last executing test programs: 6m52.911212672s ago: executing program 1 (id=536): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0xfd, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x4, 0x6, 0x8006, 0x0, 0x7, 0x7, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x1, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x10001, 0x5, 0x9, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x1, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0xfffffffd, 0x40], [0x10000007, 0x9, 0x8000016f, 0x8003, 0x5, 0xfffffff3, 0x3, 0x2, 0xf1, 0xe, 0x2c1, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2e, 0xe, 0x312, 0x66abcbd2, 0xea0, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x400006, 0x1, 0x100000ff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x2f61, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x80000000, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x7, 0x86, 0x3, 0x303c, 0xfffffffa, 0x7, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x8, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x400002, 0x80, 0xfffff56b, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0xffff, 0x80a2ed, 0x1, 0x25], [0x9, 0x9, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0x3, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x3, 0xfffff000, 0xffff, 0x3, 0x4, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x1000200, 0xfffffffa, 0xfff]}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x4c5, 0x0, 0x106, 0x800000000001, 0x0, r1, 0x0, 0x300}]) ftruncate(r0, 0xa) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0xfd, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x4, 0x6, 0x8006, 0x0, 0x7, 0x7, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x1, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x10001, 0x5, 0x9, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x1, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0xfffffffd, 0x40], [0x10000007, 0x9, 0x8000016f, 0x8003, 0x5, 0xfffffff3, 0x3, 0x2, 0xf1, 0xe, 0x2c1, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2e, 0xe, 0x312, 0x66abcbd2, 0xea0, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x400006, 0x1, 0x100000ff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x2f61, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x80000000, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x7, 0x86, 0x3, 0x303c, 0xfffffffa, 0x7, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x8, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x400002, 0x80, 0xfffff56b, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0xffff, 0x80a2ed, 0x1, 0x25], [0x9, 0x9, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0x3, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x3, 0xfffff000, 0xffff, 0x3, 0x4, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x1000200, 0xfffffffa, 0xfff]}, 0x45c) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) io_setup(0x7, &(0x7f0000000280)) (async) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x4c5, 0x0, 0x106, 0x800000000001, 0x0, r1, 0x0, 0x300}]) (async) ftruncate(r0, 0xa) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x7, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2}}, 0x0, 0x0}}) (async) 6m52.682362822s ago: executing program 1 (id=539): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="82ce68571fec2418b7a7d56418c8ab4f6b7b709585c7940eae37471115160dbb2dd1821331c190a68612a8e50009de2bfca5449508252edc3fa7625b52cedebba8bc9cf63c1bd6c63adaabcff1746bb0", @ANYBLOB="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"], 0x40}}, 0x90) r1 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000140)={0x10000042, 0x0, 0x2}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = dup3(r2, r5, 0x0) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000040)='`A[\'\xbb\xdf\x99`\x88-+<\x84?)\b\x9c&v\xfa\x93\x10\xc9\x10\x1ad\xef\xd5\r8\x10K\xd8\xb5m\x0f\xcf\xbc&01Ty\x19\xc5\xcb\x11\xa1i\xe6Gqv\xa7\xcf\v\xb3\xb66=\b\x84\xbc\x05\xeb\xd5\xc6\x93y\xd5\xa8\xec\x8a\xd1F\xff\x0e\xbe}\xdaB\x87n{V\xf6t\xb1\xb9\xf4{\xf1\x8e\xd9\xe9\xc7\xbc\x99\x84\x8b\x8c\xa3\r\xc1y\xba\xd4\xf2\xcb0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f00000003c0)=0xe8) quotactl$Q_GETINFO(0xffffffff80000502, &(0x7f0000000440)=@nullb, r3, &(0x7f0000000780)) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x200) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f00000001c0)={0x0}) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$alg(0x26, 0x5, 0x0) sendmsg(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="e0ac8157ef88eb597a07a113292602d381f8365c299f9b7dbc472c4bbef3114fc1af7a100f305565f95cdb27bda8d7ae516dafc1a13a00a8d931a0188ef1d78ef3945b6def257c698563c9ed6c525a30977170e5eaebaa81b9ffed9904f5fc90322ee8e12024472e4f21580869da124cdcebe9bcb7accf218f89bcc4e21bed98f3f028edda3bd15aa47a8adb3c82b22688cd8249cfcb6c5ae422a44ee7f8", 0x9e}], 0x1}, 0x4000000) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c83800100f92a0904000001020900000524060001053408fa6e0d24140100"], 0x0) 6m50.42452973s ago: executing program 1 (id=549): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000100", 0x8) setsockopt(r1, 0x84, 0x81, &(0x7f00000003c0)="1a00000002000100", 0x8) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$9p_rdma(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x800, &(0x7f0000000300)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@timeout}]}}) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010023010000340200000600000008000100", @ANYRES32=0x0, @ANYBLOB="0000000000000000a28db7952b22f40ca847cc68dd1b3f7adabfcb8ae1af0e5b8001b076ca6bb0f38645501fe2379a7aae153025c64ff93e4b96831d96ea29c7363371cda7bb0328aae6ec48f06ac0044dc2c27f08631e593203babba01f1d81c074722640c5891fe51ff8aefa71c31f7f3b1c97608c63e4684785e5b95bcaaf33c95ec47f3ac8ddec3fa8406718f1f1d414cadde1a7"], 0x24}}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000400)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000280)=@sack_info={r5}, &(0x7f00000002c0)=0xc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x48, r9, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BSS_BASIC_RATES={0x5, 0x24, [{0x30, 0x1}]}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x230}]]}, 0x48}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r6, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r11, @ANYBLOB="02"], 0x9) sendmsg$inet(r6, 0x0, 0x20000000) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r6, 0x84, 0x19, &(0x7f0000000100)={r11, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000001dc0)={0x0, 0x4}, &(0x7f0000001e00)=0x8) r12 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r12, &(0x7f0000005ac0)=[{{&(0x7f0000000640)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, &(0x7f0000000d80)=[{&(0x7f0000000680)="c0", 0x1}], 0x1}}, {{&(0x7f00000009c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000f00)="c99c", 0x2}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000003c00)=[{&(0x7f0000000340)="e71697464c90e1312b1c145dbea0ae8520ee751df6ae9b7f6fa1457a73464a78", 0x20}, {&(0x7f0000000540)="3898b5a06f44c5df0ed8a89398c5e48ec8f69b7fa56e510c401971149cf401f61b6189e291b662881ad8141652f284d0672c556c8dad46efe2eda7c1b06455584bd19ea9ab4d6d09d80d0e1b3016", 0x4e}, {&(0x7f0000002a00)="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", 0x1000}, {&(0x7f0000003a00)="9daa8cf43f1b4dd4f989d674a1e8ceb28884492ec7632c439a26b56f81b0c20fe4c214283b715268265ffa15decf1735d087a8ca8b2808e948e3aa989e5e5ab7de68423d175f0d38b042e1f769c69d068152d77922a739e7a4ce2de8a0b0d2d183d0fd96ba60973413854442e0ea69fc0adbda168110071c1e1dc42d986f75bf8de9ac664d2d2e75112072219924441fa3bd08275f011e1c985b12b696fbcc92453587cd1950975d2d32c0ac3f1bf713c06916d019309f54ec79e32e0052d3c820b59e98b8dee98398d63b4a448f9b98b069059df352d7f76d14729329c6a9a0adb11527c2fa725cf648665337b664a60a7a", 0xf2}, {&(0x7f0000003b00)="f8c2e5a7739ecde13fb29cb2a66f8fe99ca93941e079acb032e8335023a79275bf6e7bfb957251abb36de817060632c2123d0437ef761f2cf4d709af2b0f70c8d292659eb805d7511ebbb77f0bba07a80f6c60ea22084cda1e65b95066dae5a6576d4f35b6e18622cc03e1f804dd10013b29245c618c7289b236c9222dac7e7c1680187c50c521f92378e8024b83001a33f5f39ca3c67b711ca0f30721d70f179b42535a9307cb5bc757ddda41c3515cd3996b3bce6b25268dfc32e7df09f834e56189b5bb8a87be329886f005bbcba97477a531ad080c9935499106d658b22242ca146e17ac942ea29d06585a62", 0xee}], 0x5, &(0x7f0000003d40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}, @ip_retopts={{0x78, 0x0, 0x7, {[@rr={0x7, 0x7, 0xc2, [@empty]}, @lsrr={0x83, 0xf, 0x76, [@loopback, @local, @multicast2]}, @timestamp={0x44, 0x1c, 0x4d, 0x0, 0xc, [0x7ff, 0xa7c6529, 0x0, 0x2, 0x8, 0x200000]}, @generic={0x7, 0x10, "0f912690bc9e1863b5dbaece8657"}, @end, @noop, @timestamp_prespec={0x44, 0x24, 0x7f, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@loopback, 0x7}, {@multicast2, 0x5}, {@broadcast, 0xfff}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @empty}}}, @ip_retopts={{0x94, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xb0, [@rand_addr=0x64010102]}, @noop, @cipso={0x86, 0x75, 0xffffffffffffffff, [{0x0, 0xd, "0ff4d67ab23ca6e050b7db"}, {0x5, 0xf, "40c46082c161f680245fe309b8"}, {0x5, 0xf, "c6f9b4fea54019f713ac56b329"}, {0x5, 0xf, "0a9370428b6f42a9f6133252ec"}, {0x1, 0x7, "59e3d8ba0b"}, {0x1, 0x8, "2f81dc5dc8fe"}, {0x6, 0xf, "b4089f271280322610af53bf40"}, {0x2, 0xf, "76eedc7266425951bfd345c54a"}, {0x0, 0x8, "83479e60250a"}]}]}}}, @ip_ttl={{0x14}}, @ip_ttl={{0x14, 0x0, 0x2, 0xffffffff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x99}}], 0x198}}, {{&(0x7f0000003f00)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000005480)=[{&(0x7f0000003f40)="82341d5e7d4db6c1acc7d85429b3bd1f95820860df9316823e8424e5362f0545dc740aa977c1ad3c95dbc6dd0dc2bc2122ba17a0c5dc3fbe0cc381adae62f1d9d8e495c5d41af78ee91031eee5ca3671d1a32e3a89714cbe1c03fcf851c2534123a4126e3bac940c10509c8187b1de95fa61bcf2cb093046562751152e0c3cab5b3eb361caa0b64544dda32fb15bf61a678a3bb89c7ddcc0b8d4b0cc6be5752e347129f1d7b766fc81df126575c799f9cd72f881a33b85a1effc", 0xba}, {&(0x7f0000004000)="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", 0x1000}, {&(0x7f0000005000)="77500bac2c0532073d09d7e33a805ad3d0eafd8c97e5", 0x16}, {&(0x7f0000005040)="cbb8757959badd6738f98bb259f1ffc3d302c4f5d8cb6a1ae48a779ac8655db32a07cd03541807f811fa60ef29779bcc3ca7de96cc6ee7681f44523d7d428c4aa0a9be4f3c3e792c3243e5e618d6169f4c9ef1c965ebe1d1dbd5aaa644e1e42e2ff78f2c50505c9cc3af777bdd8a05c4407754422752975a94e94b0ca03d0693d57bd53f9595d19c523b4293f60f11b7e7149cbab173170394e63f41d91e664b7d1658f73ddcd35d5a7ea07aa965c5cc906178c313b5fec76d632e6d2e8e9cf17fbf677ef6f4672182349f558311c92df5818ce77999d5919e3cab0a148a4e4c387b1687456ae36c13c07055", 0xec}, {&(0x7f0000005140)="6eff9d1f674f2212184a58d4ead48d8cb4583df5b6e13d5d621c091c5a29ebb166271a5f3c0ef2b755c09d056eebf3f3a76ca0ee7c711ec1fe5c65a9892034f73e22e07eceaa98c1812ebc9b799444f2a1e4de5363dbb0973507369ed2817e55059b07834f0cf4cd48b7161b4a22eb0e34cdbe8aecb96f8e83663fdeb142b163bf53d4da7eb64264fcebc66dc9b507b51bbd48594f7e37be02", 0x99}, {&(0x7f0000005200)="e772f8ac93ecc2cb4a65803eca9474a398f127b0e5fc313a2dc8e7e6ef3db225019d8e0a61a43b1b7a63249eb286ab2d126813f2c2b3a4f82353f7b65aa47e8c0be91581e5684280eb6830884a4095bb1a365889bce3a47b7856bdf0e9635f5435cd971c3b82909cc50ba5c72a7214c6e1e1ebd35fbde1186c9c0cbf32c43390d7fdf4df3a6f128458706d3a0020553d9fd18f223e1adc6a8e09601ea1018e40e9e6a4bdd060045e", 0xa8}, {&(0x7f00000052c0)="4b60288fb2ef5dd15c54daa601e08ec110128ddae8a1ac9c82fc79c818d3bdae80823294cd8366606b21be1181dc0aea5b064242c8743b22aee23691b462b8238a730edddaa6179f648ec620d72e96be3a76f64cb5964150d3f1c39bdf26bd659fde47d0b02529fe424d3cab110888deac710d7a5abb6f07c7fc83edfaa019a9b8c1c4e8596ae382bd3a5834686bcbbfc06261fe270b9c6dd8333908e71f75ea524b44f08b2d49f0a8", 0xa9}, {&(0x7f0000005380)="81158139cdda868328b22a471070d1805f2deb6ec185d0a2a12e5433e29951db88daa1df0222a9138e7047a7b763c036a42c229bd42d95f2a1be6599e65f", 0x3e}, {&(0x7f00000053c0)="7b4dd88fbc35bfabc1b19bbd17bfa6c3e428def2bddead99547334f1f64b768ba4cac0155e2099e4edc8f63f5bf2f90d5002a0da5a6b61c4bd2f3850da3a6e7efa111b109d8b4feff76e18c6923b1d4e8fcfc13f1ca447b1b4672ec91b82250e26817921e6d8b767fada0ede866e44ef81c7583f693292c54ada33f2b8d016ffbad7559aa615e5a232a47f04de55c0fa1e", 0x91}], 0x9, &(0x7f0000005540)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x18}}, {{&(0x7f0000005580)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000005a00)=[{&(0x7f00000055c0)="4741100e33b31fae30bcac28cfc8dc125189957b9358655633edd0", 0x1b}, {&(0x7f0000005600)="fd25f58495192d88e695bf03614e2a1b1adada2c0ca20bae2714d25dff38f5a33ebc5f9587d56c56ebfe409189cdd625f784396a6b07b959f824d8f679ac22fe8ad4e67f4fa17ac2faabd523cf51f0d9e1193a58a0bc3b1f19a218c8551c32e366eb90707387e83b974991ea8873e77ac6d89b56fd3c0b66aa5dc2d39e8dfb38c2b10f73c0edbec7ef674c1b30f3c9efc0879156e16fa6ab57f0ee6341abe431985925fe2a1fe184ebd0ccd94a758ba6c4cc3662b82c6f257d43d76bcc441b3471e65d306b80e9eabd6858d8cc3ae26908920fa0c2efd6", 0xd7}, {&(0x7f0000005700)="585c69a7509dff9f", 0x8}, {&(0x7f0000005740)="266f7092d79a1c3bfcdb48b03b7fd50831e5624adde9a6b2f8dd65092de6434c315bba16caf51235a0701201fc6743c1402b3511c5423011dca9e68b21a1d7b0fa9dacc7d1cd9421e7925f87c07a99eebb3ed821abbfa2f388f4e2c1655c6ca373eed8cee377243a6a384f477b7d3de18d22", 0x72}, {&(0x7f00000057c0)="78afa9527aa3042829ab29201b680a87649e98f7bd60379ace2ac14e0fc2dd764cb3939b0157c16e90ff1633e138884531f06991", 0x34}, {&(0x7f0000005800)="5c976e6e987f3914c8f60951ef9f8aa05b44a91687328bd436e2ab41ee4438a5cc4a1b4aa1ab854eace62bf9e45a796fbb0c9254b23abf281e1d31d62d09d864aa37376adaffe3fbd978f6631c2adad82059a2dcdf3e666dc7487400b05805052e6971e3973496f20bf980f4f264d623be1a05434d206729a21c53d945bd28403d1f9f13623015926c649c271b42a2b681004699813b493167eca6b83aa1", 0x9e}, {&(0x7f00000058c0)="5d3692bed451bc6ffe", 0x9}, {&(0x7f0000005900)="802d7ace028aa7216e5d8752676bcbc250d1f413eef1e837cc532f02d047e3264135753dff13570e1609260338dafed36e957ddf55354e35cf437ddce563d78d9bfc1d963056002ea4fbc11e08d6816ac0f9dbfbd8fb06d08dd95c613bab9c8b90ba8f85dce60fe85b79e5e9ebc65a41c980a4dbb3e46651a64c2decfe37c874d2aa24353cbda233dd42cfdf966e9ee15f21520a1109cf5f18e51deaf1bcbfd166cb8a731ef82529a1ef4b47f5a8e92d0bea6169773a11828b95565b2a891fe4e2f05e2a", 0xc4}], 0x8, &(0x7f0000005a80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xcf}}], 0x30}}], 0x5, 0x2404c000) getsockopt$inet_sctp_SCTP_MAX_BURST(r12, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, &(0x7f0000000380)={0xfbff, 0x0, 0x5, 0x3, r13}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f00000028c0)={0x0, @in6={{0xa, 0x4e20, 0x401, @local, 0x9}}, [0x6, 0x8, 0x0, 0x100000000, 0x9, 0xe5, 0x4, 0x8, 0xaa5e940, 0x8, 0xffffffff, 0x100000001, 0x7fffffff, 0x6, 0x8400]}, &(0x7f00000029c0)=0x100) 6m46.461699583s ago: executing program 1 (id=564): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group_i']) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c5393120", 0xab}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f90753"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd09118", 0x77}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea", 0x26}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f", 0x7e}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x10000, 0x2, 0x8000000, 0x2000, &(0x7f0000001000/0x2000)=nil}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r3) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6m46.264147569s ago: executing program 32 (id=564): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049", @ANYRESHEX, @ANYRESDEC=0x0, @ANYBLOB=',group_i']) syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c5393120", 0xab}], 0x1, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f90753"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd09118", 0x77}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea", 0x26}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f", 0x7e}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7", 0xcb}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000340)={0x10000, 0x2, 0x8000000, 0x2000, &(0x7f0000001000/0x2000)=nil}) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280), r3) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m22.091708675s ago: executing program 2 (id=1823): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044}, 0x200408c4) shutdown(0xffffffffffffffff, 0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000002c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0x0, 0x0, 0x4d}}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r5, &(0x7f0000000040), 0xe09) 2m21.760193305s ago: executing program 2 (id=1824): unshare(0x2040400) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x10800, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f00000062c0), r0) sendmsg$NFC_CMD_LLC_SDREQ(r0, &(0x7f0000006600)={0x0, 0x0, &(0x7f00000065c0)={&(0x7f0000006400)={0x1c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48c0}, 0x4800) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x3, 0x0, 0x5, 0xfb, 0x5, 0xec, 0xff, 0x83, 0x84, 0x8, 0x7}, 0xe) sendto$inet6(r3, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r3, 0x1) recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x20, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r4, 0x10001, 0x0) 2m20.800892061s ago: executing program 2 (id=1828): r0 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x3, 0x8, {0xffffffffffffffff}, {0xee01}, 0xffffffffffffff1d, 0x9}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000080)={{{@in6=@mcast2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) r3 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fstat(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000002380)={{}, {0x1, 0x4}, [{0x2, 0x0, r1}, {0x2, 0x0, r2}], {0x4, 0x2}, [{0x8, 0x4, r3}, {0x8, 0x3, r5}, {0x8, 0x2, 0xee00}, {0x8, 0x2, r6}, {0x8, 0x2, r7}, {0x8, 0x0, r9}], {0x10, 0x1}, {0x20, 0x3}}, 0x64, 0x1) r10 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000002400), 0x400040, 0x0) r11 = openat$uhid(0xffffffffffffff9c, &(0x7f0000002440), 0x802, 0x0) write$UHID_CREATE2(r11, &(0x7f0000002480)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0xaf, 0x6502, 0x10001, 0x7, 0x1, 0xc, "30c644bc692002c1b5975ef15cccc82367cff101ec3d0e06d6cd6cc6f0adc3f388a17d17011391abd1ed3cdbc4525eb53b86acffbce04806195ac9ac54d8f2eb07e55176a80f56d9158a72dee722b25b563cbf0942103ae2125fec284656499e3d02dc3ea8c8a7688f437d8f40fbd86690e79cd876dece15de3a5d0f9ebb1fab7b046604c743e88c07bc85cb901a1373064fde781195646a5cc4d5b94a32b5508c7133a6b29c74f7c8d62a64c88fc3"}}, 0x1c7) r12 = syz_open_dev$loop(&(0x7f0000002680), 0x1, 0x101000) ioctl$LOOP_CHANGE_FD(r12, 0x4c06, r11) r13 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r13, 0x112, 0xd, &(0x7f00000026c0)=0x81, &(0x7f0000002700)=0x2) ioctl$BTRFS_IOC_WAIT_SYNC(r10, 0x40089416, &(0x7f0000002740)) r14 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBMODE(r14, 0x4b45, &(0x7f0000002780)=0x2) syz_usb_control_io$uac3(0xffffffffffffffff, &(0x7f0000002940)={0x14, &(0x7f00000027c0)={0x40, 0x2, 0x7e, {0x7e, 0x10, "6e59aca9700ab3063a794820cb77e9a3e650c2438a03539558254b6e9b3e9ccec82800eb2fd5a4b01d690dc5354bfe4d3d83bca77f32950878bf47a990fd6010b710eb1031e4395e72665741db1bbc60cee0d5844884ee2e5a6fe194bd8598e260b13c36de4eee2d78696b1311d1014f6e9d42e498ecf2341bca2883"}}, &(0x7f0000002880)={0x0, 0x3, 0x7b, @string={0x7b, 0x3, "11a26756bd8975271d34239f78293a15113908aa84e2c7ad0ddc3b7de363b7fa31191d68de1ad65cdd97514038229e993a8cdcd3a3c113728fb30184176914742644fc6da82b5ec3529f458b98b0014494d70ef4e457904370405ce706099a12157feee51dee4deb0ffff70b5cf19e7157209eba78845e10e0"}}}, &(0x7f0000002c40)={0x44, &(0x7f0000002980)={0x40, 0x13, 0xdc, "6ad830228d0f17b42cb4e32379dd9b3caba2b93b74733b049b96fca17173504710fe78270d23339d8d2a95f12352ffc7a69c5a77139c03b8c43eea47af2f21afad0a8b50f37a7e3a3cd40a6ea04bb890381b52ae5d5a35e569b5a6d3c08c2ed564d769c6bbaa47f877ca8363978d1b0df86f89a34e2571bd2995c5e7e1229ac830dde471911326242c683eea08f83d5a62eb05eb4a02dad538d8d030e483afeae68ff1f5684239692f4815458d24b8bd92e8f14201ae040ddbe9cbefdd6844d767c50f03aac95b42cddd04e971aa84ce7abd079925e579fcc05a479b"}, &(0x7f0000002a80)={0x0, 0xa, 0x1, 0xe}, &(0x7f0000002ac0)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000002b00)={0x20, 0x81, 0x1, "ce"}, &(0x7f0000002b40)={0x20, 0x82, 0x2, "aa8f"}, &(0x7f0000002b80)={0x20, 0x83, 0x3, "68b11f"}, &(0x7f0000002bc0)={0x20, 0x84, 0x2, "e4f3"}, &(0x7f0000002c00)={0x20, 0x85, 0x3, "6914d3"}}) write$UHID_INPUT2(r11, &(0x7f0000002cc0)={0xc, {0xba, "c69fa701b48dda744de3211cff2f0b604fe1b76633367d8d8cbedc136d78ee90e24586abd418930b67dd5fe57c27f1e625ba268f2a8150bcc3b2d2a082a89580b3dfabffbfcbb2637379d543d9cbb977e95dc4dfc32d8922d861fa4615c09fca6e936d32cb2a617d4fd99923bffbad516c6613b8a340f0258d028f7436dc3c544f1cec319cccc84246c665be3ba319ad54796871dd45567086b2eddb1cc9e0844c23db12e536fb540453d2af547c782bb088ca5a79f231ed93e7"}}, 0xc0) ioctl$LOOP_GET_STATUS64(r12, 0x4c05, &(0x7f0000002d80)) mount$tmpfs(0x0, &(0x7f0000002e80)='./file0\x00', &(0x7f0000002ec0), 0x1000, &(0x7f0000002f00)={[{@usrquota}, {@inode32}], [{@dont_appraise}, {@subj_user={'subj_user', 0x3d, ',-+:/$\\$'}}, {@pcr={'pcr', 0x3d, 0x2a}}, {@fowner_lt={'fowner<', r8}}]}) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000002f80)={0x0, 0x0, 0x0}, &(0x7f0000002fc0)=0xc) ioctl$FIONREAD(r14, 0x541b, &(0x7f0000003000)) setresgid(r5, r16, r3) syz_open_procfs(r4, &(0x7f0000003040)='net/bnep\x00') quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, r15, &(0x7f0000003080)={0xe, 0x100000001, 0x7, 0x2, 0x0, 0x6, 0x5, 0x0, 0xb3}) syz_usb_control_io$sierra_net(0xffffffffffffffff, &(0x7f0000003280)={0x14, &(0x7f0000003140)={0x0, 0x2, 0xd6, {0xd6, 0xb3995ba135459382, "f15259a1932f7585d6d2d1f903b409ead0163ca0c3e2426c4f33700b0f020fc2d138d6746b684d6c73edb7f0d15979d9e30aae282bb144b66a8ff3eba80372458b9a8aa09a93481c1a91f076e5d616e168334a32c06b6c5fd7877e27770fa6f2b1bbd88a0c0a136cd30e793c4d858b853baec61f8bc6d37b7b64a50f1a4454cf4013e5749419555e27424aa2eb4e17603a367ce144d3bf6e09e44a15abbbc6e3ba177b2cf4f5059ce33fb40d6f43514b5368ab9c50b1841753135ea37aac92ccdaf7232ff5a70b12eb0997e6d7efcc99f895862f"}}, &(0x7f0000003240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x707b}}}, &(0x7f0000003840)={0x1c, &(0x7f00000032c0)={0x40, 0xf, 0xbf, "df69c92b62a2790f24a0d93dd533609a50f8348b8da285a857a8e7823e21ba0cdda0252772a0a807bb23bac54e75204b3b46760187e9d5cb8cdac1e1dfd1ffd5947e754c46113bdf58f92a872e4407244e7c26b4f629b562bd71753afeff862c058845f5cd0bf278a650c446de3c5191f83eb02c1211078313be4b50fd839f7c6bbee572994564f9558d368371793d4a4ee2f174a0bc946c26d8cb4f3b7a35aeb9f1ffd173d5c8e446ed133e624ca917231f1a886e8b361444fbfea21328d6"}, &(0x7f00000033c0)={0xa1, 0x1, 0x400, "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"}, &(0x7f0000003800)={0x21, 0x0, 0x1, '7'}}) 2m20.223751217s ago: executing program 2 (id=1831): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00008000020002"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r1 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) write$FUSE_CREATE_OPEN(r1, &(0x7f00000045c0)={0xa0, 0x0, 0x0, {{0x1, 0x2, 0x8444, 0x9, 0x0, 0xf, {0x3, 0xffffffffffffffb9, 0x7, 0x3bc, 0x1, 0x4, 0x4, 0x5, 0x5, 0x4000, 0x5, 0x0, 0x0, 0x2, 0x9}}, {0x0, 0x19}}}, 0xa0) r2 = gettid() r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) kcmp(r2, r2, 0x0, 0xffffffffffffffff, r3) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ptrace(0x10, r5) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) renameat2(r6, &(0x7f00000001c0)='./file0\x00', r6, 0x0, 0x4) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000000180)={0x3, @sdr={0x31324d59, 0x208}}) r7 = gettid() ioctl$VIDIOC_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000080)={0x0, @bt={0x6, 0x100, 0x0, 0x1, 0x6, 0x7fff, 0x8, 0x1, 0x5, 0x3, 0x103b, 0x1ff, 0x6, 0x961, 0x4, 0x48, {0x8, 0x6}, 0xd, 0x5}}) setpgid(r5, r7) setpgid(0x0, r4) ioprio_get$pid(0x1, r4) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) 2m18.727079809s ago: executing program 2 (id=1841): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000280)={0x0, 0x0, 0x4, "48d7e852"}, 0x0, 0x0, 0x0, 0x0}) r1 = fsopen(&(0x7f0000000180)='gfs2meta\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040), 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x8000, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000740)={0x7, 0x2, &(0x7f0000000640)=[0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0]}) r3 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r4 = dup(r3) write$binfmt_elf32(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="7f454c464a030103ff0700000000000002000600000000003e03000038040000d600000097700000fe0320"], 0x58) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f00000004c0)={[{0xd144, 0xb6, 0x7, 0x9a, 0x4, 0x8, 0x8, 0x8, 0x9, 0x4, 0x3, 0x4a, 0x4}, {0x1, 0x8, 0x0, 0xff, 0x6, 0x9, 0x2, 0x0, 0xd, 0x9b, 0x9, 0x18, 0x2}, {0x1, 0x8000, 0x40, 0x5, 0x4, 0x8, 0xf8, 0x1, 0x6, 0x2, 0x7, 0x3, 0x8000000000000000}], 0x8}) (async) syz_usb_control_io$uac2(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="000de3"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r0, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x40, 0xc, 0x82, {0x82, 0x11, "e8957555efc4ddb73b23d6de0ef524274115c3fc74cbb851d68612c5c2a67818d9e3e1ccecda50b76ed318efce598e099ec0b33a359f3c261f777df5272872da05ece854f98fa7a465e3ebf92bc27f54eaf8edcb0e25b62fb1cbad722b97bb0ebfe98a5955a7b5adcba8ffba383db3a87a555f56f4a13a38adb25d7857f839a1"}}, &(0x7f00000000c0)={0x0, 0x3, 0x50, @string={0x9f, 0x3, "97c36f660ff8259db9d3dd582808dd4214a68d8bcba04c1b7d31d4263743c8106ad42441ac337d96ebb0b7139eacdabd46b47fa74895bec863ab368c8c22b15c54bd1ee95081ff9b8712e0bae9147b9dc14b22e22e1643116839089775469397576b3afc17276cb29dbce81c17a6574a08e4fe7a3fe1e0cde3ef87676104ac9a0c186d1d9a421336d9ac75d38c2a7f986b15e5f8b502a6c7da5f055520"}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x0, 0xf, 0x35, "dc8e0b42f237119437d5362e6d0dfffa3a97287bd7e4657da7c1e9f15942e94c0beada96be4b11568887da925a044e407f3618c41c"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x7f}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0xe}, &(0x7f0000000300)=ANY=[@ANYBLOB="200502000000701b"], &(0x7f0000000340)={0x20, 0x82, 0x2, "bc81"}, &(0x7f0000000580)=ANY=[@ANYBLOB="200384810000cabd1547a74b46144188d869acfea9bd4878"], &(0x7f00000003c0)={0x20, 0x84, 0x1, '*'}, &(0x7f0000000400)={0x20, 0x85, 0x3, "5b9d46"}}) 2m17.76757974s ago: executing program 2 (id=1847): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'syzkaller1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x20000020) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000180)) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f00000001c0)={'binder0\x00'}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000300)=0x2) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5421, &(0x7f00000003c0)=0x4c4) io_setup(0x7, &(0x7f0000000400)=0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) io_cancel(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x2, r0, &(0x7f0000000440)="f821a85207d7ac388c58c3321599fb36025f94b1f3a1bbf62a36a6adcb8e02566330b7016b3febc8c765136af0c5", 0x2e, 0x2a81, 0x0, 0x1, r5}, &(0x7f0000000500)) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x4000800) r6 = fcntl$getown(r0, 0x9) r7 = getpid() kcmp(r6, r7, 0x3, r3, r5) mount_setattr(r0, &(0x7f0000000680)='./file0\x00', 0x800, &(0x7f00000006c0)={0x4, 0x1000fa, 0x0, {r5}}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x10, 0x40, 0x9, 0x300000, {{0x15, 0x4, 0x1, 0x29, 0x54, 0x67, 0x0, 0x3, 0x50, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0x7, 0xd7, [@loopback]}, @cipso={0x86, 0xc, 0x2, [{0x7, 0x6, "25d55261"}]}, @end, @rr={0x7, 0xf, 0x3e, [@broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0xc, 0x77, 0x1, 0x0, [{@loopback, 0x4f}]}, @ssrr={0x89, 0xf, 0x64, [@rand_addr=0x64010101, @remote, @dev={0xac, 0x14, 0x14, 0x2b}]}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000007c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @remote, 0x101, 0x552, 0x5a, 0x400, 0x2, 0x1, r8}) ioctl$XFS_IOC_GETBMAPA(r3, 0xc020582c, &(0x7f0000000840)={0xc73, 0x2, 0x2, 0x7, 0x8eb}) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x28) pipe2(&(0x7f0000000880)={0xffffffffffffffff}, 0x80800) io_cancel(r4, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f00000008c0)="2fe3ddc56d7358d7a7680da63fe3da8de38ed7b75945485e1233d0ddc266107a5f8e01fbcf1d0c30bd601d8f1c695f1704649ba14c839f68fe9f23ee36564a8c9daae2b090750dfbb3e73f5d4fba60e0a546931a6c02e1853ec3149d644ebe6db07d885e146a44ea72d53469574f2672c9a20a105836d4a114a2c1e4679caf61836d44e8b84d3fee0881342a337718db7fb63f90216aeca027a1bed4ee65997d4c263dd658f54476247c98aac0fd5a639ba4", 0xb2, 0x728, 0x0, 0x1, r5}, &(0x7f00000009c0)) sendmsg$nl_netfilter(r9, &(0x7f0000001c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000a40)={0x1168, 0xf, 0x9, 0x5, 0x70bd2a, 0x25dfdbfb, {0x5, 0x0, 0x5}, [@nested={0x1137, 0x3f, 0x0, 0x1, [@typed={0x6d, 0xb2, 0x0, 0x0, @binary="a8f6a6a4ff31a6f0c1d04ebdc54c06c1e9b3b04a3e5b486eaea740f632a7db9eedbbed715c26f0a7bc0148e11d3ca7fbbaaf497c7492fc558b68595ee4dbfa1292f8debc3b957b166b2f7dcf1abd734a9e572548a62df0c1f902aead854fbca2eaf3eea2c223613830"}, @generic="7ec08896c5deca9a39c693274fe18278d496b1e5badfe4cb37cdabd425802f4e2d57b21172a25474cd9e90c45f096f1324e763af5fb2fc43ffc05a3f295bf6e3bf68cdd2ac383916dac4dade1fa932b555ac9dc7ee028bda4c5337cb050135ebdf", @nested={0x4, 0x8e}, @typed={0x8, 0x4d, 0x0, 0x0, @fd=r5}, @generic="b78218ce7a0cbecd9e1a29f8993922c5db5bb347b3a402bd2b16c7a79b06e942451ad020ef985dfcc896ed069c113c94e4758f707a56ae13ec8276a8618bb9645a2e4649038efd4efce5236f01cb7eb313f591da86c6", @generic="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"]}, @typed={0x14, 0x50, 0x0, 0x0, @ipv6=@local}, @generic="4e6e37356af28208"]}, 0x1168}, 0x1, 0x0, 0x0, 0x4004880}, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000001c40)) r10 = fcntl$dupfd(r5, 0x406, r5) write$bt_hci(r9, &(0x7f0000001c80)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc9, 0x80}}}, 0x7) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000001cc0)={0x4, 0x0, [{0x803, 0x0, 0x9}, {0xa8c, 0x0, 0x6}, {0x2b5, 0x0, 0x1000}, {0x40000994, 0x0, 0xbfe}]}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20800}, 0x8000) 2m17.426382523s ago: executing program 33 (id=1847): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {{}, {}, {0x14, 0x13, @l2={'ib', 0x3a, 'syzkaller1\x00'}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4004}, 0x20000020) r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder-control\x00', 0x0, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000180)) ioctl$LOOP_SET_CAPACITY(r0, 0x4c07) ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f00000001c0)={'binder0\x00'}) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000300)=0x2) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5421, &(0x7f00000003c0)=0x4c4) io_setup(0x7, &(0x7f0000000400)=0x0) r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) io_cancel(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x2, r0, &(0x7f0000000440)="f821a85207d7ac388c58c3321599fb36025f94b1f3a1bbf62a36a6adcb8e02566330b7016b3febc8c765136af0c5", 0x2e, 0x2a81, 0x0, 0x1, r5}, &(0x7f0000000500)) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x50}, 0x4000800) r6 = fcntl$getown(r0, 0x9) r7 = getpid() kcmp(r6, r7, 0x3, r3, r5) mount_setattr(r0, &(0x7f0000000680)='./file0\x00', 0x800, &(0x7f00000006c0)={0x4, 0x1000fa, 0x0, {r5}}, 0x20) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000780)={'syztnl1\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x10, 0x40, 0x9, 0x300000, {{0x15, 0x4, 0x1, 0x29, 0x54, 0x67, 0x0, 0x3, 0x50, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0x7, 0xd7, [@loopback]}, @cipso={0x86, 0xc, 0x2, [{0x7, 0x6, "25d55261"}]}, @end, @rr={0x7, 0xf, 0x3e, [@broadcast, @local, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0xc, 0x77, 0x1, 0x0, [{@loopback, 0x4f}]}, @ssrr={0x89, 0xf, 0x64, [@rand_addr=0x64010101, @remote, @dev={0xac, 0x14, 0x14, 0x2b}]}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000007c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @remote, 0x101, 0x552, 0x5a, 0x400, 0x2, 0x1, r8}) ioctl$XFS_IOC_GETBMAPA(r3, 0xc020582c, &(0x7f0000000840)={0xc73, 0x2, 0x2, 0x7, 0x8eb}) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x28) pipe2(&(0x7f0000000880)={0xffffffffffffffff}, 0x80800) io_cancel(r4, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f00000008c0)="2fe3ddc56d7358d7a7680da63fe3da8de38ed7b75945485e1233d0ddc266107a5f8e01fbcf1d0c30bd601d8f1c695f1704649ba14c839f68fe9f23ee36564a8c9daae2b090750dfbb3e73f5d4fba60e0a546931a6c02e1853ec3149d644ebe6db07d885e146a44ea72d53469574f2672c9a20a105836d4a114a2c1e4679caf61836d44e8b84d3fee0881342a337718db7fb63f90216aeca027a1bed4ee65997d4c263dd658f54476247c98aac0fd5a639ba4", 0xb2, 0x728, 0x0, 0x1, r5}, &(0x7f00000009c0)) sendmsg$nl_netfilter(r9, &(0x7f0000001c00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000a40)={0x1168, 0xf, 0x9, 0x5, 0x70bd2a, 0x25dfdbfb, {0x5, 0x0, 0x5}, [@nested={0x1137, 0x3f, 0x0, 0x1, [@typed={0x6d, 0xb2, 0x0, 0x0, @binary="a8f6a6a4ff31a6f0c1d04ebdc54c06c1e9b3b04a3e5b486eaea740f632a7db9eedbbed715c26f0a7bc0148e11d3ca7fbbaaf497c7492fc558b68595ee4dbfa1292f8debc3b957b166b2f7dcf1abd734a9e572548a62df0c1f902aead854fbca2eaf3eea2c223613830"}, @generic="7ec08896c5deca9a39c693274fe18278d496b1e5badfe4cb37cdabd425802f4e2d57b21172a25474cd9e90c45f096f1324e763af5fb2fc43ffc05a3f295bf6e3bf68cdd2ac383916dac4dade1fa932b555ac9dc7ee028bda4c5337cb050135ebdf", @nested={0x4, 0x8e}, @typed={0x8, 0x4d, 0x0, 0x0, @fd=r5}, @generic="b78218ce7a0cbecd9e1a29f8993922c5db5bb347b3a402bd2b16c7a79b06e942451ad020ef985dfcc896ed069c113c94e4758f707a56ae13ec8276a8618bb9645a2e4649038efd4efce5236f01cb7eb313f591da86c6", @generic="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"]}, @typed={0x14, 0x50, 0x0, 0x0, @ipv6=@local}, @generic="4e6e37356af28208"]}, 0x1168}, 0x1, 0x0, 0x0, 0x4004880}, 0x4) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000001c40)) r10 = fcntl$dupfd(r5, 0x406, r5) write$bt_hci(r9, &(0x7f0000001c80)={0x1, @read_remote_ext_features={{0x41c, 0x3}, {0xc9, 0x80}}}, 0x7) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000001cc0)={0x4, 0x0, [{0x803, 0x0, 0x9}, {0xa8c, 0x0, 0x6}, {0x2b5, 0x0, 0x1000}, {0x40000994, 0x0, 0xbfe}]}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r5, &(0x7f0000001e80)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x1c, 0x0, 0x10, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0x8}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20800}, 0x8000) 53.531639298s ago: executing program 5 (id=2255): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000040)) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f00000000c0), 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r4, 0x80044d0a, &(0x7f0000000340)) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) sendmmsg$inet(r5, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3400000000000000000000000700000001240d"], 0x38}}], 0x1, 0x46000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x2, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xfef4, 0x800, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) syz_clone(0x24304000, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000080)=0x8) 52.31522914s ago: executing program 5 (id=2261): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000c40)=ANY=[@ANYBLOB]) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 52.21686678s ago: executing program 5 (id=2262): r0 = shmget$private(0x0, 0x4000, 0x54000000, &(0x7f0000ffc000/0x4000)=nil) ioctl$KVM_SET_SREGS2(0xffffffffffffffff, 0x4140aecd, &(0x7f0000000240)={{0x200000, 0x100000, 0x4, 0x1, 0x5, 0xbd, 0x1, 0x6, 0xe0, 0xa1, 0x6, 0x3}, {0x10000, 0xffff1000, 0xa, 0x6, 0x6, 0x3, 0x40, 0x0, 0x0, 0x42, 0x4}, {0x200000, 0xeeee8000, 0xc, 0x0, 0x6d, 0x6, 0x5, 0x40, 0x5, 0x8, 0x7, 0x81}, {0xfffa9000, 0x30000, 0xc, 0x0, 0x2, 0xbe, 0x2, 0xd, 0xfe, 0xb, 0x5, 0xdb}, {0x240002, 0x54000, 0x0, 0x6, 0xc3, 0x3, 0x6, 0x8, 0xf, 0xc, 0x1, 0x4}, {0x54000, 0x52000, 0x7, 0x1d, 0x8, 0x6, 0x7, 0x8, 0x40, 0x5e, 0x6, 0x4}, {0x40000, 0x6000, 0x8, 0x8, 0x54, 0x9, 0x4, 0xa, 0x5, 0x9, 0x81, 0xf1}, {0xeeee2000, 0x7000, 0xb, 0x9f, 0x8, 0x1, 0xd1, 0xf8, 0xcd, 0x3b, 0x7f, 0x8}, {0xdddd1000, 0x8}, {0x54000, 0x800}, 0x80010010, 0x0, 0x9000, 0x40012, 0x8, 0x2100, 0xc000, 0x0, [0x5, 0x1, 0x8000000000000001, 0x7fffffffffffffff]}) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) r1 = socket$inet6(0xa, 0x80003, 0xa) setsockopt$inet6_buf(r1, 0x29, 0x32, &(0x7f0000001100)="3814da1ff9ba5b40fbd82f2348e4025c179d045a", 0x14) connect$inet6(r1, &(0x7f00000011c0)={0xa, 0x4e20, 0x7, @private1}, 0x1c) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xcea406995a17c702) shmctl$SHM_LOCK(r0, 0xb) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x103000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0}) 51.77616228s ago: executing program 5 (id=2264): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140083931a9815000000000899410000"], 0x14}], 0x1}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010ac054402000000002d7b0902240001000000000904000000030002"], 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140083931a9815000000000899410000"], 0x14}], 0x1}, 0x8000) (async) 50.260956152s ago: executing program 5 (id=2268): syz_usb_connect$uac3(0x3, 0x8a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x2a39, 0x3f8c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x3, 0x1, 0x37, 0x20, 0x1c, {0x8, 0xb, 0x2, 0x0, 0x1, 0x1, 0x30, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xa, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xe, 0x458, 0x0, 0xc}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xb, 0x9, 0x8, {0xa, 0x25, 0x25, 0x2460000, 0xe5, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xf0, 0xa, 0x9, {0xa, 0x25, 0x25, 0x6, 0xb, 0x99}}}}}}}}]}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x3, 0xff) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, 0x0, 0x0) lseek(r3, 0x4, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r3, 0x40045402, &(0x7f00000001c0)) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x50000, 0x0) fcntl$dupfd(r2, 0x0, r4) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x10000, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1000000, 0x0, 0x6000, 0x0, r5, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000803, r5, &(0x7f0000000100)={0x4000000000000, 0x8, 0x1, 0x7f, 0x798, 0x56af, 0x1, 0x6285, 0x6}) sendmmsg$inet(r1, &(0x7f0000000800)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000020000ce047ee60000008606000000000000"], 0x18}}], 0x1, 0x20044000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xc211, 0x1) faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) writev(r7, &(0x7f00000006c0)=[{&(0x7f0000000700)="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", 0x69e}], 0x1) ioctl$NILFS_IOCTL_GET_CPSTAT(r3, 0x80186e83, &(0x7f0000000340)) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x301, 0x0, 0x0, {0x3}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x4000) 46.853798868s ago: executing program 5 (id=2274): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x80000004}], 0x1, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f0000000000)=0xfffffffd, 0x4) sendto$inet(r6, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) recvfrom$inet(r6, 0x0, 0x0, 0x2042, 0x0, 0x0) ioctl$SIOCGSTAMP(r6, 0x8906, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x40, r9, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x96c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x94, r4, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x80000000, 0x11}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x80}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xf000}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4b, 0xac, "3039bf791b0e0c70d7cee5de86f3d4cfb53b5756a4a90663dcd0b2380d5364377ee0610e4a3c2629ea5f49496955b9a6683ce92262e9ecb875d40271ed9163d25f32c2b618f8b9"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x94}, 0x1, 0x0, 0x0, 0x24000081}, 0xcd98175909f9bf87) landlock_restrict_self(0xffffffffffffffff, 0xc) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000004080)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}], 0x1, 0x4000000) recvmsg(r12, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1}, 0x40002101) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r12, 0xc0385868, &(0x7f00000004c0)={r2, &(0x7f00000003c0)='nl80211\x00', 0x8181, &(0x7f0000000400)={@_ha_fsid={[0x41000000, 0x3ff]}, {0xc000, 0x6, 0xcb, 0x6}}, 0x6bfa, &(0x7f0000000440), &(0x7f0000000480)=0x800}) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4001000010000100feffffbf00010000e000000200000000000000000000000000000000000000000000000000000001000503944e200005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000002000000000000000000000000000004d46c000000ac1414bb000000000000000000000000fdffffffffffffff09000000000000000600000000000000feff0000000000001c210800000000000900000000000000f8ffffffffffffff0000000000000000060000020000000004000000000000001f00000000000000ff0100000000000002000002fcf7ffff000000002abd7000043500000a0001fd2000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008001d0005000000e306ababd0276ae36869c7df8c29227310783e4d079a3a8258b85e986f41e0fbbd7d84fc9d782b62bea6"], 0x140}, 0x1, 0x0, 0x0, 0x841}, 0x10) 31.414801196s ago: executing program 34 (id=2274): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x80000004}], 0x1, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$qrtr(0x2a, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0xb, &(0x7f0000000000)=0xfffffffd, 0x4) sendto$inet(r6, 0x0, 0xffef, 0x20000000, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) recvfrom$inet(r6, 0x0, 0x0, 0x2042, 0x0, 0x0) ioctl$SIOCGSTAMP(r6, 0x8906, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)={0x40, r9, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x2, 0x25}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x96c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x40}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000540)={0x94, r4, 0x0, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x80000000, 0x11}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x80}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0xf000}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x4b, 0xac, "3039bf791b0e0c70d7cee5de86f3d4cfb53b5756a4a90663dcd0b2380d5364377ee0610e4a3c2629ea5f49496955b9a6683ce92262e9ecb875d40271ed9163d25f32c2b618f8b9"}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x94}, 0x1, 0x0, 0x0, 0x24000081}, 0xcd98175909f9bf87) landlock_restrict_self(0xffffffffffffffff, 0xc) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000004080)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}], 0x1, 0x4000000) recvmsg(r12, &(0x7f0000002d00)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1}, 0x40002101) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r12, 0xc0385868, &(0x7f00000004c0)={r2, &(0x7f00000003c0)='nl80211\x00', 0x8181, &(0x7f0000000400)={@_ha_fsid={[0x41000000, 0x3ff]}, {0xc000, 0x6, 0xcb, 0x6}}, 0x6bfa, &(0x7f0000000440), &(0x7f0000000480)=0x800}) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4001000010000100feffffbf00010000e000000200000000000000000000000000000000000000000000000000000001000503944e200005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}, 0x1, 0x0, 0x0, 0x841}, 0x10) 5.979647914s ago: executing program 3 (id=2401): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000400000000000306241a00000008241c0600070d000905810300020000120904010000020d00000904010102020d00000905820200020000000905030240"], 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="40000f0000000127"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000007000100080009000100000005000d0000000000050006000b00000008000b"], 0x34}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000240)) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, 0x0, 0x0) r7 = dup(r4) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @multicast}) write$tun(r2, &(0x7f0000000300)={@void, @void, @eth={@multicast, @multicast, @val={@val={0x88a8, 0x1, 0x0, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x2, 0x7, 0x38, 0x67, 0x4000, 0x7, 0x1, 0x0, @rand_addr=0x64010100, @local}, @redirect={0x5, 0x1, 0x0, @broadcast, {0x5, 0x4, 0x0, 0x4, 0x4006, 0x65, 0x1, 0x8, 0x88, 0xf, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}}, '$\x00\x00\x00\x00\x00\x00\x00'}}}}}}, 0x4e) r8 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x182000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r8, 0x4601, &(0x7f0000000040)={0x280, 0xa0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x200000, {0x10, 0x10008}, {0x20000008, 0x8}, {0x0, 0x8}, {0x0, 0xb, 0xfffffffd}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xf, 0x400009, 0x6, 0x0, 0x17, 0x1, 0x0, 0x5}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x11, 0x9, 0x0, 0x14, 0x604, 0x823c, 0xc, 0xffffffff, 0xfffd, 0x4, 0xe1, 0x7}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4.667733301s ago: executing program 0 (id=2407): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000c40)=ANY=[@ANYBLOB='noswap,mpol=prefer']) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 4.448254396s ago: executing program 0 (id=2408): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x7, 0x8, 0x2, 0x1, 0x8, 0x3, 0x9}]}) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100003d37d840890457e00000000000010902240003000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000400)={0x40, 0x1c, 0x1, "d4"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)={0x40, 0xf, 0x2, "8f30"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000080)={0x14, 0x5, 0x1}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000bec9ff10cd0631016016af02030109021b00010000000009046b00016a93f00009058803"], 0x0) syz_usb_connect$uac1(0x3, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000040000000000000000003010902600003010910080904000000010100000a240100000a0002010209040100"], 0x0) 2.905861357s ago: executing program 6 (id=2412): remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0xbd, 0x20) remap_file_pages(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x5, 0x1000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="5500000018007f5f00fe01b2a4a2809302060000ff41ff01040400000a2d1c0002002800007e6b9e412f0019002d4400009b84136e03000000de066a5b00e1baac341b61130000f2ff000001000000000000000000", 0x55}], 0x1, 0x0, 0x0, 0x7a000000}, 0x0) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') pipe(&(0x7f0000002680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x48000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r5, 0xc058534f, &(0x7f0000000040)={{0x7, 0x2}, 0x0, 0x5, 0x9, {0x2, 0x5}, 0x3, 0x40}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) ioctl$FE_READ_BER(r2, 0x80046f46, &(0x7f00000000c0)) r6 = fsmount(r4, 0x0, 0x2) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f00000000c0)={'sit0\x00', 0x400}) ioctl$TUNSETSNDBUF(r7, 0x400454d4, &(0x7f0000000280)=0x5) fchdir(r6) r8 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r8, 0x9362, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) lseek(r1, 0x10001, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r4, 0x40186e8d, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0x20, 0x8000, 0xffffffffffffffff}) 2.823465587s ago: executing program 3 (id=2413): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r0, &(0x7f00000026c0)=[{0x0}, {&(0x7f0000001300)="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", 0xf0c}], 0x2) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4008af24, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000580)={0x2, 0x0, 0x6, {0xb4e5, 0xe7ffffff, 0x7, 0x1000000}}) 2.750747981s ago: executing program 3 (id=2414): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x10000, 0x1, 0x0, 0x4, 0x5, 0x8008fc0, 0x65f40}) 2.693690184s ago: executing program 3 (id=2415): syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a00070000000904010000010230000904010101010230000905010920010000030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, 0x0) 2.437296609s ago: executing program 0 (id=2417): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x198, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0xdc, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x46}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}]}]}, @CTA_EXPECT_NAT={0xa8, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x20}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_EXPECT_NAT_TUPLE={0x50, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) sendto(0xffffffffffffffff, &(0x7f00000000c0)="1200000012", 0x5, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d00624"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000002040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002000)={&(0x7f00000020c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd7000fbdbdf251e000000080004000100000008000100", @ANYRES32=r2, @ANYBLOB="e1f9cbd31b9d17a0680caa14923bb6cfcc4b0e044c7789483ee9158bcd81111a0b9d45690d42abf88640ecd311db28bcb89544223113f2ba8e4bc08bc042613626fa91a07cf2972a675620b7a81974dcc6238c0a630dbf378638d186b42adf401a0ffc5cb1ea7fc3fe0d08f01ed9a5"], 0x24}, 0x1, 0x0, 0x0, 0x20008090}, 0x400c4) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sigaltstack(&(0x7f0000000080)={&(0x7f00000000c0)=""/4086, 0x0, 0xfffffffffffffeae}, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000440)='loginuid\x00') write$cgroup_int(r4, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000009f6000f9ff00000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000001"], 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x18050}, 0x44014) recvmmsg(r6, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000001bc0)=[{&(0x7f0000000b80)=""/12, 0xc}, {&(0x7f0000000bc0)=""/4091, 0xffb}], 0x2}, 0x8}], 0x1, 0x12, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000001000)='./file0\x00', &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x400) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x109040, 0x0) ioctl$COMEDI_CMD(r8, 0x80506409, &(0x7f0000000180)={0x1, 0x8, 0x80, 0xd, 0x10, 0xfed8, 0x2, 0x0, 0x20, 0x1, 0x20, 0x5, &(0x7f0000000080)=[0x7], 0x1, 0x0}) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000002080)=0x2, 0x4) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000100)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r7, &(0x7f00000010c0)) 2.251877709s ago: executing program 6 (id=2419): syz_usb_connect$hid(0x1, 0x36, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x12001, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r1, 0x0, 0xffffffdb) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) poll(&(0x7f0000000000)=[{r1, 0x9ac1a009a552dcb6}, {r1, 0xf4}, {r2, 0x102}], 0x3, 0xd) 1.764312659s ago: executing program 6 (id=2420): r0 = socket$nl_route(0x10, 0x3, 0x0) preadv(r0, &(0x7f00000002c0)=[{}, {&(0x7f0000000040)=""/253, 0xfd}, {&(0x7f0000000140)=""/86, 0x56}, {&(0x7f00000001c0)=""/239, 0xef}], 0x4, 0x0, 0xfffffffe) sendmsg(r0, &(0x7f0000000c00)={&(0x7f0000000300)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)="ae9c01385ae412739046be1946950f12e5006676453945f0571d8f62f38e8ebd69ed2e9d8450b917b74dc2e39c8810df60f0323eff363e38eea80e40fbd69f3dcb0c603249d4aba6b1842b953f8333ebe39b6a5bcf472151db7f26c37c9a9584368c36d7f8386e6f5796100037d5719910aed233a47bb6cf86a4b6517f903d48e97deaa7fa46bafa9f3a5a42ff1d6b617623d9", 0x93}, {&(0x7f0000000440)="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", 0xfa}], 0x2, &(0x7f0000000580)=[{0xd0, 0x118, 0x28b, "f0568ef1074cc53cc6b8850e388accbfc0c244635d25658751fcc3c4a4b556ba99cc585cdd48317aaa9be5b6e9819abc679aa7ee856d722d5c8dec78c162c73048a2df5617bc1e7020345845515c4687b69c26afd6ef366e809c18ece018384bb4763a288564ee896b3b1f4dc25ba10a40da4283d021ae63f6ce1bf77d6451875d885e6ad56969b4e8a3663a096028ef12f0ec35279c703aca74ca23407d65b0b4b96f5d0a58906a4000581962a7ac4585a64f053bd6395e29"}, {0x60, 0x109, 0x2, "5c9e43c3d72d85924ab7eb1c1669832e0c88e72345dd0e6fc900504db474d13e9908200a8cb5231b4f39f69cd11fc119a2e7c32b7a853d0fcaafe90ced7282572616a69817b0f318afe3e31ff6545ab2"}, {0xb8, 0x0, 0x2, "cd0e024cf69a3d9bcb94bd1e61fdfb9a164f66696cfffdd89318b81f61ec644626c984395142a23440681268b7d0ec962cc43e532211ee51ba92d2fb0bd412e02f452e1a3130b44932c2c872636deaeae9bacaccce79674496a27681699b7e0d9ce5871fba5e72d61f6abdbf170b924ec7e57dc024625c444129b4fc136c18d3c17b4b1db1ab7bc4aacd82828eddcb484940da86035650e6a76bc4a781cb9e13b34765643ca0ff63"}, {0x110, 0x110, 0x1, "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"}, {0x38, 0x107, 0x1a33, "894d72a3010a59a26f8d729d03d6696da0fb84869f463d97b37d8ce36cf885476723"}, {0xf8, 0x88, 0x8, "63737676ea30d25feca981c7772eca52ae508978f08ccb308578006655d0dacc3935bae423feccdfd62ab4c0dd28323ab36bc72c1d5a5e8fdea7c982e1fab6223bfdea19111f4cd955dc659f59af04471bdff58497b9e8203f55ff6e003caae42cb11d23ae88f9623f9f3a0e473f4c41dab6b2460781c2d9abb03afc8c9c30596e6cd876c230c229efa60dc1962203eac92e30aefecb66abc92c929e6469dd24485bb57e1b9926f9ba554a50318ecc34ab35ac54bc6739edba48636319f7aab42cc38ab28c8565a79f4b61c3ca287073584bb23f9b46dc2adf3bdd429e1996908b"}, {0xe0, 0x114, 0x8ec, "d1b3c6b8d27ddab9cf4501eb63ee432e4137b1ee7a1424336c92e27077e7c0fd859f4c281bf841894385a6520dbd68769211c002bedf6e2f3c4e2d9f8a2303896bfb4e036f7c5f4975230a7df1fd262423f0f58608c734418b9fbe8fe40b6e6acdbe59b18f0189c95fb0d476048e2ed624f6a76f46434cee97a5c7785a73aa89b208718b42d238a2410dae7c4f56b89acf722bf76443a44612b62e5c539bab8dcda18e6462a988a6e9cd6ecde719de1a12685a10b51ee735fece38b5d5a832a2fe779078f18d959ab9cfdf6e"}, {0x40, 0x117, 0x5, "6ec904e6dbc039c2f8a6d1586f4088c0da9e25a64bf4e186ef21d9e684a55c195f1f4585832c5da4ea82f8df"}, {0x110, 0x119, 0x3, "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"}], 0x658}, 0x84) r1 = landlock_create_ruleset(&(0x7f0000000c40)={0x200, 0x8, 0x1, 0x1000c, 0x8, 0x2}, 0x30, 0x1) landlock_restrict_self(r1, 0x8) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000ec0)={0x0, 0x1, 0x0, &(0x7f0000000c80)=[{}], 0x2, 0x0, &(0x7f0000000d00)=[{}, {}], 0x2, 0x0, &(0x7f0000000e00)=[{0x0, 0x80000000, 0x0, {0x0}}, {}], 0x2, 0x0, &(0x7f0000000e40)=[{}, {}]}) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000001280)={0x0, 0x3, 0x0, &(0x7f0000000f40)=[{}, {}, {0x80000000}], 0x1, 0x0, &(0x7f0000001080)=[{}], 0x3, 0x0, &(0x7f0000001100)=[{}, {}, {}], 0x6, 0x0, &(0x7f0000001180)=[{}, {}, {}, {}, {}, {}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f00000013c0)={0x80000000, &(0x7f0000001300), &(0x7f0000001340)=[{{0x80000000}}, {{0x80000000, 0x0}}]}) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000001400)={{0x80000000, r3, 0x2, [0x2, 0x1]}, {r4, r6, 0x5, [0xffffffff, 0x3]}, 0x1, [0x38000, 0x80000001]}) pipe2$9p(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) write$P9_RFSYNC(r8, &(0x7f0000001480)={0x7, 0x33, 0x2}, 0x7) write$P9_RWALK(r8, &(0x7f00000014c0)={0x30, 0x6f, 0x2, {0x3, [{0x4, 0x3, 0x4}, {0x4, 0x4, 0x1}, {0x4, 0x1, 0x4}]}}, 0x30) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r9 = fsopen(&(0x7f0000001500)='ocfs2_dlmfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000001540)={{0x1, 0x1, 0x18, r7, {0x7d}}, './file0\x00'}) setsockopt$CAN_RAW_ERR_FILTER(r10, 0x65, 0x2, &(0x7f0000001580)=0x9, 0x4) r11 = open(&(0x7f00000015c0)='./file0\x00', 0x539840, 0x40) write$P9_RFSYNC(r10, &(0x7f0000001600)={0x7, 0x33, 0x2}, 0x7) ioctl$FUSE_DEV_IOC_CLONE(r10, 0x8004e500, &(0x7f0000001640)=r11) unlink(&(0x7f0000001680)='./file0\x00') close(r2) read$msr(r8, &(0x7f00000016c0)=""/67, 0x43) ioctl$RNDGETENTCNT(r11, 0x80045200, &(0x7f0000001740)) chmod(&(0x7f0000001780)='./file0\x00', 0x1) mount$9p_fd(0x0, &(0x7f00000017c0)='./file0\x00', &(0x7f0000001800), 0x0, &(0x7f0000001840)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r10}, 0x2c, {[{@cache_mmap}, {@mmap}, {@access_client}, {@noextend}, {@aname={'aname', 0x3d, '\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc'}}], [{@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001940), r10) sendmsg$TIPC_NL_BEARER_ADD(r11, &(0x7f0000001b00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001ac0)={&(0x7f0000001980)={0x13c, r12, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x4}, @TIPC_NLA_MEDIA={0xbc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x555}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf83b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x361043c6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x30e}]}, @TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x200}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa00000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xb319}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2ca4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc000}, 0xcc80) ioctl$MEDIA_IOC_SETUP_LINK(r10, 0xc0347c03, &(0x7f0000002200)={{r5, 0x0, 0x1, [0x6c, 0x2]}, {0x80000000, r6, 0x4, [0x8, 0x3]}, 0x1, [0x9, 0x3]}) 1.391601454s ago: executing program 6 (id=2421): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x28, 0x2b, 0x107, 0x70bd27, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x2, 0x0, 0x1, [@nested={0x5, 0x78, 0x0, 0x1, [@generic='\b']}]}, @nested={0x8, 0x7, 0x0, 0x1, [@nested={0x4, 0xc8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4040) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="017000f8dbdf250200000069000100000000", @ANYRES32=r1], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001"], 0x14) 1.276301587s ago: executing program 3 (id=2423): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x98}) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x3, 0x800, 0x81, 0x800}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)={0x0}) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000001c0)={r4, 0x3, r5, 0x3, 0x80000}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x2e, 0x26, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xc, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000000)=@any_dev={0x2, 0xf70, 0x0, 0x0, 0x1000, 0x8b2, 0xffffffffffffffff, 0x0, 0x104}}}, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r4, 0x3, r6, 0x1}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r7, 0x1, 0xec06, 0x25dfdbfb, {}, [@NL80211_ATTR_DFS_REGION={0x5, 0x92, 0xe2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000000) mount$cgroup(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)={[{@xattr}]}) 991.620353ms ago: executing program 6 (id=2425): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x23c, 0x19, 0x1, 0xfffffffd, 0x25dfdbff, {{@in6=@mcast1, @in=@remote, 0x4e20, 0xb, 0xf7ff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x400000000000000, 0x0, 0xffffffffffffffff, 0x1000}, {0x1, 0x6, 0x80}, 0xfffffffc}, [@tmpl={0x184, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x4}, 0x0, 0x3c}, 0x0, @in6=@empty, 0x3502, 0x0, 0x2, 0x0, 0x0, 0xbd0}, {{@in6=@remote, 0x0, 0x3c}, 0xa, @in=@broadcast, 0xfffffffd, 0x1, 0x0, 0x0, 0x800, 0x800}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x0, 0x4, 0x8}, {{@in=@multicast2, 0x10000, 0x33}, 0x0, @in6=@mcast2, 0x3504, 0x0, 0x2, 0x4, 0x0, 0xabb}, {{@in6=@empty, 0x4d4, 0x32}, 0x0, @in=@local, 0x4, 0x0, 0x1, 0x8, 0x0, 0x0, 0x400}, {{@in=@dev={0xac, 0x14, 0x14, 0xc}, 0x0, 0x33}, 0xa, @in6=@local, 0x0, 0x4, 0x2, 0x0, 0x10000}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x20006854}, 0x800) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000140)={@rand_addr=0x64010102, 0x1, 0x0, 0x80, 0x0, [{@broadcast}, {@local}, {@broadcast}, {@local}, {@private}, {@broadcast}, {@private}, {@empty}]}}) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x6c9be6c13a638021, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_EXPR={0x40, 0x11, 0x0, 0x1, @match={{0xa}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x1c, 0x3, "4ec849704f7ab6ee5bcc8b71ed5070ce80036c5d5625c47a"}, @NFTA_MATCH_NAME={0x8, 0x1, 'mac\x00'}, @NFTA_MATCH_REV={0x8}]}}}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000080), 0x2, 0x103001) ioctl$HIDIOCGREPORT(r5, 0x400c4807, &(0x7f0000000240)={0x1, 0xffffffff, 0x9}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000400000c080002000500000006000b00020300"], 0x24}}, 0x0) 903.314826ms ago: executing program 0 (id=2426): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x7, &(0x7f00000000c0)=0x85, 0x4) accept4$nfc_llcp(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x60, 0x0) setsockopt$MRT6_DEL_MFC(r0, 0x3a, 0xcd, 0x0, 0x0) r2 = socket(0x10, 0x2, 0x0) getsockopt$sock_int(r2, 0x1, 0xa, 0x0, &(0x7f0000000080)) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r4, 0x4068aea3, &(0x7f0000000100)={0xe1, 0x0, 0x91}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x1c, 0x3a, 0x1, 0x7fffa, 0x4, {0x1}, [@typed={0x8, 0xf0, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x4008094) 596.220849ms ago: executing program 4 (id=2429): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000c40)=ANY=[@ANYBLOB='noswap,mpol=prefer']) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x1fff9, 0x0) 535.869125ms ago: executing program 6 (id=2430): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x3ba, 0x2, 0xf4, 0x3}]}) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = syz_usbip_server_init(0x1) syz_usb_connect$uac2(0x5, 0xe2, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000300000010"], 0x0) write$usbip_server(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000300000001"], 0x35) fanotify_mark(r1, 0x71, 0x40000009, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_clone3(&(0x7f0000000c40)={0x400101000, 0x0, 0x0, &(0x7f0000000480), {0x17}, 0x0, 0x0, 0x0, 0x0}, 0x58) 535.305384ms ago: executing program 4 (id=2431): socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r0, 0x7, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902", @ANYRESDEC], 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4044084) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x4000000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = fsopen(&(0x7f0000000140)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, &(0x7f0000000300)='/dev/kvm\x00', 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r4, 0x4068aea3, &(0x7f0000000040)={0xd5, 0x0, 0xf5a26a6eea348bd1}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) pipe(&(0x7f0000002680)) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x2) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchdir(r5) name_to_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x84) r6 = socket(0xa, 0x5, 0x0) ioctl$SIOCGSTAMPNS(r6, 0x8907, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r7, 0xf6695000) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000100)="5514377d925cfac68fa5e905ccd2593d6d0f37d8422f54e9fbc8881033b7e59b0ce2a896d5c195741b964850ca7444d0926630715341d8ef0611e595745d05bb0484b65adfe33ed3639e7722ef74b92df54d886779faf3deee20a0724362221a9fc4a7f86a07042dd5875131ff0d57107a01db1964be5dd15d8d3be6fd3209f87210f2e9de528884797a1c43157c6f56349e263c79cb13df66409f7cd33b9ebb000fd19d5521eab9eb89ad56a45108b1d3179077413d0e16044c0fe0", 0xbc}, {&(0x7f00000003c0)="fc30dbe99679dd0987d9b79d2816807e5ae56a882530ffe1ae10045ba28c5dd5d248346be2a47ba7ee4ad5737e6f7ee5972f54c5c05986ceaefcd934112e67e808e7197431b1ccde1f3f6c5fc18a493805bc62c575cbdf0d821e4d78766945408115744f77f5fd65bbdc64876a8a4cc6c9ac20ba24e72a582ac25cf4c4abc66e220276c80ddfadfb0d2dbd81ac158689bb3ee37cd6030474f0b67ab077d71a4af43f2ad4865aebe10863d1fbc13d4b6fa0cf2ac1622bf3c908302f7e49debf566d5390f5cc4dca4aefa4823d39cb7dd4f4b9ccaa3deca2483f38c68a6dd882630c645b3731764f609c43fdf70d1426eb074aaf64f950877536287cbb548ae806ec459b787cbca0bbc12a0044111c8b688d9d2c1400cbd43c21fee0085f3a88a87d0acc4328488cf64db57a3ac6ca7ba0effedb266c9c8c2eb03d42aa488241af22018d2f94b6e657a54801b656a8806f1f6b009a6e9f37d02caa6795ca7bd3cac3507f37a462e1ac4439246310bfef901b7664009228e5db784966aa690a2a06414cb47c02440fb402a214f204030d28d13f1267dddfab49dc95ab673ec2a243ded076600e33fdca0495a0807d4a3057b703770316b6afd5dcd1ebe22e7922e67c8378c09623c068e49f788048bd2390e8d48301490e26b950018a18b196d038d9786f268a202b76acdeb0e879e291b0585aecc2b12b692e4ebde3703a7036408accf2a7ce0155b54bbd79aebb61e2f881ee21b5dc3b1971194f66e741442683da9d9015f3535458b69b1a231ddba9dedc1c3008bdf45b6b5d8d55f70d016836a1ffcf797c8e87451a3aea994e9a8bf28339910570d2c5fd5cf258e13649667da0fb5597144ba9beaae4488fab4bf92db02dd8a567a3448fbd4994c7ef6e94c1d94fe246a50dd0d4254dbde51ae8f0c135961175d68913beb0dbd725206beb1510ebb44319a9bdcb8949f46cf187faa8ff4095ec2ced4080e9510e16eac28ab16d2b52eef8131b6bb14059566c7b40ec939c3d9da8c07cea2a41943d2b0f2c46935e9d91e0f60933e70e83362e381f8c77bcf5462a8e951b2d268e27c0942c85ef832e731d9c0c72911fb8a5ad85e0d710b48d54d2c1ca5de57b3cc28c7ab7504c11e3ed03a68509159b8ca0b2be181a3ca748cd02969b94907c2687fca03fb6423854627f0c54f8af5b84630c34ec70815063c8ca0303bd6d97f53e2437a177381eb10ec1108d87285d3669fec1b2f31acc0f5663e888cabc8aeda7ca34f377377c7100edf49a914538835a916a0f84bfb5754fe3313c801168f806675b9813c3c3c5a52cbde1b907b2922ecda1db0a81108622e3517aea76f0debee7c452bef87f78394e0d9a85b90db51fd5d953a528d12ce517deef93b518ebc26197818238481940e1b8747f8d3e3398403837fe86a5c67a708c40e6c89275c1f9d07cfd5cee1d0379275899b1cda60b71f1ebe48867864529cd72e8437c01e71fd06c5c5b88752378932aaefc5dfb8580b00ba024cf132cfc2960d50aa0b33e3683f7f193accdd3ee2d0c47724165a0698d5098112ffa058ee93aa3b692ccbfd34274763c74f831c91fb84f7be645b0a00630226659d48e49da81a6d78f4478ad25458d91aae203a9b7413e65d7ae0b837312d09368852ef44960f71e9a2f915cfaa1b0848f2ef1dd6a7656bbfb0247a1f34e1b4d55c83578f2ba3eab5f94c878341e7c05d6a79a6e8c1024cebe808a09e1f202ecd024dfdd939d57ce4ed5a48d6a9b2df40b18d1f2e8b214e172fd05aa5159b71849bef0c9f576255a646453042c4d47e93ae8e0242e58c92fbdfe6748f4787c3ef1da49f0baa841ebbfe490cefca35910db567e59453824299cd26e625fbcfff898261de4f57e54ef909b2694adf79efec260f423055d48e38ed6e177550f6eae88f2f8618348396d006826349612401b40a318a29b5bcbc26e387944b31a852bc9c9cbf3947c9ecab7a9d22b57567c344947d734cfe39742632ff637c63f8134da78e499454cd2bb8c5faaabc32a5508e8cb053b49420f53a2fd3bc5496a2300e758f8f5e128e3edb039267e426b863aff638a460579e29be2c9938a2a273949152d0a83f757cdafbc664abefd59297f5dd112d47724e28f52a9660f9def5be26a5afc022e69c37dda79656042651c7bddefeaadabae7dd8ed9232f5e037cf586f5dcc319e18ceb90e7ce62b9ab270fbb62b29578b40614fa0dfba6a22a1cc2a3cc06e5c48d9ed3c145f3306e4e2f44812d908d558740b932229db5fccab7d43c53cd18063ec26da594fd0b2f4536b5dcb8b6c1fba1cf907140cda17207a9ba8a185cce514849f48c455574ab110750da0ec415e1e4279fbc63c298336f87b4b4776430195a4ee37f6a265792eb8d32e02ad6611a68cbe13202cc937fc5b3b8503ed59ee75ecf8a11f62d17e3ac0a797f9192217ae30a3ca3361d92cae64d1e00e8dad64c7ac5071df5a77b8cfb7b9e32b19d6c2c435bda45ec7e9bdd1cded92048bc65b346f427dbfe30561b14d73ea105c3866798524be7f211a58ae5db271441368dc68e95add6cb60b66135d3da6000acb5941c3e78c399886c71d9d9e401f9608bcf4e20fb024456d24054f96d7430eb3560e5dba6039190a855f9cfa3e0602a3fd4b7ecf70f7762e07ad1495b82ca660ffd82d1be4d9c098c42a70915d37157c27c7fc07b9eba5dad6bb798b76fe20df121d38ad3c1a33b8b707b1080e34bdd137dd73320a96ecd1d77ad5f73dac3b9a495fdd887c0ed81abb889d665b20fa0eea5ae0fabf7c4660604a3d767b281b8ff54a41af67da99a68598bfeb7060c40db6944cfb5a73058d31832b981b28e5c27c485feeb4a0d5913df851eb935c10b21c0e97f149040972ace826d5d55e09c70f9e43c3e57bfaa84ecbd44e5a4309511a8e5c73d4f7a5a05cc33598b1d5ce596d564b843ca60040358e4ca652d30b8dc3b00e73a3f284578321471cfc12316a80e1d77261598b540a14613100323f11e2bfd1db94d99e7a4cea7c18d82ef0b04eacc956bc032a6c0f3e7c6c0415f9d7ff18a7e72a60c0ec33779b6c4789616c0767294ca898a50ffc7887a4c7376c7d28eb0b74c29b4e399d99fcf91be83c922aabe8065533724c9d82f819bc7a7ebcfe3586b8e2ccde8a0e0ef4fa32e78d1ac90654e70fcb565e81dbe5e51801f501a379e98a74bd31e358950ecd8b5da2232bf90d48c1979d88c429ff77df926be757213796e457064fbff5cb7fee41c32159a9cdaa1176cd406f0823abd8c2b8f83dfb96e5e2474d79e30f726c47746520ff4b3227a636d1d24fc19515a63e8333211aa6bc63961eb810ec4830d16baacd52f96eb3d16adc4128500eda2188d88d9ef0235531455eed0657874b425d6ba68a67e3905ab6f4f729aa9ced5ceb96cd183806a6c3720e907f6c7b226c0fe15219c2ff3320c2e6880ad016dc8bdd911d60ea77d971ed05ca154b0e5ee7d6ebc28b86a66baedca6d39939943bff1d8b39dea87a59fecc6279f9b117b04562db7e952b516a91a364a3b57f9f51324764b4e2c50e0dd2b4a62d19fa665be338e0071edc2725a4a775e9eb0a9e1d01482ed9009e2b17deae69740399203d231b2cb54635aab4a5bc71c1d75d5c27a0e850ad7c39a38c2658d72e8bac7e9fd4f351ad427faafebf7beed212a2fae3cc0c811cb54c468d9aacc303567a5ab03d8c00007c80085b5d39285bb161d8db8de11ec6dce9eab7b7dadd892a4f25e3382a4fe72ce2b309d02ceeadb8daa6e28f4baf8535e7dbb888005651bb5f434ec32b45042363bc424dc3b3441fcc12cef6779ca4032835a225a4196aa952ed12eebd4712fe385dd933fc4110de767d0f9127e7cd815d613a454c56f3be15526c6af0cddae6a7ff375d283871b8761e1cc63f3ada963c127bcb528f971b50ebe6da93b36c1c0b11b7a677c3a2a5a09f2e9350b509f22a51e9c1f3e11383e703b9053ddb5884e9a5804b51fa06f7fbb2ddb8a2d72bebcced8d80834780cfcc578e0e2d0219b4d120b3587db65809709197a0c9f5f5262b091fbbf15f4767206f85406e2fad15c29407243834872d55f13a42a9745822b317edb26488e8517de1c61d5003776faa94fb2d851b4c914dfafea5f0228ce3c2c795511ea5d1bc2b47ee56f56cafd0670e81ee59d2a6125075e98d475f671eca2020d96b7cc33167fde43aa045ef9d71db070d02e642bab72d0e9ac64be602228d8e1e91e9486765c2bf6cfccd723564edbbf13a44809d5a03ae5800bde612ec4dc2a96cb9b8de34998b2ba891549d956f333eb2da9a67312d77c46cb1135694e582a4ac41d9eeb4ff87047e12418f9896ffc567c67a4d172203d79077b901ff42a34dadcbf4b80eacf84093206c563d377f30e427fcff6e1e8ad572e2e4dfc3def367feaacf526fcc75cf81d013d24d51adc630db4a51053e70ce6f482f4c41d973b68dac37214e9315556e5fba8dcd68bcaa24256045ada481af6dfd80b01336ba5405b3a6f810eccff2f79e640b8ec1871140f0b773b70f13fad81121fb16f4a92db25d29206c00b3768e47dbe827257e5901c62e2509438ac6596722d9882893e2ea8b1191e09a6638eaae77c8b52c5eba0c3fa2230e48510a1b810259101d75bc488bffdfe1a9c6da9e05e149ce2e9b865db0d884f1028f03c84d947cd33895d8581c83ec55431b340b7fb04cb36d187fe6bc204f6bc390aeec4c949ff0d3db4c1c5b85909f838cf3a56b5d610036a0cc851f836ad72b73377b6eb6a869b802d1c07c424dea55f91e88defff0f07a856a2ba15070f19d5fc5858ac33e233713a1a8445e3255bf43aea9c7cc18f1c225c4b194a333d42c4bb72c994a877b5ae840f1a4f52c9d3bb3afb187b251d1c68f380a5dbd1689a78d98e7edc49014ad7c79708758d8e23c5082298627e38f1e19e1623a8b7e12a6435deae6698f0015d8e2e1e918ab06d060dacad0d6cc6d835619fe361d5e8cde40565b76913a904b7e7c60ddfcce6afc9e4676ca526a68920bcf8fee9d5055ca360d390524ac6aee07060220e13f82d53d3048b7eb0657db4597bf9ad73b1963dee280f181d3d9428baa692e2486112a308c7c5e81f98dacc516909df9df934edc8db18b7d49afc2e00c863dfeb70362571bc9cf0c4c179df7b4ab5ae4737a611966cf9c3593d6731e31ac048f046f78a2ded8c71a5bd422fc7b68239175555896d42563c8cc5b950fd28fa54db2e0cc6cded799f087befa8acd68eea3644b2711259296667530c42e8ee3dab02ce2fe770e68fbbf12e1c274ad54bbd95d16530abfca59d268bd02d5a78d9a5bd91127fcb2bca57436f7bcbffc08422ec54f887fcdd84a81ea0228d75bcca42f2d4b5bd138f5c0821ffb185cbe6c1750b3de7ef6775898c6695e11bfbe2db80e0a500841c45514ee4bd2e84809cd3046eb820c9c96976a90732eebbd3023d02cb7d67f9cc891f8ba370037fd97ea0c5132ce63354c0e7fb7921602680da18f7dda895a287a9393d5", 0xf44}], 0x2) 427.793134ms ago: executing program 4 (id=2432): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x4, 0xa, 0x401, 0x0, 0x0, {0x9, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0xc044) inotify_init1(0x0) inotify_init1(0x80800) r1 = inotify_init1(0x800) inotify_add_watch(r1, &(0x7f0000000040)='./file3\x00', 0x7c000a48) rename(&(0x7f0000000200)='./file3\x00', &(0x7f0000000240)='./file1\x00') 427.534053ms ago: executing program 0 (id=2433): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x0, 0x1, {0x2, 0x3, 0x5, 0x1}, 0x7f}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9b0e6fbc86735d33875006001c9a1eda1c00f500", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001"], 0x14) 411.20199ms ago: executing program 4 (id=2434): r0 = syz_open_dev$video4linux(&(0x7f0000000140), 0x1, 0xc0000) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setuid(0xee01) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x105}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f00006c0000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000461000/0x4000)=nil, &(0x7f000012e000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00008f3000/0x4000)=nil, &(0x7f00004ed000/0x1000)=nil, &(0x7f0000fa1000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f000047f000/0x2000)=nil, &(0x7f0000000180)="640e0f4876ed49c958891ec9c3094536b254ff3760726793780e5a58ba0f8d280c95860bd90e0e5b9f31b214a0f8db05aeac7ca069a379a677d65c5838969fb40921cc58d5b1a0e0e4ae9aadd7c19b95dd05139378fee7611146c2638489ecb9d3ca0d4b0b267b685ee4dd1b8e5fb97d0e9b3b8c2bf45343543448c291a22bf988a893b2a4309802edc857bfcdc529cb5ffd25cc52970b9ff51255f4fc6bf076212eaae52b9e0942ac00f3fea7b63a3677f95c04", 0xb4, r0}, 0x68) write$sndseq(r3, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick=0x7f, {0x1, 0x7}, {}, @note={0x0, 0xf, 0x4, 0xf, 0x10000002}}, {0x4, 0x0, 0x4, 0x80, @tick=0x7fffffff, {}, {0x7}, @queue={0xb0, {0x4, 0xf}}}, {0x2, 0xfd, 0x0, 0x0, @tick=0x80000000, {0x0, 0x8}, {}, @raw32={[0x0, 0x10000000, 0x6]}}, {0x0, 0x0, 0xa, 0x0, @time, {0x4, 0x7f}, {0x4, 0xf9}, @connect={{0xbe, 0xfa}}}], 0x70) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r4 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) listen(r3, 0xfffffffb) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) read(r4, 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000000)={0x1, 0x6644, 0x2}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 314.664907ms ago: executing program 4 (id=2435): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40000, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_POWER_MODE={0x8, 0x1a, 0x2}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900"}) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) (async) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x24000840) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000020101020000000000000000030000011400188008000340a9a5865208000140388a2a1704"], 0x2c}}, 0x24000881) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="680000000101010200000000000000000a00000908001a4000010000080015400000496d0c001880080003400000397d38"], 0x68}, 0x1, 0x0, 0x0, 0x4800}, 0x4) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a00d000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) syz_usb_control_io$lan78xx(r5, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) (async, rerun: 64) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e24}, 0x1c) listen(r8, 0xffffdc47) bind$inet6(r8, &(0x7f0000000140)={0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x9}, 0x1c) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$inet_tcp_int(r7, 0x6, 0xc, &(0x7f00000004c0)=0x79, 0x4) (async) sendto$inet(r7, 0x0, 0x0, 0x2000877d, &(0x7f0000e68000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) syz_usb_control_io$hid(r5, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="20080500030000001632f2"], 0x0, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, 0x0, 0x0}) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_GET_EXTENDED_ERROR(r10, 0xc00c6211, &(0x7f00000000c0)) (async) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a03000000000000000000070000000900010073797a300000000084000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f4000128014000180090001006c6173740000000004000280140001800c000100636f756e7465720004000280340001800c000100636f756e746572000400028008000340000001"], 0xcc}}, 0x20050800) (async) syz_usb_control_io$uac1(r5, &(0x7f0000000180)={0x14, &(0x7f0000000500)={0x20, 0xb, 0xe7, {0xe7, 0xe, "23a1c4677425231c123795784e978006de03a6481795055d00860bfc2feb2da8e0de06eb09e7a767506f9e9fb456f623d47a7eb6631929d0362e478167854bd317965fd46a83436b642b4e2d9f84608798d8fb1da41e5d05a9154047c2483061bf5adca3e10b0d31a668185fb88880220bd7ec38d0c5b83af66d3f3b3bbe200544d911d1a1d2013eed32e3eb261f4476df61b1dc1116ce77b303d8aba7d88ba75428821a81961bda860419055a7cc5462ea1a6d5cd910407a2cca560055bcffd386c6fdcc905f8ddbc94016359ffd1567739662fb702d7f974bbc455cff04ea3a34409da6c"}}, &(0x7f0000000240)=ANY=[@ANYBLOB="000304000000040322048147e70434eb5076c3de59e4f7b0216318a84a77f917e48033347b23585da28c574e265c097e31d2d98a6ab9c36c720e7768217cc80fcf243bc769efc161b5751053344d9f4ab36d3584ce6a160af9f1aad3c4b3f223264a96ebccbb08"]}, &(0x7f0000000980)={0x44, &(0x7f0000000680)={0x20, 0x7, 0x81, "988a7129850d17a3d15388abe837ea9aeb262140c668545bf7d453f83f4b69c6b4e6a0a82df378c766066e710999025983cb9592fddda2b0cfdd9f9395ad3fd7fa82b67c9abe57e7c6b0917a28ea8b180a835ee30bc753ff21e15fa822d0ba8061bcce299b786838425d51feff088573af37daec7e739417bc3d460c37f689628b"}, &(0x7f0000000740)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000780)={0x0, 0x8, 0x1, 0x5}, &(0x7f00000007c0)={0x20, 0x81, 0x2, "81c6"}, &(0x7f0000000800)={0x20, 0x82, 0x1, "9d"}, &(0x7f0000000840)={0x20, 0x83, 0x3, "63d12d"}, &(0x7f0000000880)={0x20, 0x84, 0x2, "bffa"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "71d347"}}) (async) r11 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8200, 0x0) ioctl$COMEDI_INSN(r11, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000040)=[0x1, 0x2, 0x40005002, 0xffff32eb, 0x2, 0xffffdff9, 0x2d7b, 0x2, 0x0, 0x3, 0x0, 0x3, 0xfe09, 0xd2, 0x80000002], 0x1, 0x4000003}) 151.679069ms ago: executing program 0 (id=2436): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'pimreg1\x00', &(0x7f0000000040)=@ethtool_cmd={0x2f, 0x8, 0x0, 0x400, 0x0, 0x7e, 0xe7, 0x80, 0x87, 0x0, 0x80000, 0xd1, 0x1, 0x8, 0x0, 0x82000045, [0x2, 0xd]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c2c7ff35b094"}]}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r2, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x1, 0x6}, {0x8, 0x1}, {0x9}, {0x9, 0x7}, {0x1, 0x7}, {0x4, 0x2}, {0x19, 0x1}, {0x5, 0x6}, {0x5, 0x5}, {0x2, 0x4}, {0x2, 0x2}, {0x6, 0x7}, {0x5, 0x4}, {0x83, 0x2}, {0xd, 0x1}, {0xa}, {0x80}, {0xea, 0x6}, {0x81, 0x2}], "76c76887e0dddafe"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0xce, 0x2}, {0x2, 0x2}, {0x81, 0x1}, {0x3, 0x4}, {0xf3, 0x7}, {0x4, 0x2}, {0x8, 0x1}, {0x58, 0x3}, {0x5, 0x5}, {0x6, 0x5}, {0x7f}, {0x0, 0x1}, {0x3, 0x2}, {0xb}, {0x8, 0x1}, {0x6, 0x2}, {0x6, 0x7}, {0xd7, 0x3}, {0x4, 0x4}, {0xd, 0x5}, {0x1, 0x7}], "7de9c6910523007d"}}]}, 0x80}, 0x1, 0x0, 0x0, 0x84001}, 0x4804) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000080)={'pimreg1\x00', &(0x7f0000000040)=@ethtool_cmd={0x2f, 0x8, 0x0, 0x400, 0x0, 0x7e, 0xe7, 0x80, 0x87, 0x0, 0x80000, 0xd1, 0x1, 0x8, 0x0, 0x82000045, [0x2, 0xd]}}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="c2c7ff35b094"}]}, 0x28}, 0x1, 0x0, 0x0, 0xc800}, 0x0) (async) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x80, r2, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x1, 0x6}, {0x8, 0x1}, {0x9}, {0x9, 0x7}, {0x1, 0x7}, {0x4, 0x2}, {0x19, 0x1}, {0x5, 0x6}, {0x5, 0x5}, {0x2, 0x4}, {0x2, 0x2}, {0x6, 0x7}, {0x5, 0x4}, {0x83, 0x2}, {0xd, 0x1}, {0xa}, {0x80}, {0xea, 0x6}, {0x81, 0x2}], "76c76887e0dddafe"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0xce, 0x2}, {0x2, 0x2}, {0x81, 0x1}, {0x3, 0x4}, {0xf3, 0x7}, {0x4, 0x2}, {0x8, 0x1}, {0x58, 0x3}, {0x5, 0x5}, {0x6, 0x5}, {0x7f}, {0x0, 0x1}, {0x3, 0x2}, {0xb}, {0x8, 0x1}, {0x6, 0x2}, {0x6, 0x7}, {0xd7, 0x3}, {0x4, 0x4}, {0xd, 0x5}, {0x1, 0x7}], "7de9c6910523007d"}}]}, 0x80}, 0x1, 0x0, 0x0, 0x84001}, 0x4804) (async) 151.2537ms ago: executing program 3 (id=2437): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0xee01, &(0x7f00000000c0)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000300)={{0x9, 0xf}, {0x1, 0x4}, 0x1ff, 0x3, 0xc}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9a9c41, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setsockopt$inet_int(r10, 0x0, 0x13, &(0x7f0000000000)=0xa95, 0x4) r11 = dup(r9) syz_ublk_setup_queues(r11, r8, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x4080, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x20003, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) 0s ago: executing program 4 (id=2438): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, 0xee01, &(0x7f00000000c0)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000300)={{0x9, 0xf}, {0x1, 0x4}, 0x1ff, 0x3, 0xc}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x9a9c41, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x10, 0x0, 0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x34, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x5}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) setsockopt$inet_int(r9, 0x0, 0x13, &(0x7f0000000000)=0xa95, 0x4) syz_ublk_setup_queues(0xffffffffffffffff, r8, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x4080, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x20003, 0x0, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) kernel console output (not intermixed with test programs): g to 7 [ 565.159453][ T5775] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 565.159463][ T5775] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 565.161485][ T5775] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 565.161509][ T5775] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 565.161527][ T5775] usb 1-1: Product: syz [ 565.161540][ T5775] usb 1-1: Manufacturer: syz [ 565.161550][ T5775] usb 1-1: SerialNumber: syz [ 565.167204][ T5775] usb 1-1: config 0 descriptor?? [ 565.216276][T14784] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 565.448245][ T5775] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 565.448326][ T5775] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 565.479743][ T5775] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 565.479767][ T5775] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 565.479783][ T5775] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 565.650326][ T5775] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 565.687757][ T5607] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 565.690690][ T11] usb 4-1: USB disconnect, device number 16 [ 565.792561][T14819] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2199'. [ 565.842938][ T5607] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 195, changing to 11 [ 565.842968][ T5607] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 8909, setting to 1024 [ 565.842993][ T5607] usb 6-1: config 0 interface 0 has no altsetting 0 [ 565.843020][ T5607] usb 6-1: New USB device found, idVendor=320f, idProduct=5041, bcdDevice= 0.00 [ 565.843041][ T5607] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.895875][ T5607] usb 6-1: config 0 descriptor?? [ 565.904449][T14824] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2201'. [ 565.904553][T14823] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2201'. [ 566.305499][ T5775] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 566.305805][ T5775] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 566.337958][ T5775] usb 1-1: USB disconnect, device number 54 [ 566.340086][ T5607] hid (null): unknown global tag 0xe [ 566.340104][ T5607] hid (null): global environment stack underflow [ 566.340158][ T5607] hid (null): unknown global tag 0xc [ 566.341070][ T5607] hid (null): unknown global tag 0xe4 [ 566.346823][ T5607] hid (null): unknown global tag 0x52 [ 566.346840][ T5607] hid (null): unknown global tag 0xe [ 566.346913][ T5607] hid (null): invalid report_size 222345300 [ 566.346927][ T5607] hid (null): unknown global tag 0xf4 [ 566.346950][ T5607] hid (null): report_id 0 is invalid [ 566.423673][ T5607] evision 0003:320F:5041.003A: unknown main item tag 0x0 [ 566.423706][ T5607] evision 0003:320F:5041.003A: unknown main item tag 0x0 [ 566.423733][ T5607] evision 0003:320F:5041.003A: unknown main item tag 0x0 [ 566.423757][ T5607] evision 0003:320F:5041.003A: unknown main item tag 0x0 [ 566.423781][ T5607] evision 0003:320F:5041.003A: unknown main item tag 0x0 [ 566.423804][ T5607] evision 0003:320F:5041.003A: unknown main item tag 0x0 [ 566.423826][ T5607] evision 0003:320F:5041.003A: unknown global tag 0xe [ 566.423839][ T5607] evision 0003:320F:5041.003A: item 0 0 1 14 parsing failed [ 566.424559][ T5607] evision 0003:320F:5041.003A: probe with driver evision failed with error -22 [ 566.520871][T14805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.521182][T14805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.557422][ T5607] usb 6-1: USB disconnect, device number 16 [ 566.877723][ T5775] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 567.029812][ T5775] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.029837][ T5775] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 567.029873][ T5775] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 567.029885][ T5775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.033324][ T5775] usb 1-1: config 0 descriptor?? [ 567.087747][ T43] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 567.237666][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 567.239966][ T43] usb 5-1: config 9 has an invalid interface number: 51 but max is 0 [ 567.239988][ T43] usb 5-1: config 9 has no interface number 0 [ 567.240031][ T43] usb 5-1: config 9 interface 51 has no altsetting 0 [ 567.242048][ T43] usb 5-1: New USB device found, idVendor=0502, idProduct=16e1, bcdDevice=33.dc [ 567.242071][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.242089][ T43] usb 5-1: Product: syz [ 567.242102][ T43] usb 5-1: Manufacturer: syz [ 567.242112][ T43] usb 5-1: SerialNumber: syz [ 567.437394][ T5775] Bluetooth: Can't get state to change to load configuration err [ 567.437406][ T5775] Bluetooth: Loading sysconfig file failed [ 567.437438][ T5775] ath3k 1-1:0.0: probe with driver ath3k failed with error -16 [ 567.447711][ T1261] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 567.451865][ T5775] usb 1-1: USB disconnect, device number 55 [ 567.518632][ T43] usb 5-1: USB disconnect, device number 118 [ 567.565207][T14854] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2211'. [ 567.597864][ T1261] usb 6-1: Using ep0 maxpacket: 16 [ 567.619222][ T1261] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 567.619270][ T1261] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.619295][ T1261] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.619316][ T1261] usb 6-1: config 0 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 567.619337][ T1261] usb 6-1: config 0 interface 0 has no altsetting 0 [ 567.627294][ T1261] usb 6-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 567.627318][ T1261] usb 6-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 567.627336][ T1261] usb 6-1: Product: syz [ 567.703803][ T1261] usb 6-1: config 0 descriptor?? [ 567.854920][T14863] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 567.895044][T14861] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1^ hS+4k>WR{`]y [ 568.119367][T14852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.120260][T14852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.126304][T14852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.127520][T14852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.151604][T14874] program syz.0.2217 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 568.176982][ T1261] usbhid 6-1:0.0: can't add hid device: -71 [ 568.177089][ T1261] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 568.198832][ T1261] usb 6-1: USB disconnect, device number 17 [ 568.551859][T14885] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2220'. [ 568.587722][ T11] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 568.739560][ T11] usb 5-1: Using ep0 maxpacket: 16 [ 568.742315][ T11] usb 5-1: config 0 has an invalid interface number: 49 but max is 0 [ 568.742338][ T11] usb 5-1: config 0 has no interface number 0 [ 568.742397][ T11] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 16 [ 568.742421][ T11] usb 5-1: config 0 interface 49 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 568.742442][ T11] usb 5-1: config 0 interface 49 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 1024 [ 568.742459][ T11] usb 5-1: config 0 interface 49 altsetting 0 bulk endpoint 0x8F has invalid maxpacket 1024 [ 568.746063][ T11] usb 5-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 568.746088][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.746105][ T11] usb 5-1: Product: syz [ 568.746118][ T11] usb 5-1: Manufacturer: syz [ 568.746130][ T11] usb 5-1: SerialNumber: syz [ 568.854180][ T11] usb 5-1: config 0 descriptor?? [ 568.857254][T14876] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 568.857369][T14876] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 569.007794][ T43] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 569.094905][ T11] usb 5-1: USB disconnect, device number 119 [ 569.199627][ T43] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 569.199652][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.199670][ T43] usb 4-1: config 0 has no interface number 0 [ 569.202216][ T43] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 569.202240][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.202258][ T43] usb 4-1: Product: syz [ 569.202270][ T43] usb 4-1: Manufacturer: syz [ 569.202284][ T43] usb 4-1: SerialNumber: syz [ 569.213430][ T43] usb 4-1: config 0 descriptor?? [ 569.427938][ T43] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 569.428185][ T43] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 82 [ 569.431298][ T43] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 569.431386][ T43] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 569.431466][ T43] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 569.439873][ T43] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 569.453166][ T43] usb 4-1: USB disconnect, device number 17 [ 569.481272][ T43] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 569.482978][ T43] keyspan 4-1:0.133: device disconnected [ 570.227686][ T43] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 570.377657][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 570.379758][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 570.382351][ T43] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 570.382376][ T43] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 570.382387][ T43] usb 4-1: Manufacturer: syz [ 570.382394][ T43] usb 4-1: SerialNumber: syz [ 570.605165][ T43] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 570.618615][ T43] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 570.618851][ T43] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 570.618878][ T43] usb 4-1: media controller created [ 570.627329][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 570.662665][ T43] zl10353_read_register: readreg error (reg=127, ret==0) [ 570.689472][ T43] usb 4-1: USB disconnect, device number 18 [ 571.266557][T14932] netlink: 'syz.3.2238': attribute type 28 has an invalid length. [ 571.903389][T14894] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 572.062539][T14935] netlink: 5 bytes leftover after parsing attributes in process `syz.5.2239'. [ 572.353162][ T43] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 572.541792][ T43] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 572.541818][ T43] usb 4-1: config 0 has no interface number 0 [ 572.541873][ T43] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 572.541896][ T43] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 572.556217][ T43] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 572.556244][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.556261][ T43] usb 4-1: Product: syz [ 572.556274][ T43] usb 4-1: Manufacturer: syz [ 572.556288][ T43] usb 4-1: SerialNumber: syz [ 572.746724][ T43] usb 4-1: config 0 descriptor?? [ 572.752782][T14937] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 572.823216][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 572.905351][ T5609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 572.920987][ T5609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 572.925274][ T5609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 572.927336][ T5609] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 573.036692][ T43] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 573.124980][T14949] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 573.213064][ T43] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 573.334731][ T43] usb 4-1: USB disconnect, device number 19 [ 573.420788][ T43] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 573.453604][ T43] cyberjack 4-1:0.69: device disconnected [ 573.907918][ T5775] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 574.058448][ T5775] usb 6-1: Using ep0 maxpacket: 8 [ 574.078905][ T5775] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 574.078943][ T5775] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 574.078980][ T5775] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 574.079004][ T5775] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 574.079027][ T5775] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 574.079051][ T5775] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 574.079073][ T5775] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 574.079096][ T5775] usb 6-1: config 168 interface 0 has no altsetting 0 [ 574.081535][ T5775] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 574.081569][ T5775] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 574.081621][ T5775] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 574.081644][ T5775] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 574.081665][ T5775] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 574.081686][ T5775] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 574.081708][ T5775] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 574.081730][ T5775] usb 6-1: config 168 interface 0 has no altsetting 0 [ 574.127098][ T5775] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 574.127132][ T5775] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 574.127165][ T5775] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 574.127189][ T5775] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 574.127212][ T5775] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 574.127235][ T5775] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 574.127258][ T5775] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 574.127282][ T5775] usb 6-1: config 168 interface 0 has no altsetting 0 [ 574.207682][ T5687] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 574.219295][ T5775] usb 6-1: string descriptor 0 read error: -22 [ 574.219416][ T5775] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 574.219450][ T5775] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.357649][ T5687] usb 4-1: Using ep0 maxpacket: 16 [ 574.363690][ T5687] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 574.363714][ T5687] usb 4-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 574.363730][ T5687] usb 4-1: config 0 has no interface number 0 [ 574.376127][ T5687] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 574.376152][ T5687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=21 [ 574.376170][ T5687] usb 4-1: Product: syz [ 574.376182][ T5687] usb 4-1: Manufacturer: syz [ 574.376195][ T5687] usb 4-1: SerialNumber: syz [ 574.493743][ T5687] usb 4-1: config 0 descriptor?? [ 574.577722][ T5687] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 574.577753][ T5687] uvcvideo 4-1:0.105: No valid video chain found. [ 574.611925][ T5775] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 574.712875][ T1418] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.777704][ T5687] usb 4-1: USB disconnect, device number 20 [ 574.837064][ T5806] usb 6-1: USB disconnect, device number 18 [ 574.927874][ T5775] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 575.081096][ T5775] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.081149][ T5775] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 575.081170][ T5775] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.122045][ T5775] usb 5-1: config 0 descriptor?? [ 575.139209][ T5775] pwc: Askey VC010 type 2 USB webcam detected. [ 575.234394][T14960] kvm: user requested TSC rate below hardware speed [ 575.267745][ T5606] Bluetooth: hci3: command tx timeout [ 575.422025][T14978] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2251'. [ 575.550461][ T1418] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.555171][ T5775] pwc: recv_control_msg error -32 req 02 val 2b00 [ 575.557123][ T5775] pwc: recv_control_msg error -32 req 02 val 2700 [ 575.575019][ T5775] pwc: recv_control_msg error -32 req 02 val 2c00 [ 575.591061][ T5775] pwc: recv_control_msg error -32 req 04 val 1000 [ 575.597725][ T5775] pwc: recv_control_msg error -32 req 04 val 1300 [ 575.599841][ T5775] pwc: recv_control_msg error -32 req 04 val 1400 [ 575.606046][ T5775] pwc: recv_control_msg error -32 req 02 val 2000 [ 575.606663][ T5775] pwc: recv_control_msg error -32 req 02 val 2100 [ 575.617667][ T5775] pwc: recv_control_msg error -32 req 04 val 1500 [ 575.713567][T14980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.794193][T14980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.823909][ T5775] pwc: recv_control_msg error -71 req 02 val 2400 [ 575.824369][ T5775] pwc: recv_control_msg error -71 req 02 val 2600 [ 575.824875][ T5775] pwc: recv_control_msg error -71 req 02 val 2900 [ 575.825319][ T5775] pwc: recv_control_msg error -71 req 02 val 2800 [ 575.827365][ T5775] pwc: recv_control_msg error -71 req 04 val 1100 [ 575.861863][ T5775] pwc: recv_control_msg error -71 req 04 val 1200 [ 575.904533][ T5775] pwc: Registered as video103. [ 575.916457][ T5775] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input57 [ 575.937644][ T8142] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 575.964178][ T5775] usb 5-1: USB disconnect, device number 120 [ 576.087789][ T8142] usb 4-1: Using ep0 maxpacket: 16 [ 576.089518][ T8142] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 576.089567][ T8142] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.089590][ T8142] usb 4-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.089610][ T8142] usb 4-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 576.089634][ T8142] usb 4-1: config 7 interface 0 has no altsetting 0 [ 576.089663][ T8142] usb 4-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 576.089683][ T8142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.286089][ T1418] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.571880][ T8142] hid (null): invalid report_size 26978 [ 576.637191][ T8142] input: HID 0458:5010 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:7.0/0003:0458:5010.003B/input/input58 [ 576.782183][T14980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.782711][T14980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 576.812500][T14981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 576.834385][T14981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 577.187369][ T8142] kye 0003:0458:5010.003B: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.3-1/input0 [ 577.235579][T14990] loop3: detected capacity change from 0 to 7 [ 577.338551][ T1418] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.348242][ T5606] Bluetooth: hci3: command tx timeout [ 577.495113][T14990] Dev loop3: unable to read RDB block 7 [ 577.495154][T14990] loop3: unable to read partition table [ 577.496109][T14990] loop3: partition table beyond EOD, truncated [ 577.500527][ T5607] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 577.503090][T14990] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 577.551274][ T8142] usb 4-1: USB disconnect, device number 21 [ 578.084993][ T4966] Dev loop3: unable to read RDB block 7 [ 578.085034][ T4966] loop3: unable to read partition table [ 578.085338][ T4966] loop3: partition table beyond EOD, truncated [ 578.272471][ T5603] Flush: task=udevd[5603] dev=loop3 state=2 [ 578.368630][ T5603] Teardown: task=udevd[5603] dev=loop3 state=2 [ 578.413125][T15014] netlink: 'syz.4.2259': attribute type 21 has an invalid length. [ 578.468121][T15014] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2259'. [ 578.522628][T14947] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.522951][T14947] bridge0: port 1(bridge_slave_0) entered disabled state [ 578.523162][T14947] bridge_slave_0: entered allmulticast mode [ 578.535482][T14947] bridge_slave_0: entered promiscuous mode [ 578.541169][T14947] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.541519][T14947] bridge0: port 2(bridge_slave_1) entered disabled state [ 578.541742][T14947] bridge_slave_1: entered allmulticast mode [ 578.544867][T14947] bridge_slave_1: entered promiscuous mode [ 578.612009][T14947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.625417][T14947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 578.701600][T15016] FAULT_INJECTION: forcing a failure. [ 578.701600][T15016] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 578.701641][T15016] CPU: 1 UID: 0 PID: 15016 Comm: syz.4.2260 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 578.701665][T15016] Tainted: [L]=SOFTLOCKUP [ 578.701672][T15016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 578.701686][T15016] Call Trace: [ 578.701694][T15016] [ 578.701701][T15016] dump_stack_lvl+0xe8/0x150 [ 578.701727][T15016] should_fail_ex+0x467/0x600 [ 578.701756][T15016] _copy_from_user+0x2d/0xb0 [ 578.701776][T15016] ___sys_sendmsg+0x1c6/0x360 [ 578.701800][T15016] ? __lock_acquire+0x6df/0x2e40 [ 578.701822][T15016] ? __pfx____sys_sendmsg+0x10/0x10 [ 578.701876][T15016] ? __fget_files+0x2a/0x420 [ 578.701898][T15016] ? __fget_files+0x3a8/0x420 [ 578.701928][T15016] __x64_sys_sendmsg+0x1b7/0x290 [ 578.701955][T15016] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 578.701995][T15016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.702014][T15016] do_syscall_64+0x174/0x580 [ 578.702038][T15016] ? trace_irq_disable+0x3b/0x140 [ 578.702056][T15016] ? clear_bhb_loop+0x40/0x90 [ 578.702078][T15016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.702100][T15016] RIP: 0033:0x7f83e2a2de59 [ 578.702117][T15016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.702131][T15016] RSP: 002b:00007f83e0c86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 578.702150][T15016] RAX: ffffffffffffffda RBX: 00007f83e2cb5fa0 RCX: 00007f83e2a2de59 [ 578.702163][T15016] RDX: 0000000020040040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 578.702175][T15016] RBP: 00007f83e0c86090 R08: 0000000000000000 R09: 0000000000000000 [ 578.702187][T15016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.702198][T15016] R13: 00007f83e2cb6038 R14: 00007f83e2cb5fa0 R15: 00007ffe34440fe8 [ 578.702226][T15016] [ 578.767930][ T8142] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 578.933550][ T8142] usb 4-1: Using ep0 maxpacket: 16 [ 578.941993][ T8142] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.942020][ T8142] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.942040][ T8142] usb 4-1: config 0 interface 0 has no altsetting 0 [ 578.942069][ T8142] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 578.942088][ T8142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.946946][ T8142] usb 4-1: config 0 descriptor?? [ 579.031319][ T37] audit: type=1800 audit(1783330289.183:332): pid=15020 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.5.2262" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 579.428068][ T5606] Bluetooth: hci3: command tx timeout [ 579.479647][T14947] team0: Port device team_slave_0 added [ 579.506906][T14947] team0: Port device team_slave_1 added [ 579.570710][ T5607] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 579.723142][ T8142] usbhid 4-1:0.0: can't add hid device: -71 [ 579.723248][ T8142] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 579.727704][ T5607] usb 6-1: Using ep0 maxpacket: 16 [ 579.731422][ T8142] usb 4-1: USB disconnect, device number 22 [ 579.738635][ T5607] usb 6-1: too many configurations: 123, using maximum allowed: 8 [ 579.747422][ T5607] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.759183][ T5607] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.774301][ T5607] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.815263][ T5607] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.864561][ T5607] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.866432][ T5607] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.887994][ T5607] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.895674][ T5607] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 579.918588][ T5607] usb 6-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 579.918613][ T5607] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 579.918631][ T5607] usb 6-1: SerialNumber: syz [ 579.924243][ T5607] usb 6-1: config 0 descriptor?? [ 579.971452][ T5607] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input59 [ 580.057360][T14947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 580.057370][T14947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.057384][T14947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 580.081700][T14947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 580.081716][T14947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 580.081738][T14947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 580.156919][T15035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.157391][T15035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.184177][ T4951] bcm5974 6-1:0.0: could not read from device [ 580.233119][ T5607] usb 6-1: USB disconnect, device number 19 [ 580.427977][ T1418] bridge_slave_1: left allmulticast mode [ 580.428000][ T1418] bridge_slave_1: left promiscuous mode [ 580.428188][ T1418] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.549916][ T1418] bridge_slave_0: left allmulticast mode [ 580.549948][ T1418] bridge_slave_0: left promiscuous mode [ 580.569278][ T1418] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.857778][ T1261] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 580.989493][ T1261] usb 4-1: device descriptor read/64, error -71 [ 580.997700][ T5687] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 581.147821][ T5687] usb 6-1: Using ep0 maxpacket: 16 [ 581.149466][ T5687] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 240, changing to 7 [ 581.151517][ T5687] usb 6-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice= 0.40 [ 581.151540][ T5687] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.151550][ T5687] usb 6-1: Product: syz [ 581.151557][ T5687] usb 6-1: Manufacturer: syz [ 581.151564][ T5687] usb 6-1: SerialNumber: syz [ 581.267785][ T1261] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 581.398740][ T1261] usb 4-1: device descriptor read/64, error -71 [ 581.510603][ T1261] usb usb4-port1: attempt power cycle [ 581.511452][ T5606] Bluetooth: hci3: command tx timeout [ 581.857796][ T1261] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 581.878861][ T1261] usb 4-1: device descriptor read/8, error -71 [ 582.020265][ T1418] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 582.081026][ T1418] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 582.117706][ T1261] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 582.139083][ T1261] usb 4-1: device descriptor read/8, error -71 [ 582.159115][ T1418] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 582.237919][ T1418] veth1_vlan: left allmulticast mode [ 582.254406][ T1261] usb usb4-port1: unable to enumerate USB device [ 582.265535][ T1418] bond0 (unregistering): Released all slaves [ 582.310992][T14947] hsr_slave_0: entered promiscuous mode [ 582.313199][T14947] hsr_slave_1: entered promiscuous mode [ 582.314845][T15040] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2267'. [ 582.688950][ T1418] : left promiscuous mode [ 583.231490][T15050] tmpfs: Unknown parameter 'mp' [ 583.513854][T15057] FAULT_INJECTION: forcing a failure. [ 583.513854][T15057] name failslab, interval 1, probability 0, space 0, times 1 [ 583.513885][T15057] CPU: 1 UID: 0 PID: 15057 Comm: syz.4.2270 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 583.513905][T15057] Tainted: [L]=SOFTLOCKUP [ 583.513911][T15057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 583.513920][T15057] Call Trace: [ 583.513926][T15057] [ 583.513933][T15057] dump_stack_lvl+0xe8/0x150 [ 583.513957][T15057] should_fail_ex+0x467/0x600 [ 583.513983][T15057] should_failslab+0xa8/0x100 [ 583.514007][T15057] kmem_cache_alloc_node_noprof+0xac/0x660 [ 583.514025][T15057] ? __alloc_skb+0x1d7/0x7a0 [ 583.514040][T15057] ? __alloc_skb+0x1d7/0x7a0 [ 583.514060][T15057] __alloc_skb+0x1d7/0x7a0 [ 583.514088][T15057] netlink_sendmsg+0x5d4/0xb40 [ 583.514114][T15057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.514137][T15057] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 583.514155][T15057] ? __kernel_text_address+0xd/0x30 [ 583.514175][T15057] ? unwind_get_return_address+0x4d/0x90 [ 583.514191][T15057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 583.514209][T15057] sock_sendmsg_nosec+0x13a/0x180 [ 583.514228][T15057] ____sys_sendmsg+0x565/0x870 [ 583.514256][T15057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 583.514281][T15057] ? import_iovec+0x73/0xa0 [ 583.514300][T15057] ___sys_sendmsg+0x2a5/0x360 [ 583.514318][T15057] ? __lock_acquire+0x6df/0x2e40 [ 583.514336][T15057] ? __pfx____sys_sendmsg+0x10/0x10 [ 583.514382][T15057] ? __fget_files+0x2a/0x420 [ 583.514402][T15057] ? __fget_files+0x3a8/0x420 [ 583.514428][T15057] __x64_sys_sendmsg+0x1b7/0x290 [ 583.514451][T15057] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 583.514486][T15057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.514503][T15057] do_syscall_64+0x174/0x580 [ 583.514526][T15057] ? trace_irq_disable+0x3b/0x140 [ 583.514542][T15057] ? clear_bhb_loop+0x40/0x90 [ 583.514559][T15057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.514573][T15057] RIP: 0033:0x7f83e2a2de59 [ 583.514589][T15057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.514601][T15057] RSP: 002b:00007f83e0c86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.514617][T15057] RAX: ffffffffffffffda RBX: 00007f83e2cb5fa0 RCX: 00007f83e2a2de59 [ 583.514628][T15057] RDX: 0000000020040040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 583.514639][T15057] RBP: 00007f83e0c86090 R08: 0000000000000000 R09: 0000000000000000 [ 583.514648][T15057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.514656][T15057] R13: 00007f83e2cb6038 R14: 00007f83e2cb5fa0 R15: 00007ffe34440fe8 [ 583.514680][T15057] [ 584.133926][T13298] do_umount: task=syz-executor[13298] propagate_mount_busy()!=0 [ 584.134162][T13298] do_umount: task=syz-executor[13298] propagate_mount_busy()!=0 [ 584.212014][T15066] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2273'. [ 584.289610][ T5687] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 584.376152][ T5687] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 584.440227][ T1261] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 584.456905][ T5687] usb 6-1: USB disconnect, device number 20 [ 584.536775][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 584.603337][ T1261] usb 4-1: Using ep0 maxpacket: 8 [ 584.607321][ T1261] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 584.607345][ T1261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.607362][ T1261] usb 4-1: Product: syz [ 584.607374][ T1261] usb 4-1: Manufacturer: syz [ 584.607386][ T1261] usb 4-1: SerialNumber: syz [ 584.620529][ T1261] usb 4-1: config 0 descriptor?? [ 584.837926][ T1261] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 584.838029][ T1261] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 584.851430][ T1261] usb 4-1: USB disconnect, device number 27 [ 585.210365][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 585.647756][ T1261] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 585.839712][ T1261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 585.839736][ T1261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 585.839747][ T1261] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 585.839769][ T1261] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 585.839780][ T1261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.842538][ T1261] usb 4-1: config 0 descriptor?? [ 586.520909][ T1261] usbhid 4-1:0.0: can't add hid device: -71 [ 586.521042][ T1261] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 586.526678][ T1261] usb 4-1: USB disconnect, device number 28 [ 586.957737][ T1418] hsr_slave_0: left promiscuous mode [ 586.997742][ T1418] hsr_slave_1: left promiscuous mode [ 586.998405][ T1418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.998429][ T1418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.018701][ T1418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.018724][ T1418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.092948][T15083] tmpfs: Unknown parameter 'mp' [ 587.132080][ T1418] veth0_vlan: left promiscuous mode [ 587.377728][ T1261] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 587.544472][ T1261] usb 4-1: Using ep0 maxpacket: 16 [ 587.546131][ T1261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.546158][ T1261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.546170][ T1261] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 587.546192][ T1261] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 587.546204][ T1261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.550686][ T1261] usb 4-1: config 0 descriptor?? [ 587.636487][T15072] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 588.021973][ T1261] microsoft 0003:045E:07DA.003C: report_id 0 is invalid [ 588.021996][ T1261] microsoft 0003:045E:07DA.003C: item 0 1 1 8 parsing failed [ 588.022589][ T1261] microsoft 0003:045E:07DA.003C: parse failed [ 588.022676][ T1261] microsoft 0003:045E:07DA.003C: probe with driver microsoft failed with error -22 [ 588.057716][ T5687] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 588.091322][ T1418] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 588.111999][ T12] smc: removing ib device syz0 [ 588.219239][ T1418] team0 (unregistering): Port device team_slave_1 removed [ 588.220880][T15085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.221376][T15085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.226410][ T5687] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.226424][ T5687] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 588.226451][ T5687] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 588.226462][ T5687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.257898][T15085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.260496][T15085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.263602][ T1261] usb 4-1: USB disconnect, device number 29 [ 588.311066][ T5687] usb 5-1: config 0 descriptor?? [ 588.368434][ T1418] team0 (unregistering): Port device team_slave_0 removed [ 589.059868][ T5687] Bluetooth: Can't get version to change to load ram patch err [ 589.059886][ T5687] Bluetooth: Loading sysconfig file failed [ 589.059919][ T5687] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 589.117713][ T5687] usb 5-1: USB disconnect, device number 122 [ 589.655326][ T12] smbdirect: ib_dev[syz0] removed [ 589.743321][T14947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 589.916634][T14947] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 589.928307][T14947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 589.968274][ T43] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 590.123289][T14947] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 590.131147][T14947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 590.198246][ T43] usb 4-1: config 11 has an invalid interface number: 196 but max is 0 [ 590.198273][ T43] usb 4-1: config 11 has no interface number 0 [ 590.198300][ T43] usb 4-1: config 11 interface 196 has no altsetting 0 [ 590.230621][ T43] usb 4-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice= a.87 [ 590.230645][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.230656][ T43] usb 4-1: Product: syz [ 590.230663][ T43] usb 4-1: Manufacturer: syz [ 590.230670][ T43] usb 4-1: SerialNumber: syz [ 590.252773][T14947] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 590.254393][T14947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 590.605448][T14947] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 590.702413][T15122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.703821][T15122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 591.424263][T15133] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2284'. [ 591.700981][T15139] tmpfs: Unknown parameter 'mp' [ 591.893960][T14947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 592.076003][T14947] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.133068][ T6130] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.133245][ T6130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.306410][ T1360] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.365128][ T1360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.836632][ T43] cypress_cy7c63 4-1:11.196: Cypress CY7C63xxx device now attached [ 592.862594][T15157] FAULT_INJECTION: forcing a failure. [ 592.862594][T15157] name failslab, interval 1, probability 0, space 0, times 0 [ 592.862627][T15157] CPU: 0 UID: 0 PID: 15157 Comm: syz.4.2287 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 592.862650][T15157] Tainted: [L]=SOFTLOCKUP [ 592.862657][T15157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 592.862667][T15157] Call Trace: [ 592.862675][T15157] [ 592.862682][T15157] dump_stack_lvl+0xe8/0x150 [ 592.862707][T15157] should_fail_ex+0x467/0x600 [ 592.862737][T15157] should_failslab+0xa8/0x100 [ 592.862761][T15157] ? skb_clone+0x212/0x3a0 [ 592.862785][T15157] kmem_cache_alloc_noprof+0x9e/0x680 [ 592.862809][T15157] ? skb_clone+0x212/0x3a0 [ 592.862838][T15157] skb_clone+0x212/0x3a0 [ 592.862873][T15157] __netlink_deliver_tap+0x410/0x880 [ 592.862906][T15157] ? netlink_deliver_tap+0x2e/0x1b0 [ 592.862931][T15157] netlink_deliver_tap+0x19c/0x1b0 [ 592.862955][T15157] netlink_unicast+0x7b8/0x990 [ 592.862986][T15157] netlink_sendmsg+0x813/0xb40 [ 592.863017][T15157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.863044][T15157] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 592.863066][T15157] ? __kernel_text_address+0xd/0x30 [ 592.863088][T15157] ? unwind_get_return_address+0x4d/0x90 [ 592.863107][T15157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.863134][T15157] sock_sendmsg_nosec+0x13a/0x180 [ 592.863155][T15157] ____sys_sendmsg+0x565/0x870 [ 592.863185][T15157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 592.863217][T15157] ? import_iovec+0x73/0xa0 [ 592.863238][T15157] ___sys_sendmsg+0x2a5/0x360 [ 592.863260][T15157] ? __lock_acquire+0x6df/0x2e40 [ 592.863281][T15157] ? __pfx____sys_sendmsg+0x10/0x10 [ 592.863335][T15157] ? __fget_files+0x2a/0x420 [ 592.863359][T15157] ? __fget_files+0x3a8/0x420 [ 592.863391][T15157] __x64_sys_sendmsg+0x1b7/0x290 [ 592.863418][T15157] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 592.863458][T15157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.863477][T15157] do_syscall_64+0x174/0x580 [ 592.863501][T15157] ? trace_irq_disable+0x3b/0x140 [ 592.863518][T15157] ? clear_bhb_loop+0x40/0x90 [ 592.863540][T15157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.863558][T15157] RIP: 0033:0x7f83e2a2de59 [ 592.863574][T15157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.863589][T15157] RSP: 002b:00007f83e0c86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 592.863608][T15157] RAX: ffffffffffffffda RBX: 00007f83e2cb5fa0 RCX: 00007f83e2a2de59 [ 592.863620][T15157] RDX: 0000000020040040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 592.863630][T15157] RBP: 00007f83e0c86090 R08: 0000000000000000 R09: 0000000000000000 [ 592.863640][T15157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.863651][T15157] R13: 00007f83e2cb6038 R14: 00007f83e2cb5fa0 R15: 00007ffe34440fe8 [ 592.863678][T15157] [ 592.867148][T15157] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2287'. [ 593.230354][ T43] usb 4-1: USB disconnect, device number 30 [ 593.325759][ T43] cypress_cy7c63 4-1:11.196: Cypress CY7C63xxx device now disconnected [ 593.619509][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'. [ 593.743286][ T43] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 593.931217][ T43] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 593.931247][ T43] usb 4-1: config 0 interface 0 has no altsetting 0 [ 593.931275][ T43] usb 4-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 593.931296][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.985843][ T43] usb 4-1: config 0 descriptor?? [ 593.986552][T15163] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 594.137767][ T5762] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 594.297981][ T5762] usb 5-1: Using ep0 maxpacket: 32 [ 594.307865][ T5762] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.307909][ T5762] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.307934][ T5762] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.308004][ T5762] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 594.308030][ T5762] usb 5-1: config 0 interface 0 has no altsetting 0 [ 594.308062][ T5762] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 594.308085][ T5762] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.492570][ T5762] usb 5-1: config 0 descriptor?? [ 594.512161][ T43] razer 0003:1532:010D.003D: unknown main item tag 0x0 [ 594.512194][ T43] razer 0003:1532:010D.003D: unknown main item tag 0x0 [ 594.512219][ T43] razer 0003:1532:010D.003D: unknown main item tag 0x0 [ 594.512244][ T43] razer 0003:1532:010D.003D: unknown main item tag 0x0 [ 594.512267][ T43] razer 0003:1532:010D.003D: unknown main item tag 0x0 [ 594.512292][ T43] razer 0003:1532:010D.003D: unknown main item tag 0x0 [ 594.512315][ T43] razer 0003:1532:010D.003D: unknown main item tag 0x0 [ 594.512340][ T43] razer 0003:1532:010D.003D: unknown main item tag 0x0 [ 594.512365][ T43] razer 0003:1532:010D.003D: unknown main item tag 0x0 [ 594.512389][ T43] razer 0003:1532:010D.003D: unknown main item tag 0x0 [ 594.700782][ T43] razer 0003:1532:010D.003D: hidraw0: USB HID v7f.fd Device [HID 1532:010d] on usb-dummy_hcd.3-1/input0 [ 594.726229][T14947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.977343][T15163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 594.981185][T15163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.000062][ T5775] usb 4-1: USB disconnect, device number 31 [ 595.024497][ T5762] corsair-psu 0003:1B1C:1C09.003E: hidraw1: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.4-1/input0 [ 595.077779][ T5762] corsair-psu 0003:1B1C:1C09.003E: unable to initialize device (-38) [ 595.102579][ T5762] corsair-psu 0003:1B1C:1C09.003E: probe with driver corsair-psu failed with error -38 [ 595.114651][T14947] veth0_vlan: entered promiscuous mode [ 595.157342][ T199] usb 5-1: USB disconnect, device number 123 [ 595.162260][T14947] veth1_vlan: entered promiscuous mode [ 595.251588][T15197] fido_id[15197]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 595.304903][T14947] veth0_macvtap: entered promiscuous mode [ 595.326978][T14947] veth1_macvtap: entered promiscuous mode [ 595.390000][T14947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.405193][T14947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.423089][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.452284][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.452521][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.452557][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 596.132845][ T6477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.132862][ T6477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.702067][T15220] tmpfs: Bad value for 'mpol' [ 596.724792][T15219] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2292'. [ 596.761468][ T6130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.761486][ T6130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.867817][ T5606] Bluetooth: hci3: command tx timeout [ 597.107929][ T5607] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 597.217698][T14707] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 597.258825][ T5607] usb 4-1: Using ep0 maxpacket: 16 [ 597.265981][ T5607] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 597.266003][ T5607] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.266020][ T5607] usb 4-1: config 0 has no interface number 0 [ 597.297021][ T5607] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 597.297047][ T5607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=21 [ 597.297065][ T5607] usb 4-1: Product: syz [ 597.297077][ T5607] usb 4-1: Manufacturer: syz [ 597.297090][ T5607] usb 4-1: SerialNumber: syz [ 597.342861][ T5607] usb 4-1: config 0 descriptor?? [ 597.367784][T14707] usb 5-1: Using ep0 maxpacket: 32 [ 597.371905][T14707] usb 5-1: unable to get BOS descriptor or descriptor too short [ 597.379489][T14707] usb 5-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice=aa.40 [ 597.379513][T14707] usb 5-1: New USB device strings: Mfr=206, Product=224, SerialNumber=74 [ 597.379531][T14707] usb 5-1: Product: syz [ 597.379544][T14707] usb 5-1: Manufacturer: syz [ 597.379556][T14707] usb 5-1: SerialNumber: syz [ 597.563615][T15224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 597.564530][T15224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 597.573310][ T8142] usb 4-1: USB disconnect, device number 32 [ 597.688261][T14707] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 597.688313][T14707] usb 5-1: MIDIStreaming interface descriptor not found [ 597.841717][T15251] FAULT_INJECTION: forcing a failure. [ 597.841717][T15251] name failslab, interval 1, probability 0, space 0, times 0 [ 597.841749][T15251] CPU: 0 UID: 0 PID: 15251 Comm: syz.0.2296 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 597.841773][T15251] Tainted: [L]=SOFTLOCKUP [ 597.841779][T15251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 597.841789][T15251] Call Trace: [ 597.841797][T15251] [ 597.841804][T15251] dump_stack_lvl+0xe8/0x150 [ 597.841829][T15251] should_fail_ex+0x467/0x600 [ 597.841858][T15251] should_failslab+0xa8/0x100 [ 597.841883][T15251] ? skb_clone+0x212/0x3a0 [ 597.841907][T15251] kmem_cache_alloc_noprof+0x9e/0x680 [ 597.841929][T15251] ? cap_capable+0x123/0x460 [ 597.841950][T15251] ? skb_clone+0x212/0x3a0 [ 597.841978][T15251] skb_clone+0x212/0x3a0 [ 597.842000][T15251] ? nfnetlink_rcv+0x4b0/0x28d0 [ 597.842024][T15251] nfnetlink_rcv+0x4e2/0x28d0 [ 597.842048][T15251] ? sock_sendmsg_nosec+0x13a/0x180 [ 597.842072][T15251] ? unwind_get_return_address+0x4d/0x90 [ 597.842097][T15251] ? trim_netdev_trace+0x791/0x820 [ 597.842123][T15251] ? __pfx_trim_netdev_trace+0x10/0x10 [ 597.842140][T15251] ? stack_trace_save+0xa9/0x100 [ 597.842166][T15251] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 597.842202][T15251] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 597.842220][T15251] ? ref_tracker_free+0x668/0x820 [ 597.842243][T15251] ? __netlink_deliver_tap+0x600/0x880 [ 597.842266][T15251] ? netlink_deliver_tap+0x19c/0x1b0 [ 597.842288][T15251] ? netlink_unicast+0x7b8/0x990 [ 597.842308][T15251] ? netlink_sendmsg+0x813/0xb40 [ 597.842329][T15251] ? sock_sendmsg_nosec+0x13a/0x180 [ 597.842353][T15251] ? ____sys_sendmsg+0x565/0x870 [ 597.842375][T15251] ? ___sys_sendmsg+0x2a5/0x360 [ 597.842396][T15251] ? __x64_sys_sendmsg+0x1b7/0x290 [ 597.842416][T15251] ? do_syscall_64+0x174/0x580 [ 597.842440][T15251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.842464][T15251] ? __skb_clone+0x449/0x6c0 [ 597.842492][T15251] ? skb_clone+0x246/0x3a0 [ 597.842517][T15251] ? __netlink_deliver_tap+0x838/0x880 [ 597.842540][T15251] ? netlink_deliver_tap+0x2e/0x1b0 [ 597.842569][T15251] ? netlink_deliver_tap+0x2e/0x1b0 [ 597.842591][T15251] ? netlink_deliver_tap+0x2e/0x1b0 [ 597.842620][T15251] netlink_unicast+0x7f5/0x990 [ 597.842652][T15251] netlink_sendmsg+0x813/0xb40 [ 597.842684][T15251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.842710][T15251] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 597.842734][T15251] ? __kernel_text_address+0xd/0x30 [ 597.842758][T15251] ? unwind_get_return_address+0x4d/0x90 [ 597.842778][T15251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.842801][T15251] sock_sendmsg_nosec+0x13a/0x180 [ 597.842822][T15251] ____sys_sendmsg+0x565/0x870 [ 597.842853][T15251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.842886][T15251] ? import_iovec+0x73/0xa0 [ 597.842909][T15251] ___sys_sendmsg+0x2a5/0x360 [ 597.842931][T15251] ? __lock_acquire+0x6df/0x2e40 [ 597.842952][T15251] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.843008][T15251] ? __fget_files+0x2a/0x420 [ 597.843031][T15251] ? __fget_files+0x3a8/0x420 [ 597.843063][T15251] __x64_sys_sendmsg+0x1b7/0x290 [ 597.843089][T15251] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 597.843129][T15251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.843149][T15251] do_syscall_64+0x174/0x580 [ 597.843171][T15251] ? trace_irq_disable+0x3b/0x140 [ 597.843188][T15251] ? clear_bhb_loop+0x40/0x90 [ 597.843211][T15251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.843229][T15251] RIP: 0033:0x7f870513de59 [ 597.843246][T15251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.843260][T15251] RSP: 002b:00007f8703396028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.843280][T15251] RAX: ffffffffffffffda RBX: 00007f87053c5fa0 RCX: 00007f870513de59 [ 597.843292][T15251] RDX: 0000000020040040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 597.843304][T15251] RBP: 00007f8703396090 R08: 0000000000000000 R09: 0000000000000000 [ 597.843315][T15251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.843326][T15251] R13: 00007f87053c6038 R14: 00007f87053c5fa0 R15: 00007fff9b552f58 [ 597.843361][T15251] [ 597.904378][T14707] usb 5-1: USB disconnect, device number 124 [ 597.952504][ T6414] udevd[6414]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 598.409755][T15261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 598.420456][T15261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 598.612975][T15272] tmpfs: Bad value for 'mpol' [ 598.622488][ T5607] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 598.801468][ T5607] usb 5-1: unable to get BOS descriptor or descriptor too short [ 598.803694][ T5607] usb 5-1: config 228 has an invalid interface number: 99 but max is 0 [ 598.803718][ T5607] usb 5-1: config 228 has no interface number 0 [ 598.803761][ T5607] usb 5-1: config 228 interface 99 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 598.807304][ T5607] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=af.1e [ 598.807329][ T5607] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.807344][ T5607] usb 5-1: Product: syz [ 598.807357][ T5607] usb 5-1: Manufacturer: syz [ 598.807369][ T5607] usb 5-1: SerialNumber: syz [ 599.024815][T15279] can0: slcan on ptm0. [ 599.154135][ T5607] ath6kl: Failed to submit usb control message: -71 [ 599.154182][ T5607] ath6kl: unable to send the bmi data to the device: -71 [ 599.154196][ T5607] ath6kl: Unable to send get target info: -71 [ 599.206437][ T5607] ath6kl: Failed to init ath6kl core: -71 [ 599.221257][ T5607] ath6kl_usb 5-1:228.99: probe with driver ath6kl_usb failed with error -71 [ 599.261604][ T5607] usb 5-1: USB disconnect, device number 125 [ 599.491068][T15297] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2305'. [ 600.140991][ T5607] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 600.185400][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 600.232158][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 600.233688][ T5609] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 600.247863][ T5609] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 600.249112][ T5609] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 600.373672][ T5607] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 600.373700][ T5607] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.418896][ T5607] usb 1-1: config 0 descriptor?? [ 600.486548][T15277] can0 (unregistered): slcan off ptm0. [ 600.776611][ T43] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 600.929565][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 600.932262][T14707] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 600.961453][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.961477][ T43] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 600.964994][ T43] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 600.965019][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.965037][ T43] usb 5-1: Product: syz [ 600.965050][ T43] usb 5-1: Manufacturer: syz [ 600.965194][ T43] usb 5-1: SerialNumber: syz [ 601.045573][ T43] usb 5-1: 0:2 : does not exist [ 601.045684][ T43] usb 5-1: unit 6 not found! [ 601.076271][T14707] usb 4-1: device descriptor read/64, error -71 [ 601.248879][ T8142] usb 5-1: USB disconnect, device number 126 [ 601.308839][T14707] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 601.447695][T14707] usb 4-1: device descriptor read/64, error -71 [ 601.565201][T14707] usb usb4-port1: attempt power cycle [ 601.705156][ T5607] usb 1-1: Cannot set autoneg [ 601.705380][ T5607] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 601.767724][ T5607] usb 1-1: USB disconnect, device number 56 [ 601.897777][T14707] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 601.921865][T14707] usb 4-1: device descriptor read/8, error -71 [ 602.094008][ T6975] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.177727][T14707] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 602.206891][T14707] usb 4-1: device descriptor read/8, error -71 [ 602.215303][T15337] tmpfs: Bad value for 'mpol' [ 602.324136][T14707] usb usb4-port1: unable to enumerate USB device [ 602.325019][T15339] : renamed from vlan0 (while UP) [ 602.387960][ T5606] Bluetooth: hci0: command tx timeout [ 602.500805][T15348] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2314'. [ 602.500861][T15348] FAULT_INJECTION: forcing a failure. [ 602.500861][T15348] name failslab, interval 1, probability 0, space 0, times 0 [ 602.500878][T15348] CPU: 1 UID: 0 PID: 15348 Comm: syz.4.2314 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 602.500899][T15348] Tainted: [L]=SOFTLOCKUP [ 602.500903][T15348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 602.500909][T15348] Call Trace: [ 602.500914][T15348] [ 602.500919][T15348] dump_stack_lvl+0xe8/0x150 [ 602.500935][T15348] should_fail_ex+0x467/0x600 [ 602.500952][T15348] should_failslab+0xa8/0x100 [ 602.500969][T15348] __kmalloc_cache_noprof+0xa1/0x670 [ 602.500983][T15348] ? nft_target_select_ops+0x2d5/0x5e0 [ 602.500997][T15348] ? nft_target_select_ops+0x2d5/0x5e0 [ 602.501014][T15348] nft_target_select_ops+0x2d5/0x5e0 [ 602.501031][T15348] nf_tables_expr_parse+0x70a/0xa60 [ 602.501046][T15348] ? nf_tables_expr_parse+0x169/0xa60 [ 602.501058][T15348] ? __pfx_nf_tables_expr_parse+0x10/0x10 [ 602.501071][T15348] ? nft_pernet+0x23/0x240 [ 602.501083][T15348] ? nf_tables_newrule+0x11c1/0x28a0 [ 602.501099][T15348] nf_tables_newrule+0x1312/0x28a0 [ 602.501118][T15348] ? __pfx_nf_tables_newrule+0x10/0x10 [ 602.501130][T15348] ? lock_acquire+0x115/0x350 [ 602.501140][T15348] ? nfnl_pernet+0x23/0x240 [ 602.501158][T15348] ? __nla_parse+0x40/0x60 [ 602.501170][T15348] nfnetlink_rcv+0x1291/0x28d0 [ 602.501199][T15348] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 602.501219][T15348] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 602.501230][T15348] ? ref_tracker_free+0x668/0x820 [ 602.501256][T15348] ? skb_clone+0x246/0x3a0 [ 602.501272][T15348] ? __netlink_deliver_tap+0x838/0x880 [ 602.501290][T15348] ? netlink_deliver_tap+0x2e/0x1b0 [ 602.501303][T15348] ? netlink_deliver_tap+0x2e/0x1b0 [ 602.501320][T15348] netlink_unicast+0x7f5/0x990 [ 602.501338][T15348] netlink_sendmsg+0x813/0xb40 [ 602.501357][T15348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.501373][T15348] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 602.501386][T15348] ? __kernel_text_address+0xd/0x30 [ 602.501400][T15348] ? unwind_get_return_address+0x4d/0x90 [ 602.501411][T15348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 602.501425][T15348] sock_sendmsg_nosec+0x13a/0x180 [ 602.501437][T15348] ____sys_sendmsg+0x565/0x870 [ 602.501457][T15348] ? __pfx_____sys_sendmsg+0x10/0x10 [ 602.501475][T15348] ? import_iovec+0x73/0xa0 [ 602.501488][T15348] ___sys_sendmsg+0x2a5/0x360 [ 602.501501][T15348] ? __lock_acquire+0x6df/0x2e40 [ 602.501513][T15348] ? __pfx____sys_sendmsg+0x10/0x10 [ 602.501543][T15348] ? __fget_files+0x2a/0x420 [ 602.501557][T15348] ? __fget_files+0x3a8/0x420 [ 602.501575][T15348] __x64_sys_sendmsg+0x1b7/0x290 [ 602.501591][T15348] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 602.501613][T15348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.501624][T15348] do_syscall_64+0x174/0x580 [ 602.501638][T15348] ? trace_irq_disable+0x3b/0x140 [ 602.501648][T15348] ? clear_bhb_loop+0x40/0x90 [ 602.501661][T15348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 602.501671][T15348] RIP: 0033:0x7f83e2a2de59 [ 602.501681][T15348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 602.501689][T15348] RSP: 002b:00007f83e0c86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 602.501700][T15348] RAX: ffffffffffffffda RBX: 00007f83e2cb5fa0 RCX: 00007f83e2a2de59 [ 602.501708][T15348] RDX: 0000000020040040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 602.501714][T15348] RBP: 00007f83e0c86090 R08: 0000000000000000 R09: 0000000000000000 [ 602.501721][T15348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.501726][T15348] R13: 00007f83e2cb6038 R14: 00007f83e2cb5fa0 R15: 00007ffe34440fe8 [ 602.501741][T15348] [ 602.657705][ T1261] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 602.752964][ T6975] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.817677][ T1261] usb 1-1: Using ep0 maxpacket: 32 [ 602.838147][ T1261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 602.838176][ T1261] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 602.838213][ T1261] usb 1-1: New USB device found, idVendor=056a, idProduct=0028, bcdDevice= 0.00 [ 602.838233][ T1261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.876925][ T1261] usb 1-1: config 0 descriptor?? [ 602.910728][T15350] overlay: ./file0 is not a directory [ 602.911828][T15351] overlay: ./file0 is not a directory [ 603.486124][ T6975] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.496235][T15342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.500082][T15342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.646206][ T8142] usb 1-1: USB disconnect, device number 57 [ 603.805326][T15364] tmpfs: Bad value for 'mpol' [ 603.887301][T15366] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2319'. [ 604.133684][ T6975] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.425361][T15376] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2322'. [ 604.425460][T15376] FAULT_INJECTION: forcing a failure. [ 604.425460][T15376] name failslab, interval 1, probability 0, space 0, times 0 [ 604.425488][T15376] CPU: 0 UID: 0 PID: 15376 Comm: syz.0.2322 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 604.425512][T15376] Tainted: [L]=SOFTLOCKUP [ 604.425518][T15376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 604.425529][T15376] Call Trace: [ 604.425536][T15376] [ 604.425543][T15376] dump_stack_lvl+0xe8/0x150 [ 604.425568][T15376] should_fail_ex+0x467/0x600 [ 604.425597][T15376] should_failslab+0xa8/0x100 [ 604.425624][T15376] __kmalloc_noprof+0xfb/0x790 [ 604.425666][T15376] ? nft_pernet+0x23/0x240 [ 604.425688][T15376] ? nf_tables_newrule+0x1524/0x28a0 [ 604.425707][T15376] ? nf_tables_newrule+0x1524/0x28a0 [ 604.425734][T15376] nf_tables_newrule+0x1524/0x28a0 [ 604.425768][T15376] ? __pfx_nf_tables_newrule+0x10/0x10 [ 604.425788][T15376] ? lock_acquire+0x115/0x350 [ 604.425806][T15376] ? nfnl_pernet+0x23/0x240 [ 604.425837][T15376] ? __nla_parse+0x40/0x60 [ 604.425859][T15376] nfnetlink_rcv+0x1291/0x28d0 [ 604.425912][T15376] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 604.425950][T15376] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 604.425968][T15376] ? ref_tracker_free+0x668/0x820 [ 604.426020][T15376] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 604.426045][T15376] ? lockdep_hardirqs_on+0x7a/0x110 [ 604.426088][T15376] netlink_unicast+0x7f5/0x990 [ 604.426117][T15376] netlink_sendmsg+0x813/0xb40 [ 604.426148][T15376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.426173][T15376] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 604.426194][T15376] ? __kernel_text_address+0xd/0x30 [ 604.426217][T15376] ? unwind_get_return_address+0x4d/0x90 [ 604.426236][T15376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 604.426259][T15376] sock_sendmsg_nosec+0x13a/0x180 [ 604.426280][T15376] ____sys_sendmsg+0x565/0x870 [ 604.426313][T15376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 604.426345][T15376] ? import_iovec+0x73/0xa0 [ 604.426367][T15376] ___sys_sendmsg+0x2a5/0x360 [ 604.426390][T15376] ? __lock_acquire+0x6df/0x2e40 [ 604.426411][T15376] ? __pfx____sys_sendmsg+0x10/0x10 [ 604.426466][T15376] ? __fget_files+0x2a/0x420 [ 604.426489][T15376] ? __fget_files+0x3a8/0x420 [ 604.426522][T15376] __x64_sys_sendmsg+0x1b7/0x290 [ 604.426549][T15376] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 604.426589][T15376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.426608][T15376] do_syscall_64+0x174/0x580 [ 604.426631][T15376] ? trace_irq_disable+0x3b/0x140 [ 604.426648][T15376] ? clear_bhb_loop+0x40/0x90 [ 604.426679][T15376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.426697][T15376] RIP: 0033:0x7f870513de59 [ 604.426714][T15376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.426729][T15376] RSP: 002b:00007f8703396028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 604.426748][T15376] RAX: ffffffffffffffda RBX: 00007f87053c5fa0 RCX: 00007f870513de59 [ 604.426762][T15376] RDX: 0000000020040040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 604.426773][T15376] RBP: 00007f8703396090 R08: 0000000000000000 R09: 0000000000000000 [ 604.426784][T15376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.426795][T15376] R13: 00007f87053c6038 R14: 00007f87053c5fa0 R15: 00007fff9b552f58 [ 604.426825][T15376] [ 604.471563][ T5606] Bluetooth: hci0: command tx timeout [ 604.872305][T15387] ieee802154 phy0 wpan0: encryption failed: -22 [ 604.922713][T15306] bridge0: port 1(bridge_slave_0) entered blocking state [ 604.924175][T15306] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.924415][T15306] bridge_slave_0: entered allmulticast mode [ 604.946160][T15389] tmpfs: Bad value for 'mpol' [ 604.957717][T15306] bridge_slave_0: entered promiscuous mode [ 604.973557][T15306] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.977064][T15306] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.977291][T15306] bridge_slave_1: entered allmulticast mode [ 604.983091][ T5607] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 605.002802][T15306] bridge_slave_1: entered promiscuous mode [ 605.086449][T15393] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2328'. [ 605.125354][T15306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.132748][T15306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.141157][ T5607] usb 4-1: Using ep0 maxpacket: 32 [ 605.143956][ T5607] usb 4-1: config 12 has an invalid interface number: 83 but max is 0 [ 605.143978][ T5607] usb 4-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 605.143995][ T5607] usb 4-1: config 12 has no interface number 0 [ 605.144036][ T5607] usb 4-1: config 12 interface 83 altsetting 127 has a duplicate endpoint with address 0x1, skipping [ 605.144057][ T5607] usb 4-1: config 12 interface 83 altsetting 127 has a duplicate endpoint with address 0xA, skipping [ 605.144076][ T5607] usb 4-1: config 12 interface 83 altsetting 127 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 605.144103][ T5607] usb 4-1: config 12 interface 83 altsetting 127 has an invalid descriptor for endpoint zero, skipping [ 605.144121][ T5607] usb 4-1: config 12 interface 83 altsetting 127 has a duplicate endpoint with address 0x5, skipping [ 605.144141][ T5607] usb 4-1: config 12 interface 83 altsetting 127 has a duplicate endpoint with address 0x5, skipping [ 605.144160][ T5607] usb 4-1: config 12 interface 83 altsetting 127 has an endpoint descriptor with address 0x16, changing to 0x6 [ 605.144182][ T5607] usb 4-1: config 12 interface 83 altsetting 127 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 605.144204][ T5607] usb 4-1: config 12 interface 83 altsetting 127 has a duplicate endpoint with address 0x5, skipping [ 605.144224][ T5607] usb 4-1: config 12 interface 83 altsetting 127 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 605.144247][ T5607] usb 4-1: config 12 interface 83 altsetting 127 has a duplicate endpoint with address 0xA, skipping [ 605.144266][ T5607] usb 4-1: config 12 interface 83 altsetting 127 bulk endpoint 0xB has invalid maxpacket 64 [ 605.144287][ T5607] usb 4-1: config 12 interface 83 has no altsetting 0 [ 605.156182][ T5607] usb 4-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=40.4d [ 605.156206][ T5607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 605.156222][ T5607] usb 4-1: Product: 샠쎝êꁡ颤핗㥛沷㏧ᚓ鑧옸ꀳ뢺芙崪허薣Ⲱ곕鞣뎋恵잽깣山랋⸈击ᝁ晲푘莪Է蟳ӿᾧ犑䁿ຫ瓪ᣱ脍ᛟ䢆쭞禙咇䃔ꅅ瑺ᨉ滪菉ᲇ峬팲ဒ፰䁰ⱛ仌箣⡠鵊믌୭㛅沱鿄栵↡酌徼ࣞ঄不뎖꒘噧貉聳笞ڝ፯㋱鈍䫎釦竃㙷Ꭱﳲጐ䑒곃 [ 605.156247][ T5607] usb 4-1: Manufacturer: Ш [ 605.156260][ T5607] usb 4-1: SerialNumber: syz [ 605.205943][T15382] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 605.519017][T15306] team0: Port device team_slave_0 added [ 605.523453][T15306] team0: Port device team_slave_1 added [ 605.535276][T15397] tmpfs: Unknown parameter 'smackfsdef' [ 605.583534][T15397] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2329'. [ 605.743358][ T5607] dvb-usb: found a 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' in warm state. [ 605.743611][ T5607] dvb-usb: bulk message failed: -8 (3/0) [ 605.827209][ T5607] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 605.831164][ T5607] dvbdev: DVB: registering new adapter (TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device) [ 605.831217][ T5607] usb 4-1: media controller created [ 605.876200][ T5607] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 605.923026][ T5607] dvb-usb: bulk message failed: -8 (6/0) [ 605.923108][ T5607] dvb-usb: no frontend was attached by 'TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device' [ 605.929349][ T5775] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 605.934641][ T5607] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input60 [ 605.941415][ T5607] dvb-usb: schedule remote query interval to 150 msecs. [ 605.941526][ T5607] dvb-usb: bulk message failed: -8 (3/0) [ 605.959138][ T5607] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I / HAMA USB1.1 DVB-T device successfully initialized and connected. [ 605.963934][T15306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.963946][T15306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.963969][T15306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.994710][ T5607] usb 4-1: USB disconnect, device number 37 [ 606.142513][ T5607] dvb-usb: TwinhanDTV USB-Ter USB1.1 / Magic Box I successfully deinitialized and disconnected. [ 606.184939][T15306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.184949][T15306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 606.184963][T15306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.232101][ T5775] usb 5-1: Using ep0 maxpacket: 16 [ 606.250091][ T5775] usb 5-1: config 1 interface 0 has no altsetting 0 [ 606.293040][ T5775] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice= 0.40 [ 606.293065][ T5775] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.293083][ T5775] usb 5-1: Product: syz [ 606.293094][ T5775] usb 5-1: Manufacturer: syz [ 606.293107][ T5775] usb 5-1: SerialNumber: syz [ 606.547777][ T5606] Bluetooth: hci0: command tx timeout [ 606.553573][T15399] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 606.555812][T15399] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 606.592291][ T5775] usbhid 5-1:1.0: can't add hid device: -71 [ 606.592357][ T5775] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 606.659392][ T5775] usb 5-1: USB disconnect, device number 127 [ 606.731448][T15306] hsr_slave_0: entered promiscuous mode [ 606.732742][T15306] hsr_slave_1: entered promiscuous mode [ 606.734750][T15306] debugfs: 'hsr0' already exists in 'hsr' [ 606.734772][T15306] Cannot create hsr debugfs directory [ 606.857927][ T6975] bridge_slave_1: left allmulticast mode [ 606.857950][ T6975] bridge_slave_1: left promiscuous mode [ 606.858121][ T6975] bridge0: port 2(bridge_slave_1) entered disabled state [ 607.018574][ T6975] bridge_slave_0: left allmulticast mode [ 607.018597][ T6975] bridge_slave_0: left promiscuous mode [ 607.018764][ T6975] bridge0: port 1(bridge_slave_0) entered disabled state [ 607.143942][T15416] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2335'. [ 607.177102][T15416] FAULT_INJECTION: forcing a failure. [ 607.177102][T15416] name failslab, interval 1, probability 0, space 0, times 0 [ 607.177124][T15416] CPU: 1 UID: 0 PID: 15416 Comm: syz.4.2335 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 607.177138][T15416] Tainted: [L]=SOFTLOCKUP [ 607.177142][T15416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 607.177148][T15416] Call Trace: [ 607.177153][T15416] [ 607.177158][T15416] dump_stack_lvl+0xe8/0x150 [ 607.177174][T15416] should_fail_ex+0x467/0x600 [ 607.177192][T15416] should_failslab+0xa8/0x100 [ 607.177208][T15416] kmem_cache_alloc_node_noprof+0xac/0x660 [ 607.177222][T15416] ? __alloc_skb+0x1d7/0x7a0 [ 607.177234][T15416] ? __alloc_skb+0x1d7/0x7a0 [ 607.177249][T15416] __alloc_skb+0x1d7/0x7a0 [ 607.177263][T15416] netlink_ack+0x136/0xb30 [ 607.177280][T15416] ? __kmalloc_cache_noprof+0x3cd/0x670 [ 607.177293][T15416] ? nfnetlink_rcv+0x102a/0x28d0 [ 607.177307][T15416] ? skb_pull+0xb9/0x1d0 [ 607.177318][T15416] nfnetlink_rcv+0x2613/0x28d0 [ 607.177345][T15416] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 607.177365][T15416] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 607.177378][T15416] ? ref_tracker_free+0x668/0x820 [ 607.177403][T15416] ? skb_clone+0x246/0x3a0 [ 607.177418][T15416] ? __netlink_deliver_tap+0x838/0x880 [ 607.177436][T15416] ? netlink_deliver_tap+0x2e/0x1b0 [ 607.177450][T15416] ? netlink_deliver_tap+0x2e/0x1b0 [ 607.177466][T15416] netlink_unicast+0x7f5/0x990 [ 607.177483][T15416] netlink_sendmsg+0x813/0xb40 [ 607.177502][T15416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.177517][T15416] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 607.177537][T15416] ? __kernel_text_address+0xd/0x30 [ 607.177561][T15416] ? unwind_get_return_address+0x4d/0x90 [ 607.177580][T15416] ? __pfx_netlink_sendmsg+0x10/0x10 [ 607.177603][T15416] sock_sendmsg_nosec+0x13a/0x180 [ 607.177631][T15416] ____sys_sendmsg+0x565/0x870 [ 607.177662][T15416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 607.177682][T15416] ? import_iovec+0x73/0xa0 [ 607.177694][T15416] ___sys_sendmsg+0x2a5/0x360 [ 607.177708][T15416] ? __lock_acquire+0x6df/0x2e40 [ 607.177720][T15416] ? __pfx____sys_sendmsg+0x10/0x10 [ 607.177749][T15416] ? __fget_files+0x2a/0x420 [ 607.177763][T15416] ? __fget_files+0x3a8/0x420 [ 607.177781][T15416] __x64_sys_sendmsg+0x1b7/0x290 [ 607.177796][T15416] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 607.177818][T15416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.177829][T15416] do_syscall_64+0x174/0x580 [ 607.177843][T15416] ? trace_irq_disable+0x3b/0x140 [ 607.177853][T15416] ? clear_bhb_loop+0x40/0x90 [ 607.177865][T15416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.177875][T15416] RIP: 0033:0x7f83e2a2de59 [ 607.177886][T15416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.177895][T15416] RSP: 002b:00007f83e0c86028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 607.177906][T15416] RAX: ffffffffffffffda RBX: 00007f83e2cb5fa0 RCX: 00007f83e2a2de59 [ 607.177913][T15416] RDX: 0000000020040040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 607.177920][T15416] RBP: 00007f83e0c86090 R08: 0000000000000000 R09: 0000000000000000 [ 607.177926][T15416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 607.177932][T15416] R13: 00007f83e2cb6038 R14: 00007f83e2cb5fa0 R15: 00007ffe34440fe8 [ 607.177947][T15416] [ 607.617663][ T5762] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 607.777709][ T5762] usb 5-1: device descriptor read/64, error -71 [ 608.017761][ T5762] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 608.138549][ T6975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 608.157720][ T43] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 608.157862][ T5762] usb 5-1: device descriptor read/64, error -71 [ 608.219611][ T6975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 608.239523][ T6975] bond0 (unregistering): Released all slaves [ 608.268179][ T5762] usb usb5-port1: attempt power cycle [ 608.335991][ T43] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 608.336016][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.336026][ T43] usb 4-1: Product: syz [ 608.336034][ T43] usb 4-1: Manufacturer: syz [ 608.336041][ T43] usb 4-1: SerialNumber: syz [ 608.627699][ T5606] Bluetooth: hci0: command tx timeout [ 608.647775][ T5762] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 608.668243][ T5762] usb 5-1: device descriptor read/8, error -71 [ 608.908483][ T5762] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 608.934473][ T5762] usb 5-1: device descriptor read/8, error -71 [ 609.049247][ T5762] usb usb5-port1: unable to enumerate USB device [ 609.201286][ T43] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 609.201341][ T43] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 609.228378][ T43] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 609.252499][ T5806] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 609.275279][ T43] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 609.292959][ T43] usb 4-1: USB disconnect, device number 38 [ 609.410315][ T5806] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.410354][ T5806] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 609.412348][ T5806] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 609.412371][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.412383][ T5806] usb 1-1: Product: syz [ 609.412392][ T5806] usb 1-1: Manufacturer: syz [ 609.412399][ T5806] usb 1-1: SerialNumber: syz [ 609.517693][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 609.676898][T15432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.680453][T15432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.685331][T15432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 609.686659][T15432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 609.690826][ T5806] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 609.702757][ T5806] usb 1-1: USB disconnect, device number 58 [ 610.059174][ T5775] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 610.167861][ T5806] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 610.237872][ T5775] usb 4-1: Using ep0 maxpacket: 32 [ 610.259878][ T5775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.259909][ T5775] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 610.259948][ T5775] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 610.259971][ T5775] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.275979][ T5775] usb 4-1: config 0 descriptor?? [ 610.293839][ T5775] hub 4-1:0.0: USB hub found [ 610.317653][ T5806] usb 1-1: Using ep0 maxpacket: 8 [ 610.319679][ T5806] usb 1-1: config index 0 descriptor too short (expected 301, got 72) [ 610.319702][ T5806] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 610.319745][ T5806] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 610.319765][ T5806] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 610.319786][ T5806] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 610.319808][ T5806] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.319831][ T5806] usb 1-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 610.319868][ T5806] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 610.319887][ T5806] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.541076][ T5775] hub 4-1:0.0: config failed, hub has too many ports! (err -19) [ 610.572191][T15453] pipefs: Unknown parameter 'fd' [ 610.646756][ T5606] Bluetooth: Frame is too long (len 10, expected len 4) [ 610.692468][ T5806] usb 1-1: usb_control_msg returned -71 [ 610.692512][ T5806] usbtmc 1-1:16.0: can't read capabilities [ 610.747510][ T5806] usb 1-1: USB disconnect, device number 59 [ 610.765855][ T5775] usbhid 4-1:0.0: can't add hid device: -71 [ 610.765963][ T5775] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 610.818312][ T5775] usb 4-1: USB disconnect, device number 39 [ 610.852313][ T11] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 610.977731][ T11] usb 5-1: device descriptor read/64, error -71 [ 611.097740][ T6975] hsr_slave_0: left promiscuous mode [ 611.137682][ T6975] hsr_slave_1: left promiscuous mode [ 611.138708][ T6975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 611.138730][ T6975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 611.172392][ T6975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 611.172408][ T6975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 611.227805][ T11] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 611.250089][ T6975] veth1_macvtap: left promiscuous mode [ 611.250190][ T6975] veth0_macvtap: left promiscuous mode [ 611.250469][ T6975] veth1_vlan: left promiscuous mode [ 611.250679][ T6975] veth0_vlan: left promiscuous mode [ 611.329368][T15467] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2344'. [ 611.358000][ T11] usb 5-1: device descriptor read/64, error -71 [ 611.358321][T15467] FAULT_INJECTION: forcing a failure. [ 611.358321][T15467] name failslab, interval 1, probability 0, space 0, times 0 [ 611.358341][T15467] CPU: 0 UID: 0 PID: 15467 Comm: syz.3.2344 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 611.358355][T15467] Tainted: [L]=SOFTLOCKUP [ 611.358359][T15467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 611.358366][T15467] Call Trace: [ 611.358370][T15467] [ 611.358374][T15467] dump_stack_lvl+0xe8/0x150 [ 611.358390][T15467] should_fail_ex+0x467/0x600 [ 611.358407][T15467] should_failslab+0xa8/0x100 [ 611.358422][T15467] ? skb_clone+0x212/0x3a0 [ 611.358436][T15467] kmem_cache_alloc_noprof+0x9e/0x680 [ 611.358450][T15467] ? skb_clone+0x212/0x3a0 [ 611.358467][T15467] skb_clone+0x212/0x3a0 [ 611.358482][T15467] __netlink_deliver_tap+0x410/0x880 [ 611.358502][T15467] ? netlink_deliver_tap+0x2e/0x1b0 [ 611.358517][T15467] netlink_deliver_tap+0x19c/0x1b0 [ 611.358531][T15467] netlink_sendskb+0x68/0x140 [ 611.358545][T15467] nfnetlink_rcv+0x2613/0x28d0 [ 611.358573][T15467] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 611.358594][T15467] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 611.358604][T15467] ? ref_tracker_free+0x668/0x820 [ 611.358630][T15467] ? skb_clone+0x246/0x3a0 [ 611.358645][T15467] ? __netlink_deliver_tap+0x838/0x880 [ 611.358663][T15467] ? netlink_deliver_tap+0x2e/0x1b0 [ 611.358677][T15467] ? netlink_deliver_tap+0x2e/0x1b0 [ 611.358693][T15467] netlink_unicast+0x7f5/0x990 [ 611.358711][T15467] netlink_sendmsg+0x813/0xb40 [ 611.358730][T15467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.358745][T15467] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 611.358758][T15467] ? __kernel_text_address+0xd/0x30 [ 611.358773][T15467] ? unwind_get_return_address+0x4d/0x90 [ 611.358785][T15467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.358799][T15467] sock_sendmsg_nosec+0x13a/0x180 [ 611.358811][T15467] ____sys_sendmsg+0x565/0x870 [ 611.358830][T15467] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.358848][T15467] ? import_iovec+0x73/0xa0 [ 611.358861][T15467] ___sys_sendmsg+0x2a5/0x360 [ 611.358874][T15467] ? __lock_acquire+0x6df/0x2e40 [ 611.358885][T15467] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.358925][T15467] ? __fget_files+0x2a/0x420 [ 611.358955][T15467] ? __fget_files+0x3a8/0x420 [ 611.358985][T15467] __x64_sys_sendmsg+0x1b7/0x290 [ 611.359009][T15467] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 611.359031][T15467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.359042][T15467] do_syscall_64+0x174/0x580 [ 611.359057][T15467] ? trace_irq_disable+0x3b/0x140 [ 611.359067][T15467] ? clear_bhb_loop+0x40/0x90 [ 611.359079][T15467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.359089][T15467] RIP: 0033:0x7fe1365dde59 [ 611.359099][T15467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.359107][T15467] RSP: 002b:00007fe134836028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.359119][T15467] RAX: ffffffffffffffda RBX: 00007fe136865fa0 RCX: 00007fe1365dde59 [ 611.359126][T15467] RDX: 0000000020040040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 611.359133][T15467] RBP: 00007fe134836090 R08: 0000000000000000 R09: 0000000000000000 [ 611.359139][T15467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 611.359145][T15467] R13: 00007fe136866038 R14: 00007fe136865fa0 R15: 00007ffdbe6966e8 [ 611.359160][T15467] [ 611.474162][ T11] usb usb5-port1: attempt power cycle [ 611.819797][ T11] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 611.838900][ T11] usb 5-1: device descriptor read/8, error -71 [ 612.077733][ T11] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 612.103699][ T11] usb 5-1: device descriptor read/8, error -71 [ 612.146435][T15478] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2347'. [ 612.208632][ T11] usb usb5-port1: unable to enumerate USB device [ 612.398117][ T6975] team0 (unregistering): Port device team_slave_1 removed [ 612.438821][ T6975] team0 (unregistering): Port device team_slave_0 removed [ 612.451582][ T43] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 612.633206][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 612.633238][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 612.633262][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 612.633285][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 612.633322][ T43] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 612.633343][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.638423][ T43] usb 4-1: config 0 descriptor?? [ 612.655846][T15480] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 612.725948][ T5261] 8021q: adding VLAN 0 to HW filter on device eth10 [ 612.809378][T15306] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 612.927319][T15482] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2349'. [ 612.954424][T15306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 612.992879][T15306] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 613.038788][T15306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 613.064642][T15306] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 613.160560][ T43] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 613.190538][T15306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 613.194583][T15306] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 613.298951][T15306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 613.454072][T15480] af_packet: tpacket_rcv: packet too big, clamped from 4 to 4294967272. macoff=96 [ 613.580484][ T11] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 613.735580][T15480] fuse: Bad value for 'fd' [ 613.736205][T15480] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2348'. [ 613.812965][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 613.826779][ T11] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 613.826803][ T11] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 613.826820][ T11] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 613.826838][ T11] usb 1-1: config 0 has no interface number 0 [ 613.826878][ T11] usb 1-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 613.883032][ T11] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 613.883058][ T11] usb 1-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 613.883075][ T11] usb 1-1: Product: syz [ 613.883088][ T11] usb 1-1: Manufacturer: syz [ 613.915342][ T11] usb 1-1: config 0 descriptor?? [ 614.011747][ T1261] usb 4-1: USB disconnect, device number 40 [ 614.069624][T15505] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2352'. [ 614.224809][T15306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.399601][T15306] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.429460][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.429690][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.537893][ T1360] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.538051][ T1360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.612004][ T5261] 8021q: adding VLAN 0 to HW filter on device eth11 [ 614.931941][T15538] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2355'. [ 615.484302][ T5261] 8021q: adding VLAN 0 to HW filter on device eth12 [ 615.636159][T15306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.983229][T15306] veth0_vlan: entered promiscuous mode [ 615.999209][T15306] veth1_vlan: entered promiscuous mode [ 616.052500][T15306] veth0_macvtap: entered promiscuous mode [ 616.062439][T15306] veth1_macvtap: entered promiscuous mode [ 616.120579][T15306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.131866][T15306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.153496][ T1390] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.153539][ T1390] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.153571][ T1390] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.153604][ T1390] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.451752][T14707] usb 1-1: USB disconnect, device number 60 [ 616.742966][T15572] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2357'. [ 617.443630][T15578] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2365'. [ 617.660035][T15522] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 617.775873][T15584] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2360'. [ 617.799215][T15584] FAULT_INJECTION: forcing a failure. [ 617.799215][T15584] name failslab, interval 1, probability 0, space 0, times 0 [ 617.799244][T15584] CPU: 1 UID: 0 PID: 15584 Comm: syz.3.2360 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 617.799265][T15584] Tainted: [L]=SOFTLOCKUP [ 617.799270][T15584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 617.799278][T15584] Call Trace: [ 617.799285][T15584] [ 617.799291][T15584] dump_stack_lvl+0xe8/0x150 [ 617.799312][T15584] should_fail_ex+0x467/0x600 [ 617.799336][T15584] should_failslab+0xa8/0x100 [ 617.799356][T15584] ? skb_clone+0x212/0x3a0 [ 617.799377][T15584] kmem_cache_alloc_noprof+0x9e/0x680 [ 617.799397][T15584] ? skb_clone+0x212/0x3a0 [ 617.799421][T15584] skb_clone+0x212/0x3a0 [ 617.799443][T15584] __netlink_deliver_tap+0x410/0x880 [ 617.799472][T15584] ? netlink_deliver_tap+0x2e/0x1b0 [ 617.799494][T15584] netlink_deliver_tap+0x19c/0x1b0 [ 617.799522][T15584] netlink_sendskb+0x68/0x140 [ 617.799542][T15584] nfnetlink_rcv+0x2613/0x28d0 [ 617.799587][T15584] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 617.799617][T15584] ? __pfx_save_netdev_trace_buffer+0x10/0x10 [ 617.799631][T15584] ? ref_tracker_free+0x668/0x820 [ 617.799670][T15584] ? skb_clone+0x246/0x3a0 [ 617.799692][T15584] ? __netlink_deliver_tap+0x838/0x880 [ 617.799718][T15584] ? netlink_deliver_tap+0x2e/0x1b0 [ 617.799737][T15584] ? netlink_deliver_tap+0x2e/0x1b0 [ 617.799760][T15584] netlink_unicast+0x7f5/0x990 [ 617.799787][T15584] netlink_sendmsg+0x813/0xb40 [ 617.799815][T15584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 617.799836][T15584] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 617.799855][T15584] ? __kernel_text_address+0xd/0x30 [ 617.799876][T15584] ? unwind_get_return_address+0x4d/0x90 [ 617.799893][T15584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 617.799912][T15584] sock_sendmsg_nosec+0x13a/0x180 [ 617.799930][T15584] ____sys_sendmsg+0x565/0x870 [ 617.799958][T15584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 617.799984][T15584] ? import_iovec+0x73/0xa0 [ 617.800003][T15584] ___sys_sendmsg+0x2a5/0x360 [ 617.800021][T15584] ? __lock_acquire+0x6df/0x2e40 [ 617.800039][T15584] ? __pfx____sys_sendmsg+0x10/0x10 [ 617.800086][T15584] ? __fget_files+0x2a/0x420 [ 617.800106][T15584] ? __fget_files+0x3a8/0x420 [ 617.800132][T15584] __x64_sys_sendmsg+0x1b7/0x290 [ 617.800154][T15584] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 617.800188][T15584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.800204][T15584] do_syscall_64+0x174/0x580 [ 617.800224][T15584] ? trace_irq_disable+0x3b/0x140 [ 617.800238][T15584] ? clear_bhb_loop+0x40/0x90 [ 617.800256][T15584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.800272][T15584] RIP: 0033:0x7fe1365dde59 [ 617.800287][T15584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.800300][T15584] RSP: 002b:00007fe134836028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 617.800316][T15584] RAX: ffffffffffffffda RBX: 00007fe136865fa0 RCX: 00007fe1365dde59 [ 617.800328][T15584] RDX: 0000000020040040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 617.800338][T15584] RBP: 00007fe134836090 R08: 0000000000000000 R09: 0000000000000000 [ 617.800347][T15584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 617.800356][T15584] R13: 00007fe136866038 R14: 00007fe136865fa0 R15: 00007ffdbe6966e8 [ 617.800380][T15584] [ 617.897688][ T11] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 618.049854][ T11] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.049920][ T11] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 618.049941][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.061356][ T11] usb 1-1: config 0 descriptor?? [ 618.075427][ T11] pwc: Askey VC010 type 2 USB webcam detected. [ 618.304111][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 618.304130][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 618.351385][T15586] netlink: 3836 bytes leftover after parsing attributes in process `syz.3.2363'. [ 618.351712][T15586] netlink: 3836 bytes leftover after parsing attributes in process `syz.3.2363'. [ 618.614161][ T11] pwc: recv_control_msg error -32 req 02 val 2b00 [ 618.616866][ T11] pwc: recv_control_msg error -32 req 02 val 2700 [ 618.625480][ T11] pwc: recv_control_msg error -32 req 02 val 2c00 [ 618.629288][ T11] pwc: recv_control_msg error -32 req 04 val 1000 [ 618.638432][ T11] pwc: recv_control_msg error -32 req 04 val 1300 [ 618.733719][T15590] nvme_fabrics: missing parameter 'transport=%s' [ 618.733733][T15590] nvme_fabrics: missing parameter 'nqn=%s' [ 618.869478][T15588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 618.870455][T15588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.928643][ T8142] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 619.039889][ T11] pwc: recv_control_msg error -71 req 02 val 2000 [ 619.040263][ T11] pwc: recv_control_msg error -71 req 02 val 2100 [ 619.040622][ T11] pwc: recv_control_msg error -71 req 04 val 1500 [ 619.041042][ T11] pwc: recv_control_msg error -71 req 02 val 2500 [ 619.045043][ T11] pwc: recv_control_msg error -71 req 02 val 2400 [ 619.045447][ T11] pwc: recv_control_msg error -71 req 02 val 2600 [ 619.046180][ T11] pwc: recv_control_msg error -71 req 02 val 2900 [ 619.046618][ T11] pwc: recv_control_msg error -71 req 02 val 2800 [ 619.047230][ T11] pwc: recv_control_msg error -71 req 04 val 1100 [ 619.048769][ T11] pwc: recv_control_msg error -71 req 04 val 1200 [ 619.058899][ T8142] usb 4-1: device descriptor read/64, error -71 [ 619.146795][ T11] pwc: Registered as video103. [ 619.153073][ T11] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input62 [ 619.174834][ T11] usb 1-1: USB disconnect, device number 61 [ 619.242408][ T1360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.242427][ T1360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 619.308442][ T8142] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 619.470683][ T8142] usb 4-1: device descriptor read/64, error -71 [ 619.578014][ T8142] usb usb4-port1: attempt power cycle [ 619.648956][T15608] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2368'. [ 619.832227][T15622] FAULT_INJECTION: forcing a failure. [ 619.832227][T15622] name failslab, interval 1, probability 0, space 0, times 0 [ 619.832259][T15622] CPU: 1 UID: 0 PID: 15622 Comm: syz.4.2372 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 619.832284][T15622] Tainted: [L]=SOFTLOCKUP [ 619.832291][T15622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 619.832308][T15622] Call Trace: [ 619.832315][T15622] [ 619.832323][T15622] dump_stack_lvl+0xe8/0x150 [ 619.832349][T15622] should_fail_ex+0x467/0x600 [ 619.832380][T15622] should_failslab+0xa8/0x100 [ 619.832407][T15622] __kvmalloc_node_noprof+0x176/0x880 [ 619.832435][T15622] ? traverse+0xf1/0x620 [ 619.832454][T15622] ? traverse+0xf1/0x620 [ 619.832479][T15622] traverse+0xf1/0x620 [ 619.832502][T15622] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 619.832528][T15622] ? seq_lseek+0x55/0x260 [ 619.832551][T15622] seq_lseek+0x137/0x260 [ 619.832574][T15622] __x64_sys_lseek+0x155/0x1f0 [ 619.832603][T15622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.832622][T15622] do_syscall_64+0x174/0x580 [ 619.832646][T15622] ? trace_irq_disable+0x3b/0x140 [ 619.832663][T15622] ? clear_bhb_loop+0x40/0x90 [ 619.832685][T15622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.832703][T15622] RIP: 0033:0x7f83e2a2de59 [ 619.832720][T15622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.832734][T15622] RSP: 002b:00007f83e0c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 619.832753][T15622] RAX: ffffffffffffffda RBX: 00007f83e2cb5fa0 RCX: 00007f83e2a2de59 [ 619.832766][T15622] RDX: 0000000000000000 RSI: 0000000000010001 RDI: 0000000000000003 [ 619.832778][T15622] RBP: 00007f83e0c86090 R08: 0000000000000000 R09: 0000000000000000 [ 619.832789][T15622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.832800][T15622] R13: 00007f83e2cb6038 R14: 00007f83e2cb5fa0 R15: 00007ffe34440fe8 [ 619.832830][T15622] [ 619.928515][ T8142] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 619.951601][ T8142] usb 4-1: device descriptor read/8, error -71 [ 620.237678][ T8142] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 620.258379][ T8142] usb 4-1: device descriptor read/8, error -71 [ 620.369169][ T8142] usb usb4-port1: unable to enumerate USB device [ 620.396728][ T37] audit: type=1800 audit(1783330330.513:333): pid=15635 uid=0 auid=4294967295 ses=4294967295 op=set_data cause=unavailable-hash-algorithm comm="syz.4.2375" name="/newroot/185/file0" dev="tmpfs" ino=974 res=0 errno=0 [ 620.528590][ T11] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 620.592588][T15653] netlink: 120 bytes leftover after parsing attributes in process `syz.4.2382'. [ 620.618869][T15653] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2382'. [ 620.691223][ T11] usb 7-1: LPM exit latency is zeroed, disabling LPM. [ 620.692509][ T11] usb 7-1: config 129 has an invalid interface number: 176 but max is 0 [ 620.692532][ T11] usb 7-1: config 129 has no interface number 0 [ 620.692561][ T11] usb 7-1: config 129 interface 176 has no altsetting 0 [ 620.695740][ T11] usb 7-1: string descriptor 0 read error: -22 [ 620.695871][ T11] usb 7-1: New USB device found, idVendor=19d2, idProduct=0412, bcdDevice=69.83 [ 620.695893][ T11] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.724858][ T11] option 7-1:129.176: GSM modem (1-port) converter detected [ 620.826624][T15661] FAULT_INJECTION: forcing a failure. [ 620.826624][T15661] name failslab, interval 1, probability 0, space 0, times 0 [ 620.826645][T15661] CPU: 0 UID: 0 PID: 15661 Comm: syz.4.2385 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 620.826659][T15661] Tainted: [L]=SOFTLOCKUP [ 620.826663][T15661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 620.826669][T15661] Call Trace: [ 620.826673][T15661] [ 620.826678][T15661] dump_stack_lvl+0xe8/0x150 [ 620.826695][T15661] should_fail_ex+0x467/0x600 [ 620.826712][T15661] should_failslab+0xa8/0x100 [ 620.826728][T15661] __kmalloc_cache_noprof+0xa1/0x670 [ 620.826743][T15661] ? cgroup_show_path+0xaa/0x5d0 [ 620.826756][T15661] ? cgroup_show_path+0xaa/0x5d0 [ 620.826769][T15661] ? kernfs_root+0x1c/0x230 [ 620.826784][T15661] cgroup_show_path+0xaa/0x5d0 [ 620.826798][T15661] ? kernfs_sop_show_path+0xc9/0x120 [ 620.826812][T15661] show_mountinfo+0x1cd/0xb70 [ 620.826831][T15661] ? __pfx_show_mountinfo+0x10/0x10 [ 620.826851][T15661] traverse+0x229/0x620 [ 620.826868][T15661] seq_lseek+0x137/0x260 [ 620.826882][T15661] __x64_sys_lseek+0x155/0x1f0 [ 620.826898][T15661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.826909][T15661] do_syscall_64+0x174/0x580 [ 620.826922][T15661] ? trace_irq_disable+0x3b/0x140 [ 620.826932][T15661] ? clear_bhb_loop+0x40/0x90 [ 620.826952][T15661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.826962][T15661] RIP: 0033:0x7f83e2a2de59 [ 620.826972][T15661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.826981][T15661] RSP: 002b:00007f83e0c86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 620.826992][T15661] RAX: ffffffffffffffda RBX: 00007f83e2cb5fa0 RCX: 00007f83e2a2de59 [ 620.826999][T15661] RDX: 0000000000000000 RSI: 0000000000010001 RDI: 0000000000000003 [ 620.827005][T15661] RBP: 00007f83e0c86090 R08: 0000000000000000 R09: 0000000000000000 [ 620.827011][T15661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.827017][T15661] R13: 00007f83e2cb6038 R14: 00007f83e2cb5fa0 R15: 00007ffe34440fe8 [ 620.827033][T15661] [ 620.919819][ T11] usb 7-1: USB disconnect, device number 2 [ 620.932486][ T11] option 7-1:129.176: device disconnected [ 620.951866][ T5609] Bluetooth: hci0: command 0x0405 tx timeout [ 621.095776][ T43] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 621.279440][ T43] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 621.279469][ T43] usb 1-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.279490][ T43] usb 1-1: config 2 interface 0 has no altsetting 0 [ 621.279514][ T43] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 621.279525][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.781522][ T43] usbhid 1-1:2.0: can't add hid device: -71 [ 621.781631][ T43] usbhid 1-1:2.0: probe with driver usbhid failed with error -71 [ 621.802677][ T43] usb 1-1: USB disconnect, device number 62 [ 621.807755][ T5806] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 621.959839][ T5806] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.959863][ T5806] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 621.959910][ T5806] usb 7-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 621.959923][ T5806] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.963438][ T5806] usb 7-1: config 0 descriptor?? [ 622.357698][ T43] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 622.404934][ T5806] Bluetooth: Can't get state to change to load configuration err [ 622.404950][ T5806] Bluetooth: Loading sysconfig file failed [ 622.404986][ T5806] ath3k 7-1:0.0: probe with driver ath3k failed with error -16 [ 622.433292][ T5806] usb 7-1: USB disconnect, device number 3 [ 622.507811][ T43] usb 1-1: device descriptor read/64, error -71 [ 622.747727][ T43] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 622.879128][ T43] usb 1-1: device descriptor read/64, error -71 [ 622.988179][ T43] usb usb1-port1: attempt power cycle [ 623.337702][ T43] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 623.358127][ T43] usb 1-1: device descriptor read/8, error -71 [ 623.607687][ T43] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 623.629778][ T43] usb 1-1: device descriptor read/8, error -71 [ 623.674568][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.674626][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.738292][ T43] usb usb1-port1: unable to enumerate USB device [ 624.170024][T15667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 624.570822][T15702] FAULT_INJECTION: forcing a failure. [ 624.570822][T15702] name failslab, interval 1, probability 0, space 0, times 0 [ 624.570855][T15702] CPU: 1 UID: 0 PID: 15702 Comm: syz.6.2396 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 624.570877][T15702] Tainted: [L]=SOFTLOCKUP [ 624.570883][T15702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 624.570893][T15702] Call Trace: [ 624.570900][T15702] [ 624.570909][T15702] dump_stack_lvl+0xe8/0x150 [ 624.570935][T15702] should_fail_ex+0x467/0x600 [ 624.570965][T15702] should_failslab+0xa8/0x100 [ 624.570993][T15702] __kmalloc_cache_noprof+0xa1/0x670 [ 624.571016][T15702] ? cgroup_show_path+0xaa/0x5d0 [ 624.571039][T15702] ? cgroup_show_path+0xaa/0x5d0 [ 624.571063][T15702] ? kernfs_root+0x1c/0x230 [ 624.571089][T15702] cgroup_show_path+0xaa/0x5d0 [ 624.571114][T15702] ? kernfs_sop_show_path+0xc9/0x120 [ 624.571138][T15702] show_mountinfo+0x1cd/0xb70 [ 624.571171][T15702] ? __pfx_show_mountinfo+0x10/0x10 [ 624.571205][T15702] traverse+0x229/0x620 [ 624.571237][T15702] seq_lseek+0x137/0x260 [ 624.571259][T15702] __x64_sys_lseek+0x155/0x1f0 [ 624.571283][T15702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.571303][T15702] do_syscall_64+0x174/0x580 [ 624.571326][T15702] ? trace_irq_disable+0x3b/0x140 [ 624.571344][T15702] ? clear_bhb_loop+0x40/0x90 [ 624.571366][T15702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.571384][T15702] RIP: 0033:0x7fbf855dde59 [ 624.571401][T15702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.571415][T15702] RSP: 002b:00007fbf83836028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 624.571434][T15702] RAX: ffffffffffffffda RBX: 00007fbf85865fa0 RCX: 00007fbf855dde59 [ 624.571448][T15702] RDX: 0000000000000000 RSI: 0000000000010001 RDI: 0000000000000003 [ 624.571459][T15702] RBP: 00007fbf83836090 R08: 0000000000000000 R09: 0000000000000000 [ 624.571471][T15702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.571482][T15702] R13: 00007fbf85866038 R14: 00007fbf85865fa0 R15: 00007ffc3c09b788 [ 624.571512][T15702] [ 625.047665][ T11] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 625.197665][ T11] usb 7-1: Using ep0 maxpacket: 8 [ 625.199955][ T11] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.199983][ T11] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 625.200021][ T11] usb 7-1: New USB device found, idVendor=048d, idProduct=ce50, bcdDevice= 0.00 [ 625.200043][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.206896][ T11] usb 7-1: config 0 descriptor?? [ 625.261614][ T199] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 625.410663][ T199] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 625.410773][ T199] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 625.410813][ T199] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 625.413050][ T199] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 625.413074][ T199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.413093][ T199] usb 4-1: Product: syz [ 625.413144][ T199] usb 4-1: Manufacturer: syz [ 625.413152][ T199] usb 4-1: SerialNumber: syz [ 625.484774][T15717] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 625.547773][ T1261] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 625.651591][ T11] asus 0003:048D:CE50.0041: ignoring exceeding usage max [ 625.653489][ T11] hid_parser_main: 852 callbacks suppressed [ 625.653502][ T11] asus 0003:048D:CE50.0041: unknown main item tag 0x0 [ 625.653520][ T11] asus 0003:048D:CE50.0041: unknown main item tag 0x0 [ 625.653535][ T11] asus 0003:048D:CE50.0041: unknown main item tag 0x0 [ 625.653550][ T11] asus 0003:048D:CE50.0041: unknown main item tag 0x0 [ 625.653892][ T11] asus 0003:048D:CE50.0041: unknown main item tag 0x0 [ 625.653909][ T11] asus 0003:048D:CE50.0041: unknown main item tag 0x0 [ 625.653923][ T11] asus 0003:048D:CE50.0041: unknown main item tag 0x0 [ 625.653937][ T11] asus 0003:048D:CE50.0041: unknown main item tag 0x0 [ 625.759630][T15717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.764075][T15717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.765168][ T1261] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 625.765191][ T1261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.765209][ T1261] usb 5-1: Product: syz [ 625.765221][ T1261] usb 5-1: Manufacturer: syz [ 625.765233][ T1261] usb 5-1: SerialNumber: syz [ 625.793643][ T11] asus 0003:048D:CE50.0041: hidraw0: USB HID v0.81 Device [HID 048d:ce50] on usb-dummy_hcd.6-1/input0 [ 625.879330][ T1261] usb 5-1: config 0 descriptor?? [ 625.918201][ T1261] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 626.335227][T15717] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 626.837712][ T43] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 626.942792][T15717] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 626.999986][ T43] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.000010][ T43] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 627.000269][ T43] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 627.000292][ T43] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.045604][ T43] usb 1-1: config 0 descriptor?? [ 627.338665][ T1261] gspca_stk1135: reg_w 0x350 err -71 [ 627.339763][ T1261] gspca_stk1135: serial bus timeout: status=0x00 [ 627.339777][ T1261] gspca_stk1135: Sensor write failed [ 627.339811][ T1261] gspca_stk1135: serial bus timeout: status=0x00 [ 627.339820][ T1261] gspca_stk1135: Sensor write failed [ 627.340204][ T1261] gspca_stk1135: serial bus timeout: status=0x00 [ 627.340215][ T1261] gspca_stk1135: Sensor read failed [ 627.340238][ T1261] gspca_stk1135: serial bus timeout: status=0x00 [ 627.340248][ T1261] gspca_stk1135: Sensor read failed [ 627.340254][ T1261] gspca_stk1135: Detected sensor type unknown (0x0) [ 627.340287][ T1261] gspca_stk1135: serial bus timeout: status=0x00 [ 627.340507][ T1261] gspca_stk1135: Sensor read failed [ 627.340531][ T1261] gspca_stk1135: serial bus timeout: status=0x00 [ 627.340541][ T1261] gspca_stk1135: Sensor read failed [ 627.340564][ T1261] gspca_stk1135: serial bus timeout: status=0x00 [ 627.340572][ T1261] gspca_stk1135: Sensor write failed [ 627.340595][ T1261] gspca_stk1135: serial bus timeout: status=0x00 [ 627.340603][ T1261] gspca_stk1135: Sensor write failed [ 627.340898][ T1261] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 627.447438][ T199] cdc_ncm 4-1:1.0: failed to get mac address [ 627.482971][ T1261] usb 5-1: USB disconnect, device number 10 [ 627.490523][ T199] cdc_ncm 4-1:1.0: bind() failure [ 627.575401][ T199] cdc_ncm 4-1:1.1: probe with driver cdc_ncm failed with error -71 [ 627.584381][ T199] cdc_mbim 4-1:1.1: probe with driver cdc_mbim failed with error -71 [ 627.595247][ T199] usbtest 4-1:1.1: probe with driver usbtest failed with error -71 [ 627.618497][ T199] usb 4-1: USB disconnect, device number 45 [ 627.624766][T15765] mac80211_hwsim hwsim17 5: renamed from wlan0 (while UP) [ 627.721465][T15748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.722606][T15748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.724886][T15748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.730383][T15748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.811889][ T5775] usb 7-1: USB disconnect, device number 4 [ 627.943364][T15770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2410'. [ 627.943384][T15770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2410'. [ 627.950258][T15773] netlink: 4548 bytes leftover after parsing attributes in process `syz.6.2411'. [ 627.952905][ T43] Bluetooth: Can't get version to change to load ram patch err [ 627.952919][ T43] Bluetooth: Loading sysconfig file failed [ 627.952950][ T43] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 628.013562][ T43] usb 1-1: USB disconnect, device number 67 [ 628.205267][T15778] netlink: 57 bytes leftover after parsing attributes in process `syz.6.2412'. [ 628.415265][T15789] FAULT_INJECTION: forcing a failure. [ 628.415265][T15789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 628.415298][T15789] CPU: 1 UID: 0 PID: 15789 Comm: syz.4.2416 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 628.415325][T15789] Tainted: [L]=SOFTLOCKUP [ 628.415332][T15789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 628.415342][T15789] Call Trace: [ 628.415349][T15789] [ 628.415357][T15789] dump_stack_lvl+0xe8/0x150 [ 628.415384][T15789] should_fail_ex+0x467/0x600 [ 628.415419][T15789] _copy_to_user+0x31/0xb0 [ 628.415440][T15789] simple_read_from_buffer+0xe1/0x170 [ 628.415469][T15789] proc_fail_nth_read+0x1be/0x230 [ 628.415497][T15789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 628.415525][T15789] ? rw_verify_area+0x250/0x4d0 [ 628.415553][T15789] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 628.415577][T15789] vfs_read+0x219/0xa90 [ 628.415602][T15789] ? __pfx_vfs_read+0x10/0x10 [ 628.415621][T15789] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 628.415646][T15789] ? lockdep_hardirqs_on+0x7a/0x110 [ 628.415669][T15789] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 628.415692][T15789] ? mutex_lock_nested+0x152/0x1d0 [ 628.415710][T15789] ? fdget_pos+0x252/0x320 [ 628.415742][T15789] ksys_read+0x156/0x270 [ 628.415762][T15789] ? __pfx_ksys_read+0x10/0x10 [ 628.415786][T15789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.415805][T15789] do_syscall_64+0x174/0x580 [ 628.415826][T15789] ? trace_irq_disable+0x3b/0x140 [ 628.415843][T15789] ? clear_bhb_loop+0x40/0x90 [ 628.415865][T15789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.415883][T15789] RIP: 0033:0x7f83e29ee68e [ 628.415900][T15789] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 628.415914][T15789] RSP: 002b:00007f83e0c85fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 628.415932][T15789] RAX: ffffffffffffffda RBX: 00007f83e0c866c0 RCX: 00007f83e29ee68e [ 628.415945][T15789] RDX: 000000000000000f RSI: 00007f83e0c860a0 RDI: 0000000000000004 [ 628.415956][T15789] RBP: 00007f83e0c86090 R08: 0000000000000000 R09: 0000000000000000 [ 628.415967][T15789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.415978][T15789] R13: 00007f83e2cb6038 R14: 00007f83e2cb5fa0 R15: 00007ffe34440fe8 [ 628.416006][T15789] [ 628.587649][ T43] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 628.768960][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 628.791709][ T43] usb 4-1: unable to get BOS descriptor or descriptor too short [ 628.809655][ T43] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.809722][ T43] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 628.809759][ T43] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 628.850936][ T43] usb 4-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 628.850961][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.850979][ T43] usb 4-1: Product: syz [ 628.850991][ T43] usb 4-1: Manufacturer: syz [ 628.851004][ T43] usb 4-1: SerialNumber: syz [ 628.980594][ T199] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 629.132085][ T43] usb 4-1: Audio class v2/v3 interfaces need an interface association [ 629.132634][ T43] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 629.147626][ T199] usb 1-1: Using ep0 maxpacket: 32 [ 629.149719][ T199] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 629.152087][ T199] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 629.152117][ T199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.152133][ T199] usb 1-1: Product: syz [ 629.152145][ T199] usb 1-1: Manufacturer: syz [ 629.152158][ T199] usb 1-1: SerialNumber: syz [ 629.176322][ T199] usb 1-1: config 0 descriptor?? [ 629.194459][ T199] cdc_ether 1-1:0.0: missing cdc header descriptor [ 629.202175][ T199] usb 1-1: unsupported MDLM descriptors [ 629.265566][ T43] usb 4-1: USB disconnect, device number 46 [ 629.394969][ T5603] udevd[5603]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 629.502754][ T199] usb 1-1: USB disconnect, device number 68 [ 629.789184][T15819] nbd: socks must be embedded in a SOCK_ITEM attr [ 630.596691][T15860] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 630.596715][T15860] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 630.624889][T15860] vhci_hcd vhci_hcd.0: Device attached [ 630.819138][T15877] netlink: 738 bytes leftover after parsing attributes in process `syz.4.2435'. [ 630.868772][ T11] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 630.868959][ T199] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 631.031147][ T11] usb 7-1: Using ep0 maxpacket: 16 [ 631.037815][ T1261] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 631.088151][T15869] ================================================================== [ 631.088165][T15869] BUG: KASAN: slab-use-after-free in vhci_t[ 631.088165][T15869] BUG: KASAN: slab-use-after-free in vhci_tx_loop+0x3e9/0x1c70 [ 631.088189][T15869] Read of size 8 at addr ffff88802536d7a0 by task vhci_tx/15869 [ 631.088202][T15869] [ 631.088216][T15869] CPU: 0 UID: 0 PID: 15869 Comm: vhci_tx Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 631.088242][T15869] Tainted: [L]=SOFTLOCKUP [ 631.088249][T15869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 631.088260][T15869] Call Trace: [ 631.088268][T15869] [ 631.088276][T15869] dump_stack_lvl+0xe8/0x150 [ 631.088298][T15869] print_address_description+0x55/0x1e0 [ 631.088324][T15869] ? vhci_tx_loop+0x3e9/0x1c70 [ 631.088338][T15869] print_report+0x58/0x70 [ 631.088360][T15869] kasan_report+0x117/0x150 [ 631.088386][T15869] ? vhci_tx_loop+0x3e9/0x1c70 [ 631.088405][T15869] vhci_tx_loop+0x3e9/0x1c70 [ 631.088430][T15869] ? __pfx_vhci_tx_loop+0x10/0x10 [ 631.088450][T15869] ? __lock_acquire+0x6df/0x2e40 [ 631.088469][T15869] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 631.088494][T15869] ? lockdep_hardirqs_on+0x7a/0x110 [ 631.088522][T15869] ? do_raw_spin_lock+0x12b/0x2f0 [ 631.088547][T15869] ? __pfx_autoremove_wake_function+0x10/0x10 [ 631.088570][T15869] ? __kthread_parkme+0x71/0x1f0 [ 631.088591][T15869] ? __kthread_parkme+0x196/0x1f0 [ 631.088613][T15869] kthread+0x388/0x470 [ 631.088634][T15869] ? __pfx_vhci_tx_loop+0x10/0x10 [ 631.088649][T15869] ? __pfx_kthread+0x10/0x10 [ 631.088670][T15869] ret_from_fork+0x514/0xb70 [ 631.088694][T15869] ? __pfx_ret_from_fork+0x10/0x10 [ 631.088715][T15869] ? __switch_to+0xc89/0x1420 [ 631.088736][T15869] ? __pfx_kthread+0x10/0x10 [ 631.088757][T15869] ret_from_fork_asm+0x1a/0x30 [ 631.088785][T15869] [ 631.088792][T15869] [ 631.088801][T15869] Allocated by task 199: [ 631.088811][T15869] kasan_save_track+0x3e/0x80 [ 631.088830][T15869] __kasan_kmalloc+0x93/0xb0 [ 631.088850][T15869] __kmalloc_cache_noprof+0x3cd/0x670 [ 631.088871][T15869] vhci_urb_enqueue+0x5c2/0xe00 [ 631.088892][T15869] usb_hcd_submit_urb+0x322/0x1b40 [ 631.088915][T15869] usb_start_wait_urb+0x13f/0x5b0 [ 631.088932][T15869] usb_control_msg+0x234/0x3e0 [ 631.088948][T15869] hub_port_init+0xb0b/0x28b0 [ 631.088967][T15869] hub_event+0x24e2/0x4cf0 [ 631.088985][T15869] process_one_work+0xaaf/0x1480 [ 631.089001][T15869] worker_thread+0xb05/0x10d0 [ 631.089017][T15869] kthread+0x388/0x470 [ 631.089035][T15869] ret_from_fork+0x514/0xb70 [ 631.089054][T15869] ret_from_fork_asm+0x1a/0x30 [ 631.089073][T15869] [ 631.089078][T15869] Freed by task 15864: [ 631.089086][T15869] kasan_save_track+0x3e/0x80 [ 631.089104][T15869] kasan_save_free_info+0x40/0x50 [ 631.089120][T15869] __kasan_slab_free+0x5c/0x80 [ 631.089139][T15869] kfree+0x1c5/0x6c0 [ 631.089156][T15869] pickup_urb_and_free_priv+0x225/0x3f0 [ 631.089171][T15869] vhci_rx_loop+0x3c5/0xa00 [ 631.089184][T15869] kthread+0x388/0x470 [ 631.089202][T15869] ret_from_fork+0x514/0xb70 [ 631.089222][T15869] ret_from_fork_asm+0x1a/0x30 [ 631.089241][T15869] [ 631.089245][T15869] The buggy address belongs to the object at ffff88802536d780 [ 631.089245][T15869] which belongs to the cache kmalloc-64 of size 64 [ 631.089260][T15869] The buggy address is located 32 bytes inside of [ 631.089260][T15869] freed 64-byte region [ffff88802536d780, ffff88802536d7c0) [ 631.089277][T15869] [ 631.089282][T15869] The buggy address belongs to the physical page: [ 631.089299][T15869] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2536d [ 631.089314][T15869] flags: 0x80000000000000(node=0|zone=1) [ 631.089330][T15869] page_type: f5(slab) [ 631.089345][T15869] raw: 0080000000000000 ffff88813fe398c0 dead000000000100 dead000000000122 [ 631.089359][T15869] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 631.089368][T15869] page dumped because: kasan: bad access detected [ 631.089380][T15869] page_owner tracks the page as allocated [ 631.089387][T15869] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5601, tgid 5601 (syz-executor), ts 82047422940 [ 631.089413][T15869] post_alloc_hook+0x1f9/0x250 [ 631.089433][T15869] get_page_from_freelist+0x264c/0x26c0 [ 631.089455][T15869] __alloc_frozen_pages_noprof+0x1a6/0x390 [ 631.089477][T15869] allocate_slab+0x79/0x5e0 [ 631.089492][T15869] refill_objects+0x2d8/0x350 [ 631.089505][T15869] __pcs_replace_empty_main+0x330/0x690 [ 631.089519][T15869] __kmalloc_cache_noprof+0x467/0x670 [ 631.089539][T15869] register_netdevice+0x5a7/0x1ed0 [ 631.089560][T15869] veth_newlink+0x676/0xb70 [ 631.089581][T15869] rtnl_newlink_create+0x310/0xb00 [ 631.089601][T15869] rtnl_newlink+0x167f/0x1bd0 [ 631.089619][T15869] rtnetlink_rcv_msg+0x802/0xc00 [ 631.089637][T15869] netlink_rcv_skb+0x226/0x4a0 [ 631.089657][T15869] netlink_unicast+0x7f5/0x990 [ 631.089675][T15869] netlink_sendmsg+0x813/0xb40 [ 631.089696][T15869] sock_sendmsg_nosec+0x13a/0x180 [ 631.089713][T15869] page last free pid 5601 tgid 5601 ts 82043452627 stack trace: [ 631.089726][T15869] __free_frozen_pages+0x10de/0x11c0 [ 631.089745][T15869] __slab_free+0x252/0x2a0 [ 631.089763][T15869] qlist_free_all+0x99/0x100 [ 631.089781][T15869] kasan_quarantine_reduce+0x148/0x160 [ 631.089799][T15869] __kasan_slab_alloc+0x22/0x80 [ 631.089818][T15869] __kmalloc_cache_noprof+0x34b/0x670 [ 631.089838][T15869] ref_tracker_alloc+0x15e/0x4c0 [ 631.089858][T15869] netdev_queue_update_kobjects+0x1db/0x6b0 [ 631.089882][T15869] netdev_register_kobject+0x258/0x310 [ 631.089898][T15869] register_netdevice+0x1455/0x1ed0 [ 631.089918][T15869] veth_newlink+0x49f/0xb70 [ 631.089939][T15869] rtnl_newlink_create+0x310/0xb00 [ 631.089958][T15869] rtnl_newlink+0x167f/0x1bd0 [ 631.089977][T15869] rtnetlink_rcv_msg+0x802/0xc00 [ 631.089994][T15869] netlink_rcv_skb+0x226/0x4a0 [ 631.090014][T15869] netlink_unicast+0x7f5/0x990 [ 631.090032][T15869] [ 631.090037][T15869] Memory state around the buggy address: [ 631.090046][T15869] ffff88802536d680: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 631.090057][T15869] ffff88802536d700: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 631.090067][T15869] >ffff88802536d780: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 631.090076][T15869] ^ [ 631.090085][T15869] ffff88802536d800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 631.090096][T15869] ffff88802536d880: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 631.090104][T15869] ================================================================== [ 631.110200][T15869] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 631.110219][T15869] CPU: 0 UID: 0 PID: 15869 Comm: vhci_tx Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 631.110244][T15869] Tainted: [L]=SOFTLOCKUP [ 631.110250][T15869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 631.110261][T15869] Call Trace: [ 631.110269][T15869] [ 631.110276][T15869] vpanic+0x56c/0xa60 [ 631.110301][T15869] ? __pfx_vpanic+0x10/0x10 [ 631.110322][T15869] panic+0xc5/0xd0 [ 631.110337][T15869] ? __pfx_panic+0x10/0x10 [ 631.110353][T15869] ? preempt_schedule_thunk+0x16/0x40 [ 631.110372][T15869] ? vhci_tx_loop+0x3e9/0x1c70 [ 631.110388][T15869] ? preempt_schedule_thunk+0x16/0x40 [ 631.110405][T15869] ? vhci_tx_loop+0x3e9/0x1c70 [ 631.110419][T15869] check_panic_on_warn+0x89/0xb0 [ 631.110442][T15869] ? vhci_tx_loop+0x3e9/0x1c70 [ 631.110457][T15869] end_report+0x73/0x170 [ 631.110480][T15869] ? vhci_tx_loop+0x3e9/0x1c70 [ 631.110494][T15869] kasan_report+0x128/0x150 [ 631.110517][T15869] ? vhci_tx_loop+0x3e9/0x1c70 [ 631.110535][T15869] vhci_tx_loop+0x3e9/0x1c70 [ 631.110559][T15869] ? __pfx_vhci_tx_loop+0x10/0x10 [ 631.110578][T15869] ? __lock_acquire+0x6df/0x2e40 [ 631.110597][T15869] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 631.110619][T15869] ? lockdep_hardirqs_on+0x7a/0x110 [ 631.110646][T15869] ? do_raw_spin_lock+0x12b/0x2f0 [ 631.110670][T15869] ? __pfx_autoremove_wake_function+0x10/0x10 [ 631.110693][T15869] ? __kthread_parkme+0x71/0x1f0 [ 631.110713][T15869] ? __kthread_parkme+0x196/0x1f0 [ 631.110733][T15869] kthread+0x388/0x470 [ 631.110753][T15869] ? __pfx_vhci_tx_loop+0x10/0x10 [ 631.110768][T15869] ? __pfx_kthread+0x10/0x10 [ 631.110788][T15869] ret_from_fork+0x514/0xb70 [ 631.110812][T15869] ? __pfx_ret_from_fork+0x10/0x10 [ 631.110832][T15869] ? __switch_to+0xc89/0x1420 [ 631.110851][T15869] ? __pfx_kthread+0x10/0x10 [ 631.110879][T15869] ret_from_fork_asm+0x1a/0x30 [ 631.110907][T15869] [ 631.111279][T15869] Kernel Offset: disabled