last executing test programs: 25.442858177s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000180)="ad7b054827ff415c", 0x8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x0) fanotify_mark(r1, 0x1, 0x5000003a, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x3c, 0x3b, 0x1, 0x0, 0x0, {0xb}, [@typed={0x25, 0x1, 0x0, 0x0, @str='AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA\x00'}]}, 0x3c}}, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x181082, 0x6) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x0, 0x5}}, 0x20) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000880)={0x2c, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8}, @nested={0xc, 0x9a, 0x0, 0x1, [@nested={0x8, 0x29, 0x0, 0x1, [@generic="8b1b9e97"]}]}, @nested={0x4, 0x19}]}, 0x2c}], 0x1, 0x0, 0x0, 0x4044801}, 0x8000) read$FUSE(r1, &(0x7f0000000f40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) socket$kcm(0x10, 0x2, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000280)="d8da65dc9d0008670f8a01b50fc73c66b92902000066b8699d000066ba000000000f30baf80c66b859bf988666efbafc0cec0faaba4100b85100eff3ad3478", 0x3f}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) mount(0x0, &(0x7f0000000040)='./dir\x00', &(0x7f0000000080)='smb3\x00', 0x2000000, &(0x7f00000000c0)='vers=2.0,sec=ntlmssp,ip=127.0/0.1,port=20000,nodfs,username=root,passworD=ro\x06\x00\x00') syz_create_resource$binfmt(&(0x7f0000000140)='./dir\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) 24.77052604s ago: executing program 0 (id=5): sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x4000040) mount(0x0, 0x0, &(0x7f0000000140)='configfs\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0x2000f1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x7fff, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x5, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x4, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a401000010"], 0x1a4}}, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r1, 0x80049370, &(0x7f0000000340)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x24, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfc}, @L2TP_ATTR_PEER_CONN_ID={0x8}]}, 0x24}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="1403000030000100000100000400000001"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000181, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x80000002) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000180)=0x20) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r6) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r8, 0x701, 0x70bd2d, 0x25dfdbff, {0x2f, 0x0, 0xffa6}}, 0x14}}, 0x10044880) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_MCE_KILL(0x23, 0xa, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r10 = dup(r9) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) 24.466408278s ago: executing program 0 (id=6): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) poll(&(0x7f0000000040)=[{r0, 0x644}], 0x1, 0x7f) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1) setns(0xc9, 0x0) r1 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0xfff, 0x3, {0xffffffffffffffff}, {0xee01}, 0x2, 0x4}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) kcmp(r2, r3, 0x4, r1, r1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 8.952401695s ago: executing program 32 (id=6): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) poll(&(0x7f0000000040)=[{r0, 0x644}], 0x1, 0x7f) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1) setns(0xc9, 0x0) r1 = fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000000)={0xfff, 0x3, {0xffffffffffffffff}, {0xee01}, 0x2, 0x4}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) kcmp(r2, r3, 0x4, r1, r1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 5.81041462s ago: executing program 2 (id=55): syz_usb_connect$uac1(0x3, 0x82, &(0x7f0000000080)=ANY=[@ANYBLOB="120110010000004082050c004000010203010902700003010030050904000000010100000a240105000a000201020904010000010200000904010101010200000724010a08000009240201ae0e87098d090501090002", @ANYRESOCT], 0x0) 4.869391709s ago: executing program 3 (id=56): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) rename(0x0, &(0x7f00000000c0)='./file0/../file0/file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) capset(0x0, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r1, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x8}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) 4.482768466s ago: executing program 2 (id=58): socket(0x1, 0x5, 0x0) lsetxattr(&(0x7f0000000040)='./file0/file3/file0\x00', 0x0, 0x0, 0x0, 0x3) syz_usb_connect(0x0, 0x4f, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005cdd2e106307151088560000000109023d00010000d00009047e0004ffd234000905b74318860809050725018705ee7b09050a000002810bac090504"], 0x0) syz_usb_connect(0x3, 0x39, &(0x7f0000000080)=ANY=[@ANYRES64], 0x0) 4.382129442s ago: executing program 3 (id=59): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="290000002000190f00003fffffffda0602000000ffe80001dd0000040d001800c21dc21d0005000000", 0x29}], 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448c9, 0x0) syz_usb_connect(0x1, 0x0, 0x0, 0x0) 3.485431069s ago: executing program 3 (id=60): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000040), 0x21041, 0x0) setuid(0xee01) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xc1) tkill(r1, 0x12) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000440)='./bus\x00', 0x0, 0x8c7c88, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x42203, 0x13d) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x4141, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r6) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x408c0c0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80) syz_ublk_add_dev(r11, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x40, 0x0, r10, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r5, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x1, 0xbb6, 0x0, 0x0, 0x1000, 0xffffffff, r9, 0x0, 0x12d}}}, &(0x7f00000003c0)) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000) bind$bt_hci(r12, &(0x7f0000000400)={0x1f, 0x4, 0x4}, 0xfffffffffffffeb6) write(r12, &(0x7f0000000500)="5c0000001700010012aaaaaaaaaa0106000c0002000400000000006400", 0x1d) r13 = syz_open_procfs$pagemap(r9, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r13, 0xc0606610, &(0x7f00000000c0)={0x60, 0x0, &(0x7f0000245000/0x2000)=nil, &(0x7f00004c7000/0x1000)=nil, 0x0, &(0x7f0000000180)=[{0x800}], 0x1, 0x1bb, 0x0, 0x0, 0x0, 0x55}) syz_emit_vhci(&(0x7f0000000680)=ANY=[@ANYBLOB="043e0d020100000007000000000000"], 0xf) r14 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r14, 0x40045542, 0xffffffffffffffff) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x19) 2.901805839s ago: executing program 2 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) (async) rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) (async) rt_sigtimedwait(&(0x7f0000000040)={[0xfffffffffffffff8]}, 0x0, 0x0, 0x8) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@default_permissions}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [{@dont_measure}, {@smackfsdef}, {@hash}, {@subj_type={'subj_type', 0x3d, 'overlay\x00'}}, {@appraise}], 0x2f}) io_setup(0x3, &(0x7f0000000000)) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') syz_clone(0x900a00, &(0x7f00000000c0)="3b66d8922e498c784ad4ce1bc3895a3362e3857fdbb80c7cf551e1cf9bd39ab426dc1df45b8a6b9b3ba912fe174a7e4f8c228e7d4f25f38a9fde3481bd8f2e2bf0938840b02274cb90bc2f5f62a51decc6cf461f9c2cefffe076dc35b52ac04c3f17", 0x62, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000380)="48484760ef06761b5364d9d2c8dd7917e51a8bc79fb105fa5d34c01dcfae1954c541fbf574581b74e5a4ef57bb828eab9d474c134cff718c3c7793704f9d05a1f4efeeea6af579e8bdcbc1289694721694420b4f9afdd5dc2d46f249583ceb030b2fc64ffb28c5be2e8e6cdfd25facc1803855eed387eb6f9a6fa0af16") (async) syz_clone(0x900a00, &(0x7f00000000c0)="3b66d8922e498c784ad4ce1bc3895a3362e3857fdbb80c7cf551e1cf9bd39ab426dc1df45b8a6b9b3ba912fe174a7e4f8c228e7d4f25f38a9fde3481bd8f2e2bf0938840b02274cb90bc2f5f62a51decc6cf461f9c2cefffe076dc35b52ac04c3f17", 0x62, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000380)="48484760ef06761b5364d9d2c8dd7917e51a8bc79fb105fa5d34c01dcfae1954c541fbf574581b74e5a4ef57bb828eab9d474c134cff718c3c7793704f9d05a1f4efeeea6af579e8bdcbc1289694721694420b4f9afdd5dc2d46f249583ceb030b2fc64ffb28c5be2e8e6cdfd25facc1803855eed387eb6f9a6fa0af16") read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) 2.168029929s ago: executing program 1 (id=64): fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) r1 = gettid() capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000000)={0x6, 0x7, 0x2, 0x84, 0xfdffffff, 0x440}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xc3) (async) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_mems\x00', 0x275a, 0x0) (async) read(r3, &(0x7f0000000340)=""/111, 0x6f) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x0, 0x989680}}, 0x0) (async) read$FUSE(r0, &(0x7f00000041c0)={0x2020}, 0x2020) 2.004645335s ago: executing program 4 (id=45): ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x43, 0xffffffffffffffff}) r0 = socket$inet(0x2, 0x0, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@window, @window={0x3, 0x0, 0x1}, @timestamp], 0x3) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0}) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x6) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000580)={0x15a, 0xe, &(0x7f0000000180)="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"}) ioctl$TCSETAF(r4, 0x5408, &(0x7f00000005c0)={0x1, 0x9, 0x1, 0x1, 0x5, "c6cb8b67c5990764"}) r5 = syz_open_dev$vcsa(&(0x7f0000000640), 0x4, 0x214001) syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), r5) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r5) ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, &(0x7f00000006c0)={0x8, r3}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@loopback, @in=@private}}, {{@in6}, 0x0, @in6=@private1}}, &(0x7f0000000800)=0xe8) socket$inet_udp(0x2, 0x2, 0x0) write(r5, &(0x7f0000000840)="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", 0x1000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001880), r5) sendmsg$IPVS_CMD_SET_DEST(r6, &(0x7f0000001a40)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001a00)={&(0x7f00000018c0)={0x130, r7, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x3b}}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x598}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfe00}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xe}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x6}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x100}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private0}]}, @IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xffff8001}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfffe}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1c}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@dev={0xac, 0x14, 0x14, 0x42}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x80}, 0x4000810) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x10000) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000004, 0x80010, r5, 0x163bc000) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001ac0), r6) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x34, r8, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xfa}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8000) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000001bc0)={0x6, 0x200, 0xfffff6dd, 0x9, 0x0}, &(0x7f0000001c00)=0x10) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000001c40)={r9, 0x2}, &(0x7f0000001c80)=0x8) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001d00), r5) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000001f40)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001d40)={0x1b4, r10, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_LINK={0x4}, @TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "928267f1b4c13616725ed9f0ca22d905891c584e34fd528549"}}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x28f62099}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x400}, @TIPC_NLA_NODE_KEY={0x42, 0x4, {'gcm(aes)\x00', 0x1a, "68b38d6b9c192b71ed5a12df23f86cdd21d51e7042c6c98a679f"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7f}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x2}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x74, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x67, 0x3, "e54a83c5794fc26b59acdf3069e08a9668ad687d1607cd0e2c2a577d1666cc98ce0d3f32aaacb6a64b6100d2ba7e29d685636520755883c167feb91586087beb8c72278985d9f98016cb12104b6d9a0a5d384dc991b196b4a00cb73b138d4b520b39af"}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4000010}, 0x8080) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000001f80)=@arm64={0x80, 0x66, 0xd2}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002000), r5) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r6, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x1c, r11, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48010}, 0x80) 1.887285455s ago: executing program 3 (id=65): socket$nl_generic(0x10, 0x3, 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r1, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000001340)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000001080)="baf80c66b8a8720e8b66efbafc0cb80f00ef26f3f010062a25660f3a61cc080f00ded9fbf20f2a1e1800260f32baf80c66b8e8ca498866efbafc0c66b80700000066ef0f5ec00f787317", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.832163387s ago: executing program 2 (id=66): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) close(0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@broadcast, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x1}, {0x800000000000000}, 0x0, 0x0, 0x1, 0x0, 0x5, 0x2}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendto(0xffffffffffffffff, &(0x7f00000000c0)="1200000012", 0x5, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d00624"], 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 1.650484395s ago: executing program 4 (id=67): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000800) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000300)="482d31a518908f7123ae296c069e19d979424f4f0a8edbf2d20fce6310d4971d83550f9bc8567bd165cb3c8a8193120b16852ab530d11820b3bba968d8c1367e4ce2cb617c85594bee0ba31949149d0881835d4a84271e9162a994d9c7c2331e5788457f329ad97d0b4a77857dd8", &(0x7f0000000380)="f9ec19b31b1b5d9fd737ef63becf8086f11a39d8eb2be3e5fb99e60c91ba9ffbf17ef40b1539"}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @remote}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x2}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x1, 0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000000)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc) bind$bt_l2cap(r5, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$inet(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="d456580a182f4f8414c2469bdb06102fbb1d7c", 0x13}], 0x1}, 0x204c800) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.358748894s ago: executing program 4 (id=68): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) add_key(&(0x7f00000000c0)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000001800)="9f225e75fa2be0a79954d1c423b64ecb764a4f7f6b2e3e5887554e9a0b4063284e0f6c8d7aaf2f622457953e3790124809629c05f186991be0cb6f4fdeddcd71ff092850dad68762c5e66a48c35da80121acc2be71da1840dba6d1376fd3c08835f35471efbd545f5432efdcc00405060710118a111d2eeb3eb88733838d8f998c09557cdb3a9d3f93832d9c41", 0x8d, 0xfffffffffffffff9) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r1}, &(0x7f00000007c0)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000480), 0x1, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='net/arp\x00') pread64(r5, &(0x7f0000001c00)=""/4108, 0x100c, 0x3) writev(r4, &(0x7f0000000200)=[{&(0x7f0000000300)="aefdf79d240303005a90f57f07703a", 0xf}, {&(0x7f0000000000)="be9c7260ef52f2011246dbbceadb43c6c6d2495464eaf7e1365f2a6e1a280179ff772fc051be70989241bcfb050058b0adce3de123232d910112646b895cd4c092c47043c840f85d11adbbd13c8b4d2e147f62833c22cce8ab02e51c01ae22eba65c2e42788f78b54f6aa024e1a0e45d9c468906e585f13b1a9bfd6345e51aea9167b599a5df3e4b632d5a9dbe5d814c898a4cca39", 0x95}], 0x2) write$UHID_INPUT(r4, &(0x7f00000007c0)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183e9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e425a4146056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423d27f7b78fafa060000006eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437bf21419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f87d2a1a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb1326a2a4f23f11181186f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a42010e24f69de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc46f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491fd52f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4670b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e400000000000000000000000000000001df00", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) write$binfmt_register(r2, &(0x7f00000004c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x982, 0x3a, '[-:+@#/', 0x3a, '', 0x3a, './file0'}, 0x2e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8b04, &(0x7f00000001c0)={'virt_wifi0\x00'}) signalfd(r2, &(0x7f0000000080)={[0x5]}, 0x8) 1.230069522s ago: executing program 3 (id=69): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FLAGS={0x8}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r2 = socket(0x2, 0x80805, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) (async) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r5 = syz_open_dev$loop(&(0x7f0000000380), 0x4, 0x103382) ioctl$LOOP_SET_STATUS(r5, 0x1277, &(0x7f00000003c0)={0x0, {}, 0x0, {}, 0x7, 0x3, 0x7, 0x9, "4b8b3ea40100dfed0b1d3409000000dd5a1f2115fac256cf08000000000000030000000000000000000000ea00", "eaabbd496e4d7e0200000002060025de30ad375f24d600", [0x800, 0x9]}) 996.138131ms ago: executing program 1 (id=70): r0 = socket$netlink(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="6c0000002c003f060200000000000000000000000100000000000000f1ffffff000301000c000100666c6f77657200003c0002801c0054801800038005000100010000000c00028847000000000000011c1155801800058005000100ff0000000c000200ffffffffffffffff", 0x6c) 896.646712ms ago: executing program 3 (id=71): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000f4000040961b110000000000000109022400010000000109040008020300030009210400000122180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, &(0x7f0000000100)={0x20, 0x23, 0x17, {0x17, 0x23, "3ee765c783f238b5855e50431a5dfde6648346f9e5"}}, &(0x7f00000001c0)={0x0, 0x3, 0x8, @string={0x8, 0x3, "814fb15eb563"}}, &(0x7f0000000200)={0x0, 0x22, 0x12, {[@local=@item_4={0x3, 0x2, 0x4, "d397003f"}, @global=@item_012={0x0, 0x1, 0x4}, @main=@item_012={0x1, 0x0, 0x9, "d8"}, @main=@item_4={0x3, 0x0, 0x9, "a947cd43"}, @local=@item_4={0x3, 0x2, 0x0, "98874510"}]}}, &(0x7f0000000240)={0x0, 0x21, 0x9, {0x9, 0x21, 0xdcd, 0x9, 0x1, {0x22, 0x81b}}}}, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)={0x60, 0x7, 0x42, "98b4663e74512515e46c65354a2db1566f172a273a6d10bbfcee6dee1682618bbcda99221b04092bf44761155592d41caa7165323a86851ebfd0abc905e087e83062"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000440)={0x20, 0x1, 0x9e, "ede7ad603fad8906e25314142b22764227e7f84a5198a00fcd382e1c8c44c86a2a861cad99803ad1458133d3cfed312dfdee06274a5b8bf25f24e3f9286bb6d7a16c2c5d335420670277356744d5746620cc9313d8f3a67e7e732ba9326d848bf4aa5db05a20e0eb5e6ef596d08cf42405be9e5dde8298deefa2b3a58997e4f48caf5080344aa2aa915aea1285a2d2a116c29e5b1ae1c286ea9bb120714c"}, &(0x7f0000000500)={0x20, 0x3, 0x1, 0xf}}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022180000000501150025ff0904a101090192008c0508950129309102c0"], 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000040)=0x4004802) ioctl$EVIOCGRAB(r1, 0x40044590, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) syz_usb_connect(0x2, 0x991, &(0x7f0000000580)={{0x12, 0x1, 0x310, 0xf9, 0xb1, 0x83, 0x20, 0x19d2, 0x57, 0xe259, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97f, 0x3, 0x0, 0x7, 0x10, 0x40, "", [{{0x9, 0x4, 0xb9, 0x9f, 0xc, 0xff, 0xff, 0xff, 0x7, [@cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "fbd327"}, {0x5, 0x24, 0x0, 0x92e9}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x40, 0x6, 0x6}, [@call_mgmt={0x5, 0x24, 0x1, 0x1, 0x10}, @network_terminal={0x7, 0x24, 0xa, 0x0, 0x0, 0xe9, 0x7}, @mdlm={0x15, 0x24, 0x12, 0x8b}, @country_functional={0xa, 0x24, 0x7, 0x5, 0x4, [0xd2a0, 0x7f]}, @ncm={0x6, 0x24, 0x1a, 0x7, 0x3c}]}], [{{0x9, 0x5, 0xf, 0x0, 0x8, 0x5, 0x9, 0xc6, [@generic={0xd3, 0x4, "355e21bdfa83ea7395365c59ec689a77484e4987e88c317e2aff5a1fc8dfa55d99c9e9138cf8d0f014ab2982e94ee17f9580d9aeb9c4f52f6bc15b731ad651e15ee616d37c281900f71f285974aa49d19896add7107287a6698409c8aa71ebfd75710a0c529b8bbe381e87d0f2b333f6db936a8e76d10d739821e545a62af1006f2902b9e5c9f7b9e7060d1f4cd4dd75b7e7fd49caefb4c13efaddff82db301475430b440f1bcfa82f593bfb8e4d0cd0f0b7d2463639f179970e2af1cb4fea3f1fe8961f215a747b541f2298c2dae18957"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x5, 0xfd}}, {{0x9, 0x5, 0x80, 0x4, 0x20, 0xdc, 0x1, 0x12, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x9}]}}, {{0x9, 0x5, 0xb, 0x10, 0x18f, 0x1, 0xc, 0x4, [@generic={0x71, 0xb, "ebb75c1101ebdf5e45fbf109e2ad295e851aafcddbd395565bc1e725e05f3e5906ef1a7649002f781417f9f2c5ea734e76938b6e1f5a0685de3a1d595e1ba88e97b4b23b340ae2f5869a7a4ed9b941204087d875c3570a47633f0a0ca3ba68602fe2a302813589b6803f06e67a3d15"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xce, 0x553}]}}, {{0x9, 0x5, 0xd, 0x1, 0x200, 0x19, 0x3, 0xf, [@generic={0xd1, 0xf, "ded0f0acdaf39bad09d0902dd80bed9f39f32fcd9d7022fbd3e5b77bee4e8dc6f3cd402034e2ed8ba6e343bcb0eeabeb029eb6cd091ab6ac60287af760a859deea84147d739757bbe7b82708cf96bec30e8c2e03745656ba5472488e8ab9c41034669a14a1836c5f0680eeb86aed5379d58e493b91cb3a5adcaf190aeca4b33bb4f58bd0396d580f4a1a9b43f9324e11f8aa97d2a07eae697de254e7e13a3158663c21342cdb44c18e8ed4db94a8b52cc61f312725e92cc8c7a90ce23e6dc8f645d9b11519f556f41f67012bd274e8"}]}}, {{0x9, 0x5, 0x3, 0x1, 0x10, 0x6, 0x7, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf4, 0x7}]}}, {{0x9, 0x5, 0xf, 0xc, 0x20, 0x2, 0x3, 0x9f, [@generic={0xc4, 0x21, "dbc6edbecb96772804d913b1286f504b877bc733b82deb7cc8a191027f8d2eb6edeb4204a4246391b4e5f90e77fbe4808a7b37a9d5bf4464043c4f9e5edf093d503399a2365bfdc0a59e8ddb69013723dfcfa9c59fbcdc8dee18bb42582f3ff608060aa3a971e90b333944f7ca01d7a960e1ae71fe0f7d980dc9055a0b3fa61dc8af8f44c422af2d825fe5ffe661945920aa1da16e2f79eaa0d5c67406fb28b82813d54e48b1e37777e7b6d4c424b72cff9275574f5ce439de4a2b02ecfdd3a64e98"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7b, 0x9}]}}, {{0x9, 0x5, 0x3, 0x8, 0x18, 0x2, 0x2}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0xc8, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0xb02e023aed988835, 0x5, 0x3}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x4a, 0x3, 0x7f, [@generic={0xd6, 0x31, "646fd356df8fd491dc473c3e97d2380aeda4bb9e0940b53b93ec1ba15dce784314b2975046a020499e06672e5acdf6c41221c050099a630394e19ed5b585ec26d378062ce5c7a5a1dc5fc31d19cbd5213d06e5fe1994f8bb0c18a9101bc82f6ec12d8a0075af67a30bc319eedc8972f3badf10a92560fc81638b6910791a43fc39ffcd6699777f7dd87c7913e5a76a78ef170a52bc680a1c6869bb9dd935fad586c74d8cb82570e88b4d9aa7860431373a13de375c6a8221035c0fe12ef012440e2b4df07d9ec4e137912cad3a3863c129f20f2c"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x10, 0x8c, 0x4, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x34}, @generic={0xaa, 0xa, "448e4e44158af2a956f30a486ac43cc268c1daa086f45c10bae20616c5e4b39b4e49fca2599aba3610675e7c4ec57149cce2f07abda226571c08badf3c41fcd9399749e882ab473ea7ff1787cc47dd029d805f4d1b492dd29178fd5d888192309435c65b566ae7227a24ababfedde4328448823288b9ba02701a0733dc2c01eaeb6a0168501c313355a4f327357c06a3c646afff5495cf3e2c450d895c8f1bd3e169d7d82134995a"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0x3, 0x34, 0x3, [@generic={0xaa, 0x4, "579261c8511604b10aa602781352f6cc3c4e647edc77322a72430467d3a693943614f9349c1f8957602b201fd855982bbc49daed19943a7da68f4fe7b140fad50c0e5259d1c7f2ea174d623dd988000b2032213820503b5cb37ad2bc1595b95b839b4aea994b3d3b29af65906474d631d32d5545dba92a2db855755e610aac767d4581b114cd84648ae079bf82bcb1aed813e7fd4b3c86c67c76162497a399beae921cf633281765"}, @generic={0x94, 0xa, "d8e4a48ad360a8464fa2858f24ad20ed32f6c0faa6f883ab786be561a117d27d28aa2c6d46d109c8ed301e4232e7251d3281f0175445f540e89a4edc5729a587cd14215434558b874d63d1eb5975142763effdee41b523e5ba5ff23e1fce7a0e3c0fb8d1b0dd639e5990aa34b04e66d40498b8e6a0dfd3420ca03417ace2d2e184b3b2be15d3b0b6049b6383e10248a758ac"}]}}]}}, {{0x9, 0x4, 0x72, 0x7, 0x2, 0xff, 0xff, 0xff, 0x6, [@hid_hid={0x9, 0x21, 0x5, 0x4, 0x1, {0x22, 0x8fc}}], [{{0x9, 0x5, 0x5, 0x10, 0x8, 0x6, 0x3, 0x7}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x3, 0x6, 0x7}}]}}, {{0x9, 0x4, 0x89, 0x8, 0xc, 0xff, 0xff, 0xff, 0x2, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "d9"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3ff, 0x401, 0x2}, [@mbim={0xc, 0x24, 0x1b, 0xc6, 0x7, 0x3f, 0x4, 0xf800, 0xfd}, @acm={0x4}, @obex={0x5, 0x24, 0x15, 0x5}, @network_terminal={0x7, 0x24, 0xa, 0x1, 0x0, 0x30}, @obex={0x5, 0x24, 0x15, 0xf2}]}], [{{0x9, 0x5, 0xe, 0x0, 0x440, 0x7, 0x7, 0x48}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x2, 0x2, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x1}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x4, 0x1, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x401}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x7}]}}, {{0x9, 0x5, 0x17, 0x1, 0x10, 0x0, 0x4, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x3}]}}, {{0x9, 0x5, 0x8, 0x13, 0x3ff, 0x4, 0x0, 0x88}}, {{0x9, 0x5, 0xb, 0x10, 0x1ff, 0xf8, 0x5, 0xce, [@generic={0x5f, 0xf, "5537c0df45b8a08fc482534e62ed1761aeae9e8559a95a91b371d55f9425776a3b291211429dc88eaf6ab893446e81d440cd40973e1b14ae0423a7ae434c070494437e06f59995ece01cfe0fbacec6585e494b421b705b1a1a6efaae58"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x200, 0x4, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x39, 0x9}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x3, 0x5, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x8, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x9c, 0xdab}]}}, {{0x9, 0x5, 0xf, 0x0, 0x3ff, 0x1, 0x39, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0x83}, @generic={0x8e, 0x21, "578a74adedff56562408819e9e6f483ae6ec022532034c7acff5d984dc809263714d8e8355230552caa7544c550d6dea63f7f57836098578dd432482552fb7a0b421f84ecb89f5f9c487bfe5a074f64e3c7edc9c658605b027702e94f6bdea103be705d96459075b20c28d166e504951e09604eef9c2d3a5442526f084c52fcb1eb8a071bcd297d5c41b4db9"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x5, 0x3, 0x0, [@generic={0x27, 0x30, "1c53c12107a12e64dd073fd62d8be974a013c1c425f7e688e42888388964055296039695a0"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x3}]}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0x7, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xe8, 0x11}, @generic={0xbb, 0x2, "760903290187130a0be3632686557921f68c358bdb86e95c51eaff1553a6210ad08d5c07c15a9151e524affa81e49f85e56d8c3dc3055d44c69788015658055ca750b175800f08c93fdfa1a7809a3b409048055e310ed9ae5e7ad4be3a533c51706809cf61137018abdb04526b64831e3a3de06e383733228ebe7a897033b62b546c16925ce4f7fe226c444c4742fefea4f7b133e0c5576375b1f0a5cb1d73ab50d2615ec27fc1a7776edc90015087cde65a0aa7f942ea8392"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x9, 0x1, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x7f, 0xfc01}]}}]}}]}}]}}, &(0x7f00000013c0)={0xa, &(0x7f0000000f40)={0xa, 0x6, 0x300, 0x1, 0x7, 0x6, 0x10, 0x4f}, 0x5, &(0x7f0000000f80)={0x5, 0xf, 0x5}, 0x9, [{0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x801}}, {0xcd, &(0x7f0000001000)=@string={0xcd, 0x3, "b24cfa5b87f1fec0dc0d859cf50289a835c742d6b2a03c3c3734d41629ea602203ef249b2e32c73f891d21fcaf43585bb3cc5932131f7f500325cba3ccb29e88ba603edfe30d8e6c12cfc76342907741a43a105e1bb620dd020ed2facaa26d0997178005f08e66eac242df72d73cbcab2519f3d578fc58ee4d5eea20e9adc804afcc67e0c7d6834273b199f57f2f767b067195ef7530cf0af95705e17ffa125a722a7f30977d081a4eb1ea3cdc3e564fab72ce68d0d2c56377fa4c5d2e8e0a7246d458d41014b5de33aeb9"}}, {0x56, &(0x7f0000001100)=@string={0x56, 0x3, "62d101b65d56150445db608c33404a79b5c79ef07360f6eb67c8025eacdea39f5b13ada5ab5c7ab34c9cb40badf5c37c68a0db119fadc2dc9fe78ac4c075f2afd830ee2e38017469b7c145c6aee6890b482e4d01"}}, {0x4c, &(0x7f0000001180)=@string={0x4c, 0x3, "7b58df2a9ca8e64931d9c07136f5f3079ff6d9b96e99cf64b7f55bb9262a8a34674b52f845d39415efeb1965cc69df5712e51b09639a47cf0042d1b9ac080602b20853de692753762454"}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x4, &(0x7f0000001240)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x423}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x80a}}, {0xae, &(0x7f0000001300)=@string={0xae, 0x3, "4db42a98eea185e1bc4870d449bb81e7e41040f702e5497ae6feaa714502194d985399b868cb9f97d8c93a5b70926aabbbc1042a4dc8d0e7cfbc47949f2c8daf6af707399a68782a9023538417b180e285c430c3351efd8c73226b62dcba0d30d4bf6e97335ee3891e033483e265b45153762a9c5c50944b5f161090792d1ea8737e5026e7b8d0e8c98b6b83ccf8d4ae3a52e80e27e9852dc3a2c52133215c7a7cadb83857439a768d0a42ad"}}]}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 754.036468ms ago: executing program 4 (id=72): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f00000003c0)={0x9, &(0x7f0000000280)=[{0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @random}, {0x0, 0x0, 0x0, @remote}, {}, {0x0, 0x0, 0x0, @dev}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000001dc0)={0x1000a2, 0x75, 0x40000}, 0x20) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) mount(0x0, 0x0, &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = fcntl$dupfd(r6, 0x406, r6) sendto$inet(r7, 0x0, 0x0, 0x8001, &(0x7f0000000100)={0x2, 0x4e23, @multicast1}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0x89, 0x1000005, 0x12, r7, 0x0) 714.405395ms ago: executing program 1 (id=73): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x1000, 0x4, 0x10000000, 0xc}, 0x10) sendto(r0, &(0x7f0000000600)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000001010108000100e1010203", 0x34, 0x10, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0xfffffffd) setns(0xc9, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b0000000000060001"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r6, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200080d4}, 0x840) sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) ioctl$BINDER_WRITE_READ(r1, 0xc0046209, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) ioctl$BLKFINISHZONE(r8, 0x40101288, &(0x7f0000000280)={0xcc80, 0x2}) 572.178767ms ago: executing program 1 (id=74): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r1, 0x4b49, 0x0) (async) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000000)={0xf, {"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", 0x1000}}, 0x1006) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x7, 0xfff5, 0x7, 0x0, 0x10}}) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f00000000c0)="6f297e625e735090bca5754d82e11cc14e5e24f675d9da29328d1aa959470c980e74f28e7a1d8457bda1816cc4006ab49403a6b780a6b15c8a09e8bf426d6cabe17d9bcd95b9ab81f6c2dd400a6e03bf547b08f4aa9607d4") 233.978482ms ago: executing program 1 (id=75): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x71}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r0) r3 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @sliced={0x9, [0x7, 0x91b8, 0x0, 0xbb72, 0x7, 0x0, 0x8, 0x4f5, 0x873, 0x42d, 0x0, 0x40, 0x3, 0x9da, 0x34d1, 0x401, 0x1, 0x9, 0x4, 0x8, 0xc18c, 0x9, 0x7, 0x9b7, 0x2, 0x5, 0x6, 0x2, 0x2, 0x1, 0x10, 0x0, 0x3, 0x45, 0xa, 0xd, 0x9, 0x81, 0x3, 0x5, 0x6, 0x0, 0x9, 0x100, 0xec5, 0xf230, 0x7, 0x2b16], 0x7}}) syz_ublk_setup_queues(r2, r1, &(0x7f0000000180)={0x0, 0xdeeb, 0x0, 0xffffffff, 0x255}, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x23, {0x80000, 0xd0, 0x0, 0x3, 0x5, 0x6}}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r5, 0x89f0, &(0x7f0000000180)={'bond0\x00', @ifru_names='bond0\x00'}) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x23, &(0x7f0000000240), 0x1, 0x0, 0x0, 0x800}, 0x4c0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000002f00), 0x0, 0x10004040) sendmmsg$inet6(r6, &(0x7f0000002d00)=[{{&(0x7f0000001800)={0xa, 0x4e22, 0x1, @private2, 0xfffe}, 0x1c, &(0x7f00000010c0)=[{&(0x7f00000011c0)="e6", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x1, 0x5}, &(0x7f0000000300)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5) open(&(0x7f0000000040)='./bus\x00', 0x4c27e, 0x10) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') chmod(&(0x7f0000000180)='./file0\x00', 0x228) lchown(&(0x7f0000000040)='.\x00', 0xee00, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000040)) 226.351404ms ago: executing program 2 (id=76): msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000180)=@riscv64_aia_csr={0x8030000003010006, &(0x7f0000000040)=0x2}) 4.833218ms ago: executing program 2 (id=77): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000800) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000300)="482d31a518908f7123ae296c069e19d979424f4f0a8edbf2d20fce6310d4971d83550f9bc8567bd165cb3c8a8193120b16852ab530d11820b3bba968d8c1367e4ce2cb617c85594bee0ba31949149d0881835d4a84271e9162a994d9c7c2331e5788457f329ad97d0b4a77857dd8", &(0x7f0000000380)="f9ec19b31b1b5d9fd737ef63becf8086f11a39d8eb2be3e5fb99e60c91ba9ffbf17ef40b1539"}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @remote}, 0x2}}, 0x2e) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x2}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r4, 0x111, 0x5, 0x1, 0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000000)={0xfffe, 0x41aa, 0x6, 0x0, 0x8, 0x90, 0x8}, 0xc) bind$bt_l2cap(r5, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$inet(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="d456580a182f4f8414c2469bdb06102fbb1d7c", 0x13}], 0x1}, 0x204c800) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.012928ms ago: executing program 4 (id=85): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_XRUN(r1, 0x4148, 0x0) 0s ago: executing program 1 (id=78): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r3, 0x5) (async) connect$inet(r4, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) accept4$tipc(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = accept(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_RX(r5, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}}, 0x28) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0xa0, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x0, 0x0, 0x5c2}, {0xe, 0x5, 0x7}, 0x401, 0x6e6bba, 0x2, 0x1, 0x2, 0x2}, {{@in=@local, 0x4d4, 0x2a}, 0x2, @in=@loopback, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r6, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000040)="66b9800000c00f326635008000000f30ddc8f30f09660f38809bb7a0f20f22170f79090f01cfc4771407f3d8e1", 0x2d}], 0x1, 0x14, 0x0, 0x0) (async) syz_clone3(&(0x7f0000000600)={0x100000000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) setns(0xc9, 0x0) r7 = socket(0x2a, 0x2, 0x9) bind$inet(r7, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, 0x0}], 0x1, 0xa, &(0x7f00000001c0), 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.245' (ED25519) to the list of known hosts. [ 76.330285][ T5597] cgroup: Unknown subsys name 'net' [ 76.424483][ T5597] cgroup: Unknown subsys name 'cpuset' [ 76.434503][ T5597] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.070850][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.696920][ T5611] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.698433][ T5611] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.698945][ T5611] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.700244][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.710186][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.810408][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.812508][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.813105][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.814055][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.814680][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.891508][ T5611] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.894889][ T5611] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.895683][ T5611] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.897305][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.898056][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.961065][ T4928] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.962703][ T4928] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.963179][ T4928] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.966156][ T4928] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.966847][ T4928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.381760][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.382518][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.382682][ T5608] bridge_slave_0: entered allmulticast mode [ 83.385012][ T5608] bridge_slave_0: entered promiscuous mode [ 83.450680][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.450911][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.451322][ T5608] bridge_slave_1: entered allmulticast mode [ 83.452905][ T5608] bridge_slave_1: entered promiscuous mode [ 83.547828][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.590269][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.636667][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.636862][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.636957][ T5614] bridge_slave_0: entered allmulticast mode [ 83.638635][ T5614] bridge_slave_0: entered promiscuous mode [ 83.646437][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.646708][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.646956][ T5614] bridge_slave_1: entered allmulticast mode [ 83.648521][ T5614] bridge_slave_1: entered promiscuous mode [ 83.678600][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.678848][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.684951][ T5617] bridge_slave_0: entered allmulticast mode [ 83.689903][ T5617] bridge_slave_0: entered promiscuous mode [ 83.699674][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.699942][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.700287][ T5617] bridge_slave_1: entered allmulticast mode [ 83.703975][ T5617] bridge_slave_1: entered promiscuous mode [ 83.793941][ T5608] team0: Port device team_slave_0 added [ 83.822677][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.824767][ T5608] team0: Port device team_slave_1 added [ 83.827548][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.840695][ T4928] Bluetooth: hci0: command tx timeout [ 83.864143][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.866334][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.891217][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.891308][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.891418][ T5620] bridge_slave_0: entered allmulticast mode [ 83.893004][ T5620] bridge_slave_0: entered promiscuous mode [ 83.901860][ T4928] Bluetooth: hci1: command tx timeout [ 83.955057][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.955229][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.955363][ T5620] bridge_slave_1: entered allmulticast mode [ 83.957011][ T5620] bridge_slave_1: entered promiscuous mode [ 83.984273][ T4928] Bluetooth: hci2: command tx timeout [ 84.005256][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.005272][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.005298][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.059928][ T5614] team0: Port device team_slave_0 added [ 84.061997][ T4928] Bluetooth: hci3: command tx timeout [ 84.067007][ T5617] team0: Port device team_slave_0 added [ 84.074215][ T5614] team0: Port device team_slave_1 added [ 84.076966][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.077010][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.077076][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.130066][ T5617] team0: Port device team_slave_1 added [ 84.168253][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.186990][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.187014][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.187037][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.237414][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.238090][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.238104][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.238128][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.239944][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.239957][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.239979][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.353686][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.353705][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.353731][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.426554][ T5608] hsr_slave_0: entered promiscuous mode [ 84.427715][ T5608] hsr_slave_1: entered promiscuous mode [ 84.442336][ T5620] team0: Port device team_slave_0 added [ 84.475712][ T5614] hsr_slave_0: entered promiscuous mode [ 84.476484][ T5614] hsr_slave_1: entered promiscuous mode [ 84.477064][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 84.477155][ T5614] Cannot create hsr debugfs directory [ 84.479222][ T5620] team0: Port device team_slave_1 added [ 84.529498][ T5617] hsr_slave_0: entered promiscuous mode [ 84.530305][ T5617] hsr_slave_1: entered promiscuous mode [ 84.532527][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 84.532588][ T5617] Cannot create hsr debugfs directory [ 84.625563][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.625580][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.625608][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.691215][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.691232][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.691255][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.903908][ T5620] hsr_slave_0: entered promiscuous mode [ 84.904713][ T5620] hsr_slave_1: entered promiscuous mode [ 84.905269][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 84.905296][ T5620] Cannot create hsr debugfs directory [ 85.168341][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.181087][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.190375][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.206882][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.207777][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.223106][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.247572][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.250939][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.323121][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.328294][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.329639][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.342681][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.361848][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.365841][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.367000][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.370401][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.513276][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.523688][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.543817][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.549365][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.550337][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.567397][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.585010][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.588834][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.644204][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.692470][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.693225][ T5620] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.697545][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.699686][ T5620] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.719898][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.745022][ T5620] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.749364][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.771407][ T5620] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.774822][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.780770][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.780921][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.836585][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.836664][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.877392][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.910744][ T4928] Bluetooth: hci0: command tx timeout [ 85.962264][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.981340][ T4928] Bluetooth: hci1: command tx timeout [ 86.011492][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.011587][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.057937][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.058047][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.075488][ T4928] Bluetooth: hci2: command tx timeout [ 86.122136][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.141616][ T4928] Bluetooth: hci3: command tx timeout [ 86.209307][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.228363][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.263497][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.263648][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.309991][ T1297] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.310122][ T1297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.328070][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.366226][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.366335][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.396780][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.396896][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.881859][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.026127][ T5608] veth0_vlan: entered promiscuous mode [ 87.097467][ T5608] veth1_vlan: entered promiscuous mode [ 87.264766][ T5608] veth0_macvtap: entered promiscuous mode [ 87.297175][ T5608] veth1_macvtap: entered promiscuous mode [ 87.387060][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.428003][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.463567][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.534259][ T51] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.534469][ T51] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.534526][ T51] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.534564][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.844322][ T5614] veth0_vlan: entered promiscuous mode [ 87.854307][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.874684][ T5614] veth1_vlan: entered promiscuous mode [ 87.887178][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.887209][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.940311][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.982970][ T4928] Bluetooth: hci0: command tx timeout [ 87.985674][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.985694][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.062165][ T4928] Bluetooth: hci1: command tx timeout [ 88.084742][ T5614] veth0_macvtap: entered promiscuous mode [ 88.107605][ T5614] veth1_macvtap: entered promiscuous mode [ 88.117000][ T5608] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.141019][ T4928] Bluetooth: hci2: command tx timeout [ 88.157161][ T5617] veth0_vlan: entered promiscuous mode [ 88.195753][ T5620] veth0_vlan: entered promiscuous mode [ 88.218325][ T5617] veth1_vlan: entered promiscuous mode [ 88.221230][ T4928] Bluetooth: hci3: command tx timeout [ 88.250354][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.290299][ T5620] veth1_vlan: entered promiscuous mode [ 88.308864][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.351788][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.355433][ T51] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.355555][ T51] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.355647][ T51] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.417064][ T5759] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.487434][ T5617] veth0_macvtap: entered promiscuous mode [ 88.515482][ T5617] veth1_macvtap: entered promiscuous mode [ 88.558999][ T5620] veth0_macvtap: entered promiscuous mode [ 88.596639][ T5620] veth1_macvtap: entered promiscuous mode [ 88.612546][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.612567][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.645929][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.676491][ T5757] vers=2.0 not permitted when mounting with smb3 [ 88.676491][ T5757] [ 88.676625][ T5757] CIFS: VFS: vers=2.0 not permitted when mounting with smb3 [ 88.718281][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.752066][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.771288][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.772350][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.772454][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.772498][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.774300][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.774320][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.797587][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.872276][ T149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.872328][ T149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.872368][ T149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.872405][ T149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.208378][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.208400][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.209214][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.209232][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.335204][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.335226][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.440117][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.440140][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.470955][ T5681] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.631233][ T5681] usb 3-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.00 [ 89.637045][ T5681] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 89.637083][ T5681] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 89.637110][ T5681] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 89.637156][ T5681] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.708994][ T5766] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 90.061889][ T4928] Bluetooth: hci0: command tx timeout [ 90.140922][ T4928] Bluetooth: hci1: command tx timeout [ 90.221915][ T4928] Bluetooth: hci2: command tx timeout [ 90.301168][ T4928] Bluetooth: hci3: command tx timeout [ 90.439614][ T5783] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8'. [ 90.439821][ T5783] openvswitch: netlink: Missing key (keys=200040, expected=10000000) [ 90.521507][ T32] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 90.670642][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 90.674299][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 90.674357][ T32] usb 4-1: New USB device found: idVendor=045e, idProduct=0445, bcdDevice=87.ed [ 90.677806][ T32] usb 4-1: config 1 has an invalid interface number: 237 but max is 0 [ 90.677839][ T32] usb 4-1: config 1 has no interface number 0 [ 90.677887][ T32] usb 4-1: config 1 interface 237 has no altsetting 0 [ 90.742708][ T32] usb 4-1: string descriptor 0 read error: -22 [ 90.742875][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.784679][ T32] ipaq 4-1:1.237: PocketPC PDA converter detected [ 90.986317][ T5779] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9'. [ 91.001445][ T32] ipaq 4-1:1.237: probe with driver ipaq failed with error -71 [ 91.031208][ T32] usb 4-1: USB disconnect, device number 2 [ 91.906687][ T5808] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 91.906714][ T5808] bond0: option slaves: unable to set because the bond device is up [ 91.950898][ T5810] vers=2.0 not permitted when mounting with smb3 [ 91.950898][ T5810] [ 91.950922][ T5810] CIFS: VFS: vers=2.0 not permitted when mounting with smb3 [ 92.157831][ T992] cfg80211: failed to load regulatory.db [ 92.267132][ T5817] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14'. [ 92.280140][ T5817] netlink: 36 bytes leftover after parsing attributes in process `syz.3.14'. [ 92.280323][ T5817] Zero length message leads to an empty skb [ 92.295923][ T5817] hugetlbfs: Bad value 'g' for mount option 'size' [ 92.295923][ T5817] [ 92.370846][ T5682] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.521907][ T5682] usb 2-1: New USB device found: idVendor=0582, idProduct=007d, bcdDevice=0.00 [ 92.524654][ T5682] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.524681][ T5682] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 4 [ 92.524727][ T5682] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 92.524754][ T5682] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 92.524792][ T5682] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.590810][ T1667] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.625862][ T5682] usb 2-1: interface 1 not found [ 92.743390][ T1667] usb 4-1: unable to get BOS descriptor or descriptor too short [ 92.743442][ T1667] usb 4-1: New USB device found: idVendor=2b73, idProduct=0029, bcdDevice=0.40 [ 92.748780][ T1667] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.748825][ T1667] usb 4-1: Product: syz [ 92.748842][ T1667] usb 4-1: Manufacturer: syz [ 92.748857][ T1667] usb 4-1: SerialNumber: syz [ 92.892714][ T5682] usb 2-1: USB disconnect, device number 2 [ 93.019342][ T5817] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.046128][ T5817] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.203741][ T1667] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 93.364031][ T1667] usb 4-1: USB disconnect, device number 3 [ 93.782490][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 93.954065][ T5689] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 94.102346][ T5689] usb 2-1: Using ep0 maxpacket: 16 [ 94.103073][ T5689] usb 2-1: New USB device found: idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 94.104242][ T5689] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 94.104274][ T5689] usb 2-1: config 0 interface 0 has no altsetting 0 [ 94.110085][ T5689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.110109][ T5689] usb 2-1: Product: syz [ 94.110125][ T5689] usb 2-1: Manufacturer: syz [ 94.110140][ T5689] usb 2-1: SerialNumber: syz [ 94.174919][ T5689] usb 2-1: config 0 descriptor?? [ 94.311819][ T5681] aiptek 3-1:17.0: Aiptek tried all speeds, no sane response [ 94.312044][ T5681] aiptek 3-1:17.0: probe with driver aiptek failed with error -22 [ 94.349744][ T5681] usb 3-1: USB disconnect, device number 2 [ 94.530698][ T5689] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 94.870494][ T5689] rc_core: IR keymap rc-imon-pad not found [ 94.870513][ T5689] Registered IR keymap rc-empty [ 94.870873][ T5689] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 94.870894][ T5689] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 94.937890][ T5689] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 94.966963][ T5689] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 94.994454][ T5689] imon 2-1:0.0: iMON device (15c2:0041) on usb<2:3> initialized [ 95.040591][ T5682] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.191943][ T5682] usb 3-1: Using ep0 maxpacket: 32 [ 95.194473][ T5682] usb 3-1: New USB device found: idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 95.204151][ T5682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.254879][ T5682] usb 3-1: config 0 descriptor?? [ 95.313312][ T5682] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 96.263251][ T5862] netlink: 'syz.3.21': attribute type 10 has an invalid length. [ 96.604276][ T5864] .: renamed from bond0 (while UP) [ 96.605880][ T5864] FAULT_INJECTION: forcing a failure. [ 96.605880][ T5864] name failslab, interval 1, probability 0, space 0, times 1 [ 96.605957][ T5864] CPU: 0 UID: 0 PID: 5864 Comm: syz.3.22 Not tainted syzkaller #0 PREEMPT(full) [ 96.605984][ T5864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.606005][ T5864] Call Trace: [ 96.606020][ T5864] [ 96.606030][ T5864] dump_stack_lvl+0xe8/0x150 [ 96.606077][ T5864] should_fail_ex+0x3eb/0x540 [ 96.606127][ T5864] should_failslab+0xa8/0x100 [ 96.606161][ T5864] __kmalloc_noprof+0xf9/0x710 [ 96.606186][ T5864] ? kobject_get_path+0xc5/0x2f0 [ 96.606210][ T5864] ? kobject_get_path+0xc5/0x2f0 [ 96.606236][ T5864] ? kernfs_rename_ns+0x2e5/0x900 [ 96.606272][ T5864] kobject_get_path+0xc5/0x2f0 [ 96.606304][ T5864] kobject_rename+0x194/0x500 [ 96.606333][ T5864] ? __pfx_kobject_rename+0x10/0x10 [ 96.606363][ T5864] ? sysfs_rename_link_ns+0x178/0x1b0 [ 96.606395][ T5864] device_rename+0x15d/0x210 [ 96.606429][ T5864] netif_change_name+0x27a/0x970 [ 96.606462][ T5864] ? dev_change_name+0x101/0x220 [ 96.606495][ T5864] ? dev_ioctl+0x5dc/0x1150 [ 96.606529][ T5864] ? __pfx_netif_change_name+0x10/0x10 [ 96.606555][ T5864] ? full_name_hash+0x92/0xe0 [ 96.606581][ T5864] ? __dev_get_by_name+0xe5/0x130 [ 96.606611][ T5864] dev_change_name+0x101/0x220 [ 96.606647][ T5864] dev_ioctl+0x5ec/0x1150 [ 96.606684][ T5864] sock_do_ioctl+0x23e/0x320 [ 96.606713][ T5864] ? __pfx_sock_do_ioctl+0x10/0x10 [ 96.606737][ T5864] ? do_futex+0x3e7/0x4e0 [ 96.606787][ T5864] sock_ioctl+0x57a/0x7e0 [ 96.606812][ T5864] ? __fget_files+0x2a/0x420 [ 96.606835][ T5864] ? __pfx_sock_ioctl+0x10/0x10 [ 96.606859][ T5864] ? __fget_files+0x2a/0x420 [ 96.606882][ T5864] ? __fget_files+0x2a/0x420 [ 96.606908][ T5864] ? bpf_lsm_file_ioctl+0x9/0x20 [ 96.606937][ T5864] ? __pfx_sock_ioctl+0x10/0x10 [ 96.606962][ T5864] __se_sys_ioctl+0xfc/0x170 [ 96.606994][ T5864] do_syscall_64+0x166/0x520 [ 96.607014][ T5864] ? trace_irq_disable+0x3b/0x140 [ 96.607041][ T5864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.607065][ T5864] ? clear_bhb_loop+0x70/0xc0 [ 96.607093][ T5864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.607125][ T5864] RIP: 0033:0x7f33bdf9e159 [ 96.607152][ T5864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.607172][ T5864] RSP: 002b:00007f33bedba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.607196][ T5864] RAX: ffffffffffffffda RBX: 00007f33be225fa0 RCX: 00007f33bdf9e159 [ 96.607213][ T5864] RDX: 0000200000000040 RSI: 0000000000008923 RDI: 0000000000000005 [ 96.607228][ T5864] RBP: 00007f33be03506b R08: 0000000000000000 R09: 0000000000000000 [ 96.607242][ T5864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.607256][ T5864] R13: 00007f33be226038 R14: 00007f33be225fa0 R15: 00007ffe8d36e588 [ 96.607291][ T5864] [ 96.922725][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 96.923855][ T1667] usb 2-1: USB disconnect, device number 3 [ 97.440922][ T1667] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.590909][ T1667] usb 2-1: Using ep0 maxpacket: 16 [ 97.591637][ T1667] usb 2-1: New USB device found: idVendor=046d, idProduct=08d3, bcdDevice=b.28 [ 97.593934][ T1667] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 97.593962][ T1667] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.593983][ T1667] usb 2-1: config 0 has no interface number 0 [ 97.596421][ T1667] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.596444][ T1667] usb 2-1: Product: syz [ 97.596457][ T1667] usb 2-1: Manufacturer: syz [ 97.596470][ T1667] usb 2-1: SerialNumber: syz [ 97.617141][ T1667] usb 2-1: config 0 descriptor?? [ 97.675953][ T1667] uvcvideo 2-1:0.105: probe with driver uvcvideo failed with error -22 [ 97.759493][ T5682] gspca_vc032x: reg_r err -32 [ 97.759513][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.759524][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.759535][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.759545][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.759554][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.759564][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.759574][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.759583][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.759593][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.759602][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.759612][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.759621][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.759631][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.759641][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.759650][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.759660][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.759669][ T5682] gspca_vc032x: I2c Bus Busy Wait 00 [ 97.759696][ T5682] gspca_vc032x: Unknown sensor... [ 97.759856][ T5682] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 98.134214][ T5869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 98.136963][ T5869] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 98.499679][ T5866] ieee802154 phy0 wpan0: encryption failed: -22 [ 99.113465][ T992] usb 2-1: USB disconnect, device number 4 [ 99.235997][ T5689] usb 3-1: USB disconnect, device number 3 [ 99.422542][ T5890] netlink: 'syz.1.31': attribute type 1 has an invalid length. [ 99.422565][ T5890] netlink: 200 bytes leftover after parsing attributes in process `syz.1.31'. [ 99.422591][ T5890] netlink: 'syz.1.31': attribute type 1 has an invalid length. [ 99.422604][ T5890] netlink: 29 bytes leftover after parsing attributes in process `syz.1.31'. [ 100.052283][ T5903] vers=2.0 not permitted when mounting with smb3 [ 100.052283][ T5903] [ 100.052306][ T5903] CIFS: VFS: vers=2.0 not permitted when mounting with smb3 [ 100.331613][ T5682] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 100.489083][ T5925] Bluetooth: MGMT ver 1.23 [ 100.491801][ T5682] usb 4-1: New USB device found: idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 100.507336][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.532229][ T5682] usb 4-1: config 0 descriptor?? [ 100.540690][ T1667] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 100.540731][ T5682] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 100.671309][ T1667] usb 2-1: device descriptor read/64, error -71 [ 100.737058][ T5682] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 100.738883][ T5682] gspca_cpia1: usb_control_msg 01, error -32 [ 100.760535][ T992] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 100.890590][ T992] usb 3-1: device descriptor read/64, error -71 [ 100.910533][ T1667] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 100.940080][ T5682] gspca_cpia1: usb_control_msg 01, error -71 [ 100.940102][ T5682] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 100.960787][ T5682] usb 4-1: USB disconnect, device number 4 [ 101.040557][ T1667] usb 2-1: device descriptor read/64, error -71 [ 101.132295][ T992] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 101.151549][ T1667] usb usb2-port1: attempt power cycle [ 101.261082][ T992] usb 3-1: device descriptor read/64, error -71 [ 101.372955][ T992] usb usb3-port1: attempt power cycle [ 101.510580][ T1667] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 101.533617][ T1667] usb 2-1: device descriptor read/8, error -71 [ 101.710552][ T992] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 101.734075][ T992] usb 3-1: device descriptor read/8, error -71 [ 101.780582][ T1667] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 101.790567][ T5682] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 101.808462][ T1667] usb 2-1: device descriptor read/8, error -71 [ 101.912888][ T1667] usb usb2-port1: unable to enumerate USB device [ 101.952987][ T5682] usb 4-1: New USB device found: idVendor=06cd, idProduct=0135, bcdDevice=1.00 [ 101.954065][ T5682] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 101.954117][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.973587][ T992] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 101.974977][ T5682] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 101.982609][ T5682] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 101.987092][ T5682] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 101.998009][ T992] usb 3-1: device descriptor read/8, error -71 [ 102.031171][ T5682] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 102.031269][ T5682] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 102.049430][ T5682] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 102.088115][ T5682] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 102.088208][ T5682] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 102.102653][ T992] usb usb3-port1: unable to enumerate USB device [ 102.115097][ T5682] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 102.234403][ T5931] ======================================================= [ 102.234403][ T5931] WARNING: The mand mount option has been deprecated and [ 102.234403][ T5931] and is ignored by this kernel. Remove the mand [ 102.234403][ T5931] option from the mount to silence this warning. [ 102.234403][ T5931] ======================================================= [ 102.243754][ T5931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.270732][ T5931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.603859][ T5941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.604307][ T5941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.608558][ T5941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.614706][ T5941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.641626][ T992] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 103.793694][ T992] usb 2-1: New USB device found: idVendor=1660, idProduct=0932, bcdDevice=1.00 [ 103.796616][ T992] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 103.796649][ T992] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 103.799542][ T992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.799568][ T992] usb 2-1: Product: syz [ 103.799584][ T992] usb 2-1: Manufacturer: syz [ 103.799599][ T992] usb 2-1: SerialNumber: syz [ 103.859869][ T992] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 103.859938][ T992] usb 2-1: setting power ON [ 103.910849][ T5682] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 104.040530][ T5682] usb 3-1: device descriptor read/64, error -71 [ 104.065695][ T5938] FAULT_INJECTION: forcing a failure. [ 104.065695][ T5938] name failslab, interval 1, probability 0, space 0, times 0 [ 104.065725][ T5938] CPU: 0 UID: 0 PID: 5938 Comm: syz.1.43 Not tainted syzkaller #0 PREEMPT(full) [ 104.065754][ T5938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.065767][ T5938] Call Trace: [ 104.065776][ T5938] [ 104.065785][ T5938] dump_stack_lvl+0xe8/0x150 [ 104.065820][ T5938] should_fail_ex+0x3eb/0x540 [ 104.065860][ T5938] should_failslab+0xa8/0x100 [ 104.065892][ T5938] __kmalloc_cache_node_noprof+0xa5/0x620 [ 104.065918][ T5938] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 104.065942][ T5938] ? __alloc_workqueue+0xbd7/0x21d0 [ 104.065963][ T5938] ? __alloc_workqueue+0xbd7/0x21d0 [ 104.065992][ T5938] __alloc_workqueue+0xbd7/0x21d0 [ 104.066036][ T5938] alloc_workqueue_noprof+0xe3/0x210 [ 104.066064][ T5938] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 104.066096][ T5938] ? mutex_init_lockdep+0xdf/0x110 [ 104.066129][ T5938] __rds_conn_create+0x1334/0x2290 [ 104.066151][ T5938] ? __rds_conn_create+0x2d5/0x2290 [ 104.066188][ T5938] ? __pfx___rds_conn_create+0x10/0x10 [ 104.066226][ T5938] rds_conn_create_outgoing+0x43/0x60 [ 104.066254][ T5938] rds_sendmsg+0xfca/0x20e0 [ 104.066300][ T5938] ? __pfx_rds_sendmsg+0x10/0x10 [ 104.066333][ T5938] ? __lock_acquire+0x747/0x2de0 [ 104.066358][ T5938] ? __pfx_aa_sk_perm+0x10/0x10 [ 104.066401][ T5938] ? aa_sock_msg_perm+0x144/0x210 [ 104.066446][ T5938] ? apparmor_socket_sendmsg+0x98/0x360 [ 104.066479][ T5938] ? __pfx_rds_sendmsg+0x10/0x10 [ 104.066507][ T5938] sock_sendmsg_nosec+0x13a/0x180 [ 104.066539][ T5938] ____sys_sendmsg+0x54e/0x850 [ 104.066579][ T5938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 104.066623][ T5938] ? import_iovec+0x73/0xa0 [ 104.066652][ T5938] ___sys_sendmsg+0x2a5/0x360 [ 104.066683][ T5938] ? __lock_acquire+0x747/0x2de0 [ 104.066713][ T5938] ? __pfx____sys_sendmsg+0x10/0x10 [ 104.066752][ T5938] ? futex_wait+0x2a2/0x390 [ 104.066806][ T5938] ? __fget_files+0x3a2/0x420 [ 104.066828][ T5938] ? __fget_files+0x2a/0x420 [ 104.066861][ T5938] __x64_sys_sendmsg+0x1b1/0x290 [ 104.066899][ T5938] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 104.066956][ T5938] do_syscall_64+0x166/0x520 [ 104.066977][ T5938] ? trace_irq_disable+0x3b/0x140 [ 104.067004][ T5938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.067027][ T5938] ? clear_bhb_loop+0x70/0xc0 [ 104.067055][ T5938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.067077][ T5938] RIP: 0033:0x7f9a5279e159 [ 104.067097][ T5938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.067116][ T5938] RSP: 002b:00007f9a509f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 104.067140][ T5938] RAX: ffffffffffffffda RBX: 00007f9a52a25fa0 RCX: 00007f9a5279e159 [ 104.067156][ T5938] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000006 [ 104.067171][ T5938] RBP: 00007f9a5283506b R08: 0000000000000000 R09: 0000000000000000 [ 104.067185][ T5938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.067198][ T5938] R13: 00007f9a52a26038 R14: 00007f9a52a25fa0 R15: 00007ffc04ac6b48 [ 104.067233][ T5938] [ 104.291153][ T5682] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 104.460687][ T5682] usb 3-1: device descriptor read/64, error -71 [ 104.512548][ T992] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 104.514765][ T992] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 104.514828][ T992] usb 2-1: media controller created [ 104.569464][ T1667] usb 4-1: USB disconnect, device number 5 [ 104.573597][ T5682] usb usb3-port1: attempt power cycle [ 104.588463][ T992] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.625111][ T1667] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 104.641733][ T1667] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 104.651175][ T1667] keyspan 4-1:1.0: device disconnected [ 104.695495][ T992] usb 2-1: selecting invalid altsetting 6 [ 104.695520][ T992] usb 2-1: digital interface selection failed (-22) [ 104.695545][ T992] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 104.700316][ T992] usb 2-1: setting power OFF [ 104.739813][ T992] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 104.739839][ T992] usb 2-1: setting power ON [ 104.773228][ T992] usb 2-1: clear halt on IN pipe failed (-32) [ 104.776118][ T992] usb 2-1: clear halt on OUT pipe failed (-32) [ 104.776239][ T992] dvb-usb: bulk message failed: -22 (1/0) [ 104.776258][ T992] usb 2-1: mode switch failed (-22) [ 104.894627][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 104.899628][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 104.901058][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 104.908107][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 104.922390][ T5682] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 104.926709][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 104.969444][ T5682] usb 3-1: device descriptor read/8, error -71 [ 105.006158][ T992] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 105.006192][ T992] dvb_usb_cxusb 2-1:1.0: probe with driver dvb_usb_cxusb failed with error -22 [ 105.062833][ T992] usb 2-1: USB disconnect, device number 9 [ 105.211092][ T5682] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 105.232675][ T5682] usb 3-1: device descriptor read/8, error -71 [ 105.341979][ T5682] usb usb3-port1: unable to enumerate USB device [ 105.358144][ T5955] netlink: 76 bytes leftover after parsing attributes in process `syz.3.47'. [ 105.575966][ T217] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.698746][ T217] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.824993][ T217] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.860180][ T5967] netlink: 'syz.3.50': attribute type 27 has an invalid length. [ 105.921528][ T217] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.961458][ T1667] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 106.032878][ T33] audit: type=1326 audit(1790516009.284:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5970 comm="syz.3.51" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f33bdf9e159 code=0x0 [ 106.091413][ T1667] usb 2-1: device descriptor read/64, error -71 [ 106.242463][ T217] bridge_slave_1: left allmulticast mode [ 106.242492][ T217] bridge_slave_1: left promiscuous mode [ 106.243121][ T217] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.249115][ T217] bridge_slave_0: left allmulticast mode [ 106.249134][ T217] bridge_slave_0: left promiscuous mode [ 106.263265][ T217] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.350968][ T1667] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 106.453887][ T217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.458761][ T217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.481024][ T217] bond0 (unregistering): Released all slaves [ 106.497690][ T1667] usb 2-1: device descriptor read/64, error -71 [ 106.556286][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.556930][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.557064][ T5945] bridge_slave_0: entered allmulticast mode [ 106.559093][ T5945] bridge_slave_0: entered promiscuous mode [ 106.597669][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.597846][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.597961][ T5945] bridge_slave_1: entered allmulticast mode [ 106.599878][ T5945] bridge_slave_1: entered promiscuous mode [ 106.627947][ T1667] usb usb2-port1: attempt power cycle [ 106.748435][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.763019][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.820314][ T5983] netlink: 'syz.2.52': attribute type 2 has an invalid length. [ 106.820331][ T5983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.52'. [ 106.857815][ T5945] team0: Port device team_slave_0 added [ 106.872926][ T5945] team0: Port device team_slave_1 added [ 106.918980][ T5983] : entered promiscuous mode [ 106.970941][ T1667] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 106.991264][ T1667] usb 2-1: device descriptor read/8, error -71 [ 107.020549][ T4928] Bluetooth: hci4: command tx timeout [ 107.058201][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.058220][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.058249][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.081001][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.081052][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.081146][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.221175][ T217] hsr_slave_0: left promiscuous mode [ 107.222152][ T217] hsr_slave_1: left promiscuous mode [ 107.223202][ T217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.223233][ T217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.224852][ T217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.224872][ T217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.257276][ T27] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 107.282082][ T1667] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 107.282834][ T217] veth1_macvtap: left promiscuous mode [ 107.282890][ T217] veth0_macvtap: left promiscuous mode [ 107.283046][ T217] veth1_vlan: left promiscuous mode [ 107.283140][ T217] veth0_vlan: left promiscuous mode [ 107.321870][ T1667] usb 2-1: device descriptor read/8, error -71 [ 107.426405][ T27] usb 4-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 107.442947][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 107.445010][ T27] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.445036][ T27] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 107.445061][ T27] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 107.445105][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.449441][ T1667] usb usb2-port1: unable to enumerate USB device [ 107.912635][ T217] team0 (unregistering): Port device team_slave_1 removed [ 107.935983][ T217] team0 (unregistering): Port device team_slave_0 removed [ 108.090602][ T32] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 108.109159][ T5273] 8021q: adding VLAN 0 to HW filter on device eth1 [ 108.128551][ T5945] hsr_slave_0: entered promiscuous mode [ 108.129967][ T5945] hsr_slave_1: entered promiscuous mode [ 108.157229][ T27] gud 4-1:1.0: Failed to add properties (error=-71) [ 108.157263][ T27] gud 4-1:1.0: probe with driver gud failed with error -71 [ 108.193594][ T27] usb 4-1: USB disconnect, device number 6 [ 108.265402][ T32] usb 3-1: New USB device found: idVendor=0582, idProduct=000c, bcdDevice=0.40 [ 108.267153][ T32] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 108.267181][ T32] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 108.267247][ T32] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 48, changing to 7 [ 108.310866][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.310894][ T32] usb 3-1: Product: syz [ 108.310910][ T32] usb 3-1: Manufacturer: syz [ 108.310925][ T32] usb 3-1: SerialNumber: syz [ 108.532529][ T32] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 108.532560][ T32] usb 3-1: 1:1 : format type 0 is detected, processed as PCM [ 108.532580][ T32] usb 3-1: 1:1 : sample bitwidth 135 in over sample bytes 14 [ 108.532603][ T32] usb 3-1: 1:1 : unsupported sample bitwidth 135 in 14 bytes [ 108.627603][ T5945] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.650030][ T5945] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.659487][ T5945] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.673920][ T5945] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.674818][ T5945] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.699603][ T32] usb 3-1: USB disconnect, device number 12 [ 108.714914][ T5945] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.718918][ T5945] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.755732][ T5945] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.924999][ T5842] udevd[5842]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.009775][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.052883][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.076828][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.076940][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.100619][ T4928] Bluetooth: hci4: command tx timeout [ 109.106926][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.107032][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.261026][ T5689] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 109.413142][ T5689] usb 2-1: Using ep0 maxpacket: 32 [ 109.428480][ T5689] usb 2-1: unable to get BOS descriptor or descriptor too short [ 109.428534][ T5689] usb 2-1: New USB device found: idVendor=0dba, idProduct=1000, bcdDevice=80.40 [ 109.434616][ T5689] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.434687][ T5689] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.459641][ T5689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.459713][ T5689] usb 2-1: Product: syz [ 109.459755][ T5689] usb 2-1: Manufacturer: syz [ 109.459795][ T5689] usb 2-1: SerialNumber: syz [ 109.548428][ T5273] 8021q: adding VLAN 0 to HW filter on device eth2 [ 109.571379][ T992] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 109.722248][ T992] usb 3-1: Using ep0 maxpacket: 16 [ 109.723320][ T992] usb 3-1: New USB device found: idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 109.724702][ T992] usb 3-1: config 0 has an invalid interface number: 126 but max is 0 [ 109.724727][ T992] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 109.724747][ T992] usb 3-1: config 0 has no interface number 0 [ 109.724815][ T992] usb 3-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 109.724844][ T992] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 109.724873][ T992] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 109.724901][ T992] usb 3-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid maxpacket 26159, setting to 1024 [ 109.724953][ T992] usb 3-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 109.724977][ T992] usb 3-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 109.725019][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.805151][ T992] usb 3-1: config 0 descriptor?? [ 109.806705][ T6029] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 109.806982][ T6029] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 109.889690][ T992] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 110.030015][ T6029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 110.045114][ T6029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 110.299064][ T5689] usb 2-1: unit 0 not found! [ 110.337886][ T992] usb 3-1: USB disconnect, device number 13 [ 110.411548][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.510617][ T5689] usb 2-1: USB disconnect, device number 14 [ 110.976380][ T5273] 8021q: adding VLAN 0 to HW filter on device eth3 [ 110.997280][ T5945] veth0_vlan: entered promiscuous mode [ 111.015105][ T5945] veth1_vlan: entered promiscuous mode [ 111.016808][ T6077] overlayfs: failed to resolve 'dont_measure': -2 [ 111.106878][ T5945] veth0_macvtap: entered promiscuous mode [ 111.127720][ T5945] veth1_macvtap: entered promiscuous mode [ 111.180916][ T4928] Bluetooth: hci4: command tx timeout [ 111.202614][ T6087] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 111.203098][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.227429][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.301687][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.301734][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.301770][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.301815][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.427563][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.427586][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.510163][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.510185][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.587035][ T6097] capability: warning: `syz.1.64' uses deprecated v2 capabilities in a way that may be insecure [ 111.835735][ T6104] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 112.044844][ T6113] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 112.045009][ T6113] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 112.281128][ T27] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 112.406448][ T5273] 8021q: adding VLAN 0 to HW filter on device eth4 [ 112.431904][ T6123] loop8: detected capacity change from 0 to 8 [ 112.459321][ T6123] Dev loop8: unable to read RDB block 8 [ 112.459369][ T6123] loop8: unable to read partition table [ 112.459599][ T6123] loop8: partition table beyond EOD, truncated [ 112.459636][ T6123] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 112.472153][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 112.493570][ T27] usb 3-1: New USB device found: idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 112.511655][ T27] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.517795][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.517836][ T27] usb 3-1: Product: syz [ 112.517853][ T27] usb 3-1: Manufacturer: syz [ 112.517868][ T27] usb 3-1: SerialNumber: syz [ 112.556623][ T6123] warning: `syz.4.68' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 112.558030][ T27] usb 3-1: config 0 descriptor?? [ 112.581604][ T27] cdc_ether 3-1:0.0: missing cdc header descriptor [ 112.582842][ T27] usb 3-1: unsupported MDLM descriptors [ 112.790984][ T992] usb 3-1: USB disconnect, device number 14 [ 112.995858][ T6141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.73'. [ 112.998834][ T6140] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 113.033501][ T32] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 113.194402][ T32] usb 4-1: New USB device found: idVendor=1b96, idProduct=0011, bcdDevice=0.00 [ 113.196841][ T32] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.196877][ T32] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.196904][ T32] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 113.196934][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.196973][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.261173][ T4928] Bluetooth: hci4: command tx timeout [ 113.278899][ T32] usb 4-1: config 0 descriptor?? [ 113.465717][ T6150] bond0: Error: Cannot enslave bond to itself. [ 113.486976][ T33] audit: type=1800 audit(1790516016.734:3): pid=6150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.75" name=08 dev="sda1" ino=2045 res=0 errno=0 [ 113.788241][ T6162] ================================================================== [ 113.788261][ T6162] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc4/0x340 [ 113.788300][ T6162] Read of size 8 at addr ffff88802ca97c18 by task syz.2.77/6162 [ 113.788322][ T6162] [ 113.788335][ T6162] CPU: 0 UID: 0 PID: 6162 Comm: syz.2.77 Not tainted syzkal ** replaying previous printk message ** [ 113.788335][ T6162] CPU: 0 UID: 0 PID: 6162 Comm: syz.2.77 Not tainted syzkaller #0 PREEMPT(full) [ 113.788362][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 113.788377][ T6162] Call Trace: [ 113.788387][ T6162] [ 113.788396][ T6162] dump_stack_lvl+0xe8/0x150 [ 113.788429][ T6162] print_address_description+0x55/0x1e0 [ 113.788466][ T6162] ? dvb_device_open+0xc4/0x340 [ 113.788500][ T6162] print_report+0x58/0x70 [ 113.788531][ T6162] kasan_report+0x117/0x150 [ 113.788565][ T6162] ? dvb_device_open+0xc4/0x340 [ 113.788601][ T6162] dvb_device_open+0xc4/0x340 [ 113.788631][ T6162] ? do_raw_spin_unlock+0xf5/0x200 [ 113.788670][ T6162] chrdev_open+0x4d9/0x600 [ 113.788705][ T6162] ? __pfx_chrdev_open+0x10/0x10 [ 113.788740][ T6162] ? devcgroup_check_permission+0x31/0x8f0 [ 113.788771][ T6162] ? __pfx_chrdev_open+0x10/0x10 [ 113.788803][ T6162] do_dentry_open+0x80e/0x1360 [ 113.788843][ T6162] vfs_open_consume+0x4a/0x350 [ 113.788879][ T6162] ? path_openat+0x148a/0x1da0 [ 113.788910][ T6162] path_openat+0x14a6/0x1da0 [ 113.788950][ T6162] do_file_open+0x23e/0x4a0 [ 113.788982][ T6162] ? __pfx_do_file_open+0x10/0x10 [ 113.789026][ T6162] ? _raw_spin_unlock+0x28/0x50 [ 113.789068][ T6162] ? alloc_fd+0x6af/0x760 [ 113.789112][ T6162] do_sys_openat2+0x115/0x200 [ 113.789150][ T6162] ? __pfx_do_sys_openat2+0x10/0x10 [ 113.789191][ T6162] ? __task_pid_nr_ns+0x28/0x470 [ 113.789217][ T6162] __x64_sys_openat+0x138/0x170 [ 113.789257][ T6162] do_syscall_64+0x166/0x520 [ 113.789279][ T6162] ? trace_irq_disable+0x3b/0x140 [ 113.789309][ T6162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.789334][ T6162] ? clear_bhb_loop+0x70/0xc0 [ 113.789361][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.789385][ T6162] RIP: 0033:0x7f65a275e98e [ 113.789406][ T6162] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.789426][ T6162] RSP: 002b:00007f65a36c4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 113.789453][ T6162] RAX: ffffffffffffffda RBX: 00007f65a36c56c0 RCX: 00007f65a275e98e [ 113.789473][ T6162] RDX: 0000000000000002 RSI: 00007f65a36c4c00 RDI: ffffffffffffff9c [ 113.789489][ T6162] RBP: 00007f65a36c4c00 R08: 0000000000000000 R09: 0000000000000000 [ 113.789504][ T6162] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 113.789519][ T6162] R13: 00007f65a2a26038 R14: 00007f65a2a25fa0 R15: 00007fff19258fa8 [ 113.789547][ T6162] [ 113.789556][ T6162] [ 113.789562][ T6162] Allocated by task 1: [ 113.789573][ T6162] kasan_save_track+0x3e/0x80 [ 113.789599][ T6162] __kasan_kmalloc+0x93/0xb0 [ 113.789623][ T6162] __kmalloc_cache_noprof+0x31c/0x600 [ 113.789647][ T6162] dvb_register_device+0x309/0x1dd0 [ 113.789674][ T6162] dvb_register_frontend+0x603/0x900 [ 113.789698][ T6162] vidtv_bridge_probe+0xab2/0x10e0 [ 113.789734][ T6162] platform_probe+0xf9/0x190 [ 113.789760][ T6162] really_probe+0x254/0xae0 [ 113.789791][ T6162] __driver_probe_device+0x1e8/0x360 [ 113.789820][ T6162] driver_probe_device+0x4f/0x240 [ 113.789851][ T6162] __driver_attach+0x339/0x600 [ 113.789881][ T6162] bus_for_each_dev+0x23b/0x2c0 [ 113.789902][ T6162] bus_add_driver+0x345/0x670 [ 113.789923][ T6162] driver_register+0x23a/0x320 [ 113.789956][ T6162] vidtv_bridge_init+0x3d/0x60 [ 113.789976][ T6162] do_one_initcall+0x250/0x870 [ 113.790005][ T6162] do_initcall_level+0x10a/0x1a0 [ 113.790045][ T6162] do_initcalls+0x59/0xa0 [ 113.790073][ T6162] kernel_init_freeable+0x29d/0x3e0 [ 113.790100][ T6162] kernel_init+0x22/0x1d0 [ 113.790125][ T6162] ret_from_fork+0x514/0xb70 [ 113.790156][ T6162] ret_from_fork_asm+0x1a/0x30 [ 113.790185][ T6162] [ 113.790191][ T6162] Freed by task 6117: [ 113.790202][ T6162] kasan_save_track+0x3e/0x80 [ 113.790226][ T6162] kasan_save_free_info+0x40/0x50 [ 113.790260][ T6162] __kasan_slab_free+0x5c/0x80 [ 113.790285][ T6162] kfree+0x1c5/0x650 [ 113.790318][ T6162] dvb_device_open+0x2b8/0x340 [ 113.790346][ T6162] chrdev_open+0x4d9/0x600 [ 113.790375][ T6162] do_dentry_open+0x80e/0x1360 [ 113.790405][ T6162] vfs_open_consume+0x4a/0x350 [ 113.790434][ T6162] path_openat+0x14a6/0x1da0 [ 113.790460][ T6162] do_file_open+0x23e/0x4a0 [ 113.790483][ T6162] do_sys_openat2+0x115/0x200 [ 113.790515][ T6162] __x64_sys_openat+0x138/0x170 [ 113.790546][ T6162] do_syscall_64+0x166/0x520 [ 113.790564][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.790586][ T6162] [ 113.790592][ T6162] The buggy address belongs to the object at ffff88802ca97c00 [ 113.790592][ T6162] which belongs to the cache kmalloc-256 of size 256 [ 113.790613][ T6162] The buggy address is located 24 bytes inside of [ 113.790613][ T6162] freed 256-byte region [ffff88802ca97c00, ffff88802ca97d00) [ 113.790637][ T6162] [ 113.790643][ T6162] The buggy address belongs to the physical page: [ 113.790665][ T6162] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ca96 [ 113.790686][ T6162] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 113.790705][ T6162] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 113.790737][ T6162] page_type: f5(slab) [ 113.790760][ T6162] raw: 00fff00000000040 ffff88813ff24b40 dead000000000100 dead000000000122 [ 113.790780][ T6162] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 113.790803][ T6162] head: 00fff00000000040 ffff88813ff24b40 dead000000000100 dead000000000122 [ 113.790823][ T6162] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 113.790845][ T6162] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 113.790866][ T6162] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 113.790879][ T6162] page dumped because: kasan: bad access detected [ 113.790897][ T6162] page_owner tracks the page as allocated [ 113.790905][ T6162] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18352697995 [ 113.790943][ T6162] post_alloc_hook+0x1f9/0x250 [ 113.790979][ T6162] get_page_from_freelist+0x2209/0x2280 [ 113.791005][ T6162] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 113.791031][ T6162] allocate_slab+0x7d/0x5e0 [ 113.791070][ T6162] refill_objects+0x2d5/0x350 [ 113.791100][ T6162] __pcs_replace_empty_main+0x2c8/0x6c0 [ 113.791129][ T6162] __kmalloc_cache_noprof+0x396/0x600 [ 113.791152][ T6162] bus_add_driver+0x162/0x670 [ 113.791175][ T6162] driver_register+0x23a/0x320 [ 113.791208][ T6162] usb_register_driver+0x1e4/0x390 [ 113.791233][ T6162] do_one_initcall+0x250/0x870 [ 113.791261][ T6162] do_initcall_level+0x10a/0x1a0 [ 113.791291][ T6162] do_initcalls+0x59/0xa0 [ 113.791319][ T6162] kernel_init_freeable+0x29d/0x3e0 [ 113.791347][ T6162] kernel_init+0x22/0x1d0 [ 113.791373][ T6162] ret_from_fork+0x514/0xb70 [ 113.791404][ T6162] page_owner free stack trace missing [ 113.791413][ T6162] [ 113.791418][ T6162] Memory state around the buggy address: [ 113.791432][ T6162] ffff88802ca97b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 113.791449][ T6162] ffff88802ca97b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 113.791466][ T6162] >ffff88802ca97c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.791479][ T6162] ^ [ 113.791492][ T6162] ffff88802ca97c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 113.791508][ T6162] ffff88802ca97d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 113.791521][ T6162] ================================================================== [ 113.825735][ T6162] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 114.564558][ T6162] CPU: 0 UID: 0 PID: 6162 Comm: syz.2.77 Not tainted syzkaller #0 PREEMPT(full) [ 114.573695][ T6162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 114.583767][ T6162] Call Trace: [ 114.587071][ T6162] [ 114.590020][ T6162] vpanic+0x26f/0x710 [ 114.594060][ T6162] panic+0xc5/0xd0 [ 114.597806][ T6162] ? __pfx_panic+0x10/0x10 [ 114.602243][ T6162] ? preempt_schedule_thunk+0x16/0x40 [ 114.607641][ T6162] ? dvb_device_open+0xc4/0x340 [ 114.612523][ T6162] check_panic_on_warn+0x89/0xb0 [ 114.617499][ T6162] ? dvb_device_open+0xc4/0x340 [ 114.622380][ T6162] end_report+0x73/0x170 [ 114.626649][ T6162] ? dvb_device_open+0xc4/0x340 [ 114.631524][ T6162] kasan_report+0x128/0x150 [ 114.636061][ T6162] ? dvb_device_open+0xc4/0x340 [ 114.640940][ T6162] dvb_device_open+0xc4/0x340 [ 114.645648][ T6162] ? do_raw_spin_unlock+0xf5/0x200 [ 114.650810][ T6162] chrdev_open+0x4d9/0x600 [ 114.655261][ T6162] ? __pfx_chrdev_open+0x10/0x10 [ 114.660220][ T6162] ? devcgroup_check_permission+0x31/0x8f0 [ 114.666050][ T6162] ? __pfx_chrdev_open+0x10/0x10 [ 114.671022][ T6162] do_dentry_open+0x80e/0x1360 [ 114.675821][ T6162] vfs_open_consume+0x4a/0x350 [ 114.680607][ T6162] ? path_openat+0x148a/0x1da0 [ 114.685393][ T6162] path_openat+0x14a6/0x1da0 [ 114.690014][ T6162] do_file_open+0x23e/0x4a0 [ 114.694554][ T6162] ? __pfx_do_file_open+0x10/0x10 [ 114.699616][ T6162] ? _raw_spin_unlock+0x28/0x50 [ 114.704491][ T6162] ? alloc_fd+0x6af/0x760 [ 114.708856][ T6162] do_sys_openat2+0x115/0x200 [ 114.713561][ T6162] ? __pfx_do_sys_openat2+0x10/0x10 [ 114.718796][ T6162] ? __task_pid_nr_ns+0x28/0x470 [ 114.723755][ T6162] __x64_sys_openat+0x138/0x170 [ 114.728639][ T6162] do_syscall_64+0x166/0x520 [ 114.733253][ T6162] ? trace_irq_disable+0x3b/0x140 [ 114.738304][ T6162] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.744392][ T6162] ? clear_bhb_loop+0x70/0xc0 [ 114.749087][ T6162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.754995][ T6162] RIP: 0033:0x7f65a275e98e [ 114.759443][ T6162] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 114.779066][ T6162] RSP: 002b:00007f65a36c4b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 114.787497][ T6162] RAX: ffffffffffffffda RBX: 00007f65a36c56c0 RCX: 00007f65a275e98e [ 114.795487][ T6162] RDX: 0000000000000002 RSI: 00007f65a36c4c00 RDI: ffffffffffffff9c [ 114.803494][ T6162] RBP: 00007f65a36c4c00 R08: 0000000000000000 R09: 0000000000000000 [ 114.811488][ T6162] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 114.819482][ T6162] R13: 00007f65a2a26038 R14: 00007f65a2a25fa0 R15: 00007fff19258fa8 [ 114.827487][ T6162] [ 114.831164][ T6162] Kernel Offset: disabled [ 114.835520][ T6162] Rebooting in 86400 seconds..