree+0x8f/0x2b0 [ 245.825644][ T9544] do_new_mount+0x24a/0xa40 [ 245.825668][ T9544] __se_sys_mount+0x317/0x410 [ 245.825692][ T9544] ? __pfx___se_sys_mount+0x10/0x10 [ 245.825716][ T9544] ? do_syscall_64+0xbe/0x3b0 [ 245.825732][ T9544] ? __x64_sys_mount+0x20/0xc0 [ 245.825753][ T9544] do_syscall_64+0xfa/0x3b0 [ 245.825770][ T9544] ? lockdep_hardirqs_on+0x9c/0x150 [ 245.825786][ T9544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.825800][ T9544] ? clear_bhb_loop+0x60/0xb0 [ 245.825817][ T9544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.825830][ T9544] RIP: 0033:0x7f5eaff8e929 [ 245.825843][ T9544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.825855][ T9544] RSP: 002b:00007f5eb0edb038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 245.825869][ T9544] RAX: ffffffffffffffda RBX: 00007f5eb01b5fa0 RCX: 00007f5eaff8e929 [ 245.825880][ T9544] RDX: 0000200000000100 RSI: 0000200000002480 RDI: 0000200000002440 [ 245.825890][ T9544] RBP: 00007f5eb0edb090 R08: 0000200000000600 R09: 0000000000000000 [ 245.825899][ T9544] R10: 0000000000008004 R11: 0000000000000246 R12: 0000000000000002 [ 245.825907][ T9544] R13: 0000000000000000 R14: 00007f5eb01b5fa0 R15: 00007ffc81c747b8 [ 245.825928][ T9544] [ 246.107696][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.313972][ T9557] random: crng reseeded on system resumption [ 246.525146][ T890] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 246.687636][ T890] usb 6-1: Using ep0 maxpacket: 32 [ 246.695132][ T890] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 246.704161][ T890] usb 6-1: config 0 has no interface number 0 [ 246.711241][ T890] usb 6-1: config 0 interface 184 has no altsetting 0 [ 246.737366][ T890] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 246.751153][ T890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.766461][ T890] usb 6-1: Product: syz [ 246.771565][ T890] usb 6-1: Manufacturer: syz [ 246.777634][ T890] usb 6-1: SerialNumber: syz [ 246.784965][ T890] usb 6-1: config 0 descriptor?? [ 246.792574][ T890] smsc75xx v1.0.0 [ 246.802643][ T890] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 246.824876][ T890] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -22 [ 246.879976][ T9567] input: syz1 as /devices/virtual/input/input23 [ 247.086113][ T9573] Context (ID=0x10) not attached to queue pair (handle=0xffffffff:0x3) [ 247.335638][ T7068] usb 6-1: USB disconnect, device number 12 [ 247.525165][ T5923] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 247.681102][ T5923] usb 5-1: unable to get BOS descriptor or descriptor too short [ 247.691296][ T5923] usb 5-1: not running at top speed; connect to a high speed hub [ 247.700683][ T5923] usb 5-1: config 3 has an invalid interface number: 51 but max is 0 [ 247.709242][ T5923] usb 5-1: config 3 has no interface number 0 [ 247.715757][ T5923] usb 5-1: config 3 interface 51 has no altsetting 0 [ 247.725801][ T5923] usb 5-1: New USB device found, idVendor=061d, idProduct=c120, bcdDevice=59.b2 [ 247.738922][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.747328][ T5923] usb 5-1: Product: syz [ 247.754357][ T5923] usb 5-1: Manufacturer: syz [ 247.761466][ T5923] usb 5-1: SerialNumber: syz [ 247.958923][ T9596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1197'. [ 248.001683][ T5923] quatech2 5-1:3.51: Quatech 2nd gen USB to Serial Driver converter detected [ 248.024483][ T5923] usb 5-1: qt2_attach - failed to power on unit: -71 [ 248.032933][ T5923] quatech2 5-1:3.51: probe with driver quatech2 failed with error -71 [ 248.046503][ T5923] usb 5-1: USB disconnect, device number 28 [ 248.086091][ T9598] Invalid logical block size (2097152) [ 248.257194][ T9604] netlink: 140 bytes leftover after parsing attributes in process `syz.5.1201'. [ 248.815946][ T890] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 248.977177][ T890] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.988162][ T890] usb 6-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.998203][ T890] usb 6-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 249.011120][ T890] usb 6-1: config 0 interface 0 has no altsetting 0 [ 249.017865][ T890] usb 6-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 249.027985][ T890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.039597][ T890] usb 6-1: config 0 descriptor?? [ 249.454454][ T890] hid_parser_main: 203 callbacks suppressed [ 249.454476][ T890] logitech 0003:046D:C294.0009: unknown main item tag 0x0 [ 249.468032][ T890] logitech 0003:046D:C294.0009: unknown main item tag 0x0 [ 249.475473][ T890] logitech 0003:046D:C294.0009: unknown main item tag 0x0 [ 249.482719][ T890] logitech 0003:046D:C294.0009: unknown main item tag 0x0 [ 249.490177][ T890] logitech 0003:046D:C294.0009: unknown main item tag 0x0 [ 249.497513][ T890] logitech 0003:046D:C294.0009: unknown main item tag 0x0 [ 249.504672][ T890] logitech 0003:046D:C294.0009: unknown main item tag 0x0 [ 249.515651][ T890] logitech 0003:046D:C294.0009: hidraw0: USB HID v0.03 Device [HID 046d:c294] on usb-dummy_hcd.5-1/input0 [ 249.527226][ T890] logitech 0003:046D:C294.0009: no inputs found [ 249.683289][ T890] usb 6-1: USB disconnect, device number 13 [ 250.099446][ T9643] netlink: 'syz.4.1217': attribute type 1 has an invalid length. [ 250.218703][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1219'. [ 250.229220][ T9647] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1219'. [ 250.239105][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1219'. [ 250.352634][ T9651] wg0 speed is unknown, defaulting to 1000 [ 250.363250][ T9651] wg0 speed is unknown, defaulting to 1000 [ 250.370753][ T9651] wg0 speed is unknown, defaulting to 1000 [ 250.381880][ T9651] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 250.395289][ T9651] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 250.427912][ T9651] wg0 speed is unknown, defaulting to 1000 [ 250.435675][ T9651] wg0 speed is unknown, defaulting to 1000 [ 250.443263][ T9651] wg0 speed is unknown, defaulting to 1000 [ 250.450783][ T9651] wg0 speed is unknown, defaulting to 1000 [ 250.459256][ T9651] wg0 speed is unknown, defaulting to 1000 [ 250.896177][ T5878] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 250.963817][ T9668] netlink: 'syz.4.1229': attribute type 3 has an invalid length. [ 250.973655][ T9668] netlink: 'syz.4.1229': attribute type 4 has an invalid length. [ 250.981933][ T9668] netlink: 'syz.4.1229': attribute type 5 has an invalid length. [ 250.990110][ T9668] netlink: 'syz.4.1229': attribute type 6 has an invalid length. [ 250.998094][ T9668] netlink: 'syz.4.1229': attribute type 7 has an invalid length. [ 251.006987][ T9668] netlink: 'syz.4.1229': attribute type 7 has an invalid length. [ 251.015332][ T9668] netlink: 12902 bytes leftover after parsing attributes in process `syz.4.1229'. [ 251.025384][ T9669] /dev/rnullb0: Can't open blockdev [ 251.049898][ T5878] usb 6-1: unable to get BOS descriptor or descriptor too short [ 251.066111][ T5878] usb 6-1: not running at top speed; connect to a high speed hub [ 251.093431][ T5878] usb 6-1: config 2 has an invalid interface number: 139 but max is 0 [ 251.101716][ T5878] usb 6-1: config 2 has no interface number 0 [ 251.115416][ T5878] usb 6-1: config 2 interface 139 has no altsetting 0 [ 251.139787][ T5878] usb 6-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=a8.ed [ 251.151879][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.170591][ T5878] usb 6-1: Product: syz [ 251.174777][ T5878] usb 6-1: Manufacturer: syz [ 251.188235][ T5878] usb 6-1: SerialNumber: syz [ 251.389171][ T9676] binder: 9675:9676 ioctl c0306201 2000000001c0 returned -22 [ 251.401164][ T9677] binder: 9675:9677 ioctl c0306201 2000000001c0 returned -22 [ 251.429122][ T9662] netlink: 'syz.5.1226': attribute type 4 has an invalid length. [ 252.801202][ T9703] binder: 9702:9703 ioctl ae41 2 returned -22 [ 252.807894][ T9703] binder: 9702:9703 ioctl 89f3 200000000800 returned -22 [ 253.026254][ T9709] /dev/rnullb0: Can't open blockdev [ 253.696519][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1252'. [ 253.701734][ T5878] peak_usb 6-1:2.139: probe with driver peak_usb failed with error 139 [ 253.729411][ T5878] usb 6-1: USB disconnect, device number 14 [ 253.889454][ T9736] FAULT_INJECTION: forcing a failure. [ 253.889454][ T9736] name failslab, interval 1, probability 0, space 0, times 0 [ 253.927067][ T9736] CPU: 1 UID: 0 PID: 9736 Comm: syz.4.1254 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 253.927092][ T9736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 253.927103][ T9736] Call Trace: [ 253.927109][ T9736] [ 253.927116][ T9736] dump_stack_lvl+0x189/0x250 [ 253.927141][ T9736] ? __pfx____ratelimit+0x10/0x10 [ 253.927162][ T9736] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.927180][ T9736] ? __pfx__printk+0x10/0x10 [ 253.927205][ T9736] ? __pfx___might_resched+0x10/0x10 [ 253.927220][ T9736] ? fs_reclaim_acquire+0x7d/0x100 [ 253.927244][ T9736] should_fail_ex+0x414/0x560 [ 253.927274][ T9736] should_failslab+0xa8/0x100 [ 253.927294][ T9736] __kmalloc_noprof+0xcb/0x4f0 [ 253.927313][ T9736] ? __list_lru_init+0xba/0x5c0 [ 253.927340][ T9736] __list_lru_init+0xba/0x5c0 [ 253.927371][ T9736] alloc_super+0x819/0x970 [ 253.927405][ T9736] ? __pfx_super_s_dev_test+0x10/0x10 [ 253.927426][ T9736] sget_fc+0x329/0xa40 [ 253.927444][ T9736] ? __pfx_super_s_dev_set+0x10/0x10 [ 253.927466][ T9736] get_tree_bdev_flags+0x203/0x4d0 [ 253.927487][ T9736] ? __pfx_xfs_fs_fill_super+0x10/0x10 [ 253.927509][ T9736] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 253.927540][ T9736] vfs_get_tree+0x8f/0x2b0 [ 253.927564][ T9736] do_new_mount+0x24a/0xa40 [ 253.927595][ T9736] __se_sys_mount+0x317/0x410 [ 253.927625][ T9736] ? __pfx___se_sys_mount+0x10/0x10 [ 253.927655][ T9736] ? do_syscall_64+0xbe/0x3b0 [ 253.927676][ T9736] ? __x64_sys_mount+0x20/0xc0 [ 253.927701][ T9736] do_syscall_64+0xfa/0x3b0 [ 253.927722][ T9736] ? lockdep_hardirqs_on+0x9c/0x150 [ 253.927742][ T9736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.927759][ T9736] ? clear_bhb_loop+0x60/0xb0 [ 253.927780][ T9736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.927797][ T9736] RIP: 0033:0x7fba84d8e929 [ 253.927812][ T9736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.927827][ T9736] RSP: 002b:00007fba85b87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 253.927846][ T9736] RAX: ffffffffffffffda RBX: 00007fba84fb5fa0 RCX: 00007fba84d8e929 [ 253.927859][ T9736] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 253.927871][ T9736] RBP: 00007fba85b87090 R08: 0000000000000000 R09: 0000000000000000 [ 253.927882][ T9736] R10: 0000000001200051 R11: 0000000000000246 R12: 0000000000000002 [ 253.927893][ T9736] R13: 0000000000000001 R14: 00007fba84fb5fa0 R15: 00007ffd13605f58 [ 253.927920][ T9736] [ 254.619816][ T9752] Mount JFS Failure: -22 [ 254.632189][ T9753] Mount JFS Failure: -22 [ 254.653957][ T9751] FAULT_INJECTION: forcing a failure. [ 254.653957][ T9751] name failslab, interval 1, probability 0, space 0, times 0 [ 254.678745][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1261'. [ 254.687215][ T9751] CPU: 1 UID: 0 PID: 9751 Comm: syz.4.1259 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 254.687247][ T9751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 254.687260][ T9751] Call Trace: [ 254.687271][ T9751] [ 254.687280][ T9751] dump_stack_lvl+0x189/0x250 [ 254.687311][ T9751] ? __pfx____ratelimit+0x10/0x10 [ 254.687340][ T9751] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.687364][ T9751] ? __pfx__printk+0x10/0x10 [ 254.687397][ T9751] ? __pfx___might_resched+0x10/0x10 [ 254.687417][ T9751] ? fs_reclaim_acquire+0x7d/0x100 [ 254.687452][ T9751] should_fail_ex+0x414/0x560 [ 254.687492][ T9751] ? pfifo_fast_init+0x10d/0x6b0 [ 254.687519][ T9751] should_failslab+0xa8/0x100 [ 254.687549][ T9751] __kvmalloc_node_noprof+0x161/0x5f0 [ 254.687584][ T9751] ? pfifo_fast_init+0x10d/0x6b0 [ 254.687616][ T9751] pfifo_fast_init+0x10d/0x6b0 [ 254.687644][ T9751] qdisc_create_dflt+0x138/0x4e0 [ 254.687674][ T9751] dev_activate+0x378/0x1150 [ 254.687713][ T9751] __dev_open+0x69c/0x880 [ 254.687744][ T9751] ? __pfx___dev_open+0x10/0x10 [ 254.687780][ T9751] __dev_change_flags+0x1ea/0x6d0 [ 254.687811][ T9751] ? __lock_acquire+0xab9/0xd20 [ 254.687842][ T9751] ? __pfx___dev_change_flags+0x10/0x10 [ 254.687868][ T9751] ? devinet_ioctl+0x323/0x1b50 [ 254.687900][ T9751] ? __pfx___mutex_lock+0x10/0x10 [ 254.687931][ T9751] netif_change_flags+0x88/0x1a0 [ 254.687966][ T9751] dev_change_flags+0x130/0x260 [ 254.687999][ T9751] devinet_ioctl+0xbb4/0x1b50 [ 254.688041][ T9751] ? __pfx_devinet_ioctl+0x10/0x10 [ 254.688075][ T9751] ? get_user_ifreq+0x12c/0x180 [ 254.688097][ T9751] inet_ioctl+0x3c0/0x4c0 [ 254.688123][ T9751] ? __pfx_inet_ioctl+0x10/0x10 [ 254.688172][ T9751] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 254.688216][ T9751] ? packet_ioctl+0x254/0x350 [ 254.688253][ T9751] sock_do_ioctl+0xdc/0x300 [ 254.688283][ T9751] ? __pfx_sock_do_ioctl+0x10/0x10 [ 254.688304][ T9751] ? __lock_acquire+0xab9/0xd20 [ 254.688354][ T9751] sock_ioctl+0x576/0x790 [ 254.688380][ T9751] ? __pfx_sock_ioctl+0x10/0x10 [ 254.688405][ T9751] ? __fget_files+0x2a/0x420 [ 254.688434][ T9751] ? __fget_files+0x3a0/0x420 [ 254.688464][ T9751] ? __fget_files+0x2a/0x420 [ 254.688498][ T9751] ? bpf_lsm_file_ioctl+0x9/0x20 [ 254.688520][ T9751] ? __pfx_sock_ioctl+0x10/0x10 [ 254.688543][ T9751] __se_sys_ioctl+0xfc/0x170 [ 254.688580][ T9751] do_syscall_64+0xfa/0x3b0 [ 254.688607][ T9751] ? lockdep_hardirqs_on+0x9c/0x150 [ 254.688634][ T9751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.688656][ T9751] ? clear_bhb_loop+0x60/0xb0 [ 254.688684][ T9751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.688705][ T9751] RIP: 0033:0x7fba84d8e929 [ 254.688726][ T9751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.688745][ T9751] RSP: 002b:00007fba85b87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.688769][ T9751] RAX: ffffffffffffffda RBX: 00007fba84fb5fa0 RCX: 00007fba84d8e929 [ 254.688784][ T9751] RDX: 0000200000000180 RSI: 0000000000008914 RDI: 0000000000000004 [ 254.688799][ T9751] RBP: 00007fba85b87090 R08: 0000000000000000 R09: 0000000000000000 [ 254.688813][ T9751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.688826][ T9751] R13: 0000000000000000 R14: 00007fba84fb5fa0 R15: 00007ffd13605f58 [ 254.688860][ T9751] [ 255.022875][ T9751] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 255.189692][ T9762] FAULT_INJECTION: forcing a failure. [ 255.189692][ T9762] name failslab, interval 1, probability 0, space 0, times 0 [ 255.203581][ T9762] CPU: 1 UID: 0 PID: 9762 Comm: syz.0.1264 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 255.203604][ T9762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.203615][ T9762] Call Trace: [ 255.203622][ T9762] [ 255.203630][ T9762] dump_stack_lvl+0x189/0x250 [ 255.203654][ T9762] ? __pfx____ratelimit+0x10/0x10 [ 255.203677][ T9762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.203696][ T9762] ? __pfx__printk+0x10/0x10 [ 255.203721][ T9762] ? __pfx___might_resched+0x10/0x10 [ 255.203743][ T9762] should_fail_ex+0x414/0x560 [ 255.203774][ T9762] should_failslab+0xa8/0x100 [ 255.203797][ T9762] kmem_cache_alloc_noprof+0x73/0x3c0 [ 255.203816][ T9762] ? mas_alloc_nodes+0x2e9/0x8e0 [ 255.203840][ T9762] mas_alloc_nodes+0x2e9/0x8e0 [ 255.203869][ T9762] mas_preallocate+0x3ad/0x6f0 [ 255.203893][ T9762] ? __pfx_mas_preallocate+0x10/0x10 [ 255.203924][ T9762] ? __mas_set_range+0x12f/0x3c0 [ 255.203946][ T9762] __split_vma+0x2fa/0xa00 [ 255.203971][ T9762] ? __pfx___split_vma+0x10/0x10 [ 255.203997][ T9762] ? mas_find+0xb0e/0xd30 [ 255.204022][ T9762] vms_gather_munmap_vmas+0x4ab/0x12b0 [ 255.204067][ T9762] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 255.204102][ T9762] ? mas_find+0xa7d/0xd30 [ 255.204127][ T9762] mmap_region+0x724/0x20c0 [ 255.204142][ T9762] ? __lock_acquire+0xab9/0xd20 [ 255.204179][ T9762] ? __lock_acquire+0xab9/0xd20 [ 255.204206][ T9762] ? __pfx_mmap_region+0x10/0x10 [ 255.204287][ T9762] ? aa_file_perm+0x13e/0x11b0 [ 255.204309][ T9762] ? __pfx_arch_get_unmapped_area_topdown+0x10/0x10 [ 255.204327][ T9762] ? aa_file_perm+0x13e/0x11b0 [ 255.204356][ T9762] ? cap_mmap_addr+0xb0/0x100 [ 255.204382][ T9762] ? bpf_lsm_mmap_addr+0x9/0x20 [ 255.204397][ T9762] ? security_mmap_addr+0x71/0x270 [ 255.204424][ T9762] ? shmem_mapping+0xd/0x50 [ 255.204448][ T9762] ? memfd_check_seals_mmap+0xc5/0x200 [ 255.204467][ T9762] do_mmap+0xc45/0x10d0 [ 255.204497][ T9762] ? __pfx_do_mmap+0x10/0x10 [ 255.204512][ T9762] ? down_write_killable+0x178/0x230 [ 255.204536][ T9762] ? end_current_label_crit_section+0x152/0x180 [ 255.204557][ T9762] ? __pfx_down_write_killable+0x10/0x10 [ 255.204590][ T9762] vm_mmap_pgoff+0x31b/0x4c0 [ 255.204625][ T9762] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 255.204653][ T9762] ? __fget_files+0x2a/0x420 [ 255.204681][ T9762] ? __fget_files+0x3a0/0x420 [ 255.204704][ T9762] ? __fget_files+0x2a/0x420 [ 255.204731][ T9762] ksys_mmap_pgoff+0x51f/0x760 [ 255.204754][ T9762] do_syscall_64+0xfa/0x3b0 [ 255.204774][ T9762] ? lockdep_hardirqs_on+0x9c/0x150 [ 255.204793][ T9762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.204809][ T9762] ? clear_bhb_loop+0x60/0xb0 [ 255.204830][ T9762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.204846][ T9762] RIP: 0033:0x7fac05b8e929 [ 255.204860][ T9762] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.204875][ T9762] RSP: 002b:00007fac06a6a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 255.204893][ T9762] RAX: ffffffffffffffda RBX: 00007fac05db5fa0 RCX: 00007fac05b8e929 [ 255.204905][ T9762] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 255.204916][ T9762] RBP: 00007fac06a6a090 R08: 0000000000000003 R09: 0000000000000000 [ 255.204926][ T9762] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 255.204935][ T9762] R13: 0000000000000000 R14: 00007fac05db5fa0 R15: 00007fffe27540e8 [ 255.204962][ T9762] [ 255.545979][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.686940][ T5923] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 255.855893][ T5923] usb 6-1: Using ep0 maxpacket: 16 [ 255.863611][ T5923] usb 6-1: unable to get BOS descriptor or descriptor too short [ 255.864671][ T5923] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 255.864704][ T5923] usb 6-1: can't read configurations, error -71 [ 257.049760][ T9801] netlink: 'syz.2.1280': attribute type 5 has an invalid length. [ 257.057749][ T9801] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1280'. [ 257.160884][ T5156] Bluetooth: hci0: link tx timeout [ 257.166545][ T5156] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 257.219837][ T9807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1283'. [ 257.284410][ T9810] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 257.775032][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1289'. [ 258.050259][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1294'. [ 258.775303][ T10] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 258.915171][ T10] usb 6-1: device descriptor read/64, error -71 [ 259.165495][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 259.225268][ T5156] Bluetooth: hci0: command 0x0406 tx timeout [ 259.300743][ T9880] syzkaller1: entered promiscuous mode [ 259.306469][ T9880] syzkaller1: entered allmulticast mode [ 259.318045][ T10] usb 6-1: device descriptor read/64, error -71 [ 260.056613][ T10] usb usb6-port1: attempt power cycle [ 260.111116][ T9884] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1313'. [ 260.174046][ T9888] FAULT_INJECTION: forcing a failure. [ 260.174046][ T9888] name failslab, interval 1, probability 0, space 0, times 0 [ 260.188699][ T9888] CPU: 0 UID: 0 PID: 9888 Comm: syz.4.1315 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 260.188722][ T9888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 260.188732][ T9888] Call Trace: [ 260.188740][ T9888] [ 260.188748][ T9888] dump_stack_lvl+0x189/0x250 [ 260.188772][ T9888] ? __pfx____ratelimit+0x10/0x10 [ 260.188795][ T9888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.188815][ T9888] ? __pfx__printk+0x10/0x10 [ 260.188840][ T9888] ? __pfx___might_resched+0x10/0x10 [ 260.188856][ T9888] ? fs_reclaim_acquire+0x7d/0x100 [ 260.188883][ T9888] should_fail_ex+0x414/0x560 [ 260.188914][ T9888] should_failslab+0xa8/0x100 [ 260.188937][ T9888] __kmalloc_noprof+0xcb/0x4f0 [ 260.188954][ T9888] ? kfree+0x4d/0x440 [ 260.188969][ T9888] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 260.188994][ T9888] tomoyo_realpath_from_path+0xe3/0x5d0 [ 260.189026][ T9888] tomoyo_check_open_permission+0x1c1/0x3b0 [ 260.189053][ T9888] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 260.189088][ T9888] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 260.189112][ T9888] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 260.189171][ T9888] ? tomoyo_file_open+0x165/0x220 [ 260.189197][ T9888] security_file_open+0xb1/0x270 [ 260.189223][ T9888] do_dentry_open+0x35e/0x1970 [ 260.189251][ T9888] ? devcgroup_check_permission+0x86d/0x980 [ 260.189284][ T9888] vfs_open+0x3b/0x340 [ 260.189307][ T9888] ? path_openat+0x2ecd/0x3830 [ 260.189328][ T9888] path_openat+0x2ee5/0x3830 [ 260.189345][ T9888] ? arch_stack_walk+0xfc/0x150 [ 260.189395][ T9888] ? __pfx_path_openat+0x10/0x10 [ 260.189412][ T9888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.189448][ T9888] do_filp_open+0x1fa/0x410 [ 260.189465][ T9888] ? __lock_acquire+0xab9/0xd20 [ 260.189493][ T9888] ? __pfx_do_filp_open+0x10/0x10 [ 260.189532][ T9888] ? _raw_spin_unlock+0x28/0x50 [ 260.189550][ T9888] ? alloc_fd+0x64c/0x6c0 [ 260.189584][ T9888] do_sys_openat2+0x121/0x1c0 [ 260.189603][ T9888] ? __pfx_do_sys_openat2+0x10/0x10 [ 260.189620][ T9888] ? exc_page_fault+0x76/0xf0 [ 260.189644][ T9888] ? do_user_addr_fault+0xc8a/0x1390 [ 260.189671][ T9888] __x64_sys_openat+0x138/0x170 [ 260.189693][ T9888] do_syscall_64+0xfa/0x3b0 [ 260.189714][ T9888] ? lockdep_hardirqs_on+0x9c/0x150 [ 260.189735][ T9888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.189752][ T9888] ? clear_bhb_loop+0x60/0xb0 [ 260.189773][ T9888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.189790][ T9888] RIP: 0033:0x7fba84d8d290 [ 260.189805][ T9888] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 260.189820][ T9888] RSP: 002b:00007fba85b86b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 260.189839][ T9888] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fba84d8d290 [ 260.189851][ T9888] RDX: 0000000000000000 RSI: 00007fba85b86c10 RDI: 00000000ffffff9c [ 260.189862][ T9888] RBP: 00007fba85b86c10 R08: 0000000000000000 R09: 007265636e657571 [ 260.189873][ T9888] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 260.189883][ T9888] R13: 0000000000000000 R14: 00007fba84fb5fa0 R15: 00007ffd13605f58 [ 260.189910][ T9888] [ 260.189918][ T9888] ERROR: Out of memory at tomoyo_realpath_from_path. [ 260.561379][ T9892] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1317'. [ 260.575257][ T10] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 260.602587][ T10] usb 6-1: device descriptor read/8, error -71 [ 260.701818][ T9896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 260.720145][ T9900] exFAT-fs (rnullb0): invalid boot record signature [ 260.740732][ T9900] exFAT-fs (rnullb0): failed to read boot sector [ 260.749346][ T9900] exFAT-fs (rnullb0): failed to recognize exfat type [ 260.875118][ T10] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 260.907086][ T10] usb 6-1: device descriptor read/8, error -71 [ 261.025501][ T10] usb usb6-port1: unable to enumerate USB device [ 261.167897][ T9923] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1329'. [ 261.672382][ T9943] netlink: 'syz.2.1336': attribute type 4 has an invalid length. [ 262.009434][ T9953] Invalid logical block size (16777472) [ 262.788294][ T9978] program syz.5.1351 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.831070][ T9980] binder: 9979:9980 unknown command 0 [ 262.840116][ T9980] binder: 9979:9980 ioctl c0306201 200000000540 returned -22 [ 262.937119][ T9984] FAULT_INJECTION: forcing a failure. [ 262.937119][ T9984] name failslab, interval 1, probability 0, space 0, times 0 [ 262.952039][ T9984] CPU: 1 UID: 0 PID: 9984 Comm: syz.5.1354 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 262.952062][ T9984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 262.952073][ T9984] Call Trace: [ 262.952079][ T9984] [ 262.952086][ T9984] dump_stack_lvl+0x189/0x250 [ 262.952111][ T9984] ? __pfx____ratelimit+0x10/0x10 [ 262.952133][ T9984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.952152][ T9984] ? __pfx__printk+0x10/0x10 [ 262.952177][ T9984] ? __pfx___might_resched+0x10/0x10 [ 262.952194][ T9984] ? fs_reclaim_acquire+0x7d/0x100 [ 262.952220][ T9984] should_fail_ex+0x414/0x560 [ 262.952251][ T9984] should_failslab+0xa8/0x100 [ 262.952273][ T9984] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 262.952294][ T9984] ? __alloc_skb+0x112/0x2d0 [ 262.952322][ T9984] __alloc_skb+0x112/0x2d0 [ 262.952349][ T9984] netlink_ack+0x146/0xa50 [ 262.952369][ T9984] ? __pfx_genl_rcv_msg+0x10/0x10 [ 262.952401][ T9984] ? ref_tracker_free+0x63a/0x7d0 [ 262.952418][ T9984] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 262.952438][ T9984] ? __pfx_nl80211_post_doit+0x10/0x10 [ 262.952459][ T9984] ? __pfx_ref_tracker_free+0x10/0x10 [ 262.952490][ T9984] netlink_rcv_skb+0x28c/0x470 [ 262.952517][ T9984] ? __pfx_genl_rcv_msg+0x10/0x10 [ 262.952538][ T9984] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 262.952584][ T9984] ? down_read+0x1ad/0x2e0 [ 262.952614][ T9984] genl_rcv+0x28/0x40 [ 262.952631][ T9984] netlink_unicast+0x758/0x8d0 [ 262.952667][ T9984] netlink_sendmsg+0x805/0xb30 [ 262.952704][ T9984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.952735][ T9984] ? aa_sock_msg_perm+0xf1/0x1d0 [ 262.952759][ T9984] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 262.952788][ T9984] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.952816][ T9984] __sock_sendmsg+0x21c/0x270 [ 262.952849][ T9984] ____sys_sendmsg+0x505/0x830 [ 262.952886][ T9984] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.952927][ T9984] ? import_iovec+0x74/0xa0 [ 262.952962][ T9984] ___sys_sendmsg+0x21f/0x2a0 [ 262.952995][ T9984] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.953065][ T9984] ? __fget_files+0x2a/0x420 [ 262.953092][ T9984] ? __fget_files+0x3a0/0x420 [ 262.953132][ T9984] __x64_sys_sendmsg+0x19b/0x260 [ 262.953166][ T9984] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 262.953208][ T9984] ? __pfx_ksys_write+0x10/0x10 [ 262.953238][ T9984] ? do_syscall_64+0xbe/0x3b0 [ 262.953268][ T9984] do_syscall_64+0xfa/0x3b0 [ 262.953293][ T9984] ? lockdep_hardirqs_on+0x9c/0x150 [ 262.953316][ T9984] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.953337][ T9984] ? clear_bhb_loop+0x60/0xb0 [ 262.953362][ T9984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.953382][ T9984] RIP: 0033:0x7fc623b8e929 [ 262.953399][ T9984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.953416][ T9984] RSP: 002b:00007fc624a23038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 262.953438][ T9984] RAX: ffffffffffffffda RBX: 00007fc623db5fa0 RCX: 00007fc623b8e929 [ 262.953453][ T9984] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 262.953466][ T9984] RBP: 00007fc624a23090 R08: 0000000000000000 R09: 0000000000000000 [ 262.953479][ T9984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.953491][ T9984] R13: 0000000000000000 R14: 00007fc623db5fa0 R15: 00007ffe3dd32ce8 [ 262.953523][ T9984] [ 263.326004][ T9988] overlay: ./file0 is not a directory [ 263.353424][ T9988] overlayfs: missing 'lowerdir' [ 263.364226][ T9988] qnx4: no qnx4 filesystem (no root dir). [ 263.664908][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 263.665504][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 263.665523][T10005] vxfs: can't find superblock. [ 263.667503][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 263.667662][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 263.667677][T10005] vxfs: can't find superblock. [ 263.668663][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 263.668823][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 263.668838][T10005] vxfs: can't find superblock. [ 263.669799][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 263.669955][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 263.669970][T10005] vxfs: can't find superblock. [ 263.670913][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 263.671074][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 263.671089][T10005] vxfs: can't find superblock. [ 263.672749][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 263.672934][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 263.672952][T10005] vxfs: can't find superblock. [ 263.674122][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 263.674280][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 263.674296][T10005] vxfs: can't find superblock. [ 263.678268][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 263.678429][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 263.678443][T10005] vxfs: can't find superblock. [ 263.681288][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 263.681444][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 263.681458][T10005] vxfs: can't find superblock. [ 263.683942][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 263.684171][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 263.684187][T10005] vxfs: can't find superblock. [ 263.685315][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 263.685475][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 263.685498][T10005] vxfs: can't find superblock. [ 263.686456][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 263.686625][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 263.686640][T10005] vxfs: can't find superblock. [ 263.687596][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 263.687753][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 263.687767][T10005] vxfs: can't find superblock. [ 263.688835][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 263.688992][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 263.689007][T10005] vxfs: can't find superblock. [ 263.689950][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 263.690115][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 263.690130][T10005] vxfs: can't find superblock. [ 263.691084][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 263.691240][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 263.691254][T10005] vxfs: can't find superblock. [ 263.692186][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 263.692340][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 263.692355][T10005] vxfs: can't find superblock. [ 263.693528][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 263.993161][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 263.999237][T10005] vxfs: can't find superblock. [ 264.008718][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 264.016486][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 264.022506][T10005] vxfs: can't find superblock. [ 264.033174][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 264.040230][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 264.048815][T10005] vxfs: can't find superblock. [ 264.054744][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 264.061675][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 264.070234][T10005] vxfs: can't find superblock. [ 264.081566][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 264.088021][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 264.094015][T10005] vxfs: can't find superblock. [ 264.100655][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 264.107223][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 264.113223][T10005] vxfs: can't find superblock. [ 264.116626][ T10] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 264.119480][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 264.131797][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 264.138870][T10005] vxfs: can't find superblock. [ 264.144666][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 264.151785][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 264.161366][T10005] vxfs: can't find superblock. [ 264.168613][T10010] FAULT_INJECTION: forcing a failure. [ 264.168613][T10010] name failslab, interval 1, probability 0, space 0, times 0 [ 264.180797][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 264.187383][T10010] CPU: 1 UID: 0 PID: 10010 Comm: syz.4.1366 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 264.187406][T10010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 264.187417][T10010] Call Trace: [ 264.187424][T10010] [ 264.187432][T10010] dump_stack_lvl+0x189/0x250 [ 264.187456][T10010] ? __pfx____ratelimit+0x10/0x10 [ 264.187479][T10010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.187498][T10010] ? __pfx__printk+0x10/0x10 [ 264.187524][T10010] ? __pfx___might_resched+0x10/0x10 [ 264.187541][T10010] ? fs_reclaim_acquire+0x7d/0x100 [ 264.187569][T10010] should_fail_ex+0x414/0x560 [ 264.187601][T10010] should_failslab+0xa8/0x100 [ 264.187624][T10010] __kmalloc_cache_noprof+0x70/0x3d0 [ 264.187643][T10010] ? kobject_create_and_add+0x5b/0x240 [ 264.187678][T10010] kobject_create_and_add+0x5b/0x240 [ 264.187702][T10010] ? __raw_spin_lock_init+0x45/0x100 [ 264.187727][T10010] iommu_group_alloc+0x23d/0x3a0 [ 264.187750][T10010] __iommu_probe_device+0x5b3/0x11f0 [ 264.187779][T10010] iommu_bus_notifier+0x87/0x2c0 [ 264.187801][T10010] notifier_call_chain+0x1b3/0x3e0 [ 264.187827][T10010] blocking_notifier_call_chain+0x6a/0x90 [ 264.187848][T10010] bus_notify+0x143/0x180 [ 264.187879][T10010] device_add+0x54d/0xb50 [ 264.187900][T10010] iommufd_test+0x2f95/0x5170 [ 264.187935][T10010] ? __pfx_iommufd_test+0x10/0x10 [ 264.187960][T10010] ? __lock_acquire+0xab9/0xd20 [ 264.187995][T10010] ? __might_fault+0xb0/0x130 [ 264.188035][T10010] iommufd_fops_ioctl+0x45e/0x580 [ 264.188058][T10010] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 264.188081][T10010] ? __fget_files+0x2a/0x420 [ 264.188110][T10010] ? __fget_files+0x2a/0x420 [ 264.188137][T10010] ? bpf_lsm_file_ioctl+0x9/0x20 [ 264.188154][T10010] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 264.188171][T10010] __se_sys_ioctl+0xfc/0x170 [ 264.188194][T10010] do_syscall_64+0xfa/0x3b0 [ 264.188215][T10010] ? lockdep_hardirqs_on+0x9c/0x150 [ 264.188236][T10010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.188254][T10010] ? clear_bhb_loop+0x60/0xb0 [ 264.188276][T10010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.188293][T10010] RIP: 0033:0x7fba84d8e929 [ 264.188308][T10010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.188323][T10010] RSP: 002b:00007fba85b87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 264.188342][T10010] RAX: ffffffffffffffda RBX: 00007fba84fb5fa0 RCX: 00007fba84d8e929 [ 264.188355][T10010] RDX: 00002000000002c0 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 264.188366][T10010] RBP: 00007fba85b87090 R08: 0000000000000000 R09: 0000000000000000 [ 264.188377][T10010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 264.188387][T10010] R13: 0000000000000000 R14: 00007fba84fb5fa0 R15: 00007ffd13605f58 [ 264.188413][T10010] [ 264.193628][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 264.424863][ C0] vkms_vblank_simulate: vblank timer overrun [ 264.494924][T10005] vxfs: can't find superblock. [ 264.501328][T10005] vxfs: WRONG superblock magic 00000000 at 1 [ 264.507656][T10005] vxfs: WRONG superblock magic 00000000 at 8 [ 264.513668][T10005] vxfs: can't find superblock. [ 264.566935][ T10] usb 6-1: config 0 has no interfaces? [ 264.578323][ T10] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 264.592821][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.601107][ T10] usb 6-1: Product: syz [ 264.605462][ T10] usb 6-1: Manufacturer: syz [ 264.610085][ T10] usb 6-1: SerialNumber: syz [ 264.640661][ T10] r8152-cfgselector 6-1: Unknown version 0x0000 [ 264.653159][ T10] r8152-cfgselector 6-1: config 0 descriptor?? [ 265.174779][T10030] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 265.202425][T10030] overlay: filesystem on ./bus not supported as upperdir [ 266.817919][T10007] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 266.826901][T10007] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 266.833343][T10007] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 266.840585][T10007] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 266.848169][T10007] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 266.856187][T10007] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 266.862148][T10007] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 266.913234][ T10] r8152-cfgselector 6-1: USB disconnect, device number 21 [ 266.922992][T10031] bond0: (slave syz_tun): Releasing backup interface [ 267.083422][ T3020] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.115169][ T43] usb 5-1: new low-speed USB device number 29 using dummy_hcd [ 267.211783][ T3020] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.265440][ T43] usb 5-1: device descriptor read/64, error -71 [ 267.313704][ T3020] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.466475][ T3020] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.505322][ T43] usb 5-1: new low-speed USB device number 30 using dummy_hcd [ 267.651263][ T5156] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 267.655251][ T43] usb 5-1: device descriptor read/64, error -71 [ 267.669167][ T5156] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 267.680327][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 267.691503][ T5156] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 267.701748][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 267.777957][ T3020] bridge_slave_1: left allmulticast mode [ 267.784340][ T3020] bridge_slave_1: left promiscuous mode [ 267.785455][ T43] usb usb5-port1: attempt power cycle [ 267.790254][ T3020] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.810687][ T3020] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.892189][ T3020] bond_slave_0: left promiscuous mode [ 267.905514][ T3020] bond_slave_1: left promiscuous mode [ 267.977704][T10056] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 267.984410][T10056] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 268.031309][T10059] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 268.037905][T10059] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 268.058930][T10056] vhci_hcd vhci_hcd.0: Device attached [ 268.095715][T10059] vhci_hcd vhci_hcd.0: Device attached [ 268.126372][T10057] vhci_hcd: connection closed [ 268.140639][ T2965] vhci_hcd: stop threads [ 268.156972][ T2965] vhci_hcd: release socket [ 268.166415][ T2965] vhci_hcd: disconnect device [ 268.191921][T10060] vhci_hcd: connection closed [ 268.198112][ T2965] vhci_hcd: stop threads [ 268.211216][ T2965] vhci_hcd: release socket [ 268.218873][ T2965] vhci_hcd: disconnect device [ 268.240673][T10054] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 268.422170][ T3020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.438767][ T3020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.455642][ T3020] bond0 (unregistering): Released all slaves [ 268.503549][T10070] kernel profiling enabled (shift: 0) [ 268.536533][T10051] wg0 speed is unknown, defaulting to 1000 [ 268.878098][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 268.884164][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 268.890565][ T5156] Bluetooth: hci3: command 0x0c1a tx timeout [ 269.125837][ T3020] hsr_slave_0: left promiscuous mode [ 269.182935][ T3020] hsr_slave_1: left promiscuous mode [ 269.209845][ T3020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.246659][ T3020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.269059][ T3020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.283732][ T3020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.354893][ T3020] veth1_macvtap: left promiscuous mode [ 269.378828][ T3020] veth0_macvtap: left promiscuous mode [ 269.394675][ T3020] veth1_vlan: left promiscuous mode [ 269.410819][ T3020] veth0_vlan: left promiscuous mode [ 269.481824][T10070] syz.5.1387: vmalloc error: size 703234048, failed to allocated page array size 1373504, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 269.527647][T10070] CPU: 0 UID: 0 PID: 10070 Comm: syz.5.1387 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 269.527671][T10070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 269.527683][T10070] Call Trace: [ 269.527691][T10070] [ 269.527698][T10070] dump_stack_lvl+0x189/0x250 [ 269.527726][T10070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 269.527747][T10070] ? __pfx__printk+0x10/0x10 [ 269.527768][T10070] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 269.527789][T10070] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 269.527811][T10070] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 269.527834][T10070] warn_alloc+0x214/0x310 [ 269.527864][T10070] ? __pfx_warn_alloc+0x10/0x10 [ 269.527895][T10070] ? __get_vm_area_node+0x28f/0x300 [ 269.527916][T10070] ? profile_init+0xb4/0x100 [ 269.527936][T10070] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 269.527981][T10070] ? policy_nodemask+0x27c/0x720 [ 269.528005][T10070] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 269.528027][T10070] ? alloc_pages_mpol+0x3cd/0x4a0 [ 269.528051][T10070] ? profile_init+0xb4/0x100 [ 269.528068][T10070] vzalloc_noprof+0xb2/0xf0 [ 269.528088][T10070] ? profile_init+0xb4/0x100 [ 269.528106][T10070] profile_init+0xb4/0x100 [ 269.528123][T10070] profiling_store+0x6c/0xf0 [ 269.528143][T10070] ? __pfx_sysfs_kf_write+0x10/0x10 [ 269.528165][T10070] kernfs_fop_write_iter+0x378/0x4f0 [ 269.528200][T10070] vfs_write+0x548/0xa90 [ 269.528226][T10070] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 269.528249][T10070] ? __pfx_vfs_write+0x10/0x10 [ 269.528280][T10070] ? __fget_files+0x2a/0x420 [ 269.528313][T10070] ksys_write+0x145/0x250 [ 269.528335][T10070] ? __pfx_ksys_write+0x10/0x10 [ 269.528352][T10070] ? rcu_is_watching+0x15/0xb0 [ 269.528375][T10070] ? do_syscall_64+0xbe/0x3b0 [ 269.528402][T10070] do_syscall_64+0xfa/0x3b0 [ 269.528422][T10070] ? lockdep_hardirqs_on+0x9c/0x150 [ 269.528442][T10070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.528460][T10070] ? clear_bhb_loop+0x60/0xb0 [ 269.528481][T10070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.528498][T10070] RIP: 0033:0x7fc623b8e929 [ 269.528514][T10070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.528529][T10070] RSP: 002b:00007fc624a23038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 269.528547][T10070] RAX: ffffffffffffffda RBX: 00007fc623db5fa0 RCX: 00007fc623b8e929 [ 269.528561][T10070] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000003 [ 269.528572][T10070] RBP: 00007fc623c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 269.528582][T10070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.528593][T10070] R13: 0000000000000000 R14: 00007fc623db5fa0 R15: 00007ffe3dd32ce8 [ 269.528621][T10070] [ 269.528636][T10070] Mem-Info: [ 269.757088][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.795222][ T5845] Bluetooth: hci1: command tx timeout [ 269.807656][T10070] active_anon:6262 inactive_anon:0 isolated_anon:0 [ 269.807656][T10070] active_file:13104 inactive_file:39937 isolated_file:0 [ 269.807656][T10070] unevictable:768 dirty:53 writeback:0 [ 269.807656][T10070] slab_reclaimable:11606 slab_unreclaimable:97372 [ 269.807656][T10070] mapped:25260 shmem:1387 pagetables:1389 [ 269.807656][T10070] sec_pagetables:0 bounce:0 [ 269.807656][T10070] kernel_misc_reclaimable:0 [ 269.807656][T10070] free:1293484 free_pcp:17388 free_cma:0 [ 269.870180][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.884054][T10070] Node 0 active_anon:25048kB inactive_anon:0kB active_file:52416kB inactive_file:159548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:101040kB dirty:212kB writeback:0kB shmem:4012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12260kB pagetables:5408kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 269.927071][T10070] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 269.956973][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.969346][T10070] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 269.998198][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.008971][T10070] lowmem_reserve[]: 0 2496 2498 2498 2498 [ 270.016279][T10070] Node 0 DMA32 free:1269808kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24700kB inactive_anon:0kB active_file:52416kB inactive_file:158220kB unevictable:1536kB writepending:212kB present:3129332kB managed:2556908kB mlocked:0kB bounce:0kB free_pcp:47336kB local_pcp:16624kB free_cma:0kB [ 270.048542][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.061719][T10070] lowmem_reserve[]: 0 0 1 1 1 [ 270.066509][T10070] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1328kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 270.095470][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.104998][T10070] lowmem_reserve[]: 0 0 0 0 0 [ 270.109834][T10070] Node 1 Normal free:3888768kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23168kB local_pcp:7968kB free_cma:0kB [ 270.141011][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.148464][T10070] lowmem_reserve[]: 0 0 0 0 0 [ 270.153212][T10070] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 270.169271][T10070] Node 0 DMA32: 78*4kB (UE) 59*8kB (ME) 312*16kB (UME) 453*32kB (ME) 322*64kB (UME) 61*128kB (ME) 22*256kB (ME) 6*512kB (UME) 4*1024kB (ME) 4*2048kB (ME) 293*4096kB (M) = 1269808kB [ 270.187388][T10070] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 270.201940][T10070] Node 1 Normal: 200*4kB (UE) 56*8kB (UME) 48*16kB (UME) 105*32kB (UME) 40*64kB (UME) 7*128kB (UME) 6*256kB (UME) 3*512kB (UM) 4*1024kB (UME) 1*2048kB (E) 945*4096kB (M) = 3888768kB [ 270.221325][T10070] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.230979][T10070] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 270.241133][T10070] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 270.250751][T10070] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 270.268263][T10070] 54424 total pagecache pages [ 270.272989][T10070] 0 pages in swap cache [ 270.277661][T10070] Free swap = 124996kB [ 270.281820][T10070] Total swap = 124996kB [ 270.286065][T10070] 2097051 pages RAM [ 270.289902][T10070] 0 pages HighMem/MovableOnly [ 270.294597][T10070] 425846 pages reserved [ 270.298803][T10070] 0 pages cma reserved [ 270.510020][ T3020] team0 (unregistering): Port device team_slave_1 removed [ 270.548646][ T3020] team0 (unregistering): Port device team_slave_0 removed [ 270.739590][T10111] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 270.773355][T10111] VFS: Can't find a romfs filesystem on dev rnullb0. [ 270.773355][T10111] [ 270.962711][ T5845] Bluetooth: hci0: command 0x0406 tx timeout [ 270.962720][ T5156] Bluetooth: hci2: command 0x0c1a tx timeout [ 271.655137][ T5923] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 271.666390][T10051] chnl_net:caif_netlink_parms(): no params data found [ 271.833199][ T5923] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 271.833229][ T5923] usb 5-1: config 0 has no interface number 0 [ 271.833274][ T5923] usb 5-1: config 0 interface 219 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 271.835494][ T5845] Bluetooth: hci1: command tx timeout [ 271.837218][ T5923] usb 5-1: New USB device found, idVendor=05ac, idProduct=030b, bcdDevice=44.42 [ 271.837245][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.837263][ T5923] usb 5-1: Product: syz [ 271.837278][ T5923] usb 5-1: Manufacturer: syz [ 271.837292][ T5923] usb 5-1: SerialNumber: syz [ 271.856704][ T5923] usb 5-1: config 0 descriptor?? [ 271.867309][ T5923] appletouch 5-1:0.219: Could not find int-in endpoint [ 271.930445][ T5923] appletouch 5-1:0.219: probe with driver appletouch failed with error -5 [ 271.941340][ T5923] usbhid 5-1:0.219: couldn't find an input interrupt endpoint [ 272.020681][T10051] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.020786][T10051] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.020906][T10051] bridge_slave_0: entered allmulticast mode [ 272.033875][T10051] bridge_slave_0: entered promiscuous mode [ 272.036141][T10051] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.036237][T10051] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.036589][T10051] bridge_slave_1: entered allmulticast mode [ 272.038029][T10051] bridge_slave_1: entered promiscuous mode [ 272.084863][T10116] exFAT-fs (rnullb0): invalid boot record signature [ 272.084890][T10116] exFAT-fs (rnullb0): failed to read boot sector [ 272.084900][T10116] exFAT-fs (rnullb0): failed to recognize exfat type [ 272.094932][ T890] usb 5-1: USB disconnect, device number 32 [ 272.144499][T10051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.160596][T10051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.205883][ T5923] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 272.239774][T10051] team0: Port device team_slave_0 added [ 272.243406][T10051] team0: Port device team_slave_1 added [ 272.313778][T10051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.313793][T10051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.313827][T10051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.325283][T10051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.325297][T10051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.325330][T10051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.422789][ T5923] usb 6-1: Using ep0 maxpacket: 32 [ 272.440991][ T5923] usb 6-1: config 4 has an invalid interface number: 128 but max is 0 [ 272.441015][ T5923] usb 6-1: config 4 has no interface number 0 [ 272.441052][ T5923] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.441075][ T5923] usb 6-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.441110][ T5923] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 272.441132][ T5923] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.447605][ T5923] hub 6-1:4.128: USB hub found [ 272.458585][T10051] hsr_slave_0: entered promiscuous mode [ 272.459517][T10051] hsr_slave_1: entered promiscuous mode [ 272.460329][T10051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.460397][T10051] Cannot create hsr debugfs directory [ 272.649781][ T5923] hub 6-1:4.128: 2 ports detected [ 272.654950][ T5923] hub 6-1:4.128: Using single TT (err -22) [ 272.721791][T10144] ./file0: Can't lookup blockdev [ 273.031601][T10051] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 273.038630][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 273.062435][ T5923] usb 6-1: USB disconnect, device number 22 [ 273.084294][T10051] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 273.122429][T10051] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 273.148626][T10051] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 273.394524][T10051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.417782][T10177] FAULT_INJECTION: forcing a failure. [ 273.417782][T10177] name failslab, interval 1, probability 0, space 0, times 0 [ 273.431009][T10051] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.447498][T10177] CPU: 1 UID: 0 PID: 10177 Comm: syz.4.1408 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 273.447520][T10177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 273.447532][T10177] Call Trace: [ 273.447538][T10177] [ 273.447546][T10177] dump_stack_lvl+0x189/0x250 [ 273.447570][T10177] ? __pfx____ratelimit+0x10/0x10 [ 273.447591][T10177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 273.447610][T10177] ? __pfx__printk+0x10/0x10 [ 273.447635][T10177] ? __pfx___might_resched+0x10/0x10 [ 273.447651][T10177] ? fs_reclaim_acquire+0x7d/0x100 [ 273.447677][T10177] should_fail_ex+0x414/0x560 [ 273.447703][T10177] should_failslab+0xa8/0x100 [ 273.447721][T10177] __kmalloc_cache_noprof+0x70/0x3d0 [ 273.447737][T10177] ? fuse_dev_alloc+0x92/0x2d0 [ 273.447760][T10177] fuse_dev_alloc+0x92/0x2d0 [ 273.447783][T10177] fuse_fill_super_common+0x4e1/0x1100 [ 273.447817][T10177] ? __pfx_fuse_fill_super_common+0x10/0x10 [ 273.447841][T10177] ? __pfx_snprintf+0x10/0x10 [ 273.447853][T10177] ? set_blocksize+0x21e/0x500 [ 273.447877][T10177] ? sb_set_blocksize+0x104/0x180 [ 273.447899][T10177] fuse_fill_super+0x176/0x1f0 [ 273.447914][T10177] get_tree_bdev_flags+0x40e/0x4d0 [ 273.447933][T10177] ? __pfx_fuse_fill_super+0x10/0x10 [ 273.447946][T10177] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 273.447964][T10177] ? __fget_files+0x2a/0x420 [ 273.447984][T10177] ? __fget_files+0x3a0/0x420 [ 273.448002][T10177] ? __fget_files+0x2a/0x420 [ 273.448024][T10177] fuse_get_tree+0x23c/0x4e0 [ 273.448041][T10177] vfs_get_tree+0x8f/0x2b0 [ 273.448060][T10177] do_new_mount+0x24a/0xa40 [ 273.448085][T10177] __se_sys_mount+0x317/0x410 [ 273.448109][T10177] ? __pfx___se_sys_mount+0x10/0x10 [ 273.448127][T10177] ? rcu_is_watching+0x15/0xb0 [ 273.448144][T10177] ? do_syscall_64+0xbe/0x3b0 [ 273.448161][T10177] ? __x64_sys_mount+0x20/0xc0 [ 273.448182][T10177] do_syscall_64+0xfa/0x3b0 [ 273.448199][T10177] ? lockdep_hardirqs_on+0x9c/0x150 [ 273.448215][T10177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.448229][T10177] ? clear_bhb_loop+0x60/0xb0 [ 273.448246][T10177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.448260][T10177] RIP: 0033:0x7fba84d8e929 [ 273.448272][T10177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 273.448285][T10177] RSP: 002b:00007fba85b87038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 273.448300][T10177] RAX: ffffffffffffffda RBX: 00007fba84fb5fa0 RCX: 00007fba84d8e929 [ 273.448310][T10177] RDX: 0000200000000100 RSI: 0000200000002480 RDI: 0000200000002440 [ 273.448320][T10177] RBP: 00007fba85b87090 R08: 0000200000000600 R09: 0000000000000000 [ 273.448329][T10177] R10: 0000000000008004 R11: 0000000000000246 R12: 0000000000000002 [ 273.448337][T10177] R13: 0000000000000000 R14: 00007fba84fb5fa0 R15: 00007ffd13605f58 [ 273.448358][T10177] [ 273.465430][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.744315][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.809060][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.816207][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.915542][ T5845] Bluetooth: hci1: command tx timeout [ 273.935756][T10184] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 274.169240][T10193] wg0 speed is unknown, defaulting to 1000 [ 274.280102][T10051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.613063][T10193] binder_alloc: 10192: binder_alloc_buf, no vma [ 274.933215][T10051] veth0_vlan: entered promiscuous mode [ 274.977832][T10051] veth1_vlan: entered promiscuous mode [ 275.040628][T10051] veth0_macvtap: entered promiscuous mode [ 275.060844][T10051] veth1_macvtap: entered promiscuous mode [ 275.099863][T10051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.141542][T10051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.161077][ T1168] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.191889][ T1168] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.235520][ T1168] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.264592][ T1168] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.347535][ T1168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.376245][ T1168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.422899][ T2965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.453578][ T2965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.631563][T10241] delete_channel: no stack [ 275.644670][T10241] delete_channel: no stack [ 275.760425][T10246] /dev/rnullb0: Can't open blockdev [ 275.861457][T10248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1418'. [ 275.934922][T10251] Invalid logical block size (4194304) [ 275.995806][ T5845] Bluetooth: hci1: command tx timeout [ 276.005181][ T982] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 276.158667][ T982] usb 7-1: device descriptor read/64, error -71 [ 276.427754][ T982] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 276.595728][ T982] usb 7-1: device descriptor read/64, error -71 [ 276.705444][ T982] usb usb7-port1: attempt power cycle [ 277.085270][ T982] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 277.116159][ T982] usb 7-1: device descriptor read/8, error -71 [ 277.221847][T10298] kvm: pic: non byte read [ 277.245521][T10298] kvm: pic: level sensitive irq not supported [ 277.245621][T10298] kvm: pic: non byte read [ 277.276881][T10298] kvm: pic: level sensitive irq not supported [ 277.276946][T10298] kvm: pic: non byte read [ 277.312313][T10298] kvm: pic: level sensitive irq not supported [ 277.312401][T10298] kvm: pic: non byte read [ 277.318693][T10306] /dev/rnullb0: Can't open blockdev [ 277.369089][ T982] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 277.409111][ T982] usb 7-1: device descriptor read/8, error -71 [ 277.527494][ T982] usb usb7-port1: unable to enumerate USB device [ 277.887244][T10330] /dev/rnullb0: Can't open blockdev [ 277.999962][ T3020] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 278.556246][ T31] INFO: task kworker/1:0:24 blocked for more than 143 seconds. [ 278.564229][ T31] Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 [ 278.572470][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.581622][ T31] task:kworker/1:0 state:D stack:24296 pid:24 tgid:24 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 278.593758][ T31] Workqueue: usb_hub_wq hub_event [ 278.599302][ T31] Call Trace: [ 278.602636][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 278.606559][ T31] __schedule+0x16f5/0x4d00 [ 278.611458][ T31] ? schedule+0x165/0x360 [ 278.618227][ T31] ? __pfx___schedule+0x10/0x10 [ 278.623252][ T31] ? preempt_schedule_common+0x83/0xd0 [ 278.629210][ T31] ? __pfx_preempt_schedule+0x10/0x10 [ 278.634760][ T31] ? schedule+0x91/0x360 [ 278.640504][ T31] schedule+0x165/0x360 [ 278.644693][ T31] schedule_timeout+0x9a/0x270 [ 278.665098][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 278.670514][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 278.717313][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.722551][ T31] ? wait_for_completion+0x267/0x5d0 [ 278.765242][ T31] wait_for_completion+0x2bf/0x5d0 [ 278.770414][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 278.786484][ T31] ? __flush_work+0xd2/0xbc0 [ 278.791115][ T31] ? __flush_work+0xd2/0xbc0 [ 278.825687][ T31] __flush_work+0x9b9/0xbc0 [ 278.830255][ T31] ? __flush_work+0xd2/0xbc0 [ 278.834886][ T31] ? __pfx___flush_work+0x10/0x10 [ 278.867551][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 278.872909][ T31] ? __queue_work+0xc56/0xfb0 [ 278.902375][ T31] ? flush_delayed_work+0x11d/0x190 [ 278.925105][ T31] flush_delayed_work+0x13e/0x190 [ 278.930182][ T31] ? __pfx_flush_delayed_work+0x10/0x10 [ 278.946119][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.951357][ T31] ? usb_hcd_flush_endpoint+0x3e9/0x400 [ 278.960966][ T31] hub_quiesce+0x1f0/0x330 [ 278.968502][ T31] hub_disconnect+0xc8/0x470 [ 278.973141][ T31] usb_unbind_interface+0x26b/0x910 [ 278.979398][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 278.989163][ T31] device_release_driver_internal+0x4d6/0x7c0 [ 278.995562][ T31] bus_remove_device+0x34d/0x410 [ 279.000545][ T31] device_del+0x511/0x8e0 [ 279.004898][ T31] ? kfree+0x18e/0x440 [ 279.010076][ T31] ? __pfx_device_del+0x10/0x10 [ 279.015006][ T31] ? kobject_put+0x446/0x480 [ 279.019826][ T31] usb_disable_device+0x3e9/0x8a0 [ 279.026872][ T31] usb_disconnect+0x330/0x950 [ 279.031584][ T31] hub_event+0x1cdb/0x4a00 [ 279.036209][ T31] ? do_raw_spin_lock+0x121/0x290 [ 279.041299][ T31] ? register_lock_class+0x51/0x320 [ 279.046682][ T31] ? __pfx_hub_event+0x10/0x10 [ 279.051466][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 279.057261][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.062463][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 279.068258][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 279.074022][ T31] process_scheduled_works+0xae1/0x17b0 [ 279.079699][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 279.085755][ T31] worker_thread+0x8a0/0xda0 [ 279.090380][ T31] kthread+0x70e/0x8a0 [ 279.094462][ T31] ? __pfx_worker_thread+0x10/0x10 [ 279.099593][ T31] ? __pfx_kthread+0x10/0x10 [ 279.104196][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.109432][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.114641][ T31] ? __pfx_kthread+0x10/0x10 [ 279.120550][ T31] ret_from_fork+0x3fc/0x770 [ 279.125940][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 279.131116][ T31] ? __switch_to_asm+0x39/0x70 [ 279.135998][ T31] ? __switch_to_asm+0x33/0x70 [ 279.140786][ T31] ? __pfx_kthread+0x10/0x10 [ 279.145421][ T31] ret_from_fork_asm+0x1a/0x30 [ 279.150206][ T31] [ 279.153343][ T31] INFO: task kworker/1:2:2157 blocked for more than 143 seconds. [ 279.161280][ T31] Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 [ 279.168425][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.177218][ T31] task:kworker/1:2 state:D stack:22984 pid:2157 tgid:2157 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 279.189381][ T31] Workqueue: usb_hub_wq hub_event [ 279.194402][ T31] Call Trace: [ 279.198285][ T31] [ 279.201240][ T31] __schedule+0x16f5/0x4d00 [ 279.206117][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 279.211341][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 279.217715][ T31] ? schedule+0x165/0x360 [ 279.222058][ T31] ? __pfx___schedule+0x10/0x10 [ 279.226969][ T31] ? try_to_wake_up+0x7e5/0x1290 [ 279.232524][ T31] ? schedule+0x91/0x360 [ 279.236841][ T31] schedule+0x165/0x360 [ 279.241011][ T31] schedule_timeout+0x9a/0x270 [ 279.245880][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 279.251270][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.256521][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.261736][ T31] ? wait_for_completion+0x267/0x5d0 [ 279.267070][ T31] wait_for_completion+0x2bf/0x5d0 [ 279.272209][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 279.282805][ T31] ? __flush_work+0xd2/0xbc0 [ 279.287487][ T31] ? __flush_work+0xd2/0xbc0 [ 279.292087][ T31] __flush_work+0x9b9/0xbc0 [ 279.296619][ T31] ? __flush_work+0xd2/0xbc0 [ 279.301217][ T31] ? __pfx___flush_work+0x10/0x10 [ 279.306313][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 279.311654][ T31] ? __queue_work+0xc56/0xfb0 [ 279.316374][ T31] ? flush_delayed_work+0x11d/0x190 [ 279.321582][ T31] flush_delayed_work+0x13e/0x190 [ 279.326638][ T31] ? __pfx_flush_delayed_work+0x10/0x10 [ 279.332887][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.338192][ T31] ? usb_hcd_flush_endpoint+0x3e9/0x400 [ 279.343791][ T31] hub_quiesce+0x1f0/0x330 [ 279.348264][ T31] hub_disconnect+0xc8/0x470 [ 279.352872][ T31] usb_unbind_interface+0x26b/0x910 [ 279.359026][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 279.365612][ T31] device_release_driver_internal+0x4d6/0x7c0 [ 279.371757][ T31] bus_remove_device+0x34d/0x410 [ 279.377834][ T31] device_del+0x511/0x8e0 [ 279.382202][ T31] ? kfree+0x18e/0x440 [ 279.386325][ T31] ? __pfx_device_del+0x10/0x10 [ 279.391185][ T31] ? kobject_put+0x446/0x480 [ 279.395942][ T31] usb_disable_device+0x3e9/0x8a0 [ 279.401018][ T31] usb_disconnect+0x330/0x950 [ 279.405758][ T31] hub_event+0x1cdb/0x4a00 [ 279.410201][ T31] ? do_raw_spin_lock+0x121/0x290 [ 279.415273][ T31] ? register_lock_class+0x51/0x320 [ 279.420498][ T31] ? __pfx_hub_event+0x10/0x10 [ 279.425294][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 279.431048][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.438448][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 279.444207][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 279.450005][ T31] process_scheduled_works+0xae1/0x17b0 [ 279.455633][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 279.461640][ T31] worker_thread+0x8a0/0xda0 [ 279.466346][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 279.472693][ T31] ? __kthread_parkme+0x7b/0x200 [ 279.477693][ T31] kthread+0x70e/0x8a0 [ 279.481776][ T31] ? __pfx_worker_thread+0x10/0x10 [ 279.486967][ T31] ? __pfx_kthread+0x10/0x10 [ 279.491575][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.496810][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.502018][ T31] ? __pfx_kthread+0x10/0x10 [ 279.506634][ T31] ret_from_fork+0x3fc/0x770 [ 279.511328][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 279.516874][ T31] ? __switch_to_asm+0x39/0x70 [ 279.521659][ T31] ? __switch_to_asm+0x33/0x70 [ 279.526471][ T31] ? __pfx_kthread+0x10/0x10 [ 279.531075][ T31] ret_from_fork_asm+0x1a/0x30 [ 279.536718][ T31] [ 279.539839][ T31] INFO: task kworker/1:3:5886 blocked for more than 144 seconds. [ 279.575151][ T31] Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 [ 279.582296][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.615154][ T31] task:kworker/1:3 state:D stack:21912 pid:5886 tgid:5886 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 279.655093][ T31] Workqueue: events_power_efficient hub_init_func2 [ 279.661633][ T31] Call Trace: [ 279.664922][ T31] [ 279.685141][ T31] __schedule+0x16f5/0x4d00 [ 279.689709][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 279.714076][ T31] ? schedule+0x165/0x360 [ 279.728395][ T31] ? __pfx___schedule+0x10/0x10 [ 279.733294][ T31] ? schedule+0x91/0x360 [ 279.748249][ T31] schedule+0x165/0x360 [ 279.752444][ T31] schedule_preempt_disabled+0x13/0x30 [ 279.775097][ T31] __mutex_lock+0x724/0xe80 [ 279.779634][ T31] ? __mutex_lock+0x51b/0xe80 [ 279.784334][ T31] ? hub_activate+0xb7/0x1ea0 [ 279.805181][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 279.810241][ T31] ? do_raw_spin_lock+0x121/0x290 [ 279.834509][ T31] ? __lock_acquire+0xab9/0xd20 [ 279.855109][ T31] hub_activate+0xb7/0x1ea0 [ 279.859657][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 279.875152][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.880381][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 279.895267][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 279.901029][ T31] process_scheduled_works+0xae1/0x17b0 [ 279.916381][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 279.951791][ T31] worker_thread+0x8a0/0xda0 [ 279.956721][ T31] kthread+0x70e/0x8a0 [ 279.960812][ T31] ? __pfx_worker_thread+0x10/0x10 [ 279.968926][ T31] ? __pfx_kthread+0x10/0x10 [ 279.974605][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.980676][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.989692][ T31] ? __pfx_kthread+0x10/0x10 [ 279.994323][ T31] ret_from_fork+0x3fc/0x770 [ 280.000067][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 280.008024][ T31] ? __switch_to_asm+0x39/0x70 [ 280.012888][ T31] ? __switch_to_asm+0x33/0x70 [ 280.017786][ T31] ? __pfx_kthread+0x10/0x10 [ 280.022444][ T31] ret_from_fork_asm+0x1a/0x30 [ 280.027449][ T31] [ 280.030546][ T31] INFO: task kworker/1:4:5900 blocked for more than 144 seconds. [ 280.039484][ T31] Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 [ 280.050087][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.063801][ T31] task:kworker/1:4 state:D stack:20104 pid:5900 tgid:5900 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 280.077091][ T31] Workqueue: events_power_efficient hub_init_func2 [ 280.083681][ T31] Call Trace: [ 280.087481][ T31] [ 280.090435][ T31] __schedule+0x16f5/0x4d00 [ 280.094948][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 280.101644][ T31] ? schedule+0x165/0x360 [ 280.106114][ T31] ? __pfx___schedule+0x10/0x10 [ 280.111051][ T31] ? schedule+0x91/0x360 [ 280.115661][ T31] schedule+0x165/0x360 [ 280.119839][ T31] schedule_preempt_disabled+0x13/0x30 [ 280.125333][ T31] __mutex_lock+0x724/0xe80 [ 280.129858][ T31] ? __mutex_lock+0x51b/0xe80 [ 280.134541][ T31] ? hub_activate+0xb7/0x1ea0 [ 280.139374][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 280.144429][ T31] ? do_raw_spin_lock+0x121/0x290 [ 280.151121][ T31] ? __lock_acquire+0xab9/0xd20 [ 280.156530][ T31] hub_activate+0xb7/0x1ea0 [ 280.161057][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 280.166890][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 280.172103][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 280.177891][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 280.183637][ T31] process_scheduled_works+0xae1/0x17b0 [ 280.189255][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 280.195366][ T31] worker_thread+0x8a0/0xda0 [ 280.199978][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 280.206365][ T31] ? __kthread_parkme+0x7b/0x200 [ 280.211327][ T31] kthread+0x70e/0x8a0 [ 280.215461][ T31] ? __pfx_worker_thread+0x10/0x10 [ 280.220582][ T31] ? __pfx_kthread+0x10/0x10 [ 280.225351][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 280.230563][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 280.236093][ T31] ? __pfx_kthread+0x10/0x10 [ 280.240705][ T31] ret_from_fork+0x3fc/0x770 [ 280.245864][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 280.251008][ T31] ? __switch_to_asm+0x39/0x70 [ 280.256456][ T31] ? __switch_to_asm+0x33/0x70 [ 280.261245][ T31] ? __pfx_kthread+0x10/0x10 [ 280.265907][ T31] ret_from_fork_asm+0x1a/0x30 [ 280.270693][ T31] [ 280.275829][ T31] [ 280.275829][ T31] Showing all locks held in the system: [ 280.283561][ T31] 3 locks held by kworker/0:0/9: [ 280.293172][ T31] #0: ffff88801a882148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 280.307487][ T31] #1: ffffc900000e7bc0 ((work_completion)(&(&hub->init_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 280.322234][ T31] #2: ffff88802867b198 (&dev->mutex){....}-{4:4}, at: hub_activate+0xb7/0x1ea0 [ 280.333996][ T31] 2 locks held by kworker/0:1/10: [ 280.339527][ T31] #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 280.350832][ T31] #1: ffffc900000f7bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 280.362675][ T31] 3 locks held by kworker/u8:1/13: [ 280.367904][ T31] #0: ffff8880b8639f58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 280.377895][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x314/0x6d0 [ 280.389372][ T31] #2: ffffffff99f5ad80 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_deactivate+0x9a/0x250 [ 280.401053][ T31] 5 locks held by kworker/1:0/24: [ 280.406205][ T31] #0: ffff888022289548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 280.418367][ T31] #1: ffffc900001e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 280.430388][ T31] #2: ffff8880285e0198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 280.439393][ T31] #3: ffff8880343a1198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 280.448673][ T31] #4: ffff88805b475160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 280.461039][ T31] 1 lock held by khungtaskd/31: [ 280.466005][ T31] #0: ffffffff8e33bee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 280.475916][ T31] 3 locks held by kworker/1:1/43: [ 280.480940][ T31] #0: ffff88801a882148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 280.493338][ T31] #1: ffffc90000b37bc0 ((work_completion)(&(&hub->init_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 280.506347][ T31] #2: ffff888024ebb198 (&dev->mutex){....}-{4:4}, at: hub_activate+0xb7/0x1ea0 [ 280.515489][ T31] 2 locks held by kworker/u8:5/1144: [ 280.520775][ T31] #0: ffff8880b8639f58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 280.530732][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x314/0x6d0 [ 280.542165][ T31] 5 locks held by kworker/1:2/2157: [ 280.547405][ T31] #0: ffff888022289548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 280.560520][ T31] #1: ffffc9000542fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 280.572481][ T31] #2: ffff888144738198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 280.581486][ T31] #3: ffff88807bbf4198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 280.590713][ T31] #4: ffff88807d87d160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 280.601294][ T31] 3 locks held by kworker/u8:7/2965: [ 280.606611][ T31] #0: ffff88814cb47948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 280.618247][ T31] #1: ffffc9000bdbfbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 280.631115][ T31] #2: ffffffff8f728f88 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 280.640774][ T31] 3 locks held by kworker/u8:9/3020: [ 280.646130][ T31] #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 280.657850][ T31] #1: ffffc9000bc2fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 280.670211][ T31] #2: ffffffff8f728f88 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 280.679239][ T31] 1 lock held by dhcpcd/5501: [ 280.683919][ T31] #0: ffffffff8f728f88 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20 [ 280.693458][ T31] 2 locks held by getty/5595: [ 280.698199][ T31] #0: ffff8880308270a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 280.708040][ T31] #1: ffffc9000331b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 280.718227][ T31] 3 locks held by kworker/1:3/5886: [ 280.723439][ T31] #0: ffff88801a882148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 280.735909][ T31] #1: ffffc90004507bc0 ((work_completion)(&(&hub->init_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 280.748847][ T31] #2: ffff88807bbf4198 (&dev->mutex){....}-{4:4}, at: hub_activate+0xb7/0x1ea0 [ 280.757962][ T31] 3 locks held by kworker/1:4/5900: [ 280.763163][ T31] #0: ffff88801a882148 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 280.776621][ T31] #1: ffffc90004df7bc0 ((work_completion)(&(&hub->init_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 280.789691][ T31] #2: ffff8880343a1198 (&dev->mutex){....}-{4:4}, at: hub_activate+0xb7/0x1ea0 [ 280.799122][ T31] 5 locks held by kworker/0:5/5902: [ 280.804418][ T31] #0: ffff888022289548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 280.815805][ T31] #1: ffffc90004e17bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 280.827818][ T31] #2: ffff888028688198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 280.836934][ T31] #3: ffff88802867b198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 280.846162][ T31] #4: ffff88805b941160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 280.856846][ T31] 5 locks held by kworker/1:6/5923: [ 280.862052][ T31] #0: ffff888022289548 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 280.874068][ T31] #1: ffffc90004e87bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 280.886507][ T31] #2: ffff8880287f8198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 280.895494][ T31] #3: ffff888024ebb198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 280.904660][ T31] #4: ffff88807d87c160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 280.915291][ T31] 2 locks held by syz.0.60/6100: [ 280.920237][ T31] #0: ffffffff8f728f88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 280.929251][ T31] #1: ffffffff8e3419f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 280.940262][ T31] 2 locks held by syz-executor/10051: [ 280.945874][ T31] #0: ffff888050808dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 280.956209][ T31] #1: ffff8880508080b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 280.966003][ T31] 1 lock held by syz.6.1380/10243: [ 280.973205][ T31] #0: ffffffff8f728f88 (rtnl_mutex){+.+.}-{4:4}, at: ppp_release+0x87/0x1f0 [ 280.982175][ T31] 1 lock held by syz.5.1437/10331: [ 280.987327][ T31] #0: ffffffff8f728f88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 280.996406][ T31] 2 locks held by syz.4.1439/10335: [ 281.001607][ T31] #0: ffff888059a86428 (sb_writers#15){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 281.010743][ T31] #1: ffff88805be9ce48 (&sb->s_type->i_mutex_key#23){+.+.}-{4:4}, at: generic_file_write_iter+0xeb/0x550 [ 281.022186][ T31] 1 lock held by syz.0.1443/10360: [ 281.027365][ T31] #0: ffffffff8f728f88 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 281.036780][ T31] [ 281.042805][ T31] ============================================= [ 281.042805][ T31] [ 281.051299][ T31] NMI backtrace for cpu 1 [ 281.051313][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 281.051333][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.051344][ T31] Call Trace: [ 281.051351][ T31] [ 281.051358][ T31] dump_stack_lvl+0x189/0x250 [ 281.051378][ T31] ? __wake_up_klogd+0xd9/0x110 [ 281.051402][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.051421][ T31] ? __pfx__printk+0x10/0x10 [ 281.051451][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 281.051472][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 281.051487][ T31] ? _printk+0xcf/0x120 [ 281.051510][ T31] ? __pfx__printk+0x10/0x10 [ 281.051531][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 281.051559][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 281.051578][ T31] watchdog+0xfee/0x1030 [ 281.051603][ T31] ? watchdog+0x1de/0x1030 [ 281.051634][ T31] kthread+0x70e/0x8a0 [ 281.051658][ T31] ? __pfx_watchdog+0x10/0x10 [ 281.051680][ T31] ? __pfx_kthread+0x10/0x10 [ 281.051702][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 281.051721][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.051739][ T31] ? __pfx_kthread+0x10/0x10 [ 281.051761][ T31] ret_from_fork+0x3fc/0x770 [ 281.051790][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 281.051821][ T31] ? __switch_to_asm+0x39/0x70 [ 281.051848][ T31] ? __switch_to_asm+0x33/0x70 [ 281.051868][ T31] ? __pfx_kthread+0x10/0x10 [ 281.051889][ T31] ret_from_fork_asm+0x1a/0x30 [ 281.051924][ T31] [ 281.051934][ T31] Sending NMI from CPU 1 to CPUs 0: [ 281.212140][ C0] NMI backtrace for cpu 0 [ 281.212155][ C0] CPU: 0 UID: 0 PID: 1144 Comm: kworker/u8:5 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 281.212177][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.212188][ C0] Workqueue: 0x0 (events_unbound) [ 281.212211][ C0] RIP: 0010:dequeue_entity+0x38f/0x1690 [ 281.212231][ C0] Code: 4c 8d 7b 51 4c 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 dc 08 00 00 41 80 3f 00 4c 8b 2c 24 0f 84 21 08 00 00 f3 0f 1e fa <4c> 8d b3 a8 00 00 00 4c 89 f0 48 c1 e8 03 48 bd 00 00 00 00 00 fc [ 281.212246][ C0] RSP: 0018:ffffc90003e27850 EFLAGS: 00000046 [ 281.212260][ C0] RAX: 1ffff110170c7406 RBX: ffff88802716da80 RCX: dffffc0000000000 [ 281.212274][ C0] RDX: dffffc0000000000 RSI: ffff8880b863a984 RDI: ffff8880b863a020 [ 281.212287][ C0] RBP: 0000000000000400 R08: ffffffff8fc29737 R09: 1ffffffff1f852e6 [ 281.212299][ C0] R10: dffffc0000000000 R11: fffffbfff1f852e7 R12: 0000000000000009 [ 281.212311][ C0] R13: ffff8880b863a000 R14: 0000000000000000 R15: ffff8880b863a030 [ 281.212323][ C0] FS: 0000000000000000(0000) GS:ffff8881259e4000(0000) knlGS:0000000000000000 [ 281.212336][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.212347][ C0] CR2: 000055a7e316b078 CR3: 000000000e136000 CR4: 00000000003526f0 [ 281.212363][ C0] DR0: 0000000000000000 DR1: 0000000000000097 DR2: 0000000000000000 [ 281.212373][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 281.212384][ C0] Call Trace: [ 281.212390][ C0] [ 281.212400][ C0] ? __lock_acquire+0xab9/0xd20 [ 281.212428][ C0] dequeue_entities+0x1fa/0x1510 [ 281.212450][ C0] ? do_raw_spin_lock+0x121/0x290 [ 281.212477][ C0] dequeue_task_fair+0x205/0x580 [ 281.212500][ C0] __schedule+0x5a7/0x4d00 [ 281.212522][ C0] ? process_scheduled_works+0x1708/0x17b0 [ 281.212553][ C0] ? schedule+0x165/0x360 [ 281.212571][ C0] ? __lock_acquire+0xab9/0xd20 [ 281.212595][ C0] ? __pfx___schedule+0x10/0x10 [ 281.212622][ C0] ? schedule+0x91/0x360 [ 281.212641][ C0] schedule+0x165/0x360 [ 281.212660][ C0] worker_thread+0xa82/0xda0 [ 281.212689][ C0] kthread+0x70e/0x8a0 [ 281.212710][ C0] ? __pfx_worker_thread+0x10/0x10 [ 281.212726][ C0] ? __pfx_kthread+0x10/0x10 [ 281.212746][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 281.212769][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.212788][ C0] ? __pfx_kthread+0x10/0x10 [ 281.212807][ C0] ret_from_fork+0x3fc/0x770 [ 281.212835][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 281.212866][ C0] ? __switch_to_asm+0x39/0x70 [ 281.212886][ C0] ? __switch_to_asm+0x33/0x70 [ 281.212906][ C0] ? __pfx_kthread+0x10/0x10 [ 281.212927][ C0] ret_from_fork_asm+0x1a/0x30 [ 281.212955][ C0] [ 281.218530][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 281.218549][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 281.218575][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 281.218589][ T31] Call Trace: [ 281.218598][ T31] [ 281.218608][ T31] dump_stack_lvl+0x99/0x250 [ 281.218637][ T31] ? __asan_memcpy+0x40/0x70 [ 281.218671][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.218695][ T31] ? __pfx__printk+0x10/0x10 [ 281.218732][ T31] panic+0x2db/0x790 [ 281.218759][ T31] ? __pfx_panic+0x10/0x10 [ 281.218777][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 281.218814][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 281.218854][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 281.218883][ T31] watchdog+0x102d/0x1030 [ 281.218913][ T31] ? watchdog+0x1de/0x1030 [ 281.218947][ T31] kthread+0x70e/0x8a0 [ 281.218976][ T31] ? __pfx_watchdog+0x10/0x10 [ 281.219001][ T31] ? __pfx_kthread+0x10/0x10 [ 281.219028][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 281.219051][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 281.219073][ T31] ? __pfx_kthread+0x10/0x10 [ 281.219097][ T31] ret_from_fork+0x3fc/0x770 [ 281.219130][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 281.219167][ T31] ? __switch_to_asm+0x39/0x70 [ 281.219198][ T31] ? __switch_to_asm+0x33/0x70 [ 281.219221][ T31] ? __pfx_kthread+0x10/0x10 [ 281.219246][ T31] ret_from_fork_asm+0x1a/0x30 [ 281.219286][ T31] [ 281.629555][ T31] Kernel Offset: disabled [ 281.633892][ T31] Rebooting in 86400 seconds..