last executing test programs: 4m16.213714473s ago: executing program 1 (id=718): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@delchain={0x46c, 0x65, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x3, 0xd}, {0x0, 0x1}, {0xfff2, 0xc}}, [@f_tcindex={{0xc}, {0x14, 0x2, [@TCA_TCINDEX_MASK={0x6, 0x2, 0x1}, @TCA_TCINDEX_CLASSID={0x8, 0x5, {0x7ff9, 0x1}}]}}, @f_rsvp6={{0xa}, {0x41c, 0x2, [@TCA_RSVP_POLICE={0x418, 0x5, [@TCA_POLICE_RESULT={0x8, 0x5, 0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x81, 0x5, 0x81, 0x6, 0x8, 0x3, 0x2dd70416, 0x3ff, 0x8, 0x7ff, 0x5, 0x2, 0xafd, 0x819, 0x6, 0x2, 0xf, 0xffff, 0x2, 0xffff, 0x6, 0x6, 0x6, 0x800, 0x5, 0x918, 0x7f, 0xffff, 0x0, 0x10001, 0x3, 0xfffffffc, 0x9, 0x0, 0x6, 0x1, 0x5, 0x100, 0xfff, 0x9, 0x0, 0x5, 0xfffffff8, 0xdb, 0x800, 0x3, 0x539, 0x800, 0x2, 0x4, 0x8, 0x77, 0x3, 0x4, 0x6, 0x90, 0x3, 0x6, 0x4, 0x2, 0x81, 0x6, 0x9, 0x4, 0x5, 0x7, 0x400, 0x7, 0x3, 0x34983533, 0x6780, 0x6, 0x7fff, 0xc9, 0x1, 0x6, 0x0, 0xff, 0x6, 0x5, 0x1ff, 0x2, 0x7, 0xc0, 0x5, 0xfffff5a8, 0x1, 0x7, 0x0, 0x8, 0x3d, 0x10, 0x40, 0x5, 0x4, 0x7ad, 0x5, 0x6, 0x10001, 0x71, 0x8, 0x9, 0x827, 0x2, 0x2, 0xd57c, 0x8, 0xe3, 0x4, 0x8, 0x101, 0x7f, 0xf, 0xd1, 0x6, 0x10001, 0xe3, 0x3, 0x6, 0x5, 0x1, 0x10, 0x8, 0x7, 0x3, 0x7ff, 0x1, 0xb, 0x61d, 0x1, 0x1, 0x7, 0x5, 0x3, 0x0, 0x7, 0x7, 0x9, 0x6, 0x6, 0x7, 0x2, 0x9, 0x800, 0x9, 0x0, 0x8, 0x8001, 0x9, 0x2, 0x0, 0x6, 0x9, 0x4, 0x7, 0x7fffffff, 0x2, 0x4, 0x41070155, 0x10000, 0x2, 0x5, 0x1, 0x4, 0x1c, 0xfffffffe, 0x6, 0x0, 0x1, 0x1, 0x7, 0x21d97348, 0x0, 0x8, 0x3, 0x3, 0x3, 0x6, 0x317, 0x7, 0x2, 0x6, 0xa6e, 0xc00, 0x0, 0x2, 0x74aa, 0x7, 0xb4, 0x4, 0x80, 0x400, 0x0, 0x8001, 0x4fc, 0x6, 0x0, 0x7, 0x4, 0x9, 0x9, 0x800, 0xa, 0x2694, 0x7, 0x10, 0x2fd2, 0xc23, 0x7, 0x7, 0x8, 0xd, 0xbe, 0x98, 0xaafa, 0x1, 0xff, 0xcc0, 0x5, 0x250ae597, 0x9, 0x4d, 0x6, 0x1da, 0xe, 0x35f, 0x7f, 0xffff33e3, 0x5, 0x9be, 0xc, 0x7, 0x8001, 0x1, 0xffffffff, 0x6, 0x6, 0x3, 0xfffffffe, 0x80000000, 0x4, 0x8, 0xbcd, 0xfffffffd, 0x40, 0x8d2, 0x9, 0x1, 0x401, 0x38b0, 0x2, 0x4, 0x2, 0x0, 0x7]}]}]}}]}, 0x46c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4040040) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x26c0}}, 0x4010) 4m16.125235512s ago: executing program 1 (id=719): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r2, 0x10e, 0x8, &(0x7f0000000000)=0xfff, 0x4) syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), r2) sendto$inet6(r1, &(0x7f0000000040)='x', 0x1, 0x0, 0x0, 0x0) accept(r1, &(0x7f0000000080)=@pppoe, &(0x7f0000000100)=0x80) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x4}, 0x8) 4m15.923744661s ago: executing program 1 (id=723): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0) r2 = dup(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/pids.max\x00', 0x2, 0x0) r4 = syz_open_dev$usbmon(&(0x7f0000000000), 0x5dc0, 0x48502) ioctl$MON_IOCX_MFETCH(r4, 0xc0109207, &(0x7f0000000080)={0x0, 0x43, 0x3}) write$cgroup_subtree(r3, &(0x7f0000000340)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x6) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r5, 0xc0205649, &(0x7f0000000100)={0xf010000}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r2, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000000c0)='cpu.weight\x00', 0x2, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000040)=ANY=[], 0x118) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000001c0)={0x101ff, 0x2, 0x100000, 0x1000, &(0x7f00009d8000/0x1000)=nil}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r8, 0x0) write$cgroup_int(r7, &(0x7f0000000080)=0x6, 0x12) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) mount_setattr(0xffffffffffffff9c, 0x0, 0x9800, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, r5, 0x1000000000000000) 4m14.719919202s ago: executing program 1 (id=732): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, &(0x7f0000000080)={0x6, 0x3, 0x0, [{0x10, 0x1ff, 0x8, 0xff, 0xf2, 0x58, 0xc, '\x00', 0x4f8}, {0xfffffffffffffffc, 0x100, 0x3, 0x7, 0x10, 0x4, 0x7, '\x00', 0x8000000000000000}, {0xfffffffffffffff7, 0x80, 0x4, 0xfa, 0x0, 0xb, 0x16, '\x00', 0x9}]}) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0xb, 0x202812, r0, 0x7dfff000) madvise(&(0x7f0000788000/0x4000)=nil, 0x4000, 0xc) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400, {0x0, 0x7, 0x0, 0x0, 0x7f}}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x180180, 0x0) 4m14.623934798s ago: executing program 1 (id=733): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xe0000000, 0x5e490420, 0x2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x9, 0x3f, 0x1a, "3eccd25569e20900"}) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 4m14.471882504s ago: executing program 1 (id=735): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x5) fchdir(r2) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 3m59.353950124s ago: executing program 32 (id=735): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x5) fchdir(r2) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) (async) read$FUSE(r3, &(0x7f0000000980)={0x2020}, 0x2020) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 1m11.7798762s ago: executing program 0 (id=2070): ioprio_set$pid(0x1, 0x0, 0x4000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a1180002", 0x1f}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000580)=ANY=[], 0xfe33) r1 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x2287, &(0x7f0000000000)) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@redirect_dir_nofollow}, {@nfs_export_on}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="70000000000901010000000000000000070000010900010073797a310000000022000540000000153c0002002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac14141a0c000280050001"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x1800) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1d984a15, 0x110, r2, 0x18790000) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="9a00e8cf5e81630446f13abf5cf4da69d8aba5103b97e9cc23b4d63163aaeeff11dacdbf1236eb17215ae20704c4518e14ec4764b8ddf973148a813a2bcc675634a00517de8d56efa9fe7810ce7802608fd732881b968889ce6f12", 0x5b}], 0x1, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x400c810}, 0x40001) recvmmsg$unix(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)=""/90, 0x5a}], 0x1}}], 0x1, 0x120, 0x0) fchdir(r4) mount(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0) r7 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000080)=0x80) r8 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r8, 0x0) close_range(r8, r8, 0x0) 1m11.49585145s ago: executing program 0 (id=2074): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') statx(r0, 0x0, 0x1000, 0x10, 0x0) (fail_nth: 3) 1m10.993340629s ago: executing program 0 (id=2075): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x82, &(0x7f0000000d00)={0x0, 0x9}, 0x8) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) mkdir(&(0x7f0000000140)='./file1\x00', 0x1a0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) chdir(&(0x7f0000000280)='./file1\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = dup2(r3, r3) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, 0x0, 0x0) openat$cgroup_ro(r4, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_GETFMT(r5, 0xffffffff80000401, 0xffffffffffffffff, 0x0) sendmsg$rds(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@rdma_args={0x48, 0x114, 0x1, {{0x1, 0x11c3}, {&(0x7f0000000340)=""/140, 0x8c}, &(0x7f0000000580)=[{&(0x7f0000000400)=""/118, 0x76}, {&(0x7f0000000240)=""/31, 0x1f}, {&(0x7f0000000480)=""/116, 0x74}, {&(0x7f00000002c0)=""/59, 0x3b}, {&(0x7f0000000500)=""/82, 0x52}], 0x5, 0x24, 0x1}}], 0x48, 0x8004}, 0x0) 1m10.895822142s ago: executing program 0 (id=2077): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d4, 0x0) 1m10.703465713s ago: executing program 0 (id=2080): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0x6c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x2c, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x6c}}, 0x0) (fail_nth: 5) 1m10.191572026s ago: executing program 0 (id=2082): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa8300, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) timerfd_gettime(r1, &(0x7f00000000c0)) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa8300, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) (async) timerfd_gettime(r1, &(0x7f00000000c0)) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) (async) 55.049105837s ago: executing program 33 (id=2082): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa8300, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) timerfd_gettime(r1, &(0x7f00000000c0)) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa8300, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') (async) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) (async) timerfd_gettime(r1, &(0x7f00000000c0)) (async) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) (async) mmap(&(0x7f0000787000/0x4000)=nil, 0x4000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) (async) 37.234769374s ago: executing program 4 (id=2300): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001600)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000000340)=""/181, 0xb5}], 0x3}, 0x0) 37.100152931s ago: executing program 4 (id=2302): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r0, 0x45809000) setrlimit(0x40000000000008, &(0x7f0000000000)={0x20, 0x200000}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) 37.006995521s ago: executing program 4 (id=2305): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000400)={0x14, &(0x7f0000000280)={0x20, 0xc, 0xff, {0xff, 0x5, "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"}}, &(0x7f0000000200)={0x0, 0x3, 0x18, @string={0x18, 0x3, "91a77001a1a6fa22b66432da2c2ab44f5217a50f5b59"}}}, &(0x7f0000000880)={0x34, &(0x7f0000000480)={0x20, 0x12, 0x21, "f9dfd3ebe1c9fdb649b2bbef76146d146dc059a9802a8ab997d1c1affcb21274c5"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000580)={0x20, 0x0, 0xed, {0xeb, "1d425daf3921b14e890e2ee85cedc409368a1f41e3b229c10553738749c88c0f67a09faa56e79ba2b7b93c1288bc38011e18ad377c389a8ae159be213d1c07fc74e1d6908bc6881d26c5f92c0734daa48d4c76b7fb77a6a3e06e6eba012ce810bad5bedd3b1de6a95add119ee07ea9b15677e6f1e6d011502a392c65aad5e9cbc47763bf136e92e464c1b3b5506794de9e02de04c6ca2096f6d2318aef2287231194044e4b3668298ad72330f9c2c7318966b9472b3fc376db2752121e209b89fbe0569f81bea4dbd2df298d95be005dda4d1fdc384befc67c1465c519d6413ae8584d8280501431e6b659"}}, &(0x7f0000000680)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000840)={0x20, 0x0, 0x1}}) syz_usb_control_io(r0, &(0x7f0000000b80)={0x2c, &(0x7f00000008c0)={0x20, 0x23, 0xf0, {0xf0, 0x0, "039a5f311a6bb64b55fc92edfdf9a129815c27395fbc3af93eedea11041ecd112c291c71a6c7c1090d73ef56df4e5e5da729bb1dbb220f94272a5d954d983450a5765c02a732d2d8f9b04cf55489e0c9f2a7b4aa90e6adef619751c0a4eb5c6b4ffe36388cdf7100db73a8d45c97ca393f161a9d03e28685357a970bb32c74feecb91cd69f668e17969eef0ee7baa42a5371e963f11c3a642a3d70b620ccf1891a76e9ebdb37028b1b5c2e60543d360feaee75f6958345e9a06a28645196223ae287aec8f4e21e9df881edffce8082dddb1b7977ec802c317702a311fef256432294ed27a6d26bd3f0ab937d34ca"}}, &(0x7f00000009c0)={0x0, 0x3, 0xc1, @string={0xc1, 0x3, "842b3dc8ae0b90202f0c0bcdf1b5bc4ea8332addc6b5a795d710cd9fe9fbc1cdbc8c9cf7b02b29e773b6fbafebdc3d4c9e4eccd0a7b998976a3b8ed765e3edd81923b83c87871c101ac3715244df71b3322cdb4051f2d7647e479b22427f8ed349c6b1695cf73b93fe1e158f343d79f07c36a04e4e8f0bee395b47a316a76287f3718efe8aad12efe06ee67823f7605436a4ff57685bc5065d93d05339f719c050b143f3da8d4e9a67b58a9b13980d73164c01d7102207798d9dc927cf9ab8"}}, &(0x7f0000000ac0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000b00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4a, 0x13, 0x0, 0x9e, "7cfd47b7", "550e660b"}}, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfa, 0x80, 0xf2, 0xd, 0x1, 0xfffd, 0x1c}}}, &(0x7f0000001080)={0x84, &(0x7f0000000c80)={0x40, 0xe, 0x2d, "042ae692dfe1c6d649b44ec0daa3fec7854ffdaeaa3788e8e165453c1a6792ca9a78beff88dfbe18eaf20c9788"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0xf1}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000d80)={0x20, 0x0, 0x4, {0xa0, 0x20}}, &(0x7f0000000dc0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000e00)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000e40)={0x40, 0xb, 0x2, "3297"}, &(0x7f0000000e80)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000ec0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000f00)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000f40)={0x40, 0x19, 0x2, "947e"}, &(0x7f0000000f80)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000fc0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001000)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001040)={0x40, 0x21, 0x1, 0x3}}) 36.824273592s ago: executing program 2 (id=2307): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0xfd0, r2, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_IES={0xfb4, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_BEACON_HEAD={0x38a, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @random="2e238eae65ac", {0x6, 0x8}, @value=@ver_80211n={0x0, 0x4, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x6bb98744, @random=0x7bce, 0x20c0, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x8, [{0x2}, {0x18}, {0x6c, 0x1}, {0x36}, {0x5}, {0x2}, {0x30}, {0x1b, 0x1}]}, @void, @void, @val={0x6, 0x2}, @val={0x5, 0x5c, {0x0, 0xeb, 0x0, "7ab2e25716d3bfa9fc8e4ab6793c8c1c8df82eb6d8797a7044be6fba40d28ac147fb628b1f20d5d6f43473bb933070291df2506bc75c61a6c5fd66ce7a103cc4c17852c8f5c8a1b82920c2f28cb2b358457e2163677f92f583"}}, @void, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @void, @void, @void, @val={0x71, 0x7, {0x1, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0xe4, 0x60}}, @void, [{0xdd, 0xe7, "6f81b9e5883d5389427c0017fea9054e998be7dfa365c419b89e7a1673f563cf873bbed5f0a40e9b6aa70aef911a21a2d9e41dce11b6d6f232aee2f16f6b468525755e67aadaccf16fe4f55db7e70769807c8f9fe13b62739ad9c9e6fe599b757404619775df86f30e83044a64d315159c4e4a79d5e3914086e5782fce71e4e516f7b76add0dd817a51c584904da3face8bdab76d130ea9fc632a1e6fdfd91e75e00392191d9c415f0872cf193d3a2a6b122ff71a238e1290e6d0a7de3ff63ce7d010009dbf04aa7c676bdab20504c6b8008a4dd2d4ebdd1c860360d7e932b3e5a0ab4e2837250"}, {0xdd, 0xcc, "f2acccbb4e1f319c6ccdefe142e66b4649957b4aaa2dfc608050453b904c5d568369024f298071920f684b35c19a4a0c494ad54efbb00aacb3b9c46b3720275bafaed5a5ecc23a129e55aabff18afac095ea005d8b5149ed082f02287e65cb505e49730af2bd17187d4d0f9a4e11cd4b6c9287b9648cedc05728c8f29e31c5a814bb2ca9fb545e576d0fafc7c862ecd55b4b50c61b3f9107a47ea5d604f9d02d91cbfcecdace219aa341c04b7ecd7d1644e467f25cc94c0c8301997d205cdf2dfb7e0778af743e74d4f8ca8e"}, {0xdd, 0x6b, "69c4b90d20ccd05d899c79e2e7f650e44e3f943f2afbc5599c22d5e0cf24be6359a62dd43d429cd648640583f34b24a0437073d23f0b7d0750d3559bac9213263ec1a50412396f83981bffc272f7d061c2096b5894f6527ebe428bf3b6ea496f2e893305a8303504bab1f8"}, {0xdd, 0x3a, "9f5475868369e956b189dbd760f9ada3827565e24ed5f7c5eb3cbe418c117650d5b7fd45cd10883f795b38888dca369d6dca370524702e4d613e"}, {0xdd, 0x38, "8b6323918ece636b3b8d08fd17d59ffb8e8c0b57cf40be87b09079838f1d2d5eb4be623309f7c4ec657269f523aed6b5357cc936a7b21f01"}, {0xdd, 0x42, "ff4380014e1b8d3deeb27274fccc6e5bdd46dcac643dfbf1ba35a814fad8a2ee24789f0c49d750817692d0b4288c2236681fa803715d73287c355c7e0e06230f11bc"}]}}, @NL80211_ATTR_BEACON_TAIL={0x15, 0xf, [@random={0x6, 0x4, "ea2b5a81"}, @mesh_id={0x72, 0x6}, @sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_FTM_RESPONDER={0x8c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x7d, 0x2, "a7b9eb92820abe37a39c053d6c3fec6bbb6373537ec81d7b3e5eb0bf2cdaaa845113b13da997df46d6624bff8b8304169428b1bc3dbe5ad24ae155906712ae0a2417f688a98b306e545dbc1c0193c018bab63bdadb89cdc95a83fbc44da0087399afbff44d3a493b4cfd6d9dd71939b9363d12aaca8e6466c5"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @NL80211_ATTR_CSA_C_OFF_PRESP={0x6, 0xbb, [0x100]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x14, 0xba, [0x732d, 0x3, 0x1, 0x0, 0x0, 0x10, 0x1, 0x6]}, @beacon_params=[@NL80211_ATTR_BEACON_TAIL={0x2a, 0xf, [@ibss={0x6, 0x2, 0x4}, @ssid={0x0, 0x6, @default_ap_ssid}, @mic={0x8c, 0x18, {0x4d2, "a948616cf9aa", @long="e0f130ac6052c84b618664e120a00a9d"}}]}, @NL80211_ATTR_BEACON_HEAD={0x4bc, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7f44}, @device_a, @broadcast, @initial, {0x1, 0x40}}, 0x7, @random=0xd4, 0x400, @void, @val={0x1, 0x8, [{0x28233e012126d6c6}, {0x6, 0x1}, {0x2, 0x1}, {0x48, 0x1}, {0x12, 0x1}, {0x9, 0x1}, {0x36}, {0x48, 0x1}]}, @void, @val={0x4, 0x6, {0x1, 0x3, 0x9, 0x7fff}}, @val={0x6, 0x2}, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x8, 0x80, 0x10}}, @val={0x2d, 0x1a, {0x2, 0x1, 0x1, 0x0, {0x3, 0x4, 0x0, 0x182, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x1, 0x1, 0x9}}, @void, @val={0x71, 0x7, {0x0, 0x0, 0x0, 0x1, 0x2, 0x7f, 0x4}}, @val={0x76, 0x6, {0x6, 0x81, 0x39, 0x1}}, [{0xdd, 0xc0, "9962e0f1406a622bbf12d7a7b88260b2c33be2bce264622004f706f8c5550c5d11858d293d0aeade662872174bc1a503addcfdd2f35fd88aab44d9e8a4e91039fd0828d9ab2b9802edfa85ac04c545fb763882019377e5f96c959d0671187f8b955f03a5727a9905f2d64377c6d0d8ddada1ff59af95e77be5b5feb124d1eeb5dd806209c3d0c75c46d524723c0c80b0531e570f06a51f19a85dd587bcf6f8f77ebf98d8f4948a57da52d19c7443dfc219589a9c7f5b72497e94f16dcc22c036"}, {0xdd, 0x9a, "b03fe257ef7aa77640c0721d5ae621e8bbccc756f0054c85e89357249f21dfc299e9384cf81db8afc4a20a2926ee0f8d3b53d6e3a407ebc49091d26ae3a9ade7572857d55967ff1bcc3692a5551b85080fe4c1bfde2c3e283d287592d6076c2882b9a36ec97ab3dfcde6af4eaf0c2c571f2340995addbc6d942a7bc2349607e36331fcf22a97c2051d7c3f78b4e24bac8efd6aaabd6ed94f94b8"}, {0xdd, 0x66, "62f3bd35a486a1337b124741d5249225d2e839c190c55dbd6075f9535f8dbf590835b30aa0d12f7c49a942f039b343c66f61ced184c52b00c93824aedc5cf8eb69fa2ed330b171ad42151e2f11fa520ebfd734a5d4226d27e11bdb8fca87611c5bad5afcd07b"}, {0xdd, 0xb6, "92660fc4538c697b19211f84fd4768cafc1fcfdd45e863d34247fa54e07320ba6409f2c8c908d24e90354be9220fa2148a31a806c61e0e69af62324b53f037f1a0bf9ad6e2d7547fba3a5c6429b677e1ff5ec67acd521df575e5d6ba0d9f916a33e04fb56644aa4d3ecefded91201ddadb77b2bf2f1b0688f1b5bcc4758653384d76d920bbec342957c0ad4b2a57b5d01e80804da25d1117c23cedf95f9669cf4580081719eb829d45af9f9907a6a52b810a0c96e282"}, {0xdd, 0xb4, "1176cb7ba3c4e6d28d441404906c350608a769795cdac02292e6d94aed41cf983a7afd1cc719fa4fe4287322586e24ecfcc14a16abdd43df1b8f489186e76dc27ca61f6d2760fd2492a260a3650ebe5b060992b8f6374a18438ae0b2086ae9de22e5f04b598e3eee6e5bdb5df63b822a514d9f74f91b7d8febc6e9c0c08791e76829df747aeaf4e627a5ebe5893767044be18ebe9c6ecce30d8bbc96198dfa2b6b7a3ebc19311e583f1f399828393fde30b19e10"}, {0xdd, 0xe6, "ef1b74a6d905658a0fd8b83639893ed58aa019bce9560a16162d0992a8198e3efcde07ac8a9f96e211afe9042184beb4ebebb713f3f878961fd121afb83ec2a8f883a97ea9eff3efc6c8684308d020590a4ef1bce5918ed0028035b764d581805467b7c0d6392774196939a35ba3f49cc6400e2651ffcf8d7b2638e5a8da35f24ae49d613384bb62e121a148eb4926ef8a20f1b4dab659cfa6830d6b7c2b87d5f677f22f1ffd6d447165a7dbc1343fe08c097d3e247978cbb8b0a7aa1b4b23c6629d4bb7d4486036b0fe82ff11213b309cbefdc13cce7f5ec68c3d4b4d9b5b05cf76f12c4d01"}, {0xdd, 0x2d, "001c5ce052b70132f2d2df490094a61c4bef778624e32d3d271d6421fcfb7b86d884911131b809e8e2e43eafac"}]}}, @NL80211_ATTR_IE_ASSOC_RESP={0x131, 0x80, [@mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@random="e0daf7c0b978"}}, @tim={0x5, 0x7c, {0x1, 0x35, 0x8, "be13b265846611edee7bf68c2f4e49a8f58948380fc2543d31bec3b5fa6426abfbd1bc0e20d8eb1a8086be44aa3db70dcff62e8873ad0b637e35c6b564fa1174131d478eb183621692ca691f987b12aa7b7253fbb64db621001280bba8ee9174a8f997b7d4377e60b9e01c4f880f41125a623b8cf7c08c3274"}}, @perr={0x84, 0x82, {0x9, 0x8, [{{}, @broadcast, 0xea28, @void, 0x1a}, {{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0x3f}, {{}, @device_a, 0x4, @void, 0x42}, {{0x0, 0x1}, @device_a, 0x3, @value, 0x2d}, {{}, @broadcast, 0xfffffffa, @void, 0x20}, {{0x0, 0x1}, @device_a, 0xd, @value=@device_b, 0x3c}, {{}, @device_a, 0xff, @void, 0xd}, {{0x0, 0x1}, @broadcast, 0x401, @value=@device_b, 0x3e}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x4, 0x3c, 0x76}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1, 0xcb, 0x8}}]}, @NL80211_ATTR_BEACON_HEAD={0x18d, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {}, @broadcast, @device_a, @from_mac=@device_b, {0x0, 0x6}, @value=@ver_80211n={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xbf20, @default, 0x1000, @val={0x0, 0x10, @random="ba33e2d1deef3b3ee1e144a1f3e1c5e8"}, @val={0x1, 0x7, [{0x33}, {0x48}, {}, {0x60, 0x1}, {0x1b, 0x1}, {0xc, 0x1}, {0x30}]}, @void, @void, @void, @val={0x5, 0x9a, {0x3, 0xaf, 0xff, "ca216b026942cc53ee389b7a7827ebd4cccffaf3a162e95ef230950ae3403186704d77d9126459c19397ea752df01b66217f3343eb372b94f9e37264ab7e7527ea250bbd3b050b2c878047d5217ec0116c6a5fb8944a8ea96e9465351294e9b73c383f560332321d96dd8dbd2d57d79467492299e353fe3afa14cbb7ce297da8c55679d886f312185fa55bd4fe1570e76ae855e5cb8481"}}, @void, @val={0x2a, 0x1, {0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x3, 0x28, 0x2}}, @void, @void, @void, @val={0x76, 0x6, {0x2, 0x2, 0x27, 0x6}}, [{0xdd, 0x97, "5051350b81f7d1e6df4756e2b58fe995f36b78cee8ab1d9c4ad37c2ff1be489a3bd4fca67c86e103a56f9aa65baf87cd36654dfda1d44f5ee5c679be367df4aeed6fcd7a51a18f0f5e72280b750bfd620560e36309a2c28d4a5a49184541da4941bdd7307cdaa56df8cae65ca7a8b4fc830e89b0f565726a85dd62740db76e5da0ed5b099354dd6bd27102973d2b5eb4dc1a9013f0a945"}]}}, @NL80211_ATTR_FTM_RESPONDER={0xc, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}, @NL80211_ATTR_BEACON_TAIL={0x169, 0xf, [@fast_bss_trans={0x37, 0x5e, {0x4, 0x1, "c9ce782b4e1700c7e7b2498411537206", "2abb99ed37f05222520aa9c5ee26d3c3b25cc0cd3cc5472bbf7e759c5ba0ca4f", "e858eec459208f8759499e1da3b6fb2857b2c8096b687d377692aeff9dc7515c", [{0x3, 0xa, "286dd4221b529ce0c059"}]}}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @fast_bss_trans={0x37, 0x8c, {0x54, 0x2, "6a006f18bb68d555a439a13d89f35a85", "c28b06e996ba589f45e692fa8527c310fdb0c3036e8c1ef18fa30b5cad7bbb08", "5b315759933b7d7908abdb75d7492ae5371a36e8c5e97408ebbcaa03291c5147", [{0x1, 0x1b, "8266ecd48564dc20e8dbaaa184204773050540e1c5ac512d0566d8"}, {0x2, 0x1b, "a7bad81dc46d1176cf0717f826842913abe33538d8e4e3618e7055"}]}}, @preq={0x82, 0x41, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x1, 0x4, 0x0, @broadcast, 0x5, @value, 0x8, 0xf, 0x3, [{{}, @device_b, 0xf98}, {{0x1}, @broadcast, 0x4}, {{0x1}, @device_a, 0xd}]}}, @erp={0x2a, 0x1, {0x1, 0x0, 0x1}}, @link_id={0x65, 0x12, {@from_mac=@device_b, @broadcast}}, @mesh_config={0x71, 0x7, {0x0, 0x1, 0x1, 0xffffffffffffffff, 0x1, 0xa, 0x49}}]}, @NL80211_ATTR_FTM_RESPONDER={0x118, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x55, 0x3, "58fcb84cd055d2c192974db6ab6d39b94bd8797b360eb0130fd30b1f8d3c1d4cd3087ce4e4d7042b5de7a8048a812bd60ea8036e0f079b464ba7b3a12207c9b769df4e7fa085be796b16c6735316a0a91b"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xb5, 0x3, "50420e01532e2fdf4787ac1d80fc6f1743a0ba7d314a55b0090601f50c6ff160578aaadf8d11bd16f63af3d09f7350fd714ae0606598a934540f9c8d938b5dd0df33c7cf4ea17ccab92c202609dae45ee2ca1b9c26f9836596fd76a897396d9b082c63a600eb4c76a40ec3983226409f4b0235ba837c07533cadc9fd3bbd6024244db6edcab8339c6275f08f016ae8b307c0995e0951642e75a3df8d9b7e45767d6f9be5cc01bc6ca0972b462de372b805"}]}, @NL80211_ATTR_BEACON_TAIL={0x125, 0xf, [@random_vendor={0xdd, 0x66, "1031cba77d0e647f64ccc808b254ba9d191363e15cd1b83fe75264221ded8bb36138fde6dfbc0a6bca415ef5da86242ca9cee33f8fb20a33b7bbbba73e548bce5f0fc1a4d3373be3b5859aedc4563c1e0f00e0173d1694662f4e18bbf129303ec76f741c8482"}, @random={0xb0, 0xb7, "de65009c519a662f818408b1c2d8b66b76829b5d8c439ad1811938712bfee9d20b8a031a238d2c50c54c78f8407c9109946e1accb81fb41568b1d611411f5794641255cc7eaa660c15a6991fbe098090f695d99fffeb8c82fff00359a211878b4179ecfbe05e6ab6c6cf528e78500d430a0ab5c0bf1ebd8aa2d6e176d1ce7608fc3dc7cfbce1ec38ae47e0db8d2dab9fee9476a6d01cbd63aa6c56d68416fcb7470b0199c7fa5475e5bcfe072df28049a50b9d3eb5484b"}]}]]}]}, 0xfd0}}, 0x20000000) 35.914057148s ago: executing program 2 (id=2310): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001600)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4081, 0xff1}, {&(0x7f0000000340)=""/181, 0xb5}], 0x3}, 0x0) 35.836802862s ago: executing program 2 (id=2311): ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000000)={0x1, 0x3, 0x9, 0x7, 0x8, 0x8, 0x6, 0x75, 0x36, 0xd, 0x1a, "dcfb785540aceff4d3b60ba6446a0988d7e47151ff7cfe30912c45fcf04e7b25"}) (async) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000000000)={0x1, 0x3, 0x9, 0x7, 0x8, 0x8, 0x6, 0x75, 0x36, 0xd, 0x1a, "dcfb785540aceff4d3b60ba6446a0988d7e47151ff7cfe30912c45fcf04e7b25"}) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) (async) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="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", 0x0, 0xdb2}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = memfd_secret(0x80000) openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card3/oss_mixer\x00', 0x200, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) (async) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSFF(r5, 0x402c4580, 0x0) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f0000000080)=0xb0000) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x74, 0x0, 0x0, 0x1}, {0x6}]}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) (async) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r6, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r6, 0x7a6, &(0x7f0000000380)={0x100000000000fff, 0x100000000, 0x1000, 0x7fffffff, 0x609b, 0x401}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r4, 0x0) 35.693856862s ago: executing program 2 (id=2313): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r0 = open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000300)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x1}]) mount(&(0x7f0000000300), &(0x7f0000000100)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000010902240001000040000904000000092105000001220500090581"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022220000009623"], 0x0}, 0x0) 33.809265153s ago: executing program 2 (id=2330): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r2, 0xc0285628, &(0x7f0000000040)={0x3, 0x2}) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000100000560a5cf58b9b499d1400018006002b9eed0d00c23900050000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r4, 0x29, 0x1a, 0x0, 0x0) connect$pppoe(r3, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="6ed1aa9df489", 'bond0\x00'}}, 0x1e) r5 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) pwritev(r5, &(0x7f0000000100)=[{&(0x7f00000005c0)="8eadf33d", 0x4}], 0x1, 0x6f3, 0x3) r6 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) write$khugepaged_scan(0xffffffffffffffff, &(0x7f00000003c0), 0x8) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000002c000093000040"]) r10 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002580), 0x2000, 0x0) ioctl$FBIO_WAITFORVSYNC(r10, 0x40044620, 0x0) recvmsg(r3, &(0x7f0000000380)={&(0x7f0000000200)=@generic, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)=""/115, 0x73}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000300)=""/18, 0x12}], 0x3, &(0x7f0000002180)=""/4096, 0x1000}, 0x40000000) ioctl$KVM_CAP_HYPERV_SYNIC2(r9, 0x4068aea3, &(0x7f0000000100)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r6, 0x45809000) ioctl$PPPOEIOCSFWD(r3, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x4, @local, 'bridge_slave_1\x00'}}) r11 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r11, 0x4040ae77, &(0x7f00000001c0)={0x6}) ioctl$LOOP_GET_STATUS64(0xffffffffffffffff, 0x4c05, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mremap(&(0x7f00003c9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00001de000/0x2000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 33.808180436s ago: executing program 4 (id=2331): sysfs$1(0x1, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) sysfs$1(0x1, &(0x7f0000000000)='].)\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100}) pread64(r1, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) openat(r1, &(0x7f00000005c0)='./bus\x00', 0x195500, 0x80) rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./bus\x00') 33.56400217s ago: executing program 4 (id=2332): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x20000}, 0x0) (fail_nth: 3) 33.520048197s ago: executing program 4 (id=2333): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) write(r0, &(0x7f0000000000)="fb196dec69a10b2284f761", 0xb) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000240)="26b2a8dd3bb50b8ceb62f430e5885746b5fd58b5a47a2bf28b373c8660a05cf8181b4b7a61b8ce127e9a2c0e92dea9379d5ca6b58c15037915bb4319621bdbead01cade5fc0535760d2286578af05881b83e2c2007508ed17ff1e44b5f91fd57e1077aaaf77b6741f58c4e426bb9b1ac269ddb81ba7c1d6ee457f1bb8ceb4e8a69db85ebb1df95fec7f3b5bd95dd726c920792e9a54f1641d5578f4347df0d583f76f962383980e8c6a1c123a70212d089e9b35900b052f0ee59eed7cf1e133398f5f5bd78d5c9820ee007f32894a57377a97af57c6d6dd108231b10a94c67f18552a65b870b7a9afcdfb72b57b81b1e424f739df21dfeebfaca906901b2626cfa482aabcc62b510255ee5010b4c1b260471011275c7f242659df63a8de398c2b0dfa67422e519853a439752898451f9f02defd4ae71ecc8aadd28d21a339d35cb425e109a5452d01d1ca2fc9cd2572a1252582d4b179876cc489b1b3fe4767d0356c29e6e0b891991f1dd5acc3c3e35f9d0048ed0e28b9771295729aeb5a1e262ec2fcbb545c3e24799bc424924294928312b42be902842083b4d7383ed289b307b66c8568277b3c17fea747ee49b750d83dd7ea1f18a5eae198451bd2968f823e03a4656cbbb154145465ddc7bcdd0c7b1d07366c0a4090e4023fd98d0f77d3949d7788bf0b31c52c7704bbfd681c4691d16ef610708ad2ae5af88301c5b0451ae9f292f16aa44230e53874a432be156fc74c9690983928aff88c8d817c86913fdc8425cf2cc43297e89321dfbbba3f4f1b8bcb602a17f1f5918c0657a9e0230f2722f2aca5f2f931c8c91dca589c02a711db5b7ca36f3a49282c4ec3b447ddcbb2f94e257a384d8c17980a3962b2c7b5c0b661899fd1451ce783dfb29355650454b65479ef40a319e37e90757ec3e3e08a2bbe0b9bed99d8bb31e5d240ffa66d5162748f30635658f92d864dc6ee1d95d9b6e19e554f6a4a5cb4a067b3c7d7d882ed4f908337febfd5cf00a6fd68e95fe62f5c374399f6d3201d3482a0637ac4d9d8253fbbf6bfdc3feb9db0a3d8a85cb337dc7a1328973e20bb82bcc2ec03a637f4f29e1efcf4fec09568a42ece4ee0508a0da8206989d12e522a65e76c4d64bbaec9f328b927391f2b15c7e8b3f138ef345afcac4d566448f327f84ed41f69b4d40c8309d9d5ed6846f788198e151a48f654d29b659f923858d443e118409541cea176cda5c518a938d10086148efdecda55cd4990922cffc06633c59db0c21d12e4b311e3858e82001c24c2225844019f9d633679ee75a70521da58cb8809c193c0f3389dcf540884ff0b44f224cbe03623ee16ad37e00abd1bdda5972379bfb097aa2ffe5e881ff988644b1364d8117feb6859fa4a942260aa6ac51387bc4c9173b8656813929744af772742e69d78f5b127b3ec8a64a3781a603a56e05eb948a003e54f3095e56899dc6413c4317e12141b3409ee8d33dc77ff33b10c5294c5e6b969848dee370c19e732f3e75a6bf21ad433c99d3978f8a8254fcc589eb067e3663e6179cd7904e080048565f0d8aae47d0dec7830d5eb48cd386ea8ff0cebf7bf86eda674cabd0d06f2068817d1d85f39bff655bda536ca5d9727545b8202a982818c388ab0219021fdf4dcdc5de8731edb03e9170a8867b614e5317f76f44c33563fabb73eb4cf8a766b6299e52d00646262e6e7704748a35322cdd7c52e6bae2654295f7804f68e807d5ce420213a278b751b360bffbc1bb9a027b98e65e9dab8fd143e02c2e6192eb8f411d80aad0fa5ff40ced48d26e076cda037ffed74f19b1a35839239b5d14e57fcba05aad705435f998d5a85c05d944bfc472ecda2974332b9b44c448365682d00e271f0fd2a436057adfb7b8eca4abdb8c1329121d6dae395dd1506a95c0de8191bd69cd1f68ec5af9a88fbb1a37c082b9df5cb390379f2db48c63e9f779b875ef9891a84181900bec4d6f512e4633f6b43b6abcb87e2e72f74d8cb0ea3019860339fdcff45dfe7e0817de819eef61d6e91b05a6b8ce8b0e1416e0210813429ff7a75cbd6e7a8f5c1e41012f8b092c6f0b45896a3de1a278b80104157dec7e210aab22aebb54ec881291fee48bc1c413f6a0704e45c1b00f39d4618147e4e11f429592bc92044a772bb33349d3ee4b6c2c5a5a8fdd5ad65434943c3987be2ab99807e23db8b9ec30a3030be076b7871c1bc7a9d4506f3a1e7b986d2ea1b60f9240db71a360c919dc6dc24f6af5878efd95d83f5a9529266f2fef29af2b60d214b21b6e3b8e5b3555849453f66e3b2fe46c2547690b745cf6b850312d825c73049a9a009d66d0d58801f254e2dc32897d9f3bf6fc3fd9ca6fef5d0f0dc55e85a99d735d1800f418010986d80f04e7f5a37109b73432db749b569966e781e646c0e373c94d7797960e1b73cb6cf58ffed290c567d7b5dc54f7a9c911d19fab72aded28cb7c063c46fd530b6ea9efef61c4da2bd5bad7d317743314ab01046b0f92d9d428a13bf5ff427fe25bdce29637f916b2da55f2f5ff05ea17002bf139a5740b7f2b60d6048844cc3909c76eb9ea0735ebed9c201efb8228245373c97d8c565e1ddb4c4d07c1ee7e3a942eea3cb88b2b263a0e4eef9b5cbc99f0b1fde017d01b15820f55f51d325c77c298b6973ad694b1f3bd5440fe8e8ea72fb10b53bbfb84c7d2b7be416df5cb60ad3607c71b387687752a119afb71cdc53b8a395e0398a5be4ac9a175df444ea715fbb2703911bcc6867a85ae2d76d25af06ed0e3688660dad6d69c1f356d43e655811e4169ff9f3f275a8417c44a9b7f5cc3e6ae05ed6a226da85946e84144191b4018d2a226e957e583fb34af3d4bdfbb59da087565fdd7faca17d652208c129549f16541f8addf7be170c6041459600364f025362ea0726f48cf82521d47eb478c341da8b0ba94e96942787d4046d04e86b3ecdbf4b3579aa8f00ca70e132609df358d9183f6cf6b200dfd16fac3e0bcdb13cc5bfb20bde3cc139967c70fefe3c39f484c442b75a5606a2b4952c799b04957e151d3dd76eeac764170a1929a88a668926fd6c22e9c2327f85fe88d388f4eed175a5c13e82bd6f42a7669341d2f3012c75c9871e419e0f3c7e50e347856415b8584eb2d2a0214d5bb03b10a26505ea9ffc7d5aca844e24af916eebe7513d8dd9145049aa0dd8e2a5a9fc53cef6239f56f2ba429601ead8223b5d89e5326e09f9d7c409a466fe5781435b9c324efc040cface76eb40b2da68b71a8baf2f916303726256c772cf27806d5208724cdf9f4eef7c7f3084a25242479fbe759bde637a7cb96d98510f0a68876d04cb47a3e7614b0b51f8812727b0881da22bf270d4a44206a581e71a7150c4096dc1fbd9e724ac572adfa13d6c2129e51df101bd5fd45bc57c356d67b65f270168bd0601e0241e887becb130fcb72c398c6e50d5123f5e8cef49d7ae92ae8e7de2221677a8aa6a285824ef679c68f87330224ce2c11299878adf4f46ed510fa4286f6110dd9965c189c21e85654d44992593ad75bb264fa4c9c7f600224b8eee14e6bac1aa0f9c9bc8c10caee2826cc6d8a787a9b98f908d062732ac0226268047fb44fd950d8ae380620c1f594a68a0813b492bfa3a8560dc1458ba84ddbf9b58f0f7317589a36c66493d1b1093c50719fe4e7b3a7f9dc61e961b0a36b0d65bd14029ad5b9dacdb4edbf090c2455c6c1af080e5447ec7aad8d1a532a48ce280decb70918738b3dcd49d3ffe16e1a2099f7e083aec3a97866e51d43e2581530e53d269c4ff2a6f576ecadc018f4e233b6e7da57130bdd369bdf5973031b7280d7bfcfc443dfb578de9d60be87e741e3aabedffd7b46e6a1c342661b0a122d579623e6e86e745e6ec3ee53545e9a1f63c1db363f68ee2a693a8f8bcd5f97c575db2ce1e03fee213bbd7a38a288fb83a07b1adeb99932fa55dda4b7e6be199f8f008abaa88c63f59179b47c541d8707709c7cd5f5aa5ed5c4dc63093596b09858952e64133cbe6b7d02b60528d6a263c9b72aa3e751a99e9fd1664121fc0ba9018d61011edd23d29d05c2080e33c721e503113be23973351a68fb5da582205a0e89e69fc84e24f3d4e8629847f9b6ba77e2ffe6ce394f99b1a94576c677e7433aa8bdc4d9779cbb706c6e2f426806d111173ffb0cd4f7be3ccffcfc9e66a16ab2806b6118ce28bc935624f1cbef0c9c4da396e6dc0e87ff20d0fd0e07d49327d8c0c97c7d70c50b584fbe563cde1cb17f36a73ebbe6b331b6321ac5ceba510a35ee913c5542a9d7b12805a29a99d25a5d3bc13a330435d6f0305bf522cc71e261c39d82584440d47fd82b9b31ad4ea0d2922558e6bab6fb6d3f6da9eb2a2e824af6928ee2ce41baee61fd4b5f896bf92bb1cf06c0c5a1b9b81a8216084c8e90451823d6be884a735a2be130304a22d8168c06db9cb6d62ba30079ecc831952f2564b760153311226d2188bc523928aa63223e785e6cf67a01962eed4195d5b06f06f272fe27d38660153c1727cfb438b5d98da5778070791c5ace1fd3ae756c8f261ad9d1c6aec5722a8e0609c3bb672c628879b65fbba3692070781c13bd34a93a5b9fff4f9ac4cd6aa3fdf076eeb4c0cfa14d2a41193e723d6d013995f34c97bd5d438eae8ca9a8a2dfdadec39c84c11cc9e9506020e072908178a6b60c53321c0b857d12b9adb58d90197c090e558d20a29bfd9f2ae297c23f47a544daa537f5780ec75b1824be5c92c20785499143252dd2f6d1f8aaf47deccbabf74ee0d55793b046aee7dc763353249f03cf2f0c60f6dd6ff082a051ffe2c8ef4ae9b1d8a046af67ffab68a4587ccd0a503906cca13aac0b7309d5fed12abd5303d2803f928651b51dd8747db79c56c3e3f89e6799a9dac3a7c57257c6575e133379b6c616dbab839b530e7ede62dc529acf5a6fa061fd1244fbc82d6e883388291ecaf1130151c8da538f8bccb9b871d2ce3417a9212ad94fe94c6e13e06975d8ba285d7e937ac4c6fd89aae06db06940670463d6b86a18856cc978a49f7e407f2e4f042d7ee1b7791cb33697824c68b2535af6c803e7940512da7db39c98ed1030e615569c200bc3ab833156187c25c1f659dcde3434f47a8cce56d821617c58907f80d5628214a0a8aad3fa2087647d52ac1c9692c6b57b85d70cd12875f110e631f3a9e34f21afc401797d9a13753deabb43fef92d691efb19a7120167f838d283fc5f2f1d7b4c2ef736fb1c8a47befcfd320f98461756d6908f00cea4a252733db78b6f67620e1a209e39f788a8360b8f42ccf1776259c6f70ef7ca2b0ee8caf4bf27017730236669eab62ada6db1d381ec2f8c60bebf555425bab9fa4d46823d3b0a1b1f51add64961aa2a073929116f02ea230bfb354019e47800415edeacf72a7daf8930c64adff306aba841fbe75bb18da73441721c86d3a70f9e6025e7fc95516703372fcae04421b08d0edbc5f1b6b6a3c66225011dc19f575111180e8d173922c2e28123347036b3ff2418dd529c49beb2e335801a3a5473c73d71d084c8271c10d86f283a659deaa57fff6673519645e0ee4c915cc3b8c440584fe222b1bc0cc0888142b9753ad409ed41ca16a92a3126ee73f7237523c6c781959fd255c5c0dff4ff324dc3e2246da77281809ead68df57e4ae6c1f8001e6d292e8e42f897b59770ec26b508ac5d57b47ee9696f9d40ceb39f9653a14737ede3f3213147381417d9633d30cc1107dde46e5ead6e4e4dec617202e10b9093e3bb2dfd785dd96a6a64f44bef7465552dc2e391c978c7ac1ce2b8f774d7b3934d15fc6d96eb3de6f0e9402a8538c6081712e5affa5b67b4153217b38f3248b2565c804226f4a31688d5fafacfe2e4fc191791c7164cfa33a474f4a9cd90fb5f37f5268e1801a2a762b00e8b7b2bda1db7a90ccc74ccc0fb015eb49a6ed0236d8b6b0e67bcaeeb750a499cfc3b2dc34e9024ea9bf00e5f0013a15509992979b50617dc14aeb0bac46c6961eca1e96ab2b45d342bc68e88b765a79d73f1eec58167e8ea4752981fd898f1ce528e9ba947723bd4d2ce228b6e5787227697d52f2bd0d4ecbebf5c6164f5819313060579ebb3ddb3c6423adb999975427c2d3da65b3cf52849c75464b46ede138be670742b175474222a47755f8006d4752b6c271643aa622f8439903abe53595792e7856a6e5a5e1b309fa139c2e64e927620c87aec8f36b9509c1d5cdee296bdde21d2cc54e7738070d93552d9ecd799325fe6fae9f3d7046ef1459d401922e3da284b7f6ef67ae196f274f6ce94887bb5ec25c0101618d6118b4cf47e0dfcb8dc89e8f44b47ba19c326db51a75a5b790620a2e460110dbc0f923a7d3825e4ac1d04597c0693fd05d93aabe907b47b1581f915de89c16580ae484f864e583b43ddc0991d716e401f60b6f62ebd52178a9e0adfbecc706dfffe8eee93f67ba2c9da4515bdfffd764741527ec04c3503da653271f2051ddad922ae38cae98c9a2eba5f8470d2551d2224add25a32b9c4d573f69ed15445d2b72ab20d1cd07c2d897dd7c97edab293db9f217a5eee5de9ad08da2f734e617b9f5268a3b91336237f5e9738a65f4adde4279eea09ce40e577b97eb5c67772e4ebee5a33afc7de28c70d97a514cdcd95908d26ad62800900a7cb9dcb88955b5401ccd4d965d00ebf0da48bf43cd2f5b61331894f523685b17beb253c3f50db89e11e664d6427a2551b5bfb2cbbfbf1e8240909d5eef23ccfa23d185391713d1205078be21e99063ff6316c06cd77969dda4d7f3350d4f2f29a23f12e14788fd60cbe4c3c00685a5e42b861597fd3b70c5e0e4d9f02355b754bf353fa2bd5dc0225080c26eb39be11a5b3cfe5264f39399167ab55ae7286f09c1d7fd0fc69bc9c7fca34867b5bf11c43612d3e010d2918a0d9b620549402f2c56e9cf3aa53b7614337f0867fe08170ffb272c5d340f237cdca3e023d2e65b250acf4f265ab8794a5388c5358d7e1cccbf82d99dd1aeba50f3363b9c3b6ac43542334bde8cf2ffd29da1d516bb5d950938f410829e2e37684916e1eac5c2ea1352e7cf6d0bc19bf16bf4ee61e44cd339fadcdf18126c46c0aba43c927510f3b876b32f606bfd2f657254e9715f8151099da8897c287ec1eb9077c72a0a31171f5e2672c16d3907caf659a73a15ec1bbdf240cf5796c22a99933999dd36ab3c354736b45b990e1631be048cad72829f782504ccff0cfc2e1eb5fb3e52e9fa4c3a39ec9ae7ef7b4b9e7e9a721a3f6addace5ca68d525ab9dc0d26b05333dd638bba4e40ec0a716b29172fc84a26c046dcdd0a744af3a7da0eb295a6b0d2a4e45bd6222464cae11bdb5a6c02f8ebb9c8846ca03175d4cab8b9c9531ae686029cc740c296feee12fda2cfb130808a3fd435c13bfca388ab530b8c4b546c4fc9af86596daec4569b5e82c8fd452731e27f9dffdc5713562b99fde6b59948a46f2a44ed0e539469040bb04a54fdf390f589c6491f1057b3d44573838dd2a1271ef8ccec3796012d2debeddb9dd0e252bf622f2671d6940f1c89b3ae38b4fcaa37103d96f4504c5654e603b80f710dc575bfdf2f4fa01741ab79057c15b627cd03e7dc24aab3ee312dd1d7e96731c28e24df9b051fa5972615858f07572d07f6a6f947fecf8acb05d220b68a4962b0bb9e2bb6341b97b0bfb18dc92764ceca8f723592c02104a020dfb9ff06bebc81ea80c68a1fa6175ab4042abd3305c1a17b72ba5491dc812def91672873fdd98632871ed0387e00a80c173b9e8c75e185149d32a9945e2f9707301c96337cd1c44cc13a9f38dc23720558c31c4cf6ff72559794c04af4deccbeddb04f267308e220963bf64d0aa830af54a91ae3ae0eb1aa3d48dde97ddd0916e3c16f4d90ef3e66f06f8c4c3d4fcfe41094708f49ac8d4e7150a74d9378a75018dba062fd1ec331776aafdb64e5e1732ab0f0ce0bd8985ec4b1374a6245b6d714a1c02ababcdc1fe22481a6ad3276662d4c9adf65e9d275afa6d57d6c3bcc6ab68234f4a1dade56c852c86c0bb4f427387bc9ea23e7361b7f518039af614141a12499b9602f95e2a969c7f31cf1056fe3b1954ecaa3db219f546a28e954964268be0296ea2765a8194d88b14869d388996d645f34511d63a602d92e795a0b29773052ce44b008556b6a0fb418a9233ed13edf3bda3db479211d00c16d40ee6321241d884fffeb3c1e2c01707c7aa387778779a241699ef4bd5d7cb8e40986539d0778cc242e98f17e630a09d62155b469ef5dba920d2ef80686c8f9eaf1965b42935d6dc470de7fbe0f5083a4b6ced2fa06b255fc35c3325bcc57ae3ef95ef58edb0b45bbff699de88afa565ab9f98b1c98255dfd6bd3eb18af00b94cbe5f94421b2828b0583c91e7cecd4754003ad8f46a206da99e75056705f9cccc481b591d4c33d96b21acbbdb4e70dfd9b6a2fccaa6a0af7f97fca9da759e62a6fb222341cbab0c808d320ff13a5989ce707aabd7f7c569b3e22e0c91613c483c136fb5b94ff7bdc1f51cbb9f5c46e4b62a19cca73057b78d1f3f8a9b0e2a20b8b8d9f2e8d0459df86c18353fbb3cb6e8b804e28dee571349e16b5df662cdedf1aa5a44eea00b778bc79c16138d85fab98c15ad9f2b83eebdb9432634280768397d2895c10012da8c6659e02295cfa52d6d06ef1e6ed0546d46c676048e5a455261659c83492d355eee56596e520962467fa8b3ae99cea9547d99a6d6b674682363c0dd5c8bd5c63d3bc2d45a94fb4e090ca27028b29a61c53d96ade29f1c60cffb5053b494dd2d7c7ccffc7006e16eb2bdcb360a1e0a3fa1f380616d0298e315808db7ae9ad16b6c4bb7dece5c2c4ba52d514f7fdc9b00e66302d1b6c6a7b5b58adb313e0cec67448238f66f69dd480d304a9831833a1b94f8109c0d2f85e646077bbaf140f9c7e72301d8e452f13711be18bdb48e2f0031c38da789a9e4161b7f0a6da09075414aaf9984ab7f141647c532e3b2530f3fd8a93b4218ecbbff44c4a58cdde1f9d89eb60ebe8033dc10116cbc09d4903bfd0830ef8b0d33572ce61bc028133be720544872e4a205fed6b005e8ed240ceb6e9efdd313b6eb0aed6bdcd335cb1765f2d7ed7f1819e0c04a8989183abcaa3677c35c33d95b139ed63f9f67e51386206ee2a3ad54bd4312b1178ece5a5a76eac9534faf2bb8c7b5105811a34a110553c63f1b9168ec5758e39d1f1baa4fd3e8dec73026c08ddf1568fa04b1a36a98055b6912f4faa0741e0bb5f063dfab6e6a8605b997affc69369980188967e4655c954d31b3ebea8dff5face904366191f0695fd3ccdc5e82c5982243e16a895f8aaf9d63d37ee1d323b296862ad265760a392378bc2ae5d7b75039b77aec33aa00c134f554ca9e5fd162296e915ccd359976e7ce4099bcaa5494c8eb6fa4da2a2e245920762f3639fa4fd4eb0e5e167a5f2111bfa669576ff3e0711a4ad78d2f8477363b03e6a13cd5b479817a62614ef613ac2b03a340114909c7b21ee93adf74c2ee2d4c666f1ab8bc43368e7643f3ea8da5a919b1e3078875228d2b519387ac49b7b9990d7dc229fb9ff0d551d3dfbeb843c8b2782f50cf8c575dec6836259a160a9a047165791d1e759c74ea65f4f9da990fc0e789bcd4ddf716442864788be6f2c5b607b6ddc7f9575b4e8375eea50e98cd9320fe736114e03aa0a2c1430d5cb507b29b388ace6ab58393513724607102a0458a458998e94d71b758df51ed4ecb6c6f2b94c31fb480745fbc6f6dc595c9558161fa14462779952982adb70d70a9f9a734fcbde17652e1a91422f93a6ff7d6c80fc92a5005bedf58aefe9bbba9d0ab3441e86b863bb5a3fdfd2a9c6f6d10717d2cd35d3c2a892f0e58545b1794d9aae993d72c215a6673bbe38976cc7d03cda84999c637aec8036ea1a23b143ed6288dcbc7d1ee487b1b6a4f6e8ef63b378acd4ff888bf95d86336907939c29695b2e0cc58efab49056f88a9027cad6d724e635f94f45f4cbddd8188608663ec7e46547e2aac7dec6cc5609e9f5f41ef26a1f16ecf6bfe200b0a955f98d9a4d41a2a268f8857670e33fbd4f076aa11c49cebd8306a4de3c86f7726fde93c7fc984079ae60e63854ee9a14162c749d7e308530c6b84cb5cafdd09ec3411cc0302c77d316beff973e3108ddb9b249e206d5476d605b7b24603ca344c2263bda8d7d3db55b9e2fcdce69be9b1ce24f8c4df129cd62a299fcbbff3309031973b5da452654c0b8ca4cf65891a8bdb8dedd20f631a34964e3bb0fa45c618861da79b259d79ecde8394061c99c661851c016c35ee8c91d52bbbc25f52b5e2f77ef2f63c764b717e8cce4d291742d5a7ef7f5d7ec1a96620eda1f962fb2448c388873f8b8abea4d27a5da092833c43c57c4b14099597f83785a31190798826f4264ba8f998cfbf7f20f9678e10e05c793f5781f8accca245d047d3be6c10541b2610c02c6e916d3db9776c6964e4519cf2e30708c954ef2492d3418c552dd9b5db4320dab8be6ac3394cb4b3fb1b9d5222c6ca9bd06aae2fef510e541db1209cde21fae56507020e80862d0b875d958346c42ebb781955ab337be61a68534281100247904b81b86aed49544c2452ecffaf6cc116f9d3c7362fc2cc390ab2ad29928b6e8bf90a4f21442fb213dbeeea4b8f481792fc6579b608e3a9c4fbe2755010d7ab3cd122de7a40a1f7780350a31d83ee5006ade36854cbc8e8c648259b29f2f7042719ab4d4d4d1f0c5fe6b717d23a5504335922f84ea8b20c78a5f1ddf6009089ea221353c01963fb8cabd3d795831c86d084660fa7f7d08f3ff15780c5b301ee27ab8d98fb358b90e92de4c96687c37e327ac1f0f23208c41a36e67cc22356df854f2dc309c110cfae51c5cc69051d22477caa1d2a2f276ccfbe907b263bd79ad4c5f6ea2687466f325ff2b1a736fff687c14d477c4c744e9c82be5b8ebfb69db2b312ff540ec8cadfcba9b609cae7e54ff347ed3d2649f9214600870ecba27f98943b4fb72f93b5ecb6d64dc1c7b2e8c2f2cf1006e39a237c5818014df9281feb6e522f6cb2d5ca35aeada09a58d5a6bdc9a75cf81a1c51faa8a3824a58d192a27be9fee5098b2e71d0d3f12917d50667415e418b790e0942260f4d2589c57aa1bd36017bd2bece963f0776f9f76cc66876c3f88f8bdbc35e329ecb56887948fd2c05d49c664509a682c6ff60350070bfd111be86ad2eee8c0d76b851fdb75f08e11fa47b5fd29b57568abbf91d3760652d475558bce2a1393688c9e2b4ae06cb072c294e1396b58db00b09ba8dbdc047a1684cca6e5b04cb52a40dd7b7f72c55292e7af0f3b8dda380d45b4e71c6cf57179247923750551ffd955f815cfbc29dfe5e0b2689eafdf44ce362b9c5864e4003326b2f183df7d39de7632bf3b2a85dca04cda08d10a5bad9ed9b481227e39804c3fd52d8a8f03288e13eb09c9075e23f82123a416e58864d95a321a719f88c8633201eb7d5c429348dfd83b476510f71808f95ab3b11d521004acc6d9168771736ec0a5f7c73ca78a46787c19299a79b453e49317353d6bee5b", 0x2000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00'], 0x20}], 0x1}, 0x40) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FBIOGETCMAP(r3, 0x4604, 0xffffffffffffffff) syz_usb_connect(0x3, 0x3d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002a91d21402577a8b046070102030109022b00010400000009045f00020103df000905050008000200e509050102"], 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000040)={0x6, "506780196937dc60f5b7221e2f7d10795d734c1f5563d084ba25cd6d9883a5d514a2ca41b9050d59452fa5943689b331142a939590652bfc19ad56a96731a4d0", {0x9}}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000003b40)=0x2, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x10b902, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0x12) sendmsg(r6, &(0x7f0000003b00)={&(0x7f0000002240)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x8001}, 0x80, &(0x7f0000000200)=[{&(0x7f0000002500)="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", 0x14f}, {&(0x7f00000022c0)="bfc53eeb05296b4fcca7c0a81e92dd46f77d88ab33c20fbce6bcffc15dfb94bf2a5b023733bbdf8ac2d79346c2bd86d53d62f3ce6c8b7484bf41723c4dd63dd4ec1541ad673b006b4dcec4f232a68d85ea8169305ed9f52a1f863f3a6670577c0a56c12fa63160e859256b30f56a1736c5977d72c761faeb490fdf75de766e638587c54297262e64c43b010034948aa6f15b031c33ee5c8403ee739be993cbc7c813aefec94e0ca031f661dd739560fceb58e1699b12e4c0c80b382ce0f33b8e564d53b344d179e08ca1", 0xca}, {&(0x7f00000023c0)="375e1ee92fbaf98c21c4c79a47ae33825cfd56645365fa98496f7b5995d266f485307c245a678dab60695da6ca81e76800224ee10c0898f2277ca6ccb383f65321050e9e8c9094d013894cc6953f206d0d63b1fee33794e6daf2e65bc43df391ed3bb227c21dfa6c098987c9a4d51f8ef40adbcc320449512cea439dd825f9faec961b64eed6198d50712c7b5c8c28630cacf4cff7c1a4109ddd75d3d52f79be3f798e7138076e0e7d043a6676d6b747ab", 0xb1}], 0x3, &(0x7f0000003e00)=ANY=[@ANYBLOB="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"], 0x1740}, 0x44) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026f80700000000000000010015857a70827506f73c715c1df9830a8a04a8c795281eddf06c8bf6bbc9e475001219ab9f6267cc867532de8fa5d0834ac2101a62fa7604617515b87fcb2850cd086285790f978ac383ebdc28d9128d78c1f8932f453f05333972ece22ff355", @ANYRES32=r10, @ANYBLOB], 0x1c}}, 0x0) write$nci(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="61030602050102012401"], 0xa) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r11 = accept(r5, 0x0, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r12, 0x891b, &(0x7f0000003dc0)={'batadv0\x00', {0x2, 0x0, @multicast2}}) sendmmsg$alg(r11, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0x18}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18, 0x4080}], 0x1, 0x8000000) recvmsg(r11, &(0x7f000000b680)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendfile(r0, r11, &(0x7f0000000080)=0x401, 0xc99) 32.517854409s ago: executing program 2 (id=2338): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000d00)={0x0, 0x9}, 0x8) r4 = dup(r2) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000080)=""/55, 0x0, 0xeeee8000}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001900)) r7 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x0, r7}) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) add_key(&(0x7f0000000240)='.request_key_auth\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) close(r1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 20.335223297s ago: executing program 3 (id=2390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x2800, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 20.169688691s ago: executing program 3 (id=2393): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000200)={0x60, 0x0, &(0x7f00002d4000/0x1000)=nil, &(0x7f00004c7000/0x1000)=nil, 0x0, 0x0, 0x0, 0x1bb, 0x0, 0x0, 0x0, 0x72}) (fail_nth: 4) 20.103945475s ago: executing program 5 (id=2394): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000080)='./file0/../file0\x00', 0x100, 0x18) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0xf5}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @local}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) creat(&(0x7f0000001380)='./file0\x00', 0x4) mount(&(0x7f0000001400)=@rnullb, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)='jfs\x00', 0x0, 0x0) 20.065997249s ago: executing program 5 (id=2395): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x3, 0x1, 0xeeee0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0xfffffff9, @empty, 0x40}}, 0x9, 0x4000}, 0x90) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000001c0)={[0x5, 0x6, 0x0, 0x0, 0x10003, 0x0, 0x400200cc4, 0xffe, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) close(0x3) 19.489386425s ago: executing program 3 (id=2396): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000400)={0x14, &(0x7f0000000280)={0x20, 0xc, 0xff, {0xff, 0x5, "d71688c0a7392fa94fb846e21c007a8c3048be7ef2411f7172ac1a4678687c09b3b216f3ade9d64c4b67ae36326e746fe05e1d0a8907ee5a421f6316c3d2c6cffcfc7d060898b2488705c1d1ab337eb163d5a0fef7336c63d53d58123926113846ef8eb9c5dfa7c293e269ce76c1f521259aac61c84e84fbc1e375c7b8e914dded38580d9cba7103334ba0bee11a88f868214efffa38f89b110920ef83935c9eb8d802f9b34118a96c68d496895f8f9ec6bbe2743b5992f5751828fe72990ec622e47663a960a489d2c5cfd87e5e10a7853b5e231e401e33cd22963593175f0714b1d2a9ebf78faa568f7ea241113cdd93c6c9b7775723027c374381df"}}, &(0x7f0000000200)={0x0, 0x3, 0x18, @string={0x18, 0x3, "91a77001a1a6fa22b66432da2c2ab44f5217a50f5b59"}}}, &(0x7f0000000880)={0x34, &(0x7f0000000480)={0x20, 0x12, 0x21, "f9dfd3ebe1c9fdb649b2bbef76146d146dc059a9802a8ab997d1c1affcb21274c5"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000580)={0x20, 0x0, 0xed, {0xeb, "1d425daf3921b14e890e2ee85cedc409368a1f41e3b229c10553738749c88c0f67a09faa56e79ba2b7b93c1288bc38011e18ad377c389a8ae159be213d1c07fc74e1d6908bc6881d26c5f92c0734daa48d4c76b7fb77a6a3e06e6eba012ce810bad5bedd3b1de6a95add119ee07ea9b15677e6f1e6d011502a392c65aad5e9cbc47763bf136e92e464c1b3b5506794de9e02de04c6ca2096f6d2318aef2287231194044e4b3668298ad72330f9c2c7318966b9472b3fc376db2752121e209b89fbe0569f81bea4dbd2df298d95be005dda4d1fdc384befc67c1465c519d6413ae8584d8280501431e6b659"}}, &(0x7f0000000680)={0x20, 0x1, 0x1, 0x1}, &(0x7f0000000840)={0x20, 0x0, 0x1}}) syz_usb_control_io(r0, &(0x7f0000000b80)={0x2c, &(0x7f00000008c0)={0x20, 0x23, 0xf0, {0xf0, 0x0, "039a5f311a6bb64b55fc92edfdf9a129815c27395fbc3af93eedea11041ecd112c291c71a6c7c1090d73ef56df4e5e5da729bb1dbb220f94272a5d954d983450a5765c02a732d2d8f9b04cf55489e0c9f2a7b4aa90e6adef619751c0a4eb5c6b4ffe36388cdf7100db73a8d45c97ca393f161a9d03e28685357a970bb32c74feecb91cd69f668e17969eef0ee7baa42a5371e963f11c3a642a3d70b620ccf1891a76e9ebdb37028b1b5c2e60543d360feaee75f6958345e9a06a28645196223ae287aec8f4e21e9df881edffce8082dddb1b7977ec802c317702a311fef256432294ed27a6d26bd3f0ab937d34ca"}}, &(0x7f00000009c0)={0x0, 0x3, 0xc1, @string={0xc1, 0x3, "842b3dc8ae0b90202f0c0bcdf1b5bc4ea8332addc6b5a795d710cd9fe9fbc1cdbc8c9cf7b02b29e773b6fbafebdc3d4c9e4eccd0a7b998976a3b8ed765e3edd81923b83c87871c101ac3715244df71b3322cdb4051f2d7647e479b22427f8ed349c6b1695cf73b93fe1e158f343d79f07c36a04e4e8f0bee395b47a316a76287f3718efe8aad12efe06ee67823f7605436a4ff57685bc5065d93d05339f719c050b143f3da8d4e9a67b58a9b13980d73164c01d7102207798d9dc927cf9ab8"}}, &(0x7f0000000ac0)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000000b00)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4a, 0x13, 0x0, 0x9e, "7cfd47b7", "550e660b"}}, &(0x7f0000000b40)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfa, 0x80, 0xf2, 0xd, 0x1, 0xfffd, 0x1c}}}, &(0x7f0000001080)={0x84, &(0x7f0000000c80)={0x40, 0xe, 0x2d, "042ae692dfe1c6d649b44ec0daa3fec7854ffdaeaa3788e8e165453c1a6792ca9a78beff88dfbe18eaf20c9788"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0xf1}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000d80)={0x20, 0x0, 0x4, {0xa0, 0x20}}, &(0x7f0000000dc0)={0x40, 0x7, 0x2, 0x9}, &(0x7f0000000e00)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000e40)={0x40, 0xb, 0x2, "3297"}, &(0x7f0000000e80)={0x40, 0xf, 0x2, 0x1}, &(0x7f0000000ec0)={0x40, 0x13, 0x6, @broadcast}, &(0x7f0000000f00)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000f40)={0x40, 0x19, 0x2, "947e"}, &(0x7f0000000f80)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000fc0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000001000)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000001040)={0x40, 0x21, 0x1, 0x3}}) 18.445252987s ago: executing program 5 (id=2397): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x16d102, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vfat\x00', 0x200000, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0xfffffff7) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000080)={r6, 0x0, 0x4, 0x0, 0x0, [], [0xfffffffe, 0x0, 0x1000000, 0x5], [0x0, 0x0, 0xfffffffd], [0x0, 0x4, 0x0, 0x401]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8"]) r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000001c0)={[0x1, 0x6, 0x0, 0x4, 0x10003, 0x0, 0x400200cc4, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x2, 0x1, 0x6a, 0x8d], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007bd, &(0x7f0000e68000)={0x2, 0x4e27, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31", 0x25}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42", 0xe4}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000640)="acc870bde54caaeacb0000108cef4fa7bf44702b284b2e80cb32d33a86853c8c28797cd14c72c87f849f6ccbf3198d11a0b1ef000000000200000088e0e022b04dbd50", 0x43}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401", 0x20}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 18.406790154s ago: executing program 34 (id=2333): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x29202, 0x0) write(r0, &(0x7f0000000000)="fb196dec69a10b2284f761", 0xb) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000240)="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", 0x2000, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00'], 0x20}], 0x1}, 0x40) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FBIOGETCMAP(r3, 0x4604, 0xffffffffffffffff) syz_usb_connect(0x3, 0x3d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010002a91d21402577a8b046070102030109022b00010400000009045f00020103df000905050008000200e509050102"], 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r1, 0xc0884123, &(0x7f0000000040)={0x6, "506780196937dc60f5b7221e2f7d10795d734c1f5563d084ba25cd6d9883a5d514a2ca41b9050d59452fa5943689b331142a939590652bfc19ad56a96731a4d0", {0x9}}) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) setsockopt$sock_int(r4, 0x1, 0x28, &(0x7f0000003b40)=0x2, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x10b902, 0x0) write$cgroup_int(r6, &(0x7f0000000000), 0x12) sendmsg(r6, &(0x7f0000003b00)={&(0x7f0000002240)=@l2tp6={0xa, 0x0, 0x0, @loopback, 0x8001}, 0x80, &(0x7f0000000200)=[{&(0x7f0000002500)="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", 0x14f}, {&(0x7f00000022c0)="bfc53eeb05296b4fcca7c0a81e92dd46f77d88ab33c20fbce6bcffc15dfb94bf2a5b023733bbdf8ac2d79346c2bd86d53d62f3ce6c8b7484bf41723c4dd63dd4ec1541ad673b006b4dcec4f232a68d85ea8169305ed9f52a1f863f3a6670577c0a56c12fa63160e859256b30f56a1736c5977d72c761faeb490fdf75de766e638587c54297262e64c43b010034948aa6f15b031c33ee5c8403ee739be993cbc7c813aefec94e0ca031f661dd739560fceb58e1699b12e4c0c80b382ce0f33b8e564d53b344d179e08ca1", 0xca}, {&(0x7f00000023c0)="375e1ee92fbaf98c21c4c79a47ae33825cfd56645365fa98496f7b5995d266f485307c245a678dab60695da6ca81e76800224ee10c0898f2277ca6ccb383f65321050e9e8c9094d013894cc6953f206d0d63b1fee33794e6daf2e65bc43df391ed3bb227c21dfa6c098987c9a4d51f8ef40adbcc320449512cea439dd825f9faec961b64eed6198d50712c7b5c8c28630cacf4cff7c1a4109ddd75d3d52f79be3f798e7138076e0e7d043a6676d6b747ab", 0xb1}], 0x3, &(0x7f0000003e00)=ANY=[@ANYBLOB="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"], 0x1740}, 0x44) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010026f80700000000000000010015857a70827506f73c715c1df9830a8a04a8c795281eddf06c8bf6bbc9e475001219ab9f6267cc867532de8fa5d0834ac2101a62fa7604617515b87fcb2850cd086285790f978ac383ebdc28d9128d78c1f8932f453f05333972ece22ff355", @ANYRES32=r10, @ANYBLOB], 0x1c}}, 0x0) write$nci(r7, &(0x7f0000000240)=ANY=[@ANYBLOB="61030602050102012401"], 0xa) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r11 = accept(r5, 0x0, 0x0) r12 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r12, 0x891b, &(0x7f0000003dc0)={'batadv0\x00', {0x2, 0x0, @multicast2}}) sendmmsg$alg(r11, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0x18}], 0x1, &(0x7f0000000480)=[@op={0x18}], 0x18, 0x4080}], 0x1, 0x8000000) recvmsg(r11, &(0x7f000000b680)={0x0, 0x0, &(0x7f0000000100)}, 0x0) sendfile(r0, r11, &(0x7f0000000080)=0x401, 0xc99) 17.786822485s ago: executing program 5 (id=2399): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x54}, 0x1, 0x0, 0x0, 0x840}, 0x0) (fail_nth: 8) 17.370673032s ago: executing program 5 (id=2400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x84}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_USERDATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 17.269815636s ago: executing program 35 (id=2338): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000d00)={0x0, 0x9}, 0x8) r4 = dup(r2) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r5, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000200)={0x0, 0x1, 0x0, &(0x7f0000000080)=""/55, 0x0, 0xeeee8000}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000001900)) r7 = dup(r6) ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000000)={0x0, r7}) ioctl$VHOST_RESET_OWNER(r5, 0xaf02, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) add_key(&(0x7f0000000240)='.request_key_auth\x00', 0x0, 0x0, 0x0, 0xfffffffffffffff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r4, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) close(r1) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) chdir(&(0x7f0000000540)='./cgroup\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 17.261618446s ago: executing program 5 (id=2402): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 16.389560863s ago: executing program 3 (id=2403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x5c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "793bb0bb537be833"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="a999dbb3c95adb3923e14d9897b207dfbd955dea847a0871"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="cb2717dff7f4f0d5fc4fa090f474a3b7"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4020}, 0x4000080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x108}}, 0x0) 16.215911321s ago: executing program 3 (id=2404): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x44890}, 0x0) sendmmsg(r0, &(0x7f0000005ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)='7', 0x1}], 0x1}}], 0x1, 0x1) (fail_nth: 7) 15.733835534s ago: executing program 3 (id=2405): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000200)={0x4, 0x0, [{0x0, 0x0, 0x0, 0x6}, {0x0, 0x6}, {0x1, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x80000000, 0x1, 0x0, 0x8, 0x7ff, 0x9, 0x5}]}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0800002a9000071900be008300"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e4, &(0x7f00000003c0)="7c24746240969fa887e55bd7c8782c9db422518a4c7d8c") syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)='\x00', 0x1, 0x46090, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) writev(r5, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x5f, "1451aa4fb773719f10ad673a55361599b675e61e8082eb3e51887c40162467c520ac8d60c6e74d1772f1ad123361a401fdb2fe9c33c0da61d4598058c805c9ff4a1fe78b8ed86d83987343f4bcb0f81e6bda9603807899f9d34bb31abeacff"}, &(0x7f0000000340)=0x67) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000380)={r6, 0x4, 0x20}, 0xc) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8982, &(0x7f0000000000)={0x7, 'vlan0\x00', {0x8}, 0x6}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "0500"}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) 2.058009116s ago: executing program 36 (id=2402): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) ioctl$BLKOPENZONE(r0, 0x40101286, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80082) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000300)={0xa0, 0xfffffffffffffffe, 0x0, {{0x2, 0x2, 0x2, 0x6bf, 0x8, 0x1, {0x6, 0x2, 0x100000001, 0x0, 0x6, 0x1, 0x101, 0x7, 0xe, 0xb000, 0x7, 0x0, 0x0, 0x1, 0x3}}, {0x0, 0x1c}}}, 0xa0) read$FUSE(r1, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0) r3 = dup(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r3, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x801, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f00000000c0)={0x6000, 0x80600}) 0s ago: executing program 37 (id=2405): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000200)={0x4, 0x0, [{0x0, 0x0, 0x0, 0x6}, {0x0, 0x6}, {0x1, 0xffffffff, 0x0, 0x9, 0x1, 0x80000001, 0x8}, {0x80000000, 0x1, 0x0, 0x8, 0x7ff, 0x9, 0x5}]}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0800002a9000071900be008300"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_proto_private(0xffffffffffffffff, 0x89e4, &(0x7f00000003c0)="7c24746240969fa887e55bd7c8782c9db422518a4c7d8c") syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c) sendto$inet6(r5, &(0x7f0000000180)='\x00', 0x1, 0x46090, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000c80)='|', 0x1, 0xbcff, 0x0, 0x0) writev(r5, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x5f, "1451aa4fb773719f10ad673a55361599b675e61e8082eb3e51887c40162467c520ac8d60c6e74d1772f1ad123361a401fdb2fe9c33c0da61d4598058c805c9ff4a1fe78b8ed86d83987343f4bcb0f81e6bda9603807899f9d34bb31abeacff"}, &(0x7f0000000340)=0x67) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000380)={r6, 0x4, 0x20}, 0xc) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r7, 0x8982, &(0x7f0000000000)={0x7, 'vlan0\x00', {0x8}, 0x6}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", "0500"}, 0x28) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read(r0, &(0x7f0000000100)=""/159, 0xfffffe5a) kernel console output (not intermixed with test programs): 50535][T12248] ? __fget_files+0x3a0/0x420 [ 416.050565][T12248] ? __fget_files+0x2a/0x420 [ 416.050606][T12248] ksys_read+0x145/0x250 [ 416.050636][T12248] ? __pfx_ksys_read+0x10/0x10 [ 416.050660][T12248] ? rcu_is_watching+0x15/0xb0 [ 416.050691][T12248] ? do_syscall_64+0xbe/0x3b0 [ 416.050717][T12248] do_syscall_64+0xfa/0x3b0 [ 416.050736][T12248] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.050768][T12248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.050788][T12248] ? clear_bhb_loop+0x60/0xb0 [ 416.050814][T12248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.050835][T12248] RIP: 0033:0x7f4041b8d33c [ 416.050854][T12248] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 416.050872][T12248] RSP: 002b:00007f403f9f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 416.050895][T12248] RAX: ffffffffffffffda RBX: 00007f4041db6080 RCX: 00007f4041b8d33c [ 416.050910][T12248] RDX: 000000000000000f RSI: 00007f403f9f60a0 RDI: 0000000000000004 [ 416.050923][T12248] RBP: 00007f403f9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 416.050936][T12248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.050948][T12248] R13: 0000000000000000 R14: 00007f4041db6080 R15: 00007ffccbb4dfd8 [ 416.050980][T12248] [ 416.311294][ T43] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 416.470429][ T43] usb 4-1: device descriptor read/64, error -71 [ 416.488135][T12252] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2103'. [ 416.497767][T12253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2103'. [ 416.510293][T12258] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2103'. [ 416.540760][T12253] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2103'. [ 416.600683][T12252] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2103'. [ 416.728515][ T43] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 416.880118][ T43] usb 4-1: device descriptor read/64, error -71 [ 416.994575][ T43] usb usb4-port1: attempt power cycle [ 417.307041][T12283] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2107'. [ 417.318988][T12283] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.2107' resets device [ 417.351415][ T43] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 417.394600][ T43] usb 4-1: device descriptor read/8, error -71 [ 417.640068][ T43] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 417.670664][ T43] usb 4-1: device descriptor read/8, error -71 [ 417.783446][ T43] usb usb4-port1: unable to enumerate USB device [ 417.924694][ T9] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 418.080881][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 418.096185][ T9] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 418.102214][T12318] binder: 12317:12318 ioctl c0306201 2000000003c0 returned -14 [ 418.110098][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 418.114026][T12318] FAULT_INJECTION: forcing a failure. [ 418.114026][T12318] name failslab, interval 1, probability 0, space 0, times 0 [ 418.138565][T12318] CPU: 1 UID: 0 PID: 12318 Comm: syz.4.2113 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 418.138594][T12318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 418.138609][T12318] Call Trace: [ 418.138626][T12318] [ 418.138635][T12318] dump_stack_lvl+0x189/0x250 [ 418.138666][T12318] ? __pfx____ratelimit+0x10/0x10 [ 418.138700][T12318] ? __pfx_dump_stack_lvl+0x10/0x10 [ 418.138725][T12318] ? __pfx__printk+0x10/0x10 [ 418.138755][T12318] ? __pfx___might_resched+0x10/0x10 [ 418.138779][T12318] ? fs_reclaim_acquire+0x7d/0x100 [ 418.138814][T12318] should_fail_ex+0x414/0x560 [ 418.138847][T12318] should_failslab+0xa8/0x100 [ 418.138876][T12318] __kmalloc_cache_noprof+0x70/0x3d0 [ 418.138902][T12318] ? binder_alloc_new_buf+0x1d8e/0x2ef0 [ 418.138932][T12318] binder_alloc_new_buf+0x1d8e/0x2ef0 [ 418.138981][T12318] ? __pfx_binder_alloc_new_buf+0x10/0x10 [ 418.139018][T12318] binder_transaction+0x22d0/0x6470 [ 418.139047][T12318] ? ima_match_policy+0x10b/0x2150 [ 418.139078][T12318] ? register_lock_class+0x51/0x320 [ 418.139125][T12318] ? __lock_acquire+0xab9/0xd20 [ 418.139152][T12318] ? __pfx_binder_transaction+0x10/0x10 [ 418.139188][T12318] ? __lock_acquire+0xab9/0xd20 [ 418.139220][T12318] ? __might_fault+0xb0/0x130 [ 418.139269][T12318] binder_ioctl_write_read+0xd6a/0xa000 [ 418.139311][T12318] ? is_bpf_text_address+0x26/0x2b0 [ 418.139338][T12318] ? kernel_text_address+0xa5/0xe0 [ 418.139374][T12318] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 418.139418][T12318] ? __pfx_binder_ioctl_write_read+0x10/0x10 [ 418.139444][T12318] ? stack_trace_save+0x9c/0xe0 [ 418.139473][T12318] ? stack_depot_save_flags+0x40/0x900 [ 418.139509][T12318] ? kasan_save_track+0x4f/0x80 [ 418.139531][T12318] ? kasan_save_track+0x3e/0x80 [ 418.139553][T12318] ? kasan_save_free_info+0x46/0x50 [ 418.139582][T12318] ? __kasan_slab_free+0x62/0x70 [ 418.139604][T12318] ? kfree+0x18e/0x440 [ 418.139631][T12318] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 418.139662][T12318] ? security_file_ioctl+0xcb/0x2d0 [ 418.139691][T12318] ? __se_sys_ioctl+0x47/0x170 [ 418.139714][T12318] ? do_syscall_64+0xfa/0x3b0 [ 418.139733][T12318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.139776][T12318] ? __pfx_binder_debug+0x10/0x10 [ 418.139800][T12318] ? do_raw_spin_lock+0x121/0x290 [ 418.139846][T12318] ? _raw_spin_unlock+0x28/0x50 [ 418.139879][T12318] ? binder_get_thread+0x178/0x6d0 [ 418.139909][T12318] binder_ioctl+0x3e0/0x19c0 [ 418.139935][T12318] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 418.139969][T12318] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 418.140001][T12318] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 418.140031][T12318] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 418.140065][T12318] ? __pfx_binder_ioctl+0x10/0x10 [ 418.140090][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 418.140107][T12318] ? __lock_acquire+0xab9/0xd20 [ 418.140147][T12318] ? __fget_files+0x2a/0x420 [ 418.140182][T12318] ? __fget_files+0x2a/0x420 [ 418.140215][T12318] ? __fget_files+0x3a0/0x420 [ 418.140250][T12318] ? __fget_files+0x2a/0x420 [ 418.140290][T12318] ? bpf_lsm_file_ioctl+0x9/0x20 [ 418.140318][T12318] ? __pfx_binder_ioctl+0x10/0x10 [ 418.140348][T12318] __se_sys_ioctl+0xfc/0x170 [ 418.140380][T12318] do_syscall_64+0xfa/0x3b0 [ 418.140402][T12318] ? lockdep_hardirqs_on+0x9c/0x150 [ 418.140440][T12318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.140463][T12318] ? clear_bhb_loop+0x60/0xb0 [ 418.140492][T12318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.140516][T12318] RIP: 0033:0x7f4041b8e929 [ 418.140538][T12318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.140560][T12318] RSP: 002b:00007f4042928038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.140586][T12318] RAX: ffffffffffffffda RBX: 00007f4041db5fa0 RCX: 00007f4041b8e929 [ 418.140605][T12318] RDX: 0000200000000440 RSI: 00000000c0306201 RDI: 0000000000000003 [ 418.140629][T12318] RBP: 00007f4042928090 R08: 0000000000000000 R09: 0000000000000000 [ 418.140645][T12318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.140660][T12318] R13: 0000000000000000 R14: 00007f4041db5fa0 R15: 00007ffccbb4dfd8 [ 418.140696][T12318] [ 418.562700][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 418.572912][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 418.586430][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 418.595596][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.817814][ T9] usb 3-1: usb_control_msg returned -32 [ 418.832246][ T9] usbtmc 3-1:16.0: can't read capabilities [ 418.856069][T12330] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2116'. [ 418.884130][T12330] usb usb8: usbfs: interface 0 claimed by hub while 'syz.4.2116' resets device [ 419.290505][T12348] FAULT_INJECTION: forcing a failure. [ 419.290505][T12348] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 419.320338][T12352] autofs: Bad value for 'fd' [ 419.329256][T12352] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 419.330593][T12348] CPU: 0 UID: 0 PID: 12348 Comm: syz.4.2120 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 419.330627][T12348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 419.330643][T12348] Call Trace: [ 419.330652][T12348] [ 419.330662][T12348] dump_stack_lvl+0x189/0x250 [ 419.330697][T12348] ? __pfx____ratelimit+0x10/0x10 [ 419.330735][T12348] ? __pfx_dump_stack_lvl+0x10/0x10 [ 419.330762][T12348] ? __pfx__printk+0x10/0x10 [ 419.330805][T12348] should_fail_ex+0x414/0x560 [ 419.330842][T12348] _copy_to_user+0x31/0xb0 [ 419.330871][T12348] cp_statx+0x5a6/0x7c0 [ 419.330900][T12348] ? __pfx_cp_statx+0x10/0x10 [ 419.330971][T12348] do_statx_fd+0x2c0/0x350 [ 419.331002][T12348] ? __pfx_do_statx_fd+0x10/0x10 [ 419.331025][T12348] ? rcu_read_lock_any_held+0xb3/0x120 [ 419.331079][T12348] ? ksys_write+0x1cb/0x250 [ 419.331115][T12348] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 419.331144][T12348] __se_sys_statx+0x118/0x240 [ 419.331196][T12348] ? __pfx___se_sys_statx+0x10/0x10 [ 419.331221][T12348] ? __fget_files+0x3a0/0x420 [ 419.331263][T12348] ? fput+0xa0/0xd0 [ 419.331287][T12348] ? ksys_write+0x22a/0x250 [ 419.331318][T12348] ? __pfx_ksys_write+0x10/0x10 [ 419.331355][T12348] ? do_syscall_64+0xbe/0x3b0 [ 419.331376][T12348] ? __x64_sys_statx+0x20/0xc0 [ 419.331420][T12348] do_syscall_64+0xfa/0x3b0 [ 419.331444][T12348] ? lockdep_hardirqs_on+0x9c/0x150 [ 419.331480][T12348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.331504][T12348] ? clear_bhb_loop+0x60/0xb0 [ 419.331533][T12348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.331556][T12348] RIP: 0033:0x7f4041b8e929 [ 419.331577][T12348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 419.331598][T12348] RSP: 002b:00007f403f9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 419.331624][T12348] RAX: ffffffffffffffda RBX: 00007f4041db6080 RCX: 00007f4041b8e929 [ 419.331642][T12348] RDX: 0000000000001000 RSI: 0000000000000000 RDI: 0000000000000003 [ 419.331658][T12348] RBP: 00007f403f9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 419.331673][T12348] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 419.331687][T12348] R13: 0000000000000001 R14: 00007f4041db6080 R15: 00007ffccbb4dfd8 [ 419.331723][T12348] [ 420.127303][T12366] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 420.222704][T12368] binder: Unknown parameter 'hash' [ 420.232203][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2125'. [ 420.269818][T12368] /dev/rnullb0: Can't open blockdev [ 420.288208][T12370] FAULT_INJECTION: forcing a failure. [ 420.288208][T12370] name failslab, interval 1, probability 0, space 0, times 0 [ 420.301093][T12370] CPU: 1 UID: 0 PID: 12370 Comm: syz.4.2126 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 420.301128][T12370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 420.301142][T12370] Call Trace: [ 420.301151][T12370] [ 420.301160][T12370] dump_stack_lvl+0x189/0x250 [ 420.301189][T12370] ? __pfx____ratelimit+0x10/0x10 [ 420.301222][T12370] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.301246][T12370] ? __pfx__printk+0x10/0x10 [ 420.301274][T12370] ? __pfx___might_resched+0x10/0x10 [ 420.301297][T12370] ? fs_reclaim_acquire+0x7d/0x100 [ 420.301330][T12370] should_fail_ex+0x414/0x560 [ 420.301362][T12370] should_failslab+0xa8/0x100 [ 420.301389][T12370] __kmalloc_cache_noprof+0x70/0x3d0 [ 420.301410][T12370] ? nfnetlink_rcv+0xeff/0x2520 [ 420.301428][T12370] nfnetlink_rcv+0xeff/0x2520 [ 420.301469][T12370] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 420.301497][T12370] ? ref_tracker_free+0x63a/0x7d0 [ 420.301543][T12370] ? __netlink_deliver_tap+0x807/0x850 [ 420.301572][T12370] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.301609][T12370] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.301634][T12370] netlink_unicast+0x758/0x8d0 [ 420.301662][T12370] netlink_sendmsg+0x805/0xb30 [ 420.301692][T12370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.301717][T12370] ? aa_sock_msg_perm+0x94/0x160 [ 420.301736][T12370] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 420.301763][T12370] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.301785][T12370] __sock_sendmsg+0x219/0x270 [ 420.301805][T12370] ____sys_sendmsg+0x505/0x830 [ 420.301833][T12370] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.301863][T12370] ? import_iovec+0x74/0xa0 [ 420.301883][T12370] ___sys_sendmsg+0x21f/0x2a0 [ 420.301908][T12370] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.301960][T12370] ? __fget_files+0x2a/0x420 [ 420.301984][T12370] ? __fget_files+0x3a0/0x420 [ 420.302018][T12370] __x64_sys_sendmsg+0x19b/0x260 [ 420.302044][T12370] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.302075][T12370] ? __pfx_ksys_write+0x10/0x10 [ 420.302095][T12370] ? rcu_is_watching+0x15/0xb0 [ 420.302130][T12370] ? do_syscall_64+0xbe/0x3b0 [ 420.302150][T12370] do_syscall_64+0xfa/0x3b0 [ 420.302166][T12370] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.302192][T12370] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.302209][T12370] ? clear_bhb_loop+0x60/0xb0 [ 420.302230][T12370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.302246][T12370] RIP: 0033:0x7f4041b8e929 [ 420.302262][T12370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.302277][T12370] RSP: 002b:00007f4042928038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.302295][T12370] RAX: ffffffffffffffda RBX: 00007f4041db5fa0 RCX: 00007f4041b8e929 [ 420.302308][T12370] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 420.302319][T12370] RBP: 00007f4042928090 R08: 0000000000000000 R09: 0000000000000000 [ 420.302329][T12370] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.302340][T12370] R13: 0000000000000000 R14: 00007f4041db5fa0 R15: 00007ffccbb4dfd8 [ 420.302365][T12370] [ 420.392701][T12372] FAULT_INJECTION: forcing a failure. [ 420.392701][T12372] name failslab, interval 1, probability 0, space 0, times 0 [ 420.633062][T12372] CPU: 0 UID: 0 PID: 12372 Comm: syz.3.2127 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 420.633099][T12372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 420.633112][T12372] Call Trace: [ 420.633120][T12372] [ 420.633129][T12372] dump_stack_lvl+0x189/0x250 [ 420.633157][T12372] ? __pfx____ratelimit+0x10/0x10 [ 420.633188][T12372] ? __pfx_dump_stack_lvl+0x10/0x10 [ 420.633211][T12372] ? __pfx__printk+0x10/0x10 [ 420.633247][T12372] should_fail_ex+0x414/0x560 [ 420.633279][T12372] should_failslab+0xa8/0x100 [ 420.633309][T12372] kmem_cache_alloc_noprof+0x73/0x3c0 [ 420.633333][T12372] ? skb_clone+0x212/0x3a0 [ 420.633364][T12372] skb_clone+0x212/0x3a0 [ 420.633396][T12372] __netlink_deliver_tap+0x404/0x850 [ 420.633436][T12372] ? netlink_deliver_tap+0x2e/0x1b0 [ 420.633463][T12372] netlink_deliver_tap+0x19c/0x1b0 [ 420.633489][T12372] netlink_sendskb+0x68/0x140 [ 420.633515][T12372] netlink_rcv_skb+0x28c/0x470 [ 420.633540][T12372] ? __pfx_genl_rcv_msg+0x10/0x10 [ 420.633573][T12372] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 420.633615][T12372] ? down_read+0x1ad/0x2e0 [ 420.633640][T12372] genl_rcv+0x28/0x40 [ 420.633665][T12372] netlink_unicast+0x758/0x8d0 [ 420.633692][T12372] netlink_sendmsg+0x805/0xb30 [ 420.633721][T12372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.633745][T12372] ? aa_sock_msg_perm+0x94/0x160 [ 420.633764][T12372] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 420.633790][T12372] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.633812][T12372] __sock_sendmsg+0x219/0x270 [ 420.633832][T12372] ____sys_sendmsg+0x505/0x830 [ 420.633858][T12372] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.633888][T12372] ? import_iovec+0x74/0xa0 [ 420.633909][T12372] ___sys_sendmsg+0x21f/0x2a0 [ 420.633933][T12372] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.633986][T12372] ? __fget_files+0x2a/0x420 [ 420.634010][T12372] ? __fget_files+0x3a0/0x420 [ 420.634043][T12372] __x64_sys_sendmsg+0x19b/0x260 [ 420.634067][T12372] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.634104][T12372] ? __pfx_ksys_write+0x10/0x10 [ 420.634124][T12372] ? rcu_is_watching+0x15/0xb0 [ 420.634148][T12372] ? do_syscall_64+0xbe/0x3b0 [ 420.634167][T12372] do_syscall_64+0xfa/0x3b0 [ 420.634182][T12372] ? lockdep_hardirqs_on+0x9c/0x150 [ 420.634207][T12372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.634223][T12372] ? clear_bhb_loop+0x60/0xb0 [ 420.634243][T12372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.634259][T12372] RIP: 0033:0x7f30eef8e929 [ 420.634274][T12372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 420.634288][T12372] RSP: 002b:00007f30efd6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.634308][T12372] RAX: ffffffffffffffda RBX: 00007f30ef1b5fa0 RCX: 00007f30eef8e929 [ 420.634320][T12372] RDX: 0000000020080c40 RSI: 0000200000000100 RDI: 0000000000000003 [ 420.634333][T12372] RBP: 00007f30efd6b090 R08: 0000000000000000 R09: 0000000000000000 [ 420.634342][T12372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.634353][T12372] R13: 0000000000000000 R14: 00007f30ef1b5fa0 R15: 00007ffcd05f13b8 [ 420.634379][T12372] [ 420.715586][T12377] FAULT_INJECTION: forcing a failure. [ 420.715586][T12377] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.716948][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.969697][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.975705][ C0] hrtimer: interrupt took 335839642 ns [ 421.020362][T12377] CPU: 1 UID: 0 PID: 12377 Comm: syz.4.2129 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 421.020394][T12377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 421.020408][T12377] Call Trace: [ 421.020417][T12377] [ 421.020427][T12377] dump_stack_lvl+0x189/0x250 [ 421.020458][T12377] ? __pfx____ratelimit+0x10/0x10 [ 421.020491][T12377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.020515][T12377] ? __pfx__printk+0x10/0x10 [ 421.020552][T12377] should_fail_ex+0x414/0x560 [ 421.020584][T12377] _copy_to_user+0x31/0xb0 [ 421.020610][T12377] simple_read_from_buffer+0xe1/0x170 [ 421.020645][T12377] proc_fail_nth_read+0x1df/0x250 [ 421.020670][T12377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.020694][T12377] ? rw_verify_area+0x258/0x650 [ 421.020720][T12377] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 421.020741][T12377] vfs_read+0x1fd/0x980 [ 421.020774][T12377] ? __pfx___mutex_lock+0x10/0x10 [ 421.020797][T12377] ? __pfx_vfs_read+0x10/0x10 [ 421.020826][T12377] ? __fget_files+0x2a/0x420 [ 421.020862][T12377] ? __fget_files+0x3a0/0x420 [ 421.020892][T12377] ? __fget_files+0x2a/0x420 [ 421.020934][T12377] ksys_read+0x145/0x250 [ 421.020964][T12377] ? __pfx_ksys_read+0x10/0x10 [ 421.020988][T12377] ? rcu_is_watching+0x15/0xb0 [ 421.021019][T12377] ? do_syscall_64+0xbe/0x3b0 [ 421.021045][T12377] do_syscall_64+0xfa/0x3b0 [ 421.021065][T12377] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.021097][T12377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.021118][T12377] ? clear_bhb_loop+0x60/0xb0 [ 421.021144][T12377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.021165][T12377] RIP: 0033:0x7f4041b8d33c [ 421.021184][T12377] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 421.021203][T12377] RSP: 002b:00007f4042928030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 421.021225][T12377] RAX: ffffffffffffffda RBX: 00007f4041db5fa0 RCX: 00007f4041b8d33c [ 421.021241][T12377] RDX: 000000000000000f RSI: 00007f40429280a0 RDI: 0000000000000004 [ 421.021254][T12377] RBP: 00007f4042928090 R08: 0000000000000000 R09: 0000000000000000 [ 421.021267][T12377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.021280][T12377] R13: 0000000000000000 R14: 00007f4041db5fa0 R15: 00007ffccbb4dfd8 [ 421.021311][T12377] [ 421.075173][ T9] usb 3-1: USB disconnect, device number 86 [ 421.077986][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.410017][ T10] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 421.443954][T12389] binder: Unknown parameter 'hash' [ 421.515153][T12394] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2137'. [ 421.561949][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.590479][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 421.602487][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 421.614344][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 421.624606][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 421.640257][ T10] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 421.660138][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 421.668394][ T10] usb 4-1: Product: syz [ 421.680063][ T10] usb 4-1: Manufacturer: syz [ 421.684728][ T10] usb 4-1: SerialNumber: syz [ 421.694869][ T10] usb 4-1: config 0 descriptor?? [ 421.810084][ T5882] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 421.903659][ T10] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 421.913032][ T10] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 421.960208][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 421.965605][ T5882] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 421.985115][ T5882] usb 3-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 421.998533][ T5882] usb 3-1: config 2 interface 0 has no altsetting 0 [ 422.009028][ T5882] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 422.018474][ T5882] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.026944][ T5882] usb 3-1: Product: syz [ 422.031369][ T5882] usb 3-1: Manufacturer: syz [ 422.036005][ T5882] usb 3-1: SerialNumber: syz [ 422.130680][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 422.143370][ T9] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 422.154267][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.167509][ T9] usb 5-1: config 0 descriptor?? [ 422.324067][ T5882] usb 3-1: USB disconnect, device number 87 [ 422.334961][ T10] usb 4-1: USB disconnect, device number 114 [ 422.782024][ T9] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 422.792371][ T9] asix 5-1:0.0: probe with driver asix failed with error -32 [ 423.190063][ T9] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 423.360289][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 423.368470][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 423.378537][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 423.390402][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 423.400334][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 423.410592][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.423827][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 423.433035][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.649031][ T9] usb 4-1: usb_control_msg returned -32 [ 423.663616][ T9] usbtmc 4-1:16.0: can't read capabilities [ 424.350137][ T1215] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 424.530021][ T1215] usb 3-1: Using ep0 maxpacket: 32 [ 424.537938][ T1215] usb 3-1: config 0 has an invalid interface number: 35 but max is 0 [ 424.549758][ T1215] usb 3-1: config 0 has no interface number 0 [ 424.564819][ T1215] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 424.577751][ T1215] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.586127][ T1215] usb 3-1: Product: syz [ 424.595000][ T1215] usb 3-1: Manufacturer: syz [ 424.599797][ T1215] usb 3-1: SerialNumber: syz [ 424.612833][ T1215] usb 3-1: config 0 descriptor?? [ 424.622637][ T1215] radio-si470x 3-1:0.35: could not find interrupt in endpoint [ 424.631210][ T1215] radio-si470x 3-1:0.35: probe with driver radio-si470x failed with error -5 [ 424.761449][ T5882] usb 5-1: USB disconnect, device number 65 [ 424.824157][ T1215] radio-raremono 3-1:0.35: this is not Thanko's Raremono. [ 424.834746][ T1215] usbhid 3-1:0.35: couldn't find an input interrupt endpoint [ 425.038891][ T5882] usb 3-1: USB disconnect, device number 88 [ 425.082859][T12478] binder: 12476:12478 ioctl c018620c 200000000640 returned -22 [ 425.520773][T12494] FAULT_INJECTION: forcing a failure. [ 425.520773][T12494] name failslab, interval 1, probability 0, space 0, times 0 [ 425.534740][T12494] CPU: 1 UID: 0 PID: 12494 Comm: syz.4.2152 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 425.534771][T12494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 425.534785][T12494] Call Trace: [ 425.534794][T12494] [ 425.534803][T12494] dump_stack_lvl+0x189/0x250 [ 425.534833][T12494] ? __pfx____ratelimit+0x10/0x10 [ 425.534868][T12494] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.534893][T12494] ? __pfx__printk+0x10/0x10 [ 425.534919][T12494] ? __pfx___might_resched+0x10/0x10 [ 425.534944][T12494] ? fs_reclaim_acquire+0x7d/0x100 [ 425.534979][T12494] should_fail_ex+0x414/0x560 [ 425.535011][T12494] should_failslab+0xa8/0x100 [ 425.535040][T12494] __kmalloc_noprof+0xcb/0x4f0 [ 425.535063][T12494] ? tomoyo_encode+0x28b/0x550 [ 425.535093][T12494] tomoyo_encode+0x28b/0x550 [ 425.535124][T12494] tomoyo_realpath_from_path+0x58d/0x5d0 [ 425.535160][T12494] ? tomoyo_mount_permission+0x27a/0x970 [ 425.535183][T12494] tomoyo_mount_permission+0x377/0x970 [ 425.535210][T12494] ? tomoyo_mount_permission+0x27a/0x970 [ 425.535234][T12494] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 425.535320][T12494] security_sb_mount+0xec/0x350 [ 425.535349][T12494] path_mount+0xbc/0xfe0 [ 425.535378][T12494] ? user_path_at+0x44/0x60 [ 425.535399][T12494] ? kmem_cache_free+0x18f/0x400 [ 425.535434][T12494] __se_sys_mount+0x317/0x410 [ 425.535471][T12494] ? __pfx___se_sys_mount+0x10/0x10 [ 425.535501][T12494] ? rcu_is_watching+0x15/0xb0 [ 425.535531][T12494] ? do_syscall_64+0xbe/0x3b0 [ 425.535551][T12494] ? __x64_sys_mount+0x20/0xc0 [ 425.535584][T12494] do_syscall_64+0xfa/0x3b0 [ 425.535649][T12494] ? lockdep_hardirqs_on+0x9c/0x150 [ 425.535682][T12494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.535702][T12494] ? clear_bhb_loop+0x60/0xb0 [ 425.535728][T12494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.535748][T12494] RIP: 0033:0x7f4041b8e929 [ 425.535767][T12494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.535786][T12494] RSP: 002b:00007f4042928038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 425.535809][T12494] RAX: ffffffffffffffda RBX: 00007f4041db5fa0 RCX: 00007f4041b8e929 [ 425.535825][T12494] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 425.535839][T12494] RBP: 00007f4042928090 R08: 0000200000000140 R09: 0000000000000000 [ 425.535853][T12494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.535866][T12494] R13: 0000000000000000 R14: 00007f4041db5fa0 R15: 00007ffccbb4dfd8 [ 425.535898][T12494] [ 425.535921][T12494] ERROR: Out of memory at tomoyo_realpath_from_path. [ 425.946234][ T10] usb 4-1: USB disconnect, device number 115 [ 426.270053][ T5905] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 426.360822][ T5922] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 426.429983][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 426.442847][ T5905] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 426.459984][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.489169][ T5905] usb 5-1: config 0 descriptor?? [ 426.514545][ T5922] usb 3-1: config 247 has an invalid interface number: 3 but max is 1 [ 426.526435][ T5922] usb 3-1: config 247 has an invalid interface number: 227 but max is 1 [ 426.535564][ T5922] usb 3-1: config 247 has an invalid interface number: 3 but max is 1 [ 426.549385][ T5922] usb 3-1: config 247 has an invalid interface descriptor of length 2, skipping [ 426.566644][ T5922] usb 3-1: config 247 has an invalid descriptor of length 161, skipping remainder of the config [ 426.578097][ T5922] usb 3-1: config 247 has no interface number 0 [ 426.588851][ T5922] usb 3-1: config 247 has no interface number 1 [ 426.597205][ T5922] usb 3-1: config 247 interface 3 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 426.615767][ T5922] usb 3-1: config 247 interface 3 altsetting 4 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 426.629054][ T5922] usb 3-1: config 247 interface 227 altsetting 211 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 426.646696][ T5922] usb 3-1: config 247 interface 3 altsetting 106 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 426.666688][ T5922] usb 3-1: config 247 interface 3 has no altsetting 0 [ 426.674014][ T5922] usb 3-1: config 247 interface 3 has no altsetting 1 [ 426.687391][ T5922] usb 3-1: config 247 interface 227 has no altsetting 0 [ 426.706634][ T5922] usb 3-1: Dual-Role OTG device on HNP port [ 426.720814][ T5922] usb 3-1: New USB device found, idVendor=19d2, idProduct=ff46, bcdDevice=5e.1f [ 426.730194][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.738272][ T5922] usb 3-1: Product: syz [ 426.743276][ T5922] usb 3-1: Manufacturer: syz [ 426.748045][ T5922] usb 3-1: SerialNumber: syz [ 426.975663][ T5922] option 3-1:247.3: GSM modem (1-port) converter detected [ 427.004114][ T5922] usb 3-1: USB disconnect, device number 89 [ 427.025925][ T5922] option 3-1:247.3: device disconnected [ 427.099137][T12536] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 427.108791][ T5905] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 427.135611][ T5905] asix 5-1:0.0: probe with driver asix failed with error -32 [ 427.419394][T12539] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2168'. [ 427.486571][T12542] /dev/rnullb0: Can't open blockdev [ 427.817972][T11978] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 427.835151][T11978] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 427.843488][T11978] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 427.853411][T11978] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 427.861708][T11978] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 427.885049][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 427.893081][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 427.902538][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 427.910935][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 427.921788][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 428.067316][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2175'. [ 428.347505][T12553] chnl_net:caif_netlink_parms(): no params data found [ 428.450384][ T10] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 428.465024][T12553] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.473268][T12553] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.481803][T12553] bridge_slave_0: entered allmulticast mode [ 428.489163][T12553] bridge_slave_0: entered promiscuous mode [ 428.499008][T12553] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.506995][T12553] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.514915][T12553] bridge_slave_1: entered allmulticast mode [ 428.523032][T12553] bridge_slave_1: entered promiscuous mode [ 428.571337][T12553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.584860][T12553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.622641][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 428.643113][ T10] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 428.656573][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.665219][T12553] team0: Port device team_slave_0 added [ 428.675590][ T10] usb 4-1: config 0 descriptor?? [ 428.678127][T12553] team0: Port device team_slave_1 added [ 428.748773][T12553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.758397][T12553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.785496][T12553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.800238][T12553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.807271][T12553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.834394][T12553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.846626][T12588] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2182'. [ 428.917868][T12553] hsr_slave_0: entered promiscuous mode [ 428.924747][T12553] hsr_slave_1: entered promiscuous mode [ 428.932203][T12553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.944669][T12553] Cannot create hsr debugfs directory [ 429.085887][ T1215] usb 5-1: USB disconnect, device number 66 [ 429.102387][ T10] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor [ 429.138176][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0025/input/input44 [ 429.326272][ T10] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 429.327949][T12593] FAULT_INJECTION: forcing a failure. [ 429.327949][T12593] name failslab, interval 1, probability 0, space 0, times 0 [ 429.327985][T12593] CPU: 1 UID: 0 PID: 12593 Comm: syz.4.2184 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 429.328004][T12593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.328015][T12593] Call Trace: [ 429.328021][T12593] [ 429.328027][T12593] dump_stack_lvl+0x189/0x250 [ 429.328053][T12593] ? __pfx____ratelimit+0x10/0x10 [ 429.328089][T12593] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.328113][T12593] ? __pfx__printk+0x10/0x10 [ 429.328144][T12593] ? __pfx___might_resched+0x10/0x10 [ 429.328162][T12593] ? fs_reclaim_acquire+0x7d/0x100 [ 429.328188][T12593] should_fail_ex+0x414/0x560 [ 429.328219][T12593] should_failslab+0xa8/0x100 [ 429.328250][T12593] __kmalloc_cache_noprof+0x70/0x3d0 [ 429.328275][T12593] ? ovs_flow_cmd_new+0x294/0xd80 [ 429.328300][T12593] ovs_flow_cmd_new+0x294/0xd80 [ 429.328315][T12593] ? netlink_sendmsg+0x781/0xb30 [ 429.328342][T12593] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 429.328419][T12593] ? __nla_parse+0x40/0x60 [ 429.328455][T12593] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 429.328485][T12593] genl_family_rcv_msg_doit+0x212/0x300 [ 429.328525][T12593] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 429.328578][T12593] ? bpf_lsm_capable+0x9/0x20 [ 429.328602][T12593] ? security_capable+0x7e/0x2e0 [ 429.328630][T12593] genl_rcv_msg+0x60e/0x790 [ 429.328662][T12593] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.328683][T12593] ? ref_tracker_free+0x63a/0x7d0 [ 429.328709][T12593] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 429.328732][T12593] ? __pfx_ref_tracker_free+0x10/0x10 [ 429.328771][T12593] netlink_rcv_skb+0x205/0x470 [ 429.328798][T12593] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.328822][T12593] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.328858][T12593] ? down_read+0x1ad/0x2e0 [ 429.328886][T12593] genl_rcv+0x28/0x40 [ 429.328914][T12593] netlink_unicast+0x758/0x8d0 [ 429.328950][T12593] netlink_sendmsg+0x805/0xb30 [ 429.328977][T12593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.328999][T12593] ? aa_sock_msg_perm+0x94/0x160 [ 429.329024][T12593] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.329056][T12593] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.329082][T12593] __sock_sendmsg+0x219/0x270 [ 429.329108][T12593] ____sys_sendmsg+0x505/0x830 [ 429.329132][T12593] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.329160][T12593] ? import_iovec+0x74/0xa0 [ 429.329187][T12593] ___sys_sendmsg+0x21f/0x2a0 [ 429.329218][T12593] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.329277][T12593] ? __fget_files+0x2a/0x420 [ 429.329301][T12593] ? __fget_files+0x3a0/0x420 [ 429.329340][T12593] __x64_sys_sendmsg+0x19b/0x260 [ 429.329372][T12593] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.329411][T12593] ? __pfx_ksys_write+0x10/0x10 [ 429.329430][T12593] ? rcu_is_watching+0x15/0xb0 [ 429.329451][T12593] ? do_syscall_64+0xbe/0x3b0 [ 429.329470][T12593] do_syscall_64+0xfa/0x3b0 [ 429.329491][T12593] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.329524][T12593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.329545][T12593] ? clear_bhb_loop+0x60/0xb0 [ 429.329580][T12593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.329599][T12593] RIP: 0033:0x7f4041b8e929 [ 429.329617][T12593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.329634][T12593] RSP: 002b:00007f4042928038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.329654][T12593] RAX: ffffffffffffffda RBX: 00007f4041db5fa0 RCX: 00007f4041b8e929 [ 429.329670][T12593] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 429.329685][T12593] RBP: 00007f4042928090 R08: 0000000000000000 R09: 0000000000000000 [ 429.329698][T12593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.329710][T12593] R13: 0000000000000000 R14: 00007f4041db5fa0 R15: 00007ffccbb4dfd8 [ 429.329741][T12593] [ 429.496614][T12553] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 429.514299][T12553] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 429.534516][T12553] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 429.550497][T12553] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 429.573224][T12597] FAULT_INJECTION: forcing a failure. [ 429.573224][T12597] name failslab, interval 1, probability 0, space 0, times 0 [ 429.573259][T12597] CPU: 1 UID: 0 PID: 12597 Comm: syz.4.2185 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 429.573285][T12597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 429.573299][T12597] Call Trace: [ 429.573308][T12597] [ 429.573317][T12597] dump_stack_lvl+0x189/0x250 [ 429.573347][T12597] ? __pfx____ratelimit+0x10/0x10 [ 429.573381][T12597] ? __pfx_dump_stack_lvl+0x10/0x10 [ 429.573406][T12597] ? __pfx__printk+0x10/0x10 [ 429.573434][T12597] ? __pfx___might_resched+0x10/0x10 [ 429.573459][T12597] ? fs_reclaim_acquire+0x7d/0x100 [ 429.573494][T12597] should_fail_ex+0x414/0x560 [ 429.573535][T12597] should_failslab+0xa8/0x100 [ 429.573564][T12597] __kmalloc_noprof+0xcb/0x4f0 [ 429.573588][T12597] ? tomoyo_mount_permission+0x27a/0x970 [ 429.573611][T12597] ? tomoyo_encode+0x28b/0x550 [ 429.573638][T12597] tomoyo_encode+0x28b/0x550 [ 429.573664][T12597] ? tomoyo_mount_permission+0x27a/0x970 [ 429.573688][T12597] tomoyo_mount_permission+0x331/0x970 [ 429.573717][T12597] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 429.573801][T12597] security_sb_mount+0xec/0x350 [ 429.573843][T12597] path_mount+0xbc/0xfe0 [ 429.573871][T12597] ? user_path_at+0x44/0x60 [ 429.573893][T12597] ? kmem_cache_free+0x18f/0x400 [ 429.573926][T12597] __se_sys_mount+0x317/0x410 [ 429.573962][T12597] ? __pfx___se_sys_mount+0x10/0x10 [ 429.573991][T12597] ? rcu_is_watching+0x15/0xb0 [ 429.574020][T12597] ? do_syscall_64+0xbe/0x3b0 [ 429.574039][T12597] ? __x64_sys_mount+0x20/0xc0 [ 429.574071][T12597] do_syscall_64+0xfa/0x3b0 [ 429.574090][T12597] ? lockdep_hardirqs_on+0x9c/0x150 [ 429.574120][T12597] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.574141][T12597] ? clear_bhb_loop+0x60/0xb0 [ 429.574165][T12597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.574186][T12597] RIP: 0033:0x7f4041b8e929 [ 429.574203][T12597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.574220][T12597] RSP: 002b:00007f4042928038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 429.574242][T12597] RAX: ffffffffffffffda RBX: 00007f4041db5fa0 RCX: 00007f4041b8e929 [ 429.574256][T12597] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 429.574270][T12597] RBP: 00007f4042928090 R08: 0000000000000000 R09: 0000000000000000 [ 429.574283][T12597] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 429.574296][T12597] R13: 0000000000000000 R14: 00007f4041db5fa0 R15: 00007ffccbb4dfd8 [ 429.574326][T12597] [ 429.795258][T12553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.824543][T12553] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.835737][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.835865][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.858733][ T6569] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.858864][ T6569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.971099][ T5845] Bluetooth: hci2: command tx timeout [ 430.370366][ T5882] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 430.438948][T12553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 430.500327][ T5922] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 430.590107][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 430.811227][ T5922] usb 3-1: Using ep0 maxpacket: 32 [ 430.819312][ T5882] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.858486][ T5922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.879494][ T5882] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 430.914364][ T5882] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.929783][ T5922] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 430.934720][ T5882] usb 5-1: config 0 descriptor?? [ 430.951139][ T5922] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 430.951177][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.951201][ T5922] usb 3-1: Product: syz [ 430.951221][ T5922] usb 3-1: Manufacturer: syz [ 430.951261][ T5922] usb 3-1: SerialNumber: syz [ 430.957894][ T5922] usb 3-1: config 0 descriptor?? [ 431.088993][ T5924] usb 4-1: USB disconnect, device number 116 [ 431.249823][T12553] veth0_vlan: entered promiscuous mode [ 431.274900][T12553] veth1_vlan: entered promiscuous mode [ 431.295481][ T43] usb 3-1: USB disconnect, device number 90 [ 431.311778][T12553] veth0_macvtap: entered promiscuous mode [ 431.347719][T12553] veth1_macvtap: entered promiscuous mode [ 431.377403][T12553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.402388][T12553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.416358][T12553] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.428598][T12553] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.438305][T12553] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.448311][T12553] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.545642][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.565090][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.588084][ T5882] usbhid 5-1:0.0: can't add hid device: -71 [ 431.600149][ T5882] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 431.631955][ T5882] usb 5-1: USB disconnect, device number 67 [ 431.646286][ T6569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.677190][ T6569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.911786][T12636] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 432.050260][ T5845] Bluetooth: hci2: command tx timeout [ 432.385894][ T5924] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 432.536361][T12662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2202'. [ 432.570632][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 432.589202][ T5924] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 432.618237][ T5924] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 432.656216][ T5924] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 432.662769][T12666] /dev/rnullb0: Can't open blockdev [ 432.699985][ T5924] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 432.724860][ T5924] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.746339][ T5924] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 432.756740][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.000393][ T5924] usb 3-1: usb_control_msg returned -32 [ 433.006127][ T5924] usbtmc 3-1:16.0: can't read capabilities [ 433.116207][ T5924] usb 3-1: USB disconnect, device number 91 [ 434.132819][ T5845] Bluetooth: hci2: command tx timeout [ 434.200135][ T1215] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 434.401282][ T1215] usb 5-1: Using ep0 maxpacket: 8 [ 434.408487][ T1215] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.421395][ T1215] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 434.432263][ T1215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.447601][ T1215] usb 5-1: config 0 descriptor?? [ 434.465154][ T1215] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 434.654662][ T10] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 434.809995][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 434.840914][ T10] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 434.857465][ T10] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 434.869155][ T10] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 434.882929][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 434.889838][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 434.899374][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.911053][ T10] usb 3-1: config 0 descriptor?? [ 435.475352][T12750] netlink: 115 bytes leftover after parsing attributes in process `syz.3.2228'. [ 435.534799][ T10] usb 3-1: USB disconnect, device number 92 [ 435.699645][ T1215] gspca_vc032x: reg_w err -71 [ 435.705745][ T1215] vc032x 5-1:0.0: probe with driver vc032x failed with error -71 [ 435.725449][ T1215] usb 5-1: USB disconnect, device number 68 [ 435.850197][ T5922] usb 4-1: new full-speed USB device number 117 using dummy_hcd [ 436.012684][ T5922] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.023193][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 436.035027][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 436.046576][ T5922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 436.061463][ T5922] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 436.082689][ T5922] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 436.098871][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 436.107544][ T5922] usb 4-1: Product: syz [ 436.112310][ T5922] usb 4-1: Manufacturer: syz [ 436.116958][ T5922] usb 4-1: SerialNumber: syz [ 436.128821][ T5922] usb 4-1: config 0 descriptor?? [ 436.210222][ T5845] Bluetooth: hci2: command tx timeout [ 436.345698][ T5922] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 436.354799][ T5922] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 436.485041][T12772] netlink: 'syz.5.2238': attribute type 1 has an invalid length. [ 436.495438][T12772] netlink: 'syz.5.2238': attribute type 101 has an invalid length. [ 436.507077][T12772] netlink: 564 bytes leftover after parsing attributes in process `syz.5.2238'. [ 436.789588][ T9] usb 4-1: USB disconnect, device number 117 [ 436.869979][ T5922] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 437.033396][ T5922] usb 3-1: unable to get BOS descriptor or descriptor too short [ 437.046058][ T5922] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 437.056732][ T5922] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 437.068227][ T5922] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 437.077654][ T5922] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.086340][ T5922] usb 3-1: Product: syz [ 437.091373][ T5922] usb 3-1: Manufacturer: syz [ 437.096023][ T5922] usb 3-1: SerialNumber: syz [ 437.110550][ T5922] smsusb:smsusb_probe: board id=8, interface number 0 [ 437.117424][ T5922] smsusb:smsusb_probe: Device initialized with return code -19 [ 437.211499][ T9] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 437.309550][T12780] netlink: 'syz.2.2241': attribute type 6 has an invalid length. [ 437.363737][T12793] FAULT_INJECTION: forcing a failure. [ 437.363737][T12793] name failslab, interval 1, probability 0, space 0, times 0 [ 437.376656][T12793] CPU: 1 UID: 0 PID: 12793 Comm: syz.3.2246 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 437.376679][T12793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 437.376689][T12793] Call Trace: [ 437.376696][T12793] [ 437.376703][T12793] dump_stack_lvl+0x189/0x250 [ 437.376725][T12793] ? __pfx____ratelimit+0x10/0x10 [ 437.376750][T12793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 437.376768][T12793] ? __pfx__printk+0x10/0x10 [ 437.376789][T12793] ? __pfx___might_resched+0x10/0x10 [ 437.376807][T12793] ? fs_reclaim_acquire+0x7d/0x100 [ 437.376832][T12793] should_fail_ex+0x414/0x560 [ 437.376856][T12793] should_failslab+0xa8/0x100 [ 437.376878][T12793] __kmalloc_noprof+0xcb/0x4f0 [ 437.376896][T12793] ? tomoyo_encode+0x28b/0x550 [ 437.376918][T12793] tomoyo_encode+0x28b/0x550 [ 437.376940][T12793] tomoyo_realpath_from_path+0x58d/0x5d0 [ 437.376966][T12793] ? tomoyo_mount_permission+0x27a/0x970 [ 437.376983][T12793] tomoyo_mount_permission+0x377/0x970 [ 437.377002][T12793] ? tomoyo_mount_permission+0x27a/0x970 [ 437.377019][T12793] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 437.377079][T12793] security_sb_mount+0xec/0x350 [ 437.377099][T12793] path_mount+0xbc/0xfe0 [ 437.377121][T12793] ? user_path_at+0x44/0x60 [ 437.377136][T12793] ? kmem_cache_free+0x18f/0x400 [ 437.377161][T12793] __se_sys_mount+0x317/0x410 [ 437.377189][T12793] ? __pfx___se_sys_mount+0x10/0x10 [ 437.377210][T12793] ? rcu_is_watching+0x15/0xb0 [ 437.377232][T12793] ? do_syscall_64+0xbe/0x3b0 [ 437.377246][T12793] ? __x64_sys_mount+0x20/0xc0 [ 437.377270][T12793] do_syscall_64+0xfa/0x3b0 [ 437.377284][T12793] ? lockdep_hardirqs_on+0x9c/0x150 [ 437.377308][T12793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.377323][T12793] ? clear_bhb_loop+0x60/0xb0 [ 437.377342][T12793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.377357][T12793] RIP: 0033:0x7f30eef8e929 [ 437.377370][T12793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.377384][T12793] RSP: 002b:00007f30efd6b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 437.377400][T12793] RAX: ffffffffffffffda RBX: 00007f30ef1b5fa0 RCX: 00007f30eef8e929 [ 437.377411][T12793] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 437.377422][T12793] RBP: 00007f30efd6b090 R08: 0000200000000140 R09: 0000000000000000 [ 437.377432][T12793] R10: 0000000002000004 R11: 0000000000000246 R12: 0000000000000001 [ 437.377442][T12793] R13: 0000000000000000 R14: 00007f30ef1b5fa0 R15: 00007ffcd05f13b8 [ 437.377465][T12793] [ 437.377481][T12793] ERROR: Out of memory at tomoyo_realpath_from_path. [ 437.412357][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 437.412881][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 437.414193][ T9] usb 6-1: config 2 has an invalid interface number: 59 but max is 0 [ 437.691306][ T9] usb 6-1: config 2 has no interface number 0 [ 437.697923][ T9] usb 6-1: config 2 interface 59 has no altsetting 0 [ 437.708103][ T9] usb 6-1: New USB device found, idVendor=06cd, idProduct=0102, bcdDevice=50.1e [ 437.717841][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.725986][ T9] usb 6-1: Product: syz [ 437.748637][ T5924] usb 3-1: USB disconnect, device number 93 [ 437.766924][ T9] usb 6-1: Manufacturer: syz [ 437.774526][ T9] usb 6-1: SerialNumber: syz [ 437.988565][T12790] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2245'. [ 438.008274][T12790] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2245'. [ 438.160199][ T5882] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 438.323374][ T9] keyspan 6-1:2.59: Keyspan - (without firmware) converter detected [ 438.362504][ T9] usb 6-1: USB disconnect, device number 2 [ 438.382138][ T9] keyspan 6-1:2.59: device disconnected [ 438.422855][T12817] FAULT_INJECTION: forcing a failure. [ 438.422855][T12817] name failslab, interval 1, probability 0, space 0, times 0 [ 438.457262][T12817] CPU: 1 UID: 0 PID: 12817 Comm: syz.3.2256 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 438.457294][T12817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 438.457307][T12817] Call Trace: [ 438.457316][T12817] [ 438.457324][T12817] dump_stack_lvl+0x189/0x250 [ 438.457354][T12817] ? __pfx____ratelimit+0x10/0x10 [ 438.457388][T12817] ? __pfx_dump_stack_lvl+0x10/0x10 [ 438.457413][T12817] ? __pfx__printk+0x10/0x10 [ 438.457452][T12817] ? __pfx___might_resched+0x10/0x10 [ 438.457482][T12817] should_fail_ex+0x414/0x560 [ 438.457515][T12817] should_failslab+0xa8/0x100 [ 438.457545][T12817] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 438.457572][T12817] ? __alloc_skb+0x112/0x2d0 [ 438.457602][T12817] __alloc_skb+0x112/0x2d0 [ 438.457630][T12817] netlink_sendmsg+0x5c6/0xb30 [ 438.457668][T12817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.457698][T12817] ? aa_sock_msg_perm+0x94/0x160 [ 438.457722][T12817] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 438.457751][T12817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 438.457777][T12817] __sock_sendmsg+0x219/0x270 [ 438.457801][T12817] ____sys_sendmsg+0x505/0x830 [ 438.457833][T12817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 438.457869][T12817] ? import_iovec+0x74/0xa0 [ 438.457897][T12817] ___sys_sendmsg+0x21f/0x2a0 [ 438.457924][T12817] ? __pfx____sys_sendmsg+0x10/0x10 [ 438.457989][T12817] ? __fget_files+0x2a/0x420 [ 438.458019][T12817] ? __fget_files+0x3a0/0x420 [ 438.458059][T12817] __x64_sys_sendmsg+0x19b/0x260 [ 438.458088][T12817] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 438.458123][T12817] ? __pfx_ksys_write+0x10/0x10 [ 438.458147][T12817] ? rcu_is_watching+0x15/0xb0 [ 438.458175][T12817] ? do_syscall_64+0xbe/0x3b0 [ 438.458199][T12817] do_syscall_64+0xfa/0x3b0 [ 438.458217][T12817] ? lockdep_hardirqs_on+0x9c/0x150 [ 438.458248][T12817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.458270][T12817] ? clear_bhb_loop+0x60/0xb0 [ 438.458294][T12817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.458313][T12817] RIP: 0033:0x7f30eef8e929 [ 438.458331][T12817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.458350][T12817] RSP: 002b:00007f30efd6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 438.458372][T12817] RAX: ffffffffffffffda RBX: 00007f30ef1b5fa0 RCX: 00007f30eef8e929 [ 438.458388][T12817] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 438.458402][T12817] RBP: 00007f30efd6b090 R08: 0000000000000000 R09: 0000000000000000 [ 438.458415][T12817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.458427][T12817] R13: 0000000000000000 R14: 00007f30ef1b5fa0 R15: 00007ffcd05f13b8 [ 438.458466][T12817] [ 438.728134][ C1] vkms_vblank_simulate: vblank timer overrun [ 439.825277][T12861] FAULT_INJECTION: forcing a failure. [ 439.825277][T12861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 439.863262][T12862] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xee [ 439.874969][T12861] CPU: 1 UID: 0 PID: 12861 Comm: syz.4.2267 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 439.874998][T12861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 439.875030][T12861] Call Trace: [ 439.875039][T12861] [ 439.875048][T12861] dump_stack_lvl+0x189/0x250 [ 439.875078][T12861] ? __pfx____ratelimit+0x10/0x10 [ 439.875111][T12861] ? __pfx_dump_stack_lvl+0x10/0x10 [ 439.875136][T12861] ? __pfx__printk+0x10/0x10 [ 439.875160][T12861] ? __might_fault+0xb0/0x130 [ 439.875196][T12861] should_fail_ex+0x414/0x560 [ 439.875229][T12861] _copy_from_user+0x2d/0xb0 [ 439.875252][T12861] __se_sys_mount+0x18a/0x410 [ 439.875290][T12861] ? __pfx___se_sys_mount+0x10/0x10 [ 439.875319][T12861] ? rcu_is_watching+0x15/0xb0 [ 439.875349][T12861] ? do_syscall_64+0xbe/0x3b0 [ 439.875368][T12861] ? __x64_sys_mount+0x20/0xc0 [ 439.875401][T12861] do_syscall_64+0xfa/0x3b0 [ 439.875421][T12861] ? lockdep_hardirqs_on+0x9c/0x150 [ 439.875452][T12861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.875473][T12861] ? clear_bhb_loop+0x60/0xb0 [ 439.875498][T12861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.875518][T12861] RIP: 0033:0x7f4041b8e929 [ 439.875536][T12861] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.875562][T12861] RSP: 002b:00007f4042928038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 439.875585][T12861] RAX: ffffffffffffffda RBX: 00007f4041db5fa0 RCX: 00007f4041b8e929 [ 439.875601][T12861] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 439.875615][T12861] RBP: 00007f4042928090 R08: 0000200000000140 R09: 0000000000000000 [ 439.875629][T12861] R10: 0000000002000004 R11: 0000000000000246 R12: 0000000000000001 [ 439.875646][T12861] R13: 0000000000000000 R14: 00007f4041db5fa0 R15: 00007ffccbb4dfd8 [ 439.875678][T12861] [ 440.067492][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.122740][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.129197][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.167414][T12868] netlink: 'syz.2.2269': attribute type 10 has an invalid length. [ 440.219045][T12868] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2269'. [ 440.282215][T12868] FAULT_INJECTION: forcing a failure. [ 440.282215][T12868] name failslab, interval 1, probability 0, space 0, times 0 [ 440.302488][T12868] CPU: 1 UID: 0 PID: 12868 Comm: syz.2.2269 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 440.302530][T12868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 440.302544][T12868] Call Trace: [ 440.302553][T12868] [ 440.302563][T12868] dump_stack_lvl+0x189/0x250 [ 440.302594][T12868] ? __pfx____ratelimit+0x10/0x10 [ 440.302627][T12868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.302651][T12868] ? __pfx__printk+0x10/0x10 [ 440.302681][T12868] ? __pfx___might_resched+0x10/0x10 [ 440.302704][T12868] ? fs_reclaim_acquire+0x7d/0x100 [ 440.302739][T12868] should_fail_ex+0x414/0x560 [ 440.302772][T12868] should_failslab+0xa8/0x100 [ 440.302802][T12868] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 440.302829][T12868] ? __alloc_skb+0x112/0x2d0 [ 440.302859][T12868] __alloc_skb+0x112/0x2d0 [ 440.302889][T12868] inet_ifmcaddr_notify+0x7e/0x150 [ 440.302921][T12868] __ip_mc_dec_group+0x40b/0x690 [ 440.302950][T12868] inetdev_event+0x2a7/0x15b0 [ 440.302989][T12868] ? __pfx_inetdev_event+0x10/0x10 [ 440.303030][T12868] notifier_call_chain+0x1b3/0x3e0 [ 440.303065][T12868] __dev_notify_flags+0x18d/0x2e0 [ 440.303097][T12868] ? __pfx___dev_notify_flags+0x10/0x10 [ 440.303121][T12868] ? __dev_change_flags+0x4cc/0x6d0 [ 440.303154][T12868] ? __pfx___dev_change_flags+0x10/0x10 [ 440.303194][T12868] netif_change_flags+0xe8/0x1a0 [ 440.303227][T12868] do_setlink+0xc55/0x41c0 [ 440.303258][T12868] ? trace_sched_exit_tp+0x38/0x120 [ 440.303298][T12868] ? __pfx_do_setlink+0x10/0x10 [ 440.303326][T12868] ? __lock_acquire+0xab9/0xd20 [ 440.303355][T12868] ? do_raw_spin_lock+0x121/0x290 [ 440.303393][T12868] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 440.303423][T12868] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.303454][T12868] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 440.303484][T12868] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 440.303526][T12868] ? rcu_is_watching+0x15/0xb0 [ 440.303553][T12868] ? __mutex_lock+0xa6d/0xe80 [ 440.303575][T12868] ? __mutex_lock+0x51b/0xe80 [ 440.303601][T12868] ? rtnl_setlink+0x4ea/0x900 [ 440.303627][T12868] ? __pfx___mutex_lock+0x10/0x10 [ 440.303659][T12868] ? ns_capable+0x8a/0xf0 [ 440.303690][T12868] rtnl_setlink+0x604/0x900 [ 440.303721][T12868] ? __pfx_rtnl_setlink+0x10/0x10 [ 440.303760][T12868] ? kasan_quarantine_put+0xdd/0x220 [ 440.303868][T12868] ? __pfx_rtnl_setlink+0x10/0x10 [ 440.303891][T12868] rtnetlink_rcv_msg+0x7cf/0xb70 [ 440.303919][T12868] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 440.303941][T12868] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 440.303962][T12868] ? ref_tracker_free+0x63a/0x7d0 [ 440.303987][T12868] ? __copy_skb_header+0xa7/0x550 [ 440.304018][T12868] ? __pfx_ref_tracker_free+0x10/0x10 [ 440.304044][T12868] ? __skb_clone+0x63/0x7a0 [ 440.304080][T12868] netlink_rcv_skb+0x205/0x470 [ 440.304108][T12868] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 440.304134][T12868] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 440.304199][T12868] ? netlink_deliver_tap+0x2e/0x1b0 [ 440.304224][T12868] ? netlink_deliver_tap+0x2e/0x1b0 [ 440.304256][T12868] netlink_unicast+0x758/0x8d0 [ 440.304290][T12868] netlink_sendmsg+0x805/0xb30 [ 440.304329][T12868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.304359][T12868] ? aa_sock_msg_perm+0x94/0x160 [ 440.304383][T12868] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 440.304414][T12868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 440.304442][T12868] __sock_sendmsg+0x219/0x270 [ 440.304467][T12868] ____sys_sendmsg+0x505/0x830 [ 440.304507][T12868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 440.304547][T12868] ? import_iovec+0x74/0xa0 [ 440.304572][T12868] ___sys_sendmsg+0x21f/0x2a0 [ 440.304604][T12868] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.304672][T12868] ? __fget_files+0x2a/0x420 [ 440.304701][T12868] ? __fget_files+0x3a0/0x420 [ 440.304744][T12868] __x64_sys_sendmsg+0x19b/0x260 [ 440.304775][T12868] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 440.304815][T12868] ? __pfx_ksys_write+0x10/0x10 [ 440.304839][T12868] ? rcu_is_watching+0x15/0xb0 [ 440.304867][T12868] ? do_syscall_64+0xbe/0x3b0 [ 440.304889][T12868] do_syscall_64+0xfa/0x3b0 [ 440.304908][T12868] ? lockdep_hardirqs_on+0x9c/0x150 [ 440.304939][T12868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.304960][T12868] ? clear_bhb_loop+0x60/0xb0 [ 440.304983][T12868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.305004][T12868] RIP: 0033:0x7f64be98e929 [ 440.305023][T12868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.305042][T12868] RSP: 002b:00007f64bf7f1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 440.305065][T12868] RAX: ffffffffffffffda RBX: 00007f64bebb5fa0 RCX: 00007f64be98e929 [ 440.305081][T12868] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 440.305093][T12868] RBP: 00007f64bf7f1090 R08: 0000000000000000 R09: 0000000000000000 [ 440.305106][T12868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 440.305119][T12868] R13: 0000000000000000 R14: 00007f64bebb5fa0 R15: 00007ffdcfa6f658 [ 440.305151][T12868] [ 440.795943][ C1] vkms_vblank_simulate: vblank timer overrun [ 440.802932][T12868] team0: Port device geneve0 added [ 440.927706][T12883] tmpfs: Bad value for 'mpol' [ 441.151605][T12893] overlayfs: missing 'lowerdir' [ 441.198981][T12896] /dev/sg0: Can't lookup blockdev [ 441.310816][ T1215] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 441.311850][ T10] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 441.362312][T12904] netlink: 'syz.3.2279': attribute type 10 has an invalid length. [ 441.370827][T12904] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2279'. [ 441.444989][T12904] team0: Port device geneve0 added [ 441.474417][ T1215] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 441.486410][ T1215] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 441.495815][ T1215] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.496064][ T10] usb 5-1: device descriptor read/64, error -71 [ 441.514363][ T1215] usb 3-1: config 0 descriptor?? [ 441.760082][ T10] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 441.891160][ T10] usb 5-1: device descriptor read/64, error -71 [ 441.958373][ T1215] nintendo 0003:057E:200E.0027: unbalanced delimiter at end of report description [ 441.987667][ T1215] nintendo 0003:057E:200E.0027: HID parse failed [ 441.997280][ T1215] nintendo 0003:057E:200E.0027: probe - fail = -22 [ 442.005481][ T1215] nintendo 0003:057E:200E.0027: probe with driver nintendo failed with error -22 [ 442.011573][ T10] usb usb5-port1: attempt power cycle [ 442.084644][T12918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2283'. [ 442.094097][T12918] FAULT_INJECTION: forcing a failure. [ 442.094097][T12918] name failslab, interval 1, probability 0, space 0, times 0 [ 442.107558][T12918] CPU: 1 UID: 0 PID: 12918 Comm: syz.5.2283 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 442.107580][T12918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 442.107591][T12918] Call Trace: [ 442.107597][T12918] [ 442.107604][T12918] dump_stack_lvl+0x189/0x250 [ 442.107626][T12918] ? __pfx____ratelimit+0x10/0x10 [ 442.107650][T12918] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.107667][T12918] ? __pfx__printk+0x10/0x10 [ 442.107688][T12918] ? __pfx___might_resched+0x10/0x10 [ 442.107705][T12918] ? fs_reclaim_acquire+0x7d/0x100 [ 442.107730][T12918] should_fail_ex+0x414/0x560 [ 442.107753][T12918] should_failslab+0xa8/0x100 [ 442.107774][T12918] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 442.107793][T12918] ? __alloc_skb+0x112/0x2d0 [ 442.107815][T12918] __alloc_skb+0x112/0x2d0 [ 442.107835][T12918] netlink_ack+0x146/0xa50 [ 442.107852][T12918] ? __pfx_genl_rcv_msg+0x10/0x10 [ 442.107873][T12918] ? ref_tracker_free+0x63a/0x7d0 [ 442.107897][T12918] ? __pfx_ref_tracker_free+0x10/0x10 [ 442.107926][T12918] netlink_rcv_skb+0x28c/0x470 [ 442.107945][T12918] ? __pfx_genl_rcv_msg+0x10/0x10 [ 442.107969][T12918] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 442.108000][T12918] ? down_read+0x1ad/0x2e0 [ 442.108019][T12918] genl_rcv+0x28/0x40 [ 442.108039][T12918] netlink_unicast+0x758/0x8d0 [ 442.108064][T12918] netlink_sendmsg+0x805/0xb30 [ 442.108097][T12918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.108119][T12918] ? aa_sock_msg_perm+0x94/0x160 [ 442.108137][T12918] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 442.108167][T12918] ? __pfx_netlink_sendmsg+0x10/0x10 [ 442.108195][T12918] __sock_sendmsg+0x219/0x270 [ 442.108220][T12918] ____sys_sendmsg+0x505/0x830 [ 442.108255][T12918] ? __pfx_____sys_sendmsg+0x10/0x10 [ 442.108282][T12918] ? import_iovec+0x74/0xa0 [ 442.108300][T12918] ___sys_sendmsg+0x21f/0x2a0 [ 442.108322][T12918] ? __pfx____sys_sendmsg+0x10/0x10 [ 442.108371][T12918] ? __fget_files+0x2a/0x420 [ 442.108393][T12918] ? __fget_files+0x3a0/0x420 [ 442.108423][T12918] __x64_sys_sendmsg+0x19b/0x260 [ 442.108450][T12918] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 442.108480][T12918] ? __pfx_ksys_write+0x10/0x10 [ 442.108499][T12918] ? rcu_is_watching+0x15/0xb0 [ 442.108526][T12918] ? do_syscall_64+0xbe/0x3b0 [ 442.108544][T12918] do_syscall_64+0xfa/0x3b0 [ 442.108558][T12918] ? lockdep_hardirqs_on+0x9c/0x150 [ 442.108584][T12918] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.108599][T12918] ? clear_bhb_loop+0x60/0xb0 [ 442.108617][T12918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.108632][T12918] RIP: 0033:0x7f7cbe18e929 [ 442.108645][T12918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.108659][T12918] RSP: 002b:00007f7cbeff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 442.108676][T12918] RAX: ffffffffffffffda RBX: 00007f7cbe3b5fa0 RCX: 00007f7cbe18e929 [ 442.108687][T12918] RDX: 000000000000c010 RSI: 0000200000000040 RDI: 0000000000000003 [ 442.108697][T12918] RBP: 00007f7cbeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 442.108706][T12918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.108715][T12918] R13: 0000000000000000 R14: 00007f7cbe3b5fa0 R15: 00007ffcabbdf198 [ 442.108749][T12918] [ 442.290940][T12919] overlayfs: missing 'lowerdir' [ 442.295022][ C1] vkms_vblank_simulate: vblank timer overrun [ 442.441896][ C1] vkms_vblank_simulate: vblank timer overrun [ 442.461793][ T10] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 442.487084][ T1215] usb 3-1: USB disconnect, device number 94 [ 442.511488][ T10] usb 5-1: device descriptor read/8, error -71 [ 442.547931][ C1] vkms_vblank_simulate: vblank timer overrun [ 442.635373][T12927] overlayfs: missing 'lowerdir' [ 442.740504][ T10] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 442.788309][ T10] usb 5-1: device descriptor read/8, error -71 [ 442.810012][ T5905] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 442.903669][ T10] usb usb5-port1: unable to enumerate USB device [ 442.970912][ T5905] usb 6-1: Using ep0 maxpacket: 16 [ 442.979513][ T5905] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.996744][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 443.026629][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 443.047159][ T5905] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 443.057667][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 443.074735][ T5905] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 443.089245][ T5905] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 443.110042][ T5905] usb 6-1: Manufacturer: syz [ 443.143933][ T5905] usb 6-1: config 0 descriptor?? [ 443.412966][ T5905] rc_core: IR keymap rc-hauppauge not found [ 443.418928][ T5905] Registered IR keymap rc-empty [ 443.425545][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 443.430117][ T5922] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 443.450241][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 443.470986][ T5905] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 443.485365][ T5905] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input45 [ 443.509095][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 443.530092][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 443.550151][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 443.571199][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 443.590042][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 443.610050][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 443.610198][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 443.628059][ T5922] usb 3-1: config 0 has an invalid descriptor of length 39, skipping remainder of the config [ 443.630090][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 443.639718][ T5922] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x58, changing to 0x8 [ 443.661797][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 443.663850][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid maxpacket 32695, setting to 1024 [ 443.684265][ T5922] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1024 [ 443.690364][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 443.698473][ T5922] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 443.719944][ T5922] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 443.738833][ T5922] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 443.739078][ T5905] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 443.749791][ T5922] usb 3-1: Manufacturer: syz [ 443.768412][ T5922] usb 3-1: config 0 descriptor?? [ 443.780154][T12937] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 443.822583][ T5905] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 443.856271][ T5905] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 443.886784][T12924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.913457][T12924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.026448][ T5905] usb 3-1: USB disconnect, device number 95 [ 444.064121][ T10] usb 6-1: USB disconnect, device number 3 [ 444.306439][T12951] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2292'. [ 444.644344][T12953] FAULT_INJECTION: forcing a failure. [ 444.644344][T12953] name failslab, interval 1, probability 0, space 0, times 0 [ 444.645447][ T30] audit: type=1800 audit(1750495312.935:99): pid=12953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2293" name="bus" dev="overlay" ino=189 res=0 errno=0 [ 444.657504][T12953] CPU: 1 UID: 0 PID: 12953 Comm: syz.5.2293 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 444.657532][T12953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 444.657546][T12953] Call Trace: [ 444.657557][T12953] [ 444.657566][T12953] dump_stack_lvl+0x189/0x250 [ 444.657594][T12953] ? __pfx____ratelimit+0x10/0x10 [ 444.657629][T12953] ? __pfx_dump_stack_lvl+0x10/0x10 [ 444.657653][T12953] ? __pfx__printk+0x10/0x10 [ 444.657682][T12953] ? __pfx___might_resched+0x10/0x10 [ 444.657704][T12953] ? fs_reclaim_acquire+0x7d/0x100 [ 444.657739][T12953] should_fail_ex+0x414/0x560 [ 444.657779][T12953] should_failslab+0xa8/0x100 [ 444.657814][T12953] __kmalloc_noprof+0xcb/0x4f0 [ 444.657845][T12953] ? ovl_lookup_index+0x157/0x790 [ 444.657884][T12953] ovl_lookup_index+0x157/0x790 [ 444.657923][T12953] ? ovl_lookup_layer+0x377/0x450 [ 444.657951][T12953] ? __pfx_ovl_lookup_index+0x10/0x10 [ 444.657982][T12953] ? trace_kmalloc+0x1f/0xd0 [ 444.658008][T12953] ? ovl_lookup+0x5f7/0x1bc0 [ 444.658040][T12953] ovl_lookup+0x13f1/0x1bc0 [ 444.658107][T12953] ? __pfx_ovl_lookup+0x10/0x10 [ 444.658147][T12953] ? do_raw_spin_unlock+0x122/0x240 [ 444.658184][T12953] ? _raw_spin_unlock+0x28/0x50 [ 444.658217][T12953] ? d_alloc+0x144/0x190 [ 444.658245][T12953] lookup_one_qstr_excl_raw+0x118/0x280 [ 444.658278][T12953] do_renameat2+0x470/0xc50 [ 444.658337][T12953] ? __pfx_do_renameat2+0x10/0x10 [ 444.658389][T12953] ? getname_flags+0x1e5/0x540 [ 444.658418][T12953] __x64_sys_renameat2+0xce/0xe0 [ 444.658456][T12953] do_syscall_64+0xfa/0x3b0 [ 444.658478][T12953] ? lockdep_hardirqs_on+0x9c/0x150 [ 444.658514][T12953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.658539][T12953] ? clear_bhb_loop+0x60/0xb0 [ 444.658570][T12953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.658593][T12953] RIP: 0033:0x7f7cbe18e929 [ 444.658616][T12953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 444.658636][T12953] RSP: 002b:00007f7cbeff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 444.658662][T12953] RAX: ffffffffffffffda RBX: 00007f7cbe3b5fa0 RCX: 00007f7cbe18e929 [ 444.658680][T12953] RDX: 0000000000000004 RSI: 00002000000004c0 RDI: 0000000000000006 [ 444.658695][T12953] RBP: 00007f7cbeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 444.658711][T12953] R10: 0000200000000500 R11: 0000000000000246 R12: 0000000000000001 [ 444.658727][T12953] R13: 0000000000000000 R14: 00007f7cbe3b5fa0 R15: 00007ffcabbdf198 [ 444.658773][T12953] [ 445.115000][T12963] overlayfs: missing 'workdir' [ 445.221454][ T10] usb 4-1: new full-speed USB device number 118 using dummy_hcd [ 445.300697][T12967] /dev/rnullb0: Can't open blockdev [ 445.410252][ T10] usb 4-1: config 1 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 445.440806][ T10] usb 4-1: config 1 interface 0 has no altsetting 0 [ 445.460413][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.40 [ 445.479269][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.503797][ T10] usb 4-1: Product: syz [ 445.508124][ T10] usb 4-1: Manufacturer: syz [ 445.519968][ T10] usb 4-1: SerialNumber: syz [ 445.539270][T12957] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 445.710547][ T5922] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 445.754001][T12957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2294'. [ 445.770102][ T5905] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 445.783682][ T10] usbhid 4-1:1.0: can't add hid device: -71 [ 445.789772][ T10] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 445.800667][ T10] usb 4-1: USB disconnect, device number 118 [ 445.865427][ T5922] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.875808][ T5922] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 445.887620][ T5922] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 445.898829][ T5922] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 445.913740][ T5922] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 445.923083][ T5922] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 445.932363][ T5922] usb 6-1: Product: syz [ 445.936552][ T5922] usb 6-1: Manufacturer: syz [ 445.941291][ T5922] usb 6-1: SerialNumber: syz [ 445.948223][ T5922] usb 6-1: config 0 descriptor?? [ 445.954823][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.957948][ T5922] radio-si470x 6-1:0.0: could not find interrupt in endpoint [ 445.974032][ T5922] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 445.976908][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 445.983252][ T5922] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 446.011758][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 446.023236][ T5905] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 446.034287][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 446.057330][ T5905] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 446.069780][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 446.078252][ T5905] usb 5-1: Product: syz [ 446.082804][ T5905] usb 5-1: Manufacturer: syz [ 446.087446][ T5905] usb 5-1: SerialNumber: syz [ 446.094876][ T5905] usb 5-1: config 0 descriptor?? [ 446.235729][ T5922] usb 6-1: USB disconnect, device number 4 [ 446.303661][ T5905] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 446.320019][ T5905] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 446.355141][T12987] overlayfs: missing 'workdir' [ 446.436995][T12989] /dev/rnullb0: Can't open blockdev [ 446.485599][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2309'. [ 446.516803][ T5905] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 446.528345][ T5905] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 446.537868][ T5905] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5 [ 446.741564][T13000] /dev/rnullb0: Can't open blockdev [ 446.877190][T13005] /dev/nullb0: Can't open blockdev [ 447.020128][ T5922] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 447.177599][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 447.185761][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.197244][ T5922] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.207452][ T5922] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 447.221592][ T5922] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 447.232390][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.264476][ T5922] usb 3-1: config 0 descriptor?? [ 447.296900][T13015] syz.5.2317: attempt to access beyond end of device [ 447.296900][T13015] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 447.310355][T13015] isofs_fill_super: bread failed, dev=nbd5, iso_blknum=16, block=32 [ 447.416251][T13017] overlayfs: missing 'workdir' [ 447.576813][T13022] FAULT_INJECTION: forcing a failure. [ 447.576813][T13022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 447.593409][T13022] CPU: 1 UID: 0 PID: 13022 Comm: syz.3.2320 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 447.593440][T13022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 447.593454][T13022] Call Trace: [ 447.593463][T13022] [ 447.593472][T13022] dump_stack_lvl+0x189/0x250 [ 447.593503][T13022] ? __pfx____ratelimit+0x10/0x10 [ 447.593545][T13022] ? __pfx_dump_stack_lvl+0x10/0x10 [ 447.593570][T13022] ? __pfx__printk+0x10/0x10 [ 447.593595][T13022] ? __might_fault+0xb0/0x130 [ 447.593632][T13022] should_fail_ex+0x414/0x560 [ 447.593665][T13022] _copy_from_user+0x2d/0xb0 [ 447.593688][T13022] memdup_user+0x5e/0xd0 [ 447.593721][T13022] strndup_user+0x68/0xd0 [ 447.593752][T13022] __se_sys_mount+0x9c/0x410 [ 447.593785][T13022] ? ksys_write+0x22a/0x250 [ 447.593814][T13022] ? __pfx___se_sys_mount+0x10/0x10 [ 447.593844][T13022] ? rcu_is_watching+0x15/0xb0 [ 447.593875][T13022] ? do_syscall_64+0xbe/0x3b0 [ 447.593893][T13022] ? __x64_sys_mount+0x20/0xc0 [ 447.593927][T13022] do_syscall_64+0xfa/0x3b0 [ 447.593946][T13022] ? lockdep_hardirqs_on+0x9c/0x150 [ 447.593978][T13022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.593999][T13022] ? clear_bhb_loop+0x60/0xb0 [ 447.594024][T13022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.594044][T13022] RIP: 0033:0x7f30eef8e929 [ 447.594063][T13022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.594082][T13022] RSP: 002b:00007f30efd6b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 447.594103][T13022] RAX: ffffffffffffffda RBX: 00007f30ef1b5fa0 RCX: 00007f30eef8e929 [ 447.594120][T13022] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000200000000000 [ 447.594135][T13022] RBP: 00007f30efd6b090 R08: 0000000000000000 R09: 0000000000000000 [ 447.594148][T13022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.594161][T13022] R13: 0000000000000000 R14: 00007f30ef1b5fa0 R15: 00007ffcd05f13b8 [ 447.594193][T13022] [ 447.801188][ C1] vkms_vblank_simulate: vblank timer overrun [ 447.822820][ T5922] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 447.834820][ T5922] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 447.842298][ T5922] microsoft 0003:045E:07DA.0028: unknown main item tag 0x4 [ 447.849674][ T5922] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 447.870078][ T5922] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 447.878473][ T5922] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 447.890941][ T5922] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 447.903141][ T5922] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 447.920324][ T5922] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 447.928344][ T5922] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 447.950029][ T5922] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 447.957466][ T5922] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 447.977242][ T5922] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 447.988090][ T5922] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 447.996682][ T5922] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 448.006598][ T5922] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 448.013994][ T5922] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 448.015647][ T5922] microsoft 0003:045E:07DA.0028: No inputs registered, leaving [ 448.084713][ T5922] microsoft 0003:045E:07DA.0028: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 448.119463][ T5922] microsoft 0003:045E:07DA.0028: no inputs found [ 448.139186][ T5922] microsoft 0003:045E:07DA.0028: could not initialize ff, continuing anyway [ 448.180994][ T5922] usb 3-1: USB disconnect, device number 96 [ 448.217933][T13027] fido_id[13027]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 448.328953][T13033] block nbd3: NBD_DISCONNECT [ 448.420817][T13036] /dev/rnullb0: Can't open blockdev [ 448.568678][ T5922] usb 5-1: USB disconnect, device number 74 [ 449.270041][ T5922] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 449.288688][T13059] FAULT_INJECTION: forcing a failure. [ 449.288688][T13059] name failslab, interval 1, probability 0, space 0, times 0 [ 449.304806][T13059] CPU: 1 UID: 0 PID: 13059 Comm: syz.5.2336 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 449.304828][T13059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 449.304838][T13059] Call Trace: [ 449.304844][T13059] [ 449.304852][T13059] dump_stack_lvl+0x189/0x250 [ 449.304873][T13059] ? __pfx____ratelimit+0x10/0x10 [ 449.304898][T13059] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.304915][T13059] ? __pfx__printk+0x10/0x10 [ 449.304935][T13059] ? __pfx___might_resched+0x10/0x10 [ 449.304951][T13059] ? fs_reclaim_acquire+0x7d/0x100 [ 449.304976][T13059] should_fail_ex+0x414/0x560 [ 449.305003][T13059] should_failslab+0xa8/0x100 [ 449.305033][T13059] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 449.305059][T13059] ? __kthread_create_on_node+0x1c6/0x3e0 [ 449.305094][T13059] kvasprintf+0xdc/0x190 [ 449.305119][T13059] ? __pfx_kvasprintf+0x10/0x10 [ 449.305142][T13059] ? __kasan_kmalloc+0x93/0xb0 [ 449.305169][T13059] ? __kthread_create_on_node+0xef/0x3e0 [ 449.305195][T13059] __kthread_create_on_node+0x1c6/0x3e0 [ 449.305216][T13059] ? __pfx___kthread_create_on_node+0x10/0x10 [ 449.305240][T13059] ? __lock_acquire+0xab9/0xd20 [ 449.305256][T13059] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 449.305276][T13059] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 449.305295][T13059] kthread_create_on_node+0xdd/0x130 [ 449.305318][T13059] ? __pfx_kthread_create_on_node+0x10/0x10 [ 449.305341][T13059] ? do_raw_spin_unlock+0x122/0x240 [ 449.305372][T13059] rxrpc_lookup_local+0xe70/0x1410 [ 449.305399][T13059] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 449.305420][T13059] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 449.305437][T13059] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 449.305460][T13059] ? __local_bh_enable_ip+0x12d/0x1c0 [ 449.305479][T13059] ? __local_bh_enable_ip+0x12d/0x1c0 [ 449.305498][T13059] ? do_raw_spin_unlock+0x122/0x240 [ 449.305522][T13059] rxrpc_sendmsg+0x399/0x710 [ 449.305544][T13059] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 449.305562][T13059] __sock_sendmsg+0x219/0x270 [ 449.305579][T13059] ____sys_sendmsg+0x505/0x830 [ 449.305605][T13059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.305632][T13059] ? import_iovec+0x74/0xa0 [ 449.305649][T13059] ___sys_sendmsg+0x21f/0x2a0 [ 449.305670][T13059] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.305716][T13059] ? __fget_files+0x2a/0x420 [ 449.305737][T13059] ? __fget_files+0x3a0/0x420 [ 449.305766][T13059] __x64_sys_sendmsg+0x19b/0x260 [ 449.305788][T13059] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 449.305833][T13059] ? __pfx_ksys_write+0x10/0x10 [ 449.305857][T13059] ? do_syscall_64+0xbe/0x3b0 [ 449.305875][T13059] do_syscall_64+0xfa/0x3b0 [ 449.305889][T13059] ? lockdep_hardirqs_on+0x9c/0x150 [ 449.305911][T13059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.305926][T13059] ? clear_bhb_loop+0x60/0xb0 [ 449.305944][T13059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.305958][T13059] RIP: 0033:0x7f7cbe18e929 [ 449.305971][T13059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.305984][T13059] RSP: 002b:00007f7cbeff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.306000][T13059] RAX: ffffffffffffffda RBX: 00007f7cbe3b5fa0 RCX: 00007f7cbe18e929 [ 449.306011][T13059] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 449.306021][T13059] RBP: 00007f7cbeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 449.306030][T13059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.306039][T13059] R13: 0000000000000000 R14: 00007f7cbe3b5fa0 R15: 00007ffcabbdf198 [ 449.306062][T13059] [ 449.432334][ T5922] usb 5-1: config 4 has an invalid interface number: 95 but max is 0 [ 449.436071][ C1] vkms_vblank_simulate: vblank timer overrun [ 449.449010][ T5922] usb 5-1: config 4 has an invalid descriptor of length 82, skipping remainder of the config [ 449.688900][ T5922] usb 5-1: config 4 has no interface number 0 [ 449.695693][ T5922] usb 5-1: config 4 interface 95 altsetting 0 endpoint 0x1 has invalid maxpacket 46057, setting to 1024 [ 449.707384][ T5922] usb 5-1: config 4 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 449.721423][ T5922] usb 5-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 449.730983][ T5922] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.739017][ T5922] usb 5-1: Product: syz [ 449.745589][ T5922] usb 5-1: Manufacturer: syz [ 449.750618][ T5922] usb 5-1: SerialNumber: syz [ 449.758943][T13052] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 449.871289][ T1215] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 450.088811][ T1215] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.113503][ T1215] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 450.127200][ T1215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.145147][ T1215] usb 6-1: config 0 descriptor?? [ 450.320483][ T5905] usb 4-1: new full-speed USB device number 119 using dummy_hcd [ 450.372619][ T1215] usbhid 6-1:0.0: can't add hid device: -71 [ 450.378772][ T1215] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 450.399475][ T1215] usb 6-1: USB disconnect, device number 5 [ 450.492056][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 450.505325][ T5905] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 450.524462][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 450.536599][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 450.549868][ T5905] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 450.574310][ T5905] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 450.585646][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 450.593988][ T5905] usb 4-1: Product: syz [ 450.598217][ T5905] usb 4-1: Manufacturer: syz [ 450.603859][ T5905] usb 4-1: SerialNumber: syz [ 450.611495][ T5905] usb 4-1: config 0 descriptor?? [ 450.760244][T13068] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 450.768598][T13068] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 450.821829][ T5905] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 450.828799][ T5905] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 450.900235][ T1215] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 451.029662][ T5905] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 451.038395][ T5905] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 451.048340][ T5905] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 451.072384][ T1215] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 451.089996][ T1215] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 451.099117][ T1215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.111241][ T1215] usb 6-1: config 0 descriptor?? [ 451.319608][T13061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.328843][T13061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.346718][T13061] /dev/rnullb0: Can't open blockdev [ 451.364545][ T1215] usbhid 6-1:0.0: can't add hid device: -71 [ 451.373467][ T1215] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 451.391136][ T1215] usb 6-1: USB disconnect, device number 6 [ 452.375270][T13080] /dev/rnullb0: Can't open blockdev [ 453.076023][T12158] usb 4-1: USB disconnect, device number 119 [ 453.187723][T13084] FAULT_INJECTION: forcing a failure. [ 453.187723][T13084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.238522][T13084] CPU: 1 UID: 0 PID: 13084 Comm: syz.3.2344 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 453.238554][T13084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 453.238567][T13084] Call Trace: [ 453.238576][T13084] [ 453.238586][T13084] dump_stack_lvl+0x189/0x250 [ 453.238618][T13084] ? __pfx____ratelimit+0x10/0x10 [ 453.238652][T13084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.238676][T13084] ? __pfx__printk+0x10/0x10 [ 453.238713][T13084] should_fail_ex+0x414/0x560 [ 453.238747][T13084] _copy_to_user+0x31/0xb0 [ 453.238772][T13084] simple_read_from_buffer+0xe1/0x170 [ 453.238808][T13084] proc_fail_nth_read+0x1df/0x250 [ 453.238832][T13084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.238856][T13084] ? rw_verify_area+0x258/0x650 [ 453.238883][T13084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 453.238905][T13084] vfs_read+0x1fd/0x980 [ 453.238937][T13084] ? __pfx___mutex_lock+0x10/0x10 [ 453.238960][T13084] ? __pfx_vfs_read+0x10/0x10 [ 453.238988][T13084] ? __fget_files+0x2a/0x420 [ 453.239024][T13084] ? __fget_files+0x3a0/0x420 [ 453.239055][T13084] ? __fget_files+0x2a/0x420 [ 453.239095][T13084] ksys_read+0x145/0x250 [ 453.239126][T13084] ? __pfx_ksys_read+0x10/0x10 [ 453.239150][T13084] ? rcu_is_watching+0x15/0xb0 [ 453.239181][T13084] ? do_syscall_64+0xbe/0x3b0 [ 453.239207][T13084] do_syscall_64+0xfa/0x3b0 [ 453.239226][T13084] ? lockdep_hardirqs_on+0x9c/0x150 [ 453.239265][T13084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.239287][T13084] ? clear_bhb_loop+0x60/0xb0 [ 453.239314][T13084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.239335][T13084] RIP: 0033:0x7f30eef8d33c [ 453.239354][T13084] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 453.239373][T13084] RSP: 002b:00007f30efd6b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 453.239395][T13084] RAX: ffffffffffffffda RBX: 00007f30ef1b5fa0 RCX: 00007f30eef8d33c [ 453.239411][T13084] RDX: 000000000000000f RSI: 00007f30efd6b0a0 RDI: 0000000000000003 [ 453.239425][T13084] RBP: 00007f30efd6b090 R08: 0000000000000000 R09: 0000000000000000 [ 453.239439][T13084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 453.239453][T13084] R13: 0000000000000000 R14: 00007f30ef1b5fa0 R15: 00007ffcd05f13b8 [ 453.239486][T13084] [ 453.471189][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.630054][ T1215] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 453.782410][ T1215] usb 6-1: Using ep0 maxpacket: 8 [ 453.789475][ T1215] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 453.798291][ T1215] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 453.820024][ T1215] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 453.840205][ T1215] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 453.864465][ T1215] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.901837][ T1215] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 453.916265][ T1215] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.132712][ T1215] usb 6-1: usb_control_msg returned -32 [ 454.146795][ T1215] usbtmc 6-1:16.0: can't read capabilities [ 454.202159][T13111] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 454.225316][ T1215] usb 6-1: USB disconnect, device number 7 [ 454.730230][ T1215] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 454.853843][ T5922] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 454.883503][ T5922] usb 5-1: MIDIStreaming interface descriptor not found [ 454.902645][ T1215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.926516][ T1215] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 454.961992][ T1215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.995728][ T1215] usb 4-1: config 0 descriptor?? [ 455.200138][ T5905] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 455.386017][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.401049][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.417022][ T5905] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 455.439264][ T1215] keytouch 0003:0926:3333.0029: fixing up Keytouch IEC report descriptor [ 455.450136][ T5905] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 455.469608][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.480584][ T1215] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0029/input/input47 [ 455.505522][ T5905] usb 6-1: config 0 descriptor?? [ 455.641989][ T1215] keytouch 0003:0926:3333.0029: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 455.966526][ T5905] usbhid 6-1:0.0: can't add hid device: -71 [ 455.979136][ T5905] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 455.989395][ T5924] usb 4-1: USB disconnect, device number 120 [ 455.999574][ T5905] usb 6-1: USB disconnect, device number 8 [ 456.549358][T13136] FAULT_INJECTION: forcing a failure. [ 456.549358][T13136] name failslab, interval 1, probability 0, space 0, times 0 [ 456.562834][T13136] CPU: 0 UID: 0 PID: 13136 Comm: syz.5.2352 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 456.562863][T13136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 456.562876][T13136] Call Trace: [ 456.562886][T13136] [ 456.562895][T13136] dump_stack_lvl+0x189/0x250 [ 456.562924][T13136] ? __pfx____ratelimit+0x10/0x10 [ 456.562958][T13136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.562982][T13136] ? __pfx__printk+0x10/0x10 [ 456.563009][T13136] ? __pfx___might_resched+0x10/0x10 [ 456.563033][T13136] ? fs_reclaim_acquire+0x7d/0x100 [ 456.563068][T13136] should_fail_ex+0x414/0x560 [ 456.563100][T13136] should_failslab+0xa8/0x100 [ 456.563129][T13136] __kmalloc_noprof+0xcb/0x4f0 [ 456.563152][T13136] ? tomoyo_mount_permission+0x27a/0x970 [ 456.563175][T13136] ? tomoyo_encode+0x28b/0x550 [ 456.563203][T13136] tomoyo_encode+0x28b/0x550 [ 456.563230][T13136] ? tomoyo_mount_permission+0x27a/0x970 [ 456.563254][T13136] tomoyo_mount_permission+0x331/0x970 [ 456.563284][T13136] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 456.563370][T13136] security_sb_mount+0xec/0x350 [ 456.563399][T13136] path_mount+0xbc/0xfe0 [ 456.563427][T13136] ? user_path_at+0x44/0x60 [ 456.563448][T13136] ? kmem_cache_free+0x18f/0x400 [ 456.563483][T13136] __se_sys_mount+0x317/0x410 [ 456.563520][T13136] ? __pfx___se_sys_mount+0x10/0x10 [ 456.563548][T13136] ? rcu_is_watching+0x15/0xb0 [ 456.563578][T13136] ? do_syscall_64+0xbe/0x3b0 [ 456.563597][T13136] ? __x64_sys_mount+0x20/0xc0 [ 456.563631][T13136] do_syscall_64+0xfa/0x3b0 [ 456.563651][T13136] ? lockdep_hardirqs_on+0x9c/0x150 [ 456.563683][T13136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.563712][T13136] ? clear_bhb_loop+0x60/0xb0 [ 456.563737][T13136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.563758][T13136] RIP: 0033:0x7f7cbe18e929 [ 456.563776][T13136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.563794][T13136] RSP: 002b:00007f7cbeff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 456.563816][T13136] RAX: ffffffffffffffda RBX: 00007f7cbe3b5fa0 RCX: 00007f7cbe18e929 [ 456.563832][T13136] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 456.563847][T13136] RBP: 00007f7cbeff6090 R08: 0000200000000140 R09: 0000000000000000 [ 456.563861][T13136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.563874][T13136] R13: 0000000000000000 R14: 00007f7cbe3b5fa0 R15: 00007ffcabbdf198 [ 456.563907][T13136] [ 456.864264][T13138] ieee802154 phy0 wpan0: encryption failed: -22 [ 458.219942][ T5922] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 458.381511][ T5922] usb 6-1: Using ep0 maxpacket: 8 [ 458.391555][ T5922] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 458.413037][ T5922] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 458.430196][ T5922] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 458.449207][ T5922] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 458.465956][ T5922] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.479635][ T5922] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 458.495804][ T5922] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.860312][ T5922] usb 6-1: usb_control_msg returned -71 [ 458.866086][ T5922] usbtmc 6-1:16.0: can't read capabilities [ 458.918587][ T5922] usb 6-1: USB disconnect, device number 9 [ 459.200104][ T10] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 459.364787][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.382083][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 459.394193][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 459.406607][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 459.419304][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 459.444048][ T10] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 459.458116][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 459.466753][ T10] usb 4-1: Product: syz [ 459.476310][ T10] usb 4-1: Manufacturer: syz [ 459.481312][ T10] usb 4-1: SerialNumber: syz [ 459.498886][ T10] usb 4-1: config 0 descriptor?? [ 459.734362][ T10] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 459.760052][ T10] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 459.930899][ T10] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 459.939330][ T10] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 459.967735][ T10] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 460.292332][T13256] FAULT_INJECTION: forcing a failure. [ 460.292332][T13256] name failslab, interval 1, probability 0, space 0, times 0 [ 460.305407][T13256] CPU: 1 UID: 0 PID: 13256 Comm: syz.5.2380 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 460.305437][T13256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 460.305451][T13256] Call Trace: [ 460.305461][T13256] [ 460.305470][T13256] dump_stack_lvl+0x189/0x250 [ 460.305501][T13256] ? __pfx____ratelimit+0x10/0x10 [ 460.305535][T13256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.305560][T13256] ? __pfx__printk+0x10/0x10 [ 460.305590][T13256] ? __pfx___might_resched+0x10/0x10 [ 460.305614][T13256] ? fs_reclaim_acquire+0x7d/0x100 [ 460.305650][T13256] should_fail_ex+0x414/0x560 [ 460.305683][T13256] should_failslab+0xa8/0x100 [ 460.305713][T13256] __kmalloc_noprof+0xcb/0x4f0 [ 460.305736][T13256] ? kfree+0x4d/0x440 [ 460.305756][T13256] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 460.305788][T13256] tomoyo_realpath_from_path+0xe3/0x5d0 [ 460.305826][T13256] ? tomoyo_mount_permission+0x27a/0x970 [ 460.305850][T13256] tomoyo_mount_permission+0x377/0x970 [ 460.305878][T13256] ? tomoyo_mount_permission+0x27a/0x970 [ 460.305901][T13256] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 460.305987][T13256] security_sb_mount+0xec/0x350 [ 460.306016][T13256] path_mount+0xbc/0xfe0 [ 460.306046][T13256] ? user_path_at+0x44/0x60 [ 460.306066][T13256] ? kmem_cache_free+0x18f/0x400 [ 460.306101][T13256] __se_sys_mount+0x317/0x410 [ 460.306140][T13256] ? __pfx___se_sys_mount+0x10/0x10 [ 460.306178][T13256] ? do_syscall_64+0xbe/0x3b0 [ 460.306198][T13256] ? __x64_sys_mount+0x20/0xc0 [ 460.306232][T13256] do_syscall_64+0xfa/0x3b0 [ 460.306251][T13256] ? lockdep_hardirqs_on+0x9c/0x150 [ 460.306283][T13256] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.306304][T13256] ? clear_bhb_loop+0x60/0xb0 [ 460.306342][T13256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.306363][T13256] RIP: 0033:0x7f7cbe18e929 [ 460.306382][T13256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.306401][T13256] RSP: 002b:00007f7cbeff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 460.306423][T13256] RAX: ffffffffffffffda RBX: 00007f7cbe3b5fa0 RCX: 00007f7cbe18e929 [ 460.306440][T13256] RDX: 0000200000000240 RSI: 0000200000000040 RDI: 0000200000000000 [ 460.306455][T13256] RBP: 00007f7cbeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 460.306468][T13256] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 460.306482][T13256] R13: 0000000000000001 R14: 00007f7cbe3b5fa0 R15: 00007ffcabbdf198 [ 460.306515][T13256] [ 460.306525][T13256] ERROR: Out of memory at tomoyo_realpath_from_path. [ 461.927634][ T10] usb 4-1: USB disconnect, device number 121 [ 462.312423][T13307] /dev/rnullb0: Can't open blockdev [ 462.522893][T13312] FAULT_INJECTION: forcing a failure. [ 462.522893][T13312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.538109][T13312] CPU: 1 UID: 0 PID: 13312 Comm: syz.3.2393 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 462.538140][T13312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 462.538154][T13312] Call Trace: [ 462.538163][T13312] [ 462.538172][T13312] dump_stack_lvl+0x189/0x250 [ 462.538202][T13312] ? __pfx____ratelimit+0x10/0x10 [ 462.538235][T13312] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.538258][T13312] ? __pfx__printk+0x10/0x10 [ 462.538293][T13312] should_fail_ex+0x414/0x560 [ 462.538326][T13312] _copy_to_user+0x31/0xb0 [ 462.538350][T13312] do_pagemap_cmd+0xb06/0xbb0 [ 462.538390][T13312] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 462.538438][T13312] ? __fget_files+0x2a/0x420 [ 462.538472][T13312] ? __fget_files+0x3a0/0x420 [ 462.538501][T13312] ? __fget_files+0x2a/0x420 [ 462.538535][T13312] ? bpf_lsm_file_ioctl+0x9/0x20 [ 462.538556][T13312] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 462.538586][T13312] __se_sys_ioctl+0xfc/0x170 [ 462.538614][T13312] do_syscall_64+0xfa/0x3b0 [ 462.538636][T13312] ? lockdep_hardirqs_on+0x9c/0x150 [ 462.538667][T13312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.538688][T13312] ? clear_bhb_loop+0x60/0xb0 [ 462.538714][T13312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.538735][T13312] RIP: 0033:0x7f30eef8e929 [ 462.538754][T13312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.538772][T13312] RSP: 002b:00007f30efd4a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 462.538795][T13312] RAX: ffffffffffffffda RBX: 00007f30ef1b6080 RCX: 00007f30eef8e929 [ 462.538810][T13312] RDX: 0000200000000200 RSI: 00000000c0606610 RDI: 0000000000000004 [ 462.538824][T13312] RBP: 00007f30efd4a090 R08: 0000000000000000 R09: 0000000000000000 [ 462.538837][T13312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.538850][T13312] R13: 0000000000000000 R14: 00007f30ef1b6080 R15: 00007ffcd05f13b8 [ 462.538879][T13312] [ 462.700044][T12158] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 462.944779][T12158] usb 6-1: Using ep0 maxpacket: 8 [ 462.956697][T12158] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 462.967122][T12158] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 462.988037][T12158] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 463.008324][T12158] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 463.029031][T12158] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.042547][T12158] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 463.054864][T12158] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.239972][ T1215] usb 4-1: new full-speed USB device number 122 using dummy_hcd [ 463.275260][T12158] usb 6-1: usb_control_msg returned -32 [ 463.284448][T12158] usbtmc 6-1:16.0: can't read capabilities [ 463.371193][T12158] usb 6-1: USB disconnect, device number 10 [ 463.409483][ T1215] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.429187][ T1215] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 463.453968][ T1215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 463.466487][ T1215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 463.483592][ T1215] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 463.503277][ T1215] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 463.518730][ T1215] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 463.527405][ T1215] usb 4-1: Product: syz [ 463.538817][ T1215] usb 4-1: Manufacturer: syz [ 463.543791][ T1215] usb 4-1: SerialNumber: syz [ 463.558714][ T1215] usb 4-1: config 0 descriptor?? [ 463.767148][ T1215] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 463.786983][ T1215] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 463.981095][ T1215] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 463.989525][ T1215] radio-si470x 4-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 464.050326][ T1215] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 464.197872][T13347] /dev/nullb0: Can't open blockdev [ 464.666986][T13352] FAULT_INJECTION: forcing a failure. [ 464.666986][T13352] name failslab, interval 1, probability 0, space 0, times 0 [ 464.681073][T13352] CPU: 0 UID: 0 PID: 13352 Comm: syz.5.2399 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 464.681102][T13352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 464.681115][T13352] Call Trace: [ 464.681123][T13352] [ 464.681132][T13352] dump_stack_lvl+0x189/0x250 [ 464.681162][T13352] ? __pfx____ratelimit+0x10/0x10 [ 464.681196][T13352] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.681216][T13352] ? __pfx__printk+0x10/0x10 [ 464.681245][T13352] ? __pfx___might_resched+0x10/0x10 [ 464.681268][T13352] ? fs_reclaim_acquire+0x7d/0x100 [ 464.681303][T13352] should_fail_ex+0x414/0x560 [ 464.681335][T13352] should_failslab+0xa8/0x100 [ 464.681364][T13352] __kmalloc_cache_noprof+0x70/0x3d0 [ 464.681389][T13352] ? nft_trans_rule_add+0x59/0x440 [ 464.681416][T13352] nft_trans_rule_add+0x59/0x440 [ 464.681441][T13352] nf_tables_newrule+0x1b5e/0x2890 [ 464.681489][T13352] ? __pfx_nf_tables_newrule+0x10/0x10 [ 464.681520][T13352] ? nfnl_pernet+0x23/0x240 [ 464.681564][T13352] ? __nla_parse+0x40/0x60 [ 464.681599][T13352] nfnetlink_rcv+0x1132/0x2520 [ 464.681654][T13352] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 464.681692][T13352] ? ref_tracker_free+0x63a/0x7d0 [ 464.681754][T13352] ? __netlink_deliver_tap+0x807/0x850 [ 464.681789][T13352] ? netlink_deliver_tap+0x2e/0x1b0 [ 464.681815][T13352] ? netlink_deliver_tap+0x2e/0x1b0 [ 464.681877][T13352] netlink_unicast+0x758/0x8d0 [ 464.681913][T13352] netlink_sendmsg+0x805/0xb30 [ 464.681950][T13352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.681981][T13352] ? aa_sock_msg_perm+0x94/0x160 [ 464.682006][T13352] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 464.682038][T13352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.682066][T13352] __sock_sendmsg+0x219/0x270 [ 464.682090][T13352] ____sys_sendmsg+0x505/0x830 [ 464.682125][T13352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.682163][T13352] ? import_iovec+0x74/0xa0 [ 464.682189][T13352] ___sys_sendmsg+0x21f/0x2a0 [ 464.682220][T13352] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.682288][T13352] ? __fget_files+0x2a/0x420 [ 464.682318][T13352] ? __fget_files+0x3a0/0x420 [ 464.682360][T13352] __x64_sys_sendmsg+0x19b/0x260 [ 464.682391][T13352] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.682435][T13352] ? __pfx_ksys_write+0x10/0x10 [ 464.682461][T13352] ? rcu_is_watching+0x15/0xb0 [ 464.682491][T13352] ? do_syscall_64+0xbe/0x3b0 [ 464.682516][T13352] do_syscall_64+0xfa/0x3b0 [ 464.682535][T13352] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.682567][T13352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.682588][T13352] ? clear_bhb_loop+0x60/0xb0 [ 464.682614][T13352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.682634][T13352] RIP: 0033:0x7f7cbe18e929 [ 464.682653][T13352] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.682671][T13352] RSP: 002b:00007f7cbeff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.682693][T13352] RAX: ffffffffffffffda RBX: 00007f7cbe3b5fa0 RCX: 00007f7cbe18e929 [ 464.682708][T13352] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 464.682722][T13352] RBP: 00007f7cbeff6090 R08: 0000000000000000 R09: 0000000000000000 [ 464.682735][T13352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.682748][T13352] R13: 0000000000000000 R14: 00007f7cbe3b5fa0 R15: 00007ffcabbdf198 [ 464.682781][T13352] [ 465.018564][ C0] vkms_vblank_simulate: vblank timer overrun [ 465.328375][T13358] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 466.017069][ T43] usb 4-1: USB disconnect, device number 122 [ 466.186188][T13367] FAULT_INJECTION: forcing a failure. [ 466.186188][T13367] name failslab, interval 1, probability 0, space 0, times 0 [ 466.199891][T13367] CPU: 0 UID: 0 PID: 13367 Comm: syz.3.2404 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 466.199919][T13367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 466.199933][T13367] Call Trace: [ 466.199941][T13367] [ 466.199950][T13367] dump_stack_lvl+0x189/0x250 [ 466.199979][T13367] ? __pfx____ratelimit+0x10/0x10 [ 466.200012][T13367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.200036][T13367] ? __pfx__printk+0x10/0x10 [ 466.200074][T13367] should_fail_ex+0x414/0x560 [ 466.200107][T13367] should_failslab+0xa8/0x100 [ 466.200136][T13367] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 466.200162][T13367] ? nf_ct_ext_add+0x1ab/0x450 [ 466.200191][T13367] ? rcu_is_watching+0x15/0xb0 [ 466.200217][T13367] ? nf_ct_ext_add+0x1ab/0x450 [ 466.200244][T13367] krealloc_noprof+0x124/0x340 [ 466.200274][T13367] nf_ct_ext_add+0x1ab/0x450 [ 466.200309][T13367] init_conntrack+0x680/0xef0 [ 466.200348][T13367] ? __pfx_init_conntrack+0x10/0x10 [ 466.200381][T13367] ? __pfx___nf_conntrack_find_get+0x10/0x10 [ 466.200407][T13367] ? __local_bh_enable_ip+0x12d/0x1c0 [ 466.200431][T13367] ? __siphash_unaligned+0x232/0x3b0 [ 466.200460][T13367] nf_conntrack_in+0xbf2/0x1600 [ 466.200513][T13367] ? __pfx_nf_conntrack_in+0x10/0x10 [ 466.200553][T13367] ? ipt_do_table+0x2a3/0x1640 [ 466.200590][T13367] ? ipv4_conntrack_defrag+0x2a0/0x5b0 [ 466.200610][T13367] ? ipv4_conntrack_local+0x126/0x210 [ 466.200634][T13367] ? __pfx_ipv4_conntrack_local+0x10/0x10 [ 466.200662][T13367] nf_hook_slow+0xc5/0x220 [ 466.200692][T13367] nf_hook+0x217/0x380 [ 466.200756][T13367] ? nf_hook+0x9d/0x380 [ 466.200783][T13367] ? __pfx_nf_hook+0x10/0x10 [ 466.200813][T13367] ? __pfx_dst_output+0x10/0x10 [ 466.200853][T13367] __ip_local_out+0x4db/0x600 [ 466.200879][T13367] ? __pfx_dst_output+0x10/0x10 [ 466.200908][T13367] ? __ip_queue_xmit+0x63/0x1b00 [ 466.200936][T13367] __ip_queue_xmit+0x10d7/0x1b00 [ 466.200965][T13367] ? __pfx___tcp_select_window+0x10/0x10 [ 466.200997][T13367] ? __ip_queue_xmit+0x63/0x1b00 [ 466.201030][T13367] ? __pfx_ip_queue_xmit+0x10/0x10 [ 466.201059][T13367] __tcp_transmit_skb+0x225c/0x36c0 [ 466.201119][T13367] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 466.201165][T13367] ? tcp_small_queue_check+0x1c1/0x3b0 [ 466.201200][T13367] tcp_write_xmit+0x1862/0x67f0 [ 466.201282][T13367] __tcp_push_pending_frames+0x97/0x360 [ 466.201309][T13367] ? tcp_push+0x41d/0x660 [ 466.201331][T13367] tcp_sendmsg_locked+0x48cb/0x56f0 [ 466.201354][T13367] ? aa_label_sk_perm+0x413/0x560 [ 466.201431][T13367] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 466.201450][T13367] ? __local_bh_enable_ip+0x12d/0x1c0 [ 466.201477][T13367] ? __local_bh_enable_ip+0x12d/0x1c0 [ 466.201514][T13367] tcp_sendmsg+0x2f/0x50 [ 466.201536][T13367] __sock_sendmsg+0x19c/0x270 [ 466.201564][T13367] ____sys_sendmsg+0x52d/0x830 [ 466.201596][T13367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 466.201634][T13367] ? import_iovec+0x74/0xa0 [ 466.201658][T13367] ___sys_sendmsg+0x21f/0x2a0 [ 466.201709][T13367] ? __pfx____sys_sendmsg+0x10/0x10 [ 466.201783][T13367] ? __fget_files+0x2a/0x420 [ 466.201812][T13367] ? __fget_files+0x3a0/0x420 [ 466.201854][T13367] __sys_sendmmsg+0x227/0x430 [ 466.201888][T13367] ? __pfx___sys_sendmmsg+0x10/0x10 [ 466.201914][T13367] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 466.201965][T13367] ? ksys_write+0x22a/0x250 [ 466.201994][T13367] ? __pfx_ksys_write+0x10/0x10 [ 466.202018][T13367] ? rcu_is_watching+0x15/0xb0 [ 466.202048][T13367] __x64_sys_sendmmsg+0xa0/0xc0 [ 466.202078][T13367] do_syscall_64+0xfa/0x3b0 [ 466.202098][T13367] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.202128][T13367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.202149][T13367] ? clear_bhb_loop+0x60/0xb0 [ 466.202174][T13367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.202193][T13367] RIP: 0033:0x7f30eef8e929 [ 466.202213][T13367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.202231][T13367] RSP: 002b:00007f30efd6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 466.202254][T13367] RAX: ffffffffffffffda RBX: 00007f30ef1b5fa0 RCX: 00007f30eef8e929 [ 466.202269][T13367] RDX: 0000000000000001 RSI: 0000200000005ec0 RDI: 0000000000000003 [ 466.202300][T13367] RBP: 00007f30efd6b090 R08: 0000000000000000 R09: 0000000000000000 [ 466.202313][T13367] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 466.202326][T13367] R13: 0000000000000000 R14: 00007f30ef1b5fa0 R15: 00007ffcd05f13b8 [ 466.202360][T13367] [ 466.647984][ C0] vkms_vblank_simulate: vblank timer overrun [ 470.712516][ T6566] bridge_slave_1: left allmulticast mode [ 470.718287][ T6566] bridge_slave_1: left promiscuous mode [ 470.724412][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.733537][ T6566] bridge_slave_0: left allmulticast mode [ 470.739200][ T6566] bridge_slave_0: left promiscuous mode [ 470.745117][ T6566] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.118785][ T6566] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.132456][ T6566] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.142563][ T6566] bond0 (unregistering): Released all slaves [ 471.240778][ T6566] tipc: Disabling bearer [ 471.259290][ T6566] tipc: Left network mode [ 501.415340][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.421843][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.855043][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.861612][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 596.130195][ T31] INFO: task kworker/0:0:9 blocked for more than 143 seconds. [ 596.137744][ T31] Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 [ 596.145673][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.154448][ T31] task:kworker/0:0 state:D stack:22736 pid:9 tgid:9 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 596.166548][ T31] Workqueue: events rfkill_global_led_trigger_worker [ 596.173404][ T31] Call Trace: [ 596.176726][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 596.179674][ T31] __schedule+0x16f5/0x4d00 [ 596.185122][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 596.191094][ T31] ? schedule+0x165/0x360 [ 596.195519][ T31] ? __pfx___schedule+0x10/0x10 [ 596.200559][ T31] ? schedule+0x91/0x360 [ 596.204875][ T31] schedule+0x165/0x360 [ 596.209113][ T31] schedule_preempt_disabled+0x13/0x30 [ 596.215923][ T31] __mutex_lock+0x724/0xe80 [ 596.220604][ T31] ? look_up_lock_class+0x74/0x170 [ 596.225857][ T31] ? __mutex_lock+0x51b/0xe80 [ 596.230920][ T31] ? rfkill_global_led_trigger_worker+0x27/0xd0 [ 596.237226][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 596.269899][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 596.275728][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 596.308714][ T31] rfkill_global_led_trigger_worker+0x27/0xd0 [ 596.315099][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 596.321023][ T31] process_scheduled_works+0xae1/0x17b0 [ 596.326658][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 596.332795][ T31] worker_thread+0x8a0/0xda0 [ 596.337746][ T31] kthread+0x70e/0x8a0 [ 596.342016][ T31] ? __pfx_worker_thread+0x10/0x10 [ 596.347218][ T31] ? __pfx_kthread+0x10/0x10 [ 596.352471][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 596.357741][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 596.363257][ T31] ? __pfx_kthread+0x10/0x10 [ 596.367906][ T31] ret_from_fork+0x3f9/0x770 [ 596.372678][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 596.377927][ T31] ? __switch_to_asm+0x39/0x70 [ 596.383157][ T31] ? __switch_to_asm+0x33/0x70 [ 596.387985][ T31] ? __pfx_kthread+0x10/0x10 [ 596.392923][ T31] ret_from_fork_asm+0x1a/0x30 [ 596.397769][ T31] [ 596.401286][ T31] INFO: task syz.4.2333:13051 blocked for more than 143 seconds. [ 596.409047][ T31] Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 [ 596.416814][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.428735][ T31] task:syz.4.2333 state:D stack:26856 pid:13051 tgid:13051 ppid:8485 task_flags:0x400040 flags:0x00004006 [ 596.440800][ T31] Call Trace: [ 596.444120][ T31] [ 596.447081][ T31] __schedule+0x16f5/0x4d00 [ 596.451701][ T31] ? __lock_acquire+0xab9/0xd20 [ 596.456590][ T31] ? schedule+0x165/0x360 [ 596.461067][ T31] ? __pfx___schedule+0x10/0x10 [ 596.465993][ T31] ? schedule+0x91/0x360 [ 596.470319][ T31] schedule+0x165/0x360 [ 596.474649][ T31] schedule_preempt_disabled+0x13/0x30 [ 596.480216][ T31] __mutex_lock+0x724/0xe80 [ 596.484759][ T31] ? kobject_put+0x43f/0x480 [ 596.489363][ T31] ? __mutex_lock+0x51b/0xe80 [ 596.494123][ T31] ? rfkill_unregister+0xc8/0x220 [ 596.499184][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 596.504301][ T31] ? __pfx_device_del+0x10/0x10 [ 596.509210][ T31] rfkill_unregister+0xc8/0x220 [ 596.514141][ T31] nfc_unregister_device+0x96/0x2a0 [ 596.519380][ T31] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 596.525186][ T31] virtual_ncidev_close+0x56/0x90 [ 596.530757][ T31] __fput+0x44c/0xa70 [ 596.534808][ T31] task_work_run+0x1d1/0x260 [ 596.539442][ T31] ? __pfx_task_work_run+0x10/0x10 [ 596.544629][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 596.550192][ T31] exit_to_user_mode_loop+0xec/0x110 [ 596.555512][ T31] do_syscall_64+0x2bd/0x3b0 [ 596.560265][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 596.565516][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.571657][ T31] ? clear_bhb_loop+0x60/0xb0 [ 596.576377][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.582398][ T31] RIP: 0033:0x7f4041b8e929 [ 596.586850][ T31] RSP: 002b:00007ffccbb4e138 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 596.595382][ T31] RAX: 0000000000000000 RBX: 000000000006d9c3 RCX: 00007f4041b8e929 [ 596.603432][ T31] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 596.612489][ T31] RBP: 00007f4041db7ba0 R08: 0000000000000001 R09: 0000001ecbb4e42f [ 596.620563][ T31] R10: 00007f4041a00000 R11: 0000000000000246 R12: 00007f4041db5fac [ 596.628595][ T31] R13: 00007f4041db5fa0 R14: ffffffffffffffff R15: 00007ffccbb4e250 [ 596.636707][ T31] [ 596.639942][ T31] INFO: task syz.2.2338:13068 blocked for more than 143 seconds. [ 596.648047][ T31] Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 [ 596.656075][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.665041][ T31] task:syz.2.2338 state:D stack:25736 pid:13068 tgid:13062 ppid:5842 task_flags:0x400140 flags:0x00004006 [ 596.677094][ T31] Call Trace: [ 596.680455][ T31] [ 596.683426][ T31] __schedule+0x16f5/0x4d00 [ 596.687989][ T31] ? schedule+0x165/0x360 [ 596.693885][ T31] ? __pfx___schedule+0x10/0x10 [ 596.699067][ T31] ? schedule+0x91/0x360 [ 596.703972][ T31] schedule+0x165/0x360 [ 596.708203][ T31] schedule_preempt_disabled+0x13/0x30 [ 596.713823][ T31] __mutex_lock+0x724/0xe80 [ 596.718391][ T31] ? __lock_acquire+0xab9/0xd20 [ 596.723414][ T31] ? __mutex_lock+0x51b/0xe80 [ 596.728136][ T31] ? nfc_rfkill_set_block+0x50/0x2e0 [ 596.733606][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 596.738687][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 596.744123][ T31] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 596.751284][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 596.757683][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 596.763546][ T31] nfc_rfkill_set_block+0x50/0x2e0 [ 596.768703][ T31] ? __pfx_nfc_rfkill_set_block+0x10/0x10 [ 596.774861][ T31] rfkill_set_block+0x1cf/0x440 [ 596.779904][ T31] rfkill_fop_write+0x44b/0x570 [ 596.784814][ T31] ? common_file_perm+0x199/0x200 [ 596.790017][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 596.795436][ T31] ? security_kernfs_init_security+0x250/0x290 [ 596.801853][ T31] ? rw_verify_area+0x258/0x650 [ 596.806754][ T31] ? __pfx_rfkill_fop_write+0x10/0x10 [ 596.812297][ T31] vfs_write+0x27b/0xa90 [ 596.816607][ T31] ? __pfx_vfs_write+0x10/0x10 [ 596.821573][ T31] ? __fget_files+0x2a/0x420 [ 596.826215][ T31] ? __fget_files+0x2a/0x420 [ 596.830963][ T31] ? __fget_files+0x3a0/0x420 [ 596.835689][ T31] ? __fget_files+0x2a/0x420 [ 596.840473][ T31] ksys_write+0x145/0x250 [ 596.844851][ T31] ? __pfx_ksys_write+0x10/0x10 [ 596.849714][ T31] ? rcu_is_watching+0x15/0xb0 [ 596.854817][ T31] ? do_syscall_64+0xbe/0x3b0 [ 596.859548][ T31] do_syscall_64+0xfa/0x3b0 [ 596.864201][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.870561][ T31] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 596.876759][ T31] ? clear_bhb_loop+0x60/0xb0 [ 596.881773][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.887712][ T31] RIP: 0033:0x7f64be98e929 [ 596.893245][ T31] RSP: 002b:00007f64bf7d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 596.901809][ T31] RAX: ffffffffffffffda RBX: 00007f64bebb6080 RCX: 00007f64be98e929 [ 596.910021][ T31] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000b [ 596.918130][ T31] RBP: 00007f64bea10b39 R08: 0000000000000000 R09: 0000000000000000 [ 596.926231][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.934395][ T31] R13: 0000000000000000 R14: 00007f64bebb6080 R15: 00007ffdcfa6f658 [ 596.942685][ T31] [ 596.945792][ T31] [ 596.945792][ T31] Showing all locks held in the system: [ 596.953611][ T31] 3 locks held by kworker/0:0/9: [ 596.958594][ T31] #0: ffff88801a880d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 596.969695][ T31] #1: ffffc900000e7bc0 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 596.983383][ T31] #2: ffffffff8f9fd5e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_global_led_trigger_worker+0x27/0xd0 [ 596.995049][ T31] 1 lock held by khungtaskd/31: [ 597.000061][ T31] #0: ffffffff8e33eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 597.010044][ T31] 3 locks held by kworker/u8:3/49: [ 597.015197][ T31] #0: ffff8880b8739f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 597.025309][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 597.036823][ T31] #2: ffff8880b8725958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 597.045927][ T31] 2 locks held by getty/5595: [ 597.050683][ T31] #0: ffff8880350fa0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 597.060597][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 597.070868][ T31] 4 locks held by kworker/u8:15/6566: [ 597.076277][ T31] #0: ffff88801b6fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 597.087296][ T31] #1: ffffc90003167bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 597.098025][ T31] #2: ffffffff8f715a10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 597.107665][ T31] #3: ffffffff8f9fd5e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 597.117927][ T31] 2 locks held by syz.4.2333/13051: [ 597.123196][ T31] #0: ffff88802f151100 (&dev->mutex){....}-{4:4}, at: nfc_unregister_device+0x63/0x2a0 [ 597.133060][ T31] #1: ffffffff8f9fd5e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_unregister+0xc8/0x220 [ 597.143323][ T31] 2 locks held by syz.2.2338/13068: [ 597.148545][ T31] #0: ffffffff8f9fd5e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_write+0x191/0x570 [ 597.158743][ T31] #1: ffff88802f151100 (&dev->mutex){....}-{4:4}, at: nfc_rfkill_set_block+0x50/0x2e0 [ 597.168546][ T31] 2 locks held by syz-executor/13350: [ 597.174057][ T31] #0: ffff88807ec57118 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x6e0 [ 597.184197][ T31] #1: ffffffff8f9fd5e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_register+0x37/0x8e0 [ 597.194261][ T31] 2 locks held by syz.5.2402/13358: [ 597.199487][ T31] #0: ffffffff8ebd46c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 597.208047][ T31] #1: ffffffff8f9fd5e8 (rfkill_global_mutex){+.+.}-{4:4}, at: rfkill_fop_open+0x12d/0x820 [ 597.218358][ T31] 1 lock held by syz-executor/13360: [ 597.223723][ T31] #0: ffffffff8ebd46c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 597.232304][ T31] 1 lock held by syz.3.2405/13369: [ 597.237437][ T31] #0: ffffffff8ebd46c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 597.246001][ T31] 1 lock held by syz.3.2405/13370: [ 597.251456][ T31] #0: ffffffff8ebd46c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 597.260081][ T31] 1 lock held by syz-executor/13373: [ 597.265480][ T31] #0: ffffffff8ebd46c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 597.274056][ T31] 1 lock held by syz-executor/13375: [ 597.279378][ T31] #0: ffffffff8ebd46c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 597.287959][ T31] 1 lock held by syz-executor/13382: [ 597.293354][ T31] #0: ffffffff8ebd46c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 597.301987][ T31] 1 lock held by syz-executor/13384: [ 597.307302][ T31] #0: ffffffff8ebd46c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 597.315922][ T31] 1 lock held by syz-executor/13388: [ 597.321552][ T31] #0: ffffffff8ebd46c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 597.330134][ T31] 1 lock held by syz-executor/13390: [ 597.335442][ T31] #0: ffffffff8ebd46c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 597.343997][ T31] 1 lock held by syz-executor/13396: [ 597.349303][ T31] #0: ffffffff8ebd46c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 597.357965][ T31] 1 lock held by syz-executor/13398: [ 597.363358][ T31] #0: ffffffff8ebd46c8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x330 [ 597.371970][ T31] [ 597.374330][ T31] ============================================= [ 597.374330][ T31] [ 597.382877][ T31] NMI backtrace for cpu 0 [ 597.382896][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 597.382920][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 597.382934][ T31] Call Trace: [ 597.382944][ T31] [ 597.382954][ T31] dump_stack_lvl+0x189/0x250 [ 597.382982][ T31] ? __wake_up_klogd+0xd9/0x110 [ 597.383014][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.383039][ T31] ? __pfx__printk+0x10/0x10 [ 597.383075][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 597.383107][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 597.383133][ T31] ? _printk+0xcf/0x120 [ 597.383160][ T31] ? __pfx__printk+0x10/0x10 [ 597.383185][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 597.383221][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 597.383253][ T31] watchdog+0xfee/0x1030 [ 597.383310][ T31] ? watchdog+0x1de/0x1030 [ 597.383336][ T31] kthread+0x70e/0x8a0 [ 597.383366][ T31] ? __pfx_watchdog+0x10/0x10 [ 597.383380][ T31] ? __pfx_kthread+0x10/0x10 [ 597.383401][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 597.383423][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 597.383445][ T31] ? __pfx_kthread+0x10/0x10 [ 597.383466][ T31] ret_from_fork+0x3f9/0x770 [ 597.383484][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 597.383503][ T31] ? __switch_to_asm+0x39/0x70 [ 597.383521][ T31] ? __switch_to_asm+0x33/0x70 [ 597.383539][ T31] ? __pfx_kthread+0x10/0x10 [ 597.383560][ T31] ret_from_fork_asm+0x1a/0x30 [ 597.383591][ T31] [ 597.383597][ T31] Sending NMI from CPU 0 to CPUs 1: [ 597.541637][ C1] NMI backtrace for cpu 1 [ 597.541657][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 597.541678][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 597.541690][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 597.541725][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 09 1b 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 597.541741][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c6 [ 597.541757][ C1] RAX: 56f4985627baaa00 RBX: ffffffff81979d58 RCX: 56f4985627baaa00 [ 597.541772][ C1] RDX: 0000000000000001 RSI: ffffffff8da4c245 RDI: ffffffff8be41840 [ 597.541785][ C1] RBP: ffffc90000197f20 R08: ffff8880b8732f5b R09: 1ffff110170e65eb [ 597.541798][ C1] R10: dffffc0000000000 R11: ffffed10170e65ec R12: ffffffff8fc232f0 [ 597.541812][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff11003adeb40 [ 597.541824][ C1] FS: 0000000000000000(0000) GS:ffff888125b1c000(0000) knlGS:0000000000000000 [ 597.541838][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 597.541850][ C1] CR2: 00007fff9b208c38 CR3: 000000003135a000 CR4: 00000000003526f0 [ 597.541866][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 597.541877][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 597.541888][ C1] Call Trace: [ 597.541895][ C1] [ 597.541902][ C1] default_idle+0x13/0x20 [ 597.541921][ C1] default_idle_call+0x74/0xb0 [ 597.541942][ C1] do_idle+0x1e8/0x510 [ 597.541966][ C1] ? __pfx_do_idle+0x10/0x10 [ 597.541995][ C1] cpu_startup_entry+0x44/0x60 [ 597.542015][ C1] start_secondary+0x101/0x110 [ 597.542042][ C1] common_startup_64+0x13e/0x147 [ 597.542073][ C1] [ 597.542870][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 597.728010][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00269-g11313e2f7812 #0 PREEMPT(full) [ 597.739845][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 597.749928][ T31] Call Trace: [ 597.753231][ T31] [ 597.756197][ T31] dump_stack_lvl+0x99/0x250 [ 597.760813][ T31] ? __asan_memcpy+0x40/0x70 [ 597.765416][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.770632][ T31] ? __pfx__printk+0x10/0x10 [ 597.775250][ T31] panic+0x2db/0x790 [ 597.779193][ T31] ? __pfx_panic+0x10/0x10 [ 597.783655][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 597.789504][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 597.794914][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 597.801104][ T31] watchdog+0x102d/0x1030 [ 597.805455][ T31] ? watchdog+0x1de/0x1030 [ 597.809898][ T31] kthread+0x70e/0x8a0 [ 597.813993][ T31] ? __pfx_watchdog+0x10/0x10 [ 597.818681][ T31] ? __pfx_kthread+0x10/0x10 [ 597.823317][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 597.828545][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 597.833768][ T31] ? __pfx_kthread+0x10/0x10 [ 597.838380][ T31] ret_from_fork+0x3f9/0x770 [ 597.842987][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 597.848143][ T31] ? __switch_to_asm+0x39/0x70 [ 597.852951][ T31] ? __switch_to_asm+0x33/0x70 [ 597.857743][ T31] ? __pfx_kthread+0x10/0x10 [ 597.862385][ T31] ret_from_fork_asm+0x1a/0x30 [ 597.867189][ T31] [ 597.870527][ T31] Kernel Offset: disabled [ 597.874874][ T31] Rebooting in 86400 seconds..