last executing test programs: 9m16.079726567s ago: executing program 4 (id=49): r0 = getpid() syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x2c9, &(0x7f0000000a80)=ANY=[@ANYBLOB="12c9d53bef01010240d85bc7b1131100345c010203010902b70203040800070904880409f7f98a060724060000d2cf0524001c620d240f0100000000020005000207240a5600210b082407bb0b0000350524010394090509042000010709072501c04a910a1401f50510c401aaa61fd1a25de655743dd9c64a09050304000400010e09050a0c40000a0006090505041000f400020725010081020009050703200000afb7072501003eff0709050d0340002408080905010c10000702010905040300027ff6070905800344f5df070507250100020500090403080353ee97050a2401f90a000201020b24060202020a000100000924030607030202080b24020101020507623c0a09050810200009090ce80104d5abb282c498eee79f09b457e4eb03957388a53a5c574e0d2a0367adc6eed3f8095563f68203dedc1d85075d9471e9f79e24b0cacc555124830dc45118f9298acb4b7bcb0f35151b48ed03cadbe732eca34d4619f4ac0a0300000023926437e712f3d666ae08a116645d7d017d3af0cbe03150f04ed5c04d461a08315d4b5ac0f4c7e6672544168b344e4d92767f3a382ae2e6495880cefc1c75ed501d262da981d341ef27c54a07325088a55a2d21bde5ec9401992fa6cc4b0bd58534ef3211ea1d6d115a2608e80654ed291197d746403e53be28649bfa0c0c0ec571d3ff8374db2515d309050f0300040609fe09050d00000402070e0904510a01ffffff040a2401300b09020102092403060703030204072404060351610905090c100006090e0725010101010091213534b186851fc43cd1e61f3f18d36db088978c7f992b26ef3bbac46ba3223c890785ac69f1be545ccfdad5685385c00f866bc6312f3d2b9caa8363ebab24c833888152f3e804c931a58dc3a7cd5630145fd3704ba985ee942779c3796a3c35c07a6bc3ed98c261e35737f7b75bfe4bde9f21681220f4d7c76c6c37d7d039a99b5dcd1a7500f3bedfdc33f35d2e375a682608bc7ef88ac8cdede09ab5e5e25cb7eecfb35f99d338e8d25056767665d2975ac4bf6b77a5c5d273625c3ce9d45fe41cd1fe6c9f3654635f2c7390cd4d019938b4faaa1df27bcde2b00803e6a06a46e130b23c282d2f2b498e0209109c0104bea900e0cb231ead7f40b762f93408b0e00061a29c44d8241977cbdeeea09bd25c159e431fe8b2a864590236fc6fecc18c30eb68e5ada8484f0316914092867c78062e94fe2c7294e7c896c0d06c5c3c9379658de14cddd29c03107f49fa686a6dcd37ae7630e19347d3e0245c05a841"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x27, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f27000122100470d28dc80cd6131eb38c0c2a95dfe341d8b4efbdbc211460a0c2c3"], 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x406}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000880)="9f384658", 0x4}, {&(0x7f0000000300)='b', 0x1}], 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) socket(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r5 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) write$P9_RSTATu(r5, 0x0, 0x5a) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0xa08410, 0x0) 9m11.638986046s ago: executing program 4 (id=54): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x2c9, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000280)={0x0, 0x0, 0x27, &(0x7f00000001c0)=ANY=[], 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x406}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2(0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000880)="9f384658", 0x4}, {&(0x7f0000000300)}], 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r1, 0x7, 0x0, 0x0) socket(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r4 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) write$P9_RSTATu(r4, 0x0, 0x5a) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0xa08410, 0x0) 9m7.663331602s ago: executing program 4 (id=59): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x5, "ff00"}) r5 = syz_open_pts(r4, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETA(r5, 0x5406, &(0x7f0000000200)={0x40, 0x80, 0xe000, 0xb3, 0x15, "04100072d331a800"}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000140)=0x4) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd}) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) syz_io_uring_setup(0x5b98, 0x0, &(0x7f0000000180), &(0x7f0000000240)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) 9m3.693192188s ago: executing program 4 (id=67): syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000100)=ANY=[], 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r4, 0xc0045401, 0x0) 8m59.847259488s ago: executing program 4 (id=70): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r3, 0xc0045401, 0x0) 8m57.218600559s ago: executing program 4 (id=74): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xd8081, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./mnt\x00', 0xffffffffffffffff, &(0x7f0000000380)='./mnt\x00', 0x150) syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[@ANYRES8=r0], 0x0) dup(0xffffffffffffffff) io_setup(0x10100005, 0xffffffffffffffff) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x34) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r5}, 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_io_uring_setup(0x1249, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r6, 0x803, {0x2a00, 0x80010000, 0x0, 0x5, 0x40002, 0x0, 0x9, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a7bd6447a4b4e00d9683dda1af1ea00546f8400a0100030000000000000000008000000000008000", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000040000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x1ff]}}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_io_uring_setup(0x38fe, &(0x7f0000000480)={0x0, 0x200000, 0x200}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000280)={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, {0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0xffff, {[0xb90, 0x9, 0x65, 0xffffaac4, 0x3, 0xe, 0xff, 0x8]}}, 0x5c) io_uring_enter(r6, 0x2def, 0x4000, 0x41809872e5114ba0, 0x0, 0x45) r9 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r9) 8m41.744368534s ago: executing program 32 (id=74): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0xd8081, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000180)='./mnt\x00', 0xffffffffffffffff, &(0x7f0000000380)='./mnt\x00', 0x150) syz_emit_ethernet(0x7e, &(0x7f00000003c0)=ANY=[@ANYRES8=r0], 0x0) dup(0xffffffffffffffff) io_setup(0x10100005, 0xffffffffffffffff) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e23}, 0x34) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000100000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000240), 0xa7c, r5}, 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_io_uring_setup(0x1249, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000005c0)={r6, 0x803, {0x2a00, 0x80010000, 0x0, 0x5, 0x40002, 0x0, 0x9, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a7bd6447a4b4e00d9683dda1af1ea00546f8400a0100030000000000000000008000000000008000", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000040000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x1ff]}}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) syz_io_uring_setup(0x38fe, &(0x7f0000000480)={0x0, 0x200000, 0x200}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r1}) setsockopt$MRT6_ADD_MFC_PROXY(r2, 0x29, 0xd2, &(0x7f0000000280)={{0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, {0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0xffff, {[0xb90, 0x9, 0x65, 0xffffaac4, 0x3, 0xe, 0xff, 0x8]}}, 0x5c) io_uring_enter(r6, 0x2def, 0x4000, 0x41809872e5114ba0, 0x0, 0x45) r9 = creat(&(0x7f0000000040)='./file0\x00', 0x0) close(r9) 28.739363678s ago: executing program 3 (id=932): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f0000010640)={'tunl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0x5, 0x0, 0x0, 0xf8, 0x0, 0x3, 0xfc, 0x0, 0xff, 0x0, 0x0, 0x0, 0xff, 0xff, 0x45, [0x0, 0x89ff]}}) sendmsg(r2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "fde9e2", 0x8, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @local}, {[@routing={0x3b, 0x0, 0x0, 0x3}]}}}}}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) writev(r4, &(0x7f0000000640)=[{&(0x7f0000000300)="9745605805f0766b", 0x8}], 0x1) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r5, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r5) recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x240, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000200)={0x0, 0x8cf}, &(0x7f00000002c0)=0x8) syz_open_procfs$pagemap(0x0, &(0x7f0000000040)) 18.645027667s ago: executing program 1 (id=946): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9acaf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r7, &(0x7f00000062c0)={0x2020}, 0x2020) socket$inet6_sctp(0xa, 0x1, 0x84) syz_fuse_handle_req(r7, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x400000000000, {0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) getresuid(&(0x7f0000000280), &(0x7f0000000300), &(0x7f00000003c0)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000080000000000070000000c000180050002002c"], 0x20}, 0x1, 0x0, 0x0, 0x4001c000}, 0x0) 18.379580642s ago: executing program 0 (id=947): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x4000) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) eventfd(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = userfaultfd(0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000090000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x40) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r1, {}, {}, {0x9, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x40804) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x114}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r6 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f00000001c0)={0x0, "be3ff4f2d3b71ad35cbc5ad31906b40f70ea0177f7f3f12a503b7e8e589e845a"}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000180)=0x9) 16.002510685s ago: executing program 5 (id=949): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f00001e7000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000000)=0x9, 0x3, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f00000007c0)={0x2020}, 0x2020) (fail_nth: 3) 15.755094318s ago: executing program 1 (id=950): r0 = getpid() syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x2c9, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x27, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f27000122100470d28dc80cd6131eb38c0c2a95dfe341d8b4efbdbc211460a0c2c3"], 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x406}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000880)="9f384658", 0x4}, {&(0x7f0000000300)='b', 0x1}], 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r2, 0x7, 0x0, 0x0) socket(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r5 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) write$P9_RSTATu(r5, 0x0, 0x5a) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0xa08410, 0x0) 14.485206012s ago: executing program 0 (id=952): r0 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key(&(0x7f0000001340)='keyring\x00', &(0x7f0000001380)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@chain={'key_or_keyring:', r1}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r0}) 14.481080025s ago: executing program 3 (id=953): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth1_vlan\x00', &(0x7f0000000280)=@ethtool_cmd={0x1c, 0x9, 0xe4b, 0x6, 0x6, 0x0, 0x1, 0x5, 0x2, 0x7, 0x3d95, 0x2, 0x40, 0x6, 0x3, 0x6, [0x200, 0x7ff]}}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000700)="b7f2288a911993f0", 0x8) r6 = accept$alg(r1, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/36, 0x24}, {&(0x7f00000003c0)=""/203, 0xcb}], 0x2}, 0xc3}], 0x1, 0x2003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32], 0x40}}, 0x8080) 13.409699791s ago: executing program 0 (id=955): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000380)="9e99", 0x2}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r5}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r5], &(0x7f0000000280), &(0x7f0000000300)=[r6], &(0x7f0000000340)}) 12.385347979s ago: executing program 3 (id=957): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000740)={0xc20006dc, 0xfffffffd, 0xc, 0x8, 0x7, "1000000d01e3bc59002b00005e0294a300"}) fsopen(&(0x7f0000000040)='hpfs\x00', 0x0) openat$full(0xffffffffffffff9c, &(0x7f0000000400), 0x80600, 0x0) timer_create(0x9, 0x0, &(0x7f00000000c0)) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 11.464142331s ago: executing program 1 (id=958): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000007c0)={r1, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000540)='/sys/kernel/debug/sync/info\x00'}, 0x30) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b045577fa19e7d985126b9c3433c9d3d3c1a9c27bfb311340", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0800050001f8fd8108000e"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000280)={0x1, 0x103, 0x2}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r3) ioctl$TCXONC(r6, 0x4b3a, 0x2) syz_usb_connect(0x0, 0x36, &(0x7f00000017c0)={{0x12, 0x1, 0x300, 0x4c, 0x4d, 0x70, 0x20, 0x41e, 0x3f19, 0x9b52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x5, 0x30, 0x2, [{{0x9, 0x4, 0xbd, 0xb, 0x1, 0xff, 0xb2, 0x3b, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x7}}], [{{0x9, 0x5, 0xd, 0xd, 0x3ff, 0x3, 0x5, 0x64}}]}}]}}]}}, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0}) 11.294235376s ago: executing program 3 (id=960): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[], 0x6c}}, 0x0) 10.908036871s ago: executing program 3 (id=961): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fcntl$setsig(0xffffffffffffffff, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001800010027bd7000fcdbdf251d01020015000100040000e002000000213e92146611cf5b045577fa19e7d985126b9c3433c9d3d3c1a9c27bfb311340", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0800050001f8fd8108000e"], 0x64}, 0x1, 0x0, 0x0, 0x88}, 0x80) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000280)={0x1, 0x103, 0x2}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r3) ioctl$TCXONC(r6, 0x4b3a, 0x2) socket$inet_sctp(0x2, 0x5, 0x84) syz_usb_connect(0x0, 0x36, &(0x7f00000017c0)={{0x12, 0x1, 0x300, 0x4c, 0x4d, 0x70, 0x20, 0x41e, 0x3f19, 0x9b52, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x2, 0x5, 0x30, 0x2, [{{0x9, 0x4, 0xbd, 0xb, 0x1, 0xff, 0xb2, 0x3b, 0x2, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x7}}], [{{0x9, 0x5, 0xd, 0xd, 0x3ff, 0x3, 0x5, 0x64}}]}}]}}]}}, &(0x7f00000020c0)={0x0, 0x0, 0x0, 0x0}) 10.653215692s ago: executing program 5 (id=962): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) socket(0xa, 0x3, 0x3a) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0xf, 0x8041) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) gettid() r4 = gettid() openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r5, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r5, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r6}], 0x2c, 0xffffffffffbffff8) dup2(r5, r6) fcntl$setown(r5, 0x8, r4) timer_delete(0x0) tkill(r4, 0x13) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f00000001c0)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOC_STREAMS(r3, 0x8008551c, &(0x7f0000000000)={0x184a, 0x4, [{0x2}, {0x5, 0x1}, {0x6, 0x1}, {0xe}]}) 9.459043004s ago: executing program 5 (id=963): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x4000) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) eventfd(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = userfaultfd(0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000090000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) socket$packet(0x11, 0x3, 0x300) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r5, 0x0, 0x25, 0x0, @val=@iter={0x0}}, 0x40) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r1, {}, {}, {0x9, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x40804) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x114}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r6 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f00000001c0)={0x0, "be3ff4f2d3b71ad35cbc5ad31906b40f70ea0177f7f3f12a503b7e8e589e845a"}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000180)=0x9) 8.350615237s ago: executing program 2 (id=964): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0xc00) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0010002, 0x0, 0xffffffffffffffff}]}) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x2e, 0x1c, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100}, @address_reply={0x12, 0x0, 0x0, 0x2}}}}}, 0x0) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x1e9, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (async, rerun: 32) sendmsg$NFT_BATCH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a0b0400000000000000000200000088000480240001800b000100736f636b6574000014000280080002400000000308000140000000024c0001800b00010065787468647200003c000280080002400000007508000340000000590800064000000002080006400000000108000440000000b905000200070000000500020007000000140001800a00010071756f7461000000040002800900010073797a30000000000900020073797a32"], 0x17c}}, 0x40880) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000940)={{0x2, 0x0, 0x80, {0x10000, 0xeeee0000}}, "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", "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"}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdc000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, &(0x7f0000000140)="0f455900859d00000000f3410f97bba02f698066ba4000b8c7760000ef66bad00466ed0f090f16fd41fd660fd63f66b869008ec0", 0x34}], 0x1, 0x10, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.213872542s ago: executing program 1 (id=965): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000020000000000000f9ffff0b8500000007000000850000000700000095"], &(0x7f0000000080)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x90) timer_delete(0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9, 0x2) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r5 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x200) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(r5, 0xab00, r6) r7 = dup3(r5, r1, 0x80000) ioctl$NBD_DO_IT(r7, 0xab03) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100abbd700005be70dbd67b74680800010000000000a7004d0b8c3ae180e260a983d84fd8c96253a8547727fdabdcc1483a2553e8aafdcfda0da800"/73], 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 8.03799826s ago: executing program 5 (id=966): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@private1, @in=@local, 0x0, 0x0, 0x4e22, 0x0, 0x2, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x10, 0x9}, {}, 0x6, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x4d2, 0x33}, 0x0, @in=@private=0xa010100, 0x3506, 0x0, 0x2, 0xb7, 0x2, 0xfffffff9}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 7.58550594s ago: executing program 2 (id=967): r0 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x1, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth1_vlan\x00', &(0x7f0000000280)=@ethtool_cmd={0x1c, 0x9, 0xe4b, 0x6, 0x6, 0x0, 0x1, 0x5, 0x2, 0x7, 0x3d95, 0x2, 0x40, 0x6, 0x3, 0x6, [0x200, 0x7ff]}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000700)="b7f2288a911993f0", 0x8) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/36, 0x24}, {&(0x7f00000003c0)=""/203, 0xcb}], 0x2}, 0xc3}], 0x1, 0x2003, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32], 0x40}}, 0x8080) 7.58461881s ago: executing program 5 (id=968): r0 = getpid() syz_pidfd_open(r0, 0x0) syz_usb_connect(0x6, 0x2c9, &(0x7f0000000a80)=ANY=[@ANYBLOB], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x27, &(0x7f00000001c0)=ANY=[@ANYBLOB="050f27000122100470d28dc80cd6131eb38c0c2a95dfe341d8b4efbdbc211460a0c2c3"], 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x406}}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000000380)=[{&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000880)="9f384658", 0x4}, {&(0x7f0000000300)='b', 0x1}], 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) prlimit64(r2, 0x7, 0x0, 0x0) socket(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) r5 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) write$P9_RSTATu(r5, 0x0, 0x5a) mount(&(0x7f0000000080)=@nullb, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='vfat\x00', 0xa08410, 0x0) 7.336912678s ago: executing program 0 (id=969): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000080), 0x400, &(0x7f0000000a40)=ANY=[@ANYRES16]) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fanotify_init(0x4c, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x600, 0x0, 0x4673d}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x0, 0x1}}, @IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x50}, 0x1, 0x0, 0x0, 0x5}, 0xc000802) ioctl$SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f0000000280)) shutdown(0xffffffffffffffff, 0x1) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=0000000000000000004000', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) socket$inet6(0xa, 0x5, 0x6) 6.261121964s ago: executing program 1 (id=970): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) 6.193356083s ago: executing program 2 (id=971): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1], 0x6c}}, 0x0) 5.505168664s ago: executing program 5 (id=972): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) write$dsp(0xffffffffffffffff, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x4000) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) eventfd(0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = userfaultfd(0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000090000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r1, {}, {}, {0x9, 0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x40804) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x114}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r6 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) ioctl$VIDIOC_S_TUNER(r6, 0x4054561e, &(0x7f00000001c0)={0x0, "be3ff4f2d3b71ad35cbc5ad31906b40f70ea0177f7f3f12a503b7e8e589e845a"}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000180)=0x9) 5.274949532s ago: executing program 0 (id=973): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x7, 0x0, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000080)=0x6) unshare(0x4000280) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r3, {0x0, 0xffffffffffffffff}}, './file0\x00'}) getgroups(0x0, &(0x7f0000002b80)) sendmsg$netlink(r4, &(0x7f0000002c00)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000480)={0x13c, 0x35, 0x0, 0x70bd2a, 0x25dfdbfc, "", [@generic="4090fb15d1e60c41cc723ba2190ab9256a2980c81c1eac0704d3385920f1fbf0bfef1ebd001c931b632c3e86322a16d316bc7241995c3768d7f3810eaf8117106c8d6bd8697311bf1c7e3ac195c58ac8a24208da19a72a10df9a29642e5d72fbb9c9d9c055ad6cc67f4793c7fc03e7536e69d96e0d69387baf5d3c6e969c1fdf294eb4bc1e5b0ac6ec402181df4d9496b7bc11047fdd8a29b246f097c9752c9ec59311e078a518b8efd88d6bb7", @generic="fa5dbd5249d259fcb01702906dcb49ca83c0e8624de718e0fadd70464df756c744ed9aed3eb188fbcf029917f5c3f477e736ebc6119bac73742f486d7abced11d3518e683d701652df4a389b58826ed014d44d6dc11b0a499c9b50dc4a2cf01e98239de900b76540211b672928af6f56c9d2e48db4c423d8bae439ca83ee"]}, 0x13c}, {&(0x7f00000000c0)={0x78, 0x37, 0x20, 0x70bd2b, 0x25dfdbfe, "", [@generic="58523a4bd5dc37a908c326f9b4f82172bed7b73832d1d23083c2eb9dfc6122e64dda3c0ba1daf81b1b58f2e9af00bd30445e4238d66af9c64d24053897f068f0af7b8c22d896d6655b56d5a3571f1c14c7bf36ed49443ebf4ccc6219846e296d38efa950ad8ce0"]}, 0x78}, {&(0x7f0000000680)={0x148c, 0x14, 0x400, 0x70bd27, 0x25dfdbfd, "", [@generic="e8963116a7524415704639d72699e2b299e9c11ff039bef548dc5d5723b1b2c3ab23c62edba47f5d864c8a9a629823b76fd0826c93796e8627efce0b0787207a5132add403c0351466bd677d7d8092d3db950d4e17c8b5e08c79c3947e0bd482cdf276ab1e28ec4d820bc6551778f4d07ca591c3b3b34be1d0d07fc96812b0a9", @generic="061498e23660a6c243ebd536619cce03da98280037004ef07f38889624f71d531dd60cca5bc9a1f78c367e843070e12ad4045b1ab57970c6312f2418864747727f011c09f8fa410ae72478d40f65ede5a6dd6a013fc863ec68cf2c668c7db2cc9c69f1b9831103394c3961d01c74d6a8972c3589b812", @nested={0x116e, 0xda, 0x0, 0x1, [@nested={0x4, 0x136}, @generic="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", @typed={0xb, 0xbb, 0x0, 0x0, @str='&^--]!\x00'}, @typed={0x14, 0xe9, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x7f}, @typed={0xd5, 0x56, 0x0, 0x0, @binary="b72089b51d5bf50aaf66e9a03b2885d67c8bb595eb53235046d167967b6a45434fcdf070c4a2f2fc0aae4e48fa9491974d414ecf1e89b8084493a59805bd96c609e2bec13a5a750a3522cc6728a61cb602f0ce953cfdf4060a57bc6b3e03a82bb6ff983b8e8e0929f046d1369d165b58dbb1363fdab404a9197523301978cffd7137ed98aa8a900bfb8d7f0f67d3cd427adb07546c8a48b17564d2a4a8e22ad7767729a7d3bde473027d30a4b5339fca495ad180707da6069c635ef9fb0cc81dd38844ab6c4b8a75eb7710f5813afc2466"}, @generic="3b2840d3a5d03a64d0a84b7f10cd988c39ecda514c836cdb89a9aa21e56a3ed260d6", @generic="4dc79720e63bb89c94f32ec3fd394ec62a8de59673119e5ac840f285f98566e2261f8f4ebbb322a8db0c3e187ae157ca65df241393d7d85eedc587d2582a50eae8e5cb113ef81916"]}, @nested={0x14, 0xfc, 0x0, 0x1, [@generic, @typed={0xc, 0x76, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0x10e}]}, @generic="41aec55ea0adc5543191b7b2ed3e65626b6d1c76c5a85bfa3112e53114dbcd29ef31b30c84d002a33bf022e947aa7037bb4c85a8b1d64a512ebe3dae4e66b0db0734db623e320ebd8ab68c934fa6755eb16cc7fc2a8f3302b7bd7a8d0a6bcd8b59412da5b7eb8865a716bbc2cb787af3", @nested={0x18e, 0xc2, 0x0, 0x1, [@nested={0x4, 0x13}, @generic="6614d5cd513370a739d5ee83af2aec57b061810ef907461a1ee0ae7d78d6699ee075ab535cdb299304d27ff3d7b37eb7ebe38ec2458e811c8dcc81f40e3064775ba4ad2d8af768125c4425cfdbf698b7b73cf997088ae09020f8bd8f56176dea0412f1f3c9686ce164702d6b2048dcea516f652b6e792cb785b1c70201a529e4955274993690", @generic="65d08bc8810b6e1ab8bb3221cc958f8f437d0ac9a08fba90792f9c30ddd3218f1edc838e23a7f04742bba6d5769b62f42efbe544d19029d1b3396fb0f47f1b982494087c87a6feab947891b53b39f52cb0fa8f3f14abc553d51f70f41ff5bb73ad7446d16a949e0f04f18e3ae38bccf7a5bfeaa79893fcc16e6c6fee9a544a3c6d81d8c031602d934841079b2f828063bb6b1365a97de5412ebe836060061e207e650c498a1a57ba149a86e710dd09d3edb565acfd408936d37a7305dea1d26c3dd396fd6ddd7a39b858629c95272974353f483ab73ae0ee9c927901c7dd4e359b", @generic="250676540fc3616eff5263", @typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@mcast1}]}]}, 0x148c}, {&(0x7f00000002c0)={0x38, 0x1b, 0x800, 0x70bd2b, 0x25dfdbfb, "", [@generic="67d9edd3eee6a73621df98a573cc37debd7876d4aedadcb2c92478369fc2348eb0ac378e1ff525"]}, 0x38}], 0x4, &(0x7f0000002bc0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0, r5}}}], 0x40, 0x20000040}, 0x20000000) landlock_create_ruleset(&(0x7f0000000180)={0x100, 0x0, 0x80ffff}, 0x18, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r6, 0x6, 0x3, &(0x7f0000000040)=0x24, 0x4) setsockopt$inet_int(r6, 0x0, 0xf, &(0x7f0000000000)=0x1001, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) 5.19060434s ago: executing program 2 (id=974): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0xa8003, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3) ioctl$TCFLSH(r3, 0x540b, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000180)={0xc, 0x0, 0x0}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/net/ipv4/tcp_window_scaling\x00', 0x1, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003e00070100000000fcdbdf25047c0000040000001400018008001600", @ANYRES32=0x0, @ANYBLOB="0600060080"], 0x2c}}, 0x0) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000380)={0x28, 0x3, r5, r5, 0x1000, 0x100008000005, 0xc}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="64b6b7861cd5b301917ce3c3d368140000000400", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r9, 0x5}, 0x10) request_key(&(0x7f0000002740)='asymmetric\x00', &(0x7f0000002780)={'syz', 0x3}, &(0x7f00000027c0)=',*[\\/&)\x00', 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x1b4, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd269}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x88b8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1ff}]}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xcf3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x80}]}]}, 0x1b4}}, 0x8101) 4.260935607s ago: executing program 1 (id=975): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0xa, 0x20) r1 = socket$inet6(0xa, 0x2, 0x75) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff7}, {0x0, 0xfef2, 0xd, 0x40000000000}, 0x101, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0xfffffffe, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x35ced141}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa0, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x0, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2b}, 0x0, 0x4}}, 0xe8) close(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48081) shutdown(0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'macvlan1\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="1546040000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r5], 0x44}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYBLOB="280000001200010100000000e0ffffff07000000", @ANYRES16=r3, @ANYBLOB="488400000040000008001d00c3000000fa0f57a54a30cdc31ed4efbccebe56193cce61caab83e21f804a175df90d07386fb3fafcea54e6aede045e0a94ace1a862639a5c6a79cdfe25853d999481e49f9373a864c7dca2d9189ee1f9dbaacbb9958ce8a3c1ec3b353d396a38b306"], 0x28}, 0x1, 0x0, 0x0, 0x2000c840}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x28020480) socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in6=@initdev, @in=@broadcast}}, {{@in6=@dev}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) 2.094804218s ago: executing program 0 (id=976): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9acaf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r7, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0x80000}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x400000000000, {0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) getresuid(&(0x7f0000000280), &(0x7f0000000300), &(0x7f00000003c0)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000080000000000070000000c000180050002002c"], 0x20}, 0x1, 0x0, 0x0, 0x4001c000}, 0x0) 2.079006464s ago: executing program 2 (id=977): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9acaf000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r7, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x29, 0x0, 0x80000}}, 0x50) syz_fuse_handle_req(r7, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x400000000000, {0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) getresuid(&(0x7f0000000280), &(0x7f0000000300), &(0x7f00000003c0)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000080000000000070000000c000180050002002c"], 0x20}, 0x1, 0x0, 0x0, 0x4001c000}, 0x0) 1.021716721s ago: executing program 3 (id=978): socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000780)={0xfffffffffffffff8, [{}, {}, {}, {}, {}, {}, {0x0}], 0x7b, "aa5c7449b7e81d"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000001780)={{r1, 0x3, 0xffffffffffffffff, 0xffffffffffff8001, 0x7fffffffffffffff, 0x6de3e62a, 0x2, 0x4, 0x7, 0x7, 0xe3d, 0xd97, 0x7, 0x10000}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000061189d000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r2, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000500)={[&(0x7f0000000000)='.+-:\x00', &(0x7f0000000540)=' T\xfc\x81\x8e\x9f5\x0e \x043[B\xad\x13\x9f\xae\x8f\xbb\x9a\x0f\x9f\x13\xa5\xfc9\xbb\xa4.\xf4\xeb\x03\xf1\xb6\x8c\xc4E\x93\n&k\xec\xc8\\h\xd6\x1e\xcb\fA\\da/O\xdcn7\x1b@\xbf\xfb\x17J\xaaD\xe4\x01\xbc\xdc\n\x88\xfc\xcci\xc1\xe8\xf8\x1e6&\bE\x8f\x9b\xc6\x8d0\xa7 -\xecC8O*7\xfa&\xf9\aC\xab\x03g\x06\xda\x8c)\xae\xe3\x16\x9dz\x87\xd6OZX\xa4\xee\xa7\xebe\x14Qp\x96\x00\xd0VK\xe2$i\xd4\xcb-\xd4\x82w\x13\x98\xfcW\x9d\xff\xed\xd4\x14;]\xf8\xccS\xddl\x96v\x97\x988\xa7sQ\x1aN\xbdU.\x89\\\xfa\xc2\xcd\xde', &(0x7f0000000100)='security.']}) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='host1x_syncpt_load_min\x00', r5, 0x0, 0x3}, 0x18) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452492954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) 0s ago: executing program 2 (id=979): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) utime(&(0x7f0000001080)='./cgroup.cpu/cgroup.procs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r4}, &(0x7f0000000040), &(0x7f0000000140)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r4, &(0x7f00000002c0), 0x0}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES64=r5, @ANYRESOCT=r3, @ANYRES32=0x0, @ANYRES32, @ANYRES32], 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="2d000000ffef000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, 0x0, &(0x7f0000000700)=r6}, 0x20) sendmsg$inet(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000001c0)={0x2, @sdr={0x32435750, 0x5}}) mmap(&(0x7f00008c2000/0x4000)=nil, 0x4000, 0x3000003, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r9) kernel console output (not intermixed with test programs): interval 1, probability 0, space 0, times 0 [ 433.142781][ T8438] CPU: 0 UID: 0 PID: 8438 Comm: syz.3.463 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 433.142810][ T8438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 433.142822][ T8438] Call Trace: [ 433.142830][ T8438] [ 433.142839][ T8438] dump_stack_lvl+0x189/0x250 [ 433.142868][ T8438] ? __pfx____ratelimit+0x10/0x10 [ 433.142890][ T8438] ? __pfx_dump_stack_lvl+0x10/0x10 [ 433.142913][ T8438] ? __pfx__printk+0x10/0x10 [ 433.142939][ T8438] ? __might_fault+0xb0/0x130 [ 433.142974][ T8438] should_fail_ex+0x414/0x560 [ 433.143001][ T8438] _copy_from_user+0x2d/0xb0 [ 433.143030][ T8438] vhost_dev_ioctl+0x1a8/0xbc0 [ 433.143066][ T8438] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 433.143101][ T8438] ? smack_file_ioctl+0x24a/0x340 [ 433.143126][ T8438] vhost_vsock_dev_ioctl+0x21f/0xdc0 [ 433.143164][ T8438] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 433.143194][ T8438] ? __fget_files+0x2a/0x420 [ 433.143214][ T8438] ? __fget_files+0x3a0/0x420 [ 433.143235][ T8438] ? __fget_files+0x2a/0x420 [ 433.143260][ T8438] ? bpf_lsm_file_ioctl+0x9/0x20 [ 433.143281][ T8438] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 433.143308][ T8438] __se_sys_ioctl+0xfc/0x170 [ 433.143340][ T8438] do_syscall_64+0xfa/0x3b0 [ 433.143363][ T8438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.143381][ T8438] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 433.143399][ T8438] ? clear_bhb_loop+0x60/0xb0 [ 433.143424][ T8438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.143444][ T8438] RIP: 0033:0x7f13ee18ebe9 [ 433.143463][ T8438] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.143479][ T8438] RSP: 002b:00007f13eefc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.143501][ T8438] RAX: ffffffffffffffda RBX: 00007f13ee3b5fa0 RCX: 00007f13ee18ebe9 [ 433.143515][ T8438] RDX: 0000200000000200 RSI: 000000004008af04 RDI: 0000000000000003 [ 433.143528][ T8438] RBP: 00007f13eefc1090 R08: 0000000000000000 R09: 0000000000000000 [ 433.143540][ T8438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.143552][ T8438] R13: 00007f13ee3b6038 R14: 00007f13ee3b5fa0 R15: 00007ffc9bfc1338 [ 433.143587][ T8438] [ 433.403701][ T8445] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 436.132599][ T8465] fuse: Bad value for 'rootmode' [ 436.939898][ T8474] bio_check_eod: 2 callbacks suppressed [ 436.939920][ T8474] syz.3.471: attempt to access beyond end of device [ 436.939920][ T8474] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 436.972607][ T8474] efs: cannot read volume header [ 438.055288][ T8502] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 438.562197][ T8507] FAULT_INJECTION: forcing a failure. [ 438.562197][ T8507] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.611035][ T8507] CPU: 1 UID: 0 PID: 8507 Comm: syz.2.479 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 438.611064][ T8507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 438.611075][ T8507] Call Trace: [ 438.611083][ T8507] [ 438.611092][ T8507] dump_stack_lvl+0x189/0x250 [ 438.611121][ T8507] ? __pfx____ratelimit+0x10/0x10 [ 438.611143][ T8507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.611166][ T8507] ? __pfx__printk+0x10/0x10 [ 438.611213][ T8507] should_fail_ex+0x414/0x560 [ 438.611240][ T8507] _copy_to_user+0x31/0xb0 [ 438.611270][ T8507] simple_read_from_buffer+0xe1/0x170 [ 438.611296][ T8507] proc_fail_nth_read+0x1df/0x250 [ 438.611325][ T8507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 438.611353][ T8507] ? rw_verify_area+0x258/0x650 [ 438.611382][ T8507] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 438.611407][ T8507] vfs_read+0x200/0x980 [ 438.611443][ T8507] ? __pfx___mutex_lock+0x10/0x10 [ 438.611465][ T8507] ? __pfx_vfs_read+0x10/0x10 [ 438.611496][ T8507] ? __fget_files+0x2a/0x420 [ 438.611523][ T8507] ? __fget_files+0x3a0/0x420 [ 438.611543][ T8507] ? __fget_files+0x2a/0x420 [ 438.611577][ T8507] ksys_read+0x145/0x250 [ 438.611594][ T8507] ? __fget_files+0x3a0/0x420 [ 438.611617][ T8507] ? __pfx_ksys_read+0x10/0x10 [ 438.611643][ T8507] ? do_syscall_64+0xbe/0x3b0 [ 438.611670][ T8507] do_syscall_64+0xfa/0x3b0 [ 438.611691][ T8507] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.611712][ T8507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.611732][ T8507] ? clear_bhb_loop+0x60/0xb0 [ 438.611758][ T8507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.611785][ T8507] RIP: 0033:0x7fba2298d5fc [ 438.611805][ T8507] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 438.611821][ T8507] RSP: 002b:00007fba23751030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 438.611844][ T8507] RAX: ffffffffffffffda RBX: 00007fba22bb5fa0 RCX: 00007fba2298d5fc [ 438.611859][ T8507] RDX: 000000000000000f RSI: 00007fba237510a0 RDI: 0000000000000006 [ 438.611871][ T8507] RBP: 00007fba23751090 R08: 0000000000000000 R09: 0000000000000000 [ 438.611883][ T8507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.611895][ T8507] R13: 00007fba22bb6038 R14: 00007fba22bb5fa0 R15: 00007fff4cbd5988 [ 438.611930][ T8507] [ 439.257401][ T5830] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 439.415400][ T5830] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 439.436888][ T5830] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 439.674889][ T5830] usb 2-1: config 0 has no interface number 0 [ 439.708086][ T5830] usb 2-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 439.722494][ T5830] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.735333][ T5830] usb 2-1: Product: syz [ 439.741798][ T5830] usb 2-1: Manufacturer: syz [ 439.748751][ T5830] usb 2-1: SerialNumber: syz [ 439.770599][ T5830] usb 2-1: config 0 descriptor?? [ 440.834786][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.234272][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.786600][ T5830] usb 2-1: Found UVC 0.00 device syz (046d:0823) [ 441.810106][ T5830] usb 2-1: No valid video chain found. [ 441.851259][ T5830] usb 2-1: USB disconnect, device number 7 [ 442.864872][ T8555] netlink: 24 bytes leftover after parsing attributes in process `syz.3.490'. [ 442.979459][ T8555] IPVS: Error connecting to the multicast addr [ 444.833449][ T8583] sctp: [Deprecated]: syz.5.494 (pid 8583) Use of struct sctp_assoc_value in delayed_ack socket option. [ 444.833449][ T8583] Use struct sctp_sack_info instead [ 445.446284][ T8598] syz.0.496: attempt to access beyond end of device [ 445.446284][ T8598] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 445.461446][ T8598] syz.0.496: attempt to access beyond end of device [ 445.461446][ T8598] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 445.475110][ T8598] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 445.486516][ T8598] syz.0.496: attempt to access beyond end of device [ 445.486516][ T8598] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 445.500025][ T8598] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 445.515085][ T8598] syz.0.496: attempt to access beyond end of device [ 445.515085][ T8598] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 445.529302][ T8598] syz.0.496: attempt to access beyond end of device [ 445.529302][ T8598] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 445.542669][ T8598] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 445.554487][ T8598] syz.0.496: attempt to access beyond end of device [ 445.554487][ T8598] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 445.568074][ T8598] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 445.581841][ T8598] syz.0.496: attempt to access beyond end of device [ 445.581841][ T8598] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 445.595922][ T8598] syz.0.496: attempt to access beyond end of device [ 445.595922][ T8598] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 445.609324][ T8598] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 445.619731][ T8598] syz.0.496: attempt to access beyond end of device [ 445.619731][ T8598] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 445.633183][ T8598] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 445.645669][ T8598] syz.0.496: attempt to access beyond end of device [ 445.645669][ T8598] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 445.661037][ T8598] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 445.671580][ T8598] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 445.681379][ T8598] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 446.554960][ T8618] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 447.833546][ T43] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 448.066631][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD6, changing to 0x86 [ 448.164441][ T43] usb 4-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 448.192634][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.218641][ T43] usb 4-1: Product: syz [ 448.246968][ T43] usb 4-1: Manufacturer: syz [ 448.270023][ T43] usb 4-1: SerialNumber: syz [ 448.338122][ T43] usb 4-1: config 0 descriptor?? [ 448.558423][ T43] powermate: unknown product id 0240 [ 448.632289][ T43] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 448.701559][ C1] powermate: config urb returned -71 [ 448.707571][ C1] powermate: config urb returned -71 [ 448.713883][ C1] powermate: config urb returned -71 [ 448.719388][ C1] powermate: config urb returned -71 [ 448.730320][ T43] usb 4-1: USB disconnect, device number 9 [ 448.736500][ C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 450.872908][ T5921] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 450.903372][ T8667] FAULT_INJECTION: forcing a failure. [ 450.903372][ T8667] name failslab, interval 1, probability 0, space 0, times 0 [ 450.953491][ T8667] CPU: 1 UID: 0 PID: 8667 Comm: syz.1.513 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 450.953519][ T8667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 450.953531][ T8667] Call Trace: [ 450.953539][ T8667] [ 450.953548][ T8667] dump_stack_lvl+0x189/0x250 [ 450.953576][ T8667] ? __pfx____ratelimit+0x10/0x10 [ 450.953598][ T8667] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.953621][ T8667] ? __pfx__printk+0x10/0x10 [ 450.953651][ T8667] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 450.953682][ T8667] ? lockdep_hardirqs_on+0x9c/0x150 [ 450.953708][ T8667] should_fail_ex+0x414/0x560 [ 450.953735][ T8667] should_failslab+0xa8/0x100 [ 450.953760][ T8667] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 450.953780][ T8667] ? __alloc_skb+0x112/0x2d0 [ 450.953814][ T8667] __alloc_skb+0x112/0x2d0 [ 450.953846][ T8667] create_monitor_ctrl_open+0x156/0x880 [ 450.953876][ T8667] ? rcu_is_watching+0x15/0xb0 [ 450.953899][ T8667] ? cap_capable+0x11f/0x460 [ 450.953921][ T8667] ? __pfx_create_monitor_ctrl_open+0x10/0x10 [ 450.953952][ T8667] ? bpf_lsm_capable+0x9/0x20 [ 450.953989][ T8667] hci_sock_ioctl+0x2f2/0x910 [ 450.954014][ T8667] ? __pfx_smack_log+0x10/0x10 [ 450.954047][ T8667] sock_do_ioctl+0xdc/0x300 [ 450.954073][ T8667] ? __pfx_sock_do_ioctl+0x10/0x10 [ 450.954093][ T8667] ? smk_tskacc+0x2fc/0x370 [ 450.954127][ T8667] ? smack_file_ioctl+0x24a/0x340 [ 450.954154][ T8667] sock_ioctl+0x576/0x790 [ 450.954179][ T8667] ? __pfx_sock_ioctl+0x10/0x10 [ 450.954201][ T8667] ? __fget_files+0x2a/0x420 [ 450.954223][ T8667] ? __fget_files+0x3a0/0x420 [ 450.954244][ T8667] ? __fget_files+0x2a/0x420 [ 450.954270][ T8667] ? bpf_lsm_file_ioctl+0x9/0x20 [ 450.954292][ T8667] ? __pfx_sock_ioctl+0x10/0x10 [ 450.954314][ T8667] __se_sys_ioctl+0xfc/0x170 [ 450.954347][ T8667] do_syscall_64+0xfa/0x3b0 [ 450.954371][ T8667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.954389][ T8667] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 450.954409][ T8667] ? clear_bhb_loop+0x60/0xb0 [ 450.954442][ T8667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.954462][ T8667] RIP: 0033:0x7fe8dab8ebe9 [ 450.954480][ T8667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.954496][ T8667] RSP: 002b:00007fe8db955038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.954517][ T8667] RAX: ffffffffffffffda RBX: 00007fe8dadb5fa0 RCX: 00007fe8dab8ebe9 [ 450.954532][ T8667] RDX: 0000200000000880 RSI: 00000000400448dd RDI: 0000000000000004 [ 450.954544][ T8667] RBP: 00007fe8db955090 R08: 0000000000000000 R09: 0000000000000000 [ 450.954556][ T8667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.954567][ T8667] R13: 00007fe8dadb6038 R14: 00007fe8dadb5fa0 R15: 00007fff444770f8 [ 450.954602][ T8667] [ 451.319401][ T5921] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.335556][ T8671] netlink: 1004 bytes leftover after parsing attributes in process `syz.5.514'. [ 451.365981][ T5921] usb 1-1: config 0 has no interfaces? [ 451.382553][ T5921] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 451.419364][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.479111][ T5921] usb 1-1: config 0 descriptor?? [ 451.562345][ T8673] tipc: Started in network mode [ 451.567478][ T8673] tipc: Node identity 2d000000400000000075000000000001, cluster identity 4711 [ 451.588479][ T8673] tipc: Enabling of bearer rejected, failed to enable media [ 451.677109][ T8676] FAULT_INJECTION: forcing a failure. [ 451.677109][ T8676] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.708501][ T8676] CPU: 1 UID: 0 PID: 8676 Comm: syz.5.516 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 451.708541][ T8676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 451.708552][ T8676] Call Trace: [ 451.708560][ T8676] [ 451.708568][ T8676] dump_stack_lvl+0x189/0x250 [ 451.708596][ T8676] ? __pfx____ratelimit+0x10/0x10 [ 451.708618][ T8676] ? __pfx_dump_stack_lvl+0x10/0x10 [ 451.708639][ T8676] ? __pfx__printk+0x10/0x10 [ 451.708665][ T8676] ? __might_fault+0xb0/0x130 [ 451.708697][ T8676] should_fail_ex+0x414/0x560 [ 451.708724][ T8676] _copy_from_user+0x2d/0xb0 [ 451.708754][ T8676] comedi_unlocked_ioctl+0x8ae/0xfc0 [ 451.708785][ T8676] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 451.708806][ T8676] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 451.708829][ T8676] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 451.708849][ T8676] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 451.708872][ T8676] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 451.708891][ T8676] ? smack_log+0xef/0x3f0 [ 451.708921][ T8676] ? __pfx_smack_log+0x10/0x10 [ 451.708950][ T8676] ? smk_access+0x14c/0x4e0 [ 451.708985][ T8676] ? smk_tskacc+0x2fc/0x370 [ 451.709019][ T8676] ? smack_file_ioctl+0x2a9/0x340 [ 451.709041][ T8676] ? __pfx_smack_file_ioctl+0x10/0x10 [ 451.709074][ T8676] ? __fget_files+0x2a/0x420 [ 451.709095][ T8676] ? __fget_files+0x3a0/0x420 [ 451.709115][ T8676] ? __fget_files+0x2a/0x420 [ 451.709141][ T8676] ? bpf_lsm_file_ioctl+0x9/0x20 [ 451.709163][ T8676] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 451.709183][ T8676] __se_sys_ioctl+0xfc/0x170 [ 451.709215][ T8676] do_syscall_64+0xfa/0x3b0 [ 451.709235][ T8676] ? lockdep_hardirqs_on+0x9c/0x150 [ 451.709256][ T8676] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.709274][ T8676] ? clear_bhb_loop+0x60/0xb0 [ 451.709299][ T8676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.709319][ T8676] RIP: 0033:0x7f4de258ebe9 [ 451.709338][ T8676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.709354][ T8676] RSP: 002b:00007f4de07f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 451.709377][ T8676] RAX: ffffffffffffffda RBX: 00007f4de27b5fa0 RCX: 00007f4de258ebe9 [ 451.709391][ T8676] RDX: 00002000000010c0 RSI: 0000000080306403 RDI: 0000000000000003 [ 451.709404][ T8676] RBP: 00007f4de07f6090 R08: 0000000000000000 R09: 0000000000000000 [ 451.709416][ T8676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.709428][ T8676] R13: 00007f4de27b6038 R14: 00007f4de27b5fa0 R15: 00007fffe604c078 [ 451.709461][ T8676] [ 452.029165][ T8681] Dead loop on virtual device ip6_vti0, fix it urgently! [ 452.038035][ T8681] Dead loop on virtual device ip6_vti0, fix it urgently! [ 452.045684][ T8681] Dead loop on virtual device ip6_vti0, fix it urgently! [ 452.053273][ T8681] Dead loop on virtual device ip6_vti0, fix it urgently! [ 452.060780][ T8681] Dead loop on virtual device ip6_vti0, fix it urgently! [ 452.068334][ T8681] Dead loop on virtual device ip6_vti0, fix it urgently! [ 453.013091][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 453.042851][ T8667] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 453.102910][ T10] usb 1-1: USB disconnect, device number 9 [ 453.304178][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.521'. [ 453.313882][ T8698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.768007][ T8698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.092680][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 455.098917][ T8691] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 455.311632][ T8717] FAULT_INJECTION: forcing a failure. [ 455.311632][ T8717] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 455.396825][ T8718] sock: sock_timestamping_bind_phc: sock not bind to device [ 456.115307][ T8717] CPU: 0 UID: 0 PID: 8717 Comm: syz.0.526 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 456.115338][ T8717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 456.115351][ T8717] Call Trace: [ 456.115360][ T8717] [ 456.115368][ T8717] dump_stack_lvl+0x189/0x250 [ 456.115398][ T8717] ? __pfx____ratelimit+0x10/0x10 [ 456.115421][ T8717] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.115443][ T8717] ? __pfx__printk+0x10/0x10 [ 456.115470][ T8717] ? __might_fault+0xb0/0x130 [ 456.115515][ T8717] should_fail_ex+0x414/0x560 [ 456.115543][ T8717] _copy_from_user+0x2d/0xb0 [ 456.115572][ T8717] ___sys_sendmsg+0x158/0x2a0 [ 456.115607][ T8717] ? __pfx____sys_sendmsg+0x10/0x10 [ 456.115683][ T8717] ? __fget_files+0x2a/0x420 [ 456.115704][ T8717] ? __fget_files+0x3a0/0x420 [ 456.115739][ T8717] __x64_sys_sendmsg+0x19b/0x260 [ 456.115773][ T8717] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 456.115815][ T8717] ? __pfx_ksys_write+0x10/0x10 [ 456.115831][ T8717] ? rcu_is_watching+0x15/0xb0 [ 456.115860][ T8717] ? do_syscall_64+0xbe/0x3b0 [ 456.115888][ T8717] do_syscall_64+0xfa/0x3b0 [ 456.115908][ T8717] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.115929][ T8717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.115949][ T8717] ? clear_bhb_loop+0x60/0xb0 [ 456.115974][ T8717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.115993][ T8717] RIP: 0033:0x7fdfe9f8ebe9 [ 456.116012][ T8717] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.116030][ T8717] RSP: 002b:00007fdfe81f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 456.116053][ T8717] RAX: ffffffffffffffda RBX: 00007fdfea1b5fa0 RCX: 00007fdfe9f8ebe9 [ 456.116068][ T8717] RDX: 0000000000000000 RSI: 0000200000004340 RDI: 0000000000000003 [ 456.116081][ T8717] RBP: 00007fdfe81f6090 R08: 0000000000000000 R09: 0000000000000000 [ 456.116093][ T8717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.116106][ T8717] R13: 00007fdfea1b6038 R14: 00007fdfea1b5fa0 R15: 00007ffeaeb87338 [ 456.116140][ T8717] [ 456.327795][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.691040][ T8743] FAULT_INJECTION: forcing a failure. [ 460.691040][ T8743] name failslab, interval 1, probability 0, space 0, times 0 [ 460.722547][ T8743] CPU: 1 UID: 0 PID: 8743 Comm: syz.3.532 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 460.722578][ T8743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 460.722591][ T8743] Call Trace: [ 460.722611][ T8743] [ 460.722619][ T8743] dump_stack_lvl+0x189/0x250 [ 460.722648][ T8743] ? __pfx____ratelimit+0x10/0x10 [ 460.722669][ T8743] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.722691][ T8743] ? __pfx__printk+0x10/0x10 [ 460.722723][ T8743] ? __pfx___might_resched+0x10/0x10 [ 460.722743][ T8743] ? fs_reclaim_acquire+0x7d/0x100 [ 460.722772][ T8743] should_fail_ex+0x414/0x560 [ 460.722799][ T8743] should_failslab+0xa8/0x100 [ 460.722823][ T8743] kmem_cache_alloc_noprof+0x73/0x3c0 [ 460.722842][ T8743] ? alloc_empty_file+0x55/0x1d0 [ 460.722873][ T8743] alloc_empty_file+0x55/0x1d0 [ 460.722900][ T8743] path_openat+0x107/0x3830 [ 460.722926][ T8743] ? arch_stack_walk+0xfc/0x150 [ 460.722983][ T8743] ? kasan_save_track+0x4f/0x80 [ 460.723011][ T8743] ? kasan_save_track+0x3e/0x80 [ 460.723037][ T8743] ? __kasan_slab_alloc+0x6c/0x80 [ 460.723055][ T8743] ? getname_flags+0xb8/0x540 [ 460.723078][ T8743] ? __pfx_path_openat+0x10/0x10 [ 460.723103][ T8743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.723155][ T8743] do_filp_open+0x1fa/0x410 [ 460.723181][ T8743] ? __lock_acquire+0xab9/0xd20 [ 460.723202][ T8743] ? __pfx_do_filp_open+0x10/0x10 [ 460.723257][ T8743] ? _raw_spin_unlock+0x28/0x50 [ 460.723286][ T8743] ? alloc_fd+0x64c/0x6c0 [ 460.723322][ T8743] do_sys_openat2+0x121/0x1c0 [ 460.723352][ T8743] ? __pfx_do_sys_openat2+0x10/0x10 [ 460.723379][ T8743] ? ksys_write+0x22a/0x250 [ 460.723400][ T8743] ? __pfx_ksys_write+0x10/0x10 [ 460.723416][ T8743] ? rcu_is_watching+0x15/0xb0 [ 460.723442][ T8743] __x64_sys_openat+0x138/0x170 [ 460.723475][ T8743] do_syscall_64+0xfa/0x3b0 [ 460.723496][ T8743] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.723517][ T8743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.723536][ T8743] ? clear_bhb_loop+0x60/0xb0 [ 460.723561][ T8743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.723580][ T8743] RIP: 0033:0x7f13ee18ebe9 [ 460.723607][ T8743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.723624][ T8743] RSP: 002b:00007f13eefa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 460.723647][ T8743] RAX: ffffffffffffffda RBX: 00007f13ee3b6090 RCX: 00007f13ee18ebe9 [ 460.723662][ T8743] RDX: 0000000000004400 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 460.723675][ T8743] RBP: 00007f13eefa0090 R08: 0000000000000000 R09: 0000000000000000 [ 460.723686][ T8743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.723698][ T8743] R13: 00007f13ee3b6128 R14: 00007f13ee3b6090 R15: 00007ffc9bfc1338 [ 460.723730][ T8743] [ 461.410104][ T8756] netlink: 'syz.2.536': attribute type 1 has an invalid length. [ 461.726041][ T8767] bio_check_eod: 2 callbacks suppressed [ 461.726086][ T8767] syz.0.535: attempt to access beyond end of device [ 461.726086][ T8767] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 461.747691][ T8767] syz.0.535: attempt to access beyond end of device [ 461.747691][ T8767] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 461.760983][ T8767] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 461.772193][ T8767] syz.0.535: attempt to access beyond end of device [ 461.772193][ T8767] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 461.785446][ T8767] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 461.799752][ T8767] syz.0.535: attempt to access beyond end of device [ 461.799752][ T8767] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 461.814164][ T8767] syz.0.535: attempt to access beyond end of device [ 461.814164][ T8767] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 461.827605][ T8767] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 461.838753][ T8767] syz.0.535: attempt to access beyond end of device [ 461.838753][ T8767] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 461.852237][ T8767] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 461.865286][ T8767] syz.0.535: attempt to access beyond end of device [ 461.865286][ T8767] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 461.879586][ T8767] syz.0.535: attempt to access beyond end of device [ 461.879586][ T8767] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 461.893037][ T8767] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 461.903336][ T8767] syz.0.535: attempt to access beyond end of device [ 461.903336][ T8767] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 461.916631][ T8767] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 461.928974][ T8767] syz.0.535: attempt to access beyond end of device [ 461.928974][ T8767] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 461.944069][ T8767] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 461.954598][ T8767] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 461.964299][ T8767] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 462.254367][ T8756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 462.396345][ T8759] bond1: (slave geneve2): making interface the new active one [ 462.435054][ T8759] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 462.517990][ T8775] overlayfs: failed to resolve 'smackfsfloor=rootcontext': -2 [ 462.670220][ T8779] kvm: pic: level sensitive irq not supported [ 462.670463][ T8779] kvm: pic: non byte read [ 462.727333][ T8779] kvm: pic: level sensitive irq not supported [ 462.727424][ T8779] kvm: pic: non byte read [ 462.805923][ T8779] kvm: pic: level sensitive irq not supported [ 462.806012][ T8779] kvm: pic: non byte read [ 462.833228][ T8779] kvm: pic: level sensitive irq not supported [ 462.833318][ T8779] kvm: pic: non byte read [ 462.885665][ T8779] kvm: pic: level sensitive irq not supported [ 462.885755][ T8779] kvm: pic: non byte read [ 462.944597][ T8779] kvm: pic: level sensitive irq not supported [ 462.944697][ T8779] kvm: pic: non byte read [ 463.134593][ T8779] kvm: pic: level sensitive irq not supported [ 463.134683][ T8779] kvm: pic: non byte read [ 463.930785][ T8786] netlink: 'syz.5.541': attribute type 23 has an invalid length. [ 466.651712][ T8811] sock: sock_timestamping_bind_phc: sock not bind to device [ 467.323555][ T8809] FAULT_INJECTION: forcing a failure. [ 467.323555][ T8809] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.342562][ T8809] CPU: 1 UID: 0 PID: 8809 Comm: syz.3.548 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 467.342592][ T8809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 467.342603][ T8809] Call Trace: [ 467.342610][ T8809] [ 467.342618][ T8809] dump_stack_lvl+0x189/0x250 [ 467.342639][ T8809] ? __pfx____ratelimit+0x10/0x10 [ 467.342654][ T8809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 467.342667][ T8809] ? __pfx__printk+0x10/0x10 [ 467.342684][ T8809] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 467.342706][ T8809] should_fail_ex+0x414/0x560 [ 467.342722][ T8809] _copy_to_user+0x31/0xb0 [ 467.342745][ T8809] put_timespec64+0xc0/0x120 [ 467.342763][ T8809] ? __pfx_put_timespec64+0x10/0x10 [ 467.342788][ T8809] __x64_sys_clock_gettime+0x208/0x260 [ 467.342807][ T8809] ? __pfx___x64_sys_clock_gettime+0x10/0x10 [ 467.342823][ T8809] ? rcu_is_watching+0x15/0xb0 [ 467.342839][ T8809] ? do_syscall_64+0xbe/0x3b0 [ 467.342855][ T8809] do_syscall_64+0xfa/0x3b0 [ 467.342869][ T8809] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.342880][ T8809] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 467.342892][ T8809] ? clear_bhb_loop+0x60/0xb0 [ 467.342906][ T8809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.342918][ T8809] RIP: 0033:0x7f13ee18ebe9 [ 467.342930][ T8809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.342940][ T8809] RSP: 002b:00007f13eefc1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 467.342955][ T8809] RAX: ffffffffffffffda RBX: 00007f13ee3b5fa0 RCX: 00007f13ee18ebe9 [ 467.342964][ T8809] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 467.342971][ T8809] RBP: 00007f13eefc1090 R08: 0000000000000000 R09: 0000000000000000 [ 467.342978][ T8809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.342986][ T8809] R13: 00007f13ee3b6038 R14: 00007f13ee3b5fa0 R15: 00007ffc9bfc1338 [ 467.343005][ T8809] [ 467.936243][ T8817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.551'. [ 468.882553][ T5972] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 469.140887][ T8829] sctp: [Deprecated]: syz.2.553 (pid 8829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 469.140887][ T8829] Use struct sctp_sack_info instead [ 469.220591][ T5972] usb 1-1: config 0 has an invalid interface number: 117 but max is 0 [ 469.285262][ T5972] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 469.421311][ T5972] usb 1-1: config 0 has no interface number 0 [ 469.553591][ T5972] usb 1-1: too many endpoints for config 0 interface 117 altsetting 0: 239, using maximum allowed: 30 [ 469.682099][ T5972] usb 1-1: config 0 interface 117 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 239 [ 469.730553][ T5972] usb 1-1: New USB device found, idVendor=0742, idProduct=2009, bcdDevice=61.46 [ 469.755701][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.814870][ T5972] usb 1-1: Product: syz [ 469.851364][ T5972] usb 1-1: Manufacturer: syz [ 469.887340][ T5972] usb 1-1: SerialNumber: syz [ 469.940212][ T5972] usb 1-1: config 0 descriptor?? [ 470.055196][ T5972] HFC-S_USB 1-1:0.117: probe with driver HFC-S_USB failed with error -5 [ 471.815318][ T43] usb 1-1: USB disconnect, device number 10 [ 472.180087][ T8842] FAULT_INJECTION: forcing a failure. [ 472.180087][ T8842] name failslab, interval 1, probability 0, space 0, times 0 [ 472.239386][ T8842] CPU: 0 UID: 0 PID: 8842 Comm: syz.3.556 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 472.239417][ T8842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 472.239435][ T8842] Call Trace: [ 472.239443][ T8842] [ 472.239452][ T8842] dump_stack_lvl+0x189/0x250 [ 472.239482][ T8842] ? __pfx____ratelimit+0x10/0x10 [ 472.239504][ T8842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 472.239536][ T8842] ? __pfx__printk+0x10/0x10 [ 472.239570][ T8842] ? __pfx___might_resched+0x10/0x10 [ 472.239590][ T8842] ? fs_reclaim_acquire+0x7d/0x100 [ 472.239620][ T8842] should_fail_ex+0x414/0x560 [ 472.239648][ T8842] should_failslab+0xa8/0x100 [ 472.239672][ T8842] kmem_cache_alloc_noprof+0x73/0x3c0 [ 472.239692][ T8842] ? alloc_empty_file+0x55/0x1d0 [ 472.239723][ T8842] alloc_empty_file+0x55/0x1d0 [ 472.239750][ T8842] path_openat+0x107/0x3830 [ 472.239777][ T8842] ? arch_stack_walk+0xfc/0x150 [ 472.239834][ T8842] ? kasan_save_track+0x4f/0x80 [ 472.239861][ T8842] ? kasan_save_track+0x3e/0x80 [ 472.239884][ T8842] ? __kasan_slab_alloc+0x6c/0x80 [ 472.239902][ T8842] ? getname_flags+0xb8/0x540 [ 472.239925][ T8842] ? __pfx_path_openat+0x10/0x10 [ 472.239950][ T8842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.239995][ T8842] do_filp_open+0x1fa/0x410 [ 472.240021][ T8842] ? __lock_acquire+0xab9/0xd20 [ 472.240045][ T8842] ? __pfx_do_filp_open+0x10/0x10 [ 472.240099][ T8842] ? _raw_spin_unlock+0x28/0x50 [ 472.240128][ T8842] ? alloc_fd+0x64c/0x6c0 [ 472.240164][ T8842] do_sys_openat2+0x121/0x1c0 [ 472.240195][ T8842] ? __pfx_do_sys_openat2+0x10/0x10 [ 472.240222][ T8842] ? exc_page_fault+0x76/0xf0 [ 472.240248][ T8842] ? do_user_addr_fault+0xc8a/0x1390 [ 472.240281][ T8842] __x64_sys_openat+0x138/0x170 [ 472.240314][ T8842] do_syscall_64+0xfa/0x3b0 [ 472.240336][ T8842] ? lockdep_hardirqs_on+0x9c/0x150 [ 472.240356][ T8842] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.240376][ T8842] ? clear_bhb_loop+0x60/0xb0 [ 472.240402][ T8842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.240421][ T8842] RIP: 0033:0x7f13ee18d550 [ 472.240440][ T8842] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 472.240458][ T8842] RSP: 002b:00007f13eefc0b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 472.240480][ T8842] RAX: ffffffffffffffda RBX: 0000000000490a01 RCX: 00007f13ee18d550 [ 472.240495][ T8842] RDX: 0000000000490a01 RSI: 00007f13eefc0c10 RDI: 00000000ffffff9c [ 472.240516][ T8842] RBP: 00007f13eefc0c10 R08: 0000000000000000 R09: 0000000000000000 [ 472.240529][ T8842] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 472.240542][ T8842] R13: 00007f13ee3b6038 R14: 00007f13ee3b5fa0 R15: 00007ffc9bfc1338 [ 472.240576][ T8842] [ 473.283818][ T8850] tipc: Enabling of bearer rejected, failed to enable media [ 479.905617][ T8888] hub 8-0:1.0: USB hub found [ 479.922547][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 479.981735][ T8888] hub 8-0:1.0: 1 port detected [ 479.989704][ T8880] loop4: detected capacity change from 0 to 524255232 [ 480.905952][ T10] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 480.922148][ T10] usb 3-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice=f0.ee [ 480.931437][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.955585][ T10] usb 3-1: config 0 descriptor?? [ 481.019060][ T8882] loop4: detected capacity change from 524255232 to 524287956 [ 481.109138][ T8880] Dev loop4: unable to read RDB block 8 [ 481.136576][ T8880] loop4: unable to read partition table [ 481.228392][ T8880] loop_reread_partitions: partition scan of loop4 (¶ö“+ªq€!"¥˜ˆ\Þ [ 481.228392][ T8880] ƒÒâÉïÔVÒ®¨vTv©ˆV/æ¯nâ1í€[¦xÞÍPU–Ü) failed (rc=-5) [ 481.366718][ T8881] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.570'. [ 481.383275][ T10] usb 3-1: USB disconnect, device number 8 [ 481.498561][ T8896] ALSA: seq fatal error: cannot create timer (-22) [ 481.782918][ T8898] loop6: detected capacity change from 0 to 524287999 [ 481.816071][ T8898] Buffer I/O error on dev loop6, logical block 0, async page read [ 481.858328][ T8898] Buffer I/O error on dev loop6, logical block 0, async page read [ 481.904995][ T8898] Buffer I/O error on dev loop6, logical block 0, async page read [ 481.944982][ T8898] Buffer I/O error on dev loop6, logical block 0, async page read [ 482.022676][ T8898] Buffer I/O error on dev loop6, logical block 0, async page read [ 482.030722][ T8898] Buffer I/O error on dev loop6, logical block 0, async page read [ 482.212831][ T8898] Buffer I/O error on dev loop6, logical block 0, async page read [ 482.221119][ T8898] Buffer I/O error on dev loop6, logical block 0, async page read [ 482.241026][ T8898] ldm_validate_partition_table(): Disk read failed. [ 482.637222][ T8898] Buffer I/O error on dev loop6, logical block 0, async page read [ 482.812704][ T8898] Buffer I/O error on dev loop6, logical block 0, async page read [ 482.848609][ T8909] /dev/sg0: Can't lookup blockdev [ 482.888661][ T8898] Dev loop6: unable to read RDB block 0 [ 482.910102][ T8898] loop6: unable to read partition table [ 482.955998][ T8898] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 483.157719][ T5830] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 483.854273][ T5830] usb 4-1: unable to get BOS descriptor or descriptor too short [ 483.864729][ T5830] usb 4-1: config 7 has an invalid interface number: 199 but max is 0 [ 483.929785][ T8919] bio_check_eod: 2 callbacks suppressed [ 483.929837][ T8919] syz.5.580: attempt to access beyond end of device [ 483.929837][ T8919] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 483.950936][ T8919] syz.5.580: attempt to access beyond end of device [ 483.950936][ T8919] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 483.964418][ T8919] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 483.975707][ T8919] syz.5.580: attempt to access beyond end of device [ 483.975707][ T8919] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 483.989043][ T8919] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 484.003361][ T8919] syz.5.580: attempt to access beyond end of device [ 484.003361][ T8919] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 484.017538][ T8919] syz.5.580: attempt to access beyond end of device [ 484.017538][ T8919] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 484.030935][ T8919] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 484.041535][ T8919] syz.5.580: attempt to access beyond end of device [ 484.041535][ T8919] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 484.055849][ T8919] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 484.069088][ T8919] syz.5.580: attempt to access beyond end of device [ 484.069088][ T8919] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 484.083663][ T8919] syz.5.580: attempt to access beyond end of device [ 484.083663][ T8919] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 484.097531][ T8919] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 484.108017][ T8919] syz.5.580: attempt to access beyond end of device [ 484.108017][ T8919] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 484.121447][ T8919] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 484.133717][ T8919] syz.5.580: attempt to access beyond end of device [ 484.133717][ T8919] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 484.147994][ T8919] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 484.159093][ T8919] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 484.169024][ T8919] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 484.298845][ T5830] usb 4-1: config 7 has no interface number 0 [ 484.305942][ T5830] usb 4-1: config 7 interface 199 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 484.432536][ T5830] usb 4-1: config 7 interface 199 altsetting 1 endpoint 0x3 has invalid maxpacket 32, setting to 0 [ 484.446839][ T5830] usb 4-1: No eUSB2 isoc ep 3 companion for config 7 interface 199 altsetting 1 [ 484.456108][ T5830] usb 4-1: config 7 interface 199 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 8 [ 484.467768][ T5830] usb 4-1: config 7 interface 199 has no altsetting 0 [ 484.669378][ T8923] sctp: [Deprecated]: syz.0.581 (pid 8923) Use of struct sctp_assoc_value in delayed_ack socket option. [ 484.669378][ T8923] Use struct sctp_sack_info instead [ 485.104305][ T5830] usb 4-1: string descriptor 0 read error: -22 [ 485.110743][ T5830] usb 4-1: New USB device found, idVendor=0c45, idProduct=6282, bcdDevice=cb.15 [ 485.312464][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.475638][ T5830] usb 4-1: can't set config #7, error -71 [ 485.510758][ T5830] usb 4-1: USB disconnect, device number 10 [ 486.330379][ T8931] FAULT_INJECTION: forcing a failure. [ 486.330379][ T8931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.394857][ T8931] CPU: 0 UID: 0 PID: 8931 Comm: syz.1.579 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 486.394878][ T8931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 486.394886][ T8931] Call Trace: [ 486.394892][ T8931] [ 486.394897][ T8931] dump_stack_lvl+0x189/0x250 [ 486.394916][ T8931] ? __pfx____ratelimit+0x10/0x10 [ 486.394930][ T8931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.394943][ T8931] ? __pfx__printk+0x10/0x10 [ 486.394958][ T8931] ? __might_fault+0xb0/0x130 [ 486.394978][ T8931] should_fail_ex+0x414/0x560 [ 486.394994][ T8931] _copy_from_iter+0x1db/0x16f0 [ 486.395017][ T8931] ? __pfx__copy_from_iter+0x10/0x10 [ 486.395032][ T8931] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 486.395051][ T8931] ? skb_put+0x11b/0x210 [ 486.395092][ T8931] hci_sock_sendmsg+0x422/0xef0 [ 486.395114][ T8931] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 486.395133][ T8931] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 486.395146][ T8931] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 486.395163][ T8931] __sock_sendmsg+0x21c/0x270 [ 486.395179][ T8931] sock_write_iter+0x258/0x330 [ 486.395194][ T8931] ? __pfx_sock_write_iter+0x10/0x10 [ 486.395215][ T8931] ? bpf_lsm_file_permission+0x9/0x20 [ 486.395230][ T8931] ? security_file_permission+0x75/0x290 [ 486.395249][ T8931] vfs_write+0x54b/0xa90 [ 486.395263][ T8931] ? __pfx_sock_write_iter+0x10/0x10 [ 486.395276][ T8931] ? __pfx_vfs_write+0x10/0x10 [ 486.395298][ T8931] ? __fget_files+0x2a/0x420 [ 486.395330][ T8931] ksys_write+0x145/0x250 [ 486.395351][ T8931] ? __pfx_ksys_write+0x10/0x10 [ 486.395367][ T8931] ? rcu_is_watching+0x15/0xb0 [ 486.395394][ T8931] ? do_syscall_64+0xbe/0x3b0 [ 486.395411][ T8931] do_syscall_64+0xfa/0x3b0 [ 486.395423][ T8931] ? lockdep_hardirqs_on+0x9c/0x150 [ 486.395436][ T8931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.395448][ T8931] ? clear_bhb_loop+0x60/0xb0 [ 486.395469][ T8931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.395481][ T8931] RIP: 0033:0x7fe8dab8ebe9 [ 486.395493][ T8931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.395503][ T8931] RSP: 002b:00007fe8db955038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 486.395519][ T8931] RAX: ffffffffffffffda RBX: 00007fe8dadb5fa0 RCX: 00007fe8dab8ebe9 [ 486.395528][ T8931] RDX: 000000000000000d RSI: 0000200000000000 RDI: 0000000000000004 [ 486.395535][ T8931] RBP: 00007fe8db955090 R08: 0000000000000000 R09: 0000000000000000 [ 486.395543][ T8931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 486.395550][ T8931] R13: 00007fe8dadb6038 R14: 00007fe8dadb5fa0 R15: 00007fff444770f8 [ 486.395569][ T8931] [ 487.604295][ T5830] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 487.680035][ T8945] sctp: [Deprecated]: syz.1.586 (pid 8945) Use of struct sctp_assoc_value in delayed_ack socket option. [ 487.680035][ T8945] Use struct sctp_sack_info instead [ 488.759454][ T5846] Bluetooth: hci1: command 0x0406 tx timeout [ 489.154435][ T5830] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 489.170818][ T5830] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 489.229029][ T5830] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 489.313258][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.929902][ T5830] usb 3-1: usb_control_msg returned -71 [ 490.957533][ T5830] usbtmc 3-1:16.0: can't read capabilities [ 490.996988][ T5830] usb 3-1: USB disconnect, device number 9 [ 494.065233][ T8974] ucma_write: process 493 (syz.2.594) changed security contexts after opening file descriptor, this is not allowed. [ 495.170400][ T8967] sctp: failed to load transform for md5: -2 [ 497.293266][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.599'. [ 502.063183][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.069739][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.073317][ T9027] sp0: Synchronizing with TNC [ 503.090061][ T9029] cgroup: Unknown subsys name 'cpuset' [ 503.314166][ T5830] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 503.490669][ T5830] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 14158, setting to 64 [ 503.537511][ T9041] tipc: Enabling of bearer rejected, failed to enable media [ 503.559575][ T5830] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 503.642767][ T5830] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.752788][ T9032] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 504.040398][ T5830] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 504.057372][ T5830] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input8 [ 504.092642][ T6006] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 504.118040][ T5830] usb 3-1: USB disconnect, device number 10 [ 504.124126][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 504.261249][ T6006] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 504.281514][ T6006] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 504.321374][ T6006] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 504.560315][ T6006] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.579627][ T6006] usb 1-1: config 0 descriptor?? [ 504.740959][ T9056] vlan2: entered promiscuous mode [ 504.746227][ T9056] dummy0: entered promiscuous mode [ 504.753313][ T9056] vlan2: entered allmulticast mode [ 504.758572][ T9056] dummy0: entered allmulticast mode [ 505.949880][ T9060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 506.161303][ T6006] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 506.422275][ T6006] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 506.645652][ T6006] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 506.749041][ T6006] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 507.516500][ T6006] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 507.537515][ T6006] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 507.576011][ T6006] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 507.630726][ T6006] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 507.703424][ T6006] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 507.739517][ T6006] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 507.770867][ T6006] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -71 [ 507.816923][ T6006] usb 1-1: USB disconnect, device number 12 [ 510.393416][ T6006] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 510.728993][ T6006] usb 2-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.29 [ 510.894226][ T6006] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.902305][ T6006] usb 2-1: Product: syz [ 510.958547][ T6006] usb 2-1: Manufacturer: syz [ 511.042624][ T6006] usb 2-1: SerialNumber: syz [ 511.831804][ T6006] usb 2-1: config 0 descriptor?? [ 511.872645][ T6006] option 2-1:0.0: GSM modem (1-port) converter detected [ 512.269733][ T6006] usb 2-1: USB disconnect, device number 8 [ 512.555939][ T6006] option 2-1:0.0: device disconnected [ 513.754826][ T9138] tipc: Started in network mode [ 513.759783][ T9138] tipc: Node identity 2d000000400000000075000000000001, cluster identity 4711 [ 513.783402][ T9138] tipc: Enabling of bearer rejected, failed to enable media [ 514.822847][ T9141] xt_hashlimit: size too large, truncated to 1048576 [ 517.250600][ T9170] smc: adding net device syzkaller0 with user defined pnetid SYZ2 [ 518.198079][ T9168] smc: removing net device syzkaller0 with user defined pnetid SYZ2 [ 519.759896][ T9204] bio_check_eod: 2 callbacks suppressed [ 519.759941][ T9204] syz.3.652: attempt to access beyond end of device [ 519.759941][ T9204] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 519.780608][ T9204] syz.3.652: attempt to access beyond end of device [ 519.780608][ T9204] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 519.794439][ T9204] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 519.806318][ T9204] syz.3.652: attempt to access beyond end of device [ 519.806318][ T9204] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 519.819910][ T9204] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 519.835322][ T9204] syz.3.652: attempt to access beyond end of device [ 519.835322][ T9204] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 519.849795][ T9204] syz.3.652: attempt to access beyond end of device [ 519.849795][ T9204] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 519.863295][ T9204] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 519.873918][ T9204] syz.3.652: attempt to access beyond end of device [ 519.873918][ T9204] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 519.887406][ T9204] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 519.901096][ T9204] syz.3.652: attempt to access beyond end of device [ 519.901096][ T9204] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 519.915237][ T9204] syz.3.652: attempt to access beyond end of device [ 519.915237][ T9204] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 519.928718][ T9204] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 519.939143][ T9204] syz.3.652: attempt to access beyond end of device [ 519.939143][ T9204] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 519.969783][ T9204] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 519.996996][ T9204] syz.3.652: attempt to access beyond end of device [ 519.996996][ T9204] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 520.010236][ T9204] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 520.020018][ T9204] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 520.029650][ T9204] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 522.300812][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.3.655'. [ 522.310572][ T9219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.830458][ T9224] sctp: [Deprecated]: syz.0.656 (pid 9224) Use of struct sctp_assoc_value in delayed_ack socket option. [ 522.830458][ T9224] Use struct sctp_sack_info instead [ 524.052785][ T9227] sctp: [Deprecated]: syz.5.657 (pid 9227) Use of struct sctp_assoc_value in delayed_ack socket option. [ 524.052785][ T9227] Use struct sctp_sack_info instead [ 524.454140][ T9219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.737139][ T9232] netlink: 'syz.5.659': attribute type 8 has an invalid length. [ 527.266977][ T9258] bio_check_eod: 2 callbacks suppressed [ 527.267020][ T9258] syz.2.666: attempt to access beyond end of device [ 527.267020][ T9258] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 527.287266][ T9258] syz.2.666: attempt to access beyond end of device [ 527.287266][ T9258] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 527.300598][ T9258] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 527.312079][ T9258] syz.2.666: attempt to access beyond end of device [ 527.312079][ T9258] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 527.325494][ T9258] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 527.340209][ T9258] syz.2.666: attempt to access beyond end of device [ 527.340209][ T9258] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 527.354667][ T9258] syz.2.666: attempt to access beyond end of device [ 527.354667][ T9258] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 527.368649][ T9258] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 527.379707][ T9258] syz.2.666: attempt to access beyond end of device [ 527.379707][ T9258] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 527.393465][ T9258] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 527.406863][ T9258] syz.2.666: attempt to access beyond end of device [ 527.406863][ T9258] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 527.421249][ T9258] syz.2.666: attempt to access beyond end of device [ 527.421249][ T9258] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 527.434987][ T9258] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 527.445592][ T9258] syz.2.666: attempt to access beyond end of device [ 527.445592][ T9258] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 527.459128][ T9258] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 527.472396][ T9258] syz.2.666: attempt to access beyond end of device [ 527.472396][ T9258] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 527.486675][ T9258] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 527.497340][ T9258] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 527.507201][ T9258] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 529.406918][ T9273] sctp: [Deprecated]: syz.1.668 (pid 9273) Use of struct sctp_assoc_value in delayed_ack socket option. [ 529.406918][ T9273] Use struct sctp_sack_info instead [ 530.508857][ T9278] FAULT_INJECTION: forcing a failure. [ 530.508857][ T9278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.660692][ T9278] CPU: 1 UID: 0 PID: 9278 Comm: syz.2.672 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 530.660721][ T9278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 530.660733][ T9278] Call Trace: [ 530.660741][ T9278] [ 530.660750][ T9278] dump_stack_lvl+0x189/0x250 [ 530.660779][ T9278] ? __pfx____ratelimit+0x10/0x10 [ 530.660801][ T9278] ? __pfx_dump_stack_lvl+0x10/0x10 [ 530.660825][ T9278] ? __pfx__printk+0x10/0x10 [ 530.660864][ T9278] should_fail_ex+0x414/0x560 [ 530.660894][ T9278] _copy_to_user+0x31/0xb0 [ 530.660923][ T9278] simple_read_from_buffer+0xe1/0x170 [ 530.660952][ T9278] proc_fail_nth_read+0x1df/0x250 [ 530.660980][ T9278] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 530.661009][ T9278] ? rw_verify_area+0x258/0x650 [ 530.661036][ T9278] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 530.661060][ T9278] vfs_read+0x200/0x980 [ 530.661095][ T9278] ? __pfx___mutex_lock+0x10/0x10 [ 530.661116][ T9278] ? __pfx_vfs_read+0x10/0x10 [ 530.661147][ T9278] ? __fget_files+0x2a/0x420 [ 530.661184][ T9278] ? __fget_files+0x3a0/0x420 [ 530.661203][ T9278] ? __fget_files+0x2a/0x420 [ 530.661232][ T9278] ksys_read+0x145/0x250 [ 530.661254][ T9278] ? __pfx_ksys_read+0x10/0x10 [ 530.661269][ T9278] ? fput+0xa0/0xd0 [ 530.661298][ T9278] ? do_syscall_64+0xbe/0x3b0 [ 530.661324][ T9278] do_syscall_64+0xfa/0x3b0 [ 530.661345][ T9278] ? lockdep_hardirqs_on+0x9c/0x150 [ 530.661367][ T9278] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.661387][ T9278] ? clear_bhb_loop+0x60/0xb0 [ 530.661411][ T9278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.661430][ T9278] RIP: 0033:0x7fba2298d5fc [ 530.661449][ T9278] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 530.661466][ T9278] RSP: 002b:00007fba23751030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 530.661488][ T9278] RAX: ffffffffffffffda RBX: 00007fba22bb5fa0 RCX: 00007fba2298d5fc [ 530.661503][ T9278] RDX: 000000000000000f RSI: 00007fba237510a0 RDI: 0000000000000006 [ 530.661515][ T9278] RBP: 00007fba23751090 R08: 0000000000000000 R09: 0000000000000000 [ 530.661527][ T9278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.661538][ T9278] R13: 00007fba22bb6038 R14: 00007fba22bb5fa0 R15: 00007fff4cbd5988 [ 530.661572][ T9278] [ 530.685308][ T9284] macvlan2: entered promiscuous mode [ 530.908006][ T9286] netlink: 71 bytes leftover after parsing attributes in process `syz.3.675'. [ 530.957887][ T9284] macvlan2: entered allmulticast mode [ 530.988929][ T9284] syz_tun: entered promiscuous mode [ 531.018646][ T9284] syz_tun: entered allmulticast mode [ 531.053540][ T9284] team0: Port device macvlan2 added [ 531.162460][ T5921] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 531.259218][ T9286] netlink: 71 bytes leftover after parsing attributes in process `syz.3.675'. [ 531.314117][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 531.335787][ T5921] usb 4-1: unable to get BOS descriptor or descriptor too short [ 531.363926][ T5921] usb 4-1: config 1 has an invalid interface number: 206 but max is 0 [ 531.404226][ T5921] usb 4-1: config 1 has no interface number 0 [ 531.455520][ T5921] usb 4-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 531.496462][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.551253][ T9286] netlink: 71 bytes leftover after parsing attributes in process `syz.3.675'. [ 531.882933][ T5921] usb 4-1: Product: syz [ 532.017647][ T5921] usb 4-1: Manufacturer: syz [ 532.024644][ T5921] usb 4-1: SerialNumber: syz [ 533.082928][ T9286] netlink: 71 bytes leftover after parsing attributes in process `syz.3.675'. [ 533.880798][ T9286] netlink: 71 bytes leftover after parsing attributes in process `syz.3.675'. [ 535.511743][ T5921] usb 4-1: USB disconnect, device number 11 [ 537.658807][ T9346] sctp: [Deprecated]: syz.0.685 (pid 9346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 537.658807][ T9346] Use struct sctp_sack_info instead [ 538.819351][ T9367] FAULT_INJECTION: forcing a failure. [ 538.819351][ T9367] name failslab, interval 1, probability 0, space 0, times 0 [ 538.832967][ T9367] CPU: 1 UID: 0 PID: 9367 Comm: syz.3.691 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 538.832996][ T9367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 538.833008][ T9367] Call Trace: [ 538.833016][ T9367] [ 538.833025][ T9367] dump_stack_lvl+0x189/0x250 [ 538.833051][ T9367] ? __pfx____ratelimit+0x10/0x10 [ 538.833065][ T9367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 538.833079][ T9367] ? __pfx__printk+0x10/0x10 [ 538.833098][ T9367] ? __pfx___might_resched+0x10/0x10 [ 538.833115][ T9367] should_fail_ex+0x414/0x560 [ 538.833131][ T9367] should_failslab+0xa8/0x100 [ 538.833152][ T9367] __kmalloc_noprof+0xcb/0x4f0 [ 538.833163][ T9367] ? security_msg_msg_alloc+0x45/0x330 [ 538.833183][ T9367] security_msg_msg_alloc+0x45/0x330 [ 538.833200][ T9367] load_msg+0x2b2/0x3b0 [ 538.833221][ T9367] do_mq_timedsend+0x372/0xa90 [ 538.833235][ T9367] ? ksys_write+0x1cb/0x250 [ 538.833251][ T9367] ? __pfx_do_mq_timedsend+0x10/0x10 [ 538.833267][ T9367] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 538.833292][ T9367] __x64_sys_mq_timedsend+0x172/0x210 [ 538.833307][ T9367] ? __pfx___x64_sys_mq_timedsend+0x10/0x10 [ 538.833332][ T9367] ? do_syscall_64+0xbe/0x3b0 [ 538.833359][ T9367] do_syscall_64+0xfa/0x3b0 [ 538.833378][ T9367] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.833400][ T9367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.833417][ T9367] ? clear_bhb_loop+0x60/0xb0 [ 538.833431][ T9367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.833443][ T9367] RIP: 0033:0x7f13ee18ebe9 [ 538.833455][ T9367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.833466][ T9367] RSP: 002b:00007f13eef93038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f2 [ 538.833481][ T9367] RAX: ffffffffffffffda RBX: 00007f13ee3b6090 RCX: 00007f13ee18ebe9 [ 538.833490][ T9367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 538.833497][ T9367] RBP: 00007f13eef93090 R08: 0000000000000000 R09: 0000000000000000 [ 538.833504][ T9367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.833511][ T9367] R13: 00007f13ee3b6128 R14: 00007f13ee3b6090 R15: 00007ffc9bfc1338 [ 538.833530][ T9367] [ 549.136059][ T9414] netlink: 56 bytes leftover after parsing attributes in process `syz.3.702'. [ 549.426950][ T9137] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 549.682714][ T9137] usb 4-1: Using ep0 maxpacket: 32 [ 549.758305][ T9137] usb 4-1: unable to get BOS descriptor or descriptor too short [ 549.875835][ T9137] usb 4-1: config 2 has an invalid interface number: 189 but max is 0 [ 550.014142][ T9137] usb 4-1: config 2 has no interface number 0 [ 550.136518][ T9137] usb 4-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping [ 550.252156][ T5830] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 550.311524][ T9137] usb 4-1: config 2 interface 189 has no altsetting 0 [ 550.478245][ T9137] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 551.378778][ T5830] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 551.440077][ T9137] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.492455][ T5830] usb 2-1: config 0 has no interface number 0 [ 551.550869][ T9137] usb 4-1: Product: syz [ 551.555346][ T5830] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 551.617965][ T9137] usb 4-1: Manufacturer: syz [ 551.643509][ T9137] usb 4-1: SerialNumber: syz [ 551.662113][ T5830] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 551.710263][ T5830] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 551.763140][ T5830] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 551.783211][ T5830] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 551.802455][ T5830] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 551.826208][ T5830] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 551.846108][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.020359][ T9137] usb 4-1: unknown interface protocol 0x3b, assuming v1 [ 552.045980][ T9137] usb 4-1: 189:2 : does not exist [ 552.052097][ T5830] usb 2-1: config 0 descriptor?? [ 552.075155][ T9418] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 552.126048][ T9418] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 552.163245][ T9137] usb 4-1: USB disconnect, device number 12 [ 552.205275][ T5830] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 552.244178][ T9431] netlink: 44 bytes leftover after parsing attributes in process `syz.3.709'. [ 552.286657][ T9431] program syz.3.709 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 552.633709][ T6718] udevd[6718]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:2.189/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 552.834578][ T9437] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 552.841183][ T9437] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 552.887075][ T9440] fuse: Bad value for 'rootmode' [ 553.289914][ T9441] vhci_hcd: connection closed [ 553.311453][ T9437] vhci_hcd vhci_hcd.0: Device attached [ 553.562747][ T5830] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 553.601197][ T36] vhci_hcd: stop threads [ 553.611344][ T36] vhci_hcd: release socket [ 553.710428][ T36] vhci_hcd: disconnect device [ 553.718830][ T9447] netlink: 32 bytes leftover after parsing attributes in process `syz.5.711'. [ 554.543190][ T5967] usb 2-1: USB disconnect, device number 9 [ 554.600220][ T5967] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 557.865374][ T9479] netlink: 56 bytes leftover after parsing attributes in process `syz.0.719'. [ 558.142541][ T5972] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 558.226660][ T9486] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 559.051942][ T9487] orangefs_mount: mount request failed with -4 [ 559.063174][ T5830] vhci_hcd: vhci_device speed not set [ 559.086640][ T9490] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.193237][ T5972] usb 1-1: Using ep0 maxpacket: 32 [ 559.203405][ T5972] usb 1-1: unable to get BOS descriptor or descriptor too short [ 559.218211][ T5972] usb 1-1: config 2 has an invalid interface number: 189 but max is 0 [ 559.226697][ T5972] usb 1-1: config 2 has no interface number 0 [ 559.235266][ T5972] usb 1-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping [ 559.247313][ T5972] usb 1-1: config 2 interface 189 has no altsetting 0 [ 559.259523][ T5972] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 559.268925][ T5972] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.277452][ T5972] usb 1-1: Product: syz [ 559.281777][ T5972] usb 1-1: Manufacturer: syz [ 559.286532][ T5972] usb 1-1: SerialNumber: syz [ 559.422583][ T9137] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 559.700366][ T9137] usb 3-1: Using ep0 maxpacket: 8 [ 559.707961][ T9137] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 559.722544][ T9137] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 559.733403][ T9137] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.769801][ T9137] usb 3-1: config 0 descriptor?? [ 559.779399][ T9498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.795524][ T9498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.812730][ T51] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 560.079040][ T9505] netlink: 'syz.5.728': attribute type 10 has an invalid length. [ 560.088766][ T9505] netlink: 40 bytes leftover after parsing attributes in process `syz.5.728'. [ 560.099935][ T9505] ipvlan1: entered promiscuous mode [ 560.105900][ T9505] ipvlan1: entered allmulticast mode [ 560.111733][ T9505] veth0_vlan: entered allmulticast mode [ 560.123726][ T9505] bridge0: port 3(ipvlan1) entered blocking state [ 560.130766][ T9505] bridge0: port 3(ipvlan1) entered disabled state [ 560.157201][ T9505] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 560.204269][ T43] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 560.219142][ T9137] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 560.256385][ T5921] usb 3-1: USB disconnect, device number 11 [ 560.394638][ T43] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 560.991354][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.069461][ T43] usb 2-1: config 0 descriptor?? [ 561.151285][ T5972] usb 1-1: unknown interface protocol 0x3b, assuming v1 [ 561.184717][ T5972] usb 1-1: 189:2 : does not exist [ 561.261233][ T5972] usb 1-1: USB disconnect, device number 13 [ 561.402191][ T9520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.731'. [ 561.867052][ T43] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 562.348519][ T43] usb 2-1: USB disconnect, device number 10 [ 562.540331][ T6565] udevd[6565]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.189/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 563.545193][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.561288][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.383276][ T5972] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 564.666719][ T9543] FAULT_INJECTION: forcing a failure. [ 564.666719][ T9543] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 564.692455][ T5972] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 564.707117][ T9543] CPU: 1 UID: 0 PID: 9543 Comm: syz.3.739 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 564.707146][ T9543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 564.707158][ T9543] Call Trace: [ 564.707166][ T9543] [ 564.707174][ T9543] dump_stack_lvl+0x189/0x250 [ 564.707204][ T9543] ? __pfx____ratelimit+0x10/0x10 [ 564.707226][ T9543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 564.707249][ T9543] ? __pfx__printk+0x10/0x10 [ 564.707291][ T9543] should_fail_ex+0x414/0x560 [ 564.707319][ T9543] _copy_to_user+0x31/0xb0 [ 564.707348][ T9543] simple_read_from_buffer+0xe1/0x170 [ 564.707376][ T9543] proc_fail_nth_read+0x1df/0x250 [ 564.707404][ T9543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.707433][ T9543] ? rw_verify_area+0x258/0x650 [ 564.707463][ T9543] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 564.707488][ T9543] vfs_read+0x200/0x980 [ 564.707522][ T9543] ? __pfx___mutex_lock+0x10/0x10 [ 564.707546][ T9543] ? __pfx_vfs_read+0x10/0x10 [ 564.707575][ T9543] ? __fget_files+0x2a/0x420 [ 564.707602][ T9543] ? __fget_files+0x3a0/0x420 [ 564.707622][ T9543] ? __fget_files+0x2a/0x420 [ 564.707655][ T9543] ksys_read+0x145/0x250 [ 564.707686][ T9543] ? __pfx_ksys_read+0x10/0x10 [ 564.707702][ T9543] ? rcu_is_watching+0x15/0xb0 [ 564.707730][ T9543] ? do_syscall_64+0xbe/0x3b0 [ 564.707755][ T9543] do_syscall_64+0xfa/0x3b0 [ 564.707775][ T9543] ? lockdep_hardirqs_on+0x9c/0x150 [ 564.707795][ T9543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.707814][ T9543] ? clear_bhb_loop+0x60/0xb0 [ 564.707839][ T9543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.707858][ T9543] RIP: 0033:0x7f13ee18d5fc [ 564.707877][ T9543] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 564.707894][ T9543] RSP: 002b:00007f13eefc1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 564.707917][ T9543] RAX: ffffffffffffffda RBX: 00007f13ee3b5fa0 RCX: 00007f13ee18d5fc [ 564.707931][ T9543] RDX: 000000000000000f RSI: 00007f13eefc10a0 RDI: 0000000000000007 [ 564.707944][ T9543] RBP: 00007f13eefc1090 R08: 0000000000000000 R09: 0000000000000000 [ 564.707956][ T9543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 564.707967][ T9543] R13: 00007f13ee3b6038 R14: 00007f13ee3b5fa0 R15: 00007ffc9bfc1338 [ 564.708003][ T9543] [ 564.708225][ T9545] FAULT_INJECTION: forcing a failure. [ 564.708225][ T9545] name failslab, interval 1, probability 0, space 0, times 0 [ 565.191669][ T5972] usb 2-1: can't read configurations, error -22 [ 565.199063][ T9545] CPU: 1 UID: 0 PID: 9545 Comm: syz.2.738 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 565.199091][ T9545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 565.199104][ T9545] Call Trace: [ 565.199112][ T9545] [ 565.199121][ T9545] dump_stack_lvl+0x189/0x250 [ 565.199151][ T9545] ? __pfx____ratelimit+0x10/0x10 [ 565.199174][ T9545] ? __pfx_dump_stack_lvl+0x10/0x10 [ 565.199197][ T9545] ? __pfx__printk+0x10/0x10 [ 565.199229][ T9545] ? __pfx___might_resched+0x10/0x10 [ 565.199257][ T9545] ? fs_reclaim_acquire+0x7d/0x100 [ 565.199287][ T9545] should_fail_ex+0x414/0x560 [ 565.199315][ T9545] should_failslab+0xa8/0x100 [ 565.199339][ T9545] __kmalloc_cache_noprof+0x70/0x3d0 [ 565.199359][ T9545] ? __se_sys_mount+0x165/0x410 [ 565.199379][ T9545] ? memdup_user+0x99/0xd0 [ 565.199409][ T9545] __se_sys_mount+0x165/0x410 [ 565.199439][ T9545] ? __pfx___se_sys_mount+0x10/0x10 [ 565.199459][ T9545] ? rcu_is_watching+0x15/0xb0 [ 565.199487][ T9545] ? do_syscall_64+0xbe/0x3b0 [ 565.199507][ T9545] ? __x64_sys_mount+0x20/0xc0 [ 565.199533][ T9545] do_syscall_64+0xfa/0x3b0 [ 565.199553][ T9545] ? lockdep_hardirqs_on+0x9c/0x150 [ 565.199575][ T9545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.199595][ T9545] ? clear_bhb_loop+0x60/0xb0 [ 565.199618][ T9545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.199638][ T9545] RIP: 0033:0x7fba2298ebe9 [ 565.199656][ T9545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.199673][ T9545] RSP: 002b:00007fba23751038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 565.199695][ T9545] RAX: ffffffffffffffda RBX: 00007fba22bb5fa0 RCX: 00007fba2298ebe9 [ 565.199710][ T9545] RDX: 0000200000002100 RSI: 0000200000000100 RDI: 0000000000000000 [ 565.199723][ T9545] RBP: 00007fba23751090 R08: 0000200000002140 R09: 0000000000000000 [ 565.199737][ T9545] R10: 0000000002804cdc R11: 0000000000000246 R12: 0000000000000001 [ 565.199748][ T9545] R13: 00007fba22bb6038 R14: 00007fba22bb5fa0 R15: 00007fff4cbd5988 [ 565.199782][ T9545] [ 565.408822][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.433731][ T9551] netlink: 56 bytes leftover after parsing attributes in process `syz.5.740'. [ 566.093034][ T5972] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 566.181993][ T43] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 566.217045][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 566.260266][ T5972] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 566.277890][ T5972] usb 2-1: can't read configurations, error -22 [ 566.298345][ T5972] usb usb2-port1: attempt power cycle [ 566.823167][ T5972] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 567.142628][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 567.241425][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 567.263843][ T43] usb 6-1: config 2 has an invalid interface number: 189 but max is 0 [ 567.288850][ T43] usb 6-1: config 2 has no interface number 0 [ 567.363484][ T43] usb 6-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping [ 567.528290][ T43] usb 6-1: config 2 interface 189 has no altsetting 0 [ 567.687146][ T43] usb 6-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 567.872553][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.880786][ T43] usb 6-1: Product: syz [ 567.887361][ T43] usb 6-1: Manufacturer: syz [ 567.892172][ T43] usb 6-1: SerialNumber: syz [ 567.957568][ T5972] usb 2-1: device descriptor read/8, error -71 [ 568.051464][ T43] usb 6-1: can't set config #2, error -71 [ 568.074170][ T43] usb 6-1: USB disconnect, device number 3 [ 568.220769][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.5.747'. [ 568.543053][ T5830] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 568.956505][ T5830] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 569.155344][ T5830] usb 4-1: config 0 interface 0 has no altsetting 0 [ 570.153722][ T5830] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 570.283976][ T5830] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 570.432656][ T5830] usb 4-1: Product: syz [ 570.436913][ T5830] usb 4-1: Manufacturer: syz [ 570.441556][ T5830] usb 4-1: SerialNumber: syz [ 570.664982][ T5830] usb 4-1: config 0 descriptor?? [ 570.696950][ T5830] usb 4-1: selecting invalid altsetting 0 [ 571.162736][ T5830] usb 4-1: USB disconnect, device number 13 [ 571.286809][ T8746] udevd[8746]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 571.304178][ T9602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.753'. [ 572.674347][ T9616] netlink: 56 bytes leftover after parsing attributes in process `syz.5.757'. [ 573.182430][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 573.362600][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 573.413729][ T10] usb 6-1: unable to get BOS descriptor or descriptor too short [ 573.440278][ T10] usb 6-1: config 2 has an invalid interface number: 189 but max is 0 [ 573.460745][ T10] usb 6-1: config 2 has no interface number 0 [ 573.480117][ T10] usb 6-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping [ 573.506327][ T10] usb 6-1: config 2 interface 189 has no altsetting 0 [ 573.601435][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 573.662468][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.670566][ T10] usb 6-1: Product: syz [ 573.691298][ T10] usb 6-1: Manufacturer: syz [ 573.705257][ T10] usb 6-1: SerialNumber: syz [ 575.612615][ T10] usb 6-1: unknown interface protocol 0x3b, assuming v1 [ 575.619689][ T10] usb 6-1: 189:2 : does not exist [ 575.633055][ T10] usb 6-1: USB disconnect, device number 4 [ 576.234175][ T9645] netlink: 56 bytes leftover after parsing attributes in process `syz.1.763'. [ 576.852763][ T5928] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 577.100224][ T9651] netlink: 56 bytes leftover after parsing attributes in process `syz.0.764'. [ 577.132813][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 577.161011][ T5928] usb 2-1: unable to get BOS descriptor or descriptor too short [ 577.184357][ T5928] usb 2-1: config 2 has an invalid interface number: 189 but max is 0 [ 577.186957][ T6551] udevd[6551]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.189/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 577.209334][ T5928] usb 2-1: config 2 has no interface number 0 [ 577.224028][ T5928] usb 2-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping [ 577.300914][ T5928] usb 2-1: config 2 interface 189 has no altsetting 0 [ 577.318214][ T5928] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 577.352837][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.392488][ T5928] usb 2-1: Product: syz [ 577.397497][ T5928] usb 2-1: Manufacturer: syz [ 577.402977][ T5928] usb 2-1: SerialNumber: syz [ 577.542244][ T5830] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 578.917172][ T5830] usb 1-1: Using ep0 maxpacket: 32 [ 578.935403][ T5830] usb 1-1: unable to get BOS descriptor or descriptor too short [ 578.960066][ T5830] usb 1-1: config 2 has an invalid interface number: 189 but max is 0 [ 578.978276][ T5830] usb 1-1: config 2 has no interface number 0 [ 578.999405][ T5830] usb 1-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping [ 579.045689][ T5830] usb 1-1: config 2 interface 189 has no altsetting 0 [ 579.102175][ T5830] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 579.232907][ T5928] usb 2-1: unknown interface protocol 0x3b, assuming v1 [ 579.240712][ T5928] usb 2-1: 189:2 : does not exist [ 579.253761][ T5928] usb 2-1: USB disconnect, device number 15 [ 579.452678][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.461033][ T5830] usb 1-1: Product: syz [ 579.496443][ T5830] usb 1-1: Manufacturer: syz [ 579.501125][ T5830] usb 1-1: SerialNumber: syz [ 579.900659][ T5830] usb 1-1: unknown interface protocol 0x3b, assuming v1 [ 579.924657][ T9679] netlink: 56 bytes leftover after parsing attributes in process `syz.1.772'. [ 579.942454][ T5830] usb 1-1: 189:2 : does not exist [ 579.976429][ T5830] usb 1-1: USB disconnect, device number 14 [ 580.008070][ T6718] udevd[6718]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.189/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.206117][ T8746] udevd[8746]: setting mode of /dev/bus/usb/001/014 to 020664 failed: No such file or directory [ 580.244086][ T5928] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 580.286639][ T8746] udevd[8746]: setting owner of /dev/bus/usb/001/014 to uid=0, gid=0 failed: No such file or directory [ 580.386218][ T6718] udevd[6718]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.189/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.452508][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 580.462160][ T5928] usb 2-1: unable to get BOS descriptor or descriptor too short [ 580.489487][ T43] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 580.503717][ T5928] usb 2-1: config 2 has an invalid interface number: 189 but max is 0 [ 580.547498][ T5928] usb 2-1: config 2 has no interface number 0 [ 580.583651][ T5928] usb 2-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping [ 580.738993][ T43] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 580.760889][ T43] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.771337][ T5928] usb 2-1: config 2 interface 189 has no altsetting 0 [ 580.790273][ T5928] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 580.792441][ T43] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 580.800508][ T5928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.835969][ T5928] usb 2-1: Product: syz [ 580.902942][ T5928] usb 2-1: Manufacturer: syz [ 580.904959][ T43] usb 3-1: config 1 has no interface number 1 [ 580.907589][ T5928] usb 2-1: SerialNumber: syz [ 580.931231][ T43] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 581.021565][ T43] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 581.096448][ T43] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 581.150020][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.236811][ T43] usb 3-1: Product: syz [ 581.346918][ T43] usb 3-1: Manufacturer: syz [ 581.351594][ T43] usb 3-1: SerialNumber: syz [ 581.719884][ T43] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 581.773366][ T9686] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.780993][ T9686] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.796902][ T43] usb 3-1: 2:1: invalid format type 0x1001 is detected, processed as PCM [ 581.879696][ T43] usb 3-1: USB disconnect, device number 12 [ 582.093864][ T8746] udevd[8746]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.456617][ T9700] bio_check_eod: 2 callbacks suppressed [ 582.456666][ T9700] syz.5.777: attempt to access beyond end of device [ 582.456666][ T9700] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 582.478448][ T9700] syz.5.777: attempt to access beyond end of device [ 582.478448][ T9700] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 582.491861][ T9700] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 582.503084][ T9700] syz.5.777: attempt to access beyond end of device [ 582.503084][ T9700] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 582.516741][ T9700] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 582.533426][ T9700] syz.5.777: attempt to access beyond end of device [ 582.533426][ T9700] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 582.548021][ T9700] syz.5.777: attempt to access beyond end of device [ 582.548021][ T9700] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 582.562021][ T9700] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 582.572591][ T9700] syz.5.777: attempt to access beyond end of device [ 582.572591][ T9700] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 582.586144][ T9700] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 582.600455][ T9700] syz.5.777: attempt to access beyond end of device [ 582.600455][ T9700] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 582.614535][ T9700] syz.5.777: attempt to access beyond end of device [ 582.614535][ T9700] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 582.628018][ T9700] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 582.639007][ T9700] syz.5.777: attempt to access beyond end of device [ 582.639007][ T9700] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 582.652390][ T9700] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 582.665818][ T9700] syz.5.777: attempt to access beyond end of device [ 582.665818][ T9700] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 582.680784][ T9700] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 582.691743][ T9700] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 582.701561][ T9700] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 582.878504][ T5928] usb 2-1: unknown interface protocol 0x3b, assuming v1 [ 582.952614][ T5928] usb 2-1: 189:2 : does not exist [ 583.097751][ T5928] usb 2-1: USB disconnect, device number 16 [ 584.273351][ T6551] udevd[6551]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.189/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 585.512555][ T43] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 585.522129][ T9686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.658072][ T9686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.732729][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 585.742194][ T43] usb 6-1: unable to get BOS descriptor or descriptor too short [ 585.752676][ T43] usb 6-1: config 2 has an invalid interface number: 189 but max is 0 [ 585.762440][ T43] usb 6-1: config 2 has no interface number 0 [ 585.768599][ T43] usb 6-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping [ 585.812387][ T43] usb 6-1: config 2 interface 189 has no altsetting 0 [ 585.825757][ T43] usb 6-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 585.852518][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.872209][ T43] usb 6-1: Product: syz [ 585.886948][ T43] usb 6-1: Manufacturer: syz [ 585.902048][ T43] usb 6-1: SerialNumber: syz [ 586.461532][ T9686] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.476147][ T9686] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.487101][ T9686] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.498991][ T9686] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.528836][ T9724] netlink: 56 bytes leftover after parsing attributes in process `syz.5.782'. [ 589.060138][ T43] usb 6-1: unknown interface protocol 0x3b, assuming v1 [ 589.195014][ T43] usb 6-1: 189:2 : does not exist [ 589.318073][ T43] usb 6-1: USB disconnect, device number 5 [ 589.880691][ T9756] sctp: [Deprecated]: syz.2.790 (pid 9756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 589.880691][ T9756] Use struct sctp_sack_info instead [ 589.902657][ T9755] netlink: 56 bytes leftover after parsing attributes in process `syz.1.789'. [ 590.097317][ T5921] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 590.322769][ T6551] udevd[6551]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.189/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 590.362939][ T5921] usb 2-1: Using ep0 maxpacket: 32 [ 590.375645][ T5921] usb 2-1: unable to get BOS descriptor or descriptor too short [ 590.584152][ T5921] usb 2-1: config 2 has an invalid interface number: 189 but max is 0 [ 590.622493][ T5921] usb 2-1: config 2 has no interface number 0 [ 590.628783][ T5921] usb 2-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping [ 590.822409][ T5921] usb 2-1: config 2 interface 189 has no altsetting 0 [ 590.855033][ T5921] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 590.934973][ T5921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.717677][ T5921] usb 2-1: Product: syz [ 591.722078][ T5921] usb 2-1: Manufacturer: syz [ 591.747321][ T5921] usb 2-1: SerialNumber: syz [ 594.452645][ T5921] usb 2-1: unknown interface protocol 0x3b, assuming v1 [ 594.465857][ T5921] usb 2-1: 189:2 : does not exist [ 594.622904][ T5921] usb 2-1: USB disconnect, device number 17 [ 595.080490][ T6551] udevd[6551]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.189/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 597.884811][ T9816] sctp: [Deprecated]: syz.5.803 (pid 9816) Use of struct sctp_assoc_value in delayed_ack socket option. [ 597.884811][ T9816] Use struct sctp_sack_info instead [ 600.165424][ T9813] sctp: [Deprecated]: syz.2.802 (pid 9813) Use of struct sctp_assoc_value in delayed_ack socket option. [ 600.165424][ T9813] Use struct sctp_sack_info instead [ 601.909777][ T43] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 602.464664][ T9837] netlink: 56 bytes leftover after parsing attributes in process `syz.5.808'. [ 602.613758][ T43] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 602.748999][ T43] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 602.878572][ T43] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 602.932597][ T9728] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 602.954076][ T43] usb 2-1: config 220 has no interface number 2 [ 602.970931][ T43] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 604.645198][ T43] usb 2-1: config 220 interface 0 has no altsetting 0 [ 604.652278][ T43] usb 2-1: config 220 interface 76 has no altsetting 0 [ 604.742424][ T43] usb 2-1: config 220 interface 1 has no altsetting 0 [ 604.772531][ T9728] usb 6-1: Using ep0 maxpacket: 32 [ 604.836096][ T9728] usb 6-1: device descriptor read/all, error -71 [ 604.906366][ T43] usb 2-1: string descriptor 0 read error: -71 [ 604.940251][ T43] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 604.995344][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.160057][ T43] usb 2-1: can't set config #220, error -71 [ 605.183234][ T43] usb 2-1: USB disconnect, device number 18 [ 607.757513][ T9873] sctp: [Deprecated]: syz.0.817 (pid 9873) Use of struct sctp_assoc_value in delayed_ack socket option. [ 607.757513][ T9873] Use struct sctp_sack_info instead [ 608.336727][ T9889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.819'. [ 609.175071][ T9898] netlink: 56 bytes leftover after parsing attributes in process `syz.0.821'. [ 609.501937][ T9902] FAULT_INJECTION: forcing a failure. [ 609.501937][ T9902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.528636][ T9902] CPU: 0 UID: 0 PID: 9902 Comm: syz.2.823 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 609.528664][ T9902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 609.528676][ T9902] Call Trace: [ 609.528684][ T9902] [ 609.528693][ T9902] dump_stack_lvl+0x189/0x250 [ 609.528725][ T9902] ? __pfx____ratelimit+0x10/0x10 [ 609.528748][ T9902] ? __pfx_dump_stack_lvl+0x10/0x10 [ 609.528770][ T9902] ? __pfx__printk+0x10/0x10 [ 609.528812][ T9902] should_fail_ex+0x414/0x560 [ 609.528842][ T9902] _copy_to_user+0x31/0xb0 [ 609.528870][ T9902] simple_read_from_buffer+0xe1/0x170 [ 609.528899][ T9902] proc_fail_nth_read+0x1df/0x250 [ 609.528928][ T9902] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 609.528956][ T9902] ? rw_verify_area+0x258/0x650 [ 609.528984][ T9902] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 609.529008][ T9902] vfs_read+0x200/0x980 [ 609.529044][ T9902] ? __pfx___mutex_lock+0x10/0x10 [ 609.529068][ T9902] ? __pfx_vfs_read+0x10/0x10 [ 609.529098][ T9902] ? __fget_files+0x2a/0x420 [ 609.529125][ T9902] ? __fget_files+0x3a0/0x420 [ 609.529146][ T9902] ? __fget_files+0x2a/0x420 [ 609.529180][ T9902] ksys_read+0x145/0x250 [ 609.529205][ T9902] ? __pfx_ksys_read+0x10/0x10 [ 609.529220][ T9902] ? rcu_is_watching+0x15/0xb0 [ 609.529254][ T9902] ? do_syscall_64+0xbe/0x3b0 [ 609.529282][ T9902] do_syscall_64+0xfa/0x3b0 [ 609.529303][ T9902] ? lockdep_hardirqs_on+0x9c/0x150 [ 609.529325][ T9902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.529345][ T9902] ? clear_bhb_loop+0x60/0xb0 [ 609.529372][ T9902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.529391][ T9902] RIP: 0033:0x7fba2298d5fc [ 609.529412][ T9902] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 609.529429][ T9902] RSP: 002b:00007fba23751030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 609.529452][ T9902] RAX: ffffffffffffffda RBX: 00007fba22bb5fa0 RCX: 00007fba2298d5fc [ 609.529467][ T9902] RDX: 000000000000000f RSI: 00007fba237510a0 RDI: 0000000000000006 [ 609.529489][ T9902] RBP: 00007fba23751090 R08: 0000000000000000 R09: 0000000000000000 [ 609.529502][ T9902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.529515][ T9902] R13: 00007fba22bb6038 R14: 00007fba22bb5fa0 R15: 00007fff4cbd5988 [ 609.529551][ T9902] [ 609.764415][ T24] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 609.832532][ T5967] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 609.922555][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 609.937746][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 609.963370][ T24] usb 1-1: config 2 has an invalid interface number: 189 but max is 0 [ 609.993278][ T5967] usb 6-1: Using ep0 maxpacket: 8 [ 610.001911][ T5967] usb 6-1: config 16 has an invalid descriptor of length 229, skipping remainder of the config [ 610.023587][ T24] usb 1-1: config 2 has no interface number 0 [ 610.057171][ T5967] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.071104][ T24] usb 1-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping [ 610.083770][ T24] usb 1-1: config 2 interface 189 has no altsetting 0 [ 610.090785][ T5967] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 610.567046][ T9913] bio_check_eod: 2 callbacks suppressed [ 610.567089][ T9913] syz.2.826: attempt to access beyond end of device [ 610.567089][ T9913] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 610.587452][ T9913] syz.2.826: attempt to access beyond end of device [ 610.587452][ T9913] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 610.600788][ T9913] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 610.612450][ T9913] syz.2.826: attempt to access beyond end of device [ 610.612450][ T9913] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 610.626163][ T9913] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 610.640906][ T9913] syz.2.826: attempt to access beyond end of device [ 610.640906][ T9913] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 610.655358][ T9913] syz.2.826: attempt to access beyond end of device [ 610.655358][ T9913] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 610.668687][ T9913] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 610.679519][ T9913] syz.2.826: attempt to access beyond end of device [ 610.679519][ T9913] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 610.695423][ T9913] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 610.708628][ T9913] syz.2.826: attempt to access beyond end of device [ 610.708628][ T9913] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 610.772539][ T9913] syz.2.826: attempt to access beyond end of device [ 610.772539][ T9913] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 610.786103][ T9913] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 610.795888][ T9913] syz.2.826: attempt to access beyond end of device [ 610.795888][ T9913] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 610.809257][ T9913] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 610.819558][ T9913] syz.2.826: attempt to access beyond end of device [ 610.819558][ T9913] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 610.832966][ T9913] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 610.842720][ T9913] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 610.852371][ T9913] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 610.880727][ T24] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 610.894444][ T5967] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.956986][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.986024][ T5967] usbtmc 6-1:16.0: bulk endpoints not found [ 611.023234][ T24] usb 1-1: Product: syz [ 611.028210][ T24] usb 1-1: Manufacturer: syz [ 611.091977][ T24] usb 1-1: SerialNumber: syz [ 612.047097][ T9923] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 612.307079][ T9923] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 613.357826][ T9923] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 613.373290][ T24] usb 1-1: unknown interface protocol 0x3b, assuming v1 [ 613.380413][ T24] usb 1-1: 189:2 : does not exist [ 613.477070][ T24] usb 1-1: USB disconnect, device number 15 [ 613.834923][ T6551] udevd[6551]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.189/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 613.841770][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.833'. [ 615.058579][ T9942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.366681][ T9137] usb 6-1: USB disconnect, device number 8 [ 616.516405][ T9962] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 617.612177][ T9966] bio_check_eod: 2 callbacks suppressed [ 617.612197][ T9966] syz.2.839: attempt to access beyond end of device [ 617.612197][ T9966] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 617.631280][ T9966] syz.2.839: attempt to access beyond end of device [ 617.631280][ T9966] nbd2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 617.644488][ T9966] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 617.665275][ T9966] syz.2.839: attempt to access beyond end of device [ 617.665275][ T9966] nbd2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 617.678496][ T9966] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 617.689835][ T9966] syz.2.839: attempt to access beyond end of device [ 617.689835][ T9966] nbd2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 617.703301][ T9966] syz.2.839: attempt to access beyond end of device [ 617.703301][ T9966] nbd2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 617.716595][ T9966] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 617.726602][ T9966] syz.2.839: attempt to access beyond end of device [ 617.726602][ T9966] nbd2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 617.739852][ T9966] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 617.750531][ T9966] syz.2.839: attempt to access beyond end of device [ 617.750531][ T9966] nbd2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 617.763819][ T9966] syz.2.839: attempt to access beyond end of device [ 617.763819][ T9966] nbd2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 617.786744][ T9966] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 617.796572][ T9966] syz.2.839: attempt to access beyond end of device [ 617.796572][ T9966] nbd2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 617.809755][ T9966] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 617.819839][ T9966] syz.2.839: attempt to access beyond end of device [ 617.819839][ T9966] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 617.832959][ T9966] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 617.842805][ T9966] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 617.852692][ T9966] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 619.374588][ T9978] netlink: 56 bytes leftover after parsing attributes in process `syz.5.843'. [ 619.782426][ T9728] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 620.072434][ T9728] usb 6-1: Using ep0 maxpacket: 32 [ 620.797307][ T9728] usb 6-1: unable to get BOS descriptor or descriptor too short [ 620.863366][ T9728] usb 6-1: config 2 has an invalid interface number: 189 but max is 0 [ 620.892404][ T9728] usb 6-1: config 2 has no interface number 0 [ 620.898583][ T9728] usb 6-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping [ 620.911117][ T9728] usb 6-1: config 2 interface 189 has no altsetting 0 [ 620.923286][ T9728] usb 6-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 620.941241][ T9728] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.949952][ T9728] usb 6-1: Product: syz [ 620.970051][ T9728] usb 6-1: Manufacturer: syz [ 620.977749][ T9728] usb 6-1: SerialNumber: syz [ 621.727904][ T51] Bluetooth: hci2: unexpected event for opcode 0x0405 [ 622.501336][ T9728] usb 6-1: unknown interface protocol 0x3b, assuming v1 [ 622.604746][ T9728] usb 6-1: 189:2 : does not exist [ 623.642621][ T9481] Bluetooth: hci1: command 0x0406 tx timeout [ 624.373936][T10026] bio_check_eod: 2 callbacks suppressed [ 624.373980][T10026] syz.3.852: attempt to access beyond end of device [ 624.373980][T10026] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 624.393003][T10026] syz.3.852: attempt to access beyond end of device [ 624.393003][T10026] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 624.406505][T10026] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 624.416604][T10026] syz.3.852: attempt to access beyond end of device [ 624.416604][T10026] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 624.429681][T10026] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 624.440539][T10026] syz.3.852: attempt to access beyond end of device [ 624.440539][T10026] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 624.453894][T10026] syz.3.852: attempt to access beyond end of device [ 624.453894][T10026] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 624.466821][T10026] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 624.476620][T10026] syz.3.852: attempt to access beyond end of device [ 624.476620][T10026] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 624.489969][T10026] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 624.500323][T10026] syz.3.852: attempt to access beyond end of device [ 624.500323][T10026] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 624.513392][T10026] syz.3.852: attempt to access beyond end of device [ 624.513392][T10026] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 624.526348][T10026] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 624.536314][T10026] syz.3.852: attempt to access beyond end of device [ 624.536314][T10026] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 624.549415][T10026] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 624.559269][T10026] syz.3.852: attempt to access beyond end of device [ 624.559269][T10026] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 624.572365][T10026] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 624.582104][T10026] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 624.591625][T10026] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 624.684405][ T9728] usb 6-1: USB disconnect, device number 9 [ 624.847931][ T6551] udevd[6551]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.189/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 624.867222][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.882663][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.091994][T10043] ubi31: attaching mtd0 [ 626.110424][T10043] ubi31: scanning is finished [ 626.115335][T10043] ubi31: empty MTD device detected [ 626.783654][T10043] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 626.791528][T10043] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 626.799152][T10043] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 626.806292][T10043] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 626.813849][T10043] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 626.820720][T10043] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 626.828941][T10043] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2964689658 [ 626.839072][T10043] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 626.874955][T10045] ubi31: background thread "ubi_bgt31d" started, PID 10045 [ 628.186606][T10055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'. [ 629.442283][T10068] afs: Unknown parameter '' [ 629.457376][T10055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 630.261232][T10076] netlink: 56 bytes leftover after parsing attributes in process `syz.5.865'. [ 630.716760][ T9137] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 631.472445][ T9137] usb 6-1: Using ep0 maxpacket: 32 [ 631.512981][ T9137] usb 6-1: unable to get BOS descriptor or descriptor too short [ 631.542470][T10085] xt_hashlimit: size too large, truncated to 1048576 [ 631.563948][ T9137] usb 6-1: config 2 has an invalid interface number: 189 but max is 0 [ 631.600962][ T9137] usb 6-1: config 2 has no interface number 0 [ 631.629862][ T9137] usb 6-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping [ 631.708645][ T9137] usb 6-1: config 2 interface 189 has no altsetting 0 [ 631.750086][ T9137] usb 6-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 631.790090][ T9137] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.832594][ T9137] usb 6-1: Product: syz [ 631.853965][ T9137] usb 6-1: Manufacturer: syz [ 631.870916][ T9137] usb 6-1: SerialNumber: syz [ 632.126571][ T9137] usb 6-1: unknown interface protocol 0x3b, assuming v1 [ 632.214493][ T9137] usb 6-1: 189:2 : does not exist [ 633.267260][ T9137] usb 6-1: USB disconnect, device number 10 [ 633.771439][ T6551] udevd[6551]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:2.189/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 636.233231][T10126] netlink: 4 bytes leftover after parsing attributes in process `syz.5.876'. [ 636.562999][T10126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 637.628069][T10126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.322720][ T9137] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 640.649568][T10139] smc: adding net device syzkaller0 with user defined pnetid SYZ2 [ 640.673309][T10147] netlink: 56 bytes leftover after parsing attributes in process `syz.0.882'. [ 640.809688][T10139] smc: removing net device syzkaller0 with user defined pnetid SYZ2 [ 640.853127][ T9137] usb 1-1: Using ep0 maxpacket: 32 [ 640.874593][ T9137] usb 1-1: unable to get BOS descriptor or descriptor too short [ 640.900923][ T9137] usb 1-1: config 2 has an invalid interface number: 189 but max is 0 [ 640.926255][ T9137] usb 1-1: config 2 has no interface number 0 [ 640.948488][ T9137] usb 1-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping [ 641.000766][ T9137] usb 1-1: config 2 interface 189 has no altsetting 0 [ 641.041794][ T9137] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 641.087083][ T9137] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.107355][ T9137] usb 1-1: Product: syz [ 641.119121][ T9137] usb 1-1: Manufacturer: syz [ 641.146860][ T9137] usb 1-1: SerialNumber: syz [ 642.114123][ T9137] usb 1-1: unknown interface protocol 0x3b, assuming v1 [ 642.121166][ T9137] usb 1-1: 189:2 : does not exist [ 642.274210][ T9137] usb 1-1: USB disconnect, device number 16 [ 642.670715][ T6551] udevd[6551]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.189/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 642.692726][T10176] smc: adding net device syzkaller0 with user defined pnetid SYZ2 [ 643.687211][T10186] fuse: Bad value for 'rootmode' [ 646.074876][ T30] audit: type=1326 audit(1755758036.401:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10175 comm="syz.3.889" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13ee18ebe9 code=0x0 [ 646.704066][T10180] smc: removing net device syzkaller0 with user defined pnetid SYZ2 [ 651.900349][T10234] FAULT_INJECTION: forcing a failure. [ 651.900349][T10234] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.913792][T10234] CPU: 1 UID: 0 PID: 10234 Comm: syz.5.897 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 651.913819][T10234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 651.913831][T10234] Call Trace: [ 651.913839][T10234] [ 651.913848][T10234] dump_stack_lvl+0x189/0x250 [ 651.913877][T10234] ? __pfx____ratelimit+0x10/0x10 [ 651.913898][T10234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 651.913911][T10234] ? __pfx__printk+0x10/0x10 [ 651.913927][T10234] ? __might_fault+0xb0/0x130 [ 651.913946][T10234] should_fail_ex+0x414/0x560 [ 651.913963][T10234] _copy_from_user+0x2d/0xb0 [ 651.913980][T10234] kvm_vm_ioctl+0x632/0xc60 [ 651.913995][T10234] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 651.914019][T10234] ? do_vfs_ioctl+0xf37/0x1990 [ 651.914039][T10234] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 651.914060][T10234] ? kasan_quarantine_put+0xdd/0x220 [ 651.914084][T10234] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 651.914098][T10234] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 651.914112][T10234] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 651.914125][T10234] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 651.914148][T10234] ? __lock_acquire+0xab9/0xd20 [ 651.914163][T10234] ? __asan_memset+0x22/0x50 [ 651.914179][T10234] ? smack_file_ioctl+0x302/0x340 [ 651.914193][T10234] ? __pfx_smack_file_ioctl+0x10/0x10 [ 651.914211][T10234] ? __fget_files+0x2a/0x420 [ 651.914225][T10234] ? __fget_files+0x3a0/0x420 [ 651.914237][T10234] ? __fget_files+0x2a/0x420 [ 651.914252][T10234] ? bpf_lsm_file_ioctl+0x9/0x20 [ 651.914266][T10234] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 651.914278][T10234] __se_sys_ioctl+0xfc/0x170 [ 651.914297][T10234] do_syscall_64+0xfa/0x3b0 [ 651.914309][T10234] ? lockdep_hardirqs_on+0x9c/0x150 [ 651.914323][T10234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.914334][T10234] ? clear_bhb_loop+0x60/0xb0 [ 651.914349][T10234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.914360][T10234] RIP: 0033:0x7f4de258ebe9 [ 651.914373][T10234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.914384][T10234] RSP: 002b:00007f4de07f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.914398][T10234] RAX: ffffffffffffffda RBX: 00007f4de27b5fa0 RCX: 00007f4de258ebe9 [ 651.914407][T10234] RDX: 0000200000000140 RSI: 00000000c018aec0 RDI: 0000000000000004 [ 651.914415][T10234] RBP: 00007f4de07f6090 R08: 0000000000000000 R09: 0000000000000000 [ 651.914422][T10234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.914429][T10234] R13: 00007f4de27b6038 R14: 00007f4de27b5fa0 R15: 00007fffe604c078 [ 651.914449][T10234] [ 652.201865][T10231] netlink: 56 bytes leftover after parsing attributes in process `syz.0.898'. [ 652.272423][ T5921] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 652.390919][T10240] xt_hashlimit: size too large, truncated to 1048576 [ 652.492448][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 652.522745][ T5921] usb 1-1: unable to get BOS descriptor or descriptor too short [ 652.568157][ T5921] usb 1-1: config 2 has an invalid interface number: 189 but max is 0 [ 652.640031][ T5921] usb 1-1: config 2 has no interface number 0 [ 652.679435][ T5921] usb 1-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping [ 653.672500][ T5921] usb 1-1: config 2 interface 189 has no altsetting 0 [ 654.236915][T10255] fuse: Bad value for 'rootmode' [ 654.736212][ T5921] usb 1-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 654.752359][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.932731][ T5921] usb 1-1: can't set config #2, error -71 [ 655.002222][ T5921] usb 1-1: USB disconnect, device number 17 [ 656.069392][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.5.905'. [ 660.726043][T10293] netlink: 'syz.3.908': attribute type 1 has an invalid length. [ 660.735314][T10293] NCSI netlink: No device for ifindex 0 [ 662.529808][T10307] FAULT_INJECTION: forcing a failure. [ 662.529808][T10307] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 662.544793][T10307] CPU: 1 UID: 0 PID: 10307 Comm: syz.3.912 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 662.544820][T10307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 662.544831][T10307] Call Trace: [ 662.544840][T10307] [ 662.544849][T10307] dump_stack_lvl+0x189/0x250 [ 662.544877][T10307] ? __pfx____ratelimit+0x10/0x10 [ 662.544899][T10307] ? __pfx_dump_stack_lvl+0x10/0x10 [ 662.544922][T10307] ? __pfx__printk+0x10/0x10 [ 662.544949][T10307] ? __might_fault+0xb0/0x130 [ 662.544984][T10307] should_fail_ex+0x414/0x560 [ 662.545013][T10307] _copy_from_iter+0x1db/0x16f0 [ 662.545047][T10307] ? bpf_trace_run2+0x322/0x4b0 [ 662.545074][T10307] ? bpf_trace_run2+0x186/0x4b0 [ 662.545102][T10307] ? __pfx_bpf_trace_run2+0x10/0x10 [ 662.545137][T10307] ? __pfx__copy_from_iter+0x10/0x10 [ 662.545159][T10307] ? file_tty_write+0x2e8/0x990 [ 662.545184][T10307] ? file_tty_write+0x2a8/0x990 [ 662.545210][T10307] ? file_tty_write+0x2e8/0x990 [ 662.545233][T10307] ? rcu_is_watching+0x15/0xb0 [ 662.545256][T10307] ? kfree+0x4d/0x440 [ 662.545291][T10307] file_tty_write+0x486/0x990 [ 662.545328][T10307] vfs_write+0x54b/0xa90 [ 662.545354][T10307] ? __pfx_tty_write+0x10/0x10 [ 662.545381][T10307] ? __pfx_vfs_write+0x10/0x10 [ 662.545414][T10307] ? __fget_files+0x2a/0x420 [ 662.545449][T10307] ksys_write+0x145/0x250 [ 662.545472][T10307] ? __pfx_ksys_write+0x10/0x10 [ 662.545489][T10307] ? rcu_is_watching+0x15/0xb0 [ 662.545516][T10307] ? do_syscall_64+0xbe/0x3b0 [ 662.545544][T10307] do_syscall_64+0xfa/0x3b0 [ 662.545564][T10307] ? lockdep_hardirqs_on+0x9c/0x150 [ 662.545585][T10307] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.545604][T10307] ? clear_bhb_loop+0x60/0xb0 [ 662.545629][T10307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.545648][T10307] RIP: 0033:0x7f13ee18ebe9 [ 662.545667][T10307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 662.545707][T10307] RSP: 002b:00007f13eefc1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 662.545730][T10307] RAX: ffffffffffffffda RBX: 00007f13ee3b5fa0 RCX: 00007f13ee18ebe9 [ 662.545745][T10307] RDX: 0000000000001006 RSI: 00002000000030c0 RDI: 0000000000000003 [ 662.545757][T10307] RBP: 00007f13eefc1090 R08: 0000000000000000 R09: 0000000000000000 [ 662.545769][T10307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.545781][T10307] R13: 00007f13ee3b6038 R14: 00007f13ee3b5fa0 R15: 00007ffc9bfc1338 [ 662.545816][T10307] [ 663.252554][ T9696] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 663.714691][ T9696] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 663.841194][T10330] fuse: Bad value for 'rootmode' [ 663.910317][ T9696] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 664.133597][ T9696] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.522686][ T5921] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 664.633375][ T9696] usb 6-1: config 0 descriptor?? [ 664.684380][T10327] xt_hashlimit: size too large, truncated to 1048576 [ 664.712826][T10314] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 665.133214][T10339] netlink: 56 bytes leftover after parsing attributes in process `syz.2.920'. [ 667.231142][ T9696] elan 0003:04F3:0755.0005: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 667.322368][ T9728] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 667.404453][ T9692] usb 6-1: USB disconnect, device number 11 [ 667.542722][ T9728] usb 3-1: Using ep0 maxpacket: 32 [ 667.590624][ T9728] usb 3-1: unable to get BOS descriptor or descriptor too short [ 667.617785][ T9728] usb 3-1: config 2 has an invalid interface number: 189 but max is 0 [ 667.641777][ T9728] usb 3-1: config 2 has no interface number 0 [ 667.668021][ T9728] usb 3-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping [ 667.727518][ T9728] usb 3-1: config 2 interface 189 has no altsetting 0 [ 667.771288][ T9728] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 667.810647][T10351] fido_id[10351]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 667.830079][ T9728] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.859679][ T9728] usb 3-1: Product: syz [ 667.867630][ T9728] usb 3-1: Manufacturer: syz [ 667.877994][ T9728] usb 3-1: SerialNumber: syz [ 668.898135][T10363] comedi comedi0: dmm32at: I/O port conflict (0x3,16) [ 669.893949][ T9728] usb 3-1: unknown interface protocol 0x3b, assuming v1 [ 669.901613][ T9728] usb 3-1: 189:2 : does not exist [ 669.941059][ T9728] usb 3-1: USB disconnect, device number 13 [ 670.488641][ T6718] udevd[6718]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:2.189/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 670.675956][T10383] fuse: Bad value for 'rootmode' [ 673.418249][T10405] xt_hashlimit: size too large, truncated to 1048576 [ 678.008350][T10435] bio_check_eod: 2 callbacks suppressed [ 678.008394][T10435] syz.1.941: attempt to access beyond end of device [ 678.008394][T10435] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 678.028548][T10435] syz.1.941: attempt to access beyond end of device [ 678.028548][T10435] nbd1: rw=0, sector=256, nr_sectors = 1 limit=0 [ 678.041900][T10435] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 678.053150][T10435] syz.1.941: attempt to access beyond end of device [ 678.053150][T10435] nbd1: rw=0, sector=512, nr_sectors = 1 limit=0 [ 678.066792][T10435] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 678.081320][T10435] syz.1.941: attempt to access beyond end of device [ 678.081320][T10435] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 678.096142][T10435] syz.1.941: attempt to access beyond end of device [ 678.096142][T10435] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 678.109756][T10435] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 678.120347][T10435] syz.1.941: attempt to access beyond end of device [ 678.120347][T10435] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 678.133824][T10435] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 678.147511][T10435] syz.1.941: attempt to access beyond end of device [ 678.147511][T10435] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 678.161575][T10435] syz.1.941: attempt to access beyond end of device [ 678.161575][T10435] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 678.175219][T10435] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 678.185726][T10435] syz.1.941: attempt to access beyond end of device [ 678.185726][T10435] nbd1: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 678.199208][T10435] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 678.212164][T10435] syz.1.941: attempt to access beyond end of device [ 678.212164][T10435] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 678.226432][T10435] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 678.237001][T10435] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 678.246656][T10435] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 678.796946][T10438] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 678.808318][T10438] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 678.824182][T10438] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 678.835122][T10438] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 678.849572][T10438] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 678.861062][T10438] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 678.875075][T10438] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 678.886032][T10438] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 678.896090][T10438] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 679.630741][T10447] fuse: Bad value for 'rootmode' [ 683.718016][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 685.256436][T10477] netlink: 'syz.2.951': attribute type 1 has an invalid length. [ 686.343072][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.846280][T10494] fuse: Bad value for 'rootmode' [ 687.954622][T10506] netlink: 56 bytes leftover after parsing attributes in process `syz.1.958'. [ 688.113269][ T9696] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 688.222268][ T9728] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 688.442541][ T9728] usb 2-1: Using ep0 maxpacket: 32 [ 688.458057][ T9728] usb 2-1: unable to get BOS descriptor or descriptor too short [ 688.479305][ T9728] usb 2-1: config 2 has an invalid interface number: 189 but max is 0 [ 688.492906][ T9728] usb 2-1: config 2 has no interface number 0 [ 688.501041][ T9728] usb 2-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping [ 688.527208][ T9728] usb 2-1: config 2 interface 189 has no altsetting 0 [ 688.541705][ T9728] usb 2-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 688.582325][ T9728] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.603147][T10512] netlink: 56 bytes leftover after parsing attributes in process `syz.3.961'. [ 688.612250][ T9728] usb 2-1: Product: syz [ 688.631422][ T9728] usb 2-1: Manufacturer: syz [ 688.644414][ T9696] usb 3-1: config index 0 descriptor too short (expected 4114, got 18) [ 688.656004][ T9728] usb 2-1: SerialNumber: syz [ 688.665380][ T9696] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.09 [ 688.684241][ T9696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.697964][ T9696] usb 3-1: Product: syz [ 688.702194][ T9696] usb 3-1: Manufacturer: syz [ 688.716781][ T9696] usb 3-1: SerialNumber: syz [ 688.866799][ T9696] usb 3-1: config 0 descriptor?? [ 689.254149][ T6006] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 689.508182][ T6006] usb 4-1: Using ep0 maxpacket: 32 [ 689.574243][ T6006] usb 4-1: unable to get BOS descriptor or descriptor too short [ 689.605969][ T9692] usb 3-1: USB disconnect, device number 14 [ 689.608216][ T6006] usb 4-1: config 2 has an invalid interface number: 189 but max is 0 [ 689.637086][ T6006] usb 4-1: config 2 has no interface number 0 [ 689.687306][ T6006] usb 4-1: config 2 interface 189 altsetting 11 has an invalid endpoint descriptor of length 3, skipping [ 689.701501][ T6006] usb 4-1: config 2 interface 189 has no altsetting 0 [ 689.721572][ T6006] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=9b.52 [ 689.792214][ T6006] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.902379][ T6006] usb 4-1: Product: syz [ 689.929108][T10531] netlink: 4 bytes leftover after parsing attributes in process `syz.5.963'. [ 689.963411][ T6006] usb 4-1: Manufacturer: syz [ 690.039182][ T6006] usb 4-1: SerialNumber: syz [ 690.729566][ T9728] usb 2-1: unknown interface protocol 0x3b, assuming v1 [ 690.749479][ T9728] usb 2-1: 189:2 : does not exist [ 690.860564][ T9728] usb 2-1: USB disconnect, device number 19 [ 691.210600][ T6551] udevd[6551]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:2.189/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 691.958451][ T9481] block nbd1: Receive control failed (result -32) [ 692.048674][T10541] block nbd1: shutting down sockets [ 692.975020][T10558] fuse: Bad value for 'rootmode' [ 695.853502][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.5.972'. [ 696.762392][ T6006] usb 4-1: unknown interface protocol 0x3b, assuming v1 [ 696.769421][ T6006] usb 4-1: 189:2 : does not exist [ 696.988099][ T9727] usb 4-1: USB disconnect, device number 14 [ 697.139879][T10590] netlink: 8 bytes leftover after parsing attributes in process `syz.1.975'. [ 699.238765][T10601] [ 699.241160][T10601] ====================================================== [ 699.248199][T10601] WARNING: possible circular locking dependency detected [ 699.255237][T10601] 6.16.0-syzkaller #0 Not tainted [ 699.260282][T10601] ------------------------------------------------------ [ 699.267321][T10601] syz.3.978/10601 is trying to acquire lock: [ 699.273315][T10601] ffff888142f80358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0 [ 699.282605][T10601] [ 699.282605][T10601] but task is already holding lock: [ 699.289985][T10601] ffff8880251c7368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 699.299748][T10601] [ 699.299748][T10601] which lock already depends on the new lock. [ 699.299748][T10601] [ 699.310177][T10601] [ 699.310177][T10601] the existing dependency chain (in reverse order) is: [ 699.319399][T10601] [ 699.319399][T10601] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 699.327869][T10601] lock_acquire+0x120/0x360 [ 699.333004][T10601] down_write+0x96/0x1f0 [ 699.337801][T10601] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 699.344077][T10601] nbd_start_device+0x16c/0xac0 [ 699.349477][T10601] nbd_ioctl+0x636/0xeb0 [ 699.354355][T10601] blkdev_ioctl+0x5a8/0x6d0 [ 699.359408][T10601] __se_sys_ioctl+0xfc/0x170 [ 699.364553][T10601] do_syscall_64+0xfa/0x3b0 [ 699.369623][T10601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.376064][T10601] [ 699.376064][T10601] -> #1 (&nbd->config_lock){+.+.}-{4:4}: [ 699.383926][T10601] lock_acquire+0x120/0x360 [ 699.389066][T10601] __mutex_lock+0x182/0xe80 [ 699.394119][T10601] refcount_dec_and_mutex_lock+0x30/0xa0 [ 699.400394][T10601] nbd_config_put+0x2c/0x790 [ 699.405550][T10601] nbd_release+0xfe/0x140 [ 699.410527][T10601] bdev_release+0x533/0x650 [ 699.415623][T10601] blkdev_release+0x15/0x20 [ 699.420680][T10601] __fput+0x449/0xa70 [ 699.425533][T10601] fput_close_sync+0x119/0x200 [ 699.430859][T10601] __x64_sys_close+0x7f/0x110 [ 699.436159][T10601] do_syscall_64+0xfa/0x3b0 [ 699.441199][T10601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.447647][T10601] [ 699.447647][T10601] -> #0 (&disk->open_mutex){+.+.}-{4:4}: [ 699.455495][T10601] validate_chain+0xb9b/0x2140 [ 699.460801][T10601] __lock_acquire+0xab9/0xd20 [ 699.466013][T10601] lock_acquire+0x120/0x360 [ 699.471116][T10601] __mutex_lock+0x182/0xe80 [ 699.476152][T10601] __del_gendisk+0x129/0x9e0 [ 699.481283][T10601] del_gendisk+0xe8/0x160 [ 699.486159][T10601] loop_remove+0x42/0xc0 [ 699.490958][T10601] loop_control_ioctl+0x4ac/0x5a0 [ 699.496539][T10601] __se_sys_ioctl+0xfc/0x170 [ 699.501692][T10601] do_syscall_64+0xfa/0x3b0 [ 699.506754][T10601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.513211][T10601] [ 699.513211][T10601] other info that might help us debug this: [ 699.513211][T10601] [ 699.523450][T10601] Chain exists of: [ 699.523450][T10601] &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock [ 699.523450][T10601] [ 699.537668][T10601] Possible unsafe locking scenario: [ 699.537668][T10601] [ 699.545122][T10601] CPU0 CPU1 [ 699.550581][T10601] ---- ---- [ 699.555989][T10601] rlock(&set->update_nr_hwq_lock); [ 699.561282][T10601] lock(&nbd->config_lock); [ 699.568400][T10601] lock(&set->update_nr_hwq_lock); [ 699.576126][T10601] lock(&disk->open_mutex); [ 699.580813][T10601] [ 699.580813][T10601] *** DEADLOCK *** [ 699.580813][T10601] [ 699.588967][T10601] 1 lock held by syz.3.978/10601: [ 699.593996][T10601] #0: ffff8880251c7368 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 699.604119][T10601] [ 699.604119][T10601] stack backtrace: [ 699.610016][T10601] CPU: 1 UID: 0 PID: 10601 Comm: syz.3.978 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 699.610035][T10601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 699.610045][T10601] Call Trace: [ 699.610051][T10601] [ 699.610058][T10601] dump_stack_lvl+0x189/0x250 [ 699.610079][T10601] ? __pfx_dump_stack_lvl+0x10/0x10 [ 699.610096][T10601] ? __pfx__printk+0x10/0x10 [ 699.610116][T10601] ? print_lock_name+0xde/0x100 [ 699.610134][T10601] print_circular_bug+0x2ee/0x310 [ 699.610155][T10601] check_noncircular+0x134/0x160 [ 699.610175][T10601] validate_chain+0xb9b/0x2140 [ 699.610193][T10601] ? __schedule+0x16c8/0x4c90 [ 699.610216][T10601] __lock_acquire+0xab9/0xd20 [ 699.610233][T10601] ? __del_gendisk+0x129/0x9e0 [ 699.610251][T10601] lock_acquire+0x120/0x360 [ 699.610264][T10601] ? __del_gendisk+0x129/0x9e0 [ 699.610287][T10601] __mutex_lock+0x182/0xe80 [ 699.610303][T10601] ? __del_gendisk+0x129/0x9e0 [ 699.610324][T10601] ? __del_gendisk+0x129/0x9e0 [ 699.610341][T10601] ? lockdep_hardirqs_on+0x9c/0x150 [ 699.610357][T10601] ? __pfx___mutex_lock+0x10/0x10 [ 699.610373][T10601] ? __pfx___might_resched+0x10/0x10 [ 699.610392][T10601] ? __lock_acquire+0xab9/0xd20 [ 699.610406][T10601] ? disk_del_events+0xb5/0x210 [ 699.610427][T10601] ? __del_gendisk+0xc1/0x9e0 [ 699.610447][T10601] __del_gendisk+0x129/0x9e0 [ 699.610465][T10601] ? del_gendisk+0xe0/0x160 [ 699.610485][T10601] ? __pfx___del_gendisk+0x10/0x10 [ 699.610505][T10601] ? down_read+0x1ad/0x2e0 [ 699.610523][T10601] del_gendisk+0xe8/0x160 [ 699.610542][T10601] loop_remove+0x42/0xc0 [ 699.610565][T10601] loop_control_ioctl+0x4ac/0x5a0 [ 699.610581][T10601] ? __pfx_loop_control_ioctl+0x10/0x10 [ 699.610593][T10601] ? __fget_files+0x2a/0x420 [ 699.610611][T10601] ? bpf_lsm_file_ioctl+0x9/0x20 [ 699.610628][T10601] ? __pfx_loop_control_ioctl+0x10/0x10 [ 699.610642][T10601] __se_sys_ioctl+0xfc/0x170 [ 699.610672][T10601] do_syscall_64+0xfa/0x3b0 [ 699.610690][T10601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.610705][T10601] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 699.610740][T10601] ? clear_bhb_loop+0x60/0xb0 [ 699.610766][T10601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.610790][T10601] RIP: 0033:0x7f13ee18ebe9 [ 699.610809][T10601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.610829][T10601] RSP: 002b:00007f13eef7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 699.610854][T10601] RAX: ffffffffffffffda RBX: 00007f13ee3b6180 RCX: 00007f13ee18ebe9 [ 699.610870][T10601] RDX: 0000000000000000 RSI: 0000000000004c81 RDI: 0000000000000006 [ 699.610884][T10601] RBP: 00007f13ee211e19 R08: 0000000000000000 R09: 0000000000000000 [ 699.610899][T10601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.610913][T10601] R13: 00007f13ee3b6218 R14: 00007f13ee3b6180 R15: 00007ffc9bfc1338 [ 699.610938][T10601] [ 699.906364][T10599] netlink: 'syz.3.978': attribute type 21 has an invalid length. [ 699.914221][T10599] netlink: 128 bytes leftover after parsing attributes in process `syz.3.978'. [ 699.923226][T10599] netlink: 'syz.3.978': attribute type 5 has an invalid length. [ 699.930855][T10599] netlink: 3 bytes leftover after parsing attributes in process `syz.3.978'.