last executing test programs: 15m38.078645123s ago: executing program 2 (id=139): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @mcast2, 0xffffffff}, 0x1c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x303}, "e588b48e3bd9443b", "395b334acaf701b7cb40afa6014d54ca0a51315136dbace5bf09500000000033", "2bf4e9df", "b8362e0dced27ff1"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000240)=@gcm_256={{0x303}, "e588b48e3bd9443b", "395b334acaf701b7cb40afa6014d54ca0a51315136dbace5bf09500000000033", "2bf4e9df", "b8362e0dced27ff1"}, 0x38) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="a8000000030101020000000000000000000000060c001880080001400000800018000d80140005"], 0xa8}, 0x1, 0x0, 0x0, 0x40000001}, 0x40) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000080)=ANY=[@ANYBLOB='l\x00\x00\x00f\x00'], 0x6c}], 0x1}, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0x8, 0x6}) (async) ioctl$F2FS_IOC_DEFRAGMENT(r0, 0xc010f508, &(0x7f0000000040)={0x8, 0x6}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) close(r4) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x0) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x6000, 0x0) unlink(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file0\x00', 0x6000, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000000c0), 0x4) (async) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f00000000c0), 0x4) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700200000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e030e00c4e8120006491e0089", 0xd, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (async) ptrace$setregs(0xd, r5, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r5, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 15m37.867392795s ago: executing program 2 (id=140): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x8, r0) ptrace$setregs(0x1a, r0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x980903, 0x5}) r2 = syz_open_dev$vim2m(&(0x7f0000000040), 0x10001, 0x2) r3 = syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xec, 0xcb, 0xc0, 0x10, 0x506, 0x11f8, 0xb628, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x52, 0x0, 0x0, 0x9a, 0x66, 0xd4}}]}}]}}, 0x0) syz_usb_control_io$printer(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000a00)={0x18, &(0x7f0000000800)={0x40}, 0x0, 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x45, 0x1, 0x0, "b1de2400"}) syz_usb_connect(0x3, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x4e, 0xf9, 0xfe, 0x10, 0x525, 0x2888, 0x5645, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6a, 0xbf, 0xd0, 0x6, [{{0x9, 0x4, 0xf, 0x1, 0x0, 0xda, 0x4d, 0xb3, 0x93}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x8, [{0xdd, &(0x7f0000000080)=@string={0xdd, 0x3, "c070c9f39ee910f352eda245ffec1a91581301b8dc2335083057426dea1642f8dc23c929ca07c18460f47faf41c21884aa9ca2342e0ae44d3496d7a0a6aba7ba8be798d158878ffa7710ac3b4c8c4dead0f5106a75cd1ccb808ca2a733ecca1c247767e67c2cabbf84b8712b8300d4d6d52fd4b688a9e8d2da851bbc333207a8220c740d251e05e9e0f01fd81dfedecbccf55dbe17402d8f56feab3722a38daa09142722e6cbc57bc253d3de43da8d4481858d7c36f571958a5239cbe2a3d6dacb2c282f75897ee1ab8aa9d69b46c9ea12bc3efb37f1f76cf8ada6"}}, {0x80, &(0x7f0000000240)=@string={0x80, 0x3, "01e9b02e94150b00d11b35f0163f1825f65d9a35472b5e6198d49c7e8507c1607ab17d744b15119e00f647839765f418586e40071f4b0f49d1e775b23e3218db39d0e723cfe744a39426b6f10c8345e2eea2ef3414a33090e4e258c28d6e6b9f925ef9a13a28a8e0e013548db2b1ec39a5769634451e0c2f6bc625525138"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0xe5, &(0x7f0000000340)=@string={0xe5, 0x3, "6435ce78cb64cf2f7517b6f0ef23acf5ff3f667d31657888d6ec04fdd0ad01169dd9036db80e20b9edd9a513237c86efa36dfe61f698160f0e7319fea36a5940884a76ef46f3964da579cd710f425b0cd1899459b8a585acf037199b4413c6eeb37ff6f1fa3792b9fbff3b9625294a3199cc0790acaa6f6a341e55115e1c0e0c243f6bc9d9f18d944e1ecf83f850590c214290d7eda2f8b02e818c4e73df54662ad17103d32ecf627e7e18f59aa6e7d75dce689c939486c31d1e50acacf8e55e6be9daf4a389d50260f9931d99f00a51f9b3319eed49295e66df34d70154192630d86a"}}, {0xea, &(0x7f0000000440)=@string={0xea, 0x3, "62a5b5234c0bab343a2dcae88c8393c33dc54a2ced60393179e4ec02e42f425d8c962d8332707bf2b408c27981e08cf21641dd31b342f78a39d9ccabffb7f2f4bfcc5d9a8723e6cdf841afde38e5374f2f775787beae255c8be936e974b2d61147006a86f65010a54d9ac8b4f02fa4c5e1bb84ce422a784b2310a1ba4f153fbbf31b967b3319af4573bb40576cacb507051110da971b71cec8ffc020e81bea768a802e9fe24692c14b56584702aad8b064356272171e074b18a58872c690922dc5d1b11c32563717f4993c10963228709da727f9d6adfb75890fbaa1420a2abb083c2b8017731d38"}}, {0x25, &(0x7f0000000540)=@string={0x25, 0x3, "80fbd09bdbc18c343827369fd8c5b0ce74ada22930f31facb83e287faf01fcab5dfee3"}}, {0xe9, &(0x7f0000000580)=ANY=[@ANYBLOB="e90339c2cef61c3576d67e482a84eefa3165107e96bf83b77fc77c1a6ed4dfaf91ecdc36435836d1943af8ca3f7b2ebd79daadefce1fe1334b469591eec1112be32aff2ae19038ab27fdeefcde947284c700170a0b6ac20270ce13272d113bdbdc56b1e375da1c129318c05f19dc98ac73f1ef20778a8a8dd31fc79e16a7f8196628352f4d1f7728f9658c66a3e0ab2534561d0b153bc661b7b8fe2bf9e9a37ed1093c871b0cc1469e3a98f77e2a32a772b5722bd8d4acff40174b3c8265de6df62ff945eb96eb8a374828eb2470d83d4c2221df9441919f674bb1745fd95d4d8a9d267f42771a6c42"]}]}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ptrace(0x8, r0) (async) ptrace$setregs(0x1a, r0, 0xffffffffffffffff, 0x0) (async) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) (async) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0x980903, 0x5}) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x10001, 0x2) (async) syz_usb_connect(0x2, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0xec, 0xcb, 0xc0, 0x10, 0x506, 0x11f8, 0xb628, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x8, [{{0x9, 0x4, 0x52, 0x0, 0x0, 0x9a, 0x66, 0xd4}}]}}]}}, 0x0) (async) syz_usb_control_io$printer(r3, 0x0, 0x0) (async) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000a00)={0x18, &(0x7f0000000800)={0x40}, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0x45, 0x1, 0x0, "b1de2400"}) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x4e, 0xf9, 0xfe, 0x10, 0x525, 0x2888, 0x5645, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6a, 0xbf, 0xd0, 0x6, [{{0x9, 0x4, 0xf, 0x1, 0x0, 0xda, 0x4d, 0xb3, 0x93}}]}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x8, [{0xdd, &(0x7f0000000080)=@string={0xdd, 0x3, "c070c9f39ee910f352eda245ffec1a91581301b8dc2335083057426dea1642f8dc23c929ca07c18460f47faf41c21884aa9ca2342e0ae44d3496d7a0a6aba7ba8be798d158878ffa7710ac3b4c8c4dead0f5106a75cd1ccb808ca2a733ecca1c247767e67c2cabbf84b8712b8300d4d6d52fd4b688a9e8d2da851bbc333207a8220c740d251e05e9e0f01fd81dfedecbccf55dbe17402d8f56feab3722a38daa09142722e6cbc57bc253d3de43da8d4481858d7c36f571958a5239cbe2a3d6dacb2c282f75897ee1ab8aa9d69b46c9ea12bc3efb37f1f76cf8ada6"}}, {0x80, &(0x7f0000000240)=@string={0x80, 0x3, "01e9b02e94150b00d11b35f0163f1825f65d9a35472b5e6198d49c7e8507c1607ab17d744b15119e00f647839765f418586e40071f4b0f49d1e775b23e3218db39d0e723cfe744a39426b6f10c8345e2eea2ef3414a33090e4e258c28d6e6b9f925ef9a13a28a8e0e013548db2b1ec39a5769634451e0c2f6bc625525138"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x83e}}, {0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0xe5, &(0x7f0000000340)=@string={0xe5, 0x3, "6435ce78cb64cf2f7517b6f0ef23acf5ff3f667d31657888d6ec04fdd0ad01169dd9036db80e20b9edd9a513237c86efa36dfe61f698160f0e7319fea36a5940884a76ef46f3964da579cd710f425b0cd1899459b8a585acf037199b4413c6eeb37ff6f1fa3792b9fbff3b9625294a3199cc0790acaa6f6a341e55115e1c0e0c243f6bc9d9f18d944e1ecf83f850590c214290d7eda2f8b02e818c4e73df54662ad17103d32ecf627e7e18f59aa6e7d75dce689c939486c31d1e50acacf8e55e6be9daf4a389d50260f9931d99f00a51f9b3319eed49295e66df34d70154192630d86a"}}, {0xea, &(0x7f0000000440)=@string={0xea, 0x3, "62a5b5234c0bab343a2dcae88c8393c33dc54a2ced60393179e4ec02e42f425d8c962d8332707bf2b408c27981e08cf21641dd31b342f78a39d9ccabffb7f2f4bfcc5d9a8723e6cdf841afde38e5374f2f775787beae255c8be936e974b2d61147006a86f65010a54d9ac8b4f02fa4c5e1bb84ce422a784b2310a1ba4f153fbbf31b967b3319af4573bb40576cacb507051110da971b71cec8ffc020e81bea768a802e9fe24692c14b56584702aad8b064356272171e074b18a58872c690922dc5d1b11c32563717f4993c10963228709da727f9d6adfb75890fbaa1420a2abb083c2b8017731d38"}}, {0x25, &(0x7f0000000540)=@string={0x25, 0x3, "80fbd09bdbc18c343827369fd8c5b0ce74ada22930f31facb83e287faf01fcab5dfee3"}}, {0xe9, &(0x7f0000000580)=ANY=[@ANYBLOB="e90339c2cef61c3576d67e482a84eefa3165107e96bf83b77fc77c1a6ed4dfaf91ecdc36435836d1943af8ca3f7b2ebd79daadefce1fe1334b469591eec1112be32aff2ae19038ab27fdeefcde947284c700170a0b6ac20270ce13272d113bdbdc56b1e375da1c129318c05f19dc98ac73f1ef20778a8a8dd31fc79e16a7f8196628352f4d1f7728f9658c66a3e0ab2534561d0b153bc661b7b8fe2bf9e9a37ed1093c871b0cc1469e3a98f77e2a32a772b5722bd8d4acff40174b3c8265de6df62ff945eb96eb8a374828eb2470d83d4c2221df9441919f674bb1745fd95d4d8a9d267f42771a6c42"]}]}) (async) 15m36.587724822s ago: executing program 2 (id=150): syz_usb_ep_read(0xffffffffffffffff, 0x9, 0x0, 0x0) r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) r1 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x200, 0x2, 0x7, 0x9, 0x0, 0x5, 0x9, 0x2, 0xca1, 0x8, 0x1, 0x6, 0xff, 0x9, 0x3, 0x7, 0x7, 0xb, 0x64, 0x1000, 0xc}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xb, @string={0xb, 0x3, "7e54b976a90b128d23"}}, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x6, 0x5, "0dcdeec2", "3dcf2338"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xda, 0x0, 0x81, 0x9, 0xb, 0xc0, 0x4}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000540)={0x40, 0x0, 0xc1, "fc11031e2530dc190e142fd97618283457e3583396e53847995769d711a0f614f2deec00029a81a9e9f48ce75b567998d0583a23156281d4d2ffb282bfe6fe296868c0c15f3dab7d53de48ba346fcdb51e33e8faea48d73cb204baa40b9aab0644710844a03e6cc4f06b35dad27d7ab3c7e63073ecb0f36d544ec640354b6f399cfb8d0b1e2b8a4319ea3101bd7ce67a3f9da4bd2d015c20d76d4c586a123b4dbaa670068e2f48ab7be6c980849256b4a43ca7cbf9c3816ad5f09414bf21e2f7d4"}, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xe0, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x1e, 0x1}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0xc}}) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1020, 0x6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0xa0, 0xb, [{{0x9, 0x4, 0x0, 0x8f, 0x2, 0x3, 0x1, 0x0, 0xc, {0x9, 0x21, 0x9, 0x5, 0x1, {0x22, 0xeaf}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x3, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x65, 0x1e, 0xff}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x4, 0x8, 0x59, 0x8, 0x5}, 0x132, &(0x7f0000000100)={0x5, 0xf, 0x132, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x5, 0x1e00, 0x3, [0x3f0f, 0x0, 0x3f, 0xc030]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0x8, 0x3}, @generic={0xf7, 0x10, 0x4, "3c33e085c4335a7aa4d2c24c689142806504869263f753b977bdc1df6bd7476d9ec2ef69194bcf6ae2b8128a47f2a4e0a53203f66f26d683f735d88dae1ecf313225cd88d10ca386d207946853d1eee02cf260c8721751ff0e3ff1bdebc8ddd1218e74f8205eb7f8ee0a2b561e1aa4c8a785e530a4f9b0b6130b2e0e5a75f638f8f8b48d918c33dc535b5ce9407f088a78401f903e54588e94d29a0a39056c27b902bf2c1edfd302a60cf015fd331b3fa578f5c38a2bfd23180d49b6ccdb65158712bf8b31f03d8f02c3a0aba4d92073fb8da587a6bf32496c0889eaef9f848ffa6bc1d6c4462cf013ee3ea571cd0504d21d6768"}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x7, 0xf000, 0x6, [0xc00f]}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4001}}, {0xf9, &(0x7f00000002c0)=@string={0xf9, 0x3, "eefe7a9c35a0af4bc4a2823442e2857655136a7c45545a98b38a770ce0f7503ca7f0e04d7885ebff911b38925fe339000bffc74ad959779c97e907402a0b01903505ea5aac2856650cbaef6e399f7b2b866e567885e0639db2ab2c3b2ea634353a657883cd5527ddcb90dbc04b32e6a5cee0b5618564f994cad4e3cb5581a6fa9c594498631cd05ddc9568ba278cd58109cb7e69795929f9fa96bab02cc8d0169db786fc3da200a3f2a39ceda912cf19de7fe49f00b8a434194475c8ea36f7cac38cb5ceabcc9cf12853e4bce896d612d8e70124a71bc622c0641fa43dbe1288fc5fb3e55cfd87ae90272824725c8fd34d68f8179a32d7"}}]}) syz_usb_ep_read(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) (async) socket(0x1, 0x5, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x200, 0x2, 0x7, 0x9, 0x0, 0x5, 0x9, 0x2, 0xca1, 0x8, 0x1, 0x6, 0xff, 0x9, 0x3, 0x7, 0x7, 0xb, 0x64, 0x1000, 0xc}}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000240)={0x0, 0x3, 0xb, @string={0xb, 0x3, "7e54b976a90b128d23"}}, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x3, 0x6, 0x5, "0dcdeec2", "3dcf2338"}}, &(0x7f00000004c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xda, 0x0, 0x81, 0x9, 0xb, 0xc0, 0x4}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000540)={0x40, 0x0, 0xc1, "fc11031e2530dc190e142fd97618283457e3583396e53847995769d711a0f614f2deec00029a81a9e9f48ce75b567998d0583a23156281d4d2ffb282bfe6fe296868c0c15f3dab7d53de48ba346fcdb51e33e8faea48d73cb204baa40b9aab0644710844a03e6cc4f06b35dad27d7ab3c7e63073ecb0f36d544ec640354b6f399cfb8d0b1e2b8a4319ea3101bd7ce67a3f9da4bd2d015c20d76d4c586a123b4dbaa670068e2f48ab7be6c980849256b4a43ca7cbf9c3816ad5f09414bf21e2f7d4"}, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x20, 0x0, 0x4, {0xe0, 0x40}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x1e, 0x1}, &(0x7f0000000e80)={0x40, 0x21, 0x1, 0xc}}) (async) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1020, 0x6, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0xa0, 0xb, [{{0x9, 0x4, 0x0, 0x8f, 0x2, 0x3, 0x1, 0x0, 0xc, {0x9, 0x21, 0x9, 0x5, 0x1, {0x22, 0xeaf}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x3, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x65, 0x1e, 0xff}}]}}}]}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x200, 0x4, 0x8, 0x59, 0x8, 0x5}, 0x132, &(0x7f0000000100)={0x5, 0xf, 0x132, 0x4, [@ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x5, 0x1e00, 0x3, [0x3f0f, 0x0, 0x3f, 0xc030]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x5, 0x8, 0x3}, @generic={0xf7, 0x10, 0x4, "3c33e085c4335a7aa4d2c24c689142806504869263f753b977bdc1df6bd7476d9ec2ef69194bcf6ae2b8128a47f2a4e0a53203f66f26d683f735d88dae1ecf313225cd88d10ca386d207946853d1eee02cf260c8721751ff0e3ff1bdebc8ddd1218e74f8205eb7f8ee0a2b561e1aa4c8a785e530a4f9b0b6130b2e0e5a75f638f8f8b48d918c33dc535b5ce9407f088a78401f903e54588e94d29a0a39056c27b902bf2c1edfd302a60cf015fd331b3fa578f5c38a2bfd23180d49b6ccdb65158712bf8b31f03d8f02c3a0aba4d92073fb8da587a6bf32496c0889eaef9f848ffa6bc1d6c4462cf013ee3ea571cd0504d21d6768"}, @ssp_cap={0x10, 0x10, 0xa, 0x2, 0x1, 0x7, 0xf000, 0x6, [0xc00f]}]}, 0x2, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x4001}}, {0xf9, &(0x7f00000002c0)=@string={0xf9, 0x3, "eefe7a9c35a0af4bc4a2823442e2857655136a7c45545a98b38a770ce0f7503ca7f0e04d7885ebff911b38925fe339000bffc74ad959779c97e907402a0b01903505ea5aac2856650cbaef6e399f7b2b866e567885e0639db2ab2c3b2ea634353a657883cd5527ddcb90dbc04b32e6a5cee0b5618564f994cad4e3cb5581a6fa9c594498631cd05ddc9568ba278cd58109cb7e69795929f9fa96bab02cc8d0169db786fc3da200a3f2a39ceda912cf19de7fe49f00b8a434194475c8ea36f7cac38cb5ceabcc9cf12853e4bce896d612d8e70124a71bc622c0641fa43dbe1288fc5fb3e55cfd87ae90272824725c8fd34d68f8179a32d7"}}]}) (async) 15m36.524337044s ago: executing program 2 (id=151): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) creat(&(0x7f0000000100)='./file0\x00', 0x1c) (async) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) (async) r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x38044180, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)="10e0c2681a77587eefa1cc27e1453e10ffe5e543cf9302196c8d36421a88bed96db3f9a50778c8dc2c07ac3cf2f8d79aee73b83ca50d679aab267efb7e6ff025115440a3e221d0ee3b79933069c6b8329d286b25914791917c903312747ca3e1f56c6c1c860429ded9879141ad73739f0a0d97ea7878d906cd33ce770efeafb4a9cbc8179e59d6a4fabd855c2f191c96") (async, rerun: 32) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f00000001c0)=""/173, &(0x7f0000000280)=0xad) (async) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) (async) r5 = dup(r2) write$FUSE_BMAP(r5, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) (async) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r7, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x10}}, 0x50) (async) syz_fuse_handle_req(r6, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r6, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x5af, {0xfeffffffffffffff, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x21, 0x7, 0x1, 0x8000, 0x0, r8, r9, 0x1000003, 0x7d1d}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getuid() mount$9p_fd(0x0, &(0x7f00000003c0)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [{@fowner_eq={'fowner', 0x3d, r10}}, {@permit_directio}, {@fowner_eq={'fowner', 0x3d, r8}}]}}) (async) setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000000)={0x82, 0xb6ea, 0x1, 0x8}, 0x8) (async, rerun: 32) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) (rerun: 32) 15m36.374331265s ago: executing program 2 (id=152): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) (async) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000004, 0x11, r0, 0x6f000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001de21831a0e69ee517d34460bc06002d98ef750dfe9e8fd44d17a9a2e3a1fd0000a705251e6182949a36fa886ca9b032a4178017253b", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4048000) (async) recvmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000240)=""/216, 0xd8}, {&(0x7f0000000400)=""/253, 0xfd}, {&(0x7f00000010c0)=""/4069, 0xfe5}, {&(0x7f0000000640)=""/207, 0xcf}, {&(0x7f0000000b00)=""/94, 0x5e}, {&(0x7f0000000540)=""/225, 0xe1}, {&(0x7f00000000c0)=""/208, 0xd0}, {&(0x7f0000000340)=""/168, 0xa8}], 0x8}, 0x40002002) recvmsg$kcm(r1, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80ff, 0x1) (async) r3 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setlease(r3, 0x400, 0x1) (async) fcntl$setlease(r2, 0x400, 0x0) (async) open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) 15m36.239281481s ago: executing program 2 (id=153): ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000000)={0x2, 0xfff, 0x40, 0x8, 0x6, 0x4}) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000000c0)={0x800, 0x38, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/105, 0x69) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000240)=@usbdevfs_driver={0xea9, 0x8001, &(0x7f00000001c0)="3967761f715be138522e8b4718f541516b398ebe819841899a8752be12f4f75d7a6e6c04c61760fc8578cfb990dd0435e02e3a96bed34590c77be03f5a86ccb9a906c0ed5a9418d837"}) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000280)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) close(r0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000003c0)=@usbdevfs_driver={0x1ff, 0x9, &(0x7f00000002c0)="05a5efa0e852d2a426623b2c3af969f9d7b96d53c502fba429e5001f14739e668ff10c23dda3f97530f21255384beb7bdbc75aa588dd0cc3a9c76b509fb2919c86e85a09cbf78e8180b4e17a40b59820df0f8593829aca9bda6befc95da6c10e918777e7602be13a55f84f8e784574e73068b8a4c3e9d7ae58b9f6562f47e2cbd47359f3d114e30d5bfe4c2c5167e570c032884299fbc24c9cddb1d005b3e64868760d31247cf60e53ad83de81d1ac18427bc23896388a662b73507aa34546952174d20c121e6d974595fec5da157ebfa90691"}) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000400)="6d74c5be8fd35bf2ece750b26f09480e3e62d3f5cac31de0278f94145932dbe97dbb39e099f3380e3228ed5966a57cfe5ff5345e977d91c34cacc367f1489bb0c57586e8d9f43da348", 0x49) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x20e32a7c38774731, 0x0) write$tun(r3, &(0x7f00000004c0)={@void, @void, @ipv6=@dccp_packet={0x3, 0x6, "062f7c", 0x15f, 0x21, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@hopopts={0x32, 0x0, '\x00', [@pad1]}, @fragment={0x87, 0x0, 0x9, 0x1, 0x0, 0x12, 0x67}, @srh={0x2b, 0x6, 0x4, 0x3, 0x4, 0x30, 0x1, [@loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1]}], {{0x4e20, 0x4e20, 0x4, 0x1, 0x7, 0x0, 0x0, 0x9, 0x7, "088486", 0xb, 'r` '}, "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"}}}}, 0x187) r4 = syz_open_dev$evdev(&(0x7f0000000680), 0x9, 0x1000) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f00000006c0)) read$snddsp(r1, &(0x7f0000000700)=""/184, 0xb8) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000800)=@usbdevfs_driver={0x2, 0x1, &(0x7f00000007c0)="6c95a7c9ee584aba1d550bfe05768b6ef25acba468feab056385c9596962de32e9b34e7bafcfda549763af3ee75426e986653540791f40f0f14bb5"}) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000840)=@usbdevfs_disconnect={0xfffffff7}) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000880)=0x6) statx(r1, &(0x7f00000008c0)='./file0\x00', 0x400, 0x4, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, r5, &(0x7f0000000a00)) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000a40), &(0x7f0000000a80)={0x0, 0xfb, 0x7d, 0x0, 0x8, "cf2b6101f0d49947260eab89dd443d9c", "ed26eec00fd7fae2ed556a861afbbbd7ad7bab37e58994ba22bdbf1e91f867d25ad6b90e50ea089dcb0ec331b7e0cd54c1aa18725e30dc3eab1164ee88ddf7f8b77bd68ce6de5c86b848e789fa7dc54443b2a8bb4f0c9a970837e5b7215e0d45c89c6df8bd6c15f7"}, 0x7d, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000b00)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000b80)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000c80)={0x28, 0x1, r6, r7, 0x0, 0x0, 0x0, 0x95, &(0x7f0000000bc0)="9190ece334d573b52cfc903c5190e14a25897e1394c978ec038e78f72d8c806398e94a85e8eb0881f78ac924a06b3aa2db419f2aaee5e41dce0c910ee68ac099b0799ba85118963a459bc0eb5cecd864d5a28768a217a57097fcf2f735a5de84c89f20ac95448902620dca0369a379184d6d9bc53151aa67b45fc029d27b62571161688d1414ae1352d22d073dc93c7d2a70eb85fc"}) r8 = semget(0x2, 0x3, 0xa) semctl$IPC_RMID(r8, 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000cc0)='cgroup.procs\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r1, 0x40285107) 15m20.968067425s ago: executing program 32 (id=153): ioctl$EVIOCSABS2F(0xffffffffffffffff, 0x401845ef, &(0x7f0000000000)={0x2, 0xfff, 0x40, 0x8, 0x6, 0x4}) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1) ioctl$BTRFS_IOC_LOGICAL_INO_V2(r0, 0xc038943b, &(0x7f00000000c0)={0x800, 0x38, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) read$msr(0xffffffffffffffff, &(0x7f0000000100)=""/105, 0x69) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000240)=@usbdevfs_driver={0xea9, 0x8001, &(0x7f00000001c0)="3967761f715be138522e8b4718f541516b398ebe819841899a8752be12f4f75d7a6e6c04c61760fc8578cfb990dd0435e02e3a96bed34590c77be03f5a86ccb9a906c0ed5a9418d837"}) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000280)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) close(r0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f00000003c0)=@usbdevfs_driver={0x1ff, 0x9, &(0x7f00000002c0)="05a5efa0e852d2a426623b2c3af969f9d7b96d53c502fba429e5001f14739e668ff10c23dda3f97530f21255384beb7bdbc75aa588dd0cc3a9c76b509fb2919c86e85a09cbf78e8180b4e17a40b59820df0f8593829aca9bda6befc95da6c10e918777e7602be13a55f84f8e784574e73068b8a4c3e9d7ae58b9f6562f47e2cbd47359f3d114e30d5bfe4c2c5167e570c032884299fbc24c9cddb1d005b3e64868760d31247cf60e53ad83de81d1ac18427bc23896388a662b73507aa34546952174d20c121e6d974595fec5da157ebfa90691"}) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000400)="6d74c5be8fd35bf2ece750b26f09480e3e62d3f5cac31de0278f94145932dbe97dbb39e099f3380e3228ed5966a57cfe5ff5345e977d91c34cacc367f1489bb0c57586e8d9f43da348", 0x49) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x20e32a7c38774731, 0x0) write$tun(r3, &(0x7f00000004c0)={@void, @void, @ipv6=@dccp_packet={0x3, 0x6, "062f7c", 0x15f, 0x21, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[@hopopts={0x32, 0x0, '\x00', [@pad1]}, @fragment={0x87, 0x0, 0x9, 0x1, 0x0, 0x12, 0x67}, @srh={0x2b, 0x6, 0x4, 0x3, 0x4, 0x30, 0x1, [@loopback, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1]}], {{0x4e20, 0x4e20, 0x4, 0x1, 0x7, 0x0, 0x0, 0x9, 0x7, "088486", 0xb, 'r` '}, "e64d441f900e8b89976270ef0a7553b3b9a8a326c1facdf38850e66927eb9060502bcdad2b5d8e74a44a84f9d35ec8004ca8904c6e321b99820b0918355fb59cc701b1d48fa545fe0a5a1e39217cf4f0d7db2acfa5f31c18b75d78dbd9d3a34290fb1757828dbdf08d1a1c1d7752b52d24edfff9f8132b91d5de5fabf967d0e44caa97591bbb9537ae88c70f0af2878fbcbe7caebfa46f76aeb3c658ca1dc38342926bdd3aea07d74df3e9c60bb0cfdfa44eab72703ba7bd77b48c7446480c9ba69b8f71f1ad0d956749f62fe3386f67416d3e7f5fd144c5ae9a5e9e1ef5525af259f0afe5b34bd0b94780c5ae083ad1c5483abc24d6ece20685fae628b7b6"}}}}, 0x187) r4 = syz_open_dev$evdev(&(0x7f0000000680), 0x9, 0x1000) ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f00000006c0)) read$snddsp(r1, &(0x7f0000000700)=""/184, 0xb8) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000800)=@usbdevfs_driver={0x2, 0x1, &(0x7f00000007c0)="6c95a7c9ee584aba1d550bfe05768b6ef25acba468feab056385c9596962de32e9b34e7bafcfda549763af3ee75426e986653540791f40f0f14bb5"}) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000840)=@usbdevfs_disconnect={0xfffffff7}) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000880)=0x6) statx(r1, &(0x7f00000008c0)='./file0\x00', 0x400, 0x4, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000400, r5, &(0x7f0000000a00)) fsetxattr$trusted_overlay_upper(r2, &(0x7f0000000a40), &(0x7f0000000a80)={0x0, 0xfb, 0x7d, 0x0, 0x8, "cf2b6101f0d49947260eab89dd443d9c", "ed26eec00fd7fae2ed556a861afbbbd7ad7bab37e58994ba22bdbf1e91f867d25ad6b90e50ea089dcb0ec331b7e0cd54c1aa18725e30dc3eab1164ee88ddf7f8b77bd68ce6de5c86b848e789fa7dc54443b2a8bb4f0c9a970837e5b7215e0d45c89c6df8bd6c15f7"}, 0x7d, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000b00)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000b80)={0xc, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r1, 0x3b89, &(0x7f0000000c80)={0x28, 0x1, r6, r7, 0x0, 0x0, 0x0, 0x95, &(0x7f0000000bc0)="9190ece334d573b52cfc903c5190e14a25897e1394c978ec038e78f72d8c806398e94a85e8eb0881f78ac924a06b3aa2db419f2aaee5e41dce0c910ee68ac099b0799ba85118963a459bc0eb5cecd864d5a28768a217a57097fcf2f735a5de84c89f20ac95448902620dca0369a379184d6d9bc53151aa67b45fc029d27b62571161688d1414ae1352d22d073dc93c7d2a70eb85fc"}) r8 = semget(0x2, 0x3, 0xa) semctl$IPC_RMID(r8, 0x0, 0x0) openat$cgroup_procs(r1, &(0x7f0000000cc0)='cgroup.procs\x00', 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDCTL_FM_LOAD_INSTR(r1, 0x40285107) 8m56.127945209s ago: executing program 3 (id=2680): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000140)={0x4, 0x80, 0xc0, 0x0}) (fail_nth: 4) 8m55.688054447s ago: executing program 3 (id=2684): openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000024c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="cf18ed", 0x3}], 0x1}}], 0x1, 0x14890) read$FUSE(0xffffffffffffffff, &(0x7f00000041c0)={0x2020}, 0x2020) 8m55.649453714s ago: executing program 3 (id=2686): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x325, 0x400, 0x0, {0x8}}, 0x14}}, 0x4800) 8m55.565174236s ago: executing program 3 (id=2688): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) setresgid(0x0, 0x0, 0xee01) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000100)={0x6, 'veth1_to_bridge\x00', {0x401}, 0x9}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0xfffffff9, 0xf, {0x0}, {0xee00}, 0x0, 0xfffffffffffffe35}) syz_pidfd_open(r3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r4, @ANYBLOB="0a0006000802110000010000000037000000000081aa"], 0x30}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r5, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) getdents64(r7, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r5, &(0x7f0000000080)={0x2a, 0x6, 0x0, {0x1, 0x2000000000f4, 0x1, 0x2, '\x00', 0x8}}, 0x2a) syz_fuse_handle_req(r5, &(0x7f00000021c0)="7b1713b4c6f02da7493fb6859f0143c68a58166f472c5078104b859bc37f9a49a8f85c9101df3b2736ff9bebcb1a3c2f570b28279b8ff7afdef7451b3d10b4578c2e81784b6e4f410800d997f0689546cee0852e9e9c64c1f95df7b136243cf7aee1b8e7a4e1d6e6fc01337370f0dfc098d975e9a6f90a08f5b845054d1e1fc81adadbf2836ff758bade0484377855b05b3556a91827599638458ad30baea03240b302638b88423ecaba6da1e40f6f1b24d60dde1652f2d5f818af43d49dd55c4eadea945e9b6aa744dca07ec2e00320bef5b045414836941469129670c4cdb953ed61efeeae2ced1b7cb3e7fa4c93cce5623a9e33c69d068b801fd1369aba759e2829c67c705853262fef6669aab956f0f733619dd361be5e1414c7e7ff6218e330156d609fa9f3244a0a4fb678a58e70b86f6dabc3331f755b786c42b4198149941a7a58c83f1f2811209025269c5ffcbe0c34ac98cc091cec2c993bca0aa8400ff9e39cc9fba8dda886f95357957bbad8bb850ab92f7aa9bebcdb0ef188749a1742e5597d199f3ccdc2d807bf757da45acc93e3e9645a1036cb041b3c38dafef367b8dae802bbbc03bacb905d40e1da78591687b416ee380103a670aa8f722c76e13f7f0e3effbb37f15a821b8315fe541e3ffc09289d96db1dfa8861e5da41c812b54ee20ca8b3180f2f46db56954791465cb572de0cce16d789d6fff216ca46977ed724dc0cc8cef7b295ebb2998a5c4662e32ae1001e59f3bfefcd72543bfe1aa6688d65c547089ec0fe1f1d9610095a5a4008b14f46775c368417376ee143856031947db71c455dc40eeeda210fbf258452781ce46e51f6df683a7918770f73d324d9401648d271cb9a7e919401567e400fec420cf363444a78eea03e73176abd6546e1657945aa88f64a21e07fc23edd74512cf89781e8ffe9bb1601ab25d31801332a6c5be9cebb6cb08207bb832106553ea9fc19b4b4f1f0cd55efc2925ffef75e9b12f06b5a7496506a274ca25f88398a1734b7013c3f78a2e49ef0d946a1aff362e37c9b5f5473de11401097722adda87944ee3eeb1bdde60e97484af4d2e5f8b0a9c63bb8bb99461b16edd824add1caf9d5247811cc4f6b48004774f1a4fe4dd125ddbfd8b69ff3ee314aeb445bee9f217a2f5a9e0e84ccd8718471f949086df6cdcbf95e568317e31dd01be1b826cf9a09373b16935fc864794a3886a2f4aacc42135db85f8921916a10aa7111a686979e2a5c9959cafc9774c416c4dfe0b9e06657feb2fbc31e7c11f6e2841680986557c1f2b1ec3c0fcc6a749a3c97a5b370550ab7110e25851b13c0b75a7fb0cd3c4659878209867659c216b467bdcf51e786a59fad084886490fc77e186ab827d844d0ac4682651fc4043f8e87b905532a53017ada44feee1f89f9bc6d2a8b144e721a479f7b90acb91033774f4c12df633548a9097c791ec7e80fa2607c86fce6e9abcae1296528b8488ccf18a4bb0fc9b50c15d294e8d380465465b4eeae26eb6800faba611785cd2ff95ca1923dfa47d5923f89e4eadb612002caceaebbe779c4e3a3833455752eae63689ab8dc03db63d82feeab7f1162eed5909b69ccd5abeb9c071da82cfc76cc692a51d99e0c4bdfa6c81c9878e893a77e1e7105e7910827ddb3353612fa8d5e547b43b5abfe50829c1eb7bfda1731db2a9a1e8f0fc298dfa7009679489f9d9323338b7e59f1e48419ca531d88170a5a1995f576aa125edae9e9ea26f6e9c4bc26323b7db0998c528a7b343ccd87ff44c77e6cfc0a324cc1d4ea79c30015f0caaeccd46e5db580aa5ce8030c2b13b37494557da58abbdc7ce9fc9afa49ce0e8a7a6fa058db210ed654203e7879cf5004ebec57522ed34481b749554b36cd7171209b0763e110096704604f2d3f28c5ddc66c877e3ab63f36137d5a67cbf872aa6af79cb3a66c9040009b5e1c7b718c1b8788156b82d6d800dbe9fc3d16c812a963c73599b79efb89aa74bdbd9b1a2dc0b8ad853f79c0867a3a45d7a1645059171877687a72dd5ed4213c0ab84ef6185e7935346a84450887bdb2b216883e907b13b03c133adc04ab3c5f60209bd90aad3d94443105f08f0ee1b2231e1a1f8cce71de74d5308b78b5d99ce4ad4573faba9fab48bc1615f14d453c67714b99f274de041512b07b885679e6f89f481c28b082084b853c9afcda31def2898284d6ca28fb124df67142821c9705e28093ded60992d9587fb466df839aa2a4973dd48f9372a55da6592646fc918e533955566a2d8dc59277308223aea4dbe0daf839f95516b8995e9eec87df1df9d38693e0824dca7423b08d553b0ae1c5c44533b918eaa02dd17b4c8ce515ae7de410970f670e17b5e3c0a207fb8464d5d442694a271d593fc23ac19619bac32ac17cc6705ce2e6262361eba24277a471602e7ca57cc614ee116e60a9e0b6ac5e3228ea2c650baf1a09e9e5c7a1b25a078d1d11a673d88f6ee33e50d036d7fe4b9c06adc70aede2e35c6738b255690ed3f7a8d2d14e36e360f3bb66978d6cfcfc41887c751c0efc9325d4485a2f561060413fe6af4ce40d87a476201f15a584fc7ba18ddfef5f1d729d5f544c2c6b06befccb444f0408451089f20b06f05ab7d6702b97819b0eff6fb090f21afb3076558e692920053702fc2348f8dade0cb2b007f38d6dcd4ed3bb42553b1bd684791743a1941e5bf2ed234f44be64a95b485a3e949538a40542f25ca4bfce44e291037ab282082f02157a96f4ca0a0c5cd39215fd07461093a4d87a7979f7aa97142bf5b9ef71db537f9acc90f22ca2ded5c1ecd1ba972d05db7f71e8466085c9b3e975fa3a948f2c4049d1a8e46f71157017a3a74ad25e215dcfe7a4c5cb0a7baea0b0ec60c5df82555c553ac60dd39174c721edc0304b836a4de539c3ee55401e13848018f889cc4a0fcd01d9f4978eb730fb1b4a94ede0283f8c95062f01c8c8a3169b2d5c50cdd4f3a248d80a26c950b4036fc6ffefaf5101269fe3594c2cc128220a1d0b5f9f23121f2b184894e129159eaa92d9a30e878839be44d20cbdff3c338cc95795c86121b2b498bd376e895c98d67f6a27eecb46a203aa9de744feedf27b6825cc17aaa098b5ca05cad6bdbe320908ed36bdc8a8f2c777eeb9b037b36c0e36019c264b3e36196501d6cc90e7b1899a72bea5c8a24a5ae62e3684a39a06208bd382cd32acfabd742c76334797fa0c09a2a2a7e1240974afe0f3d6eb44590cf171efb7602009a93bde85cea6701c765dbca7c6a879be41dd08847802d4f59e933df65f727cbb45e3a4a5019f503b6fad7e0338e653f8b2c87aa7f196444e0dc1be6d7c4f0c7ddd663d06ff1365a9c362384a33b0315adbfb2d73359c485cd5410d36d21044bd8d3771c5492803b19f7f3a1a5c3248e66786479fa4416a55855adebeb09528ff5add597790b97bddc16bb9b7b33a1f800701c4293e2c8428dc2684726cfe5539ae0a9bf89e1b6f1989fd0433cc865b308bd0c636402b4b285c290e2439b9ecf0eba156fb6b613ea7f97b04506fe28e9471343c854fdfd48945a7f564acc817e609be8f8a7fdee12e9b592fd8c5c08f51ba8cb95be12cfa497d1539a4b8217818d47ebb3cc669014261530205948fdb9983a0e5759afa9b290ce838102661750ab06d7fe65a39efa6af36c042d2dee36402a6686d58eb144b76033cab4482b8fbdd213a90170939ec98df1fdfca4b37b143a971b9b59fc351098942bba090056c20e8cfbfe8fcbe361d068c98a020f67e807b8db2e45cad83c9970907646c0049c05c1ed657d53d859f1a47bfe6f022be0689de224034d0160b1dbc878ba6dd685911288d7af22ff5eedc1634c36e25f51d0757c7b9c73d7937955da356dea68749d464a75f56c9f6ba36cc1ca8c2f3aa34beae14fba894ca705111cdb19094432c2f6caa0eac78ab09b0cee330f36b1b91a6a5d4896cd15d96c12547826559441cbf578f189f5f04526a4cf76d60144090c2386b747ad50f7962ef2950d2c6f4ff8477ad0681ab24c47ea7ded8c9accff0dfa30489f43f0f3182b88e757fd9a1d82e1c9bb4efe5215518a6e48c688b2dabbd15107c5c6245de0acfd740ea54e0ec212f405f25bc3aafc63009631a4e4749296d47c2bcf25cc95afceb0a1ddb3c6124208f5134981c30489b42eeb864b3123b03106c9b234a465d87c30ef36e00244390de36a5dd93794467ef37bd01b86387855d2ac24e05370212e845082bb22c8fcda0f0bc78ddf971b0b9d69fc50e0d907408e9c9ac4e5099f47db2d0c14d888e363ece768555362a08c408d0119c45f158aad695d455d28e223be2862c19262c9f43eff8855b5a9af4f2cede95e415e2f597bb64c8bb2d608f86b15950ffe2e6bea3cdb221cf8b7eb35e0bdf6638283b09c68cda0bf1ccb9e353a7f0afb58d806923e36b22db68615a7e4e04d0932d928afdc8af3963378ebd5e05058160ac67fadb7a7d9ec498e00f63671b84d880d196c93afb4fc823e7d6576ad824ffb4c90fc780b163a292899ccfcaed81dee2c992787a66800e206df3dfc4a6b441d54ccb1a19a587402a663d510e45a5b1aa96fc467efaf7e71cbbff087f3d2922a133466d5ae9f86b0bc39bb3093b87ac2db941b1fd9e40427402781425d6e8856a2c66cbdd274f4c689758db6dd58ec7d766b177739e8c9173f2b1946be5396aad6d7ed29d058ac231e8c2e6a9077b4a217df4580a2d72bcf0b73e4bd07465deb8798a55ee855b82f1fa7d3748a40485bd90fab94b617d92219c4b65efa022936895e51873058615a19b9d1347120c405c3254f290b4c8b99c8ea9dde3a749ec538421a29d27b48ccd83852abe1a461123e4d36e56508d1827880960362d10835df77f9d4be51f1447cac5ae2017a814de58cd99bcc0c194254b17114ea48f5a0cfe6547686088d527c65180474fd460ffea5d48767ceb65c6fa3d7d3c632591d2d9d65c6c3a35a6ae4dc56322cd84734b0e7a092a4c46c1c607afa6d0e477e8d04e4993e595ba708a0f4466cd8a89fbc06d3cd366007296a9f05b66cfdcd5b30b6745e71d513205d5dbe1e8516d9e9cf133caa994ec0ac2c543d107efd4b9a7d9ee1ee415830a6c2ea17114ea9683726f2c82741f9ad4ac1be6772f0809f18c13f4cfc82fd1b7b3bd29615336003c6784c03fbcae475a58a3c4d68099732c326dfb7643eb150f2354918077bb798b5ecf491cdd0765e3e1ed5d0a37840f1a28f7e188a021781f1896dae7153f9d6639bf66be0c7857d7eccd2a1e6c9fd0cc3594477bb005df9b29f680c966161e37bcec97fc2ef7a2c3bf64e4df5785c9b080c7f9c6d7c515408445d55da499c03ba66369a31157bb03588e84a5303c46cd393c5bd6fbbb8deed94b62d67a9351c259b263c6c4fa65a4dbdd7eee080d82cc5e478c885678edbc9cfce74169ab748d7f4a08aec3e114394fc1d5e361267b8f3fcf38a024928d58158560f7da427680e7611a9f1b8255c67e6ea6b597ebd31bed9fd6f85f9b6ee63d4374c1e50597d1c9f3c56b4266bc632ba66ebecc396f6bead40392dcc138098b4166ab7f8714bd4db0615480705dd200da92dc51ec215844d7599e0a6262e8d5dc6a9452db8994d8b8f19ad4029e0b41b5e13fd6b56230cecea57f3111fe6c78876b3e657fab112968e83a0b64ce9837b89f5dad0d5f0b8b410e3a9a56ab2e9143e90fe371a944989ee206eef777cf4a235333c647e45aab910af492bc7c2213246374251e23accf5818aa2f24823bcba12efe3658e1e2cb49a5d4ffd26453829739647eccd106605921641afe16bbe79c8739062eabeeda4d4a42cb70d84e1e1d3506c7bfba5f5135aaae85b03dc6518eb30d832175cedc5bdca95e600e04902d9eda90c1da4bdd3138ac889398c239068857103ad70b5d1d9fac27c8ccfbcfcf126d9a5441bc963bce4669047ac901a14ca7c7e76f94c77159cdbda5360e04bb539a9d5ccd16a8cc88bacaa5b952c86b163575d7f1cab58f0d612d796b570f3c5debd7d9abde7e24de2c252173f1edc93817192699bddad45eeb41ff398c1bee4d2194f38bf4d2b4ed3a8895476bc441f464753139e204ff5dee7f45ce639d7541c0d396141aeff30cbbfa7157a61993eec98a4356df98665546a1d1e8429fb0c78684000862aac50f7d9a1413e89958f4defd3f087769cafc32bcd6016e496b41b7754cfbe42b352346fd585fb19a80f4af9a19811311b5fc6ea8eb5519a3cf7dbc1a06eed41668e332224c1daa01776e0886044f5a95e5dffc8d9ccce7840eeae97e8cc916db95bdc33fb420e28030c6edb011d5281db1dbeac9bfcaf938a757e3939b025d339e69b9692c8c7352787d399f342e96096e37ca208609e5f93629e36ee442db9fb822ea236683f79875e7dc73ec97f98fe0795f9d83f473cc80a589043a7edd953473684ea4e80f698683a0fc1d8863adc44fc13c27a08921a681ca1ad76207b1a97f8fff7db247ea09b3a6407ea83d82d82d171fc80a8f5fb9f19cd7e94fe121a6a0ef9c4cff7a8689c0abf750dadcc7442c2ca5ed437af5e88e89b0a783a1164cd1eb2a33a64c919d9f08fe5aa7a775352ab6027a7b73d6fef51acebec5516c2a5f2b932b2621bbd2cdb415fce9ba1dbc3de205869fa0423adcedd5570ab0b4b64afafaa458b3840b48f018297aa46426d7893418033f00b5378eac6a70275ec860609b07851b88ecb5da05086adfb80f47c71a77301ca0f1520dfb7a800bc8421abf5eb94942ec818e3a1d45f09ff93e6549b3ef6152c6abe38231b4a82e355e27e363184df51418286d7073cf464eee02310e84b3eccabd2120fcca333130357e1967f67a69f437dcf6a20ca21797230aad086bd4c28348f58b80ec5d27626004533993b9f85897d00bc271a62ab67f92e2eed6d900000000549e8344ad90b47fb5c1ed5908bce94d03bbe98a87a1733b5031f89644c2d35d729e1375969a82f0252859219407c5c87f5d249d5eb8c17001fc7c6dc5d1825851b41e5e937f2c39d7f7196f38f83619da2cddce747bb0e906d0fc13a11fc6c2be3d140ea6da886cd5e194ca9dbff565d2a82e7e82dc5a36084bf02029ea05a9cfe1f3dc80489b426a14372232940ffad8124bd515f0a73fa85c2aa0cd51d76a0cc6e75ccc35b702a4fed4d2e2828d98939406ddc6df1048f0a22611859d6bfcbb0873d102e4b8a86b5d9af8056447f6c1552a603d9f67009fa070db73a01e1b4adbe4e841d0b9a92d148b626c386b25687817e5ec07dbbfa1d62d078578fe21d546414e3c5e29e8e086d7e542a2eb74a67127e7f171e076bbdd62767aae3db467db1df13b3121023bcee33f814d767a9ef14651f76ec89910ed33e9804df8619f69ad06bf0559b00d4efbf6f44e922d50a18ffa25d8ac58dec53a93642186c0ca81b07fe5c14c9c13397649a53ebfcec118e5bb84db053e6e505d07a09bb50f33906e7febac3c85ca337111dbfcb7b9becccaaefa3d857d48f0b3d8646d70fdcf2f1dfb89cc3ba1394cb5de24d999c88235418bc0f20d4036bd0113d298b91c44fe042d3b8e4070e3f828499972524601c4725389122c7fc3e38eb799f7b755f23bd5362880b9275e58eab2c8f42e583890cb84e17f35025d1d76dd28171bee561d21451b4b2ebf23b923221c9ea06b924815889d2b605af66539c3b0ffc30c7170a5581727f0faddb257cb6ab28b3456737d3588fa3bce0ba6a2a5c3c94301fa8a4e6db358731bd3a4a62b42181e04241010d7bc3e973b9fe428175ec8f8e6cbd4e53c8bd957621acb1e42504e6f8a7bb30c382058fc9dcd0cd0ba0b789c316cd58d7b5606cc2a66c872f10e6663346d572ecc37ad1c3d8146a137e35e54096ddc2a5e2d26765d75615fecd09b864b29adfe92763ab54272365f56feeb9b57059744e765485ee322cb879fd3c8fd8bc4727d860995c548bcd41852349f1b2227f5a1f39b24549693fb05c04ba8f190673d11eb27d0bf628489f9b8049f5f3a1e1fed97ba9881da0031ef5960b6b0af825cfae8252b931f6151cba9bf889a5c74051a176c56d3cbb8915d3f28f8f684629bd1e3f87f27909b4e8eca6b88cdd60f3b5bbe0641a469e396080fdd2feeac7a11703b758f1815f100ab2ca4403af34a655f4c35e62778c276c96bb94a3d9f58f3bbd7ae6c4f133f7c4199f18d02d66598a54769415b376bb04b520881f23b22b32685ea1ea0dc179ab2f33f07c7039d1a5eedd1905d2a8c7d3c9686758ba5aafdd74f36da7f5522aff5c40e565b50cdd92ce353c3d6c97ce87f0495bdb95d70ea52c8c26b87cd337fd2283b88d7301c32f26833451b8f7c2ee5f44eec58d9eef2a39b3021a29c8747d36a2dbca6c0c085399bb720000000000000009d67e17060abad89c7d8b8970244c2f11ad2f4ae878a3676659b77178a9b651b12cf9c21e658a32999d596af4648f636df4de8c037d1fa63b1a685e8850156bf99e00666dbc03d3e3b44018659743127f91d44c99b578b86a44f3bcf1523c8cb45accc3c5fedfd7796411eddfc3a7a6b7c57ae10fd4bd3fe9f662dc59747ac4b7cc2584ae3ce2e42a41066dd0d560f1b4c83edc57121dade5e397380bec5f40b5d0beb14aef21b2c68ccfd0eb4959b5e7f5b5779903963298e3c9a2141f145137de1d604d9124c3c4f60a4d54da38a7c32ef2632fe66a8ce8e95ee95a570e18e9fbd44884afe291550839dd61e65c952a3f5c6b61850d1c2a77e18fde734a305b407cf6dbf17afd66da6e42f0e8f66092df46c79b44711f6e8aafa831fa1188beea696672b0e94cc3cae584b30dccf053634f792c2d9f4c87e306991b407949f2870b525d123f9ca23142a0ee13d05f51ed4ff2653727ad5bf16453276b2d5e7d7a8a0a1c4847cb61ac4b08d9abee25165a120d156775a534a62f9af3a3b62726101b94ae1e14352262f017c5361b3341952d194a6a2d470e60df3fde61d343e0af8fdff36ad976af6732b732ceb69344550555174fa280153e08f74d81f4ee69c1eb44a3468e8cf78bf7c1663dae3d31553466faa207b8e9887cb54209fac0b6f6d12d9588351c76e6bad884799afe856a25b5fe737d0ba737a0f1a12b4eb3ede48a0c38e6787ab42fca1c7f2ab42fa6104d5a99aa36b73ac3622ccae122524c28a6557cb7d0a7c7eb5de795647dca0621fc2c9599441dae7cc2a8631252abb5e0f22e9355e0a156a1ab7b1641e345045e8303b5f6dda5c3c1cc2637700cea25c004460d101fc42ad78ae477739a4efbacc57272cfafae15292dc3b2800d9f42002c2062af9a1f329e11140f8317242c04ac1f11cdb45f5f9ab18877daa214c151fb9ac54e3e010b5e7944d7217442d5c4fc29956c1333cb932424096f5b6afe1128db53f7171be4372be8bae538bcb3e4a2eb29608678735a667135e0f2660956e9e2a3ed862209efe65d9ab2fbbf88e5d3384fb3362af00e1ec6b4d3ca40df442b70951026438877189c4b0ae136a9a35c131fdf19115e8dc1ee2b938bfbfdb3808aebbe7dfbbd3510c7070388f5813e8bc63be744b99116c4b84ea37d57c5da7a80cc883aa915d84a249ebfa78ceb124c63b3a0720b19483189ee50824e8581556f0520e434803204cd0f3dd09fc97c979f9a7e3f8e5eca8fccde98fc4939551338235c0c6378faade0d18f7050f29189485e01ec120239373c5478cd19ab27570921415a6680924baf9c5829f3f2115460d1fceb8a026fa1a0a0047fe1cd6fcf1861dd3784e006abfddfe79461c5001e4e32d99c5bc203c21f8c711c5ecccf8941093d95a8db73722bb7511443fb2670244cc1249492e92fc4bf7e06ec6f08c5c6931929d58232b551957b771ea5e4a932b037904b81916e662e3fe95af894e80f699e5c00ab664f381bd9c0bd41322a8b3cf367577429fa52c0f1c44ffc626c215e7103cba05bff4931d9a202c1eb9068f44983d1e0c6d9fb5fed738561651e854a3c1b362ae354a0b4a270386ed2dbef093bd82f07f25edfae31901cb86fd214576b25f769bcb215214c63026b2581a8d17779aae03ba310f3243b3631f4b01c9e3eb342c3bdb44d8e47cdc1683e3b1cfffef72e385cc8831f99425fc406575170e1c106618d5429144a436b9e92d241d8118b5cbe0dca5e8ddd86e671e13080eddcf8dee9e317d192a3a5386378de9b1ecd8cf5439cfbe9f65965e5a5f6c145627ac23fe30c2e06e623b0eca15b225b32b65ce568b656cec0e0d6752fdebffd39c7538472ad7a195b56fcad3fab80016ff006df6b01d785191e4fca143b14ce68b32571476a779515ccb14d35cf9aabd4849c03c9bf12a42cfc2a7146ed6c25892a9d1c48f95314f641142d38cd882e54534d69b3fcc18044309e6debef6dc79d7737956418b955d33737115b44360e0bac14b71e2e64f0c8aea428dce5b65e210c108f832a6041c0aab116488e5863cd1039dc8af537908be3541352bdad303de43387503d19d7c0f0390bdc5b95f1dfb0701fd0e14a22c210837cc0a1cb059de474f4476bfe9bddfe3e7977fb299e82d9eefb18111f7c4a5fbd406fca720fec69340d978f4c9832204d67f6fa5793325e04d4af84acde0b56158e4c606394286a4b3cfc04a426a665529b753e1ce2d6c613159844bd069a67b5b96cb8ec993f05a8e252ed3d8ed63d524af0845f519f9d47b85a773f37031cb91055fb963db50e6a1e368f10a82fa40ac055e0201c6d29661eadb76f8154ef9c1cc210ccf1ccb063e8c00324ed6a14fdefa0167a9abb04debbbf5e7b8a57a7772373c765947f0f67b5130d77a6ca6ab166147d4eba97b4ddf1465d25b02f4430227b5713a29fd84664bfdfa5fc450e48f5263eaca67c16033b79bf1cb819511cf16bae6ffd5d05a7d9cc93067b6f2512fea2424a9c7d178f653ffa7ce1c00924707e3817c7cd461cb2a8cc5eadc40821258eaad7720ee3976c5a60025c317480016e5e5bd884f3646651f3bdc1185ec1a4112eb24ba5b3b6f94ac66322042d4bc48cb5befabfcf950cf8a0165fba3fa019324b53fb56bbfaec7f4ec733e84c22f841c1c9c1dc51dd3ac4887e155ac4095a6b8846c8f401f3c2d48d4de18906193a9f05ed59e3b0add8bc27c0bad8418ccbb842123ce1d39fdeeaa7984dfba9ef121ab4d4d35de076262636f3815708e4bcf31e634a290b13317425b1a4a2e4ebf8537092c7e524c126faa9622bf1337168e003857805dd420a51816fea3cd37c34e483f64a2da3ab67442314ffff40727835a1bc7b9971ccb5f83183cf1a135defd468907b988d97028f904c4d9c712f7d0ed6abe4d80712a7b7e06efcbe6a5b83e32beb1556326af7a97437c35c6a706c6cf4403b98f5134547ac167fd1abcb9245ec3450202ab80e553952412032a6c3cfa64441d4aecabd1e182c50bf67801fd3b44b40648ac9926bbbd7095425a429f2a9550c2fd1267cbf6156897b705255cadf1c7f233f4effd788b3f446dba19e68bbf8b42ff6caf984a4eb51328ab5e2bc28366e8b4df4df967a166470a00", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000000, 0x0, 0x0, 0x6, 0x0, 0x969, {0x0, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x2, 0xc000, 0x200000, 0x0, 0x0, 0x2000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) getpgrp(0x0) r8 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) dup(r0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000080)={'\x00', 0x40, 0xc1, 0x4, 0x0, 0x3, r8}) kcmp$KCMP_EPOLL_TFD(r9, r9, 0x7, r0, 0x0) 8m55.184783317s ago: executing program 3 (id=2689): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1f, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0xffffffff}}, 0x2e) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x3ba42e, &(0x7f00000000c0)=ANY=[@ANYBLOB='nr_inodes=0,\x00']) connect$pppl2tp(r1, &(0x7f0000000400)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0xffffffff, 0x0, 0x2}}, 0xfffffffffffffd01) 8m54.715727733s ago: executing program 3 (id=2690): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x401) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0xffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000100)=0x5) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x4004, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x600}}], [{@smackfstransmute}]}}) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000050005000100000008000400000000000500060000000000080003"], 0x34}}, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e00000001300"], 0xe0}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000001c40)=""/230, &(0x7f0000001d40)=0xe6) setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x1, 0x1, &(0x7f0000001c00)={0x8}, 0x4) sendmsg(r4, &(0x7f0000001bc0)={&(0x7f0000000980)=@nl=@unspec, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000140)="8f248e67efb42eba684df7f3c45e627208026ad719263e3903f150ccac1cff020e106820a0a095", 0x27}, {&(0x7f0000000a00)="a095e63a6e02fb0bf7def4fd5749bc4dbd9f29ac2dc6e21e77e12386bfa68a13040abcdfea8a1092ae4c91bcba4144ce05825fe0a191949a28298d9ccd93459398de8117acc977d40bacb3838b50783450c4abd96f87e82eeb9bb216788ec6cae60a", 0x62}, {&(0x7f0000000a80)="8106e875e748e7dac0a6be5c43906114f8918daa37c957f088f12a1ae0bbcda18d5d1ea83791327b1c38f3533ad3cb4f6736b18941548bc92ccf5ba569b13c27f3fdb37ddfa805b082f2efbada8bbbfa331b9b895e76b38337affe5090f06e9832924f667d71b1be47ea09ca99abf0a14bbf771b717ae4b6f807dabb3baf7ae0266cccbe5261a3eac95478c29c0fb4344f5fbfdecaead1f173d5556c825ee96c2f98838cd91a08f205d019e830b5270cc506b8", 0xb3}], 0x3, &(0x7f0000000b80)=[{0x1010, 0x0, 0x81, "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"}], 0x1010}, 0x8000000) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r9, 0x400448e6, &(0x7f0000000080)='|w') ioctl$sock_bt_hci(r9, 0x400448e6, 0x0) ioctl$sock_bt_hci(r9, 0x400448e7, &(0x7f0000000080)) read$snddsp(r2, &(0x7f0000001d80)=""/103, 0x67) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000d000f00000002800000121f", 0x2e}], 0x1}, 0x0) 8m54.08982071s ago: executing program 33 (id=2690): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x401) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) symlinkat(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f00000000c0), 0xffffffff, 0x0) ioctl$SNDRV_PCM_IOCTL_LINK(r2, 0x40044160, &(0x7f0000000100)=0x5) open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f0000000080), 0x4004, &(0x7f0000000400)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x600}}], [{@smackfstransmute}]}}) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000050005000100000008000400000000000500060000000000080003"], 0x34}}, 0x0) r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e00000001300"], 0xe0}}, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, &(0x7f0000001c40)=""/230, &(0x7f0000001d40)=0xe6) setsockopt$inet6_icmp_ICMP_FILTER(r7, 0x1, 0x1, &(0x7f0000001c00)={0x8}, 0x4) sendmsg(r4, &(0x7f0000001bc0)={&(0x7f0000000980)=@nl=@unspec, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000140)="8f248e67efb42eba684df7f3c45e627208026ad719263e3903f150ccac1cff020e106820a0a095", 0x27}, {&(0x7f0000000a00)="a095e63a6e02fb0bf7def4fd5749bc4dbd9f29ac2dc6e21e77e12386bfa68a13040abcdfea8a1092ae4c91bcba4144ce05825fe0a191949a28298d9ccd93459398de8117acc977d40bacb3838b50783450c4abd96f87e82eeb9bb216788ec6cae60a", 0x62}, {&(0x7f0000000a80)="8106e875e748e7dac0a6be5c43906114f8918daa37c957f088f12a1ae0bbcda18d5d1ea83791327b1c38f3533ad3cb4f6736b18941548bc92ccf5ba569b13c27f3fdb37ddfa805b082f2efbada8bbbfa331b9b895e76b38337affe5090f06e9832924f667d71b1be47ea09ca99abf0a14bbf771b717ae4b6f807dabb3baf7ae0266cccbe5261a3eac95478c29c0fb4344f5fbfdecaead1f173d5556c825ee96c2f98838cd91a08f205d019e830b5270cc506b8", 0xb3}], 0x3, &(0x7f0000000b80)=[{0x1010, 0x0, 0x81, "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"}], 0x1010}, 0x8000000) r8 = socket$kcm(0x10, 0x2, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r9, 0x400448e6, &(0x7f0000000080)='|w') ioctl$sock_bt_hci(r9, 0x400448e6, 0x0) ioctl$sock_bt_hci(r9, 0x400448e7, &(0x7f0000000080)) read$snddsp(r2, &(0x7f0000001d80)=""/103, 0x67) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8481f0000005e140604000000000e000d000f00000002800000121f", 0x2e}], 0x1}, 0x0) 6m7.266905261s ago: executing program 5 (id=3826): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 6m7.18450849s ago: executing program 5 (id=3827): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r0 = openat$procfs(0xffffff9c, &(0x7f0000000140)='/proc/sysvipc/sem\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0x3, 0x8, 0x3, 0x3, 0x10001}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x8341, 0x0) write$nbd(r1, &(0x7f00000003c0)=ANY=[], 0x40) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, 0x0}) getrlimit(0x7, &(0x7f0000000180)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$getown(r3, 0x9) fstat(r4, &(0x7f0000000500)) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000080)=0x3, 0x12) 6m5.927872343s ago: executing program 5 (id=3829): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4, 0x1}, 0xe) getsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, 0x0, &(0x7f0000000400)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') pwritev(r1, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, 0x0, 0x0) connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg$inet6(r2, 0x0, 0x0, 0xc8040) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebdbe429d"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000002d0001002dbd7000fcdbdf250400000004001280fb7e9eb7fc"], 0x18}, 0x1, 0x700}, 0x8004) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x7000000) 6m4.816024364s ago: executing program 5 (id=3831): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x14, 0xa, 0xa, 0x101}, 0x14}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) read$msr(0xffffffffffffffff, &(0x7f0000002700)=""/102392, 0x18ff8) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000000080)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socket(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="0bb97820edd4"}) close(r1) r3 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$smc(&(0x7f00000002c0), r3) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="370200007d02000005"], 0xe9) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) 6m1.143289913s ago: executing program 5 (id=3838): socket$unix(0x1, 0x1, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) syz_usbip_server_init(0x3) 6m0.172269566s ago: executing program 5 (id=3844): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x803}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) 5m44.0606094s ago: executing program 34 (id=3844): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x803}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) 6.154167207s ago: executing program 0 (id=5927): ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x40a0ae49, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000240)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xfe\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd88\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F#\xb7\x04C\x8dm\t\x16a\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4p{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb\xa5y`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93\x86\xa5wo\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xf5\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\r\xe9\xe5\x8b&\x0f\x8c\xfb\xef\xf8\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xeaNg\x02\xcd\xfd\x1a}.\xd3\"x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97', 0x3) write$binfmt_misc(r2, &(0x7f0000000740), 0xff67) sendfile(r1, r2, &(0x7f0000000040), 0xffff) fcntl$addseals(r2, 0x409, 0x8) fsetxattr$security_capability(r2, &(0x7f00000001c0), 0x0, 0x0, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 5.816950275s ago: executing program 0 (id=5931): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x30, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) 5.744342276s ago: executing program 0 (id=5932): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x63) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x90, 0x0, 0x0, {0x3, 0x1, 0x0, 0x0, 0xffffffff, 0x0, {0x6, 0x200000000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x2, 0x0, 0x0, 0x101}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x2b, 0x3ff7400, 0x12008010}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x4842, 0x0) writev(r2, &(0x7f0000000a40)=[{0x0}, {&(0x7f0000000e00)='t', 0x1}, {0x0}], 0x3) 5.658960314s ago: executing program 0 (id=5933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$kcm(0x11, 0x2, 0x0) close_range(r0, r1, 0x2) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) connect$unix(r2, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 5.427594039s ago: executing program 0 (id=5942): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)="7d717c1f8428280ab55a04c6325d699064905ef93ebd77e2efec9f53dda482c9ee2e65a7f14fb8c8ba86e1a48d2b6b6afa2f0b4ec3e4f1113ef51e3ee2e89096948f4605cb79bde9e3c35e2e8c5656e7f4e2839f750dbc54845ec35a6540a0ac354fc844277715dc45a624629d82528a3e868dc2152570c88ba2157e21a3fd45974bfeb026194d440b5318f8bc08da0d365fd550f1ddb920ad905618a7289482f74bc2e81ec9c0abf25663403ca2ad939860eef39a36235f55b27706f0bbf4a7596f3c713b3b5e96c8186e508bac854c98bcae2a79234c8f125fd1199bcc52695fe06ba43c32a91f2cabaec6291285220c54819496843f", 0xf7}, {&(0x7f0000002c40)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)="80", 0x1}], 0x1}}], 0x2, 0x10000) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf0ff, 0x0, 0x0, 0x80000000}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) 4.484061665s ago: executing program 1 (id=5941): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r1, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f00000c1000/0x3000)=nil, 0x0, 0x0, 0x0, 0x201, 0x19, 0x0, 0x42}) 3.011905043s ago: executing program 1 (id=5951): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) pipe2$9p(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80880) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000300)={@mcast2, 0xe845, 0x0, 0x0, 0x3, 0x1, 0xc}, 0x20) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f00000003c0)={0x8df18, 0x6, 0x17f, 0x6, 0x9}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x42) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x20, &(0x7f0000000040)=0x3, 0x4) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x17, 0x1, 0x0, "9611e6d6ffc88885163200000080d2b400000000000800"}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) fsetxattr$security_evm(r3, &(0x7f00000000c0), &(0x7f0000000180)=ANY=[@ANYBLOB="02f7abc288b16b20f6080041"], 0xc, 0x3) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000100)={r7, 0x0, 0xfffffb79, 0xffffffff, 0x0, [0x0, 0x0, 0x0, 0x0], [0x40000000, 0x1, 0x0, 0x1], [0x7, 0x0, 0x0, 0x6], [0x0, 0x0, 0x1]}) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000200)='bridge_slave_0\x00', 0x10) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='cmdline\x00') fcntl$setlease(r1, 0x400, 0x2) ioctl$VHOST_VDPA_GET_STATUS(r9, 0x8001af71, &(0x7f0000000440)) read$FUSE(r9, &(0x7f00000040c0)={0x2020}, 0x2020) read$ptp(r9, &(0x7f00000000c0)=""/65, 0x41) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x218001, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r10, 0xc008640a, &(0x7f0000000380)={r8, 0x0}) shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffd000/0x2000)=nil) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x28801, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION2(r13, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x3000, 0x2000, &(0x7f000060b000/0x2000)=nil, 0x8001}) ioctl$KVM_CAP_X86_GUEST_MODE(r13, 0x4068aea3, &(0x7f0000000300)) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000080)={r11}) close_range(r0, r0, 0x0) 3.011093377s ago: executing program 4 (id=5952): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000600)={0x8, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e1d, @empty}}}, 0x108) 2.914456378s ago: executing program 4 (id=5953): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x440d00, 0x0) mmap$dsp(&(0x7f0000347000/0x3000)=nil, 0x3000, 0x0, 0x40010, r0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x7f, 0x0, &(0x7f0000000000)={0x80}, 0x68, 0x0, 0x8, 0x0, 0x400000, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$USBDEVFS_REAPURBNDELAY(r1, 0x4004550d, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f00000001c0), 0x0, 0x200040) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0xd39, 0x5d7165) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x4, 0x1, 0x407}}}, 0x7) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000340), 0x13f, 0x6}}, 0x20) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x1, 0x9, 0x204, 0x5, 0x200000000000, 0x200000000000008, 0x9, 0x200, 0x7, 0x2, 0x1, 0x2}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r5, 0xc0984124, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) writev(r2, &(0x7f0000000080)=[{&(0x7f00000000c0)="5bffd083", 0x4}], 0x1) r7 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029ea69801d76ab0a272a2a788bab6c95f79725074", 0xd5}], 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="110200000000fcdbdf250f000000"], 0x14}, 0x1, 0x100000000000000, 0x0, 0x4044059}, 0x40090) close_range(r0, 0xffffffffffffffff, 0x0) 2.756039193s ago: executing program 1 (id=5955): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x9b68426c3eff21ad}, 0x20008000) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.566614274s ago: executing program 4 (id=5957): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000400)="8924041be672446194b3b765137e02fdd0ac815c4f16299cf6f02f5f", 0x16) mlockall(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="78cab6dbbca53f43dfa36c5d636447b185045d976ee57125c8b208", @ANYRES16=r4, @ANYBLOB="0100000000000000000006000009080004003400000008000500e00000020f000700756e636f6e66695965640000"], 0x34}, 0x2, 0x34005, 0x0, 0x24080040}, 0x240088c4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r5, 0x400, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xdd12}], 0x1}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r7, 0x0, 0x2a, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x5e23, @local}}}, 0x108) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r8, &(0x7f00000000c0)=""/144, 0x90, 0x5e) 2.389459695s ago: executing program 1 (id=5958): mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e20, 0xfffffffd, @loopback}, 0x1c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_GET_IRQCHIP(r3, 0xc208ae62, &(0x7f0000000200)={0x3, 0x0, @pic={0x1, 0x0, 0xfa, 0x80, 0x5, 0xe, 0x2, 0x1, 0x6, 0x3, 0xe, 0x3, 0xc0, 0xbf, 0x0, 0x7}}) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0xfffffffc}, 0x1c) 2.121507438s ago: executing program 1 (id=5960): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b"], 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x54, 0x12, 0x301, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7ffd}, 0xf0ffffff}, [@INET_DIAG_REQ_BYTECODE={0x8, 0x3, "11000000"}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004081}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000229639010861a2d754d27010203011b00060000000009040700000000000000050c031000030f0203d53fd9f1b49a4892ebda4060faed9199dbfbb9027a7ab446505a9dddd507006738966f7361b3a315036f0908aabb2ea3ffbac3d884e89fa8c2f242383cead26b08e6f6bce85d786bd1bce253356081a7b01bf08ebbad3da6641fb9cba0d755505e488226db414b266c0503fcee1913402418ade4d26eb5243603530e0a93333df38bc0b746f7a8dd7e0ec1fe6952406ab5e0d598ad5ba6f9fc6c92d9c3ec6c61de76b821dbcf8542366b15a8c21a4d60be00"/233], 0x0) getsockopt$sock_int(r2, 0x1, 0x5, 0x0, &(0x7f0000000400)) r3 = open(&(0x7f0000000100)='\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x5}) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_DISCONNECT(r5, 0xab08) ioctl$NBD_CLEAR_SOCK(r5, 0x125f) getpeername$inet(r4, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x38, 0x11, 0x0, 0x1, @rt={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_DREG={0x8}]}}}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x18, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xf0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000140)={0xf0, @time={0x88, 0x5}, 0x3, {0xb8, 0x7}, 0x2, 0xff993f66c3860086, 0x1}) 1.432758026s ago: executing program 4 (id=5961): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000600)={0x8, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e1d, @empty}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000280)={0x8, {{0x2, 0x4e1f, @multicast1}}, {{0x2, 0x4e23, @rand_addr=0x64010100}}}, 0x108) 1.132079787s ago: executing program 4 (id=5963): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x81, 0xd, 0x4003, 0x2}) 1.128057372s ago: executing program 0 (id=5964): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x18, 0xc8, 0x3}}}, 0x7) r0 = syz_io_uring_setup(0x69c9, &(0x7f0000000180)={0x0, 0x2999, 0x100, 0x0, 0x74}, &(0x7f0000000300), &(0x7f0000000040)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000100)) r1 = openat$userio(0xffffffffffffff9c, 0x0, 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f00000002c0)={0x1, 0x5}, 0x2) ioctl$BLKFRASET(0xffffffffffffffff, 0x1264, &(0x7f0000000040)=0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06b9409b0dff", 0xd, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f47"]) r2 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0xfffffffffffffffb) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000140)=ANY=[@ANYBLOB="0400000000000000a303000000000000"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$USERIO_CMD_REGISTER(r1, 0x0, 0x0) read(r1, &(0x7f0000000240)=""/97, 0x61) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba", 0x10}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r7 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020800000000000800000524050000082407000000009ef6230700000000a3a82f07070d240701060000fd800000001a4824030000000001"], 0x0) syz_usb_control_io(r7, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x20000801) syz_usb_control_io$uac1(r7, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0003040000959327d735"]}, 0x0) 1.1043495s ago: executing program 6 (id=5965): futex(&(0x7f000000cffc)=0xfffffffd, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xa, 0x801, 0x0, 0x0, 0x3) r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4084080, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan3\x00', 0x0}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0xb, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x44080}, 0x4000002) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xd, @private0={0xfc, 0x0, '\x00', 0x1}, 0x5}, 0x1c) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_GET_CPUID2(r7, 0xc008ae91, &(0x7f0000002780)) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x80) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e0443050c"], 0x7) syz_open_procfs(0x0, 0x0) 1.046994474s ago: executing program 4 (id=5966): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) io_submit(0x0, 0x1, &(0x7f0000000180)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x7, 0x3899, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x3}]) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r2, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs={0x12}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000000)={0x0, 0x4, 0x70, {0x70, 0x10, "5f48148ccc3aa0b75fc786f258e93b1a9bf752bf182533a2492570f1468032ef74ba1c120a7422726c17a8aeff1dfd8212e187cbbd7cbcbdeb4f39eedeb2befc41ee4ca5c7f1c0be644354db4ad46ce4148e08e04d818ab8eb0450f2f323bf9fd3c87471734b16b183d720336664"}}, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000300)={0x1c, &(0x7f0000000140)={0x20, 0xc, 0xfd, "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"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xe9}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x9}}) 756.172221ms ago: executing program 6 (id=5967): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703340000001f03000000000000040014000d000a000d0000009ee517d3334abc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004002) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r2, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x34}, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffe}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000001200), 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo\x00') getdents64(r4, &(0x7f0000000040)=""/27, 0x1b) getdents64(r4, &(0x7f00000000c0)=""/205, 0xcd) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r5, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) r7 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r7, 0x2284, &(0x7f0000000080)) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04230582d644daf5a5e58a0000000000"], 0x10) ioctl$KVM_SET_PIT(r8, 0x8048ae66, &(0x7f0000000080)={[{0x0, 0x8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x2}]}) 612.164243ms ago: executing program 6 (id=5968): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x7ff, 0x81, 0xd, 0x4003, 0x2}) (fail_nth: 2) 400.36817ms ago: executing program 1 (id=5969): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000400)="8924041be672446194b3b765137e02fdd0ac815c4f16299cf6f02f5f", 0x16) mlockall(0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[@ANYBLOB="78cab6dbbca53f43dfa36c5d636447b185045d976ee57125c8b208", @ANYRES16=r4, @ANYBLOB="0100000000000000000006000009080004003400000008000500e00000020f000700756e636f6e66695965640000"], 0x34}, 0x2, 0x34005, 0x0, 0x24080040}, 0x240088c4) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) fcntl$setlease(r5, 0x400, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r6, 0x4004ae99, &(0x7f00000001c0)=0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xdd12}], 0x1}, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r7, 0x0, 0x2a, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x5e23, @local}}}, 0x108) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00') pread64(r8, &(0x7f00000000c0)=""/144, 0x90, 0x5e) 248.102803ms ago: executing program 6 (id=5970): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000007c0)="02", 0x1}], 0x1}}], 0x1, 0x24005805) 103.116859ms ago: executing program 6 (id=5971): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r0, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000600)={0x8, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e1d, @empty}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000280)={0x8, {{0x2, 0x4e1f, @multicast1}}, {{0x2, 0x4e23, @rand_addr=0x64010100}}}, 0x108) 0s ago: executing program 6 (id=5972): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) close_range(r0, 0xffffffffffffffff, 0x2) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000440)="7d717c1f8428280ab55a04c6325d699064905ef93ebd77e2efec9f53dda482c9ee2e65a7f14fb8c8ba86e1a48d2b6b6afa2f0b4ec3e4f1113ef51e3ee2e89096948f4605cb79bde9e3c35e2e8c5656e7f4e2839f750dbc54845ec35a6540a0ac354fc844277715dc45a624629d82528a3e868dc2152570c88ba2157e21a3fd45974bfeb026194d440b5318f8bc08da0d365fd550f1ddb920ad905618a7289482f74bc2e81ec9c0abf25663403ca2ad939860eef39a36235f55b27706f0bbf4a7596f3c713b3b5e96c8186e508bac854c98bcae2a79234c8f125fd1199bcc52695fe06ba43c32a91f2cabaec6291285220c54819496843f", 0xf7}, {&(0x7f0000002c40)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)="80", 0x1}], 0x1}}], 0x2, 0x10000) r4 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_INSN(r4, 0x8028640c, &(0x7f0000000000)={0x4000000, 0xf0ff, 0x0, 0x0, 0x80000000}) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) kernel console output (not intermixed with test programs): an invalid length. [ 979.988563][T21639] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5404'. [ 980.141832][T21643] netlink: 19 bytes leftover after parsing attributes in process `syz.0.5405'. [ 980.330020][T21654] fuse: Unknown parameter 'user_i00000000000000000000' [ 981.577734][T17733] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 981.768036][T17733] usb 7-1: Using ep0 maxpacket: 32 [ 981.790296][T17733] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 981.798524][T17733] usb 7-1: config 0 has no interface number 0 [ 981.805489][T17733] usb 7-1: config 0 interface 12 has no altsetting 0 [ 981.842543][T17733] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 981.851663][T17733] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.860387][T17733] usb 7-1: Product: syz [ 981.865144][T17733] usb 7-1: Manufacturer: syz [ 981.869783][T17733] usb 7-1: SerialNumber: syz [ 981.924109][T17733] usb 7-1: config 0 descriptor?? [ 982.425614][T17733] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 982.441129][T17733] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 982.451406][T21662] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 982.462573][T17733] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 982.481476][T17733] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 982.518752][T17733] usb 7-1: USB disconnect, device number 33 [ 983.029868][T17733] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 983.194017][T17733] usb 7-1: Using ep0 maxpacket: 16 [ 983.210268][T17733] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 983.221029][T17733] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 983.232576][T17733] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 983.254691][T17733] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 983.263806][T17733] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.272055][T17733] usb 7-1: Product: syz [ 983.296641][T17733] usb 7-1: Manufacturer: syz [ 983.302154][T17733] usb 7-1: SerialNumber: syz [ 983.985430][T17733] usb 7-1: 0:2 : does not exist [ 983.996649][T17733] usb 7-1: 1:0: cannot get min/max values for control 2 (id 1) [ 984.035675][T17733] usb 7-1: USB disconnect, device number 34 [ 984.654767][T17733] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 984.751128][ T5929] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 984.826743][T17733] usb 2-1: Using ep0 maxpacket: 8 [ 984.835594][T17733] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 984.847813][T17733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 984.859136][T17733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 984.871010][T17733] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 984.880477][T17733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.900684][T17733] usb 2-1: config 0 descriptor?? [ 984.906957][T21681] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 984.914335][ T5929] usb 1-1: Using ep0 maxpacket: 32 [ 984.944334][ T5929] usb 1-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.966670][ T5929] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 984.981797][ T5929] usb 1-1: config 0 interface 0 has no altsetting 0 [ 984.989112][ T5929] usb 1-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 984.998322][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.009957][ T5929] usb 1-1: config 0 descriptor?? [ 985.160861][T17733] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 985.201527][T17733] usb 2-1: USB disconnect, device number 75 [ 985.462305][ T5929] magicmouse 0003:05AC:0324.0020: unknown main item tag 0x0 [ 985.471945][ T5929] magicmouse 0003:05AC:0324.0020: unknown main item tag 0x0 [ 985.482764][ T5929] magicmouse 0003:05AC:0324.0020: unknown main item tag 0x0 [ 985.493517][ T5929] magicmouse 0003:05AC:0324.0020: unknown main item tag 0x0 [ 985.515802][ T5929] magicmouse 0003:05AC:0324.0020: unknown main item tag 0x0 [ 985.536924][ T5929] magicmouse 0003:05AC:0324.0020: hidraw0: USB HID v80.00 Device [HID 05ac:0324] on usb-dummy_hcd.0-1/input0 [ 985.555352][ T5929] magicmouse 0003:05AC:0324.0020: magicmouse input not registered [ 985.581999][ T5929] magicmouse 0003:05AC:0324.0020: probe with driver magicmouse failed with error -12 [ 985.680805][ T24] usb 1-1: USB disconnect, device number 72 [ 986.110756][T17733] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 986.220555][ T24] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 986.252716][T21719] netlink: 'syz.4.5435': attribute type 21 has an invalid length. [ 986.267995][T21719] netlink: 144 bytes leftover after parsing attributes in process `syz.4.5435'. [ 986.285417][T17733] usb 7-1: Using ep0 maxpacket: 16 [ 986.296413][T17733] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 986.320896][T17733] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 986.340422][T17733] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 986.374070][T17733] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 986.407917][T17733] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.428626][T17733] usb 7-1: Product: syz [ 986.433329][T17733] usb 7-1: Manufacturer: syz [ 986.445628][T17733] usb 7-1: SerialNumber: syz [ 986.469325][T21723] fuse: Unknown parameter '0x0000000000000004' [ 986.478152][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 986.514286][ T24] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 986.530374][ T24] usb 2-1: config 0 has no interface number 0 [ 986.539904][ T24] usb 2-1: config 0 interface 12 has no altsetting 0 [ 986.549885][ T24] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 986.590360][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.609795][ T24] usb 2-1: Product: syz [ 986.620069][ T24] usb 2-1: Manufacturer: syz [ 986.626446][ T24] usb 2-1: SerialNumber: syz [ 986.665850][ T24] usb 2-1: config 0 descriptor?? [ 986.741809][T21729] FAULT_INJECTION: forcing a failure. [ 986.741809][T21729] name failslab, interval 1, probability 0, space 0, times 0 [ 986.754904][T21729] CPU: 1 UID: 0 PID: 21729 Comm: syz.0.5438 Not tainted syzkaller #0 PREEMPT(full) [ 986.754944][T21729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 986.754959][T21729] Call Trace: [ 986.754968][T21729] [ 986.754982][T21729] dump_stack_lvl+0x189/0x250 [ 986.755009][T21729] ? __pfx____ratelimit+0x10/0x10 [ 986.755046][T21729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 986.755069][T21729] ? __pfx__printk+0x10/0x10 [ 986.755103][T21729] ? __lock_acquire+0xab9/0xd20 [ 986.755142][T21729] should_fail_ex+0x414/0x560 [ 986.755175][T21729] should_failslab+0xa8/0x100 [ 986.755207][T21729] __kmalloc_cache_noprof+0x6f/0x6f0 [ 986.755233][T21729] ? proc_self_get_link+0xe6/0x180 [ 986.755256][T21729] ? __task_pid_nr_ns+0x3ac/0x490 [ 986.755297][T21729] proc_self_get_link+0xe6/0x180 [ 986.755321][T21729] ? __pfx_proc_self_get_link+0x10/0x10 [ 986.755346][T21729] pick_link+0x67c/0xe80 [ 986.755389][T21729] step_into+0xc5d/0xf30 [ 986.755424][T21729] ? read_word_at_a_time+0x16/0x20 [ 986.755459][T21729] ? __pfx_step_into+0x10/0x10 [ 986.755493][T21729] ? lookup_fast+0x168/0x5b0 [ 986.755528][T21729] ? inode_permission+0x149/0x470 [ 986.755560][T21729] ? __asan_memcpy+0x40/0x70 [ 986.755584][T21729] link_path_walk+0x77b/0xea0 [ 986.755639][T21729] path_openat+0x28c/0x3830 [ 986.755703][T21729] ? __pfx_path_openat+0x10/0x10 [ 986.755750][T21729] do_filp_open+0x1fa/0x410 [ 986.755772][T21729] ? __lock_acquire+0xab9/0xd20 [ 986.755800][T21729] ? __pfx_do_filp_open+0x10/0x10 [ 986.755849][T21729] ? _raw_spin_unlock+0x28/0x50 [ 986.755880][T21729] ? alloc_fd+0x64c/0x6c0 [ 986.755930][T21729] do_sys_openat2+0x121/0x1c0 [ 986.755956][T21729] ? __pfx_do_sys_openat2+0x10/0x10 [ 986.755983][T21729] ? ksys_write+0x22a/0x250 [ 986.756012][T21729] ? __pfx_ksys_write+0x10/0x10 [ 986.756041][T21729] __x64_sys_openat+0x138/0x170 [ 986.756070][T21729] do_syscall_64+0xfa/0xfa0 [ 986.756091][T21729] ? lockdep_hardirqs_on+0x9c/0x150 [ 986.756112][T21729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.756134][T21729] ? clear_bhb_loop+0x60/0xb0 [ 986.756162][T21729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 986.756184][T21729] RIP: 0033:0x7f3c6f78d550 [ 986.756205][T21729] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 986.756226][T21729] RSP: 002b:00007f3c6d9f5f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 986.756251][T21729] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3c6f78d550 [ 986.756267][T21729] RDX: 0000000000000000 RSI: 00007f3c6f811f06 RDI: 00000000ffffff9c [ 986.756282][T21729] RBP: 00007f3c6f811f06 R08: 0000000000000000 R09: 0000000000000000 [ 986.756297][T21729] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 986.756310][T21729] R13: 00007f3c6f9c6128 R14: 00007f3c6f9c6090 R15: 00007fffacf152e8 [ 986.756348][T21729] [ 987.289073][T17733] usb 7-1: 0:2 : does not exist [ 987.317701][T17733] usb 7-1: 1:0: cannot get min/max values for control 2 (id 1) [ 987.387373][T21712] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 987.398206][T17733] usb 7-1: USB disconnect, device number 35 [ 987.465125][T21517] udevd[21517]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 987.468359][ T24] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 987.492052][ T24] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 987.527323][ T24] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 987.535222][ T24] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 987.553038][ T43] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 987.567917][ T24] usb 2-1: USB disconnect, device number 76 [ 987.713396][ T43] usb 5-1: device descriptor read/64, error -71 [ 988.002214][ T43] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 988.163012][ T43] usb 5-1: device descriptor read/64, error -71 [ 988.303772][ T43] usb usb5-port1: attempt power cycle [ 988.402573][T21742] netlink: 'syz.1.5444': attribute type 21 has an invalid length. [ 988.411531][T21742] netlink: 144 bytes leftover after parsing attributes in process `syz.1.5444'. [ 988.609683][T21749] fuse: Unknown parameter '0x0000000000000004' [ 988.667579][ T43] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 988.720691][ T43] usb 5-1: device descriptor read/8, error -71 [ 989.007342][ T43] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 989.064810][ T43] usb 5-1: device descriptor read/8, error -71 [ 989.178695][ T43] usb usb5-port1: unable to enumerate USB device [ 989.195950][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 989.328123][ T24] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 989.573890][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 989.592460][ T24] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 989.618229][ T24] usb 1-1: config 0 has no interface number 0 [ 989.624404][ T24] usb 1-1: config 0 interface 12 has no altsetting 0 [ 989.648150][ T24] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 989.668525][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 989.679580][ T24] usb 1-1: Product: syz [ 989.684384][ T24] usb 1-1: Manufacturer: syz [ 989.686254][T21773] fuse: Unknown parameter '0x0000000000000004' [ 989.689017][ T24] usb 1-1: SerialNumber: syz [ 989.756892][ T24] usb 1-1: config 0 descriptor?? [ 989.787439][T21775] FAULT_INJECTION: forcing a failure. [ 989.787439][T21775] name failslab, interval 1, probability 0, space 0, times 0 [ 989.800676][T21775] CPU: 0 UID: 0 PID: 21775 Comm: syz.1.5458 Not tainted syzkaller #0 PREEMPT(full) [ 989.800705][T21775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 989.800719][T21775] Call Trace: [ 989.800731][T21775] [ 989.800743][T21775] dump_stack_lvl+0x189/0x250 [ 989.800767][T21775] ? __pfx____ratelimit+0x10/0x10 [ 989.800799][T21775] ? __pfx_dump_stack_lvl+0x10/0x10 [ 989.800814][T21775] ? __pfx__printk+0x10/0x10 [ 989.800839][T21775] ? __pfx_skb_network_protocol+0x10/0x10 [ 989.800869][T21775] should_fail_ex+0x414/0x560 [ 989.800902][T21775] should_failslab+0xa8/0x100 [ 989.800929][T21775] kmem_cache_alloc_noprof+0x74/0x6e0 [ 989.800949][T21775] ? vxcan_xmit+0x49/0x780 [ 989.800968][T21775] ? skb_clone+0x212/0x3a0 [ 989.800989][T21775] skb_clone+0x212/0x3a0 [ 989.801005][T21775] ? vxcan_xmit+0x1eb/0x780 [ 989.801035][T21775] vxcan_xmit+0x1f8/0x780 [ 989.801059][T21775] ? vxcan_xmit+0x49/0x780 [ 989.801086][T21775] dev_hard_start_xmit+0x2d4/0x830 [ 989.801120][T21775] __dev_queue_xmit+0x1b8d/0x3b50 [ 989.801139][T21775] ? kasan_save_track+0x4f/0x80 [ 989.801153][T21775] ? kasan_save_track+0x3e/0x80 [ 989.801183][T21775] ? __dev_queue_xmit+0x27b/0x3b50 [ 989.801225][T21775] ? __pfx___dev_queue_xmit+0x10/0x10 [ 989.801260][T21775] ? __copy_skb_header+0xa7/0x550 [ 989.801278][T21775] ? __asan_memcpy+0x40/0x70 [ 989.801291][T21775] ? __skb_clone+0x63/0x7a0 [ 989.801316][T21775] ? __skb_clone+0x483/0x7a0 [ 989.801348][T21775] ? skb_clone+0x246/0x3a0 [ 989.801369][T21775] ? can_send+0x655/0xd00 [ 989.801392][T21775] can_send+0x905/0xd00 [ 989.801422][T21775] ? __pfx_can_send+0x10/0x10 [ 989.801455][T21775] isotp_sendmsg+0xd44/0x14a0 [ 989.801487][T21775] ? __lock_acquire+0xab9/0xd20 [ 989.801526][T21775] ? __pfx_isotp_sendmsg+0x10/0x10 [ 989.801553][T21775] ? aa_sk_perm+0x81e/0x950 [ 989.801581][T21775] ? __lock_acquire+0xab9/0xd20 [ 989.801597][T21775] ? __pfx_aa_sk_perm+0x10/0x10 [ 989.801624][T21775] ? tomoyo_socket_sendmsg_permission+0x1e1/0x300 [ 989.801666][T21775] ? aa_sock_msg_perm+0xf1/0x1d0 [ 989.801698][T21775] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 989.801721][T21775] ? __pfx_isotp_sendmsg+0x10/0x10 [ 989.801743][T21775] __sock_sendmsg+0x219/0x270 [ 989.801774][T21775] ____sys_sendmsg+0x52d/0x830 [ 989.801805][T21775] ? __pfx_____sys_sendmsg+0x10/0x10 [ 989.801838][T21775] ? import_iovec+0x74/0xa0 [ 989.801858][T21775] ___sys_sendmsg+0x21f/0x2a0 [ 989.801876][T21775] ? __pfx____sys_sendmsg+0x10/0x10 [ 989.801930][T21775] ? __fget_files+0x2a/0x420 [ 989.801959][T21775] ? __fget_files+0x3a0/0x420 [ 989.801996][T21775] __sys_sendmmsg+0x227/0x430 [ 989.802018][T21775] ? __pfx___sys_sendmmsg+0x10/0x10 [ 989.802042][T21775] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 989.802083][T21775] ? ksys_write+0x22a/0x250 [ 989.802111][T21775] ? __pfx_ksys_write+0x10/0x10 [ 989.802141][T21775] __x64_sys_sendmmsg+0xa0/0xc0 [ 989.802160][T21775] do_syscall_64+0xfa/0xfa0 [ 989.802176][T21775] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.802190][T21775] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 989.802209][T21775] ? clear_bhb_loop+0x60/0xb0 [ 989.802236][T21775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.802257][T21775] RIP: 0033:0x7f088bf8ebe9 [ 989.802276][T21775] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 989.802293][T21775] RSP: 002b:00007f088cd25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 989.802310][T21775] RAX: ffffffffffffffda RBX: 00007f088c1c5fa0 RCX: 00007f088bf8ebe9 [ 989.802322][T21775] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000003 [ 989.802332][T21775] RBP: 00007f088cd25090 R08: 0000000000000000 R09: 0000000000000000 [ 989.802341][T21775] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 989.802352][T21775] R13: 00007f088c1c6038 R14: 00007f088c1c5fa0 R15: 00007fff62500738 [ 989.802389][T21775] [ 990.602659][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 990.658048][T21759] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 990.676623][ T24] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 990.684205][ T24] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 990.762045][ T24] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 990.777784][ T24] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 990.802731][ T24] usb 1-1: USB disconnect, device number 73 [ 992.065908][ T5948] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 992.226711][T21813] fuse: Unknown parameter '0x0000000000000004' [ 992.247687][ T5948] usb 7-1: Using ep0 maxpacket: 16 [ 992.267228][ T5948] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 992.301008][ T5948] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 992.326756][ T5948] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 992.347801][ T5948] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 992.362291][ T5948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.382337][ T5948] usb 7-1: Product: syz [ 992.392194][ T5948] usb 7-1: Manufacturer: syz [ 992.402452][ T5948] usb 7-1: SerialNumber: syz [ 992.987777][T21822] netlink: 'syz.0.5476': attribute type 21 has an invalid length. [ 992.995850][T21822] netlink: 144 bytes leftover after parsing attributes in process `syz.0.5476'. [ 993.080241][ T5948] usb 7-1: 0:2 : does not exist [ 993.102791][ T5948] usb 7-1: 1:0: cannot get min/max values for control 2 (id 1) [ 993.159115][ T5948] usb 7-1: USB disconnect, device number 36 [ 993.169157][T21825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5477'. [ 993.205681][T21517] udevd[21517]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 993.397326][T21831] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5487'. [ 993.463813][T21833] bond_slave_1: entered promiscuous mode [ 993.471045][T21833] bond_slave_1: entered allmulticast mode [ 993.756933][T21843] FAULT_INJECTION: forcing a failure. [ 993.756933][T21843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 993.775969][T21843] CPU: 1 UID: 0 PID: 21843 Comm: syz.6.5483 Not tainted syzkaller #0 PREEMPT(full) [ 993.776001][T21843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 993.776015][T21843] Call Trace: [ 993.776024][T21843] [ 993.776035][T21843] dump_stack_lvl+0x189/0x250 [ 993.776064][T21843] ? __pfx____ratelimit+0x10/0x10 [ 993.776098][T21843] ? __pfx_dump_stack_lvl+0x10/0x10 [ 993.776120][T21843] ? __pfx__printk+0x10/0x10 [ 993.776170][T21843] should_fail_ex+0x414/0x560 [ 993.776203][T21843] _copy_to_user+0x31/0xb0 [ 993.776229][T21843] simple_read_from_buffer+0xe1/0x170 [ 993.776265][T21843] proc_fail_nth_read+0x1b3/0x220 [ 993.776298][T21843] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 993.776324][T21843] ? rw_verify_area+0x2a6/0x4d0 [ 993.776349][T21843] ? __lock_acquire+0xab9/0xd20 [ 993.776372][T21843] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 993.776395][T21843] vfs_read+0x200/0xa30 [ 993.776420][T21843] ? fdget_pos+0x247/0x320 [ 993.776456][T21843] ? __pfx___mutex_lock+0x10/0x10 [ 993.776480][T21843] ? __pfx_vfs_read+0x10/0x10 [ 993.776519][T21843] ? __fget_files+0x2a/0x420 [ 993.776553][T21843] ? __fget_files+0x3a0/0x420 [ 993.776580][T21843] ? __fget_files+0x2a/0x420 [ 993.776618][T21843] ksys_read+0x145/0x250 [ 993.776646][T21843] ? __pfx_ksys_read+0x10/0x10 [ 993.776673][T21843] ? do_syscall_64+0xbe/0xfa0 [ 993.776698][T21843] do_syscall_64+0xfa/0xfa0 [ 993.776716][T21843] ? lockdep_hardirqs_on+0x9c/0x150 [ 993.776737][T21843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.776759][T21843] ? clear_bhb_loop+0x60/0xb0 [ 993.776785][T21843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 993.776807][T21843] RIP: 0033:0x7fe86e18d5fc [ 993.776826][T21843] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 993.776845][T21843] RSP: 002b:00007fe86ef68030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 993.776868][T21843] RAX: ffffffffffffffda RBX: 00007fe86e3c5fa0 RCX: 00007fe86e18d5fc [ 993.776885][T21843] RDX: 000000000000000f RSI: 00007fe86ef680a0 RDI: 0000000000000003 [ 993.776900][T21843] RBP: 00007fe86ef68090 R08: 0000000000000000 R09: 0000000000000000 [ 993.776914][T21843] R10: 0000200000002640 R11: 0000000000000246 R12: 0000000000000001 [ 993.776929][T21843] R13: 00007fe86e3c6038 R14: 00007fe86e3c5fa0 R15: 00007ffc3bf4e488 [ 993.776964][T21843] [ 994.234686][T21854] netlink: 'syz.6.5488': attribute type 21 has an invalid length. [ 994.253363][T21854] netlink: 144 bytes leftover after parsing attributes in process `syz.6.5488'. [ 994.462488][T21857] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5489'. [ 994.935787][T21864] bond_slave_1: entered promiscuous mode [ 994.957331][T21864] bond_slave_1: entered allmulticast mode [ 995.156330][ T5948] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 995.167217][T21870] netlink: 'syz.6.5495': attribute type 10 has an invalid length. [ 995.327466][ T5948] usb 1-1: Using ep0 maxpacket: 16 [ 995.347570][ T5948] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 995.373934][ T5948] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 995.394059][ T5948] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 995.406016][ T5948] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 995.415492][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.437014][ T5948] usb 1-1: Product: syz [ 995.441303][ T5948] usb 1-1: Manufacturer: syz [ 995.452134][ T5948] usb 1-1: SerialNumber: syz [ 995.572382][T21878] fuse: Unknown parameter 'fd0x0000000000000004' [ 995.592725][T21880] FAULT_INJECTION: forcing a failure. [ 995.592725][T21880] name failslab, interval 1, probability 0, space 0, times 0 [ 995.616364][T21880] CPU: 0 UID: 0 PID: 21880 Comm: syz.6.5499 Not tainted syzkaller #0 PREEMPT(full) [ 995.616397][T21880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 995.616412][T21880] Call Trace: [ 995.616422][T21880] [ 995.616431][T21880] dump_stack_lvl+0x189/0x250 [ 995.616458][T21880] ? __pfx____ratelimit+0x10/0x10 [ 995.616491][T21880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 995.616513][T21880] ? __pfx__printk+0x10/0x10 [ 995.616552][T21880] ? __pfx___might_resched+0x10/0x10 [ 995.616578][T21880] ? fs_reclaim_acquire+0x7d/0x100 [ 995.616611][T21880] should_fail_ex+0x414/0x560 [ 995.616643][T21880] should_failslab+0xa8/0x100 [ 995.616673][T21880] kmem_cache_alloc_noprof+0x74/0x6e0 [ 995.616697][T21880] ? vm_area_dup+0x2b/0x680 [ 995.616729][T21880] vm_area_dup+0x2b/0x680 [ 995.616760][T21880] __split_vma+0x1a9/0xa00 [ 995.616794][T21880] ? mas_next_slot+0xc20/0xcf0 [ 995.616832][T21880] ? __pfx___split_vma+0x10/0x10 [ 995.616884][T21880] ? mas_find+0xb0e/0xd30 [ 995.616921][T21880] vms_gather_munmap_vmas+0x4c6/0x12e0 [ 995.616974][T21880] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 995.617016][T21880] ? __lock_acquire+0xab9/0xd20 [ 995.617050][T21880] do_vmi_align_munmap+0x268/0x440 [ 995.617102][T21880] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 995.617169][T21880] do_vmi_munmap+0x253/0x2e0 [ 995.617206][T21880] do_munmap+0xcf/0x120 [ 995.617229][T21880] ? __lock_acquire+0xab9/0xd20 [ 995.617256][T21880] ? __pfx_do_munmap+0x10/0x10 [ 995.617300][T21880] mremap_to+0x2c8/0x790 [ 995.617335][T21880] ? mtree_load+0x101/0x6f0 [ 995.617368][T21880] ? __pfx_mremap_to+0x10/0x10 [ 995.617398][T21880] ? may_expand_vm+0x1b6/0x2f0 [ 995.617426][T21880] ? check_prep_vma+0x8bb/0xb00 [ 995.617469][T21880] __se_sys_mremap+0xd45/0xfb0 [ 995.617529][T21880] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 995.617567][T21880] ? __pfx___se_sys_mremap+0x10/0x10 [ 995.617607][T21880] ? fput+0xa0/0xd0 [ 995.617628][T21880] ? ksys_write+0x22a/0x250 [ 995.617657][T21880] ? __pfx_ksys_write+0x10/0x10 [ 995.617689][T21880] ? do_syscall_64+0xbe/0xfa0 [ 995.617710][T21880] ? __x64_sys_mremap+0x20/0xc0 [ 995.617744][T21880] do_syscall_64+0xfa/0xfa0 [ 995.617764][T21880] ? lockdep_hardirqs_on+0x9c/0x150 [ 995.617785][T21880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.617809][T21880] ? clear_bhb_loop+0x60/0xb0 [ 995.617837][T21880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 995.617866][T21880] RIP: 0033:0x7fe86e18ebe9 [ 995.617887][T21880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 995.617908][T21880] RSP: 002b:00007fe86ef68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 995.617934][T21880] RAX: ffffffffffffffda RBX: 00007fe86e3c5fa0 RCX: 00007fe86e18ebe9 [ 995.617952][T21880] RDX: 0000000000800000 RSI: 0000000000001000 RDI: 0000200000a96000 [ 995.617968][T21880] RBP: 00007fe86ef68090 R08: 0000200000130000 R09: 0000000000000000 [ 995.617984][T21880] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 995.617999][T21880] R13: 00007fe86e3c6038 R14: 00007fe86e3c5fa0 R15: 00007ffc3bf4e488 [ 995.618036][T21880] [ 996.154308][ T5948] usb 1-1: 0:2 : does not exist [ 996.167651][ T5948] usb 1-1: 1:0: cannot get min/max values for control 2 (id 1) [ 996.298338][ T5948] usb 1-1: USB disconnect, device number 74 [ 996.806852][T21895] bond_slave_1: entered promiscuous mode [ 996.812584][T21895] bond_slave_1: entered allmulticast mode [ 996.930132][T21904] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5509'. [ 997.023702][T21908] xt_l2tp: wrong L2TP version: 0 [ 997.369976][ T5948] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 997.543873][ T5948] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 997.552230][ T5948] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 997.563945][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 997.576427][ T5948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 997.587731][ T5948] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 997.600892][ T5948] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 997.611193][ T5948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 997.621629][ T5948] usb 2-1: config 0 descriptor?? [ 997.635465][T21911] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 998.062687][T21920] netlink: 'syz.4.5515': attribute type 10 has an invalid length. [ 998.106885][ T5948] plantronics 0003:047F:FFFF.0021: reserved main item tag 0xd [ 998.146743][T21920] veth0_vlan: left promiscuous mode [ 998.159441][T21920] veth0_vlan: entered promiscuous mode [ 998.172199][ T5948] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 998.206184][T21920] team0: Device veth0_vlan failed to register rx_handler [ 998.500055][T21926] fuse: Unknown parameter 'group_i00000000000000000000' [ 998.589019][ T5929] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 998.601910][T21928] loop2: detected capacity change from 0 to 7 [ 998.616381][T21517] Dev loop2: unable to read RDB block 7 [ 998.622251][T21517] loop2: AHDI p1 p2 p3 [ 998.626510][T21517] loop2: partition table partially beyond EOD, truncated [ 998.640324][T21517] loop2: p1 start 1601398130 is beyond EOD, truncated [ 998.648531][T21517] loop2: p2 start 1702059890 is beyond EOD, truncated [ 998.672630][T21928] Dev loop2: unable to read RDB block 7 [ 998.680776][T21928] loop2: AHDI p1 p2 p3 [ 998.685252][T21928] loop2: partition table partially beyond EOD, truncated [ 998.693292][T21928] loop2: p1 start 1601398130 is beyond EOD, truncated [ 998.700682][T21928] loop2: p2 start 1702059890 is beyond EOD, truncated [ 998.729343][T21930] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 998.774879][ T5929] usb 7-1: Using ep0 maxpacket: 16 [ 998.798605][ T5929] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 998.817440][ T5929] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 998.854869][ T5929] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 998.885408][T21933] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5519'. [ 998.888908][ T5929] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 998.905640][ T5929] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.914668][ T5929] usb 7-1: Product: syz [ 998.919072][ T5929] usb 7-1: Manufacturer: syz [ 998.924408][ T5929] usb 7-1: SerialNumber: syz [ 999.586320][ T5929] usb 7-1: 0:2 : does not exist [ 999.621502][ T5929] usb 7-1: 1:0: cannot get min/max values for control 2 (id 1) [ 999.684937][ T5929] usb 7-1: USB disconnect, device number 37 [ 1000.297045][ T5948] usb 2-1: USB disconnect, device number 77 [ 1001.250727][T21971] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5531'. [ 1001.358842][ T2153] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1001.531695][ T2153] usb 1-1: Using ep0 maxpacket: 32 [ 1001.540138][ T2153] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1001.566718][ T2153] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1001.581907][ T2153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.614402][ T2153] usb 1-1: Product: syz [ 1001.618746][ T2153] usb 1-1: Manufacturer: syz [ 1001.623396][ T2153] usb 1-1: SerialNumber: syz [ 1001.633446][ T2153] usb 1-1: config 0 descriptor?? [ 1001.649048][ T2153] smsc75xx v1.0.0 [ 1001.653026][ T2153] smsc75xx 1-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1001.664260][ T2153] smsc75xx 1-1:0.0: probe with driver smsc75xx failed with error -22 [ 1002.130030][ T2153] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1002.311903][ T2153] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 1002.320093][ T2153] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1002.332364][ T2153] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1002.343936][ T2153] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1002.356143][ T2153] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1002.369571][ T2153] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1002.378992][ T2153] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.391787][ T2153] usb 7-1: config 0 descriptor?? [ 1002.405803][T21980] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1002.705136][T21985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5534'. [ 1002.878214][ T2153] plantronics 0003:047F:FFFF.0022: reserved main item tag 0xd [ 1002.916415][ T2153] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 1003.483277][T21999] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1004.074062][T22003] fuse: Unknown parameter 'group_id00000000000000000000' [ 1004.942433][ T5948] usb 1-1: USB disconnect, device number 75 [ 1005.034566][ T2153] usb 7-1: USB disconnect, device number 38 [ 1005.470291][T22029] fuse: Unknown parameter 'group_id00000000000000000000' [ 1005.668545][ T9] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 1005.828929][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1005.835938][ T9] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.854226][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1005.901283][ T9] usb 7-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1005.994526][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1006.129578][ T9] usb 7-1: config 0 descriptor?? [ 1006.402016][ T5948] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1006.598965][ T5948] usb 5-1: Using ep0 maxpacket: 32 [ 1006.606416][ T5948] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1006.629279][ T5948] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1006.638474][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1006.646750][ T5948] usb 5-1: Product: syz [ 1006.650954][ T5948] usb 5-1: Manufacturer: syz [ 1006.655740][ T5948] usb 5-1: SerialNumber: syz [ 1006.664161][ T5948] usb 5-1: config 0 descriptor?? [ 1006.675491][ T5948] smsc75xx v1.0.0 [ 1006.679190][ T5948] smsc75xx 5-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1006.689714][ T5948] smsc75xx 5-1:0.0: probe with driver smsc75xx failed with error -22 [ 1006.810632][ T30] audit: type=1800 audit(1757270589.497:188): pid=22023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.5547" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1006.847355][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 1006.853580][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1006.856919][ T9] usb 7-1: USB disconnect, device number 39 [ 1007.350217][ T2153] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1007.531476][ T2153] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1007.539677][ T2153] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1007.551860][ T2153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1007.562867][ T2153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1007.575070][ T2153] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1007.590161][ T2153] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1007.600275][ T2153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.615368][ T2153] usb 1-1: config 0 descriptor?? [ 1007.623260][T22053] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1008.068115][ T2153] plantronics 0003:047F:FFFF.0023: reserved main item tag 0xd [ 1008.083522][ T2153] plantronics 0003:047F:FFFF.0023: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1008.299174][ T24] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1008.459637][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 1008.472589][ T24] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1008.486813][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.497255][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1008.509717][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1008.520337][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.530200][ T24] usb 2-1: Product: syz [ 1008.535020][ T24] usb 2-1: Manufacturer: syz [ 1008.539659][ T24] usb 2-1: SerialNumber: syz [ 1008.670577][T22077] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1009.204612][ T24] usb 2-1: 0:2 : does not exist [ 1009.224783][ T24] usb 2-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1009.267860][ T24] usb 2-1: USB disconnect, device number 78 [ 1009.301151][T21517] udevd[21517]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1009.947973][ T2153] usb 5-1: USB disconnect, device number 43 [ 1010.303619][ T2153] usb 1-1: USB disconnect, device number 76 [ 1011.357757][ T24] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1011.518174][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 1011.526048][ T24] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.537473][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1011.544234][ T24] usb 1-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1011.555786][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.568723][ T24] usb 1-1: config 0 descriptor?? [ 1012.033943][T22149] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 1012.258751][ T30] audit: type=1800 audit(1757270594.603:189): pid=22115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.5576" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1012.314259][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 1012.334436][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1012.352051][ T24] usb 1-1: USB disconnect, device number 77 [ 1012.678912][T22168] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 1013.090248][T17733] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1013.153960][T22186] netlink: 'syz.0.5603': attribute type 10 has an invalid length. [ 1013.162179][T22186] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5603'. [ 1013.172333][T22186] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1013.265986][T17733] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 1013.277914][T17733] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 1013.288129][T17733] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 1013.299985][T17733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 1013.318183][T17733] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1013.328055][T17733] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.336604][T17733] usb 2-1: Product: syz [ 1013.341022][T17733] usb 2-1: Manufacturer: syz [ 1013.345761][T17733] usb 2-1: SerialNumber: syz [ 1013.356431][T17733] usb 2-1: config 0 descriptor?? [ 1013.362478][T22178] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1013.372407][T17733] usb 2-1: ucan: probing device on interface #0 [ 1013.378880][T17733] usb 2-1: ucan: invalid endpoint configuration [ 1013.385381][T17733] usb 2-1: ucan: probe failed; try to update the device firmware [ 1013.591753][T22178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1013.601125][T22178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1013.611087][ T24] usb 2-1: USB disconnect, device number 79 [ 1013.805381][T22200] netlink: 1 bytes leftover after parsing attributes in process `syz.6.5609'. [ 1013.829747][ T5948] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1013.999380][ T5948] usb 5-1: Using ep0 maxpacket: 16 [ 1014.006599][ T5948] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1014.015528][ T5948] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.025739][ T5948] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1014.038933][ T5948] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1014.048127][ T5948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.056327][ T5948] usb 5-1: Product: syz [ 1014.060524][ T5948] usb 5-1: Manufacturer: syz [ 1014.065270][ T5948] usb 5-1: SerialNumber: syz [ 1014.465717][T22213] netlink: 'syz.6.5613': attribute type 10 has an invalid length. [ 1014.473767][T22213] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5613'. [ 1014.483559][T22213] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1014.652952][ T9] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1014.728331][ T5948] usb 5-1: 0:2 : does not exist [ 1014.755897][ T5948] usb 5-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1014.801476][ T5948] usb 5-1: USB disconnect, device number 44 [ 1014.822954][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1014.845155][T21517] udevd[21517]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1014.846214][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.898729][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1014.905577][ T9] usb 2-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1014.920497][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.941186][ T9] usb 2-1: config 0 descriptor?? [ 1014.960330][T22226] FAULT_INJECTION: forcing a failure. [ 1014.960330][T22226] name failslab, interval 1, probability 0, space 0, times 0 [ 1014.975443][T22226] CPU: 1 UID: 0 PID: 22226 Comm: syz.6.5620 Not tainted syzkaller #0 PREEMPT(full) [ 1014.975474][T22226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1014.975488][T22226] Call Trace: [ 1014.975498][T22226] [ 1014.975507][T22226] dump_stack_lvl+0x189/0x250 [ 1014.975534][T22226] ? __pfx____ratelimit+0x10/0x10 [ 1014.975567][T22226] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1014.975588][T22226] ? __pfx__printk+0x10/0x10 [ 1014.975626][T22226] ? __lock_acquire+0xab9/0xd20 [ 1014.975657][T22226] should_fail_ex+0x414/0x560 [ 1014.975687][T22226] should_failslab+0xa8/0x100 [ 1014.975714][T22226] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1014.975735][T22226] ? skb_clone+0x212/0x3a0 [ 1014.975766][T22226] skb_clone+0x212/0x3a0 [ 1014.975793][T22226] __netlink_deliver_tap+0x404/0x850 [ 1014.975827][T22226] ? netlink_deliver_tap+0x2e/0x1b0 [ 1014.975849][T22226] netlink_deliver_tap+0x19c/0x1b0 [ 1014.975872][T22226] netlink_unicast+0x7fa/0x9e0 [ 1014.975910][T22226] ? __pfx_netlink_unicast+0x10/0x10 [ 1014.975942][T22226] ? netlink_sendmsg+0x642/0xb30 [ 1014.975961][T22226] ? skb_put+0x11b/0x210 [ 1014.975987][T22226] netlink_sendmsg+0x805/0xb30 [ 1014.976017][T22226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1014.976042][T22226] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1014.976076][T22226] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1014.976105][T22226] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1014.976138][T22226] __sock_sendmsg+0x219/0x270 [ 1014.976172][T22226] ____sys_sendmsg+0x505/0x830 [ 1014.976203][T22226] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1014.976236][T22226] ? import_iovec+0x74/0xa0 [ 1014.976261][T22226] ___sys_sendmsg+0x21f/0x2a0 [ 1014.976306][T22226] ? __pfx____sys_sendmsg+0x10/0x10 [ 1014.976386][T22226] ? __fget_files+0x2a/0x420 [ 1014.976415][T22226] ? __fget_files+0x3a0/0x420 [ 1014.976460][T22226] __x64_sys_sendmsg+0x19b/0x260 [ 1014.976507][T22226] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1014.976541][T22226] ? __pfx_ksys_write+0x10/0x10 [ 1014.976572][T22226] ? do_syscall_64+0xbe/0xfa0 [ 1014.976598][T22226] do_syscall_64+0xfa/0xfa0 [ 1014.976619][T22226] ? lockdep_hardirqs_on+0x9c/0x150 [ 1014.976640][T22226] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.976661][T22226] ? clear_bhb_loop+0x60/0xb0 [ 1014.976688][T22226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.976709][T22226] RIP: 0033:0x7fe86e18ebe9 [ 1014.976728][T22226] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1014.976748][T22226] RSP: 002b:00007fe86ef68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1014.976773][T22226] RAX: ffffffffffffffda RBX: 00007fe86e3c5fa0 RCX: 00007fe86e18ebe9 [ 1014.976790][T22226] RDX: 0000000000000044 RSI: 0000200000000540 RDI: 0000000000000003 [ 1014.976805][T22226] RBP: 00007fe86ef68090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.976819][T22226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.976833][T22226] R13: 00007fe86e3c6038 R14: 00007fe86e3c5fa0 R15: 00007ffc3bf4e488 [ 1014.976870][T22226] [ 1015.512694][ T5948] IPVS: starting estimator thread 0... [ 1015.586995][T22235] netlink: 'syz.6.5624': attribute type 10 has an invalid length. [ 1015.595371][T22235] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5624'. [ 1015.609158][T22235] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1015.625521][T22232] IPVS: using max 27 ests per chain, 64800 per kthread [ 1015.733369][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 1015.739536][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1015.744495][ T9] usb 2-1: USB disconnect, device number 80 [ 1015.915655][T22247] fuse: Bad value for 'fd' [ 1015.938824][T22249] FAULT_INJECTION: forcing a failure. [ 1015.938824][T22249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1015.954839][T22249] CPU: 1 UID: 0 PID: 22249 Comm: syz.4.5630 Not tainted syzkaller #0 PREEMPT(full) [ 1015.954885][T22249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1015.954900][T22249] Call Trace: [ 1015.954909][T22249] [ 1015.954919][T22249] dump_stack_lvl+0x189/0x250 [ 1015.954946][T22249] ? __pfx____ratelimit+0x10/0x10 [ 1015.954979][T22249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1015.955000][T22249] ? __pfx__printk+0x10/0x10 [ 1015.955045][T22249] should_fail_ex+0x414/0x560 [ 1015.955083][T22249] _copy_to_user+0x31/0xb0 [ 1015.955108][T22249] simple_read_from_buffer+0xe1/0x170 [ 1015.955142][T22249] proc_fail_nth_read+0x1b3/0x220 [ 1015.955167][T22249] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1015.955192][T22249] ? rw_verify_area+0x2a6/0x4d0 [ 1015.955215][T22249] ? __lock_acquire+0xab9/0xd20 [ 1015.955237][T22249] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1015.955264][T22249] vfs_read+0x200/0xa30 [ 1015.955288][T22249] ? fdget_pos+0x247/0x320 [ 1015.955323][T22249] ? __pfx___mutex_lock+0x10/0x10 [ 1015.955346][T22249] ? __pfx_vfs_read+0x10/0x10 [ 1015.955373][T22249] ? __fget_files+0x2a/0x420 [ 1015.955407][T22249] ? __fget_files+0x3a0/0x420 [ 1015.955435][T22249] ? __fget_files+0x2a/0x420 [ 1015.955475][T22249] ksys_read+0x145/0x250 [ 1015.955503][T22249] ? __pfx_ksys_read+0x10/0x10 [ 1015.955533][T22249] ? do_syscall_64+0xbe/0xfa0 [ 1015.955558][T22249] do_syscall_64+0xfa/0xfa0 [ 1015.955576][T22249] ? lockdep_hardirqs_on+0x9c/0x150 [ 1015.955597][T22249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.955619][T22249] ? clear_bhb_loop+0x60/0xb0 [ 1015.955646][T22249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.955667][T22249] RIP: 0033:0x7fd0fdd8d5fc [ 1015.955687][T22249] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1015.955705][T22249] RSP: 002b:00007fd0febd8030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1015.955728][T22249] RAX: ffffffffffffffda RBX: 00007fd0fdfc5fa0 RCX: 00007fd0fdd8d5fc [ 1015.955745][T22249] RDX: 000000000000000f RSI: 00007fd0febd80a0 RDI: 0000000000000003 [ 1015.955759][T22249] RBP: 00007fd0febd8090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.955773][T22249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.955787][T22249] R13: 00007fd0fdfc6038 R14: 00007fd0fdfc5fa0 R15: 00007ffca58ddf68 [ 1015.955822][T22249] [ 1016.683765][ T9] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1016.756872][T22277] Invalid/unusable pipe [ 1016.869774][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1016.878523][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1016.912480][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1016.937561][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.952251][ T9] usb 7-1: Product: syz [ 1016.956704][ T9] usb 7-1: Manufacturer: syz [ 1016.961819][ T9] usb 7-1: SerialNumber: syz [ 1016.986694][ T9] usb 7-1: config 0 descriptor?? [ 1016.996612][ T9] smsc75xx v1.0.0 [ 1017.000314][ T9] smsc75xx 7-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1017.022507][ T9] smsc75xx 7-1:0.0: probe with driver smsc75xx failed with error -22 [ 1017.589003][T22307] IPVS: sync thread started: state = BACKUP, mcast_ifn = macvlan0, syncid = 512, id = 0 [ 1017.600267][T22306] IPVS: stopping backup sync thread 22307 ... [ 1018.385605][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1018.393429][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1018.412075][ T9] libceph: connect (1)[c::]:6789 error -101 [ 1018.418457][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 1018.432896][ T5948] libceph: connect (1)[c::]:6789 error -101 [ 1018.452103][ T5948] libceph: mon0 (1)[c::]:6789 connect error [ 1018.504685][T22349] fuse: Invalid rootmode [ 1018.740836][ T5948] libceph: connect (1)[c::]:6789 error -101 [ 1018.747554][ T5948] libceph: mon0 (1)[c::]:6789 connect error [ 1018.747850][ T5929] libceph: connect (1)[c::]:6789 error -101 [ 1018.792873][ T5929] libceph: mon0 (1)[c::]:6789 connect error [ 1019.151301][T22332] ceph: No mds server is up or the cluster is laggy [ 1019.160640][T22336] ceph: No mds server is up or the cluster is laggy [ 1019.850777][T22386] fuse: Invalid rootmode [ 1019.922848][T22390] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5681'. [ 1019.952381][T22390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5681'. [ 1019.965718][T22390] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5681'. [ 1020.233685][T21009] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1020.302870][ T5948] usb 7-1: USB disconnect, device number 40 [ 1020.372854][T21009] usb 1-1: device descriptor read/64, error -71 [ 1020.641480][T21009] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1020.790832][T21009] usb 1-1: device descriptor read/64, error -71 [ 1020.908419][T21009] usb usb1-port1: attempt power cycle [ 1021.085985][T22413] fuse: Bad value for 'rootmode' [ 1021.292488][T21009] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1021.307251][T22417] netlink: 'syz.1.5693': attribute type 10 has an invalid length. [ 1021.315847][T22417] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5693'. [ 1021.329928][T22417] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1021.359306][T21009] usb 1-1: device descriptor read/8, error -71 [ 1021.613523][T21009] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1021.648085][T21009] usb 1-1: device descriptor read/8, error -71 [ 1021.719769][T22433] fuse: Bad value for 'rootmode' [ 1021.774029][T21009] usb usb1-port1: unable to enumerate USB device [ 1022.627115][T22450] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1022.634530][T22450] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1022.641606][T22450] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1022.907428][ T9] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1022.982433][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1023.073669][ T9] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1023.081913][ T9] usb 5-1: can't read configurations, error -22 [ 1023.240172][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1023.324384][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1023.440393][ T9] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1023.451629][ T9] usb 5-1: can't read configurations, error -22 [ 1023.466338][ T9] usb usb5-port1: attempt power cycle [ 1023.987432][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1024.013639][T22468] fuse: Bad value for 'rootmode' [ 1024.039624][ T9] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1024.048637][ T9] usb 5-1: can't read configurations, error -22 [ 1024.201194][ T9] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1024.248924][ T9] usb 5-1: config index 0 descriptor too short (expected 9, got 0) [ 1024.310398][ T9] usb 5-1: can't read configurations, error -22 [ 1024.330446][ T9] usb usb5-port1: unable to enumerate USB device [ 1025.412840][T22484] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 1025.419435][T22484] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1025.455022][T22484] vhci_hcd vhci_hcd.0: Device attached [ 1025.490815][T22492] netlink: 'syz.0.5719': attribute type 10 has an invalid length. [ 1025.498855][T22492] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5719'. [ 1025.508962][T22492] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1025.560201][T22486] vhci_hcd: connection closed [ 1025.560666][ T12] vhci_hcd: stop threads [ 1025.580727][ T12] vhci_hcd: release socket [ 1025.585941][ T12] vhci_hcd: disconnect device [ 1025.647561][T21009] vhci_hcd: vhci_device speed not set [ 1025.735323][T22496] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5721'. [ 1026.837853][T22519] fuse: Unknown parameter 'use00000000000000000000' [ 1026.958038][T22521] netlink: 'syz.4.5729': attribute type 10 has an invalid length. [ 1026.966899][T22521] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5729'. [ 1026.980425][T22521] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1027.163909][T22525] ieee802154 phy1 wpan1: encryption failed: -22 [ 1027.312444][T22530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5733'. [ 1027.324115][T21009] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1027.515991][T21009] usb 1-1: Using ep0 maxpacket: 16 [ 1027.533360][T21009] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1027.544922][T21009] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1027.548048][T22536] sctp: [Deprecated]: syz.4.5735 (pid 22536) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1027.548048][T22536] Use struct sctp_sack_info instead [ 1027.570001][T21009] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1027.593292][T21009] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1027.617499][T21009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.632856][T21009] usb 1-1: Product: syz [ 1027.647309][T21009] usb 1-1: Manufacturer: syz [ 1027.654673][T21009] usb 1-1: SerialNumber: syz [ 1028.090507][T22545] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5740'. [ 1028.253960][T22550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5741'. [ 1028.264337][T22550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5741'. [ 1028.278759][T22550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5741'. [ 1028.343061][T21009] usb 1-1: 0:2 : does not exist [ 1028.361845][T21009] usb 1-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1028.410927][T21009] usb 1-1: USB disconnect, device number 82 [ 1028.848092][T22565] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5745'. [ 1029.106624][T22574] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1029.183031][T22578] netlink: 220 bytes leftover after parsing attributes in process `syz.6.5750'. [ 1029.286869][T22582] fuse: Unknown parameter 'user_i00000000000000000000' [ 1029.568565][T22592] netlink: 'syz.6.5756': attribute type 10 has an invalid length. [ 1029.587702][T22592] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1029.959737][ C0] Unknown status report in ack skb [ 1030.254141][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1030.275040][T22616] loop2: detected capacity change from 0 to 7 [ 1030.295483][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1030.309152][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1030.318403][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1030.326533][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1030.335789][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1030.344752][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1030.353977][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1030.363341][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1030.372588][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1030.383535][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1030.392752][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 1030.414664][ C0] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1030.423930][ C0] Buffer I/O error on dev loop2, logical block 0, async page read [ 1030.503715][T22618] FAULT_INJECTION: forcing a failure. [ 1030.503715][T22618] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.516894][T22618] CPU: 0 UID: 0 PID: 22618 Comm: syz.4.5766 Not tainted syzkaller #0 PREEMPT(full) [ 1030.516923][T22618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1030.516936][T22618] Call Trace: [ 1030.516945][T22618] [ 1030.516955][T22618] dump_stack_lvl+0x189/0x250 [ 1030.516982][T22618] ? __pfx____ratelimit+0x10/0x10 [ 1030.517017][T22618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1030.517039][T22618] ? __pfx__printk+0x10/0x10 [ 1030.517078][T22618] ? __pfx___might_resched+0x10/0x10 [ 1030.517104][T22618] ? fs_reclaim_acquire+0x7d/0x100 [ 1030.517135][T22618] should_fail_ex+0x414/0x560 [ 1030.517168][T22618] should_failslab+0xa8/0x100 [ 1030.517197][T22618] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1030.517221][T22618] ? __alloc_skb+0x112/0x2d0 [ 1030.517247][T22618] __alloc_skb+0x112/0x2d0 [ 1030.517272][T22618] alloc_skb_with_frags+0xca/0x890 [ 1030.517308][T22618] sock_alloc_send_pskb+0x857/0x990 [ 1030.517355][T22618] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1030.517395][T22618] ? iov_iter_advance+0x8b/0x1c0 [ 1030.517432][T22618] tun_get_user+0xa43/0x3e20 [ 1030.517489][T22618] ? aa_file_perm+0x44d/0x1550 [ 1030.517512][T22618] ? __pfx_tun_get_user+0x10/0x10 [ 1030.517541][T22618] ? _parse_integer_limit+0x1ae/0x1f0 [ 1030.517581][T22618] ? __lock_acquire+0xab9/0xd20 [ 1030.517611][T22618] ? ref_tracker_alloc+0x318/0x460 [ 1030.517636][T22618] ? __lock_acquire+0xab9/0xd20 [ 1030.517661][T22618] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1030.517693][T22618] ? tun_get+0x1c/0x2f0 [ 1030.517744][T22618] ? tun_get+0x1c/0x2f0 [ 1030.517772][T22618] ? tun_get+0x1c/0x2f0 [ 1030.517806][T22618] tun_chr_write_iter+0x113/0x200 [ 1030.517839][T22618] vfs_write+0x5c9/0xb30 [ 1030.517869][T22618] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1030.517899][T22618] ? __pfx_vfs_write+0x10/0x10 [ 1030.517925][T22618] ? __fget_files+0x2a/0x420 [ 1030.517954][T22618] ksys_write+0x145/0x250 [ 1030.517977][T22618] ? __pfx_ksys_write+0x10/0x10 [ 1030.518007][T22618] ? do_syscall_64+0xbe/0xfa0 [ 1030.518032][T22618] do_syscall_64+0xfa/0xfa0 [ 1030.518051][T22618] ? lockdep_hardirqs_on+0x9c/0x150 [ 1030.518073][T22618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.518093][T22618] ? clear_bhb_loop+0x60/0xb0 [ 1030.518120][T22618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.518143][T22618] RIP: 0033:0x7fd0fdd8ebe9 [ 1030.518163][T22618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1030.518183][T22618] RSP: 002b:00007fd0febd8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1030.518206][T22618] RAX: ffffffffffffffda RBX: 00007fd0fdfc5fa0 RCX: 00007fd0fdd8ebe9 [ 1030.518223][T22618] RDX: 00000000000000d2 RSI: 0000200000000480 RDI: 0000000000000006 [ 1030.518238][T22618] RBP: 00007fd0febd8090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.518252][T22618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.518265][T22618] R13: 00007fd0fdfc6038 R14: 00007fd0fdfc5fa0 R15: 00007ffca58ddf68 [ 1030.518297][T22618] [ 1030.988544][T22624] netlink: 'syz.1.5768': attribute type 10 has an invalid length. [ 1030.996651][T22624] __nla_validate_parse: 3 callbacks suppressed [ 1030.996671][T22624] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5768'. [ 1031.042071][T22624] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1031.353334][T22642] fuse: Unknown parameter 'user_i00000000000000000000' [ 1031.353553][T22641] FAULT_INJECTION: forcing a failure. [ 1031.353553][T22641] name failslab, interval 1, probability 0, space 0, times 0 [ 1031.380241][T22641] CPU: 0 UID: 0 PID: 22641 Comm: syz.0.5774 Not tainted syzkaller #0 PREEMPT(full) [ 1031.380270][T22641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1031.380284][T22641] Call Trace: [ 1031.380292][T22641] [ 1031.380302][T22641] dump_stack_lvl+0x189/0x250 [ 1031.380328][T22641] ? __pfx____ratelimit+0x10/0x10 [ 1031.380362][T22641] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1031.380382][T22641] ? __pfx__printk+0x10/0x10 [ 1031.380419][T22641] ? __pfx___might_resched+0x10/0x10 [ 1031.380446][T22641] ? fs_reclaim_acquire+0x7d/0x100 [ 1031.380477][T22641] should_fail_ex+0x414/0x560 [ 1031.380508][T22641] should_failslab+0xa8/0x100 [ 1031.380536][T22641] kmem_cache_alloc_node_noprof+0x77/0x710 [ 1031.380561][T22641] ? __alloc_skb+0x112/0x2d0 [ 1031.380588][T22641] __alloc_skb+0x112/0x2d0 [ 1031.380612][T22641] netlink_sendmsg+0x5c6/0xb30 [ 1031.380644][T22641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1031.380669][T22641] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1031.380704][T22641] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1031.380734][T22641] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1031.380765][T22641] __sock_sendmsg+0x219/0x270 [ 1031.380798][T22641] ____sys_sendmsg+0x505/0x830 [ 1031.380828][T22641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1031.380862][T22641] ? import_iovec+0x74/0xa0 [ 1031.380887][T22641] ___sys_sendmsg+0x21f/0x2a0 [ 1031.380913][T22641] ? __pfx____sys_sendmsg+0x10/0x10 [ 1031.380975][T22641] ? __fget_files+0x2a/0x420 [ 1031.381004][T22641] ? __fget_files+0x3a0/0x420 [ 1031.381044][T22641] __x64_sys_sendmsg+0x19b/0x260 [ 1031.381072][T22641] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1031.381107][T22641] ? __pfx_ksys_write+0x10/0x10 [ 1031.381137][T22641] ? do_syscall_64+0xbe/0xfa0 [ 1031.381161][T22641] do_syscall_64+0xfa/0xfa0 [ 1031.381181][T22641] ? lockdep_hardirqs_on+0x9c/0x150 [ 1031.381201][T22641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.381224][T22641] ? clear_bhb_loop+0x60/0xb0 [ 1031.381250][T22641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.381271][T22641] RIP: 0033:0x7f3c6f78ebe9 [ 1031.381290][T22641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1031.381308][T22641] RSP: 002b:00007f3c7052a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1031.381330][T22641] RAX: ffffffffffffffda RBX: 00007f3c6f9c5fa0 RCX: 00007f3c6f78ebe9 [ 1031.381346][T22641] RDX: 0000000020044000 RSI: 0000200000000440 RDI: 0000000000000003 [ 1031.381378][T22641] RBP: 00007f3c7052a090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.381392][T22641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1031.381406][T22641] R13: 00007f3c6f9c6038 R14: 00007f3c6f9c5fa0 R15: 00007fffacf152e8 [ 1031.381439][T22641] [ 1031.653076][ T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1031.761001][T22648] netlink: 'syz.0.5778': attribute type 8 has an invalid length. [ 1031.769010][T22648] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5778'. [ 1031.778409][T22648] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1031.812299][T22647] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1031.818624][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 1031.841057][ T24] usb 5-1: New USB device found, idVendor=0700, idProduct=0a00, bcdDevice= 0.00 [ 1031.852572][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.866961][ T24] usb 5-1: config 0 descriptor?? [ 1032.099789][T22633] sd 0:0:1:0: device reset [ 1032.325354][ T24] hid-generic 0003:0700:0A00.0024: unknown main item tag 0x0 [ 1032.336178][ T24] hid-generic 0003:0700:0A00.0024: unknown main item tag 0x0 [ 1032.343920][ T24] hid-generic 0003:0700:0A00.0024: unknown main item tag 0x0 [ 1032.352672][ T24] hid-generic 0003:0700:0A00.0024: unknown main item tag 0x0 [ 1032.363681][ T24] hid-generic 0003:0700:0A00.0024: unknown main item tag 0x0 [ 1032.374319][ T24] hid-generic 0003:0700:0A00.0024: hidraw0: USB HID v0.00 Device [HID 0700:0a00] on usb-dummy_hcd.4-1/input0 [ 1032.539713][ T24] usb 5-1: USB disconnect, device number 49 [ 1032.766286][T22659] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1032.782851][T22659] kvm: pic: level sensitive irq not supported [ 1032.783211][T22659] kvm: pic: non byte read [ 1032.906187][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1032.953911][T22667] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1033.022794][T22670] fuse: Unknown parameter 'user_id00000000000000000000' [ 1033.408204][T22686] netlink: 'syz.0.5790': attribute type 10 has an invalid length. [ 1033.417391][T22686] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5790'. [ 1033.429194][T22686] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1033.445399][T21009] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1033.624855][T21009] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1033.633521][T21009] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1033.648950][T21009] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1033.658225][T21009] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1033.666500][T21009] usb 5-1: Manufacturer: syz [ 1033.679039][T21009] usb 5-1: config 0 descriptor?? [ 1033.761768][T21009] rc_core: IR keymap rc-hauppauge not found [ 1033.767752][T21009] Registered IR keymap rc-empty [ 1033.777057][T21009] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1033.792586][T21009] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input90 [ 1033.907661][T22678] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5787'. [ 1033.920661][T21009] usb 5-1: USB disconnect, device number 50 [ 1034.103959][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1034.668952][T22708] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1035.614422][T22731] fuse: Unknown parameter 'user_id00000000000000000000' [ 1036.041932][T22743] Bluetooth: MGMT ver 1.23 [ 1036.217096][T22745] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1037.252798][T22762] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1037.275933][T22764] fuse: Bad value for 'fd' [ 1037.635176][T22779] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5821'. [ 1037.652924][T22779] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1037.660476][T22779] overlayfs: failed to set xattr on upper [ 1037.666313][T22779] overlayfs: ...falling back to redirect_dir=nofollow. [ 1037.673276][T22779] overlayfs: ...falling back to metacopy=off. [ 1037.679450][T22779] overlayfs: ...falling back to index=off. [ 1037.685274][T22779] overlayfs: ...falling back to uuid=null. [ 1037.913402][T22785] fuse: Bad value for 'fd' [ 1037.944483][T21009] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1038.124945][T21009] usb 7-1: Using ep0 maxpacket: 16 [ 1038.135148][T21009] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 8.00 [ 1038.137995][T22790] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1038.164766][T21009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.187667][T21009] usb 7-1: config 0 descriptor?? [ 1038.214786][T21009] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 1038.241648][T21009] usb 7-1: Detected FT4232H [ 1038.335556][T22794] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1038.429429][T21009] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1038.442305][T21009] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1038.454630][T21009] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1038.483435][T21009] usb 7-1: USB disconnect, device number 41 [ 1038.501490][T21009] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1038.517620][T21009] ftdi_sio 7-1:0.0: device disconnected [ 1039.361620][T22802] netlink: 'syz.1.5830': attribute type 11 has an invalid length. [ 1039.493716][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1039.992584][T22811] netlink: 'syz.0.5834': attribute type 10 has an invalid length. [ 1040.000790][T22811] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5834'. [ 1040.011585][T22811] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1040.370738][T22815] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1040.388364][T22815] cgroup: fork rejected by pids controller in /syz0 [ 1041.311828][T21009] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1041.483075][T21009] usb 5-1: Using ep0 maxpacket: 16 [ 1041.515026][T21009] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1041.532089][T21009] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1041.555378][T21009] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1041.582019][T21009] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1041.600148][T21009] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.637379][T21009] usb 5-1: Product: syz [ 1041.652432][T21009] usb 5-1: Manufacturer: syz [ 1041.670154][T21009] usb 5-1: SerialNumber: syz [ 1041.844517][ T5868] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1041.865413][ T5868] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1041.874671][ T5868] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1041.898422][ T5868] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1041.909348][ T5868] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1042.340543][T22837] chnl_net:caif_netlink_parms(): no params data found [ 1042.358699][T21009] usb 5-1: 0:2 : does not exist [ 1042.386781][T21009] usb 5-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1042.446773][T21009] usb 5-1: USB disconnect, device number 51 [ 1042.516694][T22849] netlink: 'syz.6.5848': attribute type 10 has an invalid length. [ 1042.525174][T21517] udevd[21517]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1042.528648][T22849] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5848'. [ 1042.553737][T22849] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1042.641626][T22837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.653522][T22837] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.661460][T22837] bridge_slave_0: entered allmulticast mode [ 1042.668962][T22837] bridge_slave_0: entered promiscuous mode [ 1042.677791][T22837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.688094][T22837] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.695925][T22837] bridge_slave_1: entered allmulticast mode [ 1042.707585][T22837] bridge_slave_1: entered promiscuous mode [ 1042.786796][T22837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.801903][T22837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1042.855782][T22837] team0: Port device team_slave_0 added [ 1042.864328][T22837] team0: Port device team_slave_1 added [ 1042.902901][T22837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1042.910178][T22837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1042.936457][T22837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1042.958539][T22837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1042.965546][T22837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.002781][T22837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.067835][ T9] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1043.086011][T22837] hsr_slave_0: entered promiscuous mode [ 1043.096109][T22837] hsr_slave_1: entered promiscuous mode [ 1043.103364][T22837] debugfs: 'hsr0' already exists in 'hsr' [ 1043.109458][T22837] Cannot create hsr debugfs directory [ 1043.236499][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1043.244843][ T9] usb 7-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 1043.255573][ T9] usb 7-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 1043.274091][ T9] usb 7-1: Product: syz [ 1043.284999][ T9] usb 7-1: config 0 descriptor?? [ 1043.291495][ T5929] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1043.315952][T22837] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.422843][T22837] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.461159][ T5929] usb 5-1: Using ep0 maxpacket: 16 [ 1043.468405][ T5929] usb 5-1: config 4 has an invalid interface number: 51 but max is 0 [ 1043.478028][ T5929] usb 5-1: config 4 has no interface number 0 [ 1043.484238][ T5929] usb 5-1: config 4 interface 51 has no altsetting 0 [ 1043.498689][ T5929] usb 5-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=83.4b [ 1043.508211][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.525101][ T5929] usb 5-1: Product: syz [ 1043.530903][ T5929] usb 5-1: Manufacturer: syz [ 1043.539659][ T5929] usb 5-1: SerialNumber: syz [ 1043.548911][T22837] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.569140][ T5929] upd78f0730 5-1:4.51: upd78f0730 converter detected [ 1043.579560][ T5929] usb 5-1: upd78f0730 converter now attached to ttyUSB0 [ 1043.594902][T22855] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5850'. [ 1043.624849][T22855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.662221][T22855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.688916][ T9] usbtouchscreen 7-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 1043.692231][T22837] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.711739][ T9] usb 7-1: USB disconnect, device number 42 [ 1043.783594][ T5929] usb 5-1: USB disconnect, device number 52 [ 1043.808860][ T5929] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 1043.835132][ T5929] upd78f0730 5-1:4.51: device disconnected [ 1043.923647][T22837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1043.933992][T22837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1043.948989][T22837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1043.959537][T22837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1044.053042][T22837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1044.078889][T22837] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.095718][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.102967][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.114544][ T5868] Bluetooth: hci1: command tx timeout [ 1044.128022][T14290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.135278][T14290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1044.555890][T22837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.694317][T22837] veth0_vlan: entered promiscuous mode [ 1044.735849][T22837] veth1_vlan: entered promiscuous mode [ 1044.823796][T22837] veth0_macvtap: entered promiscuous mode [ 1044.860346][T22837] veth1_macvtap: entered promiscuous mode [ 1044.937671][T22837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1044.996169][T22837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1045.041533][ T65] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.065055][ T65] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.117867][ T65] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.177732][ T65] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1045.489521][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.531727][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.724744][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1045.749842][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.855303][T22885] FAULT_INJECTION: forcing a failure. [ 1045.855303][T22885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1045.870967][T22885] CPU: 1 UID: 0 PID: 22885 Comm: syz.0.5842 Not tainted syzkaller #0 PREEMPT(full) [ 1045.871004][T22885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1045.871019][T22885] Call Trace: [ 1045.871029][T22885] [ 1045.871042][T22885] dump_stack_lvl+0x189/0x250 [ 1045.871072][T22885] ? __pfx____ratelimit+0x10/0x10 [ 1045.871112][T22885] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1045.871136][T22885] ? __pfx__printk+0x10/0x10 [ 1045.871208][T22885] should_fail_ex+0x414/0x560 [ 1045.871247][T22885] _copy_to_user+0x31/0xb0 [ 1045.871277][T22885] simple_read_from_buffer+0xe1/0x170 [ 1045.871317][T22885] proc_fail_nth_read+0x1b3/0x220 [ 1045.871348][T22885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1045.871379][T22885] ? rw_verify_area+0x2a6/0x4d0 [ 1045.871409][T22885] ? __lock_acquire+0xab9/0xd20 [ 1045.871439][T22885] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1045.871465][T22885] vfs_read+0x200/0xa30 [ 1045.871499][T22885] ? fdget_pos+0x247/0x320 [ 1045.871540][T22885] ? __pfx___mutex_lock+0x10/0x10 [ 1045.871569][T22885] ? __pfx_vfs_read+0x10/0x10 [ 1045.871601][T22885] ? __fget_files+0x2a/0x420 [ 1045.871642][T22885] ? __fget_files+0x3a0/0x420 [ 1045.871677][T22885] ? __fget_files+0x2a/0x420 [ 1045.871722][T22885] ksys_read+0x145/0x250 [ 1045.871755][T22885] ? __pfx_ksys_read+0x10/0x10 [ 1045.871791][T22885] ? do_syscall_64+0xbe/0xfa0 [ 1045.871820][T22885] do_syscall_64+0xfa/0xfa0 [ 1045.871843][T22885] ? lockdep_hardirqs_on+0x9c/0x150 [ 1045.871867][T22885] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.871894][T22885] ? clear_bhb_loop+0x60/0xb0 [ 1045.871926][T22885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1045.871951][T22885] RIP: 0033:0x7f483098d5fc [ 1045.871974][T22885] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1045.871997][T22885] RSP: 002b:00007f483177d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1045.872024][T22885] RAX: ffffffffffffffda RBX: 00007f4830bc5fa0 RCX: 00007f483098d5fc [ 1045.872045][T22885] RDX: 000000000000000f RSI: 00007f483177d0a0 RDI: 0000000000000006 [ 1045.872061][T22885] RBP: 00007f483177d090 R08: 0000000000000000 R09: 0000000000000000 [ 1045.872078][T22885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1045.872093][T22885] R13: 00007f4830bc6038 R14: 00007f4830bc5fa0 R15: 00007ffd30dfa8b8 [ 1045.872138][T22885] [ 1045.907172][T22888] netlink: 'syz.1.5858': attribute type 10 has an invalid length. [ 1046.144180][T22888] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5858'. [ 1046.154332][T22888] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1046.332741][T22891] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1046.338644][ T5868] Bluetooth: hci1: command tx timeout [ 1046.351042][T22891] cgroup: fork rejected by pids controller in /syz1 [ 1047.139027][T22904] syzkaller1: entered promiscuous mode [ 1047.156390][T22904] syzkaller1: entered allmulticast mode [ 1047.289718][T22908] netlink: 'syz.4.5868': attribute type 10 has an invalid length. [ 1047.308597][T22908] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5868'. [ 1047.330851][T22908] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1047.439503][ T2153] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1047.570289][T22911] fuse: Unknown parameter '0x0000000000000003' [ 1047.615800][ T2153] usb 1-1: Using ep0 maxpacket: 32 [ 1047.649274][ T2153] usb 1-1: config 0 has an invalid interface number: 232 but max is 0 [ 1047.663997][ T2153] usb 1-1: config 0 has no interface number 0 [ 1047.674688][ T2153] usb 1-1: config 0 interface 232 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1047.691941][ T5865] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1047.704979][ T5865] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1047.715458][ T2153] usb 1-1: New USB device found, idVendor=2040, idProduct=651b, bcdDevice=29.5a [ 1047.756223][ T2153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.756264][ T5865] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1047.770898][ T2153] usb 1-1: Product: syz [ 1047.778188][ T2153] usb 1-1: Manufacturer: syz [ 1047.784313][ T5865] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1047.794436][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1047.800930][ T2153] usb 1-1: SerialNumber: syz [ 1047.824367][T22915] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1047.853831][ T2153] usb 1-1: config 0 descriptor?? [ 1047.870677][T22915] cgroup: fork rejected by pids controller in /syz4 [ 1047.878481][T22904] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1047.901593][ T2153] em28xx 1-1:0.232: New device syz syz @ 480 Mbps (2040:651b, interface 232, class 232) [ 1047.951630][ T2153] em28xx 1-1:0.232: Video interface 232 found: bulk [ 1048.000959][T22918] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1048.289546][ T2153] em28xx 1-1:0.232: unknown em28xx chip ID (0) [ 1048.388380][ T2153] em28xx 1-1:0.232: reading from i2c device at 0xa0 failed (error=-5) [ 1048.432221][ T2153] em28xx 1-1:0.232: board has no eeprom [ 1048.445734][T22912] chnl_net:caif_netlink_parms(): no params data found [ 1048.530087][ T2153] em28xx 1-1:0.232: Identified as Hauppauge WinTV HVR 950 (card=16) [ 1048.538536][ T2153] em28xx 1-1:0.232: analog set to bulk mode. [ 1048.550108][ T5929] em28xx 1-1:0.232: Registering V4L2 extension [ 1048.570485][ T5865] Bluetooth: hci1: command tx timeout [ 1048.575753][ T2153] usb 1-1: USB disconnect, device number 84 [ 1048.655193][ T2153] em28xx 1-1:0.232: Disconnecting em28xx [ 1048.790942][ T5929] em28xx 1-1:0.232: Config register raw data: 0xffffffed [ 1048.824984][ T5929] em28xx 1-1:0.232: AC97 chip type couldn't be determined [ 1048.847474][T22912] bridge0: port 1(bridge_slave_0) entered blocking state [ 1048.861357][ T5929] em28xx 1-1:0.232: No AC97 audio processor [ 1048.873917][T22912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1048.881089][ T5929] em28xx 1-1:0.232: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 1048.894446][T22912] bridge_slave_0: entered allmulticast mode [ 1048.907852][ T5929] em28xx 1-1:0.232: Binding DVB extension [ 1048.914313][ T5929] em28xx 1-1:0.232: no endpoint for DVB mode and transfer type 0 [ 1048.936685][T22912] bridge_slave_0: entered promiscuous mode [ 1048.946364][T22912] bridge0: port 2(bridge_slave_1) entered blocking state [ 1048.954111][ T5929] em28xx 1-1:0.232: failed to pre-allocate USB transfer buffers for DVB. [ 1048.968612][T22912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1048.979558][ T5929] em28xx 1-1:0.232: Registering input extension [ 1048.989937][ T2153] em28xx 1-1:0.232: Closing input extension [ 1048.996500][T22912] bridge_slave_1: entered allmulticast mode [ 1049.017259][T22912] bridge_slave_1: entered promiscuous mode [ 1049.026521][ T2153] em28xx 1-1:0.232: Freeing device [ 1049.199396][T22912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.229236][T22912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1049.359935][T22912] team0: Port device team_slave_0 added [ 1049.378090][T22912] team0: Port device team_slave_1 added [ 1049.462259][T18346] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1049.473764][T18346] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1049.483323][T18346] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1049.493006][T18346] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1049.500823][T18346] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1049.533084][T22912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1049.546011][ T5948] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1049.552488][T22912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.580689][T22912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.595557][T22912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.603047][T22912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1049.629850][T22912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.696521][T22912] hsr_slave_0: entered promiscuous mode [ 1049.703616][T22912] hsr_slave_1: entered promiscuous mode [ 1049.710857][T22912] debugfs: 'hsr0' already exists in 'hsr' [ 1049.716649][T22912] Cannot create hsr debugfs directory [ 1049.722360][ T5948] usb 1-1: Using ep0 maxpacket: 16 [ 1049.746057][ T5948] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1049.778006][ T5948] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.799506][ T5948] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1049.825210][ T5948] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1049.834365][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1049.864425][ T5948] usb 1-1: Product: syz [ 1049.871360][ T5948] usb 1-1: Manufacturer: syz [ 1049.876106][ T5948] usb 1-1: SerialNumber: syz [ 1050.018730][ T5868] Bluetooth: hci3: command tx timeout [ 1050.296074][T22912] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.416001][T22912] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.557560][ T5948] usb 1-1: 0:2 : does not exist [ 1050.584545][ T5948] usb 1-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1050.633648][ T5948] usb 1-1: USB disconnect, device number 85 [ 1050.660720][T22912] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.735765][T21517] udevd[21517]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1050.787972][ T5868] Bluetooth: hci1: command tx timeout [ 1050.852657][T22912] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.905637][T22946] chnl_net:caif_netlink_parms(): no params data found [ 1051.210456][T22946] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.218253][T22946] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.225879][T22946] bridge_slave_0: entered allmulticast mode [ 1051.233843][T22946] bridge_slave_0: entered promiscuous mode [ 1051.243259][T22946] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.250691][T22946] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.258253][T22946] bridge_slave_1: entered allmulticast mode [ 1051.266435][T22946] bridge_slave_1: entered promiscuous mode [ 1051.366593][T22946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1051.375577][T22958] fuse: Unknown parameter '0x0000000000000003' [ 1051.413795][T22946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1051.464385][T22912] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1051.528833][T22912] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1051.548065][T22912] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1051.561131][T22946] team0: Port device team_slave_0 added [ 1051.571055][T22946] team0: Port device team_slave_1 added [ 1051.607479][T22912] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1051.734018][ T5865] Bluetooth: hci0: command tx timeout [ 1051.762887][T22946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1051.782491][T22946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1051.808511][ C1] vkms_vblank_simulate: vblank timer overrun [ 1051.837308][T22946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1051.864967][T22968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1051.876146][T22968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1051.885161][T22968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1051.895521][T22968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1051.961795][T22946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1051.970573][T22946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.007674][T22946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1052.129682][T22946] hsr_slave_0: entered promiscuous mode [ 1052.137365][T22946] hsr_slave_1: entered promiscuous mode [ 1052.143806][T22946] debugfs: 'hsr0' already exists in 'hsr' [ 1052.150422][T22946] Cannot create hsr debugfs directory [ 1052.241012][ T5865] Bluetooth: hci3: command tx timeout [ 1052.314906][T22971] can: request_module (can-proto-3) failed. [ 1052.450566][T22912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1052.450776][T22975] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1052.505856][T22946] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.548908][T22912] 8021q: adding VLAN 0 to HW filter on device team0 [ 1052.566627][T14290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.573998][T14290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1052.612936][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.620299][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1052.705857][T22946] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.716692][T22979] tmpfs: Bad value for 'mpol' [ 1052.811654][T22946] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1052.950430][T22946] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1053.012869][ T5865] Bluetooth: hci1: command 0x0406 tx timeout [ 1053.200731][T22989] fuse: Unknown parameter '0x0000000000000003' [ 1053.285689][T22946] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1053.307667][T22946] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1053.340216][T22946] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1053.358113][T22946] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1053.556119][T22912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1053.636400][T22946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.685837][ T2153] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1053.713088][T22946] 8021q: adding VLAN 0 to HW filter on device team0 [ 1053.723617][T22912] veth0_vlan: entered promiscuous mode [ 1053.747288][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.754499][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1053.779609][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.786828][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1053.816748][T22912] veth1_vlan: entered promiscuous mode [ 1053.834938][ T2153] usb 1-1: device descriptor read/64, error -71 [ 1053.935349][T22946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1053.950843][T22912] veth0_macvtap: entered promiscuous mode [ 1053.957472][ T5865] Bluetooth: hci0: command tx timeout [ 1053.992930][T22912] veth1_macvtap: entered promiscuous mode [ 1054.101690][ T2153] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1054.109138][T22912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.162823][T22912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.188395][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.210945][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.240769][ T2153] usb 1-1: device descriptor read/64, error -71 [ 1054.266121][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.304651][ T65] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.372297][ T2153] usb usb1-port1: attempt power cycle [ 1054.441027][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.469093][ T5865] Bluetooth: hci3: command tx timeout [ 1054.494279][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.560269][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.608137][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.632902][T22946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1054.787759][ T2153] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1054.851303][ T2153] usb 1-1: device descriptor read/8, error -71 [ 1054.900982][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.139205][ T2153] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1055.194381][ T2153] usb 1-1: device descriptor read/8, error -71 [ 1055.342369][ T2153] usb usb1-port1: unable to enumerate USB device [ 1055.629030][T22946] veth0_vlan: entered promiscuous mode [ 1055.645936][T22946] veth1_vlan: entered promiscuous mode [ 1055.730611][T22946] veth0_macvtap: entered promiscuous mode [ 1055.762577][T22946] veth1_macvtap: entered promiscuous mode [ 1055.818540][T22946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1055.846163][T22946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1055.877083][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.915271][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.927240][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1055.968418][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.048633][ T2153] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1056.096774][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.114247][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.169338][T14290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.178224][T14290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.187747][ T5865] Bluetooth: hci0: command tx timeout [ 1056.233210][ T2153] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1056.251329][ T2153] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1056.275261][ T2153] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1056.293985][ T2153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1056.302275][ T2153] usb 2-1: Product: syz [ 1056.313035][ T2153] usb 2-1: Manufacturer: syz [ 1056.317813][ T2153] usb 2-1: SerialNumber: syz [ 1056.361672][ T2153] cdc_mbim 2-1:1.0: skipping garbage [ 1056.579469][T23018] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1056.690564][ T5865] Bluetooth: hci3: command tx timeout [ 1056.720782][T23027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1056.728974][T23027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.740855][T23027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1056.748458][T23027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.975738][T23034] FAULT_INJECTION: forcing a failure. [ 1056.975738][T23034] name failslab, interval 1, probability 0, space 0, times 0 [ 1056.990764][T23034] CPU: 0 UID: 0 PID: 23034 Comm: syz.0.5897 Not tainted syzkaller #0 PREEMPT(full) [ 1056.990802][T23034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1056.990817][T23034] Call Trace: [ 1056.990826][T23034] [ 1056.990840][T23034] dump_stack_lvl+0x189/0x250 [ 1056.990866][T23034] ? __pfx____ratelimit+0x10/0x10 [ 1056.990900][T23034] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1056.990940][T23034] ? __pfx__printk+0x10/0x10 [ 1056.990976][T23034] ? __pfx___might_resched+0x10/0x10 [ 1056.991003][T23034] ? fs_reclaim_acquire+0x7d/0x100 [ 1056.991036][T23034] should_fail_ex+0x414/0x560 [ 1056.991067][T23034] should_failslab+0xa8/0x100 [ 1056.991096][T23034] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1056.991120][T23034] ? security_inode_alloc+0x39/0x330 [ 1056.991161][T23034] security_inode_alloc+0x39/0x330 [ 1056.991197][T23034] inode_init_always_gfp+0x9ed/0xdc0 [ 1056.991234][T23034] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1056.991265][T23034] alloc_inode+0x82/0x1b0 [ 1056.991295][T23034] __sock_create+0x12d/0x9f0 [ 1056.991330][T23034] ? __might_fault+0xb0/0x130 [ 1056.991359][T23034] __sys_socketpair+0x1c5/0x560 [ 1056.991408][T23034] __x64_sys_socketpair+0x9b/0xb0 [ 1056.991444][T23034] do_syscall_64+0xfa/0xfa0 [ 1056.991464][T23034] ? lockdep_hardirqs_on+0x9c/0x150 [ 1056.991484][T23034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.991507][T23034] ? clear_bhb_loop+0x60/0xb0 [ 1056.991534][T23034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.991555][T23034] RIP: 0033:0x7f4830990b3a [ 1056.991575][T23034] Code: 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 49 89 ca b8 35 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1056.991595][T23034] RSP: 002b:00007f483177cf78 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1056.991618][T23034] RAX: ffffffffffffffda RBX: 00007f4830bc5f00 RCX: 00007f4830990b3a [ 1056.991635][T23034] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 1056.991649][T23034] RBP: 00007f483177d090 R08: 0000000000000000 R09: 0000000000000000 [ 1056.991663][T23034] R10: 00007f483177cf98 R11: 0000000000000246 R12: 0000000000000003 [ 1056.991678][T23034] R13: 00007f4830bc6038 R14: 00007f4830bc5fa0 R15: 00007ffd30dfa8b8 [ 1056.991715][T23034] [ 1056.991918][T23034] socket: no more sockets [ 1057.069658][T23036] fuse: Unknown parameter '0x0000000000000003' [ 1057.278507][T23018] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1057.286179][ T2153] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 1057.302627][ T2153] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1057.317244][ T2153] wwan wwan0: port wwan0mbim0 attached [ 1057.338506][ T2153] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 3a:25:0e:53:ab:63 [ 1057.341007][T23039] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1057.515709][T21009] usb 2-1: USB disconnect, device number 81 [ 1057.523069][T21009] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1057.602768][T21009] wwan wwan0: port wwan0mbim0 disconnected [ 1058.069287][ T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1058.233292][ T9] usb 5-1: device descriptor read/64, error -71 [ 1058.401879][ T5865] Bluetooth: hci0: command tx timeout [ 1058.496904][ T9] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1058.518592][ T2153] usb 2-1: new full-speed USB device number 82 using dummy_hcd [ 1058.526385][ T5929] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 1058.646891][ T9] usb 5-1: device descriptor read/64, error -71 [ 1058.689509][ T5929] usb 1-1: device descriptor read/64, error -71 [ 1058.725176][ T2153] usb 2-1: not running at top speed; connect to a high speed hub [ 1058.735102][ T2153] usb 2-1: config 207 has an invalid interface number: 247 but max is 1 [ 1058.755060][ T2153] usb 2-1: config 207 has an invalid interface number: 180 but max is 1 [ 1058.773836][ T9] usb usb5-port1: attempt power cycle [ 1058.797556][ T2153] usb 2-1: config 207 contains an unexpected descriptor of type 0x1, skipping [ 1058.842158][ T2153] usb 2-1: config 207 has no interface number 0 [ 1058.866369][ T2153] usb 2-1: config 207 has no interface number 1 [ 1058.880548][ T2153] usb 2-1: config 207 interface 247 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 1058.900275][ T2153] usb 2-1: config 207 interface 247 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1058.988908][ T5929] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 1059.119040][ T2153] usb 2-1: config 207 interface 247 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1059.160566][ T2153] usb 2-1: config 207 interface 247 altsetting 3 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 1059.172244][ T2153] usb 2-1: config 207 interface 247 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 1059.183557][ T9] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1059.204821][ T2153] usb 2-1: config 207 interface 247 altsetting 3 has a duplicate endpoint with address 0x2, skipping [ 1059.220558][ T2153] usb 2-1: config 207 interface 247 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1059.242717][ T9] usb 5-1: device descriptor read/8, error -71 [ 1059.257121][ T5929] usb 1-1: device descriptor read/64, error -71 [ 1059.285206][ T2153] usb 2-1: config 207 interface 247 altsetting 3 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 1059.305974][ T2153] usb 2-1: config 207 interface 247 altsetting 3 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 1059.318451][ T2153] usb 2-1: config 207 interface 247 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 1059.331537][ T2153] usb 2-1: config 207 interface 247 altsetting 3 has a duplicate endpoint with address 0xD, skipping [ 1059.346385][ T2153] usb 2-1: config 207 interface 247 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 1059.357511][ T2153] usb 2-1: config 207 interface 180 altsetting 13 has an endpoint descriptor with address 0x22, changing to 0x2 [ 1059.370599][ T2153] usb 2-1: config 207 interface 180 altsetting 13 has a duplicate endpoint with address 0x2, skipping [ 1059.382176][ T2153] usb 2-1: config 207 interface 180 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 1059.402682][ T2153] usb 2-1: config 207 interface 180 altsetting 13 has a duplicate endpoint with address 0xF, skipping [ 1059.421493][ T5929] usb usb1-port1: attempt power cycle [ 1059.435492][ T2153] usb 2-1: config 207 interface 180 altsetting 13 endpoint 0xB has invalid wMaxPacketSize 0 [ 1059.446850][ T2153] usb 2-1: config 207 interface 180 altsetting 13 has a duplicate endpoint with address 0x5, skipping [ 1059.464716][ T2153] usb 2-1: config 207 interface 180 altsetting 13 has a duplicate endpoint with address 0x2, skipping [ 1059.477785][ T2153] usb 2-1: config 207 interface 180 altsetting 13 has a duplicate endpoint with address 0xC, skipping [ 1059.490609][ T2153] usb 2-1: config 207 interface 180 altsetting 13 has an invalid descriptor for endpoint zero, skipping [ 1059.502890][ T2153] usb 2-1: config 207 interface 247 has no altsetting 0 [ 1059.509927][ T2153] usb 2-1: config 207 interface 180 has no altsetting 0 [ 1059.527494][ T2153] usb 2-1: Dual-Role OTG device on HNP port [ 1059.534673][ T2153] usb 2-1: New USB device found, idVendor=13d3, idProduct=3402, bcdDevice=ba.99 [ 1059.543792][ T2153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1059.558332][ T2153] usb 2-1: Product: syz [ 1059.562600][ T2153] usb 2-1: Manufacturer: syz [ 1059.567578][ T9] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1059.579517][ T2153] usb 2-1: SerialNumber: syz [ 1059.608629][T23061] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1059.618614][ T9] usb 5-1: device descriptor read/8, error -71 [ 1059.627202][T23061] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 1059.737968][ T9] usb usb5-port1: unable to enumerate USB device [ 1059.823244][ T5929] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 1059.851737][ T5929] usb 1-1: device descriptor read/8, error -71 [ 1059.922871][ T2153] usb 2-1: USB disconnect, device number 82 [ 1060.133191][ T5929] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 1060.176799][ T5929] usb 1-1: device descriptor read/8, error -71 [ 1060.304366][ T5929] usb usb1-port1: unable to enumerate USB device [ 1061.257847][T23096] fuse: Unknown parameter 'fd0x0000000000000003' [ 1061.414010][T23102] nfs: Unknown parameter 'pcr' [ 1061.575497][T23107] FAULT_INJECTION: forcing a failure. [ 1061.575497][T23107] name failslab, interval 1, probability 0, space 0, times 0 [ 1061.589554][T23107] CPU: 0 UID: 0 PID: 23107 Comm: syz.0.5924 Not tainted syzkaller #0 PREEMPT(full) [ 1061.589583][T23107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1061.589598][T23107] Call Trace: [ 1061.589608][T23107] [ 1061.589617][T23107] dump_stack_lvl+0x189/0x250 [ 1061.589643][T23107] ? __pfx____ratelimit+0x10/0x10 [ 1061.589676][T23107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1061.589696][T23107] ? __pfx__printk+0x10/0x10 [ 1061.589732][T23107] ? __pfx___might_resched+0x10/0x10 [ 1061.589756][T23107] ? fs_reclaim_acquire+0x7d/0x100 [ 1061.589788][T23107] should_fail_ex+0x414/0x560 [ 1061.589821][T23107] should_failslab+0xa8/0x100 [ 1061.589849][T23107] __kmalloc_noprof+0xcb/0x7f0 [ 1061.589871][T23107] ? tomoyo_encode+0x28b/0x550 [ 1061.589910][T23107] tomoyo_encode+0x28b/0x550 [ 1061.589948][T23107] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1061.589984][T23107] ? tomoyo_domain+0xd9/0x130 [ 1061.590010][T23107] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1061.590039][T23107] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1061.590080][T23107] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1061.590148][T23107] ? __fget_files+0x2a/0x420 [ 1061.590184][T23107] ? __fget_files+0x3a0/0x420 [ 1061.590212][T23107] ? __fget_files+0x2a/0x420 [ 1061.590246][T23107] security_file_ioctl+0xcb/0x2d0 [ 1061.590275][T23107] __se_sys_ioctl+0x47/0x170 [ 1061.590302][T23107] do_syscall_64+0xfa/0xfa0 [ 1061.590322][T23107] ? lockdep_hardirqs_on+0x9c/0x150 [ 1061.590342][T23107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.590364][T23107] ? clear_bhb_loop+0x60/0xb0 [ 1061.590390][T23107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.590411][T23107] RIP: 0033:0x7f483098ebe9 [ 1061.590431][T23107] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1061.590450][T23107] RSP: 002b:00007f483177d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1061.590474][T23107] RAX: ffffffffffffffda RBX: 00007f4830bc5fa0 RCX: 00007f483098ebe9 [ 1061.590490][T23107] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1061.590504][T23107] RBP: 00007f483177d090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.590518][T23107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.590531][T23107] R13: 00007f4830bc6038 R14: 00007f4830bc5fa0 R15: 00007ffd30dfa8b8 [ 1061.590567][T23107] [ 1061.590589][T23107] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1061.844270][T21009] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1061.972490][ T2153] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1062.004550][T21009] usb 7-1: device descriptor read/64, error -71 [ 1062.145807][ T2153] usb 5-1: Using ep0 maxpacket: 8 [ 1062.156950][ T2153] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.169932][ T2153] usb 5-1: New USB device found, idVendor=056a, idProduct=00b8, bcdDevice= 0.00 [ 1062.180141][ T2153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.198166][ T2153] usb 5-1: config 0 descriptor?? [ 1062.262057][T21009] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1062.432559][T21009] usb 7-1: device descriptor read/64, error -71 [ 1062.501463][T23122] fuse: Unknown parameter 'fd0x0000000000000003' [ 1062.550471][T21009] usb usb7-port1: attempt power cycle [ 1062.643045][ T2153] usbhid 5-1:0.0: can't add hid device: -71 [ 1062.658100][ T2153] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1062.675903][ T2153] usb 5-1: USB disconnect, device number 57 [ 1062.875949][T23128] nfs: Unknown parameter 'pcr' [ 1062.924319][T21009] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1062.946354][T21009] usb 7-1: device descriptor read/8, error -71 [ 1063.031382][T23131] tipc: Started in network mode [ 1063.036411][T23131] tipc: Node identity aaaaaaaaaa33, cluster identity 4711 [ 1063.044654][T23131] tipc: Enabled bearer , priority 2 [ 1063.213544][T21009] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1063.256603][T21009] usb 7-1: device descriptor read/8, error -71 [ 1063.373834][T21009] usb usb7-port1: unable to enumerate USB device [ 1063.672213][T23147] fuse: Unknown parameter 'fd0x0000000000000003' [ 1064.211598][T23157] FAULT_INJECTION: forcing a failure. [ 1064.211598][T23157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1064.237301][T23157] CPU: 0 UID: 0 PID: 23157 Comm: syz.1.5935 Not tainted syzkaller #0 PREEMPT(full) [ 1064.237334][T23157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1064.237349][T23157] Call Trace: [ 1064.237362][T23157] [ 1064.237374][T23157] dump_stack_lvl+0x189/0x250 [ 1064.237407][T23157] ? __pfx____ratelimit+0x10/0x10 [ 1064.237449][T23157] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1064.237474][T23157] ? __pfx__printk+0x10/0x10 [ 1064.237536][T23157] should_fail_ex+0x414/0x560 [ 1064.237575][T23157] _copy_to_user+0x31/0xb0 [ 1064.237604][T23157] simple_read_from_buffer+0xe1/0x170 [ 1064.237647][T23157] proc_fail_nth_read+0x1b3/0x220 [ 1064.237678][T23157] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1064.237708][T23157] ? rw_verify_area+0x2a6/0x4d0 [ 1064.237736][T23157] ? __lock_acquire+0xab9/0xd20 [ 1064.237765][T23157] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1064.237792][T23157] vfs_read+0x200/0xa30 [ 1064.237819][T23157] ? fdget_pos+0x247/0x320 [ 1064.237860][T23157] ? __pfx___mutex_lock+0x10/0x10 [ 1064.237886][T23157] ? __pfx_vfs_read+0x10/0x10 [ 1064.237915][T23157] ? __fget_files+0x2a/0x420 [ 1064.237953][T23157] ? __fget_files+0x3a0/0x420 [ 1064.237986][T23157] ? __fget_files+0x2a/0x420 [ 1064.238041][T23157] ksys_read+0x145/0x250 [ 1064.238075][T23157] ? __pfx_ksys_read+0x10/0x10 [ 1064.238110][T23157] ? do_syscall_64+0xbe/0xfa0 [ 1064.238141][T23157] do_syscall_64+0xfa/0xfa0 [ 1064.238167][T23157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.238188][T23157] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1064.238211][T23157] ? clear_bhb_loop+0x60/0xb0 [ 1064.238238][T23157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.238265][T23157] RIP: 0033:0x7f394b78d5fc [ 1064.238289][T23157] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1064.238313][T23157] RSP: 002b:00007f394c569030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1064.238342][T23157] RAX: ffffffffffffffda RBX: 00007f394b9c5fa0 RCX: 00007f394b78d5fc [ 1064.238362][T23157] RDX: 000000000000000f RSI: 00007f394c5690a0 RDI: 0000000000000006 [ 1064.238378][T23157] RBP: 00007f394c569090 R08: 0000000000000000 R09: 0000000000000000 [ 1064.238397][T23157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1064.238413][T23157] R13: 00007f394b9c6038 R14: 00007f394b9c5fa0 R15: 00007ffedc15b6a8 [ 1064.238455][T23157] [ 1064.239735][T21520] tipc: Node number set to 10070698 [ 1064.913743][T23172] blktrace: Concurrent blktraces are not allowed on sg0 [ 1064.924411][T23172] FAULT_INJECTION: forcing a failure. [ 1064.924411][T23172] name failslab, interval 1, probability 0, space 0, times 0 [ 1064.956177][T23172] CPU: 0 UID: 0 PID: 23172 Comm: syz.6.5940 Not tainted syzkaller #0 PREEMPT(full) [ 1064.956209][T23172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1064.956224][T23172] Call Trace: [ 1064.956233][T23172] [ 1064.956242][T23172] dump_stack_lvl+0x189/0x250 [ 1064.956269][T23172] ? __pfx____ratelimit+0x10/0x10 [ 1064.956303][T23172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1064.956326][T23172] ? __pfx__printk+0x10/0x10 [ 1064.956366][T23172] ? __pfx___might_resched+0x10/0x10 [ 1064.956391][T23172] ? fs_reclaim_acquire+0x7d/0x100 [ 1064.956422][T23172] should_fail_ex+0x414/0x560 [ 1064.956454][T23172] should_failslab+0xa8/0x100 [ 1064.956485][T23172] __kmalloc_noprof+0xcb/0x7f0 [ 1064.956509][T23172] ? tomoyo_encode+0x28b/0x550 [ 1064.956550][T23172] tomoyo_encode+0x28b/0x550 [ 1064.956593][T23172] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1064.956643][T23172] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1064.956673][T23172] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1064.956706][T23172] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1064.956781][T23172] ? __fget_files+0x2a/0x420 [ 1064.956817][T23172] ? __fget_files+0x3a0/0x420 [ 1064.956847][T23172] ? __fget_files+0x2a/0x420 [ 1064.956883][T23172] security_file_ioctl+0xcb/0x2d0 [ 1064.956915][T23172] __se_sys_ioctl+0x47/0x170 [ 1064.956953][T23172] do_syscall_64+0xfa/0xfa0 [ 1064.956974][T23172] ? lockdep_hardirqs_on+0x9c/0x150 [ 1064.956997][T23172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.957020][T23172] ? clear_bhb_loop+0x60/0xb0 [ 1064.957049][T23172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.957071][T23172] RIP: 0033:0x7fe86e18ebe9 [ 1064.957092][T23172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1064.957112][T23172] RSP: 002b:00007fe86ef68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1064.957138][T23172] RAX: ffffffffffffffda RBX: 00007fe86e3c5fa0 RCX: 00007fe86e18ebe9 [ 1064.957156][T23172] RDX: 0000000000000000 RSI: 0000000000001274 RDI: 0000000000000003 [ 1064.957171][T23172] RBP: 00007fe86ef68090 R08: 0000000000000000 R09: 0000000000000000 [ 1064.957187][T23172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1064.957201][T23172] R13: 00007fe86e3c6038 R14: 00007fe86e3c5fa0 R15: 00007ffc3bf4e488 [ 1064.957236][T23172] [ 1064.957261][T23172] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1066.403244][T23195] blktrace: Concurrent blktraces are not allowed on sg0 [ 1066.666228][T23204] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1066.705375][T23204] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1066.736164][T23204] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1066.759991][T23204] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1066.810238][T23207] netlink: 'syz.6.5956': attribute type 10 has an invalid length. [ 1066.827700][T23207] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5956'. [ 1066.848341][T23207] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1066.998282][T23210] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1067.576219][ T2153] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1067.770490][ T2153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1067.811628][ T2153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1067.845917][ T2153] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1067.857158][ T2153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.878511][ T2153] usb 2-1: Product: syz [ 1067.903563][ T2153] usb 2-1: Manufacturer: syz [ 1067.926121][ T2153] usb 2-1: SerialNumber: syz [ 1067.960531][ T2153] usb 2-1: config 0 descriptor?? [ 1067.988108][ T2153] usb 2-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 1068.200417][T23220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.231665][T23220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.251959][T23220] block nbd1: NBD_DISCONNECT [ 1068.259994][T23227] blktrace: Concurrent blktraces are not allowed on sg0 [ 1068.342261][ T2153] usb 2-1: USB disconnect, device number 83 [ 1068.427006][T19848] udevd[19848]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1068.637728][T23238] netlink: 'syz.6.5967': attribute type 10 has an invalid length. [ 1068.646268][T23238] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5967'. [ 1068.655790][T23238] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1068.656648][T21009] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1068.679571][T21520] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1068.781245][T23240] FAULT_INJECTION: forcing a failure. [ 1068.781245][T23240] name failslab, interval 1, probability 0, space 0, times 0 [ 1068.794081][T23240] CPU: 1 UID: 0 PID: 23240 Comm: syz.6.5968 Not tainted syzkaller #0 PREEMPT(full) [ 1068.794111][T23240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1068.794126][T23240] Call Trace: [ 1068.794134][T23240] [ 1068.794142][T23240] dump_stack_lvl+0x189/0x250 [ 1068.794161][T23240] ? __pfx____ratelimit+0x10/0x10 [ 1068.794187][T23240] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1068.794202][T23240] ? __pfx__printk+0x10/0x10 [ 1068.794229][T23240] ? __pfx___might_resched+0x10/0x10 [ 1068.794248][T23240] ? fs_reclaim_acquire+0x7d/0x100 [ 1068.794271][T23240] should_fail_ex+0x414/0x560 [ 1068.794294][T23240] should_failslab+0xa8/0x100 [ 1068.794314][T23240] __kmalloc_noprof+0xcb/0x7f0 [ 1068.794331][T23240] ? tomoyo_encode+0x28b/0x550 [ 1068.794419][T23240] tomoyo_encode+0x28b/0x550 [ 1068.794448][T23240] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1068.794482][T23240] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1068.794503][T23240] tomoyo_path_number_perm+0x1e8/0x5a0 [ 1068.794526][T23240] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1068.794576][T23240] ? __fget_files+0x2a/0x420 [ 1068.794607][T23240] ? __fget_files+0x3a0/0x420 [ 1068.794635][T23240] ? __fget_files+0x2a/0x420 [ 1068.794659][T23240] security_file_ioctl+0xcb/0x2d0 [ 1068.794681][T23240] __se_sys_ioctl+0x47/0x170 [ 1068.794701][T23240] do_syscall_64+0xfa/0xfa0 [ 1068.794715][T23240] ? lockdep_hardirqs_on+0x9c/0x150 [ 1068.794730][T23240] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.794746][T23240] ? clear_bhb_loop+0x60/0xb0 [ 1068.794765][T23240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1068.794781][T23240] RIP: 0033:0x7fe86e18ebe9 [ 1068.794795][T23240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1068.794809][T23240] RSP: 002b:00007fe86ef68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1068.794826][T23240] RAX: ffffffffffffffda RBX: 00007fe86e3c5fa0 RCX: 00007fe86e18ebe9 [ 1068.794839][T23240] RDX: 00002000000000c0 RSI: 00000000c0481273 RDI: 0000000000000003 [ 1068.794850][T23240] RBP: 00007fe86ef68090 R08: 0000000000000000 R09: 0000000000000000 [ 1068.794860][T23240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1068.794869][T23240] R13: 00007fe86e3c6038 R14: 00007fe86e3c5fa0 R15: 00007ffc3bf4e488 [ 1068.794894][T23240] [ 1068.794913][T23240] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1069.038793][T23242] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1069.045802][T23240] blktrace: Concurrent blktraces are not allowed on sg0 [ 1069.069527][T21520] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.081919][T21520] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1069.091053][T21009] usb 1-1: Using ep0 maxpacket: 16 [ 1069.103305][T21520] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1069.115214][T21009] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1069.130501][T21009] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.141683][T21520] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.149987][T21009] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1069.170604][T21520] usb 5-1: config 0 descriptor?? [ 1069.179361][T21009] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1069.192637][T21009] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.200896][T21009] usb 1-1: Product: syz [ 1069.208017][T21009] usb 1-1: Manufacturer: syz [ 1069.212890][T21009] usb 1-1: SerialNumber: syz [ 1069.695866][T21520] Bluetooth: Can't get version to change to load ram patch err [ 1069.713578][T21520] Bluetooth: Loading patch file failed [ 1069.723133][T21520] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 1069.735752][T21520] usb 5-1: USB disconnect, device number 58 [ 1069.878583][T21009] usb 1-1: 0:2 : does not exist [ 1069.925946][T21009] usb 1-1: 1:0: cannot get min/max values for control 2 (id 1) [ 1069.951758][ T31] INFO: task kworker/u8:5:1082 blocked for more than 143 seconds. [ 1069.959622][ T31] Not tainted syzkaller #0 [ 1069.968508][T21009] usb 1-1: USB disconnect, device number 94 [ 1069.971679][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1069.992959][ T31] task:kworker/u8:5 state:D stack:21928 pid:1082 tgid:1082 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1070.019730][ T31] Workqueue: netns cleanup_net [ 1070.021580][T21517] udevd[21517]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1070.024577][ T31] Call Trace: [ 1070.024590][ T31] [ 1070.024607][ T31] __schedule+0x1798/0x4cc0 [ 1070.024662][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1070.099777][ T31] ? __lock_acquire+0xab9/0xd20 [ 1070.105186][ T31] ? __pfx___schedule+0x10/0x10 [ 1070.110245][ T31] ? schedule+0x91/0x360 [ 1070.120713][ T31] schedule+0x165/0x360 [ 1070.126605][ T31] afs_cell_purge+0x3d9/0x540 [ 1070.131589][ T31] ? __pfx_afs_cell_purge+0x10/0x10 [ 1070.141853][ T31] ? __pfx_var_wake_function+0x10/0x10 [ 1070.147789][ T31] ? afs_net+0x45/0x270 [ 1070.152146][ T31] ? afs_net+0x45/0x270 [ 1070.156833][ T31] afs_net_exit+0x50/0x100 [ 1070.161503][ T31] ops_undo_list+0x497/0x990 [ 1070.166630][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 1070.171908][ T31] ? do_raw_spin_unlock+0x122/0x240 [ 1070.178444][ T31] cleanup_net+0x4c5/0x800 [ 1070.183143][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 1070.188599][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1070.193988][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1070.200424][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 1070.206345][ T31] process_scheduled_works+0xade/0x17b0 [ 1070.212589][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 1070.219999][ T31] worker_thread+0x8a0/0xda0 [ 1070.224809][ T31] kthread+0x70e/0x8a0 [ 1070.229439][ T31] ? __pfx_worker_thread+0x10/0x10 [ 1070.234732][ T31] ? __pfx_kthread+0x10/0x10 [ 1070.240026][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1070.245414][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1070.259967][ T31] ? __pfx_kthread+0x10/0x10 [ 1070.265154][ T31] ret_from_fork+0x47c/0x820 [ 1070.292711][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1070.297910][ T31] ? __switch_to_asm+0x39/0x70 [ 1070.302734][ T31] ? __switch_to_asm+0x33/0x70 [ 1070.310813][ T31] ? __pfx_kthread+0x10/0x10 [ 1070.316721][ T31] ret_from_fork_asm+0x1a/0x30 [ 1070.321562][ T31] [ 1070.325293][ T31] [ 1070.325293][ T31] Showing all locks held in the system: [ 1070.333042][ T31] 1 lock held by khungtaskd/31: [ 1070.339027][ T31] #0: ffffffff8e53cf20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1070.349329][ T31] 3 locks held by kworker/u8:5/1082: [ 1070.354645][ T31] #0: ffff88801b6fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1070.403907][ T31] #1: ffffc90003a6fba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1070.425495][ T31] #2: ffffffff8f946890 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1070.438148][ T31] 2 locks held by kworker/u8:8/1150: [ 1070.443845][ T31] 2 locks held by getty/5622: [ 1070.448557][ T31] #0: ffff888033c580a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1070.458976][ T31] #1: ffffc900036be2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1070.473220][ T31] 1 lock held by syz.6.5972/23250: [ 1070.478784][ T31] [ 1070.481145][ T31] ============================================= [ 1070.481145][ T31] [ 1070.490191][ T31] NMI backtrace for cpu 1 [ 1070.490207][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1070.490231][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1070.490244][ T31] Call Trace: [ 1070.490252][ T31] [ 1070.490261][ T31] dump_stack_lvl+0x189/0x250 [ 1070.490288][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1070.490309][ T31] ? __pfx__printk+0x10/0x10 [ 1070.490355][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1070.490386][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1070.490417][ T31] ? __pfx__printk+0x10/0x10 [ 1070.490462][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1070.490488][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1070.490519][ T31] watchdog+0xf60/0xfa0 [ 1070.490548][ T31] ? watchdog+0x1e2/0xfa0 [ 1070.490577][ T31] kthread+0x70e/0x8a0 [ 1070.490614][ T31] ? __pfx_watchdog+0x10/0x10 [ 1070.490636][ T31] ? __pfx_kthread+0x10/0x10 [ 1070.490671][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1070.490702][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1070.490720][ T31] ? __pfx_kthread+0x10/0x10 [ 1070.490754][ T31] ret_from_fork+0x47c/0x820 [ 1070.490782][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1070.490814][ T31] ? __switch_to_asm+0x39/0x70 [ 1070.490836][ T31] ? __switch_to_asm+0x33/0x70 [ 1070.490857][ T31] ? __pfx_kthread+0x10/0x10 [ 1070.490890][ T31] ret_from_fork_asm+0x1a/0x30 [ 1070.490931][ T31] [ 1070.490941][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1070.642896][ C0] NMI backtrace for cpu 0 [ 1070.642915][ C0] CPU: 0 UID: 0 PID: 23250 Comm: syz.6.5972 Not tainted syzkaller #0 PREEMPT(full) [ 1070.642938][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1070.642951][ C0] RIP: 0010:subdev_8255_io+0x95/0xb0 [ 1070.642984][ C0] Code: e8 60 96 c0 f8 49 81 c6 d0 01 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 43 9c 24 f9 01 eb 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5d 41 5e 41 5f 5d e9 49 55 89 02 cc 0f 1f 84 [ 1070.643013][ C0] RSP: 0018:ffffc9000405f7d8 EFLAGS: 00000206 [ 1070.643031][ C0] RAX: 1ffff11005e24fff RBX: 0000000000004f28 RCX: 0000000000080000 [ 1070.643044][ C0] RDX: 0000000000004f28 RSI: 0000000000059782 RDI: 0000000000059783 [ 1070.643056][ C0] RBP: 0000000000000001 R08: 0000000000004f27 R09: 0000000000000000 [ 1070.643068][ C0] R10: ffffc9000405f8e0 R11: ffffffff89006ef0 R12: 0000000000000000 [ 1070.643082][ C0] R13: dffffc0000000000 R14: ffff88802f1279d0 R15: 0000000000000000 [ 1070.643095][ C0] FS: 00007fe86ef686c0(0000) GS:ffff8881257ba000(0000) knlGS:0000000000000000 [ 1070.643112][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1070.643125][ C0] CR2: 00005555751565c8 CR3: 0000000051d90000 CR4: 00000000003526f0 [ 1070.643141][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000508c [ 1070.643152][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1070.643164][ C0] Call Trace: [ 1070.643172][ C0] [ 1070.643182][ C0] subdev_8255_insn+0x28b/0x3c0 [ 1070.643216][ C0] insn_rw_emulate_bits+0x34a/0x5f0 [ 1070.643247][ C0] ? __pfx_insn_rw_emulate_bits+0x10/0x10 [ 1070.643276][ C0] ? comedi_check_chanlist+0x299/0x330 [ 1070.643303][ C0] parse_insn+0xa26/0x1910 [ 1070.643323][ C0] ? __kasan_kmalloc_large+0x85/0xa0 [ 1070.643350][ C0] ? __pfx_parse_insn+0x10/0x10 [ 1070.643370][ C0] ? trace_kmalloc+0x1f/0xd0 [ 1070.643387][ C0] ? __kmalloc_noprof+0x432/0x7f0 [ 1070.643405][ C0] ? do_insn_ioctl+0x100/0x5a0 [ 1070.643428][ C0] do_insn_ioctl+0x174/0x5a0 [ 1070.643451][ C0] comedi_unlocked_ioctl+0x8b0/0x1020 [ 1070.643475][ C0] ? kasan_quarantine_put+0xdd/0x220 [ 1070.643498][ C0] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1070.643517][ C0] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1070.643543][ C0] ? do_vfs_ioctl+0xbe8/0x1430 [ 1070.643561][ C0] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1070.643585][ C0] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1070.643612][ C0] ? do_futex+0x333/0x420 [ 1070.643650][ C0] ? __se_sys_futex+0x36f/0x400 [ 1070.643683][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1070.643699][ C0] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1070.643718][ C0] __se_sys_ioctl+0xf9/0x170 [ 1070.643738][ C0] do_syscall_64+0xfa/0xfa0 [ 1070.643755][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1070.643771][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.643789][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1070.643810][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1070.643827][ C0] RIP: 0033:0x7fe86e18ebe9 [ 1070.643845][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1070.643861][ C0] RSP: 002b:00007fe86ef68038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1070.643879][ C0] RAX: ffffffffffffffda RBX: 00007fe86e3c5fa0 RCX: 00007fe86e18ebe9 [ 1070.643893][ C0] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000007 [ 1070.643906][ C0] RBP: 00007fe86e211e19 R08: 0000000000000000 R09: 0000000000000000 [ 1070.643918][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1070.643930][ C0] R13: 00007fe86e3c6038 R14: 00007fe86e3c5fa0 R15: 00007ffc3bf4e488 [ 1070.643952][ C0] [ 1070.648231][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1070.648258][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1070.648289][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1070.648304][ T31] Call Trace: [ 1070.648317][ T31] [ 1070.648329][ T31] dump_stack_lvl+0x99/0x250 [ 1070.648359][ T31] ? __asan_memcpy+0x40/0x70 [ 1070.648386][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1070.648411][ T31] ? __pfx__printk+0x10/0x10 [ 1070.648462][ T31] vpanic+0x237/0x6d0 [ 1070.648494][ T31] ? __pfx_vpanic+0x10/0x10 [ 1070.648528][ T31] ? preempt_schedule_common+0x83/0xd0 [ 1070.648575][ T31] panic+0xb9/0xc0 [ 1070.648607][ T31] ? __pfx_panic+0x10/0x10 [ 1070.648640][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1070.648681][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1070.648731][ T31] watchdog+0xf9f/0xfa0 [ 1070.648765][ T31] ? watchdog+0x1e2/0xfa0 [ 1070.648798][ T31] kthread+0x70e/0x8a0 [ 1070.648838][ T31] ? __pfx_watchdog+0x10/0x10 [ 1070.648864][ T31] ? __pfx_kthread+0x10/0x10 [ 1070.648904][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1070.648940][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1070.648960][ T31] ? __pfx_kthread+0x10/0x10 [ 1070.649000][ T31] ret_from_fork+0x47c/0x820 [ 1070.649031][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1070.649068][ T31] ? __switch_to_asm+0x39/0x70 [ 1070.649094][ T31] ? __switch_to_asm+0x33/0x70 [ 1070.649119][ T31] ? __pfx_kthread+0x10/0x10 [ 1070.649157][ T31] ret_from_fork_asm+0x1a/0x30 [ 1070.649204][ T31] [ 1071.155909][ T31] Kernel Offset: disabled [ 1071.160234][ T31] Rebooting in 86400 seconds..