last executing test programs: 13m43.002452912s ago: executing program 3 (id=278): syz_usb_connect(0x0, 0x2c8, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x26, 0xb, 0x62, 0x40, 0x305a, 0x1405, 0xaa8a, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2b6, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x75, 0x0, 0x6, 0xff, 0xa3, 0xdd, 0x9, [], [{{0x9, 0x5, 0x5, 0x0, 0x3ff, 0x3, 0x7, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x4}]}}, {{0x9, 0x5, 0x2, 0x7, 0x200, 0x40, 0x5, 0x6}}, {{0x9, 0x5, 0x9, 0x0, 0x400, 0x4, 0x5, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xd, 0x186b}, @generic={0x5e, 0x5, "ed46df27434bd03ed100a5c587b47875fdc30ea9c3550c38c2eb2595540a75e13573bda5fbd673c0e46d31e9bdd0099f29898780f3da4f809c46c41e60d03181f421e86209172983be667b6f421dca41c07625d9c654fc6168af2881"}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0xf, 0x0, 0x5, [@generic={0xa9, 0x4, "26fd3c151d906e616e9dafe99cd0ead19ef66bebecbca4727cd7171a08c4de871449f230f2e66753644c586332f3741d1da2e0ee27b252c90b3fda1d136e65cd057ca7f5b29c58758cb3a8365cf1b191fb1430ce980e40ddac0e9e0684aa121e6f3ff5250db1951ee0ca2de0371a03c18e3bb0427615da12a9f3623db2ae22b1bf753b57104c2139f51f40178f937994f143ac583cd808850eb2a6f6fdf9f1619128c3eaaec7e9"}, @generic={0x43, 0x2, "9288c57d5e005988b2ad8374fba1810f7bc1eb3b5a70b76aaa700dd4e75129637613a48ca6b48b9e444b9113ab7cb394fc62871ddd731d228da4f970f6581b466f"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x260, 0x0, 0x29, 0x6, [@generic={0xe4, 0x11, "4e0ae4a3bd1b44aec9336294e3e2c856e601bd2edc73c3fd696d2a66cc3947192c3ccd6c4de0b0f2880254e65c4c6e80eea8acc8e4b43df3bde638d833912606000c8679923a67da3f928f3e350c7a333d7c6c91d14e7b99e0a90ffc6463a8e64d2a79a82d4c779fe00056dd6da55f2d2986314980bc8e2032a0f9032bc21d8f77203f55bdf031b648bc9b64c44cb546a7c323f58520280d40be6434d2263395a67c5702b95caedca13ff6fc8bd1a9db506aa3c0116d11b1949ed93d645983b3ea005cdd164b37d832312c0afa2596c6a0c8295b4f901f064a629027a583e6de1db2"}, @generic={0x24, 0x9, "22b63ee64363fce07700679374a44cf15b725e9a99b2a0552219c397ddec83adfcae"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x9, 0xb, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5}]}}]}}]}}]}}, 0x0) 13m41.541981498s ago: executing program 3 (id=281): r0 = syz_open_dev$vim2m(&(0x7f0000000140), 0x10002, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x200000000000000) 13m41.296225148s ago: executing program 3 (id=282): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 13m38.288564759s ago: executing program 3 (id=294): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aeb2, &(0x7f0000000780)={0x2, 0x0, @ioapic={0xffff1000, 0x7, 0x22, 0x7ff, 0x0, [{0x40, 0xfa, 0x4d, '\x00', 0xff}, {0x9, 0x5, 0x3, '\x00', 0xf1}, {0x2, 0x6, 0x3, '\x00', 0x6}, {0xeb, 0x9, 0x22, '\x00', 0x2}, {0xf7, 0x6, 0x10, '\x00', 0x1}, {0x3, 0x4, 0x7, '\x00', 0xff}, {0x10, 0x81, 0x9, '\x00', 0x7}, {0x80, 0x3, 0xc, '\x00', 0x6}, {0x40, 0x65, 0x4, '\x00', 0x3}, {0x1, 0xfe, 0x4, '\x00', 0x7}, {0x3, 0x5, 0x2, '\x00', 0xff}, {0x0, 0x7, 0x6, '\x00', 0x42}, {0x5, 0x2, 0xff, '\x00', 0x1}, {0xc, 0x37, 0x9, '\x00', 0x6}, {0xcc, 0xd1, 0x0, '\x00', 0x15}, {0xa2, 0x1, 0xa7, '\x00', 0x3}, {0x80, 0x7, 0x2, '\x00', 0xe}, {0xa5, 0x4, 0x5, '\x00', 0x6}, {0x42, 0x9d, 0x8, '\x00', 0xf}, {0x1, 0x1, 0x11, '\x00', 0x50}, {0x9, 0x3, 0x2, '\x00', 0x5}, {0x4, 0x7, 0x0, '\x00', 0x2}, {0x9, 0x0, 0x5, '\x00', 0x3d}, {0x4, 0x4, 0x1, '\x00', 0x4}]}}) 13m38.134117496s ago: executing program 3 (id=295): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000e9e7a67100000000050000001873797a5f74756e000100080000000000180003801400038010000180040003"], 0x44}}, 0x20008000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000100), &(0x7f0000000340), 0x2, 0x3) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x2) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0e124f8dcae2b1c879796333", @ANYRES16=r0, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e000000000000000000"], 0x44}}, 0x0) 13m37.308415619s ago: executing program 3 (id=299): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000000)={0x40, 0x12, 0x8, "0600000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 13m21.753595116s ago: executing program 32 (id=299): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000000)={0x40, 0x12, 0x8, "0600000000000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 10m7.011479179s ago: executing program 2 (id=1423): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000020ac87d30300000000000000000a00000908000540000000133a8f612b34ed01f07725a2dc26c45fcd753665d23bd0e65d76158e1a1bb4abbd5384e52ab0b73c63b2ce9f3ca793"], 0x24}, 0x1, 0x0, 0x0, 0x20040180}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)="d8000000180081054e81f782db44b904021d005c06007c09e8fed9e40a00154002001426c1e1b8c708001e0000000401a80016000800024009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee7a7cef4090000001fb791643a5ee4ce1b14d6d93059dac7149393cccfbd6761e627d4c12cdfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a502504000000fa09d5e14ace69ed0bffece0b42a9ecbee5d81320344d2f16af094531c7fe95aa049a240db2d68a5b23564b8808b", 0xd8}], 0x1}, 0x400a044) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x20, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x40, 0x0, 0x0) 10m6.860359481s ago: executing program 2 (id=1424): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="3900000013000318680907070000000f0000ff3f3f000000170a00170000ff00040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) 10m6.742279095s ago: executing program 2 (id=1425): arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xd40) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) listen(r1, 0x3) r2 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xde, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0x81, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x28, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0xa, 0x11}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @main=@item_012={0x2, 0x0, 0x8, 'Q;'}, @local=@item_012={0x1, 0x2, 0x5, "94"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000400)={0x20, 0x16, 0x4, "96aac3df"}, 0x0, 0x0, 0x0, 0x0}) 10m5.006341429s ago: executing program 2 (id=1430): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) close(r2) write$apparmor_exec(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='stack : :'], 0x11) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000003300), r0) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fcdbdf25110000000800150001000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x20000010) 10m4.982974712s ago: executing program 2 (id=1431): futex(&(0x7f0000000000), 0x8, 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080), 0x0) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) clock_gettime(0x0, &(0x7f00000010c0)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f00000000c0)=""/4096, 0x1000, 0x98ec, &(0x7f0000001100)={r1, r2+60000000}) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000001140)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000003680)=[{&(0x7f00000011c0)=""/140, 0x8c}, {&(0x7f0000001280)=""/184, 0xb8}, {&(0x7f0000001340)=""/244, 0xf4}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/39, 0x27}, {&(0x7f0000002480)=""/254, 0xfe}, {&(0x7f0000002580)=""/4096, 0x1000}, {&(0x7f0000003580)=""/223, 0xdf}], 0x8, &(0x7f0000003700)=""/146, 0x92}, 0x5}], 0x1, 0x10061, &(0x7f0000003800)) r3 = fcntl$getown(r0, 0x9) timer_create(0x2, &(0x7f0000003840)={0x0, 0x12, 0x0, @tid=r3}, &(0x7f0000003880)=0x0) timer_settime(r4, 0x0, &(0x7f00000038c0)={{0x77359400}}, &(0x7f0000003900)) syz_emit_vhci(&(0x7f0000008180)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_reply={{0x32, 0x9}, {@any, 0x7, 0x9, 0x5b}}}, 0xc) 10m4.554506228s ago: executing program 2 (id=1436): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff4]}, 0x8) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000001240)=0x5) (async) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$dsp(r3, &(0x7f0000000440)=""/49, 0x31) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000001c40)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x83, &(0x7f00000011c0)={r1}, &(0x7f0000000180)=0x8) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000040)=0x6, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000140)={'tunl0\x00', r6, 0x748, 0x40, 0x0, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @remote}}}}) 10m4.310504914s ago: executing program 33 (id=1436): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff4]}, 0x8) fcntl$F_SET_RW_HINT(r2, 0x40c, &(0x7f0000001240)=0x5) (async) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$dsp(r3, &(0x7f0000000440)=""/49, 0x31) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000001c40)) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x83, &(0x7f00000011c0)={r1}, &(0x7f0000000180)=0x8) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0x14, &(0x7f0000000040)=0x6, 0x4) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000140)={'tunl0\x00', r6, 0x748, 0x40, 0x0, 0xfffffffd, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x14}, @remote}}}}) 9m24.622398676s ago: executing program 4 (id=1670): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000380)={0x2c, r1, 0x9, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x4004e502, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r5, 0x5408, &(0x7f0000000040)={0x6, 0x8, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x76}) r6 = userfaultfd(0x80801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000979000/0x3000)=nil, 0x2000}) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000080)=0xf) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000050000004c0004804800018008000100647570003c00028008000240000000170800024000000001080002400000000e08000240000000110800024000000012080002400000000408000240000000160900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a26895408624809d60c07507a76605cf6a55e14794c222604691908d6e5f9ed3c637175cca9fbef0b68a11f7bf3d8b5997fdff2bb002e8de9827e08bd0a9b25ce965809980bfbe2e83739333d"], 0xa0}}, 0x0) 9m23.711741656s ago: executing program 4 (id=1674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001001c000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000058000000030a01030000000000000000050000000900010073797a300000000008000b00"], 0xa0}}, 0x0) 9m23.571458717s ago: executing program 4 (id=1675): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 9m23.354250677s ago: executing program 4 (id=1676): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xc) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = fcntl$dupfd(r0, 0x0, r0) io_submit(0x0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1000000, 0x0, 0x10}]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$UFFDIO_CONTINUE(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2100000, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = dup(r2) shutdown(r3, 0x1) syz_usb_connect(0x2, 0x24, &(0x7f0000000240)=ANY=[@ANYRES16=r1], 0x0) 9m22.761210086s ago: executing program 4 (id=1683): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x4, 0x8a, 0x50, 0x40, 0x499, 0x1030, 0x351a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xa0, 0x1, 0x80, 0xf, [{{0x9, 0x4, 0x20, 0x4, 0x0, 0x4c, 0xdc, 0x88}}]}}]}}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) 9m22.453191472s ago: executing program 4 (id=1686): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getflags(r1, 0x408) getsockopt(r1, 0xff, 0xc82, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000001c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x40, 0x19, 0x2, "0500"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000140)={0x0, 0x1, 0x72, "cc200601063af8c0038a424213c7372615d0bc59339c0e38d28c01d7e6923cb9ace8227bdc7eb0dae6ccdf74e4942b903f83f1803ffefba305b7e927a1ab74594d67c54af98e78bec274030000000000000099212526d8660e9bc1686e4fa4d56bb33b05cb2dbe4ea74c25361deb91cfc838"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 9m22.172783981s ago: executing program 34 (id=1686): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) fcntl$getflags(r1, 0x408) getsockopt(r1, 0xff, 0xc82, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000001c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x40, 0x19, 0x2, "0500"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000140)={0x0, 0x1, 0x72, "cc200601063af8c0038a424213c7372615d0bc59339c0e38d28c01d7e6923cb9ace8227bdc7eb0dae6ccdf74e4942b903f83f1803ffefba305b7e927a1ab74594d67c54af98e78bec274030000000000000099212526d8660e9bc1686e4fa4d56bb33b05cb2dbe4ea74c25361deb91cfc838"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 7m56.760708893s ago: executing program 0 (id=2112): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x6, 0x24, &(0x7f00000001c0)=ANY=[@ANYRES64=r0, @ANYRES64=r0, @ANYRESOCT=r0], 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) ioctl$EVIOCRMFF(r0, 0xc0085508, 0x0) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x101080, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4044800}, 0x4000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000018140)={{0x12, 0x1, 0x201, 0xf9, 0xa7, 0x2a, 0x8, 0xb48, 0x1009, 0xd844, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0x9, 0x0, 0x3, [{{0x9, 0x4, 0x41, 0x7, 0x0, 0x27, 0xbe, 0x11}}]}}]}}, &(0x7f00000190c0)={0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000defffffffdffffff00000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000010}, 0x24000840) recvmmsg(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/139, 0x8b}, {&(0x7f0000002740)=""/4090, 0xffa}], 0x2}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000680)=""/96, 0x60}, {&(0x7f0000003740)=""/4096, 0x1000}, {&(0x7f0000004740)=""/4106, 0x100a}], 0x3}, 0x8}], 0x3, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000200)={0x5, &(0x7f0000000100)=[{0x4a5, 0x68, 0x3, 0xffffffc0}, {0x4, 0x2, 0x7e, 0xb}, {0x2, 0x40, 0x5, 0x100}, {0xd9c6, 0xff, 0x7, 0x4}, {0x3, 0x7, 0x5, 0x2}]}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000240)={r5, 0x2, r4}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000340)={r5, 0x0, 0xffffffffffffffff, 0x10}) 7m55.870640595s ago: executing program 0 (id=2114): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000001c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x40, 0x19, 0x2, "0500"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000140)={0x0, 0x1, 0x72, "cc200601063af8c0038a424213c7372615d0bc59339c0e38d28c01d7e6923cb9ace8227bdc7eb0dae6ccdf74e4942b903f83f1803ffefba305b7e927a1ab74594d67c54af98e78bec274030000000000000099212526d8660e9bc1686e4fa4d56bb33b05cb2dbe4ea74c25361deb91cfc838"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 7m52.913692528s ago: executing program 0 (id=2128): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001080)=ANY=[@ANYBLOB="000086dd0000ee0600000000000060fc030006c72c00fe8000000000000000000000000000aaff0200000000000000000000000000013a00000000000000020090780000d93f640000000f081120fe880000000000000000000000000001fe8000000000000000000000000000125d02000000000000070f55b5d747d5ce5853e308cdbcf10ddd0000000000000016c9000000000000c20400000000040100c204000000400708000000040004c8060230471c193e445fffa682333b6ea5d9758e49d1f56a2cacf058c91036aa2a98b0af004e6f5acbbab33a8a5a9112f348b1a0089ddf5d100402cf846849a5c61cd7554140293b1191985ab08825ff716bc3ec7c318469d1e246d1c2b6f9ac2da9fa05bbc052fd2c1e07394a280e009667ed6f989d69942944973c6d558feda3d1c3358d50dff7bdd2c1fb8021ade354c814396f3fc7c17209d79e6c4952e91a6ec461a7cc945887c3bce662f5449d7b817758d7db37c9b2d74a1e7f0e05c28fce1ed8803f1e214667d299c1bd9653c497bea87774d74ebc16b76bee5c7e6ba19f460cafc8a531b56ea9d086e7f82153806b9840ec4fa711abb32a8728e81b51406040e0c274c260aa9b0b468d88f95b045258ddd448a48b9879"], 0x6fd) 7m52.760577343s ago: executing program 0 (id=2129): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_COMPRESS_FILE(r0, 0xf518, 0x0) r1 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) close(r2) write$cgroup_devices(r2, 0x0, 0xa) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r4, 0xc01064ab, &(0x7f0000000240)) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000001c0)={0x200, 0x9, 0x6, {0x2, @sliced={0x5, [0xca, 0x7, 0x5, 0x2, 0x6, 0x0, 0xc5, 0x6, 0x4, 0x2, 0x9, 0x3b77, 0x6, 0x5, 0x10, 0x114, 0x7, 0x6, 0x6, 0x9, 0x1ff, 0xfff, 0xffff, 0xe600, 0x1, 0xba, 0x0, 0x800, 0xff, 0x2, 0x0, 0x1, 0x4, 0xea7d, 0x6, 0x8c, 0x1263, 0xff, 0x2, 0x2, 0x7, 0x7, 0x7710, 0x6, 0xc, 0x9, 0xd1ff, 0x9], 0xf9}}, 0x1}) ioctl$VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000340)={0x3, 0x1e, 0x3, {0xa, @vbi={0x2, 0x2, 0x4, 0x34325842, [0x70, 0x6700000], [0x8, 0x10000000], 0x1}}, 0x1ff}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) rename(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)='./file1\x00') ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000140)=@userptr={0x9, 0xa, 0x4, 0x40, 0x3, {0x77359400}, {0x0, 0x2, 0xcb, 0x7, 0x5, 0x1, "902e5cf7"}, 0x100, 0x2, {&(0x7f00000000c0)}, 0x6}) 7m52.618381345s ago: executing program 0 (id=2130): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x2, @none}, 0xe) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="00000080000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8932, &(0x7f0000000000)={'dummy0\x00'}) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f00000001c0)={0x1, "7394ec81250cec499ed659b0ba21d506102e8e48db4b1c833a09f061f5e0e4e9", 0x3}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000000000000000030000000900010073797a3100000000080002400000000614000000110001"], 0x50}}, 0x20044084) close(r5) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000009060102000000000000000000fbff000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000200)={0x0, 0xfffffffffffffcfb, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000000306010800000000000000000600000705000100070000000500010007000000050001000700000005000100070000000900020073797a3000000000050001000700000005000100070000000900020073797a30000000000900020073797a30000000000900020073797a31"], 0x74}, 0x1, 0x0, 0x0, 0x200080c1}, 0x20046010) 7m52.299342032s ago: executing program 0 (id=2131): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001080)=ANY=[@ANYBLOB="000086dd0000ee0600000000000060fc030006c72c00fe8000000000000000000000000000aaff0200000000000000000000000000013a00000000000000020090780000d93f640000000f081120fe880000000000000000000000000001fe8000000000000000000000000000125d02000000000000070f55b5d747d5ce5853e308cdbcf10ddd0000000000000016c9000000000000c20400000000040100c204000000400708000000040004c8060230471c193e445fffa682333b6ea5d9758e49d1f56a2cacf058c91036aa2a98b0af004e6f5acbbab33a8a5a9112f348b1a0089ddf5d100402cf846849a5c61cd7554140293b1191985ab08825ff716bc3ec7c318469d1e246d1c2b6f9ac2da9fa05bbc052fd2c1e07394a280e009667ed6f989d69942944973c6d558feda3d1c3358d50dff7bdd2c1fb8021ade354c814396f3fc7c17209d79e6c4952e91a6ec461a7cc945887c3bce662f5449d7b817758d7db37c9b2d74a1e7f0e05c28fce1ed8803f1e214667d299c1bd9653c497bea87774d74ebc16b76bee5c7e6ba19f460cafc8a531b56ea9d086e7f82153806b9840ec4fa711abb32a8728e81b51406040e0c274c260aa9b0b468d88f95b045258ddd448a48b9879"], 0x6fd) (fail_nth: 2) 7m51.853106311s ago: executing program 35 (id=2131): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x6fd) (fail_nth: 2) 4m49.732018658s ago: executing program 5 (id=2834): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000001c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x40, 0x19, 0x2, "0500"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000140)={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 4m46.271419528s ago: executing program 5 (id=2849): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000170000006c000680080001000f00000008000600090000000800060005000000040005000800060009000000420004"], 0x80}, 0x1, 0x9400, 0x0, 0x4}, 0x4000004) 4m46.057745523s ago: executing program 5 (id=2850): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7, 0x43}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x40040c4}, 0x4010) r3 = memfd_secret(0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f00000006c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f00000001c0)={0x4a4, r4, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9f7}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x419}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x94ea}]}]}, @TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x394b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x23e75335}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x72}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xdda5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff1}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER={0x3c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0xde180f2, @local, 0x5}}}}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xaa2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffff6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7f}]}, @TIPC_NLA_MEDIA={0x34, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbb7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}, @TIPC_NLA_NODE={0x1c4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xe}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "302b90d433d328beb7b5b61ef0b0c242bbfa9eeed911253285f7cf526e8c3f4d"}}, @TIPC_NLA_NODE_ID={0xbb, 0x3, "4de481f9e6e4d1889c7a555c66d54f5a26e019c871ab6ab222225b05d50a9837caf61a39395d853f20d0e44d7d74ca2d631b81dbd7089e434d41d2cfb61a487ece1e80b666bb58e92691c10de2072698fff4efff153d5725d8175f2a86e5fb85c2eab0a075159072c891f5a0799c08b36e6da4c60a4554e9fdc4f4cca0ba8dc1d2f13c7f8125d9eea6dd3a97d973138989f8507b3e601161c6993a167baaf5e56034dd2e631948d30a0dc4c7054bddafabd02408f9d0f1"}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "9103550f6119214138b7780844804981e8705278df43c476447da503d512c58e7a"}}, @TIPC_NLA_NODE_ID={0x4a, 0x3, "ecad0e31875b47400f0e5e369e08710d7683079a21925849068b3112130e3560302f1826aaea6ba78476c66077bd78097877bec239c4a9acf35fb03f032398a90eb0b3b57357"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_LINK={0xc4, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfc000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6961}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x4a4}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, r5, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000840)={0x2, {0x2, 0x5, 0x6fc, 0x0, 0x3ff}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000880), r1) syz_genetlink_get_family_id$fou(&(0x7f00000008c0), r1) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000940), r1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000980)={'vxcan1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000b00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000009c0)={0xf0, r6, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x28, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x19}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x24, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x6c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x40010}, 0x24000800) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000b40), 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, 0x6, 0x1, 0x4c7c379612270823, 0x0, 0x0, {0x1, 0x0, 0x4}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8, 0x110, r1, 0x561dc000) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = getpgid(0xffffffffffffffff) fstat(r0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) sendmsg$netlink(r3, &(0x7f0000001280)={&(0x7f0000000c80), 0xc, &(0x7f00000010c0)=[{&(0x7f0000000cc0)={0x3c8, 0x13, 0x1, 0x70bd2b, 0x25dfdbfc, "", [@nested={0x17e, 0x14e, 0x0, 0x1, [@nested={0x4, 0x131}, @nested={0x4, 0x29}, @nested={0x4, 0x63}, @nested={0x4, 0x99}, @generic="d015f5c6bdfd589abed901d5941b7b3f51f0dcd4bff7183f816b3a12fe2db44343ea743603f44ebdacc662bb8638ca4de7d8dafbf3bb3834d245f896cb60193b9fca4870ca1b038e61a505603c798138630238ecf7587b4c9c89874387528275d766a43f7420f3a1cf3415a8af36a6a2f77febd3a57437f38839c12d7d07c9986496348de9fbfd32d05c9eb05ea9ced4f1776c815908f1f6640b71c265c18f6b77242cf2cd1dceb9c1cc5d", @generic="da82eac92ccc4fbb1a8c8d4539f1924fbd5cd468f84003af5e446893518c12d0f064ab7b35ecc8d39f4237f92630c2d41b60ecc5bb973402c2bbc4fe672f3502aa02a54d6be074d50aafed53afe8803b4b2b90a667dca10fd45be67ab3e543e9577627e16595eb4d64fb76", @generic="37ef93ebc685d9d44870c879b9901b25e205ab49a3f218ae198ccfae59b58e6c28d5d99ce9af3e9ac927f45d633ec869aa6c99f5fc8918665d3478309af6b11aa79e957b7951897088ed461c", @nested={0x4, 0xe0}, @nested={0x4, 0x9f}]}, @typed={0xc, 0xf, 0x0, 0x0, @u64=0xcc}, @generic="f1c0fe992d34a92d1cd1f34aacdcb2641b846d3e68be860cde7f0acc7bd98bff1f28807ef6ac7afd9b0532034fb04a573388e53d2c8d01d27529a2674059fcdbb61a192de1847281c7151de1f06b6d4fb8b5a5ed39a796e910e24ba5fdb314102e80a62cd3c5a34038fd39945e7c1f59b7f80308b4947b1424757e146762db5bf9251b64bdf988fc", @generic="3c4ce569cbaabb85214ca9f1902516cebfaccf6583f832fd84ea94677288143eecc885f4420f49f96cc34856e13e8affae1768e738dcc19149c9537f03176a0af24fd563b6ce37099bcb453622dee76b55264967a02dc887e03388834a3435e754d0d4b1247b33d46d6cf1aa7d0abe346d5af96244713c85090332bb26694691ecb0b217f117526504fa69ad2b657fd32c37a4342db0b80ef481ef100982b5e6ae0beffa7fa0ee5d9526a6e3209f93841ed6f525824bbbc2a66baa94ca6bdabfd6f52955f90e87", @generic="402e4055b88d8a6349735e461dc117af9f69255587067797cbd0e3c9ef4d03560a307dc322c66660ad3839e6443e3df946e33970f8dd77546a11399f62b86cf1cfca79612002fc2814b8090de2b5ac510e7d0df012db8a57e1d2283ebd3164b4209611742e62a9cd3c5afff2fc9da9544484a20cce30668bb877bc94c33b452f0d3dd6793f4b70883b23c7b144e5eee80335c90ea56c442a6eba3019e758a305168d2f93d727ff02ea6181d2d5e963da94c7841af46e7308232157a2d57a4d73ae9f541c65cfa9530de78f21b148161fa10843a6dfd15c9cbf917b4a55"]}, 0x3c8}], 0x1, &(0x7f0000001240)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0x20, 0x4000}, 0x20000001) socket$alg(0x26, 0x5, 0x0) sendmsg$TIPC_NL_SOCK_GET(r3, &(0x7f0000001400)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001300)={0x88, r4, 0x102, 0x70bd27, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9ab}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80000000}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8040) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001440)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001480)={'veth0_to_bond\x00'}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f00000014c0)=0x1, 0x4) recvmsg(0xffffffffffffffff, &(0x7f00000018c0)={&(0x7f0000001500)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001880)=[{&(0x7f0000001580)=""/210, 0xd2}, {&(0x7f0000001680)=""/164, 0xa4}, {&(0x7f0000001740)=""/251, 0xfb}, {&(0x7f0000001840)=""/57, 0x39}], 0x4}, 0x10000) 4m46.032776737s ago: executing program 5 (id=2851): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0xffff1000, 0x7, 0x22, 0x7ff, 0x0, [{0x40, 0xfa, 0x4d, '\x00', 0xff}, {0x9, 0x5, 0x3, '\x00', 0xf1}, {0x2, 0x6, 0x3, '\x00', 0x6}, {0xeb, 0x9, 0x22, '\x00', 0x2}, {0xf7, 0x6, 0x10, '\x00', 0x1}, {0x3, 0x4, 0x7, '\x00', 0xff}, {0x10, 0x81, 0x9, '\x00', 0x7}, {0x80, 0x3, 0xc, '\x00', 0x6}, {0x40, 0x65, 0x4, '\x00', 0x3}, {0x1, 0xfe, 0x4, '\x00', 0x7}, {0x3, 0x5, 0x2, '\x00', 0xff}, {0x0, 0x7, 0x6, '\x00', 0x42}, {0x5, 0x2, 0xff, '\x00', 0x1}, {0xc, 0x37, 0x9, '\x00', 0x6}, {0xcc, 0xd1, 0x0, '\x00', 0x15}, {0xa2, 0x1, 0xa7, '\x00', 0x3}, {0x80, 0x7, 0x2, '\x00', 0xe}, {0xa5, 0x4, 0x5, '\x00', 0x6}, {0x42, 0x9d, 0x8, '\x00', 0xf}, {0x1, 0x1, 0x11, '\x00', 0x50}, {0x9, 0x3, 0x2, '\x00', 0x5}, {0x4, 0x7, 0x0, '\x00', 0x2}, {0x9, 0x0, 0x5, '\x00', 0x3d}, {0x4, 0x4, 0x1, '\x00', 0x4}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0xc00, &(0x7f0000001180)=ANY=[@ANYBLOB='quota,usrquota_inode_hardlimit=7']) chdir(&(0x7f0000000240)='./file0\x00') mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') setxattr$incfs_metadata(&(0x7f0000000000)='./file1\x00', &(0x7f0000000180), 0x0, 0x0, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r4, 0x29, 0x4e, 0x0, 0x47) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f00000000c0)=0xffffffff, 0x4) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1) fsmount(r6, 0x0, 0x4) 4m45.638205921s ago: executing program 5 (id=2852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000020a01040000000000000000010000000900030073797a31000000000900010073797a3100000040000000000000004000000005080002401b2fd2c5140003006970366772653000000000000000000028000000000a05000000000000000000010000080900010073797a31"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r1 = memfd_create(&(0x7f0000000000)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06F\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842kgA]\x1e\x88\xecif\xee\xba\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLD\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10', 0x7) fcntl$addseals(r1, 0x409, 0xe) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000180)={0x0, 0x1, 0x6, 0x1ff}) 4m45.292626171s ago: executing program 5 (id=2853): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0x200101}, {{0x0, 0x0, 0x0}, 0x2044}, {{0x0, 0x0, 0x0, 0x900}, 0x8}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/216, 0xd8}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000002e00)=""/4095, 0xfff}, {&(0x7f0000000340)=""/240, 0xf0}], 0x4}, 0x101}], 0x4, 0x40010020, 0x0) 4m45.060480784s ago: executing program 36 (id=2853): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000003f00)=[{{0x0, 0x0, 0x0}, 0x200101}, {{0x0, 0x0, 0x0}, 0x2044}, {{0x0, 0x0, 0x0, 0x900}, 0x8}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/216, 0xd8}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f0000002e00)=""/4095, 0xfff}, {&(0x7f0000000340)=""/240, 0xf0}], 0x4}, 0x101}], 0x4, 0x40010020, 0x0) 3m38.094054618s ago: executing program 1 (id=3193): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4, &(0x7f0000000600)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) open(&(0x7f0000000300)='.\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000f40)={0x2020}, 0x2020) (fail_nth: 1) 3m37.0844387s ago: executing program 1 (id=3204): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="201107"], 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f00004be000/0x2000)=nil, &(0x7f000099b000/0x3000)=nil, 0x6, &(0x7f0000000000)=[{0x200, 0x6, 0xffffffffffffffff}, {0xff, 0x8, 0x4}, {0x9, 0xd77d, 0xa5}, {0xdf1, 0xd, 0x1ff}, {0x1, 0xfffffffffffffffd, 0x7}, {0x0, 0x3, 0x2a23}], 0x6, 0x5, 0x8, 0x8, 0x2, 0x34}) 3m36.276024721s ago: executing program 1 (id=3218): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r2 = socket(0x10, 0x3, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008400)="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", 0x2000, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) mount$overlay(0x0, 0x0, 0x0, 0x184080, 0x0) r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f0000000000)='./file1\x00', 0x2000, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r4 = socket$inet6(0xa, 0x1, 0x0) sendmsg$inet6(r4, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0], 0x30}, 0x4000010) r5 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r5, 0x80044d03, &(0x7f0000000040)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200002, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000280)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r6, 0x400454cb, 0x1) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x7, &(0x7f0000000340)=[{0x5, 0x8, 0x4, 0x7ff}, {0x80, 0x90, 0x2, 0x1}, {0x1c3, 0x1, 0x3, 0x10}, {0x100, 0x7, 0x8, 0x4}, {0xf7c, 0x0, 0x6, 0xc0000001}, {0xffff, 0x3, 0x80, 0xd309}, {0x9, 0xab, 0x6, 0x2}]}) close_range(r7, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fstat(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, 0x0, r8) linkat(r3, &(0x7f00000001c0)='./file1\x00', r3, &(0x7f0000000200)='./file0\x00', 0x1000) syz_fuse_handle_req(r0, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529d91d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0xfffffffffffffffe, {0x2, 0x3, 0x0, 0xa6, 0x4000, 0x3, {0x3, 0x4, 0x1, 0x41c, 0xfa, 0x6, 0x0, 0x1, 0x1, 0x6000, 0x200000, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x107, 0x1ff, 0x9, 0x0, 0x0, 0x0, 0x8}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) 3m35.284602402s ago: executing program 1 (id=3227): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$cgroup2(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x800010, 0x0) (async) chroot(&(0x7f0000000100)='./file0\x00') (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000180)={0x1, 0x0, [{0x400000f2, 0x0, 0x6}]}) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) (async) chroot(&(0x7f0000000000)='./file0/../file0\x00') (async) pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 3m35.171672225s ago: executing program 1 (id=3228): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000002c0)) 3m34.948620748s ago: executing program 1 (id=3231): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5c}, {0x6, 0x0, 0x0, 0x7ffffe39}]}) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x101, 0x0, 0x12}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x7, 0x0, 0x5}, 0x8, 0x5}) 3m34.664243451s ago: executing program 37 (id=3231): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) (async, rerun: 32) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5c}, {0x6, 0x0, 0x0, 0x7ffffe39}]}) (rerun: 32) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x101, 0x0, 0x12}) (async) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) (async) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000040)={{0xffffffffffffffff, 0x2, 0x7, 0x0, 0x5}, 0x8, 0x5}) 7.964426921s ago: executing program 7 (id=4816): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0xfffffffffffffffe, {0x2, 0x0, 0x0, 0xa6, 0x4000, 0x3, {0x3, 0x100000000000, 0x1, 0x0, 0x40200, 0x6, 0x0, 0x1, 0x1, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(0x0, 0x2) write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x107, 0x1ff, 0x9, 0x0, 0x0, 0x0, 0x8}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) (fail_nth: 4) 6.980046152s ago: executing program 7 (id=4822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44000}, 0x8042) 6.861327613s ago: executing program 7 (id=4831): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x178}}, 0x0) r1 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000480)=ANY=[@ANYRES8=r0], 0x0) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000104c05a00b0000000000010902240001000000000904000001030000000921f5ffff00220500090581034000000000"], 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) r4 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f00000000c0)={0x0, 0xfffffffffffffffd, 0x9}) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r6, 0x891d) r7 = fsmount(r5, 0x0, 0xc) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="0c0000000200010004"], 0x408100) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f0000000640)={@generic={0x2, "fa2eacd3c71b0d327b3e9eb985b12423ec2105933e08f1215a25a3d240cd1f8af86348bc03b5995aa875ce826c8cdb0f74587533a914eeab8fab25f63876cbbcb65066efdd9b7c429db0b42c3d6b5e1ad545009361d84242f2470f384ab99a1d42ea84106a1945d10145bace7b7d540594d16bbad55b69c0aaa4e092313e"}, {&(0x7f0000000540)=""/243, 0xf3}, &(0x7f0000000040), 0x3f}, 0xa0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f00000002c0)={0x0, 0x22, 0x16, {0x16, 0x23, "ff7dbd0b342790b332d8c143e8b52873d5c7f9fc"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a70000000060a010400000000000000000a0004010900010073797a310000000044000480400001800e000100627974656f726465720000002c000280080005400000000808000440000000550800034000000001080001400000000108000240a80000130900020073797a32"], 0x98}, 0x1, 0x0, 0x0, 0x4000015}, 0x24000000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r9, 0xc058534f, &(0x7f0000000400)={{0x0, 0x1}, 0x0, 0xfffffffe}) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x1, 0x12, "14e94d0e2ee5b1a615788bb747399cdeba23"}, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f00000018c0)={0x84, &(0x7f0000001480)={0x0, 0x11, 0x3, "f45f0d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.497673538s ago: executing program 7 (id=4842): r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000080)={0x60, 0x2, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0xe2a5, &(0x7f0000000040)=[{0x8, 0x7ff, 0xe}], 0x1, 0x5f87, 0x18, 0x21, 0x8, 0xe}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xf, &(0x7f0000000000), &(0x7f0000000080)=0x2) preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {0x0, 0xfffffeef}], 0x2, 0x1, 0x9) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000001380)={0x1dc, 0x40, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@nested={0x10, 0xa4, 0x0, 0x1, [@nested={0x4, 0x14}, @typed={0x8, 0xc0, 0x0, 0x0, @fd=r0}]}, @typed={0x8, 0x66, 0x0, 0x0, @ipv4=@local}, @generic="3970f8a8426f6e651272d1dab2c8d49f28c7222756d32b290f6d3ab3fe6eee068619ed75a356e5aa110cb02efbc8cebfd3ea5651b8eca826db6f3294c2ba78a54d80dd99d8e2d435bc4eac0e37b63e1fabd0d1a4c84d9063da867314b2370b6ef97e0d1e761daa136b18c4928240996f546e4b2b5b5a67b722ecc8b0afcb473cf1c04c5569240fb7b7317fa1f93c95aa54a6f8ef8eb563bedd5f2c4a32fee35886d7da5872fd81ddb30f9d2a2e4bb859643c796fd0a6889f3178235828c314ea7979bdad590723d12018b839e6ae02a449fc81e551a7c91cb03896ce732e", @typed={0x8, 0x1e, 0x0, 0x0, @u32=0x3}, @nested={0xc8, 0x4f, 0x0, 0x1, [@typed={0xb1, 0x122, 0x0, 0x0, @binary="e8dc529e8cc77f1bdc4c81c56d07f93a96dd35e75342c59ad19005404d9936aaa79ff52c6c4b3a1bfe5bd2e891d19b70ed1a3c972aec6fadea9e92632dd0094587904632931196222df4ea77251d9408f0aab385f4b8226cc86f8df7a4e87d66fd259be18e7fe009cd46f9c52fb895c9689e5eefb1c0e9ee758f494151c0fabd28a8f0ade5e9cf80c6d0090a3ac88c14e92f2b0c27d342b426163daab484ea3ed30cd0a829dd0a33a4fff50255"}, @typed={0xc, 0x70, 0x0, 0x0, @u64=0x8}, @typed={0x4, 0x149}]}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_clone(0x400, &(0x7f00000001c0)="c3248496bab3b369126dfdb34fbd14843ac8ec23200f88492b5dd51bc00b430f", 0x20, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="9cee") 3.262497636s ago: executing program 7 (id=4852): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="0d32818e", 0x4}]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setresuid(0x0, 0xee01, 0x0) r3 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x14, 0x0) 3.261890169s ago: executing program 8 (id=4845): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)=')\x00') sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xb}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 3.146518227s ago: executing program 8 (id=4846): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="0d32818e", 0x4}]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x3, 0x2}) 2.891746309s ago: executing program 6 (id=4848): r0 = fsopen(&(0x7f0000000000)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='auto_da_alloc', 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) (async) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x3, 0x4) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xff04}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f00000009c0)={&(0x7f00000000c0)={0x2, 0x4001, @empty}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) (async) sendmsg$sock(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='k', 0xffffffe2}, {&(0x7f0000000140)="ce15fc9dc237ed5b37773a15b2f2615b0230a382c5bd51f04ff7e6c1f67c42c528244c3436e3d42cd667901a878ce7a4ebb5c55bd9c6f14079c1afebfbd8107a4a469b59ae1543bdc3085d6a10876755db8093b364"}, {&(0x7f0000000040)="fe07e4ad9a397dadc913c79649675cd17df8bf86309a"}, {&(0x7f00000001c0)}], 0x1, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x25, 0x303}}], 0xa}, 0x4000081) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) 2.137983619s ago: executing program 7 (id=4854): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="28000000120001000000000000000000100000000c000000000000000000000008001d80b11c049cf41fb8fea5a0e9fe44252e3b12ed5665bd5ee465a5ea1c"], 0x28}], 0x1}, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x60642, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000540)={0x2c, &(0x7f0000000380)={0x20, 0x0, 0x19, {0x19, 0x4cd16230f7a4bf99, "c8d485279e41f6bc2c8622c2b78f44a614a9e6917abce6"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_S390_VCPU_FAULT(r4, 0x4008ae52, &(0x7f0000000100)=0xc) ioctl$TIOCSSOFTCAR(r3, 0x541a, &(0x7f0000000040)=0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_TMR_TEMPO(r6, 0xc0045405, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="500100001a00130429bd700000000000000000000000ffffffffffffff80000020010000000000000000000000000000000000004e2400000a0000203b000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0a0101020000000000000000000000000000000032000000e00000010000000000000000000009000000000000000000feffffffffffffff0000000000000000000000000000000008000000000000000000ee000000000081000000000000000000000000000000030000000000000005000000000000000400000000000000060000040000000000000000f9ffffff20000800000000000000000002000481680000000000000060001200726663343130362867636d286165732929000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8d6a000000080"], 0x150}, 0x1, 0x0, 0x0, 0x612fc0b6c779297b}, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x7, 0x0, 0x0, 0x2}]}, 0x10) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2.092185645s ago: executing program 8 (id=4856): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000080a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000100000000010000000900010073797a30000000000900020073790800000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003"], 0x104}}, 0x48880) 1.918397599s ago: executing program 8 (id=4857): syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYRES8], 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$cdc_ncm(0x3, 0xad, &(0x7f0000000b40)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9b, 0x2, 0x1, 0x7f, 0x0, 0xe9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, '\b'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x0, 0x101, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x37}, [@dmm={0x7, 0x24, 0x14, 0x1, 0x6}, @dmm={0x7, 0x24, 0x14, 0x0, 0x6}, @mdlm={0x15, 0x24, 0x12, 0xe7}, @mdlm_detail={0x1b, 0x24, 0x13, 0xff, "827bf94a8cfbb65e2708f44db90dd03f8ab7ec4741616a"}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x4, 0xc, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x2, 0x0, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x6, 0x0, 0x80}}}}}}}]}}, &(0x7f0000000e80)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x5, 0x0, 0xb, 0x8, 0x6}, 0x10f, &(0x7f0000000c00)={0x5, 0xf, 0x10f, 0x3, [@generic={0xf4, 0x10, 0xa, "ac55292ff2e522e81ed6cb0fb1f9b4eaa5466da10221b5e63b35a235def5135a3bfc16318e40672d28fbba921572cdacb6e15bf9d0518cfaa93bffedf64f7522ae907895feedd74b93b766aac9484efb5879b11015b882a9980bb786eacf4e5bac8f1bb9ceb00fc2c22b9520ad6dcbad58c2ca426bc2e39ee65088c6bd17de1374c32e9004b2aa1ec9b2797990915ed33f951bd00c30959c0766743fc25324b0e8c630ea46f62575be6de9100f755a8530aed7bb9fbfac7d1e79254ceb0b279b01798996becc640d9de9200d667caacd4eb92d1b23db69ed0aa3e3f92205fb391256788299b7aded32d6359ff2e3d5757c"}, @ssp_cap={0xc, 0x10, 0xa, 0xfb, 0x0, 0x0, 0x1100, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x9, 0x6, 0x1}]}, 0x3, [{0x3c, &(0x7f0000000280)=@string={0x3c, 0x3, "54f7dbb6ae1dc0c1c2e08656c1c4eae08c743f16166db12c8c01fd6d482f48c3e0b60041a490f06cf9e4dd0eebf68d7b023038d08cd30b76f1de"}}, {0xfc, &(0x7f0000000d40)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f0000000e40)=@lang_id={0x4, 0x3, 0x812}}]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000300)={0x0, 0xfffffffb}) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0xe, 0xa}, {0x9, 0x8, 0x7, 0x110, 0xffff}}}}, 0x17) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f00000006c0)=0x1a38, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) recvfrom(r3, 0x0, 0x0, 0x2120, 0x0, 0x0) writev(r0, &(0x7f0000000a80)=[{&(0x7f0000000440)="00c52d8e15af2b68c3efa1c639fb1408762d13452f92faefc56b21e37cd0fbed2bacacba129b3bc6c2454f575084a0536a424651e1809b65fb95f6c1935764770e1826aa46871c5afc383b40552ba8db31d3b81c3ebb4bb8ff08aec4a9ce3564ba9ae7aa03161b2ae31c4ee242032c986ace6e9e0455ff3d70582a8b80111ab912b3d12a06166e4cabd79cbe5cf1efa06489fea950327d8f4a06b41aa26a10bd971283dfdf73d37d8c1702eb4c7160ef758fdb38d6c5c0d86c94996d95e0ab", 0xbf}, {&(0x7f0000000180)="a362a5067c90a7288e165e14a7019810583b52e005a0772a0c749ff391f91c04a64da5", 0x23}, {&(0x7f0000000500)="a834ed191644967f764a4a2819cf3f9b9472d826632970d044abfa039da9142b151503060b0163d40c662816283ba18014cc685976e80f47a75dfc93ca0a46fa21edaf597abeea9be66bd4d9dd7e127bc4104869c1adbbd23a725ee8ead5f6198a58f77bf1fef58d716275deefcdda67e7df2663a7a4c9a5402ae544fc4edec11b80706f6e9424f7ad927988bb9b6b08", 0x90}, {&(0x7f0000000680)="e7c26c374439059020fe9f50c798087776b0912fd51e0a6367b7df5ca1ce57f225601d1dc0a0776c30d72f8a822ec483cafeac36adaee2e926b1ef0068427b1ef9", 0x41}, {&(0x7f0000000700)="93c831823836a0c3ddfba08b8f2b8a351fd1d80068da51c3e724b118e65ba812dbdea623b52ac39052dbff587bca3e82ce04ea5707a9c916a43818c77f0ade6b28478b1e4d759060f3d4f04a5fa10ed12049", 0x52}, {&(0x7f0000000780)="ea52e5d4345d125d525be4b61351aad23ffb6376607d89d87075819413d4d992cf2f34500355a07f54b7771dd4910a2fe8d3802cebb4a23dcb795806e20ad456bf54ea704468bfe9c714bdf6529ef18b8e1b369d5688a6605fbcac3fd2536f15d6f63da32c3d63ec406a8250a45a4c8c24f6622e4dc41e926b62bfa1877f5772a199044c5c8eca0bcd15083dee45b5aaeed43a58d90998485009f94e935894aaeb", 0xa1}, {&(0x7f0000000840)="8bdc882c993411f147958dec3dcc1ae485915d60fc1d2ebc6236cf878d36de3335252b0ca0454348d2a202067e489d6ebfc06f75d84b497765dd4f74e7a753db58901afbe5dbfb1ae188ca377b7d47a2bc3b0314f06bcde1b722c4f4133569cd876d5edf3f4ddcf143eccb5fa766e28cfdc3747172f95d7dc66b8cfdb2459cdaa06cf129cc026e9d99", 0x89}, {&(0x7f0000000900)="4a9fbfdc84f06eb7c3ea36ed681fba24fe286e159ec3db05673c499db2dd0e71ffd480ff86486fcaea2ae9ca5c7bb41ac62f9b4a69bfe21c496f03549ccee73a1f1cf15e90dc96deab2b0568bb78342a0b3771263e962edf3f2635fa14e567414797b38fa45409bc09c2a379a06423a478c93b2138ff6d3fec1aae3a78799c", 0x7f}, {&(0x7f0000000980)="e30309fc4cf6c0bd2cbf83c11e4888a8d48fabc67920cc346267c2f257ce26ddfe763cad9bdc9dd01b62533609bae6dae96cc6b2e5d093f60be9eed10d27a4712a819fdc5a18a81c88aafdcaaf7b267ce58a1eda35f5aa42fe96123a5afb95d612646d13fc896a746caec94355a5b06b4e063d15aacf1985d43c23e920b6c1439778daf9e7bc684ed07388f0c1cb496143f8f44c6f79952e137d79876c2fb55f1c4306e8237c14385c93056c7ef8c3e4a9b55d98a6c126cfe0fc1b074df4162aa5fbc8f3985391ca0416", 0xca}], 0x9) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) madvise(&(0x7f00004d5000/0x4000)=nil, 0x4000, 0xc) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x64}}, 0x0) r5 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40088a01, &(0x7f0000000000)) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a3100000000090001007b797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) 1.736269638s ago: executing program 9 (id=4859): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000010000000a20000000000a01010000000000000000050000000900010073797a300000000058000000030a01030000000000000000050000000900010073797a300000000008000b00"], 0xa0}}, 0x0) 1.594393676s ago: executing program 9 (id=4860): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) write$binfmt_elf64(r3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d0000f0ffffffffec08000000000000f0ffffffffffffff0000000000000000080000000000000003"], 0x5b0) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) fsetxattr$security_evm(r2, &(0x7f00000002c0), 0x0, 0x0, 0x3) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x3c, r4, 0x200, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "a0f9f202eb"}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "d215c32a8bc51aa717cda9c5ec"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4010) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) open(&(0x7f00000021c0)='./file0\x00', 0x48442, 0x182) mount$nfs4(&(0x7f0000000200)='\\]\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[]) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) sendmsg$netlink(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="110000005a00010100"], 0x1c}], 0x1}, 0x0) setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000100)=0x5, 0x4) write(r5, &(0x7f0000000000)="2400000011005f0414f9f4070009040081000000200000000000000008000f0001000000", 0x24) 1.512975025s ago: executing program 9 (id=4861): setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x0) (async) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000140)={{{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x180, &(0x7f0000000280)={[{@uuid_off}], [{@flag='dirsync'}, {@uid_gt={'uid>', r1}}, {@measure}, {@audit}]}) (async) lsetxattr$security_capability(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000300), &(0x7f0000000340)=@v3={0x3000000, [{0x3, 0x8d}, {0x2, 0x1}], r1}, 0x18, 0x0) (async) setxattr$trusted_overlay_nlink(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000003c0), &(0x7f0000000400)={'U-', 0x5}, 0x16, 0x1) (async) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000440)=@rnullb, r1, &(0x7f0000000480)={0xdc, 0x5e, 0x1, 0x2}) (async) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f00000004c0)) recvfrom$packet(r2, &(0x7f0000000500)=""/101, 0x65, 0x102, &(0x7f0000000580)={0x11, 0xf6, r0, 0x1, 0xf6, 0x6, @local}, 0x14) setxattr$trusted_overlay_nlink(&(0x7f00000005c0)='./file0/file0\x00', &(0x7f0000000600), &(0x7f0000000640)={'L-', 0xe}, 0x16, 0x2) (async) rmdir(&(0x7f0000000680)='./file0\x00') (async) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000006c0), 0x40400, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r3, 0xc0189377, &(0x7f0000000700)={{0x1, 0x1, 0x18, r2, {0x1, 0x9}}, './file0/file0\x00'}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r4, 0x2) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000800)={'syztnl2\x00', &(0x7f00000007c0)={'syztnl2\x00', r0, 0x20, 0x20, 0x100, 0xd9, {{0x6, 0x4, 0x0, 0x3e, 0x18, 0x68, 0x0, 0x6, 0x4, 0x0, @local, @local, {[@noop]}}}}}) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x4) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x60, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004040}, 0x8040) (async) ioctl$F2FS_IOC_DEFRAGMENT(r4, 0xc010f508, &(0x7f00000009c0)={0x1, 0xffffffffffff433e}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000a00)={0x0, 0x4}, &(0x7f0000000a40)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000a80)={r8, 0x6}, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000b80)={'ip6tnl0\x00', &(0x7f0000000b00)={'syztnl1\x00', r7, 0x0, 0x50, 0x91, 0x3, 0x12, @private2, @remote, 0x7, 0x700, 0x80000000, 0x6}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000001240)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001200)={&(0x7f0000000bc0)={0x63c, r5, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_FEATURES_WANTED={0x23c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '/dev/autofs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'trusted.overlay.nlink\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'audit'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, ',$]%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'dirsync'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe0}]}]}, @ETHTOOL_A_BITSET_VALUE={0xb5, 0x4, "17a1dd049fb97395772dbe4d0a26f7a193dbbd8db65ac015f397b8a1154d4720625c6bde3fcf933e549f646447fc21797f1b9fea0a96eb326f1244704c035e3d81edea0137115db88d636a30984d44eb7babefbd4127d84172ddfc755e2b75a57b12b1acf929a869df4efff957e0c9c9679786f86c8044ed5fae36bc56e2991970945043a545bdd8ffa08512017ebd52123d88ca55e9fdc50d334b966ed34e03d86abf8ada06a6ee85fcd885cbcc77488d"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffff52}, @ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'dirsync'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '-,{/+/+./\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'y\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'L-'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'z\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x2ec, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/rnullb0\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'uuid=off'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\xc1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x138, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x82d}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '&#::$\xf9\'].)\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '{\'\xc3\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ']-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'U-'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, 'U-'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff0001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\xaa\xaa\xaa\xaa\xaa'}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, '[[#{\x0f\\\\\'[\\}/\'&@\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_BITS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '*-:{\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0xcc, 0x4, "f7d5f2ff5d4dff899d5952500eed5c7200692eb5574a9cd7c069af291b6c5da44cf913438a121eb41ba5a7cf07c951a5ee6cfc9ef94f322c1003443152170c51167a596b8d28b9ff4020511ba0b42d90b428cdb726844b8788ff964e9d56a36f995f7c51d4be375e65181ee260e457cd7e979b5f00bc325c900f50af74b14b506da8ae00ca1562b85f5d69ab8a25ad80a5b5214d9004e62fc55334a06dc12557b333a3498cf1507ecd565dc686cf462ffb5e1d9e8cf891e63a2a0df3dd6d56a6a199a10b664e90a8"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x39f127ff}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}]}]}, 0x63c}, 0x1, 0x0, 0x0, 0x1}, 0x64000000) (async) ioctl$SNDCTL_TMR_STOP(r4, 0x5403) (async) syz_genetlink_get_family_id$team(&(0x7f0000001280), r9) (async) sendmsg$DCCPDIAG_GETSOCK(r4, &(0x7f0000001580)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001540)={&(0x7f0000001300)={0x234, 0x13, 0x2, 0x70bd25, 0x25dfdbfc, {0x10, 0xe2, 0x81, 0xfe, {0x4e22, 0x4e20, [0x6, 0x204, 0x55, 0x6], [0xd, 0x0, 0x5, 0xf360], r7, [0x5, 0x8]}, 0x2, 0x5}, [@INET_DIAG_REQ_BYTECODE={0xbf, 0x1, "95f76a77ca4ddf5778c9989677e8ba5fdc11100295dd27ce8ec9184484c21299338e1460d81c03d70d830f49412384a856ad587662ad75ba14843aa5ed07dde0f7c53d3fdab5aadcedf65d1dd7b35359b54f7c2c85116918b0b9335e47e1e54618b045177cbea72377d418e9b494da5253ac6d8b3eb15cdb7ab0389f704baf8cdb020e2b0fd24416c9b26c28dae765a1230447b0cfa0d76da1c1883f404b998526739d54c812b5bbe6b72b10203ffdc5de15896512d54164c2ece5"}, @INET_DIAG_REQ_BYTECODE={0x94, 0x1, "4f84665d2db5ead2203793d6b304016a74a275d19a9545be6c7c2adf864a07a333e71003ce0f83aecbbc33c59167b290917248989eab4e59430b0c06ad0ec3b3500d9af7d720a80cdbb4742c7f04acea46487bdb0a6a404b83f9e5b50a4384849595d830c9d835834c13e433a28e06acc21bec848b4c4b9a97820e2d7ac9c55c004ffd79bb255cbfc3a87f7eb0ba6e28"}, @INET_DIAG_REQ_BYTECODE={0x87, 0x1, "c6c2f7f27de0619c640b6ae4d0b6fa4ee32307e1837078e6be032eed8a5aea1c011754b7962163d64420b6f065e5521e110e564c9a8ee446d6d0caaa97c4e87b0821cf7dce65ba43499028d15adac80075004cdcd96f5e9791a4b9a4d473ecf33b367ac750501317585fab1bdb5cd530103b7d04635d9d635d85ff2cfa1b64a5b9e249"}, @INET_DIAG_REQ_BYTECODE={0xc, 0x1, "7f05e28aeee1d2ab"}]}, 0x234}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) chmod(&(0x7f00000015c0)='./file0/file0\x00', 0x122) (async) mkdir(&(0x7f0000001600)='./file0\x00', 0x101) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003680)={{0x1, 0x1, 0x18, r3, {r1}}, './file0/file0\x00'}) 1.42772521s ago: executing program 9 (id=4862): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="0d32818e", 0x4}]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x38011, r2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) setresuid(0x0, 0xee01, 0x0) r3 = syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x14, 0x0) 1.346537201s ago: executing program 6 (id=4863): ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'pcl818\x00', [0x4f27, 0x5, 0x4, 0x6, 0x5, 0xcc9, 0x1000f, 0x4, 0xa, 0xfffffffc, 0x2, 0x1, 0xfffffffc, 0x1, 0x5, 0x101, 0x4, 0x1a549, 0x3, 0x40000003, 0x99, 0xcaa7, 0x81, 0x20001e58, 0xa, 0xe69, 0x3c, 0x9, 0xfffffffe, 0x0, 0xfffffff8, 0xffffffff]}) sendfile(r0, r1, 0x0, 0x201f00) 1.222645707s ago: executing program 6 (id=4864): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="0d32818e", 0x4}]) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r2, 0xc028aa05, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x3, 0x2}) 375.026467ms ago: executing program 9 (id=4865): ioprio_set$pid(0x1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r1, 0x0, 0x201f00) (fail_nth: 23) 272.109862ms ago: executing program 6 (id=4866): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000000)='asymmetric\x00', &(0x7f00000000c0)=')\x00') sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xb}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}}, 0x0) 146.455714ms ago: executing program 8 (id=4867): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}}}, 0x108) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000300)={0x1d, r2, 0x0, {0x0, 0xf1}, 0x2}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001c40)={0x2, 0x4, 0x3, 0x3, 0xe, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_address={0x5, 0x5, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e21, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, @sadb_address={0x5, 0x6, 0x9d, 0x60, 0x0, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x7, 0x4, 0x2d, 0x1, 0x40000000}]}, 0x70}}, 0x8040) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0xffffffffffffffff}, 0x18) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f00000000c0)=0x8) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x4e21, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}}}, 0x108) (async) socket$packet(0x11, 0x3, 0x300) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000300)={0x1d, r2, 0x0, {0x0, 0xf1}, 0x2}, 0x18) (async) socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(r3, &(0x7f0000001e40)={0x0, 0x0, &(0x7f0000001e00)={&(0x7f0000001c40)={0x2, 0x4, 0x3, 0x3, 0xe, 0x0, 0x70bd26, 0x25dfdbfd, [@sadb_address={0x5, 0x5, 0x6c, 0x0, 0x0, @in6={0xa, 0x4e21, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}}, @sadb_address={0x5, 0x6, 0x9d, 0x60, 0x0, @in6={0xa, 0x4e21, 0x1, @dev={0xfe, 0x80, '\x00', 0x43}, 0x9}}, @sadb_sa={0x2, 0x1, 0x4d2, 0x7, 0x4, 0x2d, 0x1, 0x40000000}]}, 0x70}}, 0x8040) (async) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0xffffffffffffffff}, 0x18) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'bridge0\x00'}) (async) sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) (async) getsockopt$SO_COOKIE(0xffffffffffffffff, 0x1, 0x39, &(0x7f0000000000), &(0x7f00000000c0)=0x8) (async) prctl$PR_MCE_KILL(0x35, 0x1, 0x2) (async) 134.42757ms ago: executing program 6 (id=4868): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9, {0x0, 0x1, 0x0, 0xff}}) 116.153965ms ago: executing program 9 (id=4869): r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000280), 0x42000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xdf) write$binfmt_elf64(r3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e000000000003000000000000004000000000000000980100000000000002000000000038000200000002000000000000600300000008000000000000000d0000f0ffffffffec08000000000000f0ffffffffffffff0000000000000000080000000000000003"], 0x5b0) close(r3) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) fsetxattr$security_evm(r2, &(0x7f00000002c0), 0x0, 0x0, 0x3) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x4010) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) open(&(0x7f00000021c0)='./file0\x00', 0x48442, 0x182) mount$nfs4(&(0x7f0000000200)='\\]\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)=ANY=[]) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r1) sendmsg$netlink(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="110000005a00010100"], 0x1c}], 0x1}, 0x0) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f0000000100)=0x5, 0x4) write(r4, &(0x7f0000000000)="2400000011005f0414f9f4070009040081000000200000000000000008000f0001000000", 0x24) 1.235932ms ago: executing program 8 (id=4870): r0 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000040)={0x9, {0x0, 0x1, 0x0, 0xff}}) (fail_nth: 1) 0s ago: executing program 6 (id=4871): r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg(r0, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x40) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000001840)="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", 0x1c3}], 0x1}}], 0x1, 0x20048041) r1 = socket$inet6(0xa, 0x80002, 0x88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$IMCLEAR_L2(r3, 0x80044946, &(0x7f00000001c0)=0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f0000001800)=0x3, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a0001060000000000000000070035be81"], 0x18}], 0x1}, 0x0) fstat(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f4f03b020000000000000f116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) setreuid(0x0, r7) quotactl_fd$Q_GETNEXTQUOTA(r0, 0xffffffff80000902, r7, &(0x7f0000000080)) r9 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) r10 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r10, 0x40186f40, 0x0) r11 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_FREQUENCY(r11, 0x402c5639, &(0x7f0000000180)={0x802, 0x1, 0xfff}) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r9, 0xc0305710, &(0x7f0000000140)={0x0, 0x80000001, 0xffffffffffffffff}) kernel console output (not intermixed with test programs): arer [ 900.220505][T11791] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 900.385538][T11791] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 900.394092][T11791] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 900.404696][T11791] usb 10-1: config 220 has no interface number 2 [ 900.411116][T11791] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 900.424812][T11791] usb 10-1: config 220 interface 0 has no altsetting 0 [ 900.431741][T11791] usb 10-1: config 220 interface 76 has no altsetting 0 [ 900.438866][T11791] usb 10-1: config 220 interface 1 has no altsetting 0 [ 900.447909][T11791] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 900.458143][T11791] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 900.466331][T11791] usb 10-1: Product: syz [ 900.471224][T11791] usb 10-1: Manufacturer: syz [ 900.475932][T11791] usb 10-1: SerialNumber: syz [ 900.718965][T25171] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4279'. [ 900.808577][T11791] usb 10-1: selecting invalid altsetting 0 [ 900.825602][T11791] usb 10-1: Found UVC 7.01 device syz (8086:0b07) [ 900.832312][T11791] usb 10-1: No valid video chain found. [ 900.844894][T11791] usb 10-1: selecting invalid altsetting 0 [ 900.850783][T11791] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 900.877119][T11791] usb 10-1: USB disconnect, device number 35 [ 901.024556][T25199] nfs4: Unknown parameter '' [ 901.182872][ T44] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 901.259427][T25208] FAULT_INJECTION: forcing a failure. [ 901.259427][T25208] name failslab, interval 1, probability 0, space 0, times 0 [ 901.274437][T25208] CPU: 0 UID: 0 PID: 25208 Comm: syz.8.4284 Not tainted syzkaller #0 PREEMPT(full) [ 901.274466][T25208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 901.274479][T25208] Call Trace: [ 901.274488][T25208] [ 901.274497][T25208] dump_stack_lvl+0x189/0x250 [ 901.274524][T25208] ? __pfx____ratelimit+0x10/0x10 [ 901.274556][T25208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 901.274577][T25208] ? __pfx__printk+0x10/0x10 [ 901.274622][T25208] ? __pfx___might_resched+0x10/0x10 [ 901.274654][T25208] should_fail_ex+0x414/0x560 [ 901.274685][T25208] should_failslab+0xa8/0x100 [ 901.274712][T25208] kmem_cache_alloc_node_noprof+0x77/0x710 [ 901.274736][T25208] ? __alloc_skb+0x112/0x2d0 [ 901.274775][T25208] __alloc_skb+0x112/0x2d0 [ 901.274813][T25208] netlink_ack+0x146/0xa50 [ 901.274863][T25208] netlink_rcv_skb+0x28c/0x470 [ 901.274896][T25208] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 901.274929][T25208] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 901.274974][T25208] ? bpf_lsm_capable+0x9/0x20 [ 901.274996][T25208] ? security_capable+0x7e/0x2e0 [ 901.275041][T25208] nfnetlink_rcv+0x26a/0x2520 [ 901.275071][T25208] ? __dev_queue_xmit+0x1d79/0x3b50 [ 901.275093][T25208] ? kasan_save_track+0x3e/0x80 [ 901.275112][T25208] ? __kasan_slab_alloc+0x6c/0x80 [ 901.275132][T25208] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 901.275170][T25208] ? __dev_queue_xmit+0x27b/0x3b50 [ 901.275203][T25208] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 901.275227][T25208] ? __pfx___dev_queue_xmit+0x10/0x10 [ 901.275262][T25208] ? ref_tracker_free+0x63a/0x7d0 [ 901.275286][T25208] ? __asan_memcpy+0x40/0x70 [ 901.275313][T25208] ? __pfx_ref_tracker_free+0x10/0x10 [ 901.275335][T25208] ? __skb_clone+0x63/0x7a0 [ 901.275358][T25208] ? __skb_clone+0x483/0x7a0 [ 901.275384][T25208] ? skb_clone+0x246/0x3a0 [ 901.275408][T25208] ? __netlink_deliver_tap+0x807/0x850 [ 901.275436][T25208] ? netlink_deliver_tap+0x2e/0x1b0 [ 901.275473][T25208] ? netlink_deliver_tap+0x2e/0x1b0 [ 901.275508][T25208] netlink_unicast+0x82f/0x9e0 [ 901.275540][T25208] ? __pfx_netlink_unicast+0x10/0x10 [ 901.275567][T25208] ? netlink_sendmsg+0x642/0xb30 [ 901.275583][T25208] ? skb_put+0x11b/0x210 [ 901.275615][T25208] netlink_sendmsg+0x805/0xb30 [ 901.275640][T25208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 901.275660][T25208] ? aa_sock_msg_perm+0xf1/0x1d0 [ 901.275686][T25208] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 901.275705][T25208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 901.275718][T25208] __sock_sendmsg+0x219/0x270 [ 901.275738][T25208] ____sys_sendmsg+0x505/0x830 [ 901.275756][T25208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 901.275775][T25208] ? import_iovec+0x74/0xa0 [ 901.275790][T25208] ___sys_sendmsg+0x21f/0x2a0 [ 901.275806][T25208] ? __pfx____sys_sendmsg+0x10/0x10 [ 901.275842][T25208] ? __fget_files+0x2a/0x420 [ 901.275859][T25208] ? __fget_files+0x3a0/0x420 [ 901.275883][T25208] __x64_sys_sendmsg+0x19b/0x260 [ 901.275899][T25208] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 901.275920][T25208] ? __pfx_ksys_write+0x10/0x10 [ 901.275938][T25208] ? do_syscall_64+0xbe/0xfa0 [ 901.275962][T25208] do_syscall_64+0xfa/0xfa0 [ 901.275981][T25208] ? lockdep_hardirqs_on+0x9c/0x150 [ 901.276001][T25208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.276014][T25208] ? clear_bhb_loop+0x60/0xb0 [ 901.276030][T25208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 901.276043][T25208] RIP: 0033:0x7f09cf18eba9 [ 901.276056][T25208] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 901.276067][T25208] RSP: 002b:00007f09d0000038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 901.276082][T25208] RAX: ffffffffffffffda RBX: 00007f09cf3d5fa0 RCX: 00007f09cf18eba9 [ 901.276092][T25208] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 901.276100][T25208] RBP: 00007f09d0000090 R08: 0000000000000000 R09: 0000000000000000 [ 901.276109][T25208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 901.276117][T25208] R13: 00007f09cf3d6038 R14: 00007f09cf3d5fa0 R15: 00007ffc884cf278 [ 901.276138][T25208] [ 901.672832][ C0] vkms_vblank_simulate: vblank timer overrun [ 901.696069][ T44] usb 7-1: Using ep0 maxpacket: 32 [ 901.712373][ T44] usb 7-1: config 0 has an invalid interface number: 2 but max is 0 [ 901.721024][ T44] usb 7-1: config 0 has no interface number 0 [ 901.727161][ T44] usb 7-1: config 0 interface 2 altsetting 2 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 901.739292][ T44] usb 7-1: config 0 interface 2 altsetting 2 endpoint 0x83 has invalid maxpacket 15813, setting to 1024 [ 901.758502][ T44] usb 7-1: config 0 interface 2 altsetting 2 bulk endpoint 0x83 has invalid maxpacket 1024 [ 901.769536][ T44] usb 7-1: config 0 interface 2 has no altsetting 0 [ 901.780119][ T44] usb 7-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 901.798489][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.826969][ T44] usb 7-1: Product: syz [ 901.831219][ T44] usb 7-1: Manufacturer: syz [ 901.840961][ T44] usb 7-1: SerialNumber: syz [ 901.871661][ T44] usb 7-1: config 0 descriptor?? [ 901.877595][T25193] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 902.118647][ T44] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 902.162661][ T44] usb 7-1: USB disconnect, device number 28 [ 902.181778][ T983] usb 10-1: new low-speed USB device number 36 using dummy_hcd [ 902.371587][ T983] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 902.380960][ T983] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.391608][ T983] usb 10-1: config 0 descriptor?? [ 902.788532][T25267] nfs4: Unknown parameter '' [ 902.888756][T25267] bond0: (slave bond_slave_0): Releasing backup interface [ 902.903770][T25272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.922228][T25272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.947073][T25272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 902.962018][T25272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 902.995683][T25272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.011865][T25272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.432013][T25302] __nla_validate_parse: 6 callbacks suppressed [ 903.432062][T25302] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4298'. [ 903.447637][T25302] 1{X: renamed from 30{X (while UP) [ 903.458695][T25302] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 903.715346][T25315] netlink: 100 bytes leftover after parsing attributes in process `syz.8.4302'. [ 903.732659][T25315] nfs4: Unknown parameter '' [ 903.739651][T25315] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4302'. [ 903.982570][T25321] netlink: 'syz.8.4305': attribute type 10 has an invalid length. [ 903.993701][T25321] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4305'. [ 904.014446][T25321] team0: Port device geneve0 added [ 904.035508][T25321] netlink: 'syz.8.4305': attribute type 1 has an invalid length. [ 904.044177][T25321] netlink: 'syz.8.4305': attribute type 2 has an invalid length. [ 904.114918][T25324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.146141][T25324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 904.575145][ C1] raw-gadget.2 gadget.9: ignoring, device is not running [ 904.576399][ T983] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -32 [ 904.576712][ T983] asix 10-1:0.0: probe with driver asix failed with error -32 [ 904.584938][ T983] usb 10-1: USB disconnect, device number 36 [ 904.706053][T25354] netlink: 100 bytes leftover after parsing attributes in process `syz.6.4311'. [ 904.738252][T25354] nfs4: Unknown parameter '' [ 904.749195][T25354] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4311'. [ 904.917139][T25374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 904.926275][T25374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 905.118345][ T983] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 905.289381][ T983] usb 7-1: Using ep0 maxpacket: 8 [ 905.296171][ T983] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x99, changing to 0x89 [ 905.308752][ T983] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 905.320786][ T983] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 905.329953][ T983] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.338058][ T983] usb 7-1: Product: syz [ 905.342424][ T983] usb 7-1: Manufacturer: syz [ 905.347122][ T983] usb 7-1: SerialNumber: syz [ 905.354368][ T983] usb 7-1: config 0 descriptor?? [ 905.363521][ T983] streamzap 7-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 905.520226][T25389] batadv0: entered allmulticast mode [ 905.575324][ T983] usb 7-1: USB disconnect, device number 29 [ 905.754430][T25409] netlink: 9 bytes leftover after parsing attributes in process `syz.8.4323'. [ 905.763761][T25409] 1{: renamed from 30{ (while UP) [ 905.773187][T25409] A link change request failed with some changes committed already. Interface 31{ may have been left with an inconsistent configuration, please check. [ 905.838284][T25411] nfs4: Unknown parameter '' [ 905.844391][T25411] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4324'. [ 906.520282][ T5986] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 906.527206][T25440] FAULT_INJECTION: forcing a failure. [ 906.527206][T25440] name failslab, interval 1, probability 0, space 0, times 0 [ 906.541030][T25440] CPU: 1 UID: 0 PID: 25440 Comm: syz.9.4330 Not tainted syzkaller #0 PREEMPT(full) [ 906.541059][T25440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 906.541072][T25440] Call Trace: [ 906.541081][T25440] [ 906.541090][T25440] dump_stack_lvl+0x189/0x250 [ 906.541114][T25440] ? __pfx____ratelimit+0x10/0x10 [ 906.541144][T25440] ? __pfx_dump_stack_lvl+0x10/0x10 [ 906.541164][T25440] ? __pfx__printk+0x10/0x10 [ 906.541199][T25440] ? __pfx___might_resched+0x10/0x10 [ 906.541223][T25440] ? fs_reclaim_acquire+0x7d/0x100 [ 906.541252][T25440] should_fail_ex+0x414/0x560 [ 906.541281][T25440] should_failslab+0xa8/0x100 [ 906.541308][T25440] kmem_cache_alloc_noprof+0x74/0x6e0 [ 906.541328][T25440] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 906.541345][T25440] ? getname_flags+0xb8/0x540 [ 906.541373][T25440] ? __pfx_vfs_write+0x10/0x10 [ 906.541399][T25440] getname_flags+0xb8/0x540 [ 906.541432][T25440] do_sys_openat2+0xbc/0x1c0 [ 906.541453][T25440] ? __pfx_do_sys_openat2+0x10/0x10 [ 906.541476][T25440] ? ksys_write+0x22a/0x250 [ 906.541502][T25440] ? __pfx_ksys_write+0x10/0x10 [ 906.541528][T25440] __x64_sys_openat+0x138/0x170 [ 906.541552][T25440] do_syscall_64+0xfa/0xfa0 [ 906.541580][T25440] ? lockdep_hardirqs_on+0x9c/0x150 [ 906.541610][T25440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.541630][T25440] ? clear_bhb_loop+0x60/0xb0 [ 906.541655][T25440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.541674][T25440] RIP: 0033:0x7f431e98eba9 [ 906.541692][T25440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 906.541710][T25440] RSP: 002b:00007f431f786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 906.541731][T25440] RAX: ffffffffffffffda RBX: 00007f431ebd6180 RCX: 00007f431e98eba9 [ 906.541746][T25440] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 906.541761][T25440] RBP: 00007f431f786090 R08: 0000000000000000 R09: 0000000000000000 [ 906.541774][T25440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.541787][T25440] R13: 00007f431ebd6218 R14: 00007f431ebd6180 R15: 00007ffcc17bcde8 [ 906.541817][T25440] [ 906.829174][ T5986] usb 7-1: device descriptor read/64, error -71 [ 906.886920][T25449] nfs4: Unknown parameter '' [ 906.901661][T25449] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4333'. [ 907.020042][T25455] can0: slcan on ttyS3. [ 907.087682][ T5986] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 907.235981][ T5986] usb 7-1: device descriptor read/64, error -71 [ 907.299768][ T24] usb 10-1: new full-speed USB device number 37 using dummy_hcd [ 907.357132][ T5986] usb usb7-port1: attempt power cycle [ 907.488647][ T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 907.506501][ T24] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 907.515969][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.532442][ T24] usb 10-1: config 0 descriptor?? [ 907.554722][T25455] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 907.727519][ T5986] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 907.749814][ T5986] usb 7-1: device descriptor read/8, error -71 [ 907.871912][T25455] can0 (unregistered): slcan off ttyS3. [ 907.885414][ T24] usbhid 10-1:0.0: can't add hid device: -71 [ 907.899946][ T24] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 907.921353][ T24] usb 10-1: USB disconnect, device number 37 [ 908.016246][ T5986] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 908.065862][ T5986] usb 7-1: device descriptor read/8, error -71 [ 908.169494][T25510] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4339'. [ 908.186782][T25510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.213182][ T5986] usb usb7-port1: unable to enumerate USB device [ 908.214029][T25510] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.586319][T25531] nfs4: Unknown parameter '' [ 908.829065][T17083] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 908.978027][T25560] __nla_validate_parse: 1 callbacks suppressed [ 908.978049][T25560] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4348'. [ 908.998573][T25560] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4348'. [ 909.022017][T17083] usb 10-1: Using ep0 maxpacket: 8 [ 909.037104][T17083] usb 10-1: config 0 has an invalid interface number: 143 but max is 0 [ 909.055730][T17083] usb 10-1: config 0 has no interface number 0 [ 909.067350][T17083] usb 10-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=4b.9b [ 909.087996][T17083] usb 10-1: New USB device strings: Mfr=233, Product=165, SerialNumber=136 [ 909.106963][T17083] usb 10-1: Product: syz [ 909.111362][T17083] usb 10-1: Manufacturer: syz [ 909.117089][T17083] usb 10-1: SerialNumber: syz [ 909.133670][T17083] usb 10-1: config 0 descriptor?? [ 909.259759][T17083] viperboard 10-1:0.143: version 0.00 found at bus 010 address 038 [ 909.296959][T17083] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 909.316028][T17083] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 909.359223][T17083] usb 10-1: USB disconnect, device number 38 [ 909.433580][T25614] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4351'. [ 909.543069][T25630] nfs4: Unknown parameter '' [ 909.553498][T25630] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4352'. [ 909.848779][T25644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 909.857626][T25644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 909.974529][ T5986] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 910.123068][ T5986] usb 7-1: device descriptor read/64, error -71 [ 910.249843][T25660] syzkaller0: entered promiscuous mode [ 910.255757][T25660] syzkaller0: entered allmulticast mode [ 910.390617][ T5986] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 910.533122][ T5986] usb 7-1: device descriptor read/64, error -71 [ 910.624742][T25671] nfs4: Unknown parameter '' [ 910.633046][T25671] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4362'. [ 910.651108][ T5986] usb usb7-port1: attempt power cycle [ 911.025593][ T5986] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 911.064789][ T5986] usb 7-1: device descriptor read/8, error -71 [ 911.342377][ T5986] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 911.375652][ T5986] usb 7-1: device descriptor read/8, error -71 [ 911.495846][ T5986] usb usb7-port1: unable to enumerate USB device [ 912.230452][T25686] binder: 25685:25686 ioctl 40046205 0 returned -22 [ 912.237759][T25686] binder: 25685:25686 ioctl c0306201 200000001a80 returned -11 [ 912.249359][T25686] tmpfs: Unknown parameter 'usrquota' [ 912.281579][T25686] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4364'. [ 912.295989][T25686] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4364'. [ 912.464190][T25702] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4368'. [ 912.770769][T25728] nfs4: Unknown parameter '' [ 912.780048][T25728] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4373'. [ 912.852493][T17083] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 912.906892][T25737] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4375'. [ 912.917507][T25737] 0{X: renamed from 31{X (while UP) [ 912.927774][T25737] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 913.046982][T17083] usb 10-1: Using ep0 maxpacket: 32 [ 913.054698][T17083] usb 10-1: config 0 has an invalid interface number: 83 but max is 0 [ 913.063083][ T30] kauditd_printk_skb: 127 callbacks suppressed [ 913.063114][ T30] audit: type=1326 audit(1757536509.938:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25748 comm="syz.8.4379" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f09cf18eba9 code=0x0 [ 913.093920][T17083] usb 10-1: config 0 has no interface number 0 [ 913.103089][T17083] usb 10-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 913.112450][T17083] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.120964][T17083] usb 10-1: Product: syz [ 913.125227][T17083] usb 10-1: Manufacturer: syz [ 913.130331][T17083] usb 10-1: SerialNumber: syz [ 913.138043][T17083] usb 10-1: config 0 descriptor?? [ 913.148025][T17083] redrat3 10-1:0.83: Couldn't find all endpoints [ 913.362913][T17083] usb 10-1: USB disconnect, device number 39 [ 913.843014][T25763] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 913.849573][T25763] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 913.858466][T25763] vhci_hcd vhci_hcd.0: Device attached [ 914.081556][T25778] nfs4: Unknown parameter '' [ 914.126409][ T24] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 914.144335][T17083] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 914.317611][T17083] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 914.327322][T17083] usb 7-1: config 0 has no interface number 0 [ 914.333862][T17083] usb 7-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice=f0.b2 [ 914.344185][T17083] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.355405][T17083] usb 7-1: config 0 descriptor?? [ 914.375278][T17083] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.105/input/input46 [ 914.552168][T17083] usb 10-1: new low-speed USB device number 40 using dummy_hcd [ 914.581297][ T5215] bcm5974 7-1:0.105: could not read from device [ 914.581629][ T10] usb 7-1: USB disconnect, device number 38 [ 914.597584][T25764] vhci_hcd: connection closed [ 914.606095][ T36] vhci_hcd: stop threads [ 914.618163][ T36] vhci_hcd: release socket [ 914.624826][ T7710] bcm5974 7-1:0.105: could not read from device [ 914.631025][ T36] vhci_hcd: disconnect device [ 914.646470][ T24] vhci_hcd: vhci_device speed not set [ 914.658182][ T7710] udevd[7710]: Error opening device "/dev/input/event4": No such file or directory [ 914.667638][ T7710] udevd[7710]: Unable to EVIOCGABS device "/dev/input/event4" [ 914.675451][ T7710] udevd[7710]: Unable to EVIOCGABS device "/dev/input/event4" [ 914.683888][ T7710] udevd[7710]: Unable to EVIOCGABS device "/dev/input/event4" [ 914.692725][ T7710] udevd[7710]: Unable to EVIOCGABS device "/dev/input/event4" [ 914.732012][T17083] usb 10-1: Invalid ep0 maxpacket: 32 [ 914.786636][T25819] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 914.804555][T25819] __nla_validate_parse: 1 callbacks suppressed [ 914.804570][T25819] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4389'. [ 914.881765][T17083] usb 10-1: new low-speed USB device number 41 using dummy_hcd [ 915.046233][T25827] nfs4: Unknown parameter '' [ 915.052329][T25827] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4392'. [ 915.062251][T17083] usb 10-1: Invalid ep0 maxpacket: 32 [ 915.071321][T17083] usb usb10-port1: attempt power cycle [ 915.416500][ T5894] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 915.459234][T17083] usb 10-1: new low-speed USB device number 42 using dummy_hcd [ 915.482982][T17083] usb 10-1: Invalid ep0 maxpacket: 32 [ 915.579778][ T5894] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 915.589060][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.600709][ T5894] usb 7-1: config 0 descriptor?? [ 915.631480][T17083] usb 10-1: new low-speed USB device number 43 using dummy_hcd [ 915.662672][T17083] usb 10-1: Invalid ep0 maxpacket: 32 [ 915.668452][T17083] usb usb10-port1: unable to enumerate USB device [ 915.757280][T25841] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(4) [ 915.763841][T25841] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 915.772570][T25841] vhci_hcd vhci_hcd.0: Device attached [ 915.782696][T25841] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(7) [ 915.789260][T25841] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 915.799544][T25841] vhci_hcd vhci_hcd.0: Device attached [ 915.806592][T25845] vhci_hcd: connection closed [ 915.809760][T25842] vhci_hcd: connection closed [ 915.810190][ T3520] vhci_hcd: stop threads [ 915.823810][ T3520] vhci_hcd: release socket [ 915.828316][ T3520] vhci_hcd: disconnect device [ 915.835255][ T3520] vhci_hcd: stop threads [ 915.839603][ T3520] vhci_hcd: release socket [ 915.844922][ T3520] vhci_hcd: disconnect device [ 916.276183][ T5894] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 916.300085][ T5894] asix 7-1:0.0: probe with driver asix failed with error -61 [ 916.498752][T25860] sock: sock_set_timeout: `syz.8.4399' (pid 25860) tries to set negative timeout [ 916.546865][T25863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.557520][T25863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 916.577327][T25863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 916.588070][T25863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 917.184128][T25870] nfs4: Unknown parameter '' [ 917.190354][T25870] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4401'. [ 917.242025][T25872] netlink: 9 bytes leftover after parsing attributes in process `syz.8.4402'. [ 917.252869][T25872] 0{: renamed from 31{ (while UP) [ 917.261775][T25872] A link change request failed with some changes committed already. Interface 30{ may have been left with an inconsistent configuration, please check. [ 917.539639][T25890] FAULT_INJECTION: forcing a failure. [ 917.539639][T25890] name failslab, interval 1, probability 0, space 0, times 0 [ 917.553789][T25890] CPU: 1 UID: 0 PID: 25890 Comm: syz.8.4405 Not tainted syzkaller #0 PREEMPT(full) [ 917.553818][T25890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 917.553832][T25890] Call Trace: [ 917.553841][T25890] [ 917.553850][T25890] dump_stack_lvl+0x189/0x250 [ 917.553874][T25890] ? __pfx____ratelimit+0x10/0x10 [ 917.553905][T25890] ? __pfx_dump_stack_lvl+0x10/0x10 [ 917.553924][T25890] ? __pfx__printk+0x10/0x10 [ 917.553960][T25890] ? __pfx___might_resched+0x10/0x10 [ 917.553984][T25890] ? fs_reclaim_acquire+0x7d/0x100 [ 917.554013][T25890] should_fail_ex+0x414/0x560 [ 917.554043][T25890] should_failslab+0xa8/0x100 [ 917.554070][T25890] kmem_cache_alloc_noprof+0x74/0x6e0 [ 917.554090][T25890] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 917.554109][T25890] ? getname_flags+0xb8/0x540 [ 917.554136][T25890] ? __pfx_vfs_write+0x10/0x10 [ 917.554180][T25890] getname_flags+0xb8/0x540 [ 917.554216][T25890] do_sys_openat2+0xbc/0x1c0 [ 917.554239][T25890] ? __pfx_do_sys_openat2+0x10/0x10 [ 917.554264][T25890] ? ksys_write+0x22a/0x250 [ 917.554292][T25890] ? __pfx_ksys_write+0x10/0x10 [ 917.554320][T25890] __x64_sys_openat+0x138/0x170 [ 917.554346][T25890] do_syscall_64+0xfa/0xfa0 [ 917.554376][T25890] ? lockdep_hardirqs_on+0x9c/0x150 [ 917.554407][T25890] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.554428][T25890] ? clear_bhb_loop+0x60/0xb0 [ 917.554454][T25890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.554474][T25890] RIP: 0033:0x7f09cf18eba9 [ 917.554493][T25890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.554511][T25890] RSP: 002b:00007f09cffdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 917.554533][T25890] RAX: ffffffffffffffda RBX: 00007f09cf3d6090 RCX: 00007f09cf18eba9 [ 917.554549][T25890] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 917.554564][T25890] RBP: 00007f09cffdf090 R08: 0000000000000000 R09: 0000000000000000 [ 917.554578][T25890] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.554590][T25890] R13: 00007f09cf3d6128 R14: 00007f09cf3d6090 R15: 00007ffc884cf278 [ 917.554632][T25890] [ 917.770315][ C1] vkms_vblank_simulate: vblank timer overrun [ 918.111252][ T24] usb 10-1: new high-speed USB device number 44 using dummy_hcd [ 918.250673][ T24] usb 10-1: device descriptor read/64, error -71 [ 918.518157][ T24] usb 10-1: new high-speed USB device number 45 using dummy_hcd [ 918.599501][T25910] netlink: 14568 bytes leftover after parsing attributes in process `syz.8.4409'. [ 918.599959][T25911] netlink: 14568 bytes leftover after parsing attributes in process `syz.8.4409'. [ 918.688806][ T24] usb 10-1: device descriptor read/64, error -71 [ 918.806772][ T24] usb usb10-port1: attempt power cycle [ 918.832164][T25919] nfs4: Unknown parameter '' [ 918.838880][T25919] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4411'. [ 918.895895][T25921] syz.8.4412 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 919.169894][ T24] usb 10-1: new high-speed USB device number 46 using dummy_hcd [ 919.192977][ T24] usb 10-1: device descriptor read/8, error -71 [ 919.448022][ T24] usb 10-1: new high-speed USB device number 47 using dummy_hcd [ 919.470026][ T24] usb 10-1: device descriptor read/8, error -71 [ 919.594527][ T24] usb usb10-port1: unable to enumerate USB device [ 919.663935][T25936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.679136][T17083] usb 7-1: USB disconnect, device number 39 [ 919.680932][T25936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.707257][T25942] FAULT_INJECTION: forcing a failure. [ 919.707257][T25942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 919.722967][T25936] 9pnet_fd: p9_fd_create_tcp (25936): problem binding to privport [ 919.750607][T25936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.753377][T25942] CPU: 0 UID: 0 PID: 25942 Comm: syz.7.4414 Not tainted syzkaller #0 PREEMPT(full) [ 919.753415][T25942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 919.753429][T25942] Call Trace: [ 919.753438][T25942] [ 919.753450][T25942] dump_stack_lvl+0x189/0x250 [ 919.753477][T25942] ? __pfx____ratelimit+0x10/0x10 [ 919.753511][T25942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 919.753534][T25942] ? __pfx__printk+0x10/0x10 [ 919.753582][T25942] should_fail_ex+0x414/0x560 [ 919.753616][T25942] strncpy_from_user+0x36/0x290 [ 919.753645][T25942] getname_flags+0xf3/0x540 [ 919.753683][T25942] do_sys_openat2+0xbc/0x1c0 [ 919.753708][T25942] ? __pfx_do_sys_openat2+0x10/0x10 [ 919.753733][T25942] ? ksys_write+0x22a/0x250 [ 919.753762][T25942] ? __pfx_ksys_write+0x10/0x10 [ 919.753791][T25942] __x64_sys_openat+0x138/0x170 [ 919.753818][T25942] do_syscall_64+0xfa/0xfa0 [ 919.753860][T25942] ? lockdep_hardirqs_on+0x9c/0x150 [ 919.753891][T25942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.753929][T25942] ? clear_bhb_loop+0x60/0xb0 [ 919.753955][T25942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.753985][T25942] RIP: 0033:0x7efe1578eba9 [ 919.754005][T25942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 919.754026][T25942] RSP: 002b:00007efe166bd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 919.754051][T25942] RAX: ffffffffffffffda RBX: 00007efe159d6180 RCX: 00007efe1578eba9 [ 919.754068][T25942] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 919.754083][T25942] RBP: 00007efe166bd090 R08: 0000000000000000 R09: 0000000000000000 [ 919.754097][T25942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 919.754111][T25942] R13: 00007efe159d6218 R14: 00007efe159d6180 R15: 00007ffcf53d7628 [ 919.754146][T25942] [ 919.951065][T25936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.314198][ T44] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 920.463921][ T44] usb 7-1: device descriptor read/64, error -71 [ 920.546271][T25968] nfs4: Unknown parameter '' [ 920.553882][T25968] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4420'. [ 920.649233][T25972] sctp: [Deprecated]: syz.8.4422 (pid 25972) Use of int in max_burst socket option deprecated. [ 920.649233][T25972] Use struct sctp_assoc_value instead [ 920.721860][ T44] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 920.880941][ T44] usb 7-1: device descriptor read/64, error -71 [ 920.965007][T25993] can0: slcan on ttyS3. [ 920.980917][T25993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 920.991568][T25993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 920.998987][ T44] usb usb7-port1: attempt power cycle [ 921.056426][T25993] can0 (unregistered): slcan off ttyS3. [ 921.180392][T17083] usb 10-1: new high-speed USB device number 48 using dummy_hcd [ 921.322658][T17083] usb 10-1: device descriptor read/64, error -71 [ 921.376554][ T44] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 921.420030][ T44] usb 7-1: device descriptor read/8, error -71 [ 921.586830][T17083] usb 10-1: new high-speed USB device number 49 using dummy_hcd [ 921.683560][ T44] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 921.734877][ T44] usb 7-1: device descriptor read/8, error -71 [ 921.746049][T26028] nfs4: Unknown parameter '' [ 921.751448][T17083] usb 10-1: device descriptor read/64, error -71 [ 921.763275][T26028] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4429'. [ 921.854545][ T44] usb usb7-port1: unable to enumerate USB device [ 921.878133][T17083] usb usb10-port1: attempt power cycle [ 922.048978][T26040] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4432'. [ 922.059047][T26040] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4432'. [ 922.250378][T17083] usb 10-1: new high-speed USB device number 50 using dummy_hcd [ 922.282894][T17083] usb 10-1: device descriptor read/8, error -71 [ 922.299814][T26050] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 922.410552][T26054] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4437'. [ 922.466590][T26056] nfs4: Unknown parameter '' [ 922.472558][T26056] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4438'. [ 922.550524][T17083] usb 10-1: new high-speed USB device number 51 using dummy_hcd [ 922.572380][T17083] usb 10-1: device descriptor read/8, error -71 [ 922.631654][T26060] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4440'. [ 922.688674][T17083] usb usb10-port1: unable to enumerate USB device [ 923.325696][T26088] nfs4: Unknown parameter '' [ 923.337566][T26088] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4448'. [ 923.503152][T26104] FAULT_INJECTION: forcing a failure. [ 923.503152][T26104] name failslab, interval 1, probability 0, space 0, times 0 [ 923.517833][T26104] CPU: 1 UID: 0 PID: 26104 Comm: syz.8.4453 Not tainted syzkaller #0 PREEMPT(full) [ 923.517855][T26104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 923.517864][T26104] Call Trace: [ 923.517870][T26104] [ 923.517876][T26104] dump_stack_lvl+0x189/0x250 [ 923.517895][T26104] ? __pfx____ratelimit+0x10/0x10 [ 923.517917][T26104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 923.517931][T26104] ? __pfx__printk+0x10/0x10 [ 923.517949][T26104] ? netlink_sendmsg+0x805/0xb30 [ 923.517964][T26104] ? __x64_sys_sendmsg+0x19b/0x260 [ 923.517978][T26104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.518004][T26104] should_fail_ex+0x414/0x560 [ 923.518025][T26104] should_failslab+0xa8/0x100 [ 923.518044][T26104] kmem_cache_alloc_noprof+0x74/0x6e0 [ 923.518060][T26104] ? skb_clone+0x212/0x3a0 [ 923.518079][T26104] skb_clone+0x212/0x3a0 [ 923.518097][T26104] __netlink_deliver_tap+0x404/0x850 [ 923.518127][T26104] ? netlink_deliver_tap+0x2e/0x1b0 [ 923.518150][T26104] netlink_deliver_tap+0x19c/0x1b0 [ 923.518173][T26104] netlink_sendskb+0x68/0x140 [ 923.518194][T26104] netlink_unicast+0x397/0x9e0 [ 923.518212][T26104] ? __asan_memcpy+0x40/0x70 [ 923.518240][T26104] ? __pfx_netlink_unicast+0x10/0x10 [ 923.518266][T26104] netlink_rcv_skb+0x28c/0x470 [ 923.518288][T26104] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 923.518310][T26104] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 923.518343][T26104] ? bpf_lsm_capable+0x9/0x20 [ 923.518358][T26104] ? security_capable+0x7e/0x2e0 [ 923.518401][T26104] nfnetlink_rcv+0x26a/0x2520 [ 923.518442][T26104] ? __dev_queue_xmit+0x1d79/0x3b50 [ 923.518460][T26104] ? kasan_save_track+0x3e/0x80 [ 923.518474][T26104] ? __kasan_slab_alloc+0x6c/0x80 [ 923.518490][T26104] ? kmem_cache_alloc_noprof+0x367/0x6e0 [ 923.518511][T26104] ? __dev_queue_xmit+0x27b/0x3b50 [ 923.518539][T26104] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 923.518560][T26104] ? __pfx___dev_queue_xmit+0x10/0x10 [ 923.518589][T26104] ? ref_tracker_free+0x63a/0x7d0 [ 923.518609][T26104] ? __asan_memcpy+0x40/0x70 [ 923.518633][T26104] ? __pfx_ref_tracker_free+0x10/0x10 [ 923.518651][T26104] ? __skb_clone+0x63/0x7a0 [ 923.518671][T26104] ? __skb_clone+0x483/0x7a0 [ 923.518693][T26104] ? skb_clone+0x246/0x3a0 [ 923.518713][T26104] ? __netlink_deliver_tap+0x807/0x850 [ 923.518736][T26104] ? netlink_deliver_tap+0x2e/0x1b0 [ 923.518766][T26104] ? netlink_deliver_tap+0x2e/0x1b0 [ 923.518796][T26104] netlink_unicast+0x82f/0x9e0 [ 923.518824][T26104] ? __pfx_netlink_unicast+0x10/0x10 [ 923.518848][T26104] ? netlink_sendmsg+0x642/0xb30 [ 923.518861][T26104] ? skb_put+0x11b/0x210 [ 923.518878][T26104] netlink_sendmsg+0x805/0xb30 [ 923.518900][T26104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 923.518917][T26104] ? aa_sock_msg_perm+0xf1/0x1d0 [ 923.518942][T26104] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 923.518963][T26104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 923.518979][T26104] __sock_sendmsg+0x219/0x270 [ 923.519007][T26104] ____sys_sendmsg+0x505/0x830 [ 923.519027][T26104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 923.519051][T26104] ? import_iovec+0x74/0xa0 [ 923.519069][T26104] ___sys_sendmsg+0x21f/0x2a0 [ 923.519087][T26104] ? __pfx____sys_sendmsg+0x10/0x10 [ 923.519133][T26104] ? __fget_files+0x2a/0x420 [ 923.519154][T26104] ? __fget_files+0x3a0/0x420 [ 923.519183][T26104] __x64_sys_sendmsg+0x19b/0x260 [ 923.519201][T26104] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 923.519226][T26104] ? __pfx_ksys_write+0x10/0x10 [ 923.519248][T26104] ? do_syscall_64+0xbe/0xfa0 [ 923.519275][T26104] do_syscall_64+0xfa/0xfa0 [ 923.519297][T26104] ? lockdep_hardirqs_on+0x9c/0x150 [ 923.519320][T26104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.519336][T26104] ? clear_bhb_loop+0x60/0xb0 [ 923.519355][T26104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.519370][T26104] RIP: 0033:0x7f09cf18eba9 [ 923.519385][T26104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.519400][T26104] RSP: 002b:00007f09d0000038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 923.519417][T26104] RAX: ffffffffffffffda RBX: 00007f09cf3d5fa0 RCX: 00007f09cf18eba9 [ 923.519429][T26104] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 923.519440][T26104] RBP: 00007f09d0000090 R08: 0000000000000000 R09: 0000000000000000 [ 923.519451][T26104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 923.519461][T26104] R13: 00007f09cf3d6038 R14: 00007f09cf3d5fa0 R15: 00007ffc884cf278 [ 923.519488][T26104] [ 923.568055][T26106] tipc: Enabling of bearer rejected, failed to enable media [ 923.671193][T26108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.990184][T26108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.212065][T26124] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4456'. [ 924.445063][T26138] nfs4: Unknown parameter '' [ 924.452425][T26138] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4460'. [ 924.517661][T26143] netlink: 'syz.7.4462': attribute type 4 has an invalid length. [ 924.564369][T26143] netlink: 'syz.7.4462': attribute type 4 has an invalid length. [ 924.662962][T26151] netlink: 'syz.9.4465': attribute type 1 has an invalid length. [ 924.765462][T26155] 1{X: renamed from 30{X (while UP) [ 924.790404][T26155] A link change request failed with some changes committed already. Interface 31{X may have been left with an inconsistent configuration, please check. [ 924.823111][T26169] ntfs3(loop6): try to read out of volume at offset 0x0 [ 924.979004][T26180] nfs4: Unknown parameter '' [ 925.094521][T17083] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 925.248508][T26195] comedi comedi0: multiq3: I/O port conflict (0x9,16) [ 925.265571][T17083] usb 7-1: Using ep0 maxpacket: 8 [ 925.278978][T17083] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=99.03 [ 925.291730][T17083] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.300708][T17083] usb 7-1: Product: syz [ 925.304944][T17083] usb 7-1: Manufacturer: syz [ 925.320342][T17083] usb 7-1: SerialNumber: syz [ 925.344334][T17083] usb 7-1: config 0 descriptor?? [ 925.348223][T17083] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 925.348286][T17083] dvb-usb: bulk message failed: -22 (2/0) [ 925.348323][T17083] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 925.358005][T17083] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 925.358076][T17083] usb 7-1: media controller created [ 925.409741][T17083] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 925.437930][T17083] dvb-usb: bulk message failed: -22 (1/0) [ 925.475815][T17083] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 925.508534][T17083] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input47 [ 925.564930][T17083] dvb-usb: schedule remote query interval to 50 msecs. [ 925.572432][T17083] dvb-usb: bulk message failed: -22 (2/0) [ 925.615636][T17083] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 925.643875][T11791] dvb-usb: bulk message failed: -22 (1/0) [ 925.672219][T17083] usb 7-1: USB disconnect, device number 44 [ 925.678548][T11791] dvb-usb: error while querying for an remote control event. [ 925.788730][T26232] nfs4: Unknown parameter '' [ 925.808132][T17083] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 926.073217][T26229] Set syz1 is full, maxelem 65536 reached [ 926.264177][T26247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.278865][T26247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.296195][T26247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 926.312286][T26247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 926.468272][T26257] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=2507232104 (160462854656 ns) > initial count (93482674304 ns). Using initial count to start timer. [ 926.490620][T26256] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=2507232104 (160462854656 ns) > initial count (93482674304 ns). Using initial count to start timer. [ 926.555350][T26267] nfs4: Unknown parameter '' [ 926.561696][T26267] __nla_validate_parse: 4 callbacks suppressed [ 926.561718][T26267] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4491'. [ 926.631643][T26271] netlink: 9 bytes leftover after parsing attributes in process `syz.9.4492'. [ 926.643776][T26271] 1{: renamed from 30{ (while UP) [ 926.653654][T26271] A link change request failed with some changes committed already. Interface 31{ may have been left with an inconsistent configuration, please check. [ 926.871942][T26290] FAULT_INJECTION: forcing a failure. [ 926.871942][T26290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 926.885469][T26290] CPU: 1 UID: 0 PID: 26290 Comm: syz.9.4496 Not tainted syzkaller #0 PREEMPT(full) [ 926.885499][T26290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 926.885513][T26290] Call Trace: [ 926.885522][T26290] [ 926.885532][T26290] dump_stack_lvl+0x189/0x250 [ 926.885558][T26290] ? __pfx____ratelimit+0x10/0x10 [ 926.885591][T26290] ? __pfx_dump_stack_lvl+0x10/0x10 [ 926.885612][T26290] ? __pfx__printk+0x10/0x10 [ 926.885657][T26290] should_fail_ex+0x414/0x560 [ 926.885698][T26290] strncpy_from_user+0x36/0x290 [ 926.885727][T26290] getname_flags+0xf3/0x540 [ 926.885764][T26290] do_sys_openat2+0xbc/0x1c0 [ 926.885788][T26290] ? __pfx_do_sys_openat2+0x10/0x10 [ 926.885813][T26290] ? ksys_write+0x22a/0x250 [ 926.885841][T26290] ? __pfx_ksys_write+0x10/0x10 [ 926.885869][T26290] __x64_sys_openat+0x138/0x170 [ 926.885895][T26290] do_syscall_64+0xfa/0xfa0 [ 926.885927][T26290] ? lockdep_hardirqs_on+0x9c/0x150 [ 926.885959][T26290] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.885981][T26290] ? clear_bhb_loop+0x60/0xb0 [ 926.886008][T26290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.886028][T26290] RIP: 0033:0x7f431e98eba9 [ 926.886048][T26290] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 926.886068][T26290] RSP: 002b:00007f431f7a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 926.886092][T26290] RAX: ffffffffffffffda RBX: 00007f431ebd6090 RCX: 00007f431e98eba9 [ 926.886109][T26290] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 926.886124][T26290] RBP: 00007f431f7a7090 R08: 0000000000000000 R09: 0000000000000000 [ 926.886139][T26290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 926.886153][T26290] R13: 00007f431ebd6128 R14: 00007f431ebd6090 R15: 00007ffcc17bcde8 [ 926.886189][T26290] [ 927.075435][ C1] vkms_vblank_simulate: vblank timer overrun [ 927.140286][T26295] fuse: Unknown parameter 'fd\݌z:B8mAlێAu' [ 927.210127][T26298] nfs4: Unknown parameter '' [ 927.226132][T26298] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4500'. [ 927.350805][T26303] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10) [ 927.357470][T26303] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 927.390417][T26303] vhci_hcd vhci_hcd.0: Device attached [ 927.398509][T26305] netlink: 'syz.6.4510': attribute type 4 has an invalid length. [ 927.409178][T26305] netlink: 17 bytes leftover after parsing attributes in process `syz.6.4510'. [ 927.576299][ T5986] vhci_hcd: vhci_device speed not set [ 927.639586][ T5986] usb 49-1: new full-speed USB device number 2 using vhci_hcd [ 928.156823][T26306] vhci_hcd: connection reset by peer [ 928.164040][ T3520] vhci_hcd: stop threads [ 928.168880][ T3520] vhci_hcd: release socket [ 928.173666][ T3520] vhci_hcd: disconnect device [ 928.249118][ T44] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 928.409536][ T44] usb 7-1: Using ep0 maxpacket: 16 [ 928.432778][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9 [ 928.450052][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9765, setting to 1024 [ 928.462092][ T44] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 928.477422][ T44] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 928.487271][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 928.514711][ T44] usb 7-1: config 0 descriptor?? [ 928.521334][T26332] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 928.607726][T26347] nfs4: Unknown parameter '' [ 928.616042][T26347] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4511'. [ 928.800707][T26359] FAULT_INJECTION: forcing a failure. [ 928.800707][T26359] name failslab, interval 1, probability 0, space 0, times 0 [ 928.814630][T26359] CPU: 1 UID: 0 PID: 26359 Comm: syz.9.4513 Not tainted syzkaller #0 PREEMPT(full) [ 928.814660][T26359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 928.814674][T26359] Call Trace: [ 928.814683][T26359] [ 928.814693][T26359] dump_stack_lvl+0x189/0x250 [ 928.814731][T26359] ? __pfx____ratelimit+0x10/0x10 [ 928.814763][T26359] ? __pfx_dump_stack_lvl+0x10/0x10 [ 928.814785][T26359] ? __pfx__printk+0x10/0x10 [ 928.814823][T26359] ? __pfx___might_resched+0x10/0x10 [ 928.814847][T26359] ? fs_reclaim_acquire+0x7d/0x100 [ 928.814879][T26359] should_fail_ex+0x414/0x560 [ 928.814910][T26359] should_failslab+0xa8/0x100 [ 928.814938][T26359] kmem_cache_alloc_noprof+0x74/0x6e0 [ 928.814980][T26359] ? alloc_empty_file+0x55/0x1d0 [ 928.815013][T26359] ? kernel_text_address+0xa5/0xe0 [ 928.815040][T26359] alloc_empty_file+0x55/0x1d0 [ 928.815076][T26359] path_openat+0x107/0x3830 [ 928.815110][T26359] ? stack_trace_save+0x9c/0xe0 [ 928.815146][T26359] ? stack_depot_save_flags+0x40/0x860 [ 928.815173][T26359] ? _parse_integer_limit+0xc1/0x1f0 [ 928.815207][T26359] ? kasan_save_track+0x4f/0x80 [ 928.815230][T26359] ? getname_flags+0xb8/0x540 [ 928.815259][T26359] ? do_sys_openat2+0xbc/0x1c0 [ 928.815278][T26359] ? __x64_sys_openat+0x138/0x170 [ 928.815298][T26359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.815321][T26359] ? __pfx_path_openat+0x10/0x10 [ 928.815366][T26359] do_filp_open+0x1fa/0x410 [ 928.815388][T26359] ? __lock_acquire+0xab9/0xd20 [ 928.815415][T26359] ? __pfx_do_filp_open+0x10/0x10 [ 928.815462][T26359] ? _raw_spin_unlock+0x28/0x50 [ 928.815491][T26359] ? alloc_fd+0x64c/0x6c0 [ 928.815533][T26359] do_sys_openat2+0x121/0x1c0 [ 928.815557][T26359] ? __pfx_do_sys_openat2+0x10/0x10 [ 928.815583][T26359] ? ksys_write+0x22a/0x250 [ 928.815612][T26359] ? __pfx_ksys_write+0x10/0x10 [ 928.815641][T26359] __x64_sys_openat+0x138/0x170 [ 928.815668][T26359] do_syscall_64+0xfa/0xfa0 [ 928.815708][T26359] ? lockdep_hardirqs_on+0x9c/0x150 [ 928.815740][T26359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.815773][T26359] ? clear_bhb_loop+0x60/0xb0 [ 928.815800][T26359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.815821][T26359] RIP: 0033:0x7f431e98eba9 [ 928.815841][T26359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 928.815859][T26359] RSP: 002b:00007f431f786038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 928.815883][T26359] RAX: ffffffffffffffda RBX: 00007f431ebd6180 RCX: 00007f431e98eba9 [ 928.815899][T26359] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 928.815915][T26359] RBP: 00007f431f786090 R08: 0000000000000000 R09: 0000000000000000 [ 928.815928][T26359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.815940][T26359] R13: 00007f431ebd6218 R14: 00007f431ebd6180 R15: 00007ffcc17bcde8 [ 928.815972][T26359] [ 929.100668][ C1] vkms_vblank_simulate: vblank timer overrun [ 929.122177][ T44] hid (null): unknown global tag 0xd [ 929.134051][ T44] shield 0003:0955:7214.0035: unknown global tag 0xd [ 929.141293][ T44] shield 0003:0955:7214.0035: item 0 0 1 13 parsing failed [ 929.149824][ T44] shield 0003:0955:7214.0035: Parse failed [ 929.155756][ T44] shield 0003:0955:7214.0035: probe with driver shield failed with error -22 [ 929.352911][T17083] raw-gadget.3 gadget.8: failed to queue reset event [ 929.363218][ T5894] usb 7-1: USB disconnect, device number 45 [ 929.436159][T17083] raw-gadget.3 gadget.8: failed to queue resume event [ 929.501758][T17083] usb 9-1: new full-speed USB device number 56 using dummy_hcd [ 929.509739][ C0] raw-gadget.3 gadget.8: ignoring, device is not running [ 929.517116][T17083] raw-gadget.3 gadget.8: failed to queue reset event [ 929.597616][T17083] raw-gadget.3 gadget.8: failed to queue resume event [ 929.660647][T17083] usb 9-1: device descriptor read/64, error -32 [ 929.789860][T17083] raw-gadget.3 gadget.8: failed to queue suspend event [ 929.797162][T17083] raw-gadget.3 gadget.8: failed to queue reset event [ 929.876897][T17083] raw-gadget.3 gadget.8: failed to queue resume event [ 929.938801][T17083] usb 9-1: new full-speed USB device number 57 using dummy_hcd [ 929.949849][ C0] raw-gadget.3 gadget.8: ignoring, device is not running [ 929.957131][T17083] raw-gadget.3 gadget.8: failed to queue reset event [ 930.035004][T17083] raw-gadget.3 gadget.8: failed to queue resume event [ 930.109902][T17083] usb 9-1: device descriptor read/64, error -32 [ 930.132995][T26403] nfs4: Unknown parameter '' [ 930.141313][T26403] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4521'. [ 930.238917][T17083] raw-gadget.3 gadget.8: failed to queue suspend event [ 930.249005][T17083] usb usb9-port1: attempt power cycle [ 930.254810][T17083] raw-gadget.3 gadget.8: failed to queue disconnect event [ 930.262584][T17083] raw-gadget.3 gadget.8: failed to queue reset event [ 930.335765][T17083] raw-gadget.3 gadget.8: failed to queue resume event [ 930.345941][T17083] raw-gadget.3 gadget.8: failed to queue reset event [ 930.591051][T17083] raw-gadget.3 gadget.8: failed to queue resume event [ 930.598048][T11791] usb 7-1: new low-speed USB device number 46 using dummy_hcd [ 930.665946][T17083] usb 9-1: new full-speed USB device number 58 using dummy_hcd [ 930.698244][ C0] raw-gadget.3 gadget.8: ignoring, device is not running [ 930.705481][T17083] usb 9-1: device descriptor read/8, error -32 [ 930.766654][T11791] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 930.782408][T11791] usb 7-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 930.805075][T11791] usb 7-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 930.814570][T11791] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.826279][T17083] raw-gadget.3 gadget.8: failed to queue suspend event [ 930.836507][T26426] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 930.848244][T17083] raw-gadget.3 gadget.8: failed to queue reset event [ 930.923168][T17083] raw-gadget.3 gadget.8: failed to queue resume event [ 930.987107][T17083] usb 9-1: new full-speed USB device number 59 using dummy_hcd [ 931.019159][ C0] raw-gadget.3 gadget.8: ignoring, device is not running [ 931.026486][T17083] usb 9-1: device descriptor read/8, error -32 [ 931.073832][T11791] usb 7-1: string descriptor 0 read error: -71 [ 931.082593][T11791] hub 7-1:32.0: USB hub found [ 931.089388][T11791] hub 7-1:32.0: config failed, can't read hub descriptor (err -22) [ 931.147434][T17083] raw-gadget.3 gadget.8: failed to queue suspend event [ 931.172884][T17083] usb usb9-port1: unable to enumerate USB device [ 931.212597][T11791] usb 7-1: USB disconnect, device number 46 [ 931.404918][T26472] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4529'. [ 931.701306][T26481] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4531'. [ 931.728320][T26481] nfs4: Unknown parameter '' [ 931.736212][T26481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4531'. [ 931.788676][ T983] usb 10-1: new high-speed USB device number 52 using dummy_hcd [ 931.937540][T26490] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4542'. [ 931.953417][T26490] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4542'. [ 931.962574][T26490] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4542'. [ 932.041116][T26494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 932.060641][T17083] hid-generic 0005:10CF:05DF.0036: unknown main item tag 0x0 [ 932.076131][T17083] hid-generic 0005:10CF:05DF.0036: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 932.094114][T26494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 932.108622][T26490] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4542'. [ 932.118630][T26490] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4542'. [ 932.128535][T26490] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4542'. [ 932.379856][T26490] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4542'. [ 932.389353][T26490] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4542'. [ 932.402831][T26490] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4542'. [ 933.005602][T26522] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4540'. [ 933.026878][T26522] nfs4: Unknown parameter '' [ 933.029046][T26524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 933.042311][T26524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 933.095486][ T5986] vhci_hcd: vhci_device speed not set [ 934.552918][T26560] FAULT_INJECTION: forcing a failure. [ 934.552918][T26560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.568953][T26560] CPU: 0 UID: 0 PID: 26560 Comm: syz.8.4548 Not tainted syzkaller #0 PREEMPT(full) [ 934.568989][T26560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 934.569004][T26560] Call Trace: [ 934.569013][T26560] [ 934.569023][T26560] dump_stack_lvl+0x189/0x250 [ 934.569050][T26560] ? __pfx____ratelimit+0x10/0x10 [ 934.569085][T26560] ? __pfx_dump_stack_lvl+0x10/0x10 [ 934.569107][T26560] ? __pfx__printk+0x10/0x10 [ 934.569153][T26560] should_fail_ex+0x414/0x560 [ 934.569186][T26560] _copy_to_user+0x31/0xb0 [ 934.569212][T26560] simple_read_from_buffer+0xe1/0x170 [ 934.569247][T26560] proc_fail_nth_read+0x1b3/0x220 [ 934.569273][T26560] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 934.569299][T26560] ? rw_verify_area+0x2a6/0x4d0 [ 934.569324][T26560] ? __lock_acquire+0xab9/0xd20 [ 934.569348][T26560] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 934.569373][T26560] vfs_read+0x200/0xa30 [ 934.569400][T26560] ? fdget_pos+0x247/0x320 [ 934.569436][T26560] ? __pfx___mutex_lock+0x10/0x10 [ 934.569460][T26560] ? __pfx_vfs_read+0x10/0x10 [ 934.569490][T26560] ? __fget_files+0x2a/0x420 [ 934.569527][T26560] ? __fget_files+0x3a0/0x420 [ 934.569567][T26560] ? __fget_files+0x2a/0x420 [ 934.569606][T26560] ksys_read+0x145/0x250 [ 934.569636][T26560] ? __pfx_ksys_read+0x10/0x10 [ 934.569665][T26560] ? do_syscall_64+0xbe/0xfa0 [ 934.569702][T26560] do_syscall_64+0xfa/0xfa0 [ 934.569752][T26560] ? lockdep_hardirqs_on+0x9c/0x150 [ 934.569785][T26560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.569807][T26560] ? clear_bhb_loop+0x60/0xb0 [ 934.569835][T26560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.569862][T26560] RIP: 0033:0x7f09cf18d5bc [ 934.569882][T26560] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 934.569902][T26560] RSP: 002b:00007f09d0000030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 934.569925][T26560] RAX: ffffffffffffffda RBX: 00007f09cf3d5fa0 RCX: 00007f09cf18d5bc [ 934.569943][T26560] RDX: 000000000000000f RSI: 00007f09d00000a0 RDI: 0000000000000005 [ 934.569957][T26560] RBP: 00007f09d0000090 R08: 0000000000000000 R09: 0000000000000000 [ 934.569971][T26560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.569985][T26560] R13: 00007f09cf3d6038 R14: 00007f09cf3d5fa0 R15: 00007ffc884cf278 [ 934.570020][T26560] [ 934.881739][T26564] nfs4: Unknown parameter '' [ 935.275126][ T983] usb 10-1: device descriptor read/64, error -71 [ 935.531634][ T983] usb 10-1: new high-speed USB device number 53 using dummy_hcd [ 935.692054][ T983] usb 10-1: Using ep0 maxpacket: 32 [ 935.698881][ T983] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 935.707244][ T983] usb 10-1: config 0 has no interface number 0 [ 935.715680][ T983] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 935.724918][ T983] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.733375][ T983] usb 10-1: Product: syz [ 935.737696][ T983] usb 10-1: Manufacturer: syz [ 935.742397][ T983] usb 10-1: SerialNumber: syz [ 935.750423][ T983] usb 10-1: config 0 descriptor?? [ 935.763642][ T983] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 935.984152][ T983] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 936.001748][ T983] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 936.573302][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 76 [ 937.769695][T26593] __nla_validate_parse: 3 callbacks suppressed [ 937.769718][T26593] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4554'. [ 938.199372][ C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 938.209096][ T954] usb 10-1: USB disconnect, device number 53 [ 938.255266][ T954] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 938.293355][ T954] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 938.318862][ T954] quatech2 10-1:0.51: device disconnected [ 938.341404][T26606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.385383][T26606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.549667][T26630] syzkaller1: entered promiscuous mode [ 938.555272][T26630] syzkaller1: entered allmulticast mode [ 938.573075][T26630] bond0: entered promiscuous mode [ 938.585484][T26630] bond_slave_1: entered promiscuous mode [ 938.591516][T26630] bond0: entered allmulticast mode [ 938.596737][T26630] bond_slave_1: entered allmulticast mode [ 938.637118][T26635] 9pnet: p9_errstr2errno: server reported unknown error @c [ 938.701780][T26640] tipc: Enabled bearer , priority 0 [ 938.729147][T26642] nfs4: Unknown parameter '' [ 938.735456][T26642] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4560'. [ 938.757458][T26640] tipc: Resetting bearer [ 938.770258][T26634] tipc: Resetting bearer [ 940.455322][T26634] tipc: Disabling bearer [ 940.833161][T26668] netlink: 5 bytes leftover after parsing attributes in process `syz.8.4568'. [ 940.857325][T26668] 0{X: renamed from 30{ (while UP) [ 940.866179][T26668] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 941.082290][T26678] nfs4: Unknown parameter '' [ 941.088778][T26678] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4570'. [ 941.469205][ T954] IPVS: starting estimator thread 0... [ 941.477685][T26697] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 941.564117][T26707] IPVS: using max 26 ests per chain, 62400 per kthread [ 941.580103][T26711] nfs4: Unknown parameter '' [ 941.590114][T26711] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4581'. [ 941.702008][ T5894] usb 10-1: new high-speed USB device number 54 using dummy_hcd [ 941.883778][ T5894] usb 10-1: Using ep0 maxpacket: 32 [ 941.890729][ T5894] usb 10-1: config 0 has an invalid interface number: 28 but max is 0 [ 941.899031][ T5894] usb 10-1: config 0 has no interface number 0 [ 941.907476][ T5894] usb 10-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=3f.37 [ 941.916872][ T5894] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 941.924997][ T5894] usb 10-1: Product: syz [ 941.929317][ T5894] usb 10-1: Manufacturer: syz [ 941.934023][ T5894] usb 10-1: SerialNumber: syz [ 941.942191][ T5894] usb 10-1: config 0 descriptor?? [ 941.950814][ T5894] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 941.957226][ T5894] command write [95] error -22 [ 942.166283][ T5894] usb 10-1: USB disconnect, device number 54 [ 942.808372][T26738] nfs4: Unknown parameter '' [ 942.814881][T26738] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4590'. [ 942.864618][ T5986] IPVS: starting estimator thread 0... [ 942.870727][T26733] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 942.985239][T26740] IPVS: using max 28 ests per chain, 67200 per kthread [ 943.033832][ T954] usb 10-1: new low-speed USB device number 55 using dummy_hcd [ 943.217387][ T954] usb 10-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 943.239300][ T954] usb 10-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8 [ 943.270953][ T954] usb 10-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 943.309285][ T954] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.360560][T26732] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 943.402492][T26762] nfs4: Unknown parameter '' [ 943.410032][T26762] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4594'. [ 943.613664][ T954] usb 10-1: string descriptor 0 read error: -71 [ 943.631334][ T954] hub 10-1:32.0: USB hub found [ 943.650841][ T954] hub 10-1:32.0: config failed, can't read hub descriptor (err -22) [ 943.742248][T26783] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 943.765810][ T954] usb 10-1: USB disconnect, device number 55 [ 944.019721][T26808] nfs4: Unknown parameter '' [ 944.033005][T26808] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4604'. [ 944.485382][T26835] nfs4: Unknown parameter '' [ 944.493625][T26835] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4615'. [ 944.571186][T26847] netlink: 9 bytes leftover after parsing attributes in process `syz.8.4617'. [ 944.580968][T26847] 0{: renamed from 30{X (while UP) [ 944.592974][T26847] A link change request failed with some changes committed already. Interface 30{ may have been left with an inconsistent configuration, please check. [ 945.022084][T26879] fuse: Unknown parameter '6`[" >~h&ƛvuAr ' [ 945.031904][T26878] nfs4: Unknown parameter '' [ 945.043706][T26878] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4625'. [ 945.124801][ T44] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 945.148854][T26882] dlm: non-version read from control device 4096 [ 945.307411][ T44] usb 7-1: Using ep0 maxpacket: 8 [ 945.317670][ T44] usb 7-1: too many configurations: 114, using maximum allowed: 8 [ 945.338723][ T44] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 945.346365][ T44] usb 7-1: can't read configurations, error -61 [ 945.498327][ T44] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 945.532671][T26911] FAULT_INJECTION: forcing a failure. [ 945.532671][T26911] name failslab, interval 1, probability 0, space 0, times 0 [ 945.538354][T26910] nfs4: Unknown parameter '' [ 945.546085][T26911] CPU: 1 UID: 0 PID: 26911 Comm: syz.8.4636 Not tainted syzkaller #0 PREEMPT(full) [ 945.546119][T26911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 945.546136][T26911] Call Trace: [ 945.546147][T26911] [ 945.546157][T26911] dump_stack_lvl+0x189/0x250 [ 945.546188][T26911] ? __pfx____ratelimit+0x10/0x10 [ 945.546224][T26911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 945.546249][T26911] ? __pfx__printk+0x10/0x10 [ 945.546293][T26911] ? __pfx___might_resched+0x10/0x10 [ 945.546322][T26911] ? fs_reclaim_acquire+0x7d/0x100 [ 945.546358][T26911] should_fail_ex+0x414/0x560 [ 945.546395][T26911] should_failslab+0xa8/0x100 [ 945.546427][T26911] kmem_cache_alloc_noprof+0x74/0x6e0 [ 945.546454][T26911] ? alloc_empty_file+0x55/0x1d0 [ 945.546492][T26911] ? kernel_text_address+0xa5/0xe0 [ 945.546521][T26911] alloc_empty_file+0x55/0x1d0 [ 945.546559][T26911] path_openat+0x107/0x3830 [ 945.546599][T26911] ? stack_trace_save+0x9c/0xe0 [ 945.546638][T26911] ? stack_depot_save_flags+0x40/0x860 [ 945.546667][T26911] ? _parse_integer_limit+0xc1/0x1f0 [ 945.546716][T26911] ? kasan_save_track+0x4f/0x80 [ 945.546740][T26911] ? getname_flags+0xb8/0x540 [ 945.546781][T26911] ? do_sys_openat2+0xbc/0x1c0 [ 945.546800][T26911] ? __x64_sys_openat+0x138/0x170 [ 945.546821][T26911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.546846][T26911] ? __pfx_path_openat+0x10/0x10 [ 945.546894][T26911] do_filp_open+0x1fa/0x410 [ 945.546918][T26911] ? __lock_acquire+0xab9/0xd20 [ 945.546948][T26911] ? __pfx_do_filp_open+0x10/0x10 [ 945.546998][T26911] ? _raw_spin_unlock+0x28/0x50 [ 945.547029][T26911] ? alloc_fd+0x64c/0x6c0 [ 945.547072][T26911] do_sys_openat2+0x121/0x1c0 [ 945.547098][T26911] ? __pfx_do_sys_openat2+0x10/0x10 [ 945.547125][T26911] ? ksys_write+0x22a/0x250 [ 945.547156][T26911] ? __pfx_ksys_write+0x10/0x10 [ 945.547188][T26911] __x64_sys_openat+0x138/0x170 [ 945.547216][T26911] do_syscall_64+0xfa/0xfa0 [ 945.547251][T26911] ? lockdep_hardirqs_on+0x9c/0x150 [ 945.547287][T26911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.547311][T26911] ? clear_bhb_loop+0x60/0xb0 [ 945.547340][T26911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.547364][T26911] RIP: 0033:0x7f09cf18eba9 [ 945.547384][T26911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 945.547407][T26911] RSP: 002b:00007f09cffdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 945.547434][T26911] RAX: ffffffffffffffda RBX: 00007f09cf3d6090 RCX: 00007f09cf18eba9 [ 945.547452][T26911] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 945.547469][T26911] RBP: 00007f09cffdf090 R08: 0000000000000000 R09: 0000000000000000 [ 945.547483][T26911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 945.547499][T26911] R13: 00007f09cf3d6128 R14: 00007f09cf3d6090 R15: 00007ffc884cf278 [ 945.547538][T26911] [ 945.599337][T26912] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4637'. [ 945.861870][ T44] usb 7-1: Using ep0 maxpacket: 8 [ 945.869821][ T44] usb 7-1: too many configurations: 114, using maximum allowed: 8 [ 945.880203][ T44] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 945.890709][ T44] usb 7-1: can't read configurations, error -61 [ 945.898325][ T44] usb usb7-port1: attempt power cycle [ 946.300327][ T44] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 946.322315][ T44] usb 7-1: Using ep0 maxpacket: 8 [ 946.327989][ T44] usb 7-1: too many configurations: 114, using maximum allowed: 8 [ 946.340389][ T44] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 946.348160][ T44] usb 7-1: can't read configurations, error -61 [ 946.503521][ T44] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 946.538103][ T44] usb 7-1: Using ep0 maxpacket: 8 [ 946.544113][ T44] usb 7-1: too many configurations: 114, using maximum allowed: 8 [ 946.559274][ T44] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 946.566896][ T44] usb 7-1: can't read configurations, error -61 [ 946.587530][ T44] usb usb7-port1: unable to enumerate USB device [ 946.738808][ T954] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 946.901264][ T954] usb 7-1: Using ep0 maxpacket: 8 [ 946.909805][ T954] usb 7-1: too many configurations: 114, using maximum allowed: 8 [ 946.919616][ T954] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 946.929956][ T954] usb 7-1: can't read configurations, error -61 [ 947.081116][ T954] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 947.241543][ T954] usb 7-1: Using ep0 maxpacket: 8 [ 947.247565][ T954] usb 7-1: too many configurations: 114, using maximum allowed: 8 [ 947.257232][ T954] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 947.264876][ T954] usb 7-1: can't read configurations, error -61 [ 947.271481][ T954] usb usb7-port1: attempt power cycle [ 947.637048][ T954] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 947.659094][ T954] usb 7-1: Using ep0 maxpacket: 8 [ 947.665768][ T954] usb 7-1: too many configurations: 114, using maximum allowed: 8 [ 947.694379][T26954] nfs4: Unknown parameter '' [ 947.696760][ T954] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 947.701810][T26954] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4647'. [ 947.711713][ T954] usb 7-1: can't read configurations, error -61 [ 947.826303][T26963] overlay: filesystem on ./bus not supported as upperdir [ 947.861607][ T954] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 947.896566][ T954] usb 7-1: Using ep0 maxpacket: 8 [ 947.909679][ T954] usb 7-1: too many configurations: 114, using maximum allowed: 8 [ 947.929992][ T954] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 947.947334][ T954] usb 7-1: can't read configurations, error -61 [ 947.954296][ T954] usb usb7-port1: unable to enumerate USB device [ 948.044746][T26975] FAULT_INJECTION: forcing a failure. [ 948.044746][T26975] name failslab, interval 1, probability 0, space 0, times 0 [ 948.058947][T26975] CPU: 0 UID: 0 PID: 26975 Comm: syz.7.4654 Not tainted syzkaller #0 PREEMPT(full) [ 948.058979][T26975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 948.058994][T26975] Call Trace: [ 948.059004][T26975] [ 948.059014][T26975] dump_stack_lvl+0x189/0x250 [ 948.059042][T26975] ? __pfx____ratelimit+0x10/0x10 [ 948.059076][T26975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 948.059097][T26975] ? __pfx__printk+0x10/0x10 [ 948.059133][T26975] ? __pfx___might_resched+0x10/0x10 [ 948.059160][T26975] ? fs_reclaim_acquire+0x7d/0x100 [ 948.059193][T26975] should_fail_ex+0x414/0x560 [ 948.059226][T26975] should_failslab+0xa8/0x100 [ 948.059256][T26975] __kmalloc_cache_noprof+0x6f/0x6f0 [ 948.059281][T26975] ? syslog_print_all+0xc4/0x3e0 [ 948.059316][T26975] syslog_print_all+0xc4/0x3e0 [ 948.059348][T26975] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 948.059380][T26975] ? __pfx_syslog_print_all+0x10/0x10 [ 948.059408][T26975] ? vfs_write+0x956/0xb30 [ 948.059443][T26975] ? apparmor_capable+0x137/0x1b0 [ 948.059476][T26975] ? bpf_lsm_capable+0x9/0x20 [ 948.059498][T26975] ? security_capable+0x7e/0x2e0 [ 948.059545][T26975] do_syslog+0x375/0x760 [ 948.059573][T26975] ? __pfx_do_syslog+0x10/0x10 [ 948.059609][T26975] ? __fget_files+0x3a0/0x420 [ 948.059642][T26975] ? fput+0xa0/0xd0 [ 948.059660][T26975] ? ksys_write+0x22a/0x250 [ 948.059685][T26975] ? __pfx_ksys_write+0x10/0x10 [ 948.059714][T26975] __x64_sys_syslog+0x7c/0x90 [ 948.059741][T26975] do_syscall_64+0xfa/0xfa0 [ 948.059770][T26975] ? lockdep_hardirqs_on+0x9c/0x150 [ 948.059799][T26975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.059819][T26975] ? clear_bhb_loop+0x60/0xb0 [ 948.059843][T26975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.059862][T26975] RIP: 0033:0x7efe1578eba9 [ 948.059879][T26975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.059897][T26975] RSP: 002b:00007efe166ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000067 [ 948.059919][T26975] RAX: ffffffffffffffda RBX: 00007efe159d5fa0 RCX: 00007efe1578eba9 [ 948.059934][T26975] RDX: 0000000000001000 RSI: 0000200000001000 RDI: 0000000000000004 [ 948.059947][T26975] RBP: 00007efe166ff090 R08: 0000000000000000 R09: 0000000000000000 [ 948.059960][T26975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.059972][T26975] R13: 00007efe159d6038 R14: 00007efe159d5fa0 R15: 00007ffcf53d7628 [ 948.060004][T26975] [ 948.307584][ C0] vkms_vblank_simulate: vblank timer overrun [ 948.470037][ T30] audit: type=1326 audit(1757536543.051:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26984 comm="syz.7.4656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1578eba9 code=0x7ffc0000 [ 948.519399][ T30] audit: type=1326 audit(1757536543.051:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26984 comm="syz.7.4656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1578eba9 code=0x7ffc0000 [ 948.554259][ T30] audit: type=1326 audit(1757536543.051:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26984 comm="syz.7.4656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efe1578eba9 code=0x7ffc0000 [ 948.591892][ T30] audit: type=1326 audit(1757536543.051:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26984 comm="syz.7.4656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1578eba9 code=0x7ffc0000 [ 948.614288][ C0] vkms_vblank_simulate: vblank timer overrun [ 948.631551][ T30] audit: type=1326 audit(1757536543.051:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26984 comm="syz.7.4656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1578eba9 code=0x7ffc0000 [ 948.659536][ T30] audit: type=1326 audit(1757536543.051:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26984 comm="syz.7.4656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efe1578eba9 code=0x7ffc0000 [ 948.693283][ T30] audit: type=1326 audit(1757536543.051:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26984 comm="syz.7.4656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1578eba9 code=0x7ffc0000 [ 948.721094][ T30] audit: type=1326 audit(1757536543.051:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26984 comm="syz.7.4656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe1578eba9 code=0x7ffc0000 [ 948.746197][ T30] audit: type=1326 audit(1757536543.051:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26984 comm="syz.7.4656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efe1578d510 code=0x7ffc0000 [ 948.792077][ T30] audit: type=1326 audit(1757536543.051:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26984 comm="syz.7.4656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe1578e7ab code=0x7ffc0000 [ 948.862879][T27004] nfs4: Unknown parameter '' [ 948.872551][T27004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4659'. [ 948.962448][T27005] FAULT_INJECTION: forcing a failure. [ 948.962448][T27005] name failslab, interval 1, probability 0, space 0, times 0 [ 948.988963][T27005] CPU: 1 UID: 0 PID: 27005 Comm: syz.8.4661 Not tainted syzkaller #0 PREEMPT(full) [ 948.988997][T27005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 948.989011][T27005] Call Trace: [ 948.989021][T27005] [ 948.989031][T27005] dump_stack_lvl+0x189/0x250 [ 948.989058][T27005] ? __pfx____ratelimit+0x10/0x10 [ 948.989091][T27005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 948.989113][T27005] ? __pfx__printk+0x10/0x10 [ 948.989152][T27005] ? __pfx___might_resched+0x10/0x10 [ 948.989184][T27005] should_fail_ex+0x414/0x560 [ 948.989217][T27005] should_failslab+0xa8/0x100 [ 948.989247][T27005] kmem_cache_alloc_noprof+0x74/0x6e0 [ 948.989270][T27005] ? security_file_alloc+0x34/0x330 [ 948.989303][T27005] security_file_alloc+0x34/0x330 [ 948.989332][T27005] init_file+0x93/0x2f0 [ 948.989379][T27005] alloc_empty_file+0x6e/0x1d0 [ 948.989420][T27005] path_openat+0x107/0x3830 [ 948.989456][T27005] ? stack_trace_save+0x9c/0xe0 [ 948.989491][T27005] ? stack_depot_save_flags+0x40/0x860 [ 948.989519][T27005] ? _parse_integer_limit+0xc1/0x1f0 [ 948.989553][T27005] ? kasan_save_track+0x4f/0x80 [ 948.989577][T27005] ? getname_flags+0xb8/0x540 [ 948.989606][T27005] ? do_sys_openat2+0xbc/0x1c0 [ 948.989633][T27005] ? __x64_sys_openat+0x138/0x170 [ 948.989653][T27005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.989676][T27005] ? __pfx_path_openat+0x10/0x10 [ 948.989722][T27005] do_filp_open+0x1fa/0x410 [ 948.989743][T27005] ? __lock_acquire+0xab9/0xd20 [ 948.989770][T27005] ? __pfx_do_filp_open+0x10/0x10 [ 948.989817][T27005] ? _raw_spin_unlock+0x28/0x50 [ 948.989847][T27005] ? alloc_fd+0x64c/0x6c0 [ 948.989889][T27005] do_sys_openat2+0x121/0x1c0 [ 948.989913][T27005] ? __pfx_do_sys_openat2+0x10/0x10 [ 948.989939][T27005] ? ksys_write+0x22a/0x250 [ 948.989968][T27005] ? __pfx_ksys_write+0x10/0x10 [ 948.989997][T27005] __x64_sys_openat+0x138/0x170 [ 948.990024][T27005] do_syscall_64+0xfa/0xfa0 [ 948.990057][T27005] ? lockdep_hardirqs_on+0x9c/0x150 [ 948.990091][T27005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.990112][T27005] ? clear_bhb_loop+0x60/0xb0 [ 948.990139][T27005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 948.990161][T27005] RIP: 0033:0x7f09cf18eba9 [ 948.990180][T27005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 948.990199][T27005] RSP: 002b:00007f09cffdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 948.990224][T27005] RAX: ffffffffffffffda RBX: 00007f09cf3d6090 RCX: 00007f09cf18eba9 [ 948.990239][T27005] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 948.990254][T27005] RBP: 00007f09cffdf090 R08: 0000000000000000 R09: 0000000000000000 [ 948.990269][T27005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 948.990282][T27005] R13: 00007f09cf3d6128 R14: 00007f09cf3d6090 R15: 00007ffc884cf278 [ 948.990318][T27005] [ 949.797524][T11791] usb 10-1: new high-speed USB device number 56 using dummy_hcd [ 949.968639][T11791] usb 10-1: Using ep0 maxpacket: 16 [ 949.977736][T11791] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9 [ 950.011195][T11791] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9765, setting to 1024 [ 950.035980][T11791] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 950.054709][T11791] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 950.064079][T11791] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.083932][T27039] nfs4: Unknown parameter '' [ 950.084847][T11791] usb 10-1: config 0 descriptor?? [ 950.091761][T27039] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4671'. [ 950.111210][T27024] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 950.553406][T11791] hid (null): unknown global tag 0xd [ 950.573771][T11791] shield 0003:0955:7214.0037: unknown global tag 0xd [ 950.596682][T11791] shield 0003:0955:7214.0037: item 0 0 1 13 parsing failed [ 950.606181][T11791] shield 0003:0955:7214.0037: Parse failed [ 950.617751][T11791] shield 0003:0955:7214.0037: probe with driver shield failed with error -22 [ 950.796729][ T954] usb 10-1: USB disconnect, device number 56 [ 950.817154][T27064] QAT: failed to copy from user cfg_data. [ 951.081200][T27086] nfs4: Unknown parameter '' [ 951.090613][T27086] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4681'. [ 951.162969][T27090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.172855][T27090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.182715][T27090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 951.192172][T27090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 951.764846][ T24] usb 10-1: new low-speed USB device number 57 using dummy_hcd [ 951.962242][ T24] usb 10-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 951.988994][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.014142][ T24] usb 10-1: config 0 descriptor?? [ 952.020171][T27127] nfs4: Unknown parameter '' [ 952.044335][T27127] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4694'. [ 952.152611][T27134] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4695'. [ 952.672058][ T24] asix 10-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 952.704688][ T24] asix 10-1:0.0: probe with driver asix failed with error -61 [ 952.798214][T27158] nfs4: Unknown parameter '' [ 952.805843][T27158] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4704'. [ 952.984239][T27167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 952.993587][T27167] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 953.443805][ T954] usb 7-1: new low-speed USB device number 55 using dummy_hcd [ 953.610318][ T954] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 953.619889][ T954] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.631067][ T954] usb 7-1: config 0 descriptor?? [ 953.757915][T27200] nfs4: Unknown parameter '' [ 953.764246][T27200] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4715'. [ 954.714833][T16509] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 954.726266][T16509] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 954.735513][T16509] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 954.744269][T16509] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 954.752978][T16509] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 954.858891][ T24] usb 10-1: USB disconnect, device number 57 [ 955.214138][T21922] raw-gadget.3 gadget.8: failed to queue disconnect event [ 955.287570][ T1151] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.322838][T27212] chnl_net:caif_netlink_parms(): no params data found [ 955.384410][ T1151] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.448519][ T1151] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.620918][ T1151] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.664255][T27212] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.671647][T27212] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.679749][T27212] bridge_slave_0: entered allmulticast mode [ 955.687002][T27212] bridge_slave_0: entered promiscuous mode [ 955.696092][T27212] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.706435][T27212] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.714026][T27212] bridge_slave_1: entered allmulticast mode [ 955.721698][T27212] bridge_slave_1: entered promiscuous mode [ 955.782068][T27212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 955.797024][T27212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 955.889035][T27212] team0: Port device team_slave_0 added [ 955.905293][T27212] team0: Port device team_slave_1 added [ 956.029285][ T954] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 956.051772][ T954] asix 7-1:0.0: probe with driver asix failed with error -71 [ 956.062127][T27212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 956.082272][T27212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.096583][ T954] usb 7-1: USB disconnect, device number 55 [ 956.134698][T27212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 956.191288][T27212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 956.201563][T27212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 956.230711][T27212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 956.359554][T27524] nfs4: Unknown parameter '' [ 956.364479][T27212] hsr_slave_0: entered promiscuous mode [ 956.365650][T27212] hsr_slave_1: entered promiscuous mode [ 956.379748][T27212] debugfs: 'hsr0' already exists in 'hsr' [ 956.383789][T27524] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4725'. [ 956.387313][T27212] Cannot create hsr debugfs directory [ 956.401144][ T1151] bridge_slave_1: left allmulticast mode [ 956.407081][ T1151] bridge_slave_1: left promiscuous mode [ 956.412903][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.422977][ T1151] bridge_slave_0: left allmulticast mode [ 956.429563][ T1151] bridge_slave_0: left promiscuous mode [ 956.435338][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.698145][T27539] netlink: 56 bytes leftover after parsing attributes in process `syz.6.4727'. [ 956.832368][ T1151] team0: Port device geneve0 removed [ 956.985085][T16509] Bluetooth: hci2: command tx timeout [ 957.160739][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 957.175490][ T1151] bond_slave_1: left promiscuous mode [ 957.181695][ T1151] bond_slave_1: left allmulticast mode [ 957.191122][ T1151] bond0 (unregistering): Released all slaves [ 957.681781][ T24] usb 10-1: new high-speed USB device number 58 using dummy_hcd [ 957.871026][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 957.877057][ T24] usb 10-1: too many configurations: 10, using maximum allowed: 8 [ 957.952924][ T24] usb 10-1: New USB device found, idVendor=00bb, idProduct=0da4, bcdDevice=6a.6b [ 957.978273][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.986438][ T24] usb 10-1: Product: syz [ 958.003301][ T24] usb 10-1: Manufacturer: syz [ 958.008131][ T24] usb 10-1: SerialNumber: syz [ 958.044707][ T24] usb 10-1: config 0 descriptor?? [ 958.196911][T27665] nfs4: Unknown parameter '' [ 958.205893][T27665] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4738'. [ 958.282031][ T5894] usb 10-1: USB disconnect, device number 58 [ 958.519350][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 958.534108][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 958.587374][T27212] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 958.619434][T27212] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 958.652694][T27212] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 958.698155][T27212] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 958.910430][T27212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.949249][ T1151] tipc: Left network mode [ 958.978012][ T1151] IPVS: stopping master sync thread 24587 ... [ 958.989584][T27212] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.045919][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.053173][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 959.206103][T16509] Bluetooth: hci2: command tx timeout [ 959.225304][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.232586][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.419577][T27716] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 959.419577][T27716] program syz.6.4744 not setting count and/or reply_len properly [ 959.621580][T27716] syzkaller0: entered promiscuous mode [ 959.629367][ T954] usb 10-1: new high-speed USB device number 59 using dummy_hcd [ 959.643503][T27716] syzkaller0: entered allmulticast mode [ 959.802275][ T954] usb 10-1: config 0 interface 0 has no altsetting 0 [ 959.809368][ T954] usb 10-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 959.824409][ T954] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.850562][ T954] usb 10-1: config 0 descriptor?? [ 959.865680][T27747] nfs4: Unknown parameter '' [ 959.886976][T27747] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4748'. [ 960.760569][ T954] video4linux radio48: keene_cmd_main failed (-71) [ 960.768673][ T954] radio-keene 10-1:0.0: V4L2 device registered as radio48 [ 960.783933][ T954] usb 10-1: USB disconnect, device number 59 [ 961.426838][T16509] Bluetooth: hci2: command tx timeout [ 961.472318][T27767] ALSA: mixer_oss: invalid OSS volume '' [ 961.895682][ T1151] hsr_slave_0: left promiscuous mode [ 961.902473][ T1151] hsr_slave_1: left promiscuous mode [ 961.912127][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 961.920140][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 961.956965][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 961.967398][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 962.018915][T27778] netlink: 5 bytes leftover after parsing attributes in process `syz.7.4752'. [ 962.050418][ T1151] veth1_macvtap: left promiscuous mode [ 962.065795][ T1151] veth0_macvtap: left promiscuous mode [ 962.082248][ T1151] veth1_vlan: left promiscuous mode [ 962.091653][ T1151] veth0_vlan: left promiscuous mode [ 962.608479][ T954] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 962.790498][ T954] usb 7-1: Using ep0 maxpacket: 16 [ 962.806342][ T954] usb 7-1: config 187 has an invalid interface number: 162 but max is 0 [ 962.815247][ T954] usb 7-1: config 187 has no interface number 0 [ 962.821566][ T954] usb 7-1: config 187 interface 162 altsetting 3 endpoint 0xC has an invalid bInterval 128, changing to 7 [ 962.833650][ T954] usb 7-1: config 187 interface 162 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 962.846898][ T954] usb 7-1: config 187 interface 162 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 962.861851][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 962.861949][ T954] usb 7-1: config 187 interface 162 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 962.880706][ T954] usb 7-1: config 187 interface 162 altsetting 3 has a duplicate endpoint with address 0x4, skipping [ 962.896993][ T954] usb 7-1: config 187 interface 162 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 962.913135][ T954] usb 7-1: config 187 interface 162 altsetting 3 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 962.926355][ T954] usb 7-1: config 187 interface 162 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 962.937516][ T954] usb 7-1: config 187 interface 162 has no altsetting 0 [ 962.946971][ T954] usb 7-1: New USB device found, idVendor=3731, idProduct=010c, bcdDevice=7c.29 [ 962.956479][ T954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 962.975309][ T954] usb 7-1: Product: င [ 962.979590][ T954] usb 7-1: Manufacturer: ␊ [ 962.984442][ T954] usb 7-1: SerialNumber: ⪣侄ෘ [ 963.175012][ T1151] batadv0 (unregistering): left allmulticast mode [ 963.360281][T27778] 0{X: renamed from 31{X (while UP) [ 963.369809][T27778] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 963.559297][T27804] nfs4: Unknown parameter '' [ 963.577378][T27804] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4759'. [ 963.646938][T16509] Bluetooth: hci2: command tx timeout [ 963.728219][ T1151] IPVS: stop unused estimator thread 0... [ 963.812418][T27212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.221750][T27212] veth0_vlan: entered promiscuous mode [ 964.242213][T27212] veth1_vlan: entered promiscuous mode [ 964.306358][T27212] veth0_macvtap: entered promiscuous mode [ 964.324269][T27212] veth1_macvtap: entered promiscuous mode [ 964.360686][T27212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.385376][T27212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.404072][ T36] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.413492][ T3520] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.423474][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.436849][ T13] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.539867][ T3520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.560114][ T3520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.596806][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.605121][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 965.582607][ T954] option 7-1:187.162: GSM modem (1-port) converter detected [ 965.627936][ T954] usb 7-1: USB disconnect, device number 56 [ 965.653530][ T954] option 7-1:187.162: device disconnected [ 965.926236][T27901] nfs4: Unknown parameter '' [ 965.932768][T27901] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4767'. [ 966.142567][ T954] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 966.319529][ T954] usb 7-1: Using ep0 maxpacket: 8 [ 966.326958][ T954] usb 7-1: config 162 has an invalid interface number: 3 but max is 0 [ 966.335756][ T954] usb 7-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config [ 966.346213][ T954] usb 7-1: config 162 has no interface number 0 [ 966.352666][ T954] usb 7-1: too many endpoints for config 162 interface 3 altsetting 3: 255, using maximum allowed: 30 [ 966.364373][ T954] usb 7-1: config 162 interface 3 altsetting 3 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 966.375796][ T954] usb 7-1: config 162 interface 3 altsetting 3 endpoint 0x85 has invalid wMaxPacketSize 0 [ 966.386226][ T954] usb 7-1: config 162 interface 3 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 966.400334][ T954] usb 7-1: config 162 interface 3 has no altsetting 0 [ 966.418093][ T954] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 966.431155][ T954] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.446962][ T954] usb 7-1: Product: syz [ 966.452101][ T954] usb 7-1: Manufacturer: syz [ 966.456751][ T954] usb 7-1: SerialNumber: syz [ 966.699933][ T954] metro_usb 7-1:162.3: interrupt-out endpoint missing [ 966.718119][ T954] usb 7-1: USB disconnect, device number 57 [ 967.039693][T27951] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4777'. [ 967.052841][T27951] nfs4: Unknown parameter '' [ 967.059205][T27951] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4777'. [ 967.583335][ T954] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 967.774863][ T954] usb 9-1: Using ep0 maxpacket: 32 [ 967.782184][ T954] usb 9-1: config index 0 descriptor too short (expected 44, got 36) [ 967.790090][T27987] netlink: 100 bytes leftover after parsing attributes in process `syz.9.4786'. [ 967.791545][ T10] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 967.803328][T27987] nfs4: Unknown parameter '' [ 967.814577][T27987] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4786'. [ 967.816395][ T954] usb 9-1: config 0 has an invalid interface number: 126 but max is 0 [ 967.836765][ T954] usb 9-1: config 0 has no interface number 0 [ 967.859470][ T954] usb 9-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 967.883022][ T954] usb 9-1: config 0 interface 126 altsetting 16 endpoint 0x82 has invalid wMaxPacketSize 0 [ 967.894786][ T954] usb 9-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 0 [ 967.905293][ T954] usb 9-1: config 0 interface 126 has no altsetting 0 [ 967.916815][ T954] usb 9-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 967.933500][ T954] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 967.947235][ T954] usb 9-1: Product: syz [ 967.951494][ T954] usb 9-1: Manufacturer: syz [ 967.958157][ T954] usb 9-1: SerialNumber: syz [ 967.972605][T27994] FAULT_INJECTION: forcing a failure. [ 967.972605][T27994] name failslab, interval 1, probability 0, space 0, times 0 [ 967.986942][ T954] usb 9-1: config 0 descriptor?? [ 967.987031][T27994] CPU: 1 UID: 0 PID: 27994 Comm: syz.7.4788 Not tainted syzkaller #0 PREEMPT(full) [ 967.987064][T27994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 967.987083][T27994] Call Trace: [ 967.987093][T27994] [ 967.987104][T27994] dump_stack_lvl+0x189/0x250 [ 967.987135][T27994] ? __pfx____ratelimit+0x10/0x10 [ 967.987173][T27994] ? __pfx_dump_stack_lvl+0x10/0x10 [ 967.987195][T27994] ? __pfx__printk+0x10/0x10 [ 967.987245][T27994] ? __pfx___might_resched+0x10/0x10 [ 967.987274][T27994] ? fs_reclaim_acquire+0x7d/0x100 [ 967.987310][T27994] should_fail_ex+0x414/0x560 [ 967.987346][T27994] should_failslab+0xa8/0x100 [ 967.987378][T27994] kmem_cache_alloc_noprof+0x74/0x6e0 [ 967.987404][T27994] ? getname_flags+0xb8/0x540 [ 967.987445][T27994] getname_flags+0xb8/0x540 [ 967.987486][T27994] do_sys_openat2+0xbc/0x1c0 [ 967.987514][T27994] ? __pfx_do_sys_openat2+0x10/0x10 [ 967.987537][T27994] ? ksys_write+0x22a/0x250 [ 967.987569][T27994] ? __pfx_ksys_write+0x10/0x10 [ 967.987600][T27994] __x64_sys_open+0x11e/0x150 [ 967.987631][T27994] do_syscall_64+0xfa/0xfa0 [ 967.987675][T27994] ? lockdep_hardirqs_on+0x9c/0x150 [ 967.987712][T27994] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.987736][T27994] ? clear_bhb_loop+0x60/0xb0 [ 967.987767][T27994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.987790][T27994] RIP: 0033:0x7efe1578eba9 [ 967.987813][T27994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 967.987835][T27994] RSP: 002b:00007efe166ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 967.987862][T27994] RAX: ffffffffffffffda RBX: 00007efe159d5fa0 RCX: 00007efe1578eba9 [ 967.987881][T27994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000300 [ 967.987897][T27994] RBP: 00007efe166ff090 R08: 0000000000000000 R09: 0000000000000000 [ 967.987913][T27994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 967.987927][T27994] R13: 00007efe159d6038 R14: 00007efe159d5fa0 R15: 00007ffcf53d7628 [ 967.987967][T27994] [ 968.213412][T27961] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 968.235677][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 968.242415][ T10] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 968.252776][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.272104][ T10] usb 7-1: config 0 descriptor?? [ 968.680712][ T954] ir_usb 9-1:0.126: IR Dongle converter detected [ 968.928472][ C0] hrtimer: interrupt took 68528 ns [ 968.940656][T27959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 968.961804][T27959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 968.993853][T27959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 969.021101][T27959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 969.072111][ T954] usb 9-1: IR Dongle converter now attached to ttyUSB0 [ 969.160196][ T10] video4linux radio48: keene_cmd_main failed (-71) [ 969.171891][ T10] radio-keene 7-1:0.0: V4L2 device registered as radio48 [ 969.190526][T28036] netlink: 100 bytes leftover after parsing attributes in process `syz.9.4797'. [ 969.202872][ T10] usb 7-1: USB disconnect, device number 58 [ 969.231163][T28036] nfs4: Unknown parameter '' [ 969.246294][T28036] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4797'. [ 969.315190][T28053] netlink: 9 bytes leftover after parsing attributes in process `syz.7.4798'. [ 969.355881][T28053] 0{: renamed from 30{X (while UP) [ 969.402607][T28053] A link change request failed with some changes committed already. Interface 30{ may have been left with an inconsistent configuration, please check. [ 969.516803][ T10] usb 9-1: USB disconnect, device number 60 [ 969.545550][ T10] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0 [ 969.574722][ T10] ir_usb 9-1:0.126: device disconnected [ 970.148028][ T10] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 970.336164][ T10] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 970.359810][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.386719][T28097] netlink: 100 bytes leftover after parsing attributes in process `syz.7.4808'. [ 970.391384][ T10] usb 9-1: Product: syz [ 970.408939][ T10] usb 9-1: Manufacturer: syz [ 970.413648][T28097] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4808'. [ 970.413673][ T10] usb 9-1: SerialNumber: syz [ 970.441803][ T10] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 970.459938][ T954] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 970.570619][T28109] af_packet: tpacket_rcv: packet too big, clamped from 388 to 4294967272. macoff=96 [ 970.691098][ T44] usb 9-1: USB disconnect, device number 61 [ 970.832246][ T983] usb 10-1: new high-speed USB device number 60 using dummy_hcd [ 970.907616][T28119] Set syz1 is full, maxelem 65536 reached [ 970.992960][ T983] usb 10-1: Using ep0 maxpacket: 8 [ 970.999630][ T983] usb 10-1: config 162 has an invalid interface number: 4 but max is 1 [ 971.008585][ T983] usb 10-1: config 162 has an invalid interface number: 94 but max is 1 [ 971.017602][ T983] usb 10-1: config 162 has no interface number 0 [ 971.023947][ T983] usb 10-1: config 162 has no interface number 1 [ 971.031875][ T983] usb 10-1: config 162 interface 4 altsetting 4 endpoint 0x86 has invalid maxpacket 1024, setting to 64 [ 971.046000][ T983] usb 10-1: config 162 interface 94 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 971.058125][ T983] usb 10-1: config 162 interface 94 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 971.070270][ T983] usb 10-1: config 162 interface 94 altsetting 1 has a duplicate endpoint with address 0x86, skipping [ 971.081389][ T983] usb 10-1: config 162 interface 94 altsetting 1 has a duplicate endpoint with address 0x85, skipping [ 971.092398][ T983] usb 10-1: config 162 interface 94 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 971.106758][ T983] usb 10-1: config 162 interface 4 has no altsetting 0 [ 971.113837][ T983] usb 10-1: config 162 interface 94 has no altsetting 0 [ 971.122953][ T983] usb 10-1: New USB device found, idVendor=05c6, idProduct=9062, bcdDevice=4b.11 [ 971.132140][ T983] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.140238][ T983] usb 10-1: Product: syz [ 971.145077][ T983] usb 10-1: Manufacturer: syz [ 971.149822][ T983] usb 10-1: SerialNumber: syz [ 971.260237][ T5953] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 971.386153][T28111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.402169][T28111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.428880][ T5953] usb 7-1: config 0 interface 0 has no altsetting 0 [ 971.438671][ T5953] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 971.457161][ T983] usb 10-1: USB disconnect, device number 60 [ 971.474054][ T5953] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.502164][ T5953] usb 7-1: config 0 descriptor?? [ 971.604241][ T954] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 971.615422][ T954] ath9k_htc: Failed to initialize the device [ 971.623213][ T44] usb 9-1: ath9k_htc: USB layer deinitialized [ 971.818176][T28161] FAULT_INJECTION: forcing a failure. [ 971.818176][T28161] name failslab, interval 1, probability 0, space 0, times 0 [ 971.857621][T28161] CPU: 0 UID: 0 PID: 28161 Comm: syz.7.4816 Not tainted syzkaller #0 PREEMPT(full) [ 971.857652][T28161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 971.857666][T28161] Call Trace: [ 971.857676][T28161] [ 971.857686][T28161] dump_stack_lvl+0x189/0x250 [ 971.857712][T28161] ? __pfx____ratelimit+0x10/0x10 [ 971.857744][T28161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 971.857765][T28161] ? __pfx__printk+0x10/0x10 [ 971.857803][T28161] ? __pfx___might_resched+0x10/0x10 [ 971.857835][T28161] should_fail_ex+0x414/0x560 [ 971.857867][T28161] should_failslab+0xa8/0x100 [ 971.857896][T28161] kmem_cache_alloc_noprof+0x74/0x6e0 [ 971.857920][T28161] ? security_file_alloc+0x34/0x330 [ 971.857952][T28161] security_file_alloc+0x34/0x330 [ 971.857981][T28161] init_file+0x93/0x2f0 [ 971.858018][T28161] alloc_empty_file+0x6e/0x1d0 [ 971.858052][T28161] path_openat+0x107/0x3830 [ 971.858086][T28161] ? stack_trace_save+0x9c/0xe0 [ 971.858126][T28161] ? stack_depot_save_flags+0x40/0x860 [ 971.858152][T28161] ? _parse_integer_limit+0xc1/0x1f0 [ 971.858186][T28161] ? kasan_save_track+0x4f/0x80 [ 971.858209][T28161] ? getname_flags+0xb8/0x540 [ 971.858238][T28161] ? do_sys_openat2+0xbc/0x1c0 [ 971.858269][T28161] ? __x64_sys_openat+0x138/0x170 [ 971.858288][T28161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.858311][T28161] ? __pfx_path_openat+0x10/0x10 [ 971.858355][T28161] do_filp_open+0x1fa/0x410 [ 971.858376][T28161] ? __lock_acquire+0xab9/0xd20 [ 971.858422][T28161] ? __pfx_do_filp_open+0x10/0x10 [ 971.858470][T28161] ? _raw_spin_unlock+0x28/0x50 [ 971.858500][T28161] ? alloc_fd+0x64c/0x6c0 [ 971.858542][T28161] do_sys_openat2+0x121/0x1c0 [ 971.858566][T28161] ? __pfx_do_sys_openat2+0x10/0x10 [ 971.858591][T28161] ? ksys_write+0x22a/0x250 [ 971.858619][T28161] ? __pfx_ksys_write+0x10/0x10 [ 971.858648][T28161] __x64_sys_openat+0x138/0x170 [ 971.858675][T28161] do_syscall_64+0xfa/0xfa0 [ 971.858706][T28161] ? lockdep_hardirqs_on+0x9c/0x150 [ 971.858740][T28161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.858763][T28161] ? clear_bhb_loop+0x60/0xb0 [ 971.858791][T28161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.858813][T28161] RIP: 0033:0x7efe1578eba9 [ 971.858834][T28161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.858853][T28161] RSP: 002b:00007efe166de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 971.858878][T28161] RAX: ffffffffffffffda RBX: 00007efe159d6090 RCX: 00007efe1578eba9 [ 971.858895][T28161] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 971.858912][T28161] RBP: 00007efe166de090 R08: 0000000000000000 R09: 0000000000000000 [ 971.858926][T28161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.858940][T28161] R13: 00007efe159d6128 R14: 00007efe159d6090 R15: 00007ffcf53d7628 [ 971.858976][T28161] [ 972.142745][ C0] vkms_vblank_simulate: vblank timer overrun [ 972.529008][T28170] netlink: 100 bytes leftover after parsing attributes in process `syz.9.4819'. [ 972.545787][T28170] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4819'. [ 972.614067][ T5953] video4linux radio48: keene_cmd_main failed (-71) [ 972.628854][ T5953] radio-keene 7-1:0.0: V4L2 device registered as radio48 [ 972.669928][ T5953] usb 7-1: USB disconnect, device number 59 [ 972.685381][T28179] syzkaller1: entered promiscuous mode [ 972.690903][T28179] syzkaller1: entered allmulticast mode [ 973.305296][T28217] FAULT_INJECTION: forcing a failure. [ 973.305296][T28217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 973.320347][T28217] CPU: 1 UID: 0 PID: 28217 Comm: syz.8.4827 Not tainted syzkaller #0 PREEMPT(full) [ 973.320376][T28217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 973.320390][T28217] Call Trace: [ 973.320398][T28217] [ 973.320407][T28217] dump_stack_lvl+0x189/0x250 [ 973.320432][T28217] ? __pfx____ratelimit+0x10/0x10 [ 973.320467][T28217] ? __pfx_dump_stack_lvl+0x10/0x10 [ 973.320493][T28217] ? __pfx__printk+0x10/0x10 [ 973.320534][T28217] should_fail_ex+0x414/0x560 [ 973.320563][T28217] _copy_to_user+0x31/0xb0 [ 973.320586][T28217] simple_read_from_buffer+0xe1/0x170 [ 973.320618][T28217] proc_fail_nth_read+0x1b3/0x220 [ 973.320641][T28217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 973.320664][T28217] ? rw_verify_area+0x2a6/0x4d0 [ 973.320686][T28217] ? __lock_acquire+0xab9/0xd20 [ 973.320707][T28217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 973.320728][T28217] vfs_read+0x200/0xa30 [ 973.320751][T28217] ? fdget_pos+0x247/0x320 [ 973.320782][T28217] ? __pfx___mutex_lock+0x10/0x10 [ 973.320803][T28217] ? __pfx_vfs_read+0x10/0x10 [ 973.320828][T28217] ? __fget_files+0x2a/0x420 [ 973.320859][T28217] ? __fget_files+0x3a0/0x420 [ 973.320884][T28217] ? __fget_files+0x2a/0x420 [ 973.320930][T28217] ksys_read+0x145/0x250 [ 973.320957][T28217] ? __pfx_ksys_read+0x10/0x10 [ 973.320984][T28217] ? do_syscall_64+0xbe/0xfa0 [ 973.321019][T28217] do_syscall_64+0xfa/0xfa0 [ 973.321049][T28217] ? lockdep_hardirqs_on+0x9c/0x150 [ 973.321078][T28217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.321098][T28217] ? clear_bhb_loop+0x60/0xb0 [ 973.321122][T28217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.321143][T28217] RIP: 0033:0x7fe037f8d5bc [ 973.321161][T28217] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 973.321179][T28217] RSP: 002b:00007fe0361ee030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 973.321201][T28217] RAX: ffffffffffffffda RBX: 00007fe0381d5fa0 RCX: 00007fe037f8d5bc [ 973.321216][T28217] RDX: 000000000000000f RSI: 00007fe0361ee0a0 RDI: 0000000000000003 [ 973.321230][T28217] RBP: 00007fe0361ee090 R08: 0000000000000000 R09: 0000000000000000 [ 973.321243][T28217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 973.321255][T28217] R13: 00007fe0381d6038 R14: 00007fe0381d5fa0 R15: 00007fffd97f4688 [ 973.321289][T28217] [ 973.598357][T28220] netlink: 100 bytes leftover after parsing attributes in process `syz.9.4828'. [ 973.615157][T28220] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4828'. [ 973.708771][ T44] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 973.870996][ T44] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 973.890477][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 973.902045][ T44] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 973.914056][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 973.925830][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 973.938489][ T44] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 973.948155][ T44] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.956263][ T44] usb 7-1: Product: syz [ 973.960461][ T44] usb 7-1: Manufacturer: syz [ 973.965106][ T44] usb 7-1: SerialNumber: syz [ 973.965657][ T5986] usb 10-1: new high-speed USB device number 61 using dummy_hcd [ 973.973778][ T44] usb 7-1: config 0 descriptor?? [ 973.986871][ T44] iguanair 7-1:0.0: probe with driver iguanair failed with error -12 [ 974.162399][ T5986] usb 10-1: Using ep0 maxpacket: 8 [ 974.176016][ T5986] usb 10-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 974.187717][ T5986] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.196425][ T5986] usb 10-1: Product: syz [ 974.201107][ T5986] usb 10-1: Manufacturer: syz [ 974.205818][ T5986] usb 10-1: SerialNumber: syz [ 974.222763][ T5986] usb 10-1: config 0 descriptor?? [ 974.393161][ T954] usb 7-1: USB disconnect, device number 60 [ 974.451698][ T5986] usb 10-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 974.478705][ T44] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 974.649822][ T44] usb 9-1: Using ep0 maxpacket: 32 [ 974.657032][ T44] usb 9-1: config index 0 descriptor too short (expected 8242, got 50) [ 974.665526][ T44] usb 9-1: config 0 has an invalid interface number: 234 but max is 0 [ 974.673791][ T44] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 974.684004][ T44] usb 9-1: config 0 has no interface number 0 [ 974.690182][ T44] usb 9-1: config 0 interface 234 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 974.700252][ T44] usb 9-1: config 0 interface 234 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 974.710191][ T44] usb 9-1: config 0 interface 234 has no altsetting 0 [ 974.719540][ T44] usb 9-1: New USB device found, idVendor=0781, idProduct=0200, bcdDevice=3c.a2 [ 974.728672][ T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.736853][ T44] usb 9-1: Product: syz [ 974.741041][ T44] usb 9-1: Manufacturer: syz [ 974.745654][ T44] usb 9-1: SerialNumber: syz [ 974.754135][ T44] usb 9-1: config 0 descriptor?? [ 974.980858][ T44] ums-sddr09 9-1:0.234: USB Mass Storage device detected [ 975.051718][ T44] ums-sddr09 9-1:0.234: probe with driver ums-sddr09 failed with error -22 [ 975.066141][ T44] usb 9-1: USB disconnect, device number 62 [ 975.125081][T28225] tmpfs: Bad value for 'mpol' [ 975.554892][T28286] netlink: 100 bytes leftover after parsing attributes in process `syz.8.4839'. [ 975.573418][T28287] FAULT_INJECTION: forcing a failure. [ 975.573418][T28287] name failslab, interval 1, probability 0, space 0, times 0 [ 975.580726][T28286] nfs4: Unknown parameter '' [ 975.588743][T28287] CPU: 1 UID: 0 PID: 28287 Comm: syz.6.4838 Not tainted syzkaller #0 PREEMPT(full) [ 975.588778][T28287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 975.588795][T28287] Call Trace: [ 975.588805][T28287] [ 975.588816][T28287] dump_stack_lvl+0x189/0x250 [ 975.588847][T28287] ? __pfx____ratelimit+0x10/0x10 [ 975.588885][T28287] ? __pfx_dump_stack_lvl+0x10/0x10 [ 975.588919][T28287] ? __pfx__printk+0x10/0x10 [ 975.588962][T28287] ? __pfx___might_resched+0x10/0x10 [ 975.588999][T28287] should_fail_ex+0x414/0x560 [ 975.589035][T28287] should_failslab+0xa8/0x100 [ 975.589067][T28287] kmem_cache_alloc_lru_noprof+0x79/0x6d0 [ 975.589094][T28287] ? __d_alloc+0x36/0x7a0 [ 975.589139][T28287] __d_alloc+0x36/0x7a0 [ 975.589183][T28287] d_alloc_parallel+0xe5/0x15e0 [ 975.589227][T28287] ? __d_lookup+0x66/0x780 [ 975.589255][T28287] ? __pfx_d_alloc_parallel+0x10/0x10 [ 975.589301][T28287] path_openat+0xa3b/0x3830 [ 975.589371][T28287] ? __pfx_path_openat+0x10/0x10 [ 975.589422][T28287] do_filp_open+0x1fa/0x410 [ 975.589447][T28287] ? __lock_acquire+0xab9/0xd20 [ 975.589477][T28287] ? __pfx_do_filp_open+0x10/0x10 [ 975.589545][T28287] ? _raw_spin_unlock+0x28/0x50 [ 975.589576][T28287] ? alloc_fd+0x64c/0x6c0 [ 975.589621][T28287] do_sys_openat2+0x121/0x1c0 [ 975.589646][T28287] ? __pfx_do_sys_openat2+0x10/0x10 [ 975.589674][T28287] ? ksys_write+0x22a/0x250 [ 975.589704][T28287] ? __pfx_ksys_write+0x10/0x10 [ 975.589735][T28287] __x64_sys_openat+0x138/0x170 [ 975.589774][T28287] do_syscall_64+0xfa/0xfa0 [ 975.589806][T28287] ? lockdep_hardirqs_on+0x9c/0x150 [ 975.589840][T28287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.589863][T28287] ? clear_bhb_loop+0x60/0xb0 [ 975.589890][T28287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.589917][T28287] RIP: 0033:0x7fdac6d8eba9 [ 975.589938][T28287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 975.589957][T28287] RSP: 002b:00007fdac7cb2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 975.589982][T28287] RAX: ffffffffffffffda RBX: 00007fdac6fd6180 RCX: 00007fdac6d8eba9 [ 975.589999][T28287] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 975.590015][T28287] RBP: 00007fdac7cb2090 R08: 0000000000000000 R09: 0000000000000000 [ 975.590029][T28287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 975.590044][T28287] R13: 00007fdac6fd6218 R14: 00007fdac6fd6180 R15: 00007ffeca61c908 [ 975.590089][T28287] [ 975.648872][T28288] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4839'. [ 975.910484][T28288] bond0: (slave bond_slave_0): Releasing backup interface [ 976.058437][ T5986] usb write operation failed. (-71) [ 976.091738][ T5986] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 976.103225][ T5986] dvbdev: DVB: registering new adapter (Terratec H7) [ 976.113196][ T5986] usb 10-1: media controller created [ 976.130789][ T5986] usb read operation failed. (-71) [ 976.147087][ T5986] usb write operation failed. (-71) [ 976.175507][ T5986] dvb_usb_az6007 10-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 976.210237][ T5986] usb 10-1: USB disconnect, device number 61 [ 976.711635][T28331] fuse: Bad value for 'fd' [ 976.924760][T28337] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 977.088703][T28348] netlink: 100 bytes leftover after parsing attributes in process `syz.9.4850'. [ 977.106007][T28348] nfs4: Unknown parameter '' [ 977.112220][T28348] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4850'. [ 977.207093][ T5986] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 977.390727][ T5986] usb 7-1: Using ep0 maxpacket: 16 [ 977.398194][ T5986] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 977.407953][ T5986] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.448133][ T5986] usb 7-1: config 0 descriptor?? [ 977.486246][ T5986] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 977.706372][ T5986] usb 7-1: Detected FT232A [ 977.726406][ T5986] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 977.765783][ T5986] usb 7-1: USB disconnect, device number 61 [ 977.800869][ T5986] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 977.837226][ T5986] ftdi_sio 7-1:0.0: device disconnected [ 978.003957][T28400] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4859'. [ 978.094404][T28403] netlink: 100 bytes leftover after parsing attributes in process `syz.9.4860'. [ 978.112570][T28403] nfs4: Unknown parameter '' [ 978.120387][T28403] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4860'. [ 978.131588][ T44] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 978.296764][ T44] usb 9-1: Using ep0 maxpacket: 32 [ 978.313861][ T44] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 978.335023][ T44] usb 9-1: config 0 has no interface number 0 [ 978.344524][T28414] comedi comedi3: comedi_config --init_data is deprecated [ 978.352227][ T44] usb 9-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 978.384401][ T44] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 978.399457][ T44] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.419096][ T44] usb 9-1: Product: syz [ 978.423368][ T44] usb 9-1: Manufacturer: syz [ 978.435446][ T44] usb 9-1: SerialNumber: syz [ 978.455842][ T44] usb 9-1: config 0 descriptor?? [ 978.482928][ T44] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 978.510490][ T44] em28xx 9-1:0.132: Video interface 132 found: [ 978.700663][T28389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.727690][T28389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.758103][T28389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.780713][T28389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.869767][T28426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.895473][T28426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.974897][ T44] em28xx 9-1:0.132: unknown em28xx chip ID (0) [ 979.074462][ T44] em28xx 9-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 979.107230][ T44] em28xx 9-1:0.132: board has no eeprom [ 979.184435][ T44] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 979.192371][ T44] em28xx 9-1:0.132: analog set to bulk mode. [ 979.199534][ T5953] em28xx 9-1:0.132: Registering V4L2 extension [ 979.223327][ T44] usb 9-1: USB disconnect, device number 63 [ 979.244395][ T44] em28xx 9-1:0.132: Disconnecting em28xx [ 979.528864][ T5953] em28xx 9-1:0.132: Config register raw data: 0xffffffed [ 979.568056][ T5953] em28xx 9-1:0.132: AC97 chip type couldn't be determined [ 979.601029][ T5953] em28xx 9-1:0.132: No AC97 audio processor [ 979.632515][ T5953] usb 9-1: Decoder not found [ 979.660189][ T5953] em28xx 9-1:0.132: failed to create media graph [ 979.687841][ T5953] em28xx 9-1:0.132: V4L2 device video103 deregistered [ 979.690588][T28458] netlink: 100 bytes leftover after parsing attributes in process `syz.9.4869'. [ 979.716275][ T5953] em28xx 9-1:0.132: Remote control support is not available for this card. [ 979.731485][ T44] em28xx 9-1:0.132: Closing input extension [ 979.739769][T28461] FAULT_INJECTION: forcing a failure. [ 979.739769][T28461] name failslab, interval 1, probability 0, space 0, times 0 [ 979.750094][T28458] netlink: 4 bytes leftover after parsing attributes in process `syz.9.4869'. [ 979.766909][ T44] ================================================================== [ 979.775101][ T44] BUG: KASAN: slab-use-after-free in media_devnode_unregister+0xe2/0xf0 [ 979.783461][ T44] Read of size 4 at addr ffff8880675624f0 by task kworker/1:1/44 [ 979.791178][ T44] [ 979.793514][ T44] CPU: 1 UID: 0 PID: 44 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 979.793540][ T44] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 979.793555][ T44] Workqueue: usb_hub_wq hub_event [ 979.793580][ T44] Call Trace: [ 979.793588][ T44] [ 979.793597][ T44] dump_stack_lvl+0x189/0x250 [ 979.793616][ T44] ? rcu_is_watching+0x15/0xb0 [ 979.793636][ T44] ? __kasan_check_byte+0x12/0x40 [ 979.793656][ T44] ? __pfx_dump_stack_lvl+0x10/0x10 [ 979.793670][ T44] ? rcu_is_watching+0x15/0xb0 [ 979.793691][ T44] ? lock_release+0x4b/0x3e0 [ 979.793711][ T44] ? __virt_addr_valid+0x1c8/0x5c0 [ 979.793736][ T44] ? __virt_addr_valid+0x4a5/0x5c0 [ 979.793761][ T44] print_report+0xca/0x240 [ 979.793777][ T44] ? media_devnode_unregister+0xe2/0xf0 [ 979.793799][ T44] kasan_report+0x118/0x150 [ 979.793818][ T44] ? media_devnode_unregister+0xe2/0xf0 [ 979.793842][ T44] media_devnode_unregister+0xe2/0xf0 [ 979.793864][ T44] media_device_unregister+0x37c/0x400 [ 979.793887][ T44] em28xx_release_resources+0xac/0x240 [ 979.793915][ T44] em28xx_usb_disconnect+0x19f/0x2f0 [ 979.793939][ T44] usb_unbind_interface+0x26e/0x910 [ 979.793961][ T44] ? __pfx_usb_unbind_interface+0x10/0x10 [ 979.793980][ T44] device_release_driver_internal+0x4d9/0x800 [ 979.794005][ T44] bus_remove_device+0x34d/0x410 [ 979.794022][ T44] device_del+0x511/0x8e0 [ 979.794043][ T44] ? __pfx_device_del+0x10/0x10 [ 979.794061][ T44] ? kobject_put+0x446/0x480 [ 979.794080][ T44] usb_disable_device+0x3e9/0x8a0 [ 979.794100][ T44] usb_disconnect+0x330/0x950 [ 979.794127][ T44] hub_event+0x1cf5/0x4a20 [ 979.794154][ T44] ? do_raw_spin_lock+0x121/0x290 [ 979.794180][ T44] ? register_lock_class+0x51/0x320 [ 979.794211][ T44] ? __pfx_hub_event+0x10/0x10 [ 979.794228][ T44] ? process_scheduled_works+0x9ef/0x17b0 [ 979.794261][ T44] ? _raw_spin_unlock_irq+0x23/0x50 [ 979.794282][ T44] ? process_scheduled_works+0x9ef/0x17b0 [ 979.794300][ T44] ? process_scheduled_works+0x9ef/0x17b0 [ 979.794320][ T44] process_scheduled_works+0xae1/0x17b0 [ 979.794348][ T44] ? __pfx_process_scheduled_works+0x10/0x10 [ 979.794372][ T44] worker_thread+0x8a0/0xda0 [ 979.794400][ T44] kthread+0x711/0x8a0 [ 979.794423][ T44] ? __pfx_worker_thread+0x10/0x10 [ 979.794441][ T44] ? __pfx_kthread+0x10/0x10 [ 979.794467][ T44] ? _raw_spin_unlock_irq+0x23/0x50 [ 979.794487][ T44] ? lockdep_hardirqs_on+0x9c/0x150 [ 979.794509][ T44] ? __pfx_kthread+0x10/0x10 [ 979.794531][ T44] ret_from_fork+0x47c/0x820 [ 979.794550][ T44] ? __pfx_ret_from_fork+0x10/0x10 [ 979.794570][ T44] ? __switch_to_asm+0x39/0x70 [ 979.794585][ T44] ? __switch_to_asm+0x33/0x70 [ 979.794618][ T44] ? __pfx_kthread+0x10/0x10 [ 979.794642][ T44] ret_from_fork_asm+0x1a/0x30 [ 979.794665][ T44] [ 979.794672][ T44] [ 980.071318][ T44] Allocated by task 44: [ 980.075470][ T44] kasan_save_track+0x3e/0x80 [ 980.080169][ T44] __kasan_kmalloc+0x93/0xb0 [ 980.084766][ T44] __kmalloc_cache_noprof+0x3d5/0x6f0 [ 980.090140][ T44] __media_device_register+0x58/0x280 [ 980.095514][ T44] em28xx_usb_probe+0x1764/0x2a20 [ 980.100546][ T44] usb_probe_interface+0x665/0xc30 [ 980.105656][ T44] really_probe+0x26d/0x9e0 [ 980.110180][ T44] __driver_probe_device+0x18c/0x2f0 [ 980.115468][ T44] driver_probe_device+0x4f/0x430 [ 980.120497][ T44] __device_attach_driver+0x2ce/0x530 [ 980.125871][ T44] bus_for_each_drv+0x24e/0x2e0 [ 980.130732][ T44] __device_attach+0x2b8/0x400 [ 980.135495][ T44] bus_probe_device+0x185/0x260 [ 980.140341][ T44] device_add+0x7b6/0xb50 [ 980.144670][ T44] usb_set_configuration+0x1a87/0x20e0 [ 980.150126][ T44] usb_generic_driver_probe+0x8d/0x150 [ 980.155581][ T44] usb_probe_device+0x1c1/0x390 [ 980.160428][ T44] really_probe+0x26d/0x9e0 [ 980.164937][ T44] __driver_probe_device+0x18c/0x2f0 [ 980.170227][ T44] driver_probe_device+0x4f/0x430 [ 980.175249][ T44] __device_attach_driver+0x2ce/0x530 [ 980.180635][ T44] bus_for_each_drv+0x24e/0x2e0 [ 980.185530][ T44] __device_attach+0x2b8/0x400 [ 980.190297][ T44] bus_probe_device+0x185/0x260 [ 980.195148][ T44] device_add+0x7b6/0xb50 [ 980.199479][ T44] usb_new_device+0xa39/0x16f0 [ 980.204259][ T44] hub_event+0x2958/0x4a20 [ 980.208684][ T44] process_scheduled_works+0xae1/0x17b0 [ 980.214241][ T44] worker_thread+0x8a0/0xda0 [ 980.218836][ T44] kthread+0x711/0x8a0 [ 980.222917][ T44] ret_from_fork+0x47c/0x820 [ 980.227514][ T44] ret_from_fork_asm+0x1a/0x30 [ 980.232282][ T44] [ 980.234602][ T44] Freed by task 44: [ 980.238400][ T44] kasan_save_track+0x3e/0x80 [ 980.243104][ T44] __kasan_save_free_info+0x46/0x50 [ 980.248327][ T44] __kasan_slab_free+0x5b/0x80 [ 980.253099][ T44] kfree+0x199/0x6d0 [ 980.256993][ T44] media_devnode_release+0x61/0xa0 [ 980.262136][ T44] device_release+0x99/0x1c0 [ 980.266736][ T44] kobject_put+0x228/0x480 [ 980.271151][ T44] media_devnode_unregister+0x6d/0xf0 [ 980.276540][ T44] media_device_unregister+0x37c/0x400 [ 980.282001][ T44] em28xx_release_resources+0xac/0x240 [ 980.287481][ T44] em28xx_usb_disconnect+0x19f/0x2f0 [ 980.292773][ T44] usb_unbind_interface+0x26e/0x910 [ 980.297979][ T44] device_release_driver_internal+0x4d9/0x800 [ 980.304054][ T44] bus_remove_device+0x34d/0x410 [ 980.308994][ T44] device_del+0x511/0x8e0 [ 980.313334][ T44] usb_disable_device+0x3e9/0x8a0 [ 980.318384][ T44] usb_disconnect+0x330/0x950 [ 980.323107][ T44] hub_event+0x1cf5/0x4a20 [ 980.327523][ T44] process_scheduled_works+0xae1/0x17b0 [ 980.333071][ T44] worker_thread+0x8a0/0xda0 [ 980.337665][ T44] kthread+0x711/0x8a0 [ 980.341741][ T44] ret_from_fork+0x47c/0x820 [ 980.346332][ T44] ret_from_fork_asm+0x1a/0x30 [ 980.351104][ T44] [ 980.353442][ T44] The buggy address belongs to the object at ffff888067562000 [ 980.353442][ T44] which belongs to the cache kmalloc-2k of size 2048 [ 980.367495][ T44] The buggy address is located 1264 bytes inside of [ 980.367495][ T44] freed 2048-byte region [ffff888067562000, ffff888067562800) [ 980.381467][ T44] [ 980.383795][ T44] The buggy address belongs to the physical page: [ 980.390226][ T44] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x67560 [ 980.398989][ T44] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 980.407489][ T44] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 980.415037][ T44] page_type: f5(slab) [ 980.419024][ T44] raw: 00fff00000000040 ffff88801a842000 ffffea00015e7800 dead000000000002 [ 980.427614][ T44] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 980.436206][ T44] head: 00fff00000000040 ffff88801a842000 ffffea00015e7800 dead000000000002 [ 980.444891][ T44] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000 [ 980.453564][ T44] head: 00fff00000000003 ffffea00019d5801 00000000ffffffff 00000000ffffffff [ 980.462235][ T44] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 980.470896][ T44] page dumped because: kasan: bad access detected [ 980.477314][ T44] page_owner tracks the page as allocated [ 980.483023][ T44] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10768, tgid 10768 (syz-executor), ts 383547059069, free_ts 383532230346 [ 980.504729][ T44] post_alloc_hook+0x240/0x2a0 [ 980.509497][ T44] get_page_from_freelist+0x21e4/0x22c0 [ 980.515060][ T44] __alloc_frozen_pages_noprof+0x181/0x370 [ 980.520890][ T44] alloc_pages_mpol+0x232/0x4a0 [ 980.525755][ T44] allocate_slab+0x8a/0x330 [ 980.530277][ T44] ___slab_alloc+0xbd1/0x13f0 [ 980.534962][ T44] __slab_alloc+0x55/0xa0 [ 980.539300][ T44] __kmalloc_cache_noprof+0x411/0x6f0 [ 980.544676][ T44] rtnl_newlink+0xed/0x1c70 [ 980.549198][ T44] rtnetlink_rcv_msg+0x7cc/0xb70 [ 980.554145][ T44] netlink_rcv_skb+0x205/0x470 [ 980.558950][ T44] netlink_unicast+0x82f/0x9e0 [ 980.563743][ T44] netlink_sendmsg+0x805/0xb30 [ 980.568517][ T44] __sock_sendmsg+0x219/0x270 [ 980.573202][ T44] __sys_sendto+0x3bd/0x520 [ 980.577707][ T44] __x64_sys_sendto+0xde/0x100 [ 980.582472][ T44] page last free pid 10768 tgid 10768 stack trace: [ 980.588972][ T44] __free_frozen_pages+0xbc4/0xd30 [ 980.594092][ T44] __put_partials+0x146/0x170 [ 980.598775][ T44] put_cpu_partial+0x17c/0x250 [ 980.603549][ T44] __slab_free+0x2b9/0x390 [ 980.607974][ T44] qlist_free_all+0x97/0x140 [ 980.612562][ T44] kasan_quarantine_reduce+0x148/0x160 [ 980.618054][ T44] __kasan_slab_alloc+0x22/0x80 [ 980.622907][ T44] __kmalloc_cache_noprof+0x36f/0x6f0 [ 980.628284][ T44] kset_create_and_add+0x5a/0x170 [ 980.633319][ T44] netdev_register_kobject+0x1a2/0x310 [ 980.638794][ T44] register_netdevice+0x126c/0x1ae0 [ 980.643999][ T44] register_vlan_dev+0x3cb/0x800 [ 980.648941][ T44] vlan_newlink+0x4b2/0x610 [ 980.653460][ T44] rtnl_newlink_create+0x30d/0xb00 [ 980.658572][ T44] rtnl_newlink+0x16d6/0x1c70 [ 980.663262][ T44] rtnetlink_rcv_msg+0x7cc/0xb70 [ 980.668209][ T44] [ 980.670531][ T44] Memory state around the buggy address: [ 980.676172][ T44] ffff888067562380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 980.684244][ T44] ffff888067562400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 980.692300][ T44] >ffff888067562480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 980.700373][ T44] ^ [ 980.708126][ T44] ffff888067562500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 980.716200][ T44] ffff888067562580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 980.724256][ T44] ================================================================== [ 980.735301][T28461] CPU: 1 UID: 0 PID: 28461 Comm: syz.8.4870 Not tainted syzkaller #0 PREEMPT(full) [ 980.735328][T28461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 980.735343][T28461] Call Trace: [ 980.735350][T28461] [ 980.735360][T28461] dump_stack_lvl+0x189/0x250 [ 980.735384][T28461] ? __pfx____ratelimit+0x10/0x10 [ 980.735414][T28461] ? __pfx_dump_stack_lvl+0x10/0x10 [ 980.735434][T28461] ? __pfx__printk+0x10/0x10 [ 980.735467][T28461] ? __pfx___might_resched+0x10/0x10 [ 980.735495][T28461] should_fail_ex+0x414/0x560 [ 980.735533][T28461] should_failslab+0xa8/0x100 [ 980.735559][T28461] __kmalloc_noprof+0xcb/0x7f0 [ 980.735577][T28461] ? kfree+0x4d/0x6d0 [ 980.735591][T28461] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 980.735630][T28461] tomoyo_realpath_from_path+0xe3/0x5d0 [ 980.735661][T28461] ? tomoyo_domain+0xd9/0x130 [ 980.735686][T28461] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 980.735712][T28461] tomoyo_path_number_perm+0x1e8/0x5a0 [ 980.735740][T28461] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 980.735803][T28461] ? __fget_files+0x2a/0x420 [ 980.735836][T28461] ? __fget_files+0x3a0/0x420 [ 980.735861][T28461] ? __fget_files+0x2a/0x420 [ 980.735891][T28461] security_file_ioctl+0xcb/0x2d0 [ 980.735917][T28461] __se_sys_ioctl+0x47/0x170 [ 980.735941][T28461] do_syscall_64+0xfa/0xfa0 [ 980.735970][T28461] ? lockdep_hardirqs_on+0x9c/0x150 [ 980.735999][T28461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.736019][T28461] ? clear_bhb_loop+0x60/0xb0 [ 980.736043][T28461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.736063][T28461] RIP: 0033:0x7fe037f8eba9 [ 980.736080][T28461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 980.736105][T28461] RSP: 002b:00007fe0361ee038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 980.736128][T28461] RAX: ffffffffffffffda RBX: 00007fe0381d5fa0 RCX: 00007fe037f8eba9 [ 980.736143][T28461] RDX: 0000200000000040 RSI: 000000004014563c RDI: 0000000000000003 [ 980.736157][T28461] RBP: 00007fe0361ee090 R08: 0000000000000000 R09: 0000000000000000 [ 980.736170][T28461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.736183][T28461] R13: 00007fe0381d6038 R14: 00007fe0381d5fa0 R15: 00007fffd97f4688 [ 980.736215][T28461] [ 980.736224][T28461] ERROR: Out of memory at tomoyo_realpath_from_path. [ 980.738609][T28463] netlink: 'syz.6.4871': attribute type 11 has an invalid length. [ 980.997448][T28463] netlink: 'syz.6.4871': attribute type 11 has an invalid length. [ 981.011536][T28463] netlink: 193500 bytes leftover after parsing attributes in process `syz.6.4871'. [ 981.055294][ T44] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 981.062551][ T44] CPU: 1 UID: 0 PID: 44 Comm: kworker/1:1 Not tainted syzkaller #0 PREEMPT(full) [ 981.071759][ T44] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 981.081857][ T44] Workqueue: usb_hub_wq hub_event [ 981.086908][ T44] Call Trace: [ 981.090189][ T44] [ 981.093143][ T44] dump_stack_lvl+0x99/0x250 [ 981.097734][ T44] ? __asan_memcpy+0x40/0x70 [ 981.102331][ T44] ? __pfx_dump_stack_lvl+0x10/0x10 [ 981.107521][ T44] ? __pfx__printk+0x10/0x10 [ 981.112118][ T44] vpanic+0x237/0x6d0 [ 981.116108][ T44] ? __pfx_vpanic+0x10/0x10 [ 981.120618][ T44] ? preempt_schedule+0xae/0xc0 [ 981.125497][ T44] ? __pfx_preempt_schedule+0x10/0x10 [ 981.130892][ T44] panic+0xb9/0xc0 [ 981.134631][ T44] ? __pfx_panic+0x10/0x10 [ 981.139048][ T44] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 981.144984][ T44] ? media_devnode_unregister+0xe2/0xf0 [ 981.150540][ T44] check_panic_on_warn+0x89/0xb0 [ 981.155503][ T44] ? media_devnode_unregister+0xe2/0xf0 [ 981.161122][ T44] end_report+0x78/0x160 [ 981.165366][ T44] kasan_report+0x129/0x150 [ 981.169874][ T44] ? media_devnode_unregister+0xe2/0xf0 [ 981.175427][ T44] media_devnode_unregister+0xe2/0xf0 [ 981.180801][ T44] media_device_unregister+0x37c/0x400 [ 981.186288][ T44] em28xx_release_resources+0xac/0x240 [ 981.191764][ T44] em28xx_usb_disconnect+0x19f/0x2f0 [ 981.197060][ T44] usb_unbind_interface+0x26e/0x910 [ 981.202263][ T44] ? __pfx_usb_unbind_interface+0x10/0x10 [ 981.208002][ T44] device_release_driver_internal+0x4d9/0x800 [ 981.214090][ T44] bus_remove_device+0x34d/0x410 [ 981.219032][ T44] device_del+0x511/0x8e0 [ 981.223374][ T44] ? __pfx_device_del+0x10/0x10 [ 981.228231][ T44] ? kobject_put+0x446/0x480 [ 981.232837][ T44] usb_disable_device+0x3e9/0x8a0 [ 981.237871][ T44] usb_disconnect+0x330/0x950 [ 981.242586][ T44] hub_event+0x1cf5/0x4a20 [ 981.247027][ T44] ? do_raw_spin_lock+0x121/0x290 [ 981.252064][ T44] ? register_lock_class+0x51/0x320 [ 981.257265][ T44] ? __pfx_hub_event+0x10/0x10 [ 981.262074][ T44] ? process_scheduled_works+0x9ef/0x17b0 [ 981.267823][ T44] ? _raw_spin_unlock_irq+0x23/0x50 [ 981.273090][ T44] ? process_scheduled_works+0x9ef/0x17b0 [ 981.278830][ T44] ? process_scheduled_works+0x9ef/0x17b0 [ 981.284555][ T44] process_scheduled_works+0xae1/0x17b0 [ 981.290111][ T44] ? __pfx_process_scheduled_works+0x10/0x10 [ 981.296102][ T44] worker_thread+0x8a0/0xda0 [ 981.300714][ T44] kthread+0x711/0x8a0 [ 981.304811][ T44] ? __pfx_worker_thread+0x10/0x10 [ 981.309939][ T44] ? __pfx_kthread+0x10/0x10 [ 981.314534][ T44] ? _raw_spin_unlock_irq+0x23/0x50 [ 981.319740][ T44] ? lockdep_hardirqs_on+0x9c/0x150 [ 981.324957][ T44] ? __pfx_kthread+0x10/0x10 [ 981.329614][ T44] ret_from_fork+0x47c/0x820 [ 981.334244][ T44] ? __pfx_ret_from_fork+0x10/0x10 [ 981.339380][ T44] ? __switch_to_asm+0x39/0x70 [ 981.344149][ T44] ? __switch_to_asm+0x33/0x70 [ 981.348939][ T44] ? __pfx_kthread+0x10/0x10 [ 981.353540][ T44] ret_from_fork_asm+0x1a/0x30 [ 981.358314][ T44] [ 981.361698][ T44] Kernel Offset: disabled [ 981.366027][ T44] Rebooting in 86400 seconds..