last executing test programs: 15m37.165253998s ago: executing program 0 (id=1): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x0, 0x0, 0x20323159}}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r4, 0x0}) 15m36.999803015s ago: executing program 0 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000080)='configfs\x00', 0x200, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) setresgid(0xee00, 0xee01, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000019100)=""/162, 0xa2}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 15m36.800884209s ago: executing program 0 (id=7): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x12, 0x0, &(0x7f0000000300)) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x1c, 0x7, 0x1, 0x7, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}, {@local, 0x1303}]}]}}}], 0x50}, 0x200040c4) 15m35.400846872s ago: executing program 0 (id=12): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80085504, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc0000000000000000000000000000f7531e00010000000000000000000000e3ffffffffffffff000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/112], 0xb8}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0x210080, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r5 = syz_open_procfs$userns(0x0, &(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r8, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r7, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x51}, @void, @val={0xc, 0x99, {0x4, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3a}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x58}}, 0x8000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0x20040858) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r11, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x42}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}}, 0x10) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x0, 0x0, 0x0, 0x4}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r13, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r11, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 15m35.27720701s ago: executing program 32 (id=12): r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x101301) ioctl$USBDEVFS_CONNECTINFO(r0, 0x80085504, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001400e9990000000000000000fc0000000000000000000000000000f7531e00010000000000000000000000e3ffffffffffffff000a00400000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000000000000000000a30a000000000000f8ffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000800"/112], 0xb8}}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0x210080, 0x80) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={0x0, 0x0}) r5 = syz_open_procfs$userns(0x0, &(0x7f0000000440)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r9, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r8, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r7, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r3, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x51}, @void, @val={0xc, 0x99, {0x4, 0x22}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_PID={0x8, 0x52, r4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3a}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x58}}, 0x8000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0x20040858) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_LEAVE_IBSS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r11, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x42}}}}, ["", "", "", "", "", "", "", ""]}, 0x20}}, 0x10) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x0, 0x0, 0x0, 0x4}) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x44, r13, 0x1, 0x0, 0x0, {0x2c}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16=r11, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 12m1.11495849s ago: executing program 2 (id=1430): syz_usb_connect(0x3, 0x2f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x1c, 0xea, 0xf6, 0x40, 0x944, 0x200, 0xf280, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1e, 0x0, 0x1, 0xff, 0x26, 0xa, 0x4, [], [{{0x9, 0x5, 0xf, 0x8, 0x5c7, 0x40, 0x8, 0x7, [@generic={0x2, 0x21}]}}]}}]}}]}}, 0x0) 11m59.890659883s ago: executing program 2 (id=1438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r0, 0x941c, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x38) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0) fchown(r1, 0xee01, 0xffffffffffffffff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) clock_gettime(0x0, &(0x7f00000006c0)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r3, 0x28, 0x6, &(0x7f0000000700)={r4, r5/1000+10000}, 0x10) sendfile(r3, r2, &(0x7f0000000040)=0xd, 0x8) ioctl$GIO_UNISCRNMAP(r1, 0x4b69, &(0x7f0000000180)=""/139) r6 = socket$netlink(0x10, 0x3, 0x8000000004) r7 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') ioctl$BTRFS_IOC_BALANCE(r7, 0x8008b705, 0x0) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000340)="5800000015001923fc834b80040d8c560a067f020000000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd001a0010000100080c1000000a000000000000", 0x58}], 0x1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000003c0)={'gre0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x7800, 0x7800, 0xfff, 0x0, {{0x1d, 0x4, 0x3, 0x4, 0x74, 0x67, 0x0, 0xff, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@end, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0x13, [@broadcast, @private=0xa010101, @private=0xa010101, @multicast1]}, @timestamp_prespec={0x44, 0x3c, 0xf4, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x2e}, 0x8}, {@remote, 0xa4}, {@private=0xa010102, 0xfffffff6}, {@loopback, 0xffffffff}, {@remote, 0xfffffffa}, {@private=0xa010100, 0x2}, {@empty, 0x101}]}, @noop, @timestamp={0x44, 0x8, 0xbf, 0x0, 0x5, [0x10000]}]}}}}}) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000680)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000640)={&(0x7f0000000400)={0x20c, 0x13, 0x0, 0x70bd27, 0x25dfdbfc, {0x2, 0x2, 0xfd, 0x5, {0x4e23, 0x4e20, [0xc89a, 0x1, 0x401, 0x101], [0x7, 0x7, 0x21cf3365, 0x5], r8, [0x3]}, 0x7, 0x8000}, [@INET_DIAG_REQ_BYTECODE={0xd3, 0x1, "e3f87a98356c5267fb10a83871ca1c81e9bd3ce3309a65c05c4e3386811babf01426656221b9c6946e05d4c63c5106e26c85b017ba071a026e1252f4c8d98d34c29cdc93b41a40206c39adf5c1efc903a45249849b72252fcbc0d3e1e32fa7715fee45dc11ca94028297276a536389fc80d94b1bcfce44b41d0e85a6f31915acec0783aa03c0195700624d4a6a9e0355b8f6481469ed63dccc44abd51da55d7c0db1d1af08c91266a5591b01c23c8d4e441206f65b24894320ee00786a48ce0ac6d063ce6adf3a213886972f1818c2"}, @INET_DIAG_REQ_BYTECODE={0xec, 0x1, "254956fdec69106c5b2ce23e6b64a3684084b1c29fdc3031bc6e0e3a3dd7bc2ad7d764f1b55c7e3b5611e1ac3cb7a824617f999d60282dc9c1a0df3533693825607b1b872a0e8fba4cebd0991805997df3fe1037e5dcb11677f7431905cd29f08db67d4ad011c798b2ace0de9b23e78600bb266f691a38e76412fc798dd96729a45e22994a2c2bc41c9b29991e4d589934e1c501c341e4a8013058496110ef9ff194621f2d7e9175550d123537aaae6030e78a647232051ccbd1f8130025a36b706fa5e1881fb9517a31dfeb3726c6129a5b4dec8cea67410a63b0b48f6403b5b29cbc1cb632611e"}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0xb, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_COMPAT_NAME={0xd, 0x1, '/dev/kvm\x00'}, @NFTA_COMPAT_NAME={0xd, 0x1, '/dev/kvm\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0xd, 0x1, '/dev/kvm\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x8001) 11m59.796913253s ago: executing program 2 (id=1439): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000400)={0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="20140600000034da8f86486c"], 0x0, 0x0}) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) r2 = timerfd_create(0x5, 0x80000) timerfd_gettime(r2, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(r2) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/uts\x00') syz_open_dev$dri(0x0, 0x7, 0xd0581) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8202, 0x0) socket(0x11, 0x6, 0x4) setresuid(0x0, 0xee00, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') rt_sigaction(0x1e, &(0x7f00000001c0)={&(0x7f0000000140)="0f18d5c401f8ae95adec000066660f3a40cc0bc4c2753664df00c4c1c9149a9078fffff3410f5ac98f69b092ae995ca410400f38f037c481fc514c7902c402f91dba4db00000", 0x98000001, 0x0, {[0x118d]}}, 0x0, 0x8, &(0x7f0000000300)) read$FUSE(r3, &(0x7f0000003240)={0x2020}, 0x2020) r4 = socket(0x14, 0x6, 0x4) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') exit(0x6) lseek(r5, 0x9, 0x0) ioctl$SIOCX25GDTEFACILITIES(r4, 0x61e3, 0x0) accept$unix(r4, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e) 11m56.661919289s ago: executing program 2 (id=1457): keyctl$reject(0x13, 0x0, 0x3b41, 0xbc20, 0x0) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000200)="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", 0x147}], 0x1) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e040a260c"], 0x7) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r1 = socket$unix(0x1, 0x1, 0x0) r2 = syz_clone(0x0, 0x0, 0x20, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000180)='ns/time_for_children\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000400)=0xc) stat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="47592189dee658a47c79d29c4541ab54e594181bd7d6b9df93126d9909221ea77569d73af37f5f6daf8dbee5af1117332f443836ed7713bc724c568d1179988b515b9f580ee31ad15dadb5f53233a7f320b6ce9d869cca7f6d", 0x59}], 0x1, &(0x7f0000000480)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r4}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38, 0x81}, 0x20004000) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r5, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfd}, 0xc) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'veth1_to_hsr\x00', &(0x7f0000000300)=@ethtool_flash={0x33, 0xd, './file0\x00'}}) 11m56.366582035s ago: executing program 2 (id=1460): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000540), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "29fd71a69d3295d8"}}, 0x38}, 0x2}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r2 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000780)={0xd, "521f5b436b6ac41dc8d18e8cb6df21dfb062bef1edd4e9e88a1fd8d9b1d8d071", 0x2}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12011003c08b25203c41a4819fae0102030109021b0002000750000904fbd400ffffff030904020700ff"], &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, 0x0, &(0x7f0000000000)=0x90) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000000)=0x2000000) 11m54.82191591s ago: executing program 2 (id=1465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRES64=r2, @ANYRES64=r1, @ANYRES8, @ANYRESDEC], 0x6f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}}, 0x4800) r4 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) ioctl$LOOP_CONFIGURE(r4, 0x4c06, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r5 = syz_open_dev$radio(&(0x7f0000000180), 0x0, 0x2) read(r5, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[], 0x1c}], 0x1, 0x0, 0x0, 0x80}, 0x300) 11m54.225136595s ago: executing program 33 (id=1465): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)=ANY=[@ANYRES64=r0, @ANYRES64=r2, @ANYRES64=r1, @ANYRES8, @ANYRESDEC], 0x6f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r2, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [""]}, 0x1c}}, 0x4800) r4 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) ioctl$LOOP_CONFIGURE(r4, 0x4c06, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) r5 = syz_open_dev$radio(&(0x7f0000000180), 0x0, 0x2) read(r5, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[], 0x1c}], 0x1, 0x0, 0x0, 0x80}, 0x300) 7.129118365s ago: executing program 4 (id=5538): mkdir(&(0x7f0000000000)='./file0\x00', 0x26) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) socket$alg(0x26, 0x5, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)='m', 0x1, 0x2000c014, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x81, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) 6.994984791s ago: executing program 4 (id=5540): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="b80400001600010a00000000000000000a000000a404ca809d0401"], 0x4b8}, 0x1, 0x0, 0x0, 0x844}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x5ac, 0x259, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x80, 0x4, [{{0x9, 0x4, 0x0, 0xff, 0x1, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0xbc79, 0xa, 0x1, {0x22, 0x95e}}, {{{0x9, 0x5, 0x81, 0x3, 0x638, 0x2, 0x40, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x6, 0x1, 0x7}}]}}}]}}]}}, &(0x7f00000002c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x4, 0x52, 0xa, 0x8, 0x3}, 0xa3, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x2, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc0e}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x421}}]}) 4.032787176s ago: executing program 1 (id=5555): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="c89339f96fa636ba2f527aaa37159cc815448e015b23284d531bdd25a86c02e88b8f962021a37fd9614193094b27b21bf40bc7b43441ae5179a127ea80e91899e1f10a7045c4412bb7997ff8838923521fe0754832209cd546f4ed81500298511e080ec7059b1c32c07fd26f721c6611b8cb344a3fd8f7a889c50a42881e09d4d7ee7ee6c308a13ae6436c858933dc99f71924b68ae0faf95b0afcd3533bcc32840737f434728a12e99aea5c4ee6a603636560b8d9de530d395181e440c1a025ff8d6f33062f14ba2403a178e32ff2d4ec5d0d2c83233b01a41103ef38daeed650987abebe0e8ba7effc07bb5dbbc9a38a11f082f2c99937942f017c37a59572f5069ca709702ef133aa9730ebb5b72687f6175906dbc32289108cc93e5c84284bc701a0629e12eca8c15e763acd011323b758fdb82a63665c906b176042a6c601b5428722c8f6b795a4effc0d4c9a4b4963ae30e77afa0b473d27f4938b1f081765f30aee60de80b1154e3afc3593cad6a146f1c4e954a6b7535f7c4f1baf0e7280ae8957eb14aecb29cc42be434b6a73840fb4668ab11c7ad5f300d7561aa60619fc26a1bfe8fa4858b8b4282d0c9a86c8c2eed644303c1213114081f9cd2358f6609ed25113de321db6b3efbfea341c7318fdcf6776383d3329f080e2386a708679852ee2c28c2ab423163be97f818424b862486791ce5b8b25836a4f07079b65c7c3b2e797eee7f267e5cf37fb63bb89f6b15c332da46b2a313ff6cd958152701a73601c7d02b74622ba7ff9c2fccb1826a3238b95163edcf5dbb381c666fcd8f0ce22eb182135bd8a32c627e20354f2253edb77efadbb48d512ca030763df825c1dd71d34295dc2e75e0a3054354ca6674e2d16ae319c8f3bf7a7fe1e1e596cc2679444c2b5e84a5caaa40136a41a3a35e2ca053d8e4ff2134c2bd7dc2c5c7ef55579a7b569b5face778afba93a877b622f473d942fef36d909b7c17e2ba3948fc889f377f0bce583835ce70b86ee8c419f77c9fa9da33d5f3fd2f994c2229b59db0670a15d7ba9b8b3245c7c2f83953c046528db1d9626877752071b0389bb18edd4d3797b6846e8746911526b6cfb1da1a206f5d13f69d7a8a76f5dfaf02abdfde171ed51a80ca2146fe8a181df5f9c9e969c1e2113bb355a956dd0139446d7e5b1ae338513459753977c245177ed5ae398bb23ad503739c2d75b99d70af19a2faf0a6922585378c0c881298f5af7dc63f99b40be3aea8c25bb8f599ffc4d47caec400357f2fa0675c5a81141d6b1697a92f7ab1e465361bdec4bc837595cc257aac0bcd3333eef2199c622268f0aafdccf73b3fda6ddef6102aa03c1a07a85509025be45443e71d63e4a8b54cde98554b1dd9a2f431b62d29f0cf67e069c15988b8b78c6c66f7f1d831e6307473250bf66b88c1c326faa8f093f03824980bbddc34e2324754fdaafa45ea1a1cc4baaef3104108c8e7987696d3634aa61cd9af0f2b5e427eff51cc66792a37a6e09278c6457a92a84d2fd23f7a753120758e5ca80582848d537d2704315ee55374ca8204c427c8f1138c901a29f83c0b63fb00dca30a90aa0b81d09fad2bf556100a3f762dcafd44d89936f8d5e037bff746a3d7f769ef8045ca50b1f7e8b24b723f06b5582564133e8d6b9f78c0e0d19c6808b65aa19e0dbd18527e5cf4f1c2a7e9b9dcf996d781b0851b925a02a02a9ec2887fa049d10bf8e3cf99157df4f6708c9b3673e565ad47f3518d45c69e4c18f511a9973938279a0c607d4d5b010b83b7edf9dc91ac7b9dabcabf45f4abf863c87c9671b22421600e6358ab3798afeabb0021b587e125b4f599271228944365b1333e3a9f5cc7211fde35179bc2237a26d11b9ed5387644e34efbffb54c615c7e52efc06b425d43d85227f73d7d7a7435c4bf35c76be6e5daf24785f197710503a7cf3c6bde5d5f9ac3312f50af0bcd4e05313bf02e8737761c47957cdb07f1efe8468502e58e1ef9d02582fdfe2db9c1300d99d97b2b339b73a78ef91206a8f08a21988076987ca3b6e361bdd86fb74a9184789586a1815935d837fa7590ec4ae4aa838bcc5cc94c9193b4f3084f9854f21223bc2d8fb4cb4f888ebf6dc9daed2b5f36a964955daf5fac1e69e40952b09e3124491d9d6db5eb2529c0d0a6d7a9329a05a9d4d05a9fb55711786daca3519573d1a19c9200561e9e08d74190583fc4127d99ec251cc2597ddfc77562ebcb0c4107ed839e8d4e39cf048f7c3bf4d3af99d32b419f7e46cb70d23039bf965874be68923e7947fcc8f6182f620576221209a1781eb0e490d53831a01e5c3bb406b8004534c5f5c631a6a46a06bbd56c4d309f8e7f1de903dc9561cd23cb9a7ab63db127ab22adf1294aaab41e73bc067935901e66de985aafb506744c96d12af55e5961718a250ccde0db9dc94c5ab817448f193f922361f8d3043d4095ab1bb1126580c094f5f0356773fca30f963c2cf97c033c634a057d376140faeff8e19273749acc9322c94ec87d0f4b70615b76f8e2b256daa5c034382a1b93889081862c20dd2b956566321f69b192fc7f2bc135bdb2bd9575cfff340bfdddc21ce37647f7e34724286e5faf447e039e67fd64938a40151d9aedbb772a059b0ff3d2dd8c2b7f96df3b48f611758e28ad8812fee6708cc39e77bb55743db0df4cc08653c78182adc3a67db7e760d5f3741d6ee241576d0c55d5c40b5932769d80e2a687ec05c7f4c3f137ffdc5abe3e7039fd5a86990374ff0b00192088182e82b970c5bf0cfc054ca99aa225a69df5519a78fa31ca37ced124e84ded418aa9868a5ff95334ada067084fa98e5fdf353285836246154b0eef9ec625c855721a6cd0c649b6d2f72e600ebdbcfc207347a3d083033b03fb233946e9aca086456ef2bb02efff8e7953d833eb986c22afac7fd3753c19a7fd39e4d1f709e70272013b41614df4f1db326250b5588de369c7a8bf3842acf15c78a4d3881a6e092877665ef63e88dc97dd72d38612d5380abc72b9266cd325f05fe16ef0a01799e33adbff1d86d0980d2ed3f496495e5b7f41278c9498d1616db7ba860ffb87aee648df3f19bffa2edafb89940f930fd8beb2825492305b074757730accb8d20c847dd4d8beabc318c78cccfbc406314fea2da4b4cb8a67371bbce9dd7ec2d3c5b4ea21059130fa76fefdb4a7669ee25748468ef2d78088d1b3bb997ae4d51b5b739acfbd3bb1236db07dbcd0c810c07c73e5c6735a0be9d539d5c6caae62b3707d1a18cec5e16cac8575484604ca884e4f91c9bad2476f18be0b873a2cbe9c997335479b8487919a78922fd5175e8dd3b571a7677e6ac9f82e4e7c67cdfcb9ceee59b08a51bbc737bdff9b6e2250877d44a8d8c1d5ef113b2372833307be3cf0db834d043f529db04185b557910009d92cdfaa07c0533483459294a3e3da555c29416e1af2ec90b4b891e028e5af3ff5b274a0dc93ad4a3a33f886675f86bd1573bea665221e6bda9e2682bc00de3e603531f5e7d7a52c5fec65f478414833e22f36fe2b18930be9e4ef6367955623a9b938f79ff7e288678344c378b2bfd168e4c929357ab39640d677bcc17ac12fd999f3d4cd17b25a26e2bf78bcf9f898e89af6af47390908d5ea767f516cd4194165cea481c8f7ab946b66aa3083f21c02e7d61c19a4358c1cc92503c6e3bb1e7bdeb5badafdda9cec995830f5fadfb3fffe12426db1253db1268e4d3a24ca1d3d06822a439d8ccfb26af736751ac2d6dcec3763eba1c56d8a9f0bb66edb73e0dc9d5b56b23058fa9afa3667ac6188027bda68211b45b5451fb5a7e359fc61cdcf13d1f0965d9fddfd3d5d75684353a8687d18c3970b1c89e217b6cc1c7a34cec7c1e667dcd205346c2a8f85835c186811ab1121136ea83d297eb05a9ac1afa3b33346b392c3e9f479a19f7563531d0519f29868015ff20163530ce8d31bb298801b772dbb65d5caeda85982798a5ccdb4576ecc9378dadb21b3bfbb4cc33b3883164fbb6ac1a0401492c453fe2430a9de3b96d445b2c36e9a82200e00df7649544966c8f39a2d173fd8529ff8ac0f068216ae62f68c21485d6a5638f916cb5c27e5b4859c799b0a6786fd48fbacd83a9a472f50e024fa394537b33d3b4f9301266ea5e2462310ee2b862635d32d780d6411e4e6eb49d1e3732d1a0b8f0aef5bb7fd71cf9f861fad635e321fa146a630ac18d45c425214d79becc8cb97b8cac0ed0155daa9861c57ad549ae9d3cab7259a4b1eeaa72f7fb575f1dfd7268365e194e15518e176a32b82cc13544e75170bccf49161b67f649ebd1b81c85b128312b78e93750bbe9a2c456be9743859c8d80c4ec1dc4fd9d1a059042b058347b8bd02e65d469448953ac787b827fc95071d67ba047ac40ddd8a2503f62bf94457ea53073336cc284b2af1ef5598b0c0a0df3e2d729c43a7307dedb785240ab9cbe89075fb6b7ab8e6482b1ce31332e1bfa3f72e850bcea57260e4ee064ea5cfb629a058fba119e7d09ea4abd1f3b13d5ba5f8fc8abf967baf2da74099fd298e3bf3dc19ccbfe4c5e6be8cdb5e10066eceef59da3fef70c4b3d0d3f1ab7c347b63e3373e3327f9df11c73283234de66a9fa7bd2465318c6ef3a6f6a90b09c547bb93c2e5a1d12af02a0abfbc697c38ae95e1cbfd12706e96bbb2e12aaf6d40b032d61f9ee527bf464d51cc1a80ea0baebaeb8fd0523a7028387c43fc27f5fe6d2880a9f2b69eae550e3dcad889ae61abbfca58140760b53c85cea987e242f9ac38ba50ae7da73", 0xd41}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0xa9}, {&(0x7f0000003240)="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", 0xda6}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) 4.021115889s ago: executing program 1 (id=5556): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,size=8']) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x181) ftruncate(r0, 0x82081fc) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r1, 0x800000) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, 0x0, 0x0) 3.925586898s ago: executing program 1 (id=5557): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = socket$unix(0x1, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) writev(r4, &(0x7f0000003500)=[{&(0x7f00000035c0)='4', 0x1}], 0x1) setsockopt$sock_int(r3, 0x1, 0x54, &(0x7f0000000040)=0x80, 0x4) ioctl$TIOCL_SCROLLCONSOLE(r5, 0x541c, &(0x7f0000000100)={0xd, 0x18d}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x67a, 0x6, 0xf3b8, 0x0, 0x1000, 0x400, 0x4002004c4, 0x1000, 0x0, 0x97, 0x10, 0x0, 0x3, 0x4], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x5) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.86081621s ago: executing program 4 (id=5558): syz_usb_connect(0x5, 0x24, &(0x7f0000000300)={{0x12, 0x1, 0x310, 0xf9, 0x2d, 0x10, 0x8, 0xc45, 0x627c, 0xe8b7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0xb, 0x60, 0x6, [{{0x9, 0x4, 0x55, 0x2, 0x0, 0x58, 0x6c, 0xbc, 0x8}}]}}]}}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0x5, 0x55, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x43, 0x1, 0x1, 0x9f, 0x40, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x3, 0x2, 0x6, 0x0, 0xff, {{0x6, 0x24, 0x6, 0x0, 0x0, 's'}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0xf4, 0x7fff, 0x7}, [@dmm={0x7, 0x24, 0x14, 0x3ff, 0x1ff}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0xcc, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xf, 0x3, 0x3}}}}}]}}]}}, &(0x7f0000000200)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x110, 0x7f, 0x10, 0x9, 0xff, 0x1}, 0x19, &(0x7f00000000c0)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "a1c67571c97ca444087ca9d44d060781"}]}, 0x1, [{0xf2, &(0x7f0000000100)=@string={0xf2, 0x3, "05207a24bc9c38e3a959f8e833cef0deb3dfdf164e1fba92973f8608df6b33ee3af86eee0371c665a313727f2db7b89b566598f3d27cc196525ca7847f9815b2ec128d27327377c86b078021ae448e0d3a8759621f96168a5a926837b488d4db0d07829ecae7a7ebdcf1c0e6294fefae9bea66e3ac879b73a9d61551277cb1f30a013c041bd7fb8e7ae8938f5ec7b33232921b18669bd3f9c61e43802d3f806dae15b5a679975d21d62af2405c634c42274c740bdfbdc3bd6834e48881640e0dd6ae48ae32362b4855ba7270c0f6ed472e3ce3368c4556ef67ee0b8954bf6370fa36bff0f94de11d60432b7955636bbc"}}]}) 2.929058601s ago: executing program 1 (id=5562): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000000)={0x0, 0x40, 0x3f, 0x30315559, 0x0, [], [], [], [0x2]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff0060031200100888fb143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00000000000000004093 '], 0x2a, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000300)={@flat=@weak_binder={0x73622a85, 0x1101}, @fd, @flat=@binder={0x73622a85, 0x1000}}, 0x0}}], 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 2.446271727s ago: executing program 3 (id=5565): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,size=8']) chdir(&(0x7f0000000140)='./file0\x00') r0 = creat(&(0x7f0000000000)='./bus\x00', 0x181) ftruncate(r0, 0x82081fc) r1 = open(&(0x7f0000000780)='./bus\x00', 0x14d0be, 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600402, 0x7ffffe, 0x4002011, r1, 0x800000) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffa000/0x2000)=nil) r2 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, 0x0, 0x0) 2.064002612s ago: executing program 3 (id=5567): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r2}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, @private0, 0x1, 0x6, 0x0, 0x100, 0x6, 0x40, r2}) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000040)) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd3, 0x9d, 0xa6, 0xff, 0x5c8, 0x403, 0x26fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x38, 0x0, 0x0, 0xe, 0x1}}]}}]}}, 0x0) 1.705170348s ago: executing program 5 (id=5570): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r4, &(0x7f0000000480)=[{0x0, 0x2}], 0xdeadbeef, 0x8, 0x1}) (fail_nth: 5) 1.704871691s ago: executing program 5 (id=5571): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae10d2414a9ebc017b52b313305e763e76f3e0d78f3", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000', @ANYBLOB=',group_id', @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000440)={0x7fff, 0x0, 0x8000008c1f, 0x800000000, 0x0, 0x2, 0x400, 0x8, 0x0, 0x0, 0x81, 0x80000000000, 0x7125, 0x1, 0x8102, 0x200, 0xfffffffffffffffc, 0x1, 0x3, 0x4, 0xffffffffffffffff, 0xffff, 0x0, 0x20000000000008, 0x0, 0x80000000000000}) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x4, 0x7f, 0x4, 0x4000000}, 0x18) write(r1, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff1100020002000008", 0x1d) clock_adjtime(0x5, &(0x7f0000000600)={0x0, 0x1, 0x8000000000000000, 0x10000, 0xffff, 0x0, 0x3ff, 0x401, 0x0, 0x3, 0x75f, 0x3, 0xd1, 0x1, 0x7, 0x8, 0x9, 0xcd9, 0x7, 0x8, 0x8, 0xec, 0x7fff, 0x6, 0xff, 0x7fffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x1, &(0x7f0000000180)=0xc9, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r4, 0xae45, 0x400) getpeername$qrtr(r4, &(0x7f0000000280), &(0x7f0000000500)=0x7503ed5ce31bc3a6) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="0002", 0xffffffffffffff19) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000720b0f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2b}], 0x1, 0x11, 0x0, 0x0) 1.497248071s ago: executing program 1 (id=5572): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="e7e4861f4bcfc6ea1143faf5be5b5e6bb7fabe3baafc310136a16290571ae8331b4e694ced800eb58807a40c5e77fb570e73ce84643ade9bd61334c3db831aa9838138efc968d22a37602fe9fbd34248422a878423c342d2dacc0f31a82f8b8dd66eb41a31a685e98b308061b43aa0a114ee48904e4a283fed6662fb8bbd784924805e94080330dd54bc14a2dc49b72daa262ae10d2414a9ebc017b52b313305e763e76f3e0d78f3d4fcd9173dee890df05eeb79618efa372cfb8d2addd01c8c1c2c57f657a625a688871958b0a40088fca4f15e71a6dac908", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000', @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be7d6a", 0x8) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (fail_nth: 9) 1.431632302s ago: executing program 3 (id=5573): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x240, 0x9b9a}, 0x9, [0x6, 0x9, 0x5, 0x9, 0x700000, 0x155f, 0x6, 0x5, 0x25c8, 0x1, 0xa5, 0x6, 0xa2b9, 0x1000, 0x0, 0xe4, 0x9, 0xfc000000, 0x6, 0xbbf, 0x5a732f64, 0xc, 0x9, 0x12, 0x2, 0x80, 0x4, 0x1, 0x2, 0x3, 0x7, 0x81, 0x28000, 0x5, 0x0, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x4, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000000, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0xa], [0x9, 0x3, 0x6, 0x0, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0x761e, 0x9, 0x4, 0xaca, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x4, 0x1, 0x2, 0x54f5bad8, 0x8, 0x40, 0x400, 0xfeff58b7, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x4, 0xf1, 0x4, 0xab00000, 0x40000005, 0x7, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x8, 0x3, 0x4, 0x6, 0x7, 0x2, 0x9, 0x95, 0x8000, 0x6, 0xf0b, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x2, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000008, 0xb, 0x7, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x240, 0xd, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x200, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3433, 0x3, 0xa6, 0xfc, 0x401, 0x101, 0xdd80, 0x60a2, 0x17fc, 0x1, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x8, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fbfffff, 0x7, 0x4, 0x10, 0x81, 0x4, 0x9d86, 0x9, 0xfffffff7, 0x20008, 0x40f1, 0x2, 0x1, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x80000002, 0x624dfaee, 0xc, 0x7f, 0x201000, 0x5, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0x4000000f, 0x2, 0x5337, 0x0, 0x9, 0xfffffffb, 0x4, 0x80, 0x9, 0x4, 0x463f, 0x4, 0x7, 0x3, 0x8, 0x13ffd, 0x1, 0x1b1a]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24040040) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfc, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0xff}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x7fffffffffffffff, 0xfff, 0x0, 0x180, 0x1, 0x7d, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x800, 0x0, 0x4, 0xbdb], 0x1, 0x1c4213}) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f7a7e40720c12009622010203010902"], 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="000f010000009d6af58436cfda8bccd5f539c12ff94c9eb285f99381e5019bf5578eb77653e33312f8ae0afdca9a4e6b5b1a62fbfa8ea91d2d5d150e1540070665ea27722fe0141b33f7c5ddf8abf63eea9a0e251c0eab51b0fb30e8865b45c566f596e014739cf4d647831c1516024c48a7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.208880165s ago: executing program 5 (id=5574): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xd41}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0xa9}, {&(0x7f0000003240)="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", 0xdb4}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) 1.06581362s ago: executing program 5 (id=5575): syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000018203010902680002010040000904000001020e0000052406000105240000000d240f010000000000000000000624030000000c241b4800f3ff0005008005094581130202000000090401"], 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x78, r0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x7}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'dvmrp1\x00'}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x400}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x7}]}, 0x78}, 0x1, 0x0, 0x0, 0x24000050}, 0x0) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000000)="240000001e005f80004000000000000001000000010000000000080008000100000303ff", 0x24) getsockname$unix(r1, &(0x7f0000000000), &(0x7f0000000080)=0x6e) 792.222753ms ago: executing program 4 (id=5576): r0 = socket$kcm(0x10, 0x2, 0x4) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000100), 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x12, 0x0, 0x0) r2 = socket(0x2d, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r3, 0x10e, 0x8, &(0x7f0000000000)=0x3, 0x4) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0xc0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x67, &(0x7f0000000140)=0xd5, 0x4) setsockopt$sock_int(r4, 0x1, 0xb, &(0x7f0000000180)=0x80177, 0x4) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{&(0x7f0000000100)={0xa, 0x4c20, 0x80000, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c, 0x0}}], 0x1, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="308400f84c87af471575efe55e171a24a95bbf2d7543cf79909daecbbc8ab6", @ANYRES16=r5, @ANYBLOB="090000000000feffffff0a00000008000300", @ANYRES32=r7, @ANYBLOB="1400508005000900020000000500020000000000"], 0x30}}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac0080002000f000c00040005c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 676.991691ms ago: executing program 3 (id=5577): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r4, &(0x7f0000000480)=[{0x1, 0x1}], 0xdeadbeef, 0x8, 0x1}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r5, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x24, r7, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x24000880) syz_usb_control_io$printer(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, &(0x7f0000000540)={0x34, &(0x7f00000001c0)={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0}) 591.063353ms ago: executing program 4 (id=5578): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x1, 0x600]}}]}]}]}, 0x38}}, 0x0) (fail_nth: 7) 516.693292ms ago: executing program 4 (id=5579): r0 = socket(0x10, 0x2, 0x0) write(r0, &(0x7f0000000000)="240000001e005f80004000000000000002000000000000000000080008000100000000ff", 0x24) r1 = socket$packet(0x11, 0xa, 0x300) recvmmsg(r1, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x20, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = socket(0xe, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) write(r4, &(0x7f0000000080)="240000001a007f0214f9f4070009040803000000000000000002000008000f40fe00000e", 0x24) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000040)) 332.846036ms ago: executing program 5 (id=5580): r0 = socket$unix(0x1, 0x5, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x3) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0xfffffffe, 0x0, 0x3a5f, 0x8}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) ioctl$KDFONTOP_GET(r1, 0x4b72, &(0x7f0000000b80)={0x1, 0x0, 0xe, 0x4, 0xc4, 0x0}) fchdir(r0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r5, @ANYBLOB="1c005a8018000180140003000000c7ea000000000100000600000000"], 0x38}}, 0x0) 204.143293ms ago: executing program 5 (id=5581): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000cc0)=ANY=[@ANYBLOB="12010000773604202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_control_io$rtl8150(r0, &(0x7f0000000040)={0x14, &(0x7f00000000c0)={0x0, 0x3, 0x46, {0x46, 0x8, "4e61f01fc3c7d452844543723fbbca11123781a4e311cb419fcabadd0881377dad5c08f674901ab94e8f8e8c6f1863048aaa5b5b1c997d715c546622ceda5b08117f96f1"}}, &(0x7f0000000140)={0x0, 0x3, 0x6a, @string={0x6a, 0x3, "7a025524d670f752f5ae353ab0b42074373cb635fb65309c41f09f0094781d83aaef172f6c381ea385f3abbddcb44fdc780e1ad0fa5c1f3b4f4f1cd7a9b53c82ff72ac64cfca2e174ede8c06798c09e21913ad05aab762fd0d6335eb9056a164ec6810a6862918b9"}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000240)={0x40, 0x5, 0x68, "1fe261bfff8c5c3cf42ac38da8f20f69638ef13b06e485dfb4ec28b56b0e388943dc452d2e6d3315aee6909299fbba75a05a8f5bade60045808c4f7cd51d4242352031e362b048be553359f685f486b17f86412aa55f8e9ab683a22722f5bc1692562c787c3da38a"}, &(0x7f00000001c0)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000300), &(0x7f0000000340)={0x40, 0x5, 0x4, "283a72ac"}}) setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f0000000000)=0xa6c5, 0x4) pipe(&(0x7f0000000dc0)) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="401425"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$printer(0x2, 0x36, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x10, 0xaf, [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x7, 0x1, 0x2, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xf1, 0x9, 0x7}}, [{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x6, 0x5, 0x7f}}]}}}]}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x201, 0xc, 0x4, 0x2, 0x8}, 0x2e, &(0x7f00000004c0)={0x5, 0xf, 0x2e, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x4, 0x2, 0xe}, @ssp_cap={0x18, 0x10, 0xa, 0xb, 0x3, 0x5, 0xf000, 0xedf, [0x3f00, 0xc0cf, 0xff0000]}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x9, 0x3, 0x983}]}, 0x8, [{0x76, &(0x7f0000000500)=@string={0x76, 0x3, "ab399dbf553b68b63fd2252ee6613edf4da88f06c4165c4df03718ab1a1621384b682d4ab001df595a3d749de18eb48c81caff3a9e7afbeb1a91b353a9878ceb57cc18b4600607e56ee77482db975dfe98b311f33da62469d77deff201c09dd909115bcc48cd0a2af0cafc3528828e3b0c9e3096"}}, {0x95, &(0x7f0000000580)=@string={0x95, 0x3, "b8382d8af584157823e40e11b8819bd4c7faa0e88c8cf3d37d361c453dcd0c54ff7b0a3b1a977f885d2c66e82e35bacfd01d05014ed11e8c32d4f38d3fd9cef467d6fc860c34b044b942e0a533c8b78d87379a0d1a1df8a632ccd27da95401ea8d068e84e082dd0a4648bf533726a1ddc52fcf1d202c84314bf1c3d1d5815016443fae15d3a319344627be177916f6401a834d"}}, {0x54, &(0x7f0000000680)=@string={0x54, 0x3, "a1f6b451ab67e0337c76afd5715051a57f96fb45bd800116fe476369e73f5babf784825ed0241cb035bc6fd47492f3a8faf90b33e7b1ab5ae0b896977f218e07723e4250d4a60f50bec554893d38a984a803"}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x140a}}, {0x62, &(0x7f0000000740)=@string={0x62, 0x3, "805aabf7a5c32e30cbf3376cdeb08dacf2d9a4548cf10a53493671d73de9497ef95a7ff7483961d7b132d3a16e9698b688fe1427bb47c89190a00c2fd1cf6ff77f23e7a9e81dbcc34287a9e929a5371d1f21ff063eca5c11969294768efcb56d"}}, {0x6e, &(0x7f00000007c0)=@string={0x6e, 0x3, "81d53626779e806a196f9df18dcb8c8d7849e8996714e5229afbecb088ecfb4a29229ef9d7ac09de0423503cba32abb84e3be0ca5cc9d5d6201f386e6a4cab88cb949300b9a9fb73b142312365ca52dbc3c3256887b3ab5271a120e29cdff03273928ced5f2fa09bdb407142"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x43f}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x455}}]}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000fc0)={0x2c, &(0x7f0000000900)={0x40, 0x10, 0x4, "f5649777"}, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x8}, &(0x7f0000000080)=0x8) syz_usb_control_io$hid(r0, &(0x7f0000000a80)={0x24, &(0x7f00000008c0)={0x0, 0x1, 0x25, {0x25, 0x24, "e275ecabb6c81c865213afc8ae901f39040ca04303d26dccc3d84156c40d892531ac09"}}, &(0x7f00000009c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44b}}, &(0x7f0000000a00)={0x0, 0x22, 0x1c, {[@local, @main=@item_012={0x1, 0x0, 0xb, 'i'}, @local=@item_4={0x3, 0x2, 0x7, "1af8eeec"}, @global=@item_4={0x3, 0x1, 0x2, "c7ed3351"}, @global=@item_4={0x3, 0x1, 0xb, "4acda419"}, @local=@item_4={0x3, 0x2, 0x0, "57d1fb3f"}, @local=@item_4={0x3, 0x2, 0x0, "0a02a8d2"}]}}, &(0x7f0000000a40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x5, 0x5, 0x1, {0x22, 0xa6c}}}}, &(0x7f0000000c80)={0x2c, &(0x7f0000000ac0)={0x20, 0xe, 0xd6, "15afbfc4a0d15c2d54e9b2238f8c2dff5d4b8d41e09681cc6029ca989624596c17265214ba39d75224fdede327af86abb82dcb245e6fb8fc6cf573b8fbf06410541b9afb524f0a2f5c11582bbc73a966f5f6c488235b060774dc6f6ebe5a833fe599be635824c11d071ac205e80ff5852f9235384b6f0a2b422e18c3485aa026e82a3a5aee1bde34d035e26e9daec2131db1994480bbc165926471c366d9fc7de6780cdddf9cae87669f39cab6be4fca37b8ed5c46ead30810677c80da07a561b5ba259f3055acfe1a9ffd804c21a776b3b2434687b7"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000d00)={0x20, 0x1, 0x8b, "ba082efba5ebc549706346b8011e375f5f5534b654e3ce361ff69ade02b2d16f46fc73166ece2cd2fb5724a74336529c87c9995d9f79e810616425d4e90dabfa061fbdedf556250f6e42067e3b37375435c402aceae92e50d224a590dad4036393083827281f70492b45dbb1e56fd2736e439dc75e04b388083d66af9fc0fcd49e372bdaa6c24a811da8a7"}, &(0x7f0000000c40)={0x20, 0x3, 0x1, 0x89}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001240)={0x1c, &(0x7f0000001100)={0x20, 0xc, 0x4, "c926eaeb"}, 0x0, 0x0}) 56.119118ms ago: executing program 1 (id=5582): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000500)=[{&(0x7f0000000280)="dc", 0x1}, {&(0x7f0000000380)="4262bb", 0x3}, {&(0x7f0000000480)="9d", 0x1}, {&(0x7f0000000340)="d9", 0x1}, {&(0x7f00000001c0)='\b', 0x1}, {&(0x7f00000011c0)="b4", 0x1}, {&(0x7f0000000000)='N', 0x1}], 0x7, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r2, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000780)="92", 0x1}, {&(0x7f0000000940)="a6", 0x1}, {&(0x7f00000009c0)="e3", 0x1}, {&(0x7f0000000b80)='a', 0x1}, {&(0x7f0000000c80)='_', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000008c0)='f', 0x1}, {&(0x7f0000001f40)="2ae0a79f886ac8fd105493a2585ebcaf5142ac47ae6624d854c0126b1229c57735ceeffa23ad416df2d58615e69565387f3847c32160cdd68811ccf2e3e56c2457a07581d6a5bd7d1a756e13c4c86874df9a65e724f9480162cbd8864919a3658311e3738d1a558df6766a845840e4b903d84ed5ae604e47dedf8b5ba991d7b910a80eab67a9f8a77e8e7b893cda1733a543566b27a1178767d1cc01cc9efe17ebad47d8640d0fb3788ddafe8cdcf47cdfa6c4b4c061712fd454cdfd05fe54cc33", 0xc1}, {&(0x7f00000012c0)='t', 0x1}, {&(0x7f0000000d80)="dd", 0x1}, {&(0x7f0000001dc0)="81", 0x1}], 0x5}}], 0x2, 0x4008440) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0xd, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 9.053013ms ago: executing program 3 (id=5583): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002c00)}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e11356", 0x7d}, {&(0x7f0000002d80)="15", 0x1}, {&(0x7f0000000e80)='S', 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000003200)="8c", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000380)="01", 0x1}, {&(0x7f00000012c0)="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", 0xd41}, {&(0x7f0000000a00)=',', 0x1}, {&(0x7f00000022c0)='Z', 0x1}, {&(0x7f00000005c0)="f5364e548c550000000000000000000000009c20aa8f88f2a2e98330e3799522896ebfddd4848b9deeecae27e7d77317facda9ee98b10c68444b7c094658bed24fd6766444ba58941c4d2a2cea03546fa8d215c3547d076a9543f841b2add236c19bdcf172a69ab70a7df1ad7ebc55e947f2c7a7a356fd68dbce155d2e22d72a5a65dbc16f7103ee6d06748b2ddf2799d94bfbcf1140285facb31bce2fba7fe3617478337692b1236f", 0xa9}, {&(0x7f0000003240)="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", 0xdb4}, {&(0x7f0000002380)='L', 0x1}], 0x7}}], 0x4, 0xf000000) 0s ago: executing program 3 (id=5584): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x100500) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0xfffffffffffffd97}}, 0x44001) r1 = socket$netlink(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x82, &(0x7f0000000d00)={0x0, 0x9}, 0x8) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000009060102000000000000000000000005097a310000000c000180080001407f0000010000000000bc8f0ba058639c777e3b10aa649487000000006d69eb5f0b6fc87a3184f1d501ab9b46c5428ee5d20ff61ed65fd736c22a8b158207aec84f02835f718dd05b63e21fac6f4b84a8d9d38530eb05900593fde755a11ef39becceb80be7b6005a"], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): nvalid interface number: 2 but max is 0 [ 925.674130][ T5978] usb 4-1: config 0 has no interface number 0 [ 925.681323][ T5978] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 925.689862][ T5978] usb 4-1: config 0 has no interface number 0 [ 925.697210][ T5978] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 925.705759][ T5978] usb 4-1: config 0 has no interface number 0 [ 925.713383][ T5978] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 925.721618][ T5978] usb 4-1: config 0 has no interface number 0 [ 925.729451][ T5978] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 925.737779][ T5978] usb 4-1: config 0 has no interface number 0 [ 925.745346][ T5978] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 925.753668][ T5978] usb 4-1: config 0 has no interface number 0 [ 925.761327][ T5978] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 925.769729][ T5978] usb 4-1: config 0 has no interface number 0 [ 925.778416][ T5978] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 925.787684][ T5978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.796220][ T5978] usb 4-1: Product: syz [ 925.800531][ T5978] usb 4-1: Manufacturer: syz [ 925.805289][ T5978] usb 4-1: SerialNumber: syz [ 925.812705][ T5978] usb 4-1: config 0 descriptor?? [ 925.820491][ T5978] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 925.962441][ T43] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 926.025816][T21972] binder: BINDER_SET_CONTEXT_MGR already set [ 926.032000][T21972] binder: 21971:21972 ioctl 4018620d 2000000001c0 returned -16 [ 926.112234][ T43] usb 6-1: Using ep0 maxpacket: 32 [ 926.118147][ T43] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 926.127332][ T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 926.135726][ T43] usb 6-1: config 0 has no interface number 0 [ 926.143354][ T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 926.151390][ T43] usb 6-1: config 0 has no interface number 0 [ 926.159214][ T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 926.167361][ T43] usb 6-1: config 0 has no interface number 0 [ 926.183228][ T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 926.191310][ T43] usb 6-1: config 0 has no interface number 0 [ 926.201256][ T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 926.209477][ T43] usb 6-1: config 0 has no interface number 0 [ 926.224266][ T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 926.232459][ T43] usb 6-1: config 0 has no interface number 0 [ 926.240263][ T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 926.249765][ T43] usb 6-1: config 0 has no interface number 0 [ 926.250438][ T5978] etas_es58x 4-1:0.2: could not retrieve the product info string [ 926.267642][ T43] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 926.281306][ T43] usb 6-1: config 0 has no interface number 0 [ 926.295703][ T5978] usb 4-1: USB disconnect, device number 50 [ 926.304580][ T5978] etas_es58x 4-1:0.2: Disconnecting syz syz [ 926.304682][ T43] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 926.321068][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 926.341730][ T43] usb 6-1: Product: syz [ 926.346084][ T43] usb 6-1: Manufacturer: syz [ 926.353220][ T43] usb 6-1: SerialNumber: syz [ 926.373156][ T43] usb 6-1: config 0 descriptor?? [ 926.383952][ T43] etas_es58x 6-1:0.2: Starting syz syz (Serial Number syz) [ 926.619085][T22026] netlink: 'syz.4.4797': attribute type 10 has an invalid length. [ 926.636128][T22026] bridge0: port 3(team0) entered disabled state [ 926.644615][T22026] team0: left allmulticast mode [ 926.649515][T22026] team_slave_0: left allmulticast mode [ 926.655191][T22026] team_slave_1: left allmulticast mode [ 926.660701][T22026] team0: left promiscuous mode [ 926.666517][T22026] team_slave_0: left promiscuous mode [ 926.672333][T22026] team_slave_1: left promiscuous mode [ 926.678248][T22026] bridge0: port 3(team0) entered disabled state [ 926.691818][T22026] 8021q: adding VLAN 0 to HW filter on device team0 [ 926.701113][T22026] bond0: (slave team0): Enslaving as an active interface with an up link [ 926.888907][T22033] mkiss: ax0: crc mode is auto. [ 926.904351][T22033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4800'. [ 926.933298][T22040] FAULT_INJECTION: forcing a failure. [ 926.933298][T22040] name failslab, interval 1, probability 0, space 0, times 0 [ 926.954228][T22040] CPU: 0 UID: 0 PID: 22040 Comm: syz.5.4795 Not tainted syzkaller #0 PREEMPT(full) [ 926.954261][T22040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 926.954276][T22040] Call Trace: [ 926.954285][T22040] [ 926.954296][T22040] dump_stack_lvl+0x189/0x250 [ 926.954336][T22040] ? __pfx____ratelimit+0x10/0x10 [ 926.954362][T22040] ? __pfx_dump_stack_lvl+0x10/0x10 [ 926.954398][T22040] ? __pfx__printk+0x10/0x10 [ 926.954435][T22040] ? __pfx___might_resched+0x10/0x10 [ 926.954461][T22040] ? fs_reclaim_acquire+0x7d/0x100 [ 926.954487][T22040] should_fail_ex+0x414/0x560 [ 926.954526][T22040] should_failslab+0xa8/0x100 [ 926.954553][T22040] __kmalloc_noprof+0xcb/0x7f0 [ 926.954584][T22040] ? tomoyo_encode+0x28b/0x550 [ 926.954616][T22040] tomoyo_encode+0x28b/0x550 [ 926.954650][T22040] tomoyo_realpath_from_path+0x58d/0x5d0 [ 926.954691][T22040] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 926.954713][T22040] tomoyo_path_number_perm+0x1e8/0x5a0 [ 926.954739][T22040] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 926.954760][T22040] ? css_rstat_updated+0x23a/0x4f0 [ 926.954797][T22040] ? __pfx_css_rstat_updated+0x10/0x10 [ 926.954858][T22040] ? __fget_files+0x2a/0x420 [ 926.954890][T22040] ? __fget_files+0x3a0/0x420 [ 926.954915][T22040] ? __fget_files+0x2a/0x420 [ 926.954946][T22040] security_file_ioctl+0xcb/0x2d0 [ 926.954998][T22040] __se_sys_ioctl+0x47/0x170 [ 926.955036][T22040] do_syscall_64+0xfa/0xfa0 [ 926.955063][T22040] ? lockdep_hardirqs_on+0x9c/0x150 [ 926.955089][T22040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.955113][T22040] ? clear_bhb_loop+0x60/0xb0 [ 926.955139][T22040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 926.955160][T22040] RIP: 0033:0x7f73de58eacb [ 926.955181][T22040] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 926.955201][T22040] RSP: 002b:00007f73df4caf70 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 926.955226][T22040] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f73de58eacb [ 926.955243][T22040] RDX: 00007f73df4caff0 RSI: 0000000040085507 RDI: 0000000000000003 [ 926.955258][T22040] RBP: 0000000000000003 R08: 00007f73de910320 R09: 0000000000000000 [ 926.955271][T22040] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 926.955284][T22040] R13: 000000000000000a R14: 00007f73de7e6090 R15: 00007ffe954398f8 [ 926.955318][T22040] [ 926.955349][T22040] ERROR: Out of memory at tomoyo_realpath_from_path. [ 927.445768][ T30] audit: type=1326 audit(1759381409.523:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22054 comm="syz.1.4806" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ae798eec9 code=0x0 [ 927.500698][ T30] audit: type=1326 audit(1759381409.573:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22054 comm="syz.1.4806" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ae798eec9 code=0x0 [ 927.592329][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 927.744622][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.767422][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 927.788407][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 927.806598][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 927.818049][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.835931][ T24] usb 4-1: config 0 descriptor?? [ 927.844202][T22069] fuse: Unknown parameter 'group_i00000000000000000000' [ 927.943670][T22076] netlink: 'syz.4.4812': attribute type 16 has an invalid length. [ 928.118675][T22080] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4814'. [ 928.251075][T22089] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 928.270301][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 928.284654][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 928.305769][ T24] usb 4-1: USB disconnect, device number 51 [ 928.644630][T22108] fuse: Unknown parameter 'group_i00000000000000000000' [ 928.684268][ T43] etas_es58x 6-1:0.2: could not retrieve the product info string [ 928.759208][ T43] usb 6-1: USB disconnect, device number 66 [ 928.808704][ T43] etas_es58x 6-1:0.2: Disconnecting syz syz [ 929.212277][ T5905] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 929.384183][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 929.408148][ T5905] usb 4-1: config 0 has no interfaces? [ 929.428542][ T5905] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 929.455384][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.499528][T22153] binder: 22151:22153 ioctl 80845663 2000000026c0 returned -22 [ 929.521399][ T5905] usb 4-1: config 0 descriptor?? [ 929.530031][T22153] binder: 22151:22153 ioctl c0306201 2000000003c0 returned -14 [ 929.732180][T22128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.741078][T22128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.768433][T22128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 929.778203][T22128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 929.792299][ T30] audit: type=1326 audit(1759381411.853:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22160 comm="syz.1.4827" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3ae798eec9 code=0x0 [ 929.844231][T22177] FAULT_INJECTION: forcing a failure. [ 929.844231][T22177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.870171][ T5905] usb 4-1: USB disconnect, device number 52 [ 929.873892][T22177] CPU: 0 UID: 0 PID: 22177 Comm: syz.4.4830 Not tainted syzkaller #0 PREEMPT(full) [ 929.873924][T22177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 929.873940][T22177] Call Trace: [ 929.873950][T22177] [ 929.873960][T22177] dump_stack_lvl+0x189/0x250 [ 929.874006][T22177] ? __pfx____ratelimit+0x10/0x10 [ 929.874034][T22177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 929.874073][T22177] ? __pfx__printk+0x10/0x10 [ 929.874107][T22177] ? __might_fault+0xb0/0x130 [ 929.874159][T22177] should_fail_ex+0x414/0x560 [ 929.874204][T22177] _copy_from_iter+0x1de/0x1790 [ 929.874242][T22177] ? rcu_is_watching+0x15/0xb0 [ 929.874279][T22177] ? kmalloc_reserve+0xbd/0x290 [ 929.874307][T22177] ? __pfx__copy_from_iter+0x10/0x10 [ 929.874338][T22177] ? __build_skb_around+0x262/0x3f0 [ 929.874371][T22177] ? netlink_sendmsg+0x642/0xb30 [ 929.874398][T22177] ? skb_put+0x11b/0x210 [ 929.874430][T22177] netlink_sendmsg+0x6b2/0xb30 [ 929.874469][T22177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 929.874503][T22177] ? aa_sock_msg_perm+0xf1/0x1d0 [ 929.874539][T22177] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 929.874566][T22177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 929.874598][T22177] __sock_sendmsg+0x21c/0x270 [ 929.874640][T22177] ____sys_sendmsg+0x505/0x830 [ 929.874687][T22177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 929.874730][T22177] ? import_iovec+0x74/0xa0 [ 929.874768][T22177] ___sys_sendmsg+0x21f/0x2a0 [ 929.874803][T22177] ? __pfx____sys_sendmsg+0x10/0x10 [ 929.874877][T22177] ? __fget_files+0x2a/0x420 [ 929.874905][T22177] ? __fget_files+0x3a0/0x420 [ 929.874949][T22177] __x64_sys_sendmsg+0x19b/0x260 [ 929.874982][T22177] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 929.875026][T22177] ? __pfx_ksys_write+0x10/0x10 [ 929.875058][T22177] ? do_syscall_64+0xbe/0xfa0 [ 929.875092][T22177] do_syscall_64+0xfa/0xfa0 [ 929.875119][T22177] ? lockdep_hardirqs_on+0x9c/0x150 [ 929.875150][T22177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.875176][T22177] ? clear_bhb_loop+0x60/0xb0 [ 929.875206][T22177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.875248][T22177] RIP: 0033:0x7fea7a58eec9 [ 929.875269][T22177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 929.875290][T22177] RSP: 002b:00007fea7b4f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 929.875317][T22177] RAX: ffffffffffffffda RBX: 00007fea7a7e5fa0 RCX: 00007fea7a58eec9 [ 929.875338][T22177] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 929.875353][T22177] RBP: 00007fea7b4f4090 R08: 0000000000000000 R09: 0000000000000000 [ 929.875369][T22177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 929.875384][T22177] R13: 00007fea7a7e6038 R14: 00007fea7a7e5fa0 R15: 00007ffea0263df8 [ 929.875422][T22177] [ 930.557133][T22199] fuse: Unknown parameter 'group_i00000000000000000000' [ 930.779932][T22206] FAULT_INJECTION: forcing a failure. [ 930.779932][T22206] name failslab, interval 1, probability 0, space 0, times 0 [ 930.829598][T22206] CPU: 1 UID: 0 PID: 22206 Comm: syz.3.4834 Not tainted syzkaller #0 PREEMPT(full) [ 930.829634][T22206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 930.829648][T22206] Call Trace: [ 930.829657][T22206] [ 930.829668][T22206] dump_stack_lvl+0x189/0x250 [ 930.829708][T22206] ? __pfx____ratelimit+0x10/0x10 [ 930.829735][T22206] ? __pfx_dump_stack_lvl+0x10/0x10 [ 930.829769][T22206] ? __pfx__printk+0x10/0x10 [ 930.829803][T22206] ? __pfx___might_resched+0x10/0x10 [ 930.829831][T22206] ? fs_reclaim_acquire+0x7d/0x100 [ 930.829860][T22206] should_fail_ex+0x414/0x560 [ 930.829901][T22206] should_failslab+0xa8/0x100 [ 930.829928][T22206] __kmalloc_cache_noprof+0x6f/0x6f0 [ 930.829962][T22206] ? trace_contention_end+0x39/0x120 [ 930.829992][T22206] ? vhost_task_create+0xf8/0x320 [ 930.830033][T22206] vhost_task_create+0xf8/0x320 [ 930.830065][T22206] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 930.830100][T22206] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 930.830133][T22206] ? __pfx_vhost_task_create+0x10/0x10 [ 930.830175][T22206] ? __pfx_vhost_task_fn+0x10/0x10 [ 930.830229][T22206] kvm_mmu_post_init_vm+0x14c/0x300 [ 930.830316][T22206] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 930.830346][T22206] ? __mutex_trylock_common+0x153/0x260 [ 930.830380][T22206] ? __pfx___mutex_trylock_common+0x10/0x10 [ 930.830412][T22206] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 930.830438][T22206] ? rcu_is_watching+0x15/0xb0 [ 930.830467][T22206] ? trace_contention_end+0x39/0x120 [ 930.830497][T22206] ? look_up_lock_class+0x74/0x170 [ 930.830525][T22206] ? register_lock_class+0x51/0x320 [ 930.830556][T22206] ? __lock_acquire+0xab9/0xd20 [ 930.830612][T22206] kvm_vcpu_ioctl+0x95c/0xe90 [ 930.830641][T22206] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 930.830687][T22206] ? __fget_files+0x2a/0x420 [ 930.830719][T22206] ? __fget_files+0x3a0/0x420 [ 930.830744][T22206] ? __fget_files+0x2a/0x420 [ 930.830774][T22206] ? bpf_lsm_file_ioctl+0x9/0x20 [ 930.830802][T22206] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 930.830823][T22206] __se_sys_ioctl+0xfc/0x170 [ 930.830860][T22206] do_syscall_64+0xfa/0xfa0 [ 930.830885][T22206] ? lockdep_hardirqs_on+0x9c/0x150 [ 930.830911][T22206] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.830933][T22206] ? clear_bhb_loop+0x60/0xb0 [ 930.830959][T22206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 930.830981][T22206] RIP: 0033:0x7f302458eec9 [ 930.831002][T22206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 930.831022][T22206] RSP: 002b:00007f3025438038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 930.831045][T22206] RAX: ffffffffffffffda RBX: 00007f30247e6090 RCX: 00007f302458eec9 [ 930.831062][T22206] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 930.831075][T22206] RBP: 00007f3025438090 R08: 0000000000000000 R09: 0000000000000000 [ 930.831090][T22206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 930.831103][T22206] R13: 00007f30247e6128 R14: 00007f30247e6090 R15: 00007ffd5efbd2c8 [ 930.831140][T22206] [ 931.135577][ C1] vkms_vblank_simulate: vblank timer overrun [ 931.694242][T22223] FAULT_INJECTION: forcing a failure. [ 931.694242][T22223] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 931.722443][T22223] CPU: 1 UID: 0 PID: 22223 Comm: syz.3.4838 Not tainted syzkaller #0 PREEMPT(full) [ 931.722482][T22223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 931.722497][T22223] Call Trace: [ 931.722506][T22223] [ 931.722516][T22223] dump_stack_lvl+0x189/0x250 [ 931.722556][T22223] ? __pfx____ratelimit+0x10/0x10 [ 931.722582][T22223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 931.722615][T22223] ? __pfx__printk+0x10/0x10 [ 931.722646][T22223] ? fs_reclaim_acquire+0x7d/0x100 [ 931.722676][T22223] should_fail_ex+0x414/0x560 [ 931.722715][T22223] prepare_alloc_pages+0x213/0x610 [ 931.722747][T22223] __alloc_frozen_pages_noprof+0x123/0x370 [ 931.722776][T22223] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 931.722821][T22223] alloc_pages_bulk_noprof+0x560/0x710 [ 931.722853][T22223] ? alloc_pages_noprof+0xbe/0x190 [ 931.722881][T22223] kasan_populate_vmalloc+0xd1/0x270 [ 931.722914][T22223] ? do_raw_spin_unlock+0x122/0x240 [ 931.722953][T22223] alloc_vmap_area+0xd7a/0x14c0 [ 931.722998][T22223] ? __pfx_alloc_vmap_area+0x10/0x10 [ 931.723025][T22223] ? __kasan_kmalloc+0x93/0xb0 [ 931.723047][T22223] ? __get_vm_area_node+0x13f/0x300 [ 931.723078][T22223] ? copy_process+0x54b/0x3c00 [ 931.723108][T22223] __get_vm_area_node+0x1f8/0x300 [ 931.723146][T22223] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 931.723179][T22223] ? copy_process+0x54b/0x3c00 [ 931.723214][T22223] ? percpu_ref_get_many+0x19/0x140 [ 931.723249][T22223] ? __memcg_slab_post_alloc_hook+0x517/0x7d0 [ 931.723291][T22223] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 931.723330][T22223] ? memcpy_and_pad+0x48/0x80 [ 931.723357][T22223] __vmalloc_node_noprof+0xc2/0x110 [ 931.723392][T22223] ? copy_process+0x54b/0x3c00 [ 931.723419][T22223] ? copy_process+0x54b/0x3c00 [ 931.723460][T22223] dup_task_struct+0x3d4/0x830 [ 931.723489][T22223] ? lockdep_hardirqs_on+0x9c/0x150 [ 931.723521][T22223] copy_process+0x54b/0x3c00 [ 931.723583][T22223] ? __pfx_copy_process+0x10/0x10 [ 931.723628][T22223] vhost_task_create+0x1ce/0x320 [ 931.723663][T22223] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 931.723698][T22223] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 931.723734][T22223] ? __pfx_vhost_task_create+0x10/0x10 [ 931.723777][T22223] ? __pfx_vhost_task_fn+0x10/0x10 [ 931.723833][T22223] kvm_mmu_post_init_vm+0x14c/0x300 [ 931.723861][T22223] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 931.723892][T22223] ? __mutex_trylock_common+0x153/0x260 [ 931.723928][T22223] ? __pfx___mutex_trylock_common+0x10/0x10 [ 931.723961][T22223] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 931.723988][T22223] ? rcu_is_watching+0x15/0xb0 [ 931.724019][T22223] ? trace_contention_end+0x39/0x120 [ 931.724050][T22223] ? look_up_lock_class+0x74/0x170 [ 931.724080][T22223] ? register_lock_class+0x51/0x320 [ 931.724113][T22223] ? __lock_acquire+0xab9/0xd20 [ 931.724173][T22223] kvm_vcpu_ioctl+0x95c/0xe90 [ 931.724202][T22223] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 931.724250][T22223] ? __fget_files+0x2a/0x420 [ 931.724283][T22223] ? __fget_files+0x3a0/0x420 [ 931.724309][T22223] ? __fget_files+0x2a/0x420 [ 931.724341][T22223] ? bpf_lsm_file_ioctl+0x9/0x20 [ 931.724369][T22223] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 931.724391][T22223] __se_sys_ioctl+0xfc/0x170 [ 931.724429][T22223] do_syscall_64+0xfa/0xfa0 [ 931.724461][T22223] ? lockdep_hardirqs_on+0x9c/0x150 [ 931.724488][T22223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.724511][T22223] ? clear_bhb_loop+0x60/0xb0 [ 931.724539][T22223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.724561][T22223] RIP: 0033:0x7f302458eec9 [ 931.724582][T22223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 931.724600][T22223] RSP: 002b:00007f3025438038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 931.724622][T22223] RAX: ffffffffffffffda RBX: 00007f30247e6090 RCX: 00007f302458eec9 [ 931.724637][T22223] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 931.724650][T22223] RBP: 00007f3025438090 R08: 0000000000000000 R09: 0000000000000000 [ 931.724663][T22223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.724676][T22223] R13: 00007f30247e6128 R14: 00007f30247e6090 R15: 00007ffd5efbd2c8 [ 931.724710][T22223] [ 931.724791][T22223] warn_alloc: 1 callbacks suppressed [ 931.724805][T22223] syz.3.4838: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 932.204000][T22223] CPU: 1 UID: 0 PID: 22223 Comm: syz.3.4838 Not tainted syzkaller #0 PREEMPT(full) [ 932.204030][T22223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 932.204044][T22223] Call Trace: [ 932.204053][T22223] [ 932.204063][T22223] dump_stack_lvl+0x189/0x250 [ 932.204107][T22223] ? __pfx_dump_stack_lvl+0x10/0x10 [ 932.204140][T22223] ? __pfx__printk+0x10/0x10 [ 932.204167][T22223] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 932.204198][T22223] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 932.204235][T22223] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 932.204271][T22223] warn_alloc+0x214/0x310 [ 932.204293][T22223] ? lockdep_hardirqs_on+0x9c/0x150 [ 932.204325][T22223] ? __pfx_warn_alloc+0x10/0x10 [ 932.204354][T22223] ? copy_process+0x54b/0x3c00 [ 932.204393][T22223] ? __get_vm_area_node+0x211/0x300 [ 932.204433][T22223] __vmalloc_node_range_noprof+0x331/0x12d0 [ 932.204479][T22223] ? percpu_ref_get_many+0x19/0x140 [ 932.204513][T22223] ? __memcg_slab_post_alloc_hook+0x517/0x7d0 [ 932.204553][T22223] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 932.204591][T22223] ? memcpy_and_pad+0x48/0x80 [ 932.204616][T22223] __vmalloc_node_noprof+0xc2/0x110 [ 932.204650][T22223] ? copy_process+0x54b/0x3c00 [ 932.204676][T22223] ? copy_process+0x54b/0x3c00 [ 932.204706][T22223] dup_task_struct+0x3d4/0x830 [ 932.204735][T22223] ? lockdep_hardirqs_on+0x9c/0x150 [ 932.204765][T22223] copy_process+0x54b/0x3c00 [ 932.204826][T22223] ? __pfx_copy_process+0x10/0x10 [ 932.204871][T22223] vhost_task_create+0x1ce/0x320 [ 932.204904][T22223] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 932.204940][T22223] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 932.204975][T22223] ? __pfx_vhost_task_create+0x10/0x10 [ 932.205017][T22223] ? __pfx_vhost_task_fn+0x10/0x10 [ 932.205072][T22223] kvm_mmu_post_init_vm+0x14c/0x300 [ 932.205099][T22223] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 932.205129][T22223] ? __mutex_trylock_common+0x153/0x260 [ 932.205165][T22223] ? __pfx___mutex_trylock_common+0x10/0x10 [ 932.205197][T22223] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 932.205224][T22223] ? rcu_is_watching+0x15/0xb0 [ 932.205254][T22223] ? trace_contention_end+0x39/0x120 [ 932.205285][T22223] ? look_up_lock_class+0x74/0x170 [ 932.205314][T22223] ? register_lock_class+0x51/0x320 [ 932.205346][T22223] ? __lock_acquire+0xab9/0xd20 [ 932.205411][T22223] kvm_vcpu_ioctl+0x95c/0xe90 [ 932.205440][T22223] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 932.205484][T22223] ? __fget_files+0x2a/0x420 [ 932.205517][T22223] ? __fget_files+0x3a0/0x420 [ 932.205542][T22223] ? __fget_files+0x2a/0x420 [ 932.205573][T22223] ? bpf_lsm_file_ioctl+0x9/0x20 [ 932.205600][T22223] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 932.205622][T22223] __se_sys_ioctl+0xfc/0x170 [ 932.205660][T22223] do_syscall_64+0xfa/0xfa0 [ 932.205685][T22223] ? lockdep_hardirqs_on+0x9c/0x150 [ 932.205712][T22223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.205734][T22223] ? clear_bhb_loop+0x60/0xb0 [ 932.205762][T22223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 932.205783][T22223] RIP: 0033:0x7f302458eec9 [ 932.205804][T22223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 932.205825][T22223] RSP: 002b:00007f3025438038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 932.205849][T22223] RAX: ffffffffffffffda RBX: 00007f30247e6090 RCX: 00007f302458eec9 [ 932.205866][T22223] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000009 [ 932.205880][T22223] RBP: 00007f3025438090 R08: 0000000000000000 R09: 0000000000000000 [ 932.205895][T22223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 932.205909][T22223] R13: 00007f30247e6128 R14: 00007f30247e6090 R15: 00007ffd5efbd2c8 [ 932.205947][T22223] [ 932.205963][T22223] Mem-Info: [ 932.536042][ C1] vkms_vblank_simulate: vblank timer overrun [ 932.641117][T22223] active_anon:61255 inactive_anon:0 isolated_anon:0 [ 932.641117][T22223] active_file:19678 inactive_file:4613 isolated_file:0 [ 932.641117][T22223] unevictable:768 dirty:92 writeback:0 [ 932.641117][T22223] slab_reclaimable:10558 slab_unreclaimable:102010 [ 932.641117][T22223] mapped:35657 shmem:55328 pagetables:1646 [ 932.641117][T22223] sec_pagetables:0 bounce:0 [ 932.641117][T22223] kernel_misc_reclaimable:0 [ 932.641117][T22223] free:1283708 free_pcp:15404 free_cma:0 [ 932.686609][ C1] vkms_vblank_simulate: vblank timer overrun [ 932.802401][T22223] Node 0 active_anon:241520kB inactive_anon:0kB active_file:78712kB inactive_file:18312kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:142628kB dirty:368kB writeback:0kB shmem:216176kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:12752kB pagetables:6532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 932.835146][ C1] vkms_vblank_simulate: vblank timer overrun [ 932.922262][T22223] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 932.952222][ C1] vkms_vblank_simulate: vblank timer overrun [ 933.013342][T22223] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 933.043427][ C1] vkms_vblank_simulate: vblank timer overrun [ 933.152174][T22223] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 933.158043][T22223] Node 0 DMA32 free:1205932kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB free_highatomic:0KB active_anon:235172kB inactive_anon:0kB active_file:78712kB inactive_file:18312kB unevictable:1536kB writepending:368kB zspages:0kB present:3129332kB managed:2549276kB mlocked:0kB bounce:0kB free_pcp:48580kB local_pcp:15408kB free_cma:0kB [ 933.191674][ C1] vkms_vblank_simulate: vblank timer overrun [ 933.270805][T22223] lowmem_reserve[]: 0 0 0 0 0 [ 933.281975][T22223] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 933.311629][ C1] vkms_vblank_simulate: vblank timer overrun [ 933.367321][T22223] lowmem_reserve[]: 0 0 0 0 0 [ 933.382203][T22223] Node 1 Normal free:3885932kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:29888kB local_pcp:12960kB free_cma:0kB [ 933.414679][ C1] vkms_vblank_simulate: vblank timer overrun [ 933.490398][T22223] lowmem_reserve[]: 0 0 0 0 0 [ 933.492243][ T5184] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 933.506730][ T5184] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 933.516322][ T5184] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 933.531444][ T5184] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 933.539757][ T5184] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 933.615038][T22244] lo speed is unknown, defaulting to 1000 [ 933.744555][T22223] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 933.783568][T22223] Node 0 DMA32: 2*4kB (ME) 30*8kB (UME) 64*16kB (UE) 27*32kB (UE) 15*64kB (UE) 6*128kB (E) 2*256kB (UE) 0*512kB 3*1024kB (UME) 3*2048kB (UME) 285*4096kB (M) = 1180952kB [ 933.871208][T22223] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 933.931324][T22223] Node 1 Normal: 237*4kB (UME) 63*8kB (UME) 48*16kB (UME) 126*32kB (UME) 36*64kB (UME) 10*128kB (UME) 5*256kB (UM) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3885932kB [ 933.985276][T22223] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 934.005235][T22223] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 934.035707][T22223] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 934.063216][T22223] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 934.084127][T22223] 78888 total pagecache pages [ 934.089842][T22223] 0 pages in swap cache [ 934.098610][T22223] Free swap = 124996kB [ 934.105826][T22223] Total swap = 124996kB [ 934.110277][T22223] 2097051 pages RAM [ 934.120804][T22223] 0 pages HighMem/MovableOnly [ 934.130492][T22223] 428026 pages reserved [ 934.136859][T22223] 0 pages cma reserved [ 934.145082][T22244] wg0 speed is unknown, defaulting to 1000 [ 934.335936][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805b937000: rx timeout, send abort [ 934.348822][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805b937000: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 934.593617][T22286] input: syz1 as /devices/virtual/input/input92 [ 935.563115][ T5184] Bluetooth: hci2: command tx timeout [ 935.779729][T22244] chnl_net:caif_netlink_parms(): no params data found [ 935.996458][T22379] overlayfs: failed to clone upperpath [ 936.819686][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 936.851569][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 936.922134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 937.024504][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 937.112898][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.121202][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.644438][T14291] Bluetooth: hci2: command tx timeout [ 937.966473][T22414] vxcan1: entered allmulticast mode [ 938.013162][T22244] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.047123][T22244] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.107904][T22244] bridge_slave_0: entered allmulticast mode [ 938.146239][T22244] bridge_slave_0: entered promiscuous mode [ 938.161095][T22244] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.170735][T22244] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.186042][T22244] bridge_slave_1: entered allmulticast mode [ 938.195949][T22244] bridge_slave_1: entered promiscuous mode [ 938.368745][T22244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 938.419217][T22244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 938.507238][T22244] team0: Port device team_slave_0 added [ 938.530388][T22244] team0: Port device team_slave_1 added [ 938.644026][T22244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 938.655883][T22244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.682256][T19922] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 938.697508][T22244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 938.718657][T22244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 938.727096][T22244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 938.754004][T22244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 938.832289][T19922] usb 4-1: Using ep0 maxpacket: 32 [ 938.840609][T19922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.856910][T19922] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 939.052550][T19922] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 939.062326][T19922] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.329972][T19922] usb 4-1: config 0 descriptor?? [ 939.353744][T19922] hub 4-1:0.0: USB hub found [ 939.425349][T22244] hsr_slave_0: entered promiscuous mode [ 939.442792][T22244] hsr_slave_1: entered promiscuous mode [ 939.459875][T22244] debugfs: 'hsr0' already exists in 'hsr' [ 939.472679][T22244] Cannot create hsr debugfs directory [ 939.553517][T19922] hub 4-1:0.0: 1 port detected [ 939.722499][T14291] Bluetooth: hci2: command tx timeout [ 939.758028][T19922] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 939.793121][T19922] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 939.855009][T19922] usbhid 4-1:0.0: can't add hid device: -71 [ 939.872621][T19922] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 939.952834][T19922] usb 4-1: USB disconnect, device number 53 [ 940.024016][T22244] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.133565][T22244] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 940.257033][T22244] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 941.827331][T14291] Bluetooth: hci2: command tx timeout [ 941.839514][T22244] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 941.894206][T22244] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 941.927995][T22244] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 942.073721][T22244] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 942.498266][T22244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.551668][T22244] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.581825][T22432] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.589035][T22432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.709003][T22438] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.716241][T22438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.601005][T22244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 944.581014][T22244] veth0_vlan: entered promiscuous mode [ 944.594394][T22244] veth1_vlan: entered promiscuous mode [ 944.754339][T22710] overlayfs: failed to clone upperpath [ 944.836931][T22244] veth0_macvtap: entered promiscuous mode [ 944.897623][T22244] veth1_macvtap: entered promiscuous mode [ 944.951414][T22713] tipc: Started in network mode [ 944.975041][T22713] tipc: Node identity 7f000001, cluster identity 4711 [ 944.986105][T22717] atomic_op ffff88802819b198 conn xmit_atomic 0000000000000000 [ 944.997990][T22713] tipc: Enabled bearer , priority 10 [ 945.056639][T22244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.073430][T22713] tipc: Enabled bearer , priority 0 [ 945.095034][T22244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.118989][T13341] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.148740][T13341] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.159108][T13341] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.169712][T13341] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.250358][T13341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.280035][T13341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.328243][T13341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 945.336654][T13341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 945.342988][ T5905] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 945.560200][ T5905] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 945.577287][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.600126][ T5905] usb 4-1: Product: syz [ 945.619655][ T5905] usb 4-1: Manufacturer: syz [ 945.627681][ T5905] usb 4-1: SerialNumber: syz [ 945.655643][ T5905] usb 4-1: config 0 descriptor?? [ 946.232197][ T1547] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 946.348338][ T5905] usb 4-1: Firmware: major: 130, minor: 102, hardware type: HULUSB (4) [ 946.363664][T22729] tipc: Node number set to 2130706433 [ 946.522487][ T1547] usb 2-1: Using ep0 maxpacket: 32 [ 946.531094][ T1547] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.545282][ T1547] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.579204][ T1547] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 946.598193][ T1547] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.604522][ T5905] usb 4-1: failed to fetch extended address, random address set [ 946.643698][ T1547] usb 2-1: config 0 descriptor?? [ 946.798058][ T1547] hub 2-1:0.0: USB hub found [ 947.669794][ T5905] usb 4-1: USB disconnect, device number 54 [ 947.682360][ T1547] hub 2-1:0.0: 1 port detected [ 947.880831][ T1547] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 947.897000][ T1547] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 947.911108][ T1547] usbhid 2-1:0.0: can't add hid device: -71 [ 947.918350][ T1547] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 948.103395][ T1547] usb 2-1: USB disconnect, device number 61 [ 952.564906][ T30] audit: type=1800 audit(1759381434.643:561): pid=22846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4897" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 952.678182][T22848] tipc: Enabling of bearer rejected, already enabled [ 952.687989][T22848] tipc: Enabling of bearer rejected, already enabled [ 952.951170][ T43] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 953.144522][ T43] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 953.195634][ T43] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 953.254206][ T43] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 953.329302][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.672572][ T43] usb 2-1: GET_CAPABILITIES returned 0 [ 953.688422][ T43] usbtmc 2-1:16.0: can't read capabilities [ 953.871321][T22852] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90 [ 953.881600][ T5933] usb 2-1: USB disconnect, device number 62 [ 954.044227][ T5880] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 954.148354][T22904] tipc: Started in network mode [ 954.153489][T22904] tipc: Node identity 7f000001, cluster identity 4711 [ 954.160996][T22904] tipc: Enabled bearer , priority 10 [ 954.170654][T22904] tipc: Enabled bearer , priority 0 [ 954.215475][ T5880] usb 4-1: config 0 has no interfaces? [ 954.226068][ T5880] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 954.238668][ T5880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.247234][ T5880] usb 4-1: Product: syz [ 954.251584][ T5880] usb 4-1: Manufacturer: syz [ 954.257417][ T5880] usb 4-1: SerialNumber: syz [ 954.266626][ T5880] usb 4-1: config 0 descriptor?? [ 954.662524][ T5880] usb 4-1: USB disconnect, device number 55 [ 955.162628][ T5880] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 955.164818][ T43] tipc: Node number set to 2130706433 [ 955.322396][ T5880] usb 2-1: Using ep0 maxpacket: 16 [ 955.329077][ T5880] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 955.339335][ T5880] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 955.350464][ T5880] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 955.361501][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.369687][ T5880] usb 2-1: Product: syz [ 955.373983][ T5880] usb 2-1: Manufacturer: syz [ 955.378637][ T5880] usb 2-1: SerialNumber: syz [ 955.522234][ T43] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 955.597457][ T5880] usb 2-1: 0:2 : does not exist [ 955.611877][ T5880] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 955.637534][ T5880] usb 2-1: USB disconnect, device number 63 [ 955.672928][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 955.678932][T22859] udevd[22859]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 955.697461][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 955.710166][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 955.727265][ T43] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 955.750740][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 955.765494][ T43] usb 4-1: config 0 descriptor?? [ 956.202911][ T43] playstation 0003:054C:0DF2.0031: hidraw0: USB HID v0.09 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 956.381975][ T43] playstation 0003:054C:0DF2.0031: Invalid byte count transferred, expected 20 got 0 [ 956.391665][ T43] playstation 0003:054C:0DF2.0031: Failed to retrieve DualSense pairing info: -22 [ 956.401225][ T43] playstation 0003:054C:0DF2.0031: Failed to get MAC address from DualSense [ 956.410029][ T43] playstation 0003:054C:0DF2.0031: Failed to create dualsense. [ 956.422217][ T43] playstation 0003:054C:0DF2.0031: probe with driver playstation failed with error -22 [ 956.586721][T22962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.596875][T22962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.716231][ T5933] usb 4-1: USB disconnect, device number 56 [ 957.202340][ T24] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 957.354753][ T24] usb 4-1: config 0 has no interfaces? [ 957.363174][ T24] usb 4-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 957.372564][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.380587][ T24] usb 4-1: Product: syz [ 957.384879][ T24] usb 4-1: Manufacturer: syz [ 957.389522][ T24] usb 4-1: SerialNumber: syz [ 957.396737][ T24] usb 4-1: config 0 descriptor?? [ 957.755316][ T24] usb 4-1: USB disconnect, device number 57 [ 958.053133][ T43] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 958.225664][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 958.234864][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 958.243015][ T43] usb 2-1: SerialNumber: syz [ 958.250101][ T43] usb 2-1: config 0 descriptor?? [ 958.259139][ T43] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 958.267076][ T43] dvb-usb: bulk message failed: -22 (3/0) [ 958.275594][ T43] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 958.284895][ T43] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 958.294310][ T43] usb 2-1: media controller created [ 958.299755][ T43] dvb-usb: bulk message failed: -22 (5/0) [ 958.305700][ T43] dvb-usb: MAC address reading failed. [ 958.314394][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 958.330523][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 958.336743][ T43] dvb-usb: bulk message failed: -22 (6/0) [ 958.342854][ T43] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 958.354366][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input93 [ 958.368160][ T43] dvb-usb: schedule remote query interval to 100 msecs. [ 958.375716][ T43] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 958.440844][T23092] tipc: Enabling of bearer rejected, already enabled [ 958.450366][T23092] tipc: Enabling of bearer rejected, already enabled [ 958.466293][ T43] usb 2-1: USB disconnect, device number 64 [ 958.486805][T19922] dvb-usb: bulk message failed: -22 (2/0) [ 958.494638][T19922] dvb-usb: error while querying for an remote control event. [ 958.520187][ T43] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 959.231324][T23135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4952'. [ 959.328649][T23145] overlayfs: missing 'lowerdir' [ 959.335529][T23145] overlayfs: missing 'lowerdir' [ 960.003884][T23157] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 960.010476][T23157] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 960.114467][T23161] tipc: Enabling of bearer rejected, already enabled [ 960.126281][T23161] tipc: Enabling of bearer rejected, already enabled [ 961.210238][T23203] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 961.216789][T23203] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 961.962224][ T24] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 962.038672][T23232] fuse: Bad value for 'fd' [ 962.092217][ T24] usb 2-1: device descriptor read/64, error -71 [ 962.334214][ T24] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 962.384646][T23237] tipc: Enabling of bearer rejected, already enabled [ 962.472253][ T24] usb 2-1: device descriptor read/64, error -71 [ 962.582472][ T24] usb usb2-port1: attempt power cycle [ 962.698664][T23247] netlink: 624 bytes leftover after parsing attributes in process `syz.5.4986'. [ 962.962275][ T24] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 962.982942][ T24] usb 2-1: device descriptor read/8, error -71 [ 963.002382][ T5184] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 963.009478][ T5184] Bluetooth: hci0: command 0x206a tx timeout [ 963.222289][ T24] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 963.263011][ T24] usb 2-1: device descriptor read/8, error -71 [ 963.382692][ T24] usb usb2-port1: unable to enumerate USB device [ 964.729948][T23292] tipc: Enabling of bearer rejected, already enabled [ 964.740043][T23292] tipc: Enabling of bearer rejected, already enabled [ 964.763713][T23222] [U] ^C [ 965.132725][T23313] tmpfs: Bad value for 'gid' [ 965.137430][T23313] tmpfs: Bad value for 'gid' [ 965.174013][ T24] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 965.337601][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 965.352266][T23324] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 965.358216][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 965.371615][T23324] tipc: Enabled bearer , priority 10 [ 965.379477][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.387023][T23324] tipc: Enabled bearer , priority 0 [ 965.413337][ T24] usb 2-1: config 0 descriptor?? [ 965.429814][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 965.482517][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 965.622363][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 965.762265][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 965.836255][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 965.844687][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 965.852586][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 965.869132][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 965.880103][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 965.887739][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 965.897301][ T24] pwc: recv_control_msg error -32 req 02 val 2000 [ 965.902575][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 965.906072][ T24] pwc: recv_control_msg error -32 req 02 val 2100 [ 965.921334][ T24] pwc: recv_control_msg error -32 req 04 val 1500 [ 965.929546][ T24] pwc: recv_control_msg error -32 req 02 val 2500 [ 966.042743][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 966.138112][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 966.147607][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 966.161080][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 966.168572][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 966.176075][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 966.182382][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 966.195599][ T24] pwc: Registered as video103. [ 966.211528][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input94 [ 966.252540][ T24] usb 2-1: USB disconnect, device number 69 [ 966.322340][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 966.462680][ T5933] tipc: Node number set to 110318768 [ 966.602341][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 966.736903][T23371] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 966.872385][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 966.877835][T23378] tipc: Started in network mode [ 966.892820][T23378] tipc: Node identity aaaaaaaaaa39, cluster identity 4711 [ 966.900460][T23378] tipc: Enabled bearer , priority 0 [ 967.492238][T19922] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 967.664045][T19922] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 967.674407][T19922] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 967.684571][T19922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.701354][T19922] usb 2-1: config 0 descriptor?? [ 967.715463][T19922] pwc: Askey VC010 type 2 USB webcam detected. [ 967.819994][T23406] tipc: Enabling of bearer rejected, already enabled [ 967.912261][ T43] tipc: Node number set to 9677482 [ 968.008794][T23414] 9pnet_fd: Insufficient options for proto=fd [ 968.131585][T19922] pwc: recv_control_msg error -32 req 02 val 2b00 [ 968.140085][T19922] pwc: recv_control_msg error -32 req 02 val 2700 [ 968.148161][T19922] pwc: recv_control_msg error -32 req 02 val 2c00 [ 968.158754][T19922] pwc: recv_control_msg error -32 req 04 val 1000 [ 968.178134][T19922] pwc: recv_control_msg error -32 req 04 val 1300 [ 968.185941][T19922] pwc: recv_control_msg error -32 req 04 val 1400 [ 968.193503][T19922] pwc: recv_control_msg error -32 req 02 val 2000 [ 968.201114][T19922] pwc: recv_control_msg error -32 req 02 val 2100 [ 968.210494][T19922] pwc: recv_control_msg error -32 req 04 val 1500 [ 968.219170][T19922] pwc: recv_control_msg error -32 req 02 val 2500 [ 968.431929][T19922] pwc: recv_control_msg error -71 req 02 val 2600 [ 968.439745][T19922] pwc: recv_control_msg error -71 req 02 val 2900 [ 968.447356][T19922] pwc: recv_control_msg error -71 req 02 val 2800 [ 968.462238][T19922] pwc: recv_control_msg error -71 req 04 val 1100 [ 968.472008][T19922] pwc: recv_control_msg error -71 req 04 val 1200 [ 968.485398][T19922] pwc: Registered as video103. [ 968.493877][T19922] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input95 [ 968.520297][T19922] usb 2-1: USB disconnect, device number 70 [ 969.031382][T23456] 9pnet_fd: Insufficient options for proto=fd [ 969.064622][T23458] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5048'. [ 969.755424][T23492] overlayfs: failed to resolve './file1': -2 [ 970.522343][ C0] net_ratelimit: 3 callbacks suppressed [ 970.522365][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 970.582263][T19922] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 970.737181][T19922] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 970.747647][T19922] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 970.759456][T19922] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 970.772798][T19922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.780931][T19922] usb 2-1: Product: syz [ 970.785563][T19922] usb 2-1: Manufacturer: syz [ 970.790201][T19922] usb 2-1: SerialNumber: syz [ 970.886222][T23526] overlayfs: failed to resolve './file1': -2 [ 971.070291][T23508] 9pnet_fd: Insufficient options for proto=fd [ 971.079182][T19922] usb 2-1: 0:2 : does not exist [ 971.105493][T19922] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 971.139503][T19922] usb 2-1: USB disconnect, device number 71 [ 971.185779][T23091] udevd[23091]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 971.368243][T23552] overlayfs: missing 'lowerdir' [ 971.420351][ T30] audit: type=1800 audit(1759381453.493:562): pid=23554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5073" name="bus" dev="tmpfs" ino=1108 res=0 errno=0 [ 971.562290][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 971.870234][T23575] overlayfs: missing 'lowerdir' [ 971.944713][ T30] audit: type=1800 audit(1759381454.023:563): pid=23580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5083" name="bus" dev="tmpfs" ino=1138 res=0 errno=0 [ 972.128362][T23589] 9pnet_fd: Insufficient options for proto=fd [ 972.212297][T19922] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 972.365494][T19922] usb 2-1: Using ep0 maxpacket: 32 [ 972.373179][T19922] usb 2-1: config 0 has an invalid interface number: 172 but max is 0 [ 972.381783][T19922] usb 2-1: config 0 has no interface number 0 [ 972.388377][T19922] usb 2-1: config 0 interface 172 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 972.405442][T19922] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 972.417120][T19922] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 972.425630][T19922] usb 2-1: Product: syz [ 972.429909][T19922] usb 2-1: Manufacturer: syz [ 972.439017][T19922] usb 2-1: SerialNumber: syz [ 972.453344][T19922] usb 2-1: config 0 descriptor?? [ 972.465328][T19922] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 972.602278][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 972.983290][T23605] overlayfs: missing 'lowerdir' [ 973.372901][T19922] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 973.383369][T19922] gspca_pac7302 2-1:0.172: probe with driver gspca_pac7302 failed with error -71 [ 973.408797][T19922] usb 2-1: USB disconnect, device number 72 [ 973.642318][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 974.113048][T23649] overlayfs: missing 'lowerdir' [ 974.309197][T23665] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 974.315777][T23665] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 974.522353][T19922] usb 2-1: new full-speed USB device number 73 using dummy_hcd [ 974.674803][T19922] usb 2-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=5b.81 [ 974.682558][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 974.684280][T19922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 974.699166][T19922] usb 2-1: SerialNumber: syz [ 974.707097][T19922] usb 2-1: config 0 descriptor?? [ 974.717398][T19922] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 974.725423][T19922] dvb-usb: bulk message failed: -22 (3/0) [ 974.733919][T19922] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 974.743357][T19922] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 974.751549][T19922] usb 2-1: media controller created [ 974.757275][T19922] dvb-usb: bulk message failed: -22 (5/0) [ 974.763885][T19922] dvb-usb: MAC address reading failed. [ 974.771960][T19922] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 974.785110][T19922] dvb-usb: bulk message failed: -22 (6/0) [ 974.791139][T19922] dvb-usb: bulk message failed: -22 (6/0) [ 974.797132][T19922] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 974.807662][T19922] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input96 [ 974.821314][T19922] dvb-usb: schedule remote query interval to 100 msecs. [ 974.828374][T19922] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 974.924295][T19922] usb 2-1: USB disconnect, device number 73 [ 974.973272][T19922] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 975.471792][T23700] overlayfs: missing 'lowerdir' [ 975.722242][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 976.762254][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 977.291217][T23767] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.300090][T23767] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.326024][T23767] bridge0: entered promiscuous mode [ 977.340657][T23767] bridge0: entered allmulticast mode [ 977.537173][T23783] fuse: Unknown parameter 'user_id00000000000000000000' [ 977.699615][T23787] tipc: Enabling of bearer rejected, already enabled [ 977.807933][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 978.292743][T22729] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 978.308808][T23813] fuse: Bad value for 'fd' [ 978.474356][T22729] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 978.484899][T22729] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 978.499780][T22729] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 978.509756][T22729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.518275][T22729] usb 2-1: Product: syz [ 978.533977][T22729] usb 2-1: Manufacturer: syz [ 978.539127][T22729] usb 2-1: SerialNumber: syz [ 978.585491][T23822] tipc: Enabling of bearer rejected, already enabled [ 978.786642][T23803] 9pnet_fd: Insufficient options for proto=fd [ 978.806203][T22729] usb 2-1: 0:2 : does not exist [ 978.816069][T22729] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 978.842253][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 978.851187][T22729] usb 2-1: USB disconnect, device number 74 [ 978.871461][T23091] udevd[23091]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 979.385706][T23849] IPVS: Error connecting to the multicast addr [ 979.540651][T23856] fuse: Bad value for 'fd' [ 979.606332][T23858] tmpfs: Unknown parameter 'ÿÿÿÿ' [ 979.797124][T23865] tipc: Enabling of bearer rejected, already enabled [ 979.882271][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 979.936174][T23871] 9pnet_fd: Insufficient options for proto=fd [ 980.083926][T23882] fuse: Bad value for 'fd' [ 980.508229][T23895] tipc: Enabling of bearer rejected, already enabled [ 980.774163][T23905] Invalid source name [ 980.932269][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 981.495425][T23916] fuse: Unknown parameter '0x0000000000000004' [ 981.962315][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 982.066117][T23922] tipc: Enabling of bearer rejected, already enabled [ 982.277940][T23935] overlayfs: failed to clone upperpath [ 982.888272][T23939] fuse: Unknown parameter '0x0000000000000004' [ 983.002597][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 983.017493][T23945] tipc: Enabling of bearer rejected, already enabled [ 983.641066][T23963] fuse: Unknown parameter '0x0000000000000004' [ 983.862265][T19922] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 984.025534][T19922] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 984.034925][T19922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.046697][T19922] usb 2-1: config 0 descriptor?? [ 984.052303][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 984.177753][T23971] tipc: Enabling of bearer rejected, already enabled [ 984.187594][T23971] tipc: Enabling of bearer rejected, already enabled [ 984.261064][T19922] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 984.467439][T19922] [drm:udl_init] *ERROR* Selecting channel failed [ 984.516714][T19922] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 984.525180][T19922] [drm] Initialized udl on minor 2 [ 984.536288][T19922] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 984.554785][T19922] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 984.568936][ T5905] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 984.586652][T19922] usb 2-1: USB disconnect, device number 75 [ 984.594295][ T5905] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 984.920630][T24007] fuse: Unknown parameter '0x0000000000000004' [ 985.059756][T24015] tipc: Enabled bearer , priority 10 [ 985.068963][T24015] tipc: Enabling of bearer rejected, already enabled [ 985.092249][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 985.428744][T24041] fuse: Unknown parameter '0x0000000000000004' [ 985.503625][ T43] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 985.662237][ T43] usb 2-1: Using ep0 maxpacket: 16 [ 985.676474][ T43] usb 2-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb [ 985.702206][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.710267][ T43] usb 2-1: Product: syz [ 985.715140][ T43] usb 2-1: Manufacturer: syz [ 985.719811][ T43] usb 2-1: SerialNumber: syz [ 985.854293][T24050] tipc: Enabling of bearer rejected, already enabled [ 985.865149][T24050] tipc: Enabling of bearer rejected, already enabled [ 985.977065][ T43] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 986.025999][ T43] snd-usb-audio 2-1:222.0: probe with driver snd-usb-audio failed with error -71 [ 986.045888][ T43] usb 2-1: USB disconnect, device number 76 [ 986.075850][T23091] udevd[23091]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 986.132321][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 986.253712][T24076] fuse: Unknown parameter '0x0000000000000004' [ 987.035409][T24105] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 987.041943][T24105] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 987.100175][T24107] fuse: Unknown parameter 'fd0x0000000000000004' [ 987.162248][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 987.252301][T22729] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 987.414164][T22729] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 987.424513][T22729] usb 2-1: config 2 interface 0 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 987.438144][T22729] usb 2-1: config 2 interface 0 has no altsetting 0 [ 987.447440][T22729] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=da.47 [ 987.457342][T22729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.470046][T22729] usb 2-1: Product: syz [ 987.475612][T22729] usb 2-1: Manufacturer: syz [ 987.480352][T22729] usb 2-1: SerialNumber: syz [ 987.622821][ T30] audit: type=1800 audit(1759381469.703:564): pid=24121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5238" name="bus" dev="tmpfs" ino=2095 res=0 errno=0 [ 987.723256][T22729] usb 2-1: USB disconnect, device number 77 [ 988.202297][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 988.444051][T24148] fuse: Unknown parameter 'fd0x0000000000000004' [ 988.538836][T24152] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 988.545777][T24152] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 988.661472][ T30] audit: type=1800 audit(1759381470.733:565): pid=24156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5248" name="bus" dev="tmpfs" ino=449 res=0 errno=0 [ 989.191818][T24172] 9pnet_fd: Insufficient options for proto=fd [ 989.242255][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 989.389436][ T30] audit: type=1800 audit(1759381471.463:566): pid=24181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5258" name="bus" dev="tmpfs" ino=471 res=0 errno=0 [ 989.780204][T24195] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 989.786772][T24195] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 989.796859][T24195] binder: 24194:24195 ioctl 4018620d 0 returned -22 [ 989.894559][T24203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5263'. [ 989.905906][T24203] No control pipe specified [ 990.042500][T14603] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 990.202590][T14603] usb 2-1: Using ep0 maxpacket: 8 [ 990.209735][T14603] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 990.218585][T14603] usb 2-1: config 179 has no interface number 0 [ 990.232424][T14603] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 990.254004][T14603] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 990.286095][T14603] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 990.299522][T14603] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 990.313583][T14603] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 990.334107][T14603] usb 2-1: config 179 interface 65 has no altsetting 0 [ 990.342002][T14603] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 990.383241][T14603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 990.400011][ T30] audit: type=1800 audit(1759381472.473:567): pid=24217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5267" name="bus" dev="tmpfs" ino=2147 res=0 errno=0 [ 990.461198][T14603] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input97 [ 990.534251][ T5219] input input97: unable to receive magic message: -110 [ 990.566092][ T5219] input input97: unable to receive magic message: -32 [ 990.636227][ T5219] input input97: unable to receive magic message: -32 [ 990.671230][ T43] usb 2-1: USB disconnect, device number 78 [ 990.671278][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 990.685754][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 990.883455][T24252] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5272'. [ 990.897361][T24254] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5272'. [ 991.322259][ C0] net_ratelimit: 1 callbacks suppressed [ 991.322281][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 991.380098][T24270] tipc: Enabling of bearer rejected, already enabled [ 991.389240][T24270] tipc: Enabling of bearer rejected, already enabled [ 991.660436][T24284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5279'. [ 991.716136][T24289] overlayfs: missing 'lowerdir' [ 991.842251][ T30] audit: type=1800 audit(1759381473.918:568): pid=24291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5281" name="bus" dev="tmpfs" ino=2160 res=0 errno=0 [ 991.862810][ C1] vkms_vblank_simulate: vblank timer overrun [ 992.140195][T24296] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 992.146731][T24296] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 992.238462][T24301] tipc: Enabling of bearer rejected, already enabled [ 992.251874][T24301] tipc: Enabling of bearer rejected, already enabled [ 992.362255][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 992.710537][T24318] overlayfs: missing 'lowerdir' [ 992.976788][ T30] audit: type=1800 audit(1759381475.058:569): pid=24320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5291" name="bus" dev="tmpfs" ino=2181 res=0 errno=0 [ 993.321333][T24332] tipc: Enabling of bearer rejected, already enabled [ 993.337973][T24332] tipc: Enabling of bearer rejected, already enabled [ 993.412277][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 993.506746][T24340] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 993.513359][T24340] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 993.558957][ T30] audit: type=1800 audit(1759381475.638:570): pid=24344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5300" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 994.014526][T24360] tipc: Enabling of bearer rejected, already enabled [ 994.025441][T24360] tipc: Enabling of bearer rejected, already enabled [ 994.034843][T24349] netlink: 92 bytes leftover after parsing attributes in process `syz.5.5302'. [ 994.452687][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 994.607885][T24373] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5307'. [ 994.711588][T24377] tmpfs: Unknown parameter './file0' [ 994.729123][ T30] audit: type=1800 audit(1759381476.808:571): pid=24377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5309" name="bus" dev="tmpfs" ino=2211 res=0 errno=0 [ 994.759834][ T30] audit: type=1326 audit(1759381476.828:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24378 comm="syz.3.5310" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f302458eec9 code=0x0 [ 994.980676][T24391] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 994.987224][T24391] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 995.089331][T14603] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 995.252227][T14603] usb 2-1: Using ep0 maxpacket: 32 [ 995.259315][T14603] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 995.269560][T14603] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 995.282670][T14603] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 995.293151][T14603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.307359][T14603] usb 2-1: config 0 descriptor?? [ 995.315961][T14603] hub 2-1:0.0: bad descriptor, ignoring hub [ 995.321959][T14603] hub 2-1:0.0: probe with driver hub failed with error -5 [ 995.331431][T14603] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 995.545027][T24397] tipc: Enabling of bearer rejected, already enabled [ 995.555215][T24397] tipc: Enabling of bearer rejected, already enabled [ 995.619995][T24400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5315'. [ 996.522278][ C0] net_ratelimit: 1 callbacks suppressed [ 996.522295][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 996.647751][T14291] Bluetooth: Wrong link type (-71) [ 996.694721][T24417] tmpfs: Unknown parameter './file0' [ 996.701992][ T30] audit: type=1800 audit(1759381478.778:573): pid=24417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5321" name="bus" dev="tmpfs" ino=2255 res=0 errno=0 [ 996.898877][T24420] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 996.905356][T24420] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 997.030188][T24424] tipc: Enabling of bearer rejected, already enabled [ 997.039608][T24424] tipc: Enabling of bearer rejected, already enabled [ 997.562282][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 997.698124][T24449] tmpfs: Unknown parameter './file0' [ 997.778651][ T30] audit: type=1800 audit(1759381479.788:574): pid=24449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5330" name="bus" dev="tmpfs" ino=2273 res=0 errno=0 [ 998.012524][ T5978] usb 2-1: USB disconnect, device number 79 [ 998.296208][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.302641][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.411660][T24467] FAULT_INJECTION: forcing a failure. [ 998.411660][T24467] name failslab, interval 1, probability 0, space 0, times 0 [ 998.460987][T24467] CPU: 0 UID: 0 PID: 24467 Comm: syz.4.5334 Not tainted syzkaller #0 PREEMPT(full) [ 998.461023][T24467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 998.461038][T24467] Call Trace: [ 998.461047][T24467] [ 998.461058][T24467] dump_stack_lvl+0x189/0x250 [ 998.461097][T24467] ? __pfx____ratelimit+0x10/0x10 [ 998.461123][T24467] ? __pfx_dump_stack_lvl+0x10/0x10 [ 998.461157][T24467] ? __pfx__printk+0x10/0x10 [ 998.461190][T24467] ? __pfx___might_resched+0x10/0x10 [ 998.461219][T24467] ? fs_reclaim_acquire+0x7d/0x100 [ 998.461247][T24467] should_fail_ex+0x414/0x560 [ 998.461288][T24467] should_failslab+0xa8/0x100 [ 998.461313][T24467] kmem_cache_alloc_noprof+0x74/0x6e0 [ 998.461347][T24467] ? alloc_file_pseudo_noaccount+0x144/0x2c0 [ 998.461379][T24467] ? do_raw_spin_unlock+0x122/0x240 [ 998.461420][T24467] alloc_file_pseudo_noaccount+0x144/0x2c0 [ 998.461456][T24467] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 998.461505][T24467] bdev_file_open_by_dev+0x181/0x240 [ 998.461546][T24467] disk_scan_partitions+0x1c1/0x2c0 [ 998.461584][T24467] blkdev_common_ioctl+0x1686/0x2550 [ 998.461618][T24467] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 998.461642][T24467] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 998.461674][T24467] ? do_vfs_ioctl+0xbe8/0x1430 [ 998.461693][T24467] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 998.461717][T24467] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 998.461780][T24467] blkdev_ioctl+0x4f6/0x6d0 [ 998.461812][T24467] ? __pfx_blkdev_ioctl+0x10/0x10 [ 998.461838][T24467] ? __fget_files+0x3a0/0x420 [ 998.461864][T24467] ? __fget_files+0x2a/0x420 [ 998.461894][T24467] ? bpf_lsm_file_ioctl+0x9/0x20 [ 998.461921][T24467] ? __pfx_blkdev_ioctl+0x10/0x10 [ 998.461950][T24467] __se_sys_ioctl+0xfc/0x170 [ 998.461988][T24467] do_syscall_64+0xfa/0xfa0 [ 998.462013][T24467] ? lockdep_hardirqs_on+0x9c/0x150 [ 998.462039][T24467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.462060][T24467] ? clear_bhb_loop+0x60/0xb0 [ 998.462085][T24467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 998.462106][T24467] RIP: 0033:0x7fea7a58eec9 [ 998.462125][T24467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 998.462145][T24467] RSP: 002b:00007fea7b4f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 998.462167][T24467] RAX: ffffffffffffffda RBX: 00007fea7a7e5fa0 RCX: 00007fea7a58eec9 [ 998.462184][T24467] RDX: 0000000000000000 RSI: 000000000000125f RDI: 0000000000000004 [ 998.462198][T24467] RBP: 00007fea7b4f4090 R08: 0000000000000000 R09: 0000000000000000 [ 998.462212][T24467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 998.462226][T24467] R13: 00007fea7a7e6038 R14: 00007fea7a7e5fa0 R15: 00007ffea0263df8 [ 998.462262][T24467] [ 998.734079][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 998.762530][T24471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5336'. [ 998.935186][T24479] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 998.941731][T24479] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 999.070801][T24492] tipc: Enabling of bearer rejected, already enabled [ 999.085695][T24492] tipc: Enabling of bearer rejected, already enabled [ 999.192349][T19922] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 999.362242][T19922] usb 2-1: Using ep0 maxpacket: 8 [ 999.369590][T19922] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 999.383243][T19922] usb 2-1: config 179 has no interface number 0 [ 999.394352][T19922] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 999.416079][T19922] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 999.438067][T19922] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 999.452114][T19922] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 999.472386][T19922] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 999.473061][T24498] infiniband syz1: set active [ 999.492368][T19922] usb 2-1: config 179 interface 65 has no altsetting 0 [ 999.499810][T24498] infiniband syz1: added syz_tun [ 999.504997][T19922] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 999.522285][T19922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.570488][T19922] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input98 [ 999.598926][T24498] RDS/IB: syz1: added [ 999.652532][ T5219] input input98: unable to receive magic message: -110 [ 999.670950][ T5219] input input98: unable to receive magic message: -32 [ 999.697935][ T5219] input input98: unable to receive magic message: -32 [ 999.706675][ T5219] input input98: unable to receive magic message: -32 [ 999.743453][ T5219] input input98: unable to receive magic message: -32 [ 999.769445][T19922] usb 2-1: USB disconnect, device number 80 [ 999.769512][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 999.784066][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 999.802273][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1000.644480][T14603] IPVS: starting estimator thread 0... [ 1000.650469][T24537] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1000.728058][T24543] tipc: Enabling of bearer rejected, already enabled [ 1000.742481][T24541] IPVS: using max 25 ests per chain, 60000 per kthread [ 1000.763754][T24543] tipc: Enabling of bearer rejected, already enabled [ 1000.844674][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1000.861087][T24547] 9pnet_fd: Insufficient options for proto=fd [ 1001.562305][ C0] net_ratelimit: 2 callbacks suppressed [ 1001.562328][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1001.882423][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1002.016946][T24570] tipc: Enabling of bearer rejected, already enabled [ 1002.036649][T24570] tipc: Enabling of bearer rejected, already enabled [ 1002.065062][T24574] FAULT_INJECTION: forcing a failure. [ 1002.065062][T24574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1002.078899][T24574] CPU: 1 UID: 0 PID: 24574 Comm: syz.4.5362 Not tainted syzkaller #0 PREEMPT(full) [ 1002.078928][T24574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1002.078943][T24574] Call Trace: [ 1002.078952][T24574] [ 1002.078961][T24574] dump_stack_lvl+0x189/0x250 [ 1002.079000][T24574] ? __pfx____ratelimit+0x10/0x10 [ 1002.079026][T24574] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1002.079064][T24574] ? __pfx__printk+0x10/0x10 [ 1002.079093][T24574] ? __might_fault+0xb0/0x130 [ 1002.079134][T24574] should_fail_ex+0x414/0x560 [ 1002.079172][T24574] _copy_from_iter+0x1de/0x1790 [ 1002.079213][T24574] ? __pfx__copy_from_iter+0x10/0x10 [ 1002.079253][T24574] ? rcu_is_watching+0x15/0xb0 [ 1002.079281][T24574] ? trace_kmalloc+0x1f/0xd0 [ 1002.079312][T24574] ? qrtr_tun_write_iter+0xbf/0x180 [ 1002.079332][T24574] ? bpf_lsm_file_permission+0x9/0x20 [ 1002.079363][T24574] qrtr_tun_write_iter+0xdf/0x180 [ 1002.079387][T24574] aio_write+0x535/0x7a0 [ 1002.079427][T24574] ? __pfx_aio_write+0x10/0x10 [ 1002.079472][T24574] ? __might_fault+0xb0/0x130 [ 1002.079523][T24574] io_submit_one+0x78b/0x1310 [ 1002.079572][T24574] ? __pfx_io_submit_one+0x10/0x10 [ 1002.079604][T24574] ? __might_fault+0xb0/0x130 [ 1002.079649][T24574] ? __might_fault+0xb0/0x130 [ 1002.079686][T24574] __se_sys_io_submit+0x185/0x2f0 [ 1002.079717][T24574] ? __pfx___se_sys_io_submit+0x10/0x10 [ 1002.079743][T24574] ? ksys_write+0x22a/0x250 [ 1002.079777][T24574] ? do_syscall_64+0xbe/0xfa0 [ 1002.079807][T24574] do_syscall_64+0xfa/0xfa0 [ 1002.079831][T24574] ? lockdep_hardirqs_on+0x9c/0x150 [ 1002.079857][T24574] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.079879][T24574] ? clear_bhb_loop+0x60/0xb0 [ 1002.079906][T24574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.079928][T24574] RIP: 0033:0x7fea7a58eec9 [ 1002.079948][T24574] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1002.079968][T24574] RSP: 002b:00007fea7b4f4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 1002.079993][T24574] RAX: ffffffffffffffda RBX: 00007fea7a7e5fa0 RCX: 00007fea7a58eec9 [ 1002.080010][T24574] RDX: 0000200000000180 RSI: 0000000000000001 RDI: 00007fea7b4d3000 [ 1002.080027][T24574] RBP: 00007fea7b4f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.080040][T24574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1002.080054][T24574] R13: 00007fea7a7e6038 R14: 00007fea7a7e5fa0 R15: 00007ffea0263df8 [ 1002.080089][T24574] [ 1002.326319][ C1] vkms_vblank_simulate: vblank timer overrun [ 1002.348819][T24572] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1002.360995][T14603] IPVS: starting estimator thread 0... [ 1002.433459][T24580] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5364'. [ 1002.524798][T24576] IPVS: using max 29 ests per chain, 69600 per kthread [ 1002.603864][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1002.732201][T14603] usb 2-1: new full-speed USB device number 81 using dummy_hcd [ 1002.824601][T24609] tipc: Enabling of bearer rejected, already enabled [ 1002.834774][T24609] tipc: Enabling of bearer rejected, already enabled [ 1002.900118][T14603] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.922302][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1002.922337][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1002.939163][T14603] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1002.955202][T14603] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1002.965029][T14603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1002.982171][T14603] usb 2-1: Product: syz [ 1002.991947][T14603] usb 2-1: Manufacturer: syz [ 1002.996944][T14603] usb 2-1: SerialNumber: syz [ 1003.070909][T24623] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.5375'. [ 1003.246749][T24579] 9pnet_fd: Insufficient options for proto=fd [ 1003.273299][T14603] usb 2-1: 0:2 : does not exist [ 1003.299714][T14603] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1003.329736][T14603] usb 2-1: USB disconnect, device number 81 [ 1003.375194][T23091] udevd[23091]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1003.652301][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1003.870709][T24661] tipc: Enabling of bearer rejected, already enabled [ 1003.883398][T24661] tipc: Enabling of bearer rejected, already enabled [ 1003.962260][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1003.962345][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1004.011765][T24672] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5382'. [ 1004.202419][T14603] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1004.332302][T14603] usb 2-1: device descriptor read/64, error -71 [ 1004.572205][T14603] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1004.682722][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1004.713088][T14603] usb 2-1: device descriptor read/64, error -71 [ 1004.823682][T14603] usb usb2-port1: attempt power cycle [ 1005.162361][T14603] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1005.182795][T14603] usb 2-1: device descriptor read/8, error -71 [ 1005.422315][T14603] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1005.442956][T14603] usb 2-1: device descriptor read/8, error -71 [ 1005.552443][T14603] usb usb2-port1: unable to enumerate USB device [ 1005.669701][T24685] 9pnet_fd: Insufficient options for proto=fd [ 1006.567301][T24715] fuse: Bad value for 'fd' [ 1006.762467][ C0] net_ratelimit: 5 callbacks suppressed [ 1006.762492][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1007.082288][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1007.082476][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1007.422222][ T5905] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1007.574621][ T5905] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.585244][ T5905] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1007.596873][ T5905] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1007.606429][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1007.614563][ T5905] usb 2-1: Product: syz [ 1007.618842][ T5905] usb 2-1: Manufacturer: syz [ 1007.623529][ T5905] usb 2-1: SerialNumber: syz [ 1007.768259][T24754] overlayfs: missing 'lowerdir' [ 1007.802469][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1007.864238][T24732] 9pnet_fd: Insufficient options for proto=fd [ 1007.880714][ T5905] usb 2-1: 0:2 : does not exist [ 1007.912602][ T5905] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 1007.944741][ T5905] usb 2-1: USB disconnect, device number 86 [ 1007.999026][T23091] udevd[23091]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1008.122239][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1008.122330][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1008.455910][T24790] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5413'. [ 1008.772743][ T5905] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1008.842607][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1008.934733][ T5905] usb 2-1: no configurations [ 1008.939381][ T5905] usb 2-1: can't read configurations, error -22 [ 1009.072201][ T5905] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1009.162759][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1009.163189][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1009.221760][T24815] 9pnet_fd: Insufficient options for proto=fd [ 1009.258205][ T5905] usb 2-1: no configurations [ 1009.259624][T24817] netlink: 'syz.5.5422': attribute type 11 has an invalid length. [ 1009.271300][ T5905] usb 2-1: can't read configurations, error -22 [ 1009.278445][ T5905] usb usb2-port1: attempt power cycle [ 1009.632328][ T5905] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1009.653888][ T5905] usb 2-1: no configurations [ 1009.658533][ T5905] usb 2-1: can't read configurations, error -22 [ 1009.809076][ T5905] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1009.853912][ T5905] usb 2-1: no configurations [ 1009.858610][ T5905] usb 2-1: can't read configurations, error -22 [ 1009.875762][ T5905] usb usb2-port1: unable to enumerate USB device [ 1009.882342][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1010.126871][T24834] netlink: 'syz.5.5427': attribute type 1 has an invalid length. [ 1010.135100][T24834] netlink: 'syz.5.5427': attribute type 3 has an invalid length. [ 1010.143912][T24834] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5427'. [ 1010.209232][T24836] tmpfs: Bad value for 'size' [ 1010.216451][ T30] audit: type=1800 audit(1759381492.298:575): pid=24836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5428" name="bus" dev="tmpfs" ino=2519 res=0 errno=0 [ 1010.927046][T24845] 9pnet_fd: Insufficient options for proto=fd [ 1011.185589][T24857] tmpfs: Bad value for 'size' [ 1011.193765][ T30] audit: type=1800 audit(1759381493.268:576): pid=24857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5438" name="bus" dev="tmpfs" ino=2559 res=0 errno=0 [ 1011.931470][T24881] tmpfs: Bad value for 'size' [ 1011.938569][ T30] audit: type=1800 audit(1759381494.018:577): pid=24881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5447" name="bus" dev="tmpfs" ino=2571 res=0 errno=0 [ 1011.962251][ C0] net_ratelimit: 5 callbacks suppressed [ 1011.962273][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1012.150288][T24884] 9pnet_fd: Insufficient options for proto=fd [ 1012.282310][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1012.282364][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1012.418222][T24886] FAULT_INJECTION: forcing a failure. [ 1012.418222][T24886] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.431205][T24886] CPU: 1 UID: 0 PID: 24886 Comm: syz.1.5449 Not tainted syzkaller #0 PREEMPT(full) [ 1012.431228][T24886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1012.431239][T24886] Call Trace: [ 1012.431245][T24886] [ 1012.431252][T24886] dump_stack_lvl+0x189/0x250 [ 1012.431281][T24886] ? __pfx____ratelimit+0x10/0x10 [ 1012.431300][T24886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1012.431325][T24886] ? __pfx__printk+0x10/0x10 [ 1012.431376][T24886] ? __pfx___might_resched+0x10/0x10 [ 1012.431397][T24886] ? fs_reclaim_acquire+0x7d/0x100 [ 1012.431417][T24886] should_fail_ex+0x414/0x560 [ 1012.431446][T24886] should_failslab+0xa8/0x100 [ 1012.431464][T24886] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1012.431488][T24886] ? __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 1012.431515][T24886] __kvm_mmu_topup_memory_cache+0x1b4/0x610 [ 1012.431548][T24886] mmu_topup_memory_caches+0x21/0x170 [ 1012.431582][T24886] kvm_mmu_load+0x9d/0x2300 [ 1012.431613][T24886] ? kvm_msr_allowed+0x9a/0x490 [ 1012.431633][T24886] ? kvm_msr_allowed+0x9a/0x490 [ 1012.431655][T24886] ? kvm_msr_allowed+0x9a/0x490 [ 1012.431674][T24886] ? kvm_msr_allowed+0x9a/0x490 [ 1012.431688][T24886] ? kvm_apic_has_interrupt+0x744/0x770 [ 1012.431713][T24886] vcpu_run+0x48a8/0x7040 [ 1012.431784][T24886] ? __pfx_vcpu_run+0x10/0x10 [ 1012.431806][T24886] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1012.431829][T24886] ? rcu_is_watching+0x15/0xb0 [ 1012.431854][T24886] kvm_arch_vcpu_ioctl_run+0xfc9/0x1940 [ 1012.431875][T24886] ? __mutex_trylock_common+0x153/0x260 [ 1012.431901][T24886] ? kvm_arch_vcpu_ioctl_run+0x1f3/0x1940 [ 1012.431918][T24886] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1012.431937][T24886] ? rcu_is_watching+0x15/0xb0 [ 1012.431958][T24886] ? trace_contention_end+0x39/0x120 [ 1012.431980][T24886] ? look_up_lock_class+0x74/0x170 [ 1012.432001][T24886] ? register_lock_class+0x51/0x320 [ 1012.432023][T24886] ? __lock_acquire+0xab9/0xd20 [ 1012.432078][T24886] kvm_vcpu_ioctl+0x95c/0xe90 [ 1012.432106][T24886] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1012.432149][T24886] ? __fget_files+0x2a/0x420 [ 1012.432173][T24886] ? __fget_files+0x3a0/0x420 [ 1012.432191][T24886] ? __fget_files+0x2a/0x420 [ 1012.432213][T24886] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1012.432233][T24886] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1012.432248][T24886] __se_sys_ioctl+0xfc/0x170 [ 1012.432275][T24886] do_syscall_64+0xfa/0xfa0 [ 1012.432294][T24886] ? lockdep_hardirqs_on+0x9c/0x150 [ 1012.432313][T24886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.432329][T24886] ? clear_bhb_loop+0x60/0xb0 [ 1012.432355][T24886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.432372][T24886] RIP: 0033:0x7fa7a938eec9 [ 1012.432389][T24886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1012.432403][T24886] RSP: 002b:00007fa7aa301038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1012.432421][T24886] RAX: ffffffffffffffda RBX: 00007fa7a95e5fa0 RCX: 00007fa7a938eec9 [ 1012.432432][T24886] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1012.432442][T24886] RBP: 00007fa7aa301090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.432452][T24886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.432461][T24886] R13: 00007fa7a95e6038 R14: 00007fa7a95e5fa0 R15: 00007ffda17c59f8 [ 1012.432487][T24886] [ 1013.002802][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1013.065022][ T30] audit: type=1800 audit(1759381495.148:578): pid=24906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5456" name="bus" dev="tmpfs" ino=1775 res=0 errno=0 [ 1013.322276][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1013.322355][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1013.378510][T24917] 9pnet_fd: Insufficient options for proto=fd [ 1013.572977][T24923] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5463'. [ 1013.583160][T24923] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5463'. [ 1013.643438][T24927] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1013.650978][T24927] overlayfs: failed to set xattr on upper [ 1013.680900][T24927] overlayfs: ...falling back to redirect_dir=nofollow. [ 1013.688678][T24927] overlayfs: ...falling back to uuid=null. [ 1013.833489][ T30] audit: type=1800 audit(1759381495.918:579): pid=24936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5466" name="bus" dev="tmpfs" ino=2611 res=0 errno=0 [ 1014.042429][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1014.177249][T24941] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1014.362354][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1014.372259][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1014.479090][T24959] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 1014.485652][T24959] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1014.493810][T24959] vhci_hcd vhci_hcd.0: Device attached [ 1014.762462][ T5978] usb 36-1: SetAddress Request (2) to port 0 [ 1014.768657][T14603] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1014.776507][ T5978] usb 36-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1014.818351][T24968] netlink: 128 bytes leftover after parsing attributes in process `syz.5.5474'. [ 1014.827712][T24968] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1014.932438][T14603] usb 2-1: Using ep0 maxpacket: 8 [ 1014.939473][T14603] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1014.948862][T14603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.960727][T14603] usb 2-1: config 0 descriptor?? [ 1014.969510][T14603] hso 2-1:0.0: Can't find BULK IN endpoint [ 1015.121495][T24974] 9pnet_fd: Insufficient options for proto=fd [ 1015.168695][T24960] vhci_hcd: connection reset by peer [ 1015.169778][ T6202] usb 2-1: USB disconnect, device number 91 [ 1015.180484][T22438] vhci_hcd: stop threads [ 1015.187116][T22438] vhci_hcd: release socket [ 1015.194843][T22438] vhci_hcd: disconnect device [ 1015.689517][T24982] netlink: 'syz.3.5476': attribute type 21 has an invalid length. [ 1015.697749][T24982] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5476'. [ 1015.708587][T24982] netlink: 'syz.3.5476': attribute type 5 has an invalid length. [ 1015.716515][T24982] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5476'. [ 1015.733192][T24982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5476'. [ 1015.749694][ T30] audit: type=1800 audit(1759381497.828:580): pid=24984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5477" name="bus" dev="tmpfs" ino=2629 res=0 errno=0 [ 1016.626132][T25001] 9pnet_fd: Insufficient options for proto=fd [ 1016.830905][T25007] FAULT_INJECTION: forcing a failure. [ 1016.830905][T25007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1016.854182][T25007] CPU: 1 UID: 0 PID: 25007 Comm: syz.4.5485 Not tainted syzkaller #0 PREEMPT(full) [ 1016.854214][T25007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1016.854229][T25007] Call Trace: [ 1016.854238][T25007] [ 1016.854248][T25007] dump_stack_lvl+0x189/0x250 [ 1016.854289][T25007] ? __pfx____ratelimit+0x10/0x10 [ 1016.854315][T25007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1016.854350][T25007] ? __pfx__printk+0x10/0x10 [ 1016.854381][T25007] ? __might_fault+0xb0/0x130 [ 1016.854427][T25007] should_fail_ex+0x414/0x560 [ 1016.854468][T25007] _copy_from_user+0x2d/0xb0 [ 1016.854499][T25007] ___sys_sendmsg+0x158/0x2a0 [ 1016.854532][T25007] ? __pfx____sys_sendmsg+0x10/0x10 [ 1016.854600][T25007] ? __fget_files+0x2a/0x420 [ 1016.854626][T25007] ? __fget_files+0x3a0/0x420 [ 1016.854666][T25007] __sys_sendmmsg+0x227/0x430 [ 1016.854705][T25007] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1016.854744][T25007] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1016.854792][T25007] ? ksys_write+0x22a/0x250 [ 1016.854817][T25007] ? __pfx_ksys_write+0x10/0x10 [ 1016.854845][T25007] __x64_sys_sendmmsg+0xa0/0xc0 [ 1016.854876][T25007] do_syscall_64+0xfa/0xfa0 [ 1016.854900][T25007] ? lockdep_hardirqs_on+0x9c/0x150 [ 1016.854925][T25007] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.854947][T25007] ? clear_bhb_loop+0x60/0xb0 [ 1016.854974][T25007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.855002][T25007] RIP: 0033:0x7fea7a58eec9 [ 1016.855022][T25007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1016.855041][T25007] RSP: 002b:00007fea7b4f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1016.855064][T25007] RAX: ffffffffffffffda RBX: 00007fea7a7e5fa0 RCX: 00007fea7a58eec9 [ 1016.855080][T25007] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000003 [ 1016.855094][T25007] RBP: 00007fea7b4f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.855107][T25007] R10: 0000000020008000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.855121][T25007] R13: 00007fea7a7e6038 R14: 00007fea7a7e5fa0 R15: 00007ffea0263df8 [ 1016.855155][T25007] [ 1017.162507][ C0] net_ratelimit: 6 callbacks suppressed [ 1017.162528][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1017.212306][ T43] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1017.263783][T25026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5491'. [ 1017.280942][T25026] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5491'. [ 1017.367896][T25033] fuse: Bad value for 'fd' [ 1017.387426][ T43] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 1017.397510][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.406852][ T43] usb 2-1: Product: syz [ 1017.411711][ T43] usb 2-1: Manufacturer: syz [ 1017.417033][ T43] usb 2-1: SerialNumber: syz [ 1017.435943][ T43] usb 2-1: config 0 descriptor?? [ 1017.482490][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1017.492303][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1017.545466][T25041] vxcan1: entered allmulticast mode [ 1017.645109][ T43] usb 2-1: ignoring: probably an ADSL modem [ 1018.054582][ T43] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 1018.075026][ T43] usb 2-1: USB disconnect, device number 92 [ 1018.202402][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1018.398447][T25064] 9pnet_fd: Insufficient options for proto=fd [ 1018.522222][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1018.522313][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1018.803771][T25074] fuse: Bad value for 'fd' [ 1019.242532][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1019.562367][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1019.564150][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1019.615315][T25086] 9pnet_fd: Insufficient options for proto=fd [ 1019.881334][T25090] netlink: 'syz.3.5509': attribute type 5 has an invalid length. [ 1019.893470][ T5978] usb 36-1: device descriptor read/8, error -110 [ 1020.282406][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1020.293542][ T5978] usb usb36-port1: attempt power cycle [ 1020.863748][ T5978] usb usb36-port1: unable to enumerate USB device [ 1021.399402][ T43] IPVS: starting estimator thread 0... [ 1021.502233][T25113] IPVS: using max 24 ests per chain, 57600 per kthread [ 1021.867929][ T30] audit: type=1800 audit(1759381503.948:581): pid=25115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5515" name="nullb0" dev="tmpfs" ino=2679 res=0 errno=0 [ 1021.956492][T25118] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 1022.362294][ C0] net_ratelimit: 7 callbacks suppressed [ 1022.362316][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1022.432255][ T43] usb 2-1: new full-speed USB device number 93 using dummy_hcd [ 1022.533694][T25135] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1022.540236][T25135] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1022.583775][ T43] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1022.595084][ T43] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1022.606724][ T43] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 1022.618195][ T43] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 1022.631593][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1022.640850][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.649078][ T43] usb 2-1: Product: syz [ 1022.653853][ T43] usb 2-1: Manufacturer: syz [ 1022.658487][ T43] usb 2-1: SerialNumber: syz [ 1022.668276][T25125] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1022.682249][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1022.682465][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1022.699462][ T43] cdc_mbim 2-1:1.0: skipping garbage [ 1022.898382][T25125] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1022.906290][T25125] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1023.372761][T25155] 9pnet_fd: Insufficient options for proto=fd [ 1023.402349][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1023.510203][T25161] syz.4.5528 (25161): attempted to duplicate a private mapping with mremap. This is not supported. [ 1023.524698][T25125] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1023.532031][T25125] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1023.540349][ T43] cdc_mbim 2-1:1.0: dwNtbInMaxSize=70 is too small. Using 2048 [ 1023.548395][ T43] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 1023.722278][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1023.722351][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1023.805968][ T43] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1023.831736][ T43] wwan wwan0: port wwan0mbim0 attached [ 1023.846546][ T43] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, ae:d8:e0:36:26:63 [ 1023.866833][ T43] usb 2-1: USB disconnect, device number 93 [ 1023.877018][ T43] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1023.966982][T25187] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.5529'. [ 1023.991254][ T43] wwan wwan0: port wwan0mbim0 disconnected [ 1024.198347][T25205] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1024.204936][T25205] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1024.449413][T25208] Bluetooth: MGMT ver 1.23 [ 1024.802924][ T5933] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1024.982201][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 1024.990711][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1025.002096][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1025.011955][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1025.026595][ T5933] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1025.035747][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.046746][ T5933] usb 2-1: config 0 descriptor?? [ 1025.270389][ T5933] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0032/input/input99 [ 1025.349811][ T5933] microsoft 0003:045E:07DA.0032: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 1025.460463][T25212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1025.471402][T25212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1025.483983][ T43] usb 2-1: USB disconnect, device number 94 [ 1025.876995][ T30] audit: type=1800 audit(1759381507.958:582): pid=25271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5546" name="bus" dev="tmpfs" ino=2733 res=0 errno=0 [ 1026.447275][ T6202] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1026.522280][ T5184] Bluetooth: hci2: command 0x0401 tx timeout [ 1026.523339][T14291] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1026.612353][ T6202] usb 2-1: Using ep0 maxpacket: 8 [ 1026.620722][ T6202] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1026.630311][ T6202] usb 2-1: config 179 has no interface number 0 [ 1026.636694][ T6202] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1026.648088][ T6202] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1026.659907][ T6202] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1026.671270][ T6202] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1026.682745][ T6202] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1026.696206][ T6202] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1026.703489][ T6202] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1026.712621][ T6202] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.739143][ T6202] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input100 [ 1026.803434][ T5219] input input100: unable to receive magic message: -110 [ 1026.811749][ T5219] input input100: unable to receive magic message: -32 [ 1026.833107][ T5219] input input100: unable to receive magic message: -32 [ 1026.844295][ T5219] input input100: unable to receive magic message: -32 [ 1026.864204][ T5219] input input100: unable to receive magic message: -32 [ 1026.875004][ T5219] input input100: unable to receive magic message: -32 [ 1026.942299][ T5933] usb 2-1: USB disconnect, device number 95 [ 1026.942439][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1027.555667][T25334] netlink: 'syz.1.5554': attribute type 21 has an invalid length. [ 1027.562271][ C0] net_ratelimit: 11 callbacks suppressed [ 1027.562294][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1027.756814][ T30] audit: type=1800 audit(1759381509.838:583): pid=25341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5556" name="bus" dev="tmpfs" ino=2 res=0 errno=0 [ 1027.882276][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1027.882288][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1028.602226][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1028.831021][T25381] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1028.837646][T25381] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1028.922284][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1028.932342][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1029.082444][ T43] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1029.262220][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 1029.269507][ T43] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 1029.292190][ T43] usb 2-1: config 179 has no interface number 0 [ 1029.308807][ T43] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1029.323597][ T43] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1029.336008][ T43] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 1029.354604][ T43] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 1029.366267][ T43] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1029.372236][ T30] audit: type=1800 audit(1759381511.448:584): pid=25395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5565" name="bus" dev="tmpfs" ino=1996 res=0 errno=0 [ 1029.379795][ T43] usb 2-1: config 179 interface 65 has no altsetting 0 [ 1029.407675][ T43] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1029.416948][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.472730][ T43] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input101 [ 1029.543450][ T5219] input input101: unable to receive magic message: -110 [ 1029.572970][ T5219] input input101: unable to receive magic message: -32 [ 1029.592251][ T5219] input input101: unable to receive magic message: -32 [ 1029.629039][ T5219] input input101: unable to receive magic message: -32 [ 1029.642330][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1029.660125][ T5219] input input101: unable to receive magic message: -32 [ 1029.666993][ T5978] usb 2-1: USB disconnect, device number 96 [ 1029.667233][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1029.681565][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1029.962397][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1030.390494][T25431] FAULT_INJECTION: forcing a failure. [ 1030.390494][T25431] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.405801][T25431] CPU: 1 UID: 0 PID: 25431 Comm: syz.1.5572 Not tainted syzkaller #0 PREEMPT(full) [ 1030.405831][T25431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1030.405846][T25431] Call Trace: [ 1030.405856][T25431] [ 1030.405866][T25431] dump_stack_lvl+0x189/0x250 [ 1030.405906][T25431] ? __pfx____ratelimit+0x10/0x10 [ 1030.405932][T25431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1030.405967][T25431] ? __pfx__printk+0x10/0x10 [ 1030.406004][T25431] ? __pfx___might_resched+0x10/0x10 [ 1030.406040][T25431] should_fail_ex+0x414/0x560 [ 1030.406081][T25431] should_failslab+0xa8/0x100 [ 1030.406108][T25431] __kmalloc_node_noprof+0xd2/0x800 [ 1030.406140][T25431] ? __vmalloc_node_range_noprof+0x5bb/0x12d0 [ 1030.406180][T25431] __vmalloc_node_range_noprof+0x5bb/0x12d0 [ 1030.406224][T25431] ? percpu_ref_get_many+0x19/0x140 [ 1030.406267][T25431] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1030.406303][T25431] ? memcpy_and_pad+0x48/0x80 [ 1030.406336][T25431] __vmalloc_node_noprof+0xc2/0x110 [ 1030.406371][T25431] ? copy_process+0x54b/0x3c00 [ 1030.406396][T25431] ? copy_process+0x54b/0x3c00 [ 1030.406427][T25431] dup_task_struct+0x3d4/0x830 [ 1030.406456][T25431] ? lockdep_hardirqs_on+0x9c/0x150 [ 1030.406486][T25431] copy_process+0x54b/0x3c00 [ 1030.406549][T25431] ? __pfx_copy_process+0x10/0x10 [ 1030.406594][T25431] vhost_task_create+0x1ce/0x320 [ 1030.406630][T25431] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1030.406666][T25431] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1030.406702][T25431] ? __pfx_vhost_task_create+0x10/0x10 [ 1030.406744][T25431] ? __pfx_vhost_task_fn+0x10/0x10 [ 1030.406799][T25431] kvm_mmu_post_init_vm+0x14c/0x300 [ 1030.406828][T25431] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 1030.406858][T25431] ? __mutex_trylock_common+0x153/0x260 [ 1030.406894][T25431] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1030.406929][T25431] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1030.406958][T25431] ? rcu_is_watching+0x15/0xb0 [ 1030.406990][T25431] ? trace_contention_end+0x39/0x120 [ 1030.407022][T25431] ? look_up_lock_class+0x74/0x170 [ 1030.407053][T25431] ? register_lock_class+0x51/0x320 [ 1030.407086][T25431] ? __lock_acquire+0xab9/0xd20 [ 1030.407147][T25431] kvm_vcpu_ioctl+0x95c/0xe90 [ 1030.407177][T25431] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1030.407222][T25431] ? __fget_files+0x2a/0x420 [ 1030.407252][T25431] ? __fget_files+0x3a0/0x420 [ 1030.407275][T25431] ? __fget_files+0x2a/0x420 [ 1030.407304][T25431] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1030.407338][T25431] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1030.407361][T25431] __se_sys_ioctl+0xfc/0x170 [ 1030.407399][T25431] do_syscall_64+0xfa/0xfa0 [ 1030.407424][T25431] ? lockdep_hardirqs_on+0x9c/0x150 [ 1030.407449][T25431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.407470][T25431] ? clear_bhb_loop+0x60/0xb0 [ 1030.407496][T25431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.407517][T25431] RIP: 0033:0x7fa7a938eec9 [ 1030.407537][T25431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1030.407557][T25431] RSP: 002b:00007fa7aa301038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1030.407580][T25431] RAX: ffffffffffffffda RBX: 00007fa7a95e5fa0 RCX: 00007fa7a938eec9 [ 1030.407598][T25431] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1030.407612][T25431] RBP: 00007fa7aa301090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.407625][T25431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.407639][T25431] R13: 00007fa7a95e6038 R14: 00007fa7a95e5fa0 R15: 00007ffda17c59f8 [ 1030.407676][T25431] [ 1030.407688][T25431] syz.1.5572: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1030.782980][T25431] CPU: 1 UID: 0 PID: 25431 Comm: syz.1.5572 Not tainted syzkaller #0 PREEMPT(full) [ 1030.783011][T25431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1030.783025][T25431] Call Trace: [ 1030.783034][T25431] [ 1030.783044][T25431] dump_stack_lvl+0x189/0x250 [ 1030.783089][T25431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1030.783124][T25431] ? __pfx__printk+0x10/0x10 [ 1030.783156][T25431] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1030.783191][T25431] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1030.783227][T25431] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 1030.783263][T25431] warn_alloc+0x214/0x310 [ 1030.783285][T25431] ? __pfx___might_resched+0x10/0x10 [ 1030.783317][T25431] ? __pfx_warn_alloc+0x10/0x10 [ 1030.783336][T25431] ? should_fail_ex+0x2ff/0x560 [ 1030.783376][T25431] ? rcu_is_watching+0x15/0xb0 [ 1030.783408][T25431] ? trace_kmalloc+0x1f/0xd0 [ 1030.783438][T25431] ? __kmalloc_node_noprof+0x58c/0x800 [ 1030.783480][T25431] __vmalloc_node_range_noprof+0x690/0x12d0 [ 1030.783543][T25431] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1030.783579][T25431] ? memcpy_and_pad+0x48/0x80 [ 1030.783603][T25431] __vmalloc_node_noprof+0xc2/0x110 [ 1030.783643][T25431] ? copy_process+0x54b/0x3c00 [ 1030.783669][T25431] ? copy_process+0x54b/0x3c00 [ 1030.783699][T25431] dup_task_struct+0x3d4/0x830 [ 1030.783729][T25431] ? lockdep_hardirqs_on+0x9c/0x150 [ 1030.783760][T25431] copy_process+0x54b/0x3c00 [ 1030.783820][T25431] ? __pfx_copy_process+0x10/0x10 [ 1030.783866][T25431] vhost_task_create+0x1ce/0x320 [ 1030.783900][T25431] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 1030.783936][T25431] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 1030.783973][T25431] ? __pfx_vhost_task_create+0x10/0x10 [ 1030.784016][T25431] ? __pfx_vhost_task_fn+0x10/0x10 [ 1030.784071][T25431] kvm_mmu_post_init_vm+0x14c/0x300 [ 1030.784099][T25431] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 1030.784130][T25431] ? __mutex_trylock_common+0x153/0x260 [ 1030.784166][T25431] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1030.784199][T25431] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 1030.784226][T25431] ? rcu_is_watching+0x15/0xb0 [ 1030.784256][T25431] ? trace_contention_end+0x39/0x120 [ 1030.784288][T25431] ? look_up_lock_class+0x74/0x170 [ 1030.784316][T25431] ? register_lock_class+0x51/0x320 [ 1030.784346][T25431] ? __lock_acquire+0xab9/0xd20 [ 1030.784402][T25431] kvm_vcpu_ioctl+0x95c/0xe90 [ 1030.784431][T25431] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1030.784477][T25431] ? __fget_files+0x2a/0x420 [ 1030.784510][T25431] ? __fget_files+0x3a0/0x420 [ 1030.784536][T25431] ? __fget_files+0x2a/0x420 [ 1030.784567][T25431] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1030.784595][T25431] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 1030.784624][T25431] __se_sys_ioctl+0xfc/0x170 [ 1030.784663][T25431] do_syscall_64+0xfa/0xfa0 [ 1030.784689][T25431] ? lockdep_hardirqs_on+0x9c/0x150 [ 1030.784715][T25431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.784738][T25431] ? clear_bhb_loop+0x60/0xb0 [ 1030.784766][T25431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.784787][T25431] RIP: 0033:0x7fa7a938eec9 [ 1030.784808][T25431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1030.784827][T25431] RSP: 002b:00007fa7aa301038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1030.784851][T25431] RAX: ffffffffffffffda RBX: 00007fa7a95e5fa0 RCX: 00007fa7a938eec9 [ 1030.784868][T25431] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1030.784882][T25431] RBP: 00007fa7aa301090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.784897][T25431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.784910][T25431] R13: 00007fa7a95e6038 R14: 00007fa7a95e5fa0 R15: 00007ffda17c59f8 [ 1030.784948][T25431] [ 1030.784957][T25431] Mem-Info: [ 1031.165860][T25431] active_anon:55853 inactive_anon:0 isolated_anon:0 [ 1031.165860][T25431] active_file:20062 inactive_file:4652 isolated_file:0 [ 1031.165860][T25431] unevictable:17166 dirty:105 writeback:0 [ 1031.165860][T25431] slab_reclaimable:10766 slab_unreclaimable:107614 [ 1031.165860][T25431] mapped:25626 shmem:50563 pagetables:1663 [ 1031.165860][T25431] sec_pagetables:0 bounce:0 [ 1031.165860][T25431] kernel_misc_reclaimable:0 [ 1031.165860][T25431] free:1271400 free_pcp:16210 free_cma:0 [ 1031.212334][T25431] Node 0 active_anon:223512kB inactive_anon:0kB active_file:80248kB inactive_file:18468kB unevictable:67128kB isolated(anon):0kB isolated(file):0kB mapped:102504kB dirty:420kB writeback:0kB shmem:200716kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB kernel_stack:13364kB pagetables:6500kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1031.245592][T25431] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1031.276199][T25431] Node 0 DMA free:15328kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 1031.306860][T25431] lowmem_reserve[]: 0 2489 2489 2489 2489 [ 1031.318565][T25431] Node 0 DMA32 free:1183868kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB free_highatomic:0KB active_anon:223512kB inactive_anon:0kB active_file:80248kB inactive_file:18468kB unevictable:67128kB writepending:420kB zspages:0kB present:3129332kB managed:2549276kB mlocked:0kB bounce:0kB free_pcp:35924kB local_pcp:18424kB free_cma:0kB [ 1031.352401][ C0] vkms_vblank_simulate: vblank timer overrun [ 1031.363539][T25431] lowmem_reserve[]: 0 0 0 0 0 [ 1031.368401][T25431] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1031.397943][T25431] lowmem_reserve[]: 0 0 0 0 0 [ 1031.404682][T25431] Node 1 Normal free:3886204kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:29632kB local_pcp:16672kB free_cma:0kB [ 1031.437196][ C0] vkms_vblank_simulate: vblank timer overrun [ 1031.452512][T25431] lowmem_reserve[]: 0 0 0 0 0 [ 1031.457320][T25431] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 1031.472374][T25431] Node 0 DMA32: 154*4kB (ME) 294*8kB (UME) 315*16kB (UME) 328*32kB (UME) 64*64kB (UME) 44*128kB (UME) 50*256kB (UME) 24*512kB (UM) 24*1024kB (UME) 6*2048kB (UME) 267*4096kB (UM) = 1183816kB [ 1031.491654][T25431] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1031.503550][T25431] Node 1 Normal: 237*4kB (UME) 63*8kB (UME) 47*16kB (UME) 133*32kB (UME) 37*64kB (UME) 10*128kB (UME) 5*256kB (UM) 2*512kB (M) 3*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3886204kB [ 1031.523062][T25431] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1031.533307][T25431] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1031.553558][T25431] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1031.563564][T25431] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1031.573392][T25431] 91671 total pagecache pages [ 1031.578685][T25431] 0 pages in swap cache [ 1031.583218][T25431] Free swap = 124996kB [ 1031.587441][T25431] Total swap = 124996kB [ 1031.591640][T25431] 2097051 pages RAM [ 1031.596801][T25431] 0 pages HighMem/MovableOnly [ 1031.601559][T25431] 428026 pages reserved [ 1031.605905][T25431] 0 pages cma reserved [ 1031.717987][T25462] [ 1031.720380][T25462] ====================================================== [ 1031.727434][T25462] WARNING: possible circular locking dependency detected [ 1031.734493][T25462] syzkaller #0 Not tainted [ 1031.738942][T25462] ------------------------------------------------------ [ 1031.745996][T25462] syz.1.5582/25462 is trying to acquire lock: [ 1031.752091][T25462] ffffffff8e645220 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x48/0x710 [ 1031.762003][T25462] [ 1031.762003][T25462] but task is already holding lock: [ 1031.765324][T25465] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5584'. [ 1031.769396][T25462] ffff88807a27f518 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 1031.769458][T25462] [ 1031.769458][T25462] which lock already depends on the new lock. [ 1031.769458][T25462] [ 1031.797500][T25462] [ 1031.797500][T25462] the existing dependency chain (in reverse order) is: [ 1031.806622][T25462] [ 1031.806622][T25462] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1031.814298][T25462] lock_acquire+0x120/0x360 [ 1031.819355][T25462] lock_sock_nested+0x48/0x100 [ 1031.824681][T25462] inet_shutdown+0x6a/0x390 [ 1031.829769][T25462] nbd_mark_nsock_dead+0x2e9/0x560 [ 1031.835430][T25462] sock_shutdown+0x15e/0x260 [ 1031.840607][T25462] nbd_config_put+0x342/0x790 [ 1031.845834][T25462] nbd_release+0xfe/0x140 [ 1031.850714][T25462] bdev_release+0x536/0x650 [ 1031.855780][T25462] blkdev_release+0x15/0x20 [ 1031.860842][T25462] __fput+0x44c/0xa70 [ 1031.865396][T25462] task_work_run+0x1d4/0x260 [ 1031.870527][T25462] exit_to_user_mode_loop+0xe9/0x130 [ 1031.876353][T25462] do_syscall_64+0x2bd/0xfa0 [ 1031.881492][T25462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.887925][T25462] [ 1031.887925][T25462] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1031.895602][T25462] lock_acquire+0x120/0x360 [ 1031.900646][T25462] __mutex_lock+0x187/0x1350 [ 1031.905783][T25462] nbd_queue_rq+0x257/0xf10 [ 1031.910849][T25462] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 1031.916965][T25462] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 1031.923864][T25462] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1031.930398][T25462] blk_mq_run_hw_queue+0x348/0x4f0 [ 1031.936060][T25462] blk_mq_dispatch_list+0xd0c/0xe00 [ 1031.941893][T25462] blk_mq_flush_plug_list+0x469/0x550 [ 1031.948333][T25462] __blk_flush_plug+0x3d3/0x4b0 [ 1031.953852][T25462] __submit_bio+0x2d3/0x5a0 [ 1031.958913][T25462] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 1031.965086][T25462] block_read_full_folio+0x599/0x830 [ 1031.970911][T25462] filemap_read_folio+0x117/0x380 [ 1031.976478][T25462] do_read_cache_folio+0x350/0x590 [ 1031.982137][T25462] read_part_sector+0xb6/0x2b0 [ 1031.987454][T25462] adfspart_check_ICS+0xa4/0xa50 [ 1031.992937][T25462] bdev_disk_changed+0x75f/0x14b0 [ 1031.998504][T25462] blkdev_get_whole+0x380/0x510 [ 1032.003930][T25462] bdev_open+0x31e/0xd30 [ 1032.008718][T25462] blkdev_open+0x457/0x600 [ 1032.013683][T25462] do_dentry_open+0x953/0x13f0 [ 1032.018997][T25462] vfs_open+0x3b/0x340 [ 1032.023610][T25462] path_openat+0x2ee5/0x3830 [ 1032.028734][T25462] do_filp_open+0x1fa/0x410 [ 1032.033770][T25462] do_sys_openat2+0x121/0x1c0 [ 1032.038995][T25462] __x64_sys_openat+0x138/0x170 [ 1032.044398][T25462] do_syscall_64+0xfa/0xfa0 [ 1032.049450][T25462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.056672][T25462] [ 1032.056672][T25462] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1032.063916][T25462] lock_acquire+0x120/0x360 [ 1032.068965][T25462] __mutex_lock+0x187/0x1350 [ 1032.074103][T25462] nbd_queue_rq+0xc8/0xf10 [ 1032.079078][T25462] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 1032.085165][T25462] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 1032.092043][T25462] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1032.098573][T25462] blk_mq_run_hw_queue+0x348/0x4f0 [ 1032.104233][T25462] blk_mq_dispatch_list+0xd0c/0xe00 [ 1032.110004][T25462] blk_mq_flush_plug_list+0x469/0x550 [ 1032.115922][T25462] __blk_flush_plug+0x3d3/0x4b0 [ 1032.121405][T25462] __submit_bio+0x2d3/0x5a0 [ 1032.126487][T25462] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 1032.132666][T25462] block_read_full_folio+0x599/0x830 [ 1032.138489][T25462] filemap_read_folio+0x117/0x380 [ 1032.144057][T25462] do_read_cache_folio+0x350/0x590 [ 1032.149707][T25462] read_part_sector+0xb6/0x2b0 [ 1032.155014][T25462] adfspart_check_ICS+0xa4/0xa50 [ 1032.160503][T25462] bdev_disk_changed+0x75f/0x14b0 [ 1032.166076][T25462] blkdev_get_whole+0x380/0x510 [ 1032.171484][T25462] bdev_open+0x31e/0xd30 [ 1032.176361][T25462] blkdev_open+0x457/0x600 [ 1032.181331][T25462] do_dentry_open+0x953/0x13f0 [ 1032.186764][T25462] vfs_open+0x3b/0x340 [ 1032.191382][T25462] path_openat+0x2ee5/0x3830 [ 1032.196512][T25462] do_filp_open+0x1fa/0x410 [ 1032.201554][T25462] do_sys_openat2+0x121/0x1c0 [ 1032.206777][T25462] __x64_sys_openat+0x138/0x170 [ 1032.212178][T25462] do_syscall_64+0xfa/0xfa0 [ 1032.217234][T25462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.223668][T25462] [ 1032.223668][T25462] -> #3 (set->srcu){.+.+}-{0:0}: [ 1032.230836][T25462] lock_sync+0xba/0x160 [ 1032.235535][T25462] __synchronize_srcu+0x96/0x3a0 [ 1032.241014][T25462] elevator_switch+0x12b/0x640 [ 1032.246328][T25462] elevator_change+0x315/0x4c0 [ 1032.251723][T25462] elevator_set_default+0x186/0x260 [ 1032.257817][T25462] blk_register_queue+0x34e/0x3f0 [ 1032.263489][T25462] __add_disk+0x677/0xd50 [ 1032.268375][T25462] add_disk_fwnode+0xfc/0x480 [ 1032.273606][T25462] nbd_dev_add+0x717/0xae0 [ 1032.278574][T25462] nbd_init+0x168/0x1f0 [ 1032.283269][T25462] do_one_initcall+0x236/0x820 [ 1032.288575][T25462] do_initcall_level+0x104/0x190 [ 1032.294058][T25462] do_initcalls+0x59/0xa0 [ 1032.298941][T25462] kernel_init_freeable+0x334/0x4b0 [ 1032.304694][T25462] kernel_init+0x1d/0x1d0 [ 1032.309575][T25462] ret_from_fork+0x4bc/0x870 [ 1032.314709][T25462] ret_from_fork_asm+0x1a/0x30 [ 1032.320018][T25462] [ 1032.320018][T25462] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1032.327864][T25462] lock_acquire+0x120/0x360 [ 1032.332914][T25462] __mutex_lock+0x187/0x1350 [ 1032.338395][T25462] elevator_change+0x1e5/0x4c0 [ 1032.343696][T25462] elevator_set_none+0x42/0xb0 [ 1032.349000][T25462] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 1032.355350][T25462] nbd_start_device+0x17f/0xb10 [ 1032.360758][T25462] nbd_genl_connect+0x135b/0x18f0 [ 1032.366335][T25462] genl_family_rcv_msg_doit+0x215/0x300 [ 1032.372436][T25462] genl_rcv_msg+0x60e/0x790 [ 1032.377483][T25462] netlink_rcv_skb+0x208/0x470 [ 1032.382782][T25462] genl_rcv+0x28/0x40 [ 1032.387307][T25462] netlink_unicast+0x82f/0x9e0 [ 1032.392603][T25462] netlink_sendmsg+0x805/0xb30 [ 1032.397908][T25462] __sock_sendmsg+0x21c/0x270 [ 1032.403139][T25462] ____sys_sendmsg+0x505/0x830 [ 1032.408442][T25462] ___sys_sendmsg+0x21f/0x2a0 [ 1032.413748][T25462] __x64_sys_sendmsg+0x19b/0x260 [ 1032.419237][T25462] do_syscall_64+0xfa/0xfa0 [ 1032.424280][T25462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.430741][T25462] [ 1032.430741][T25462] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1032.439376][T25462] lock_acquire+0x120/0x360 [ 1032.444422][T25462] blk_alloc_queue+0x538/0x620 [ 1032.449733][T25462] __blk_mq_alloc_disk+0x15c/0x340 [ 1032.455397][T25462] nbd_dev_add+0x46c/0xae0 [ 1032.460451][T25462] nbd_init+0x168/0x1f0 [ 1032.465148][T25462] do_one_initcall+0x236/0x820 [ 1032.470460][T25462] do_initcall_level+0x104/0x190 [ 1032.475943][T25462] do_initcalls+0x59/0xa0 [ 1032.480821][T25462] kernel_init_freeable+0x334/0x4b0 [ 1032.486666][T25462] kernel_init+0x1d/0x1d0 [ 1032.491551][T25462] ret_from_fork+0x4bc/0x870 [ 1032.496688][T25462] ret_from_fork_asm+0x1a/0x30 [ 1032.502081][T25462] [ 1032.502081][T25462] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1032.509353][T25462] validate_chain+0xb9b/0x2140 [ 1032.514673][T25462] __lock_acquire+0xab9/0xd20 [ 1032.519892][T25462] lock_acquire+0x120/0x360 [ 1032.524933][T25462] fs_reclaim_acquire+0x72/0x100 [ 1032.530421][T25462] kmem_cache_alloc_node_noprof+0x48/0x710 [ 1032.536863][T25462] __alloc_skb+0x112/0x2d0 [ 1032.541913][T25462] tcp_stream_alloc_skb+0x3d/0x340 [ 1032.547569][T25462] tcp_sendmsg_locked+0x1c7f/0x5540 [ 1032.553321][T25462] tcp_sendmsg+0x2f/0x50 [ 1032.558108][T25462] __sock_sendmsg+0x19c/0x270 [ 1032.563332][T25462] sock_sendmsg+0x158/0x230 [ 1032.568404][T25462] splice_to_socket+0x8f5/0xf00 [ 1032.573802][T25462] do_splice+0xc79/0x1660 [ 1032.578672][T25462] __se_sys_splice+0x2e1/0x460 [ 1032.583969][T25462] do_syscall_64+0xfa/0xfa0 [ 1032.589003][T25462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.595438][T25462] [ 1032.595438][T25462] other info that might help us debug this: [ 1032.595438][T25462] [ 1032.605755][T25462] Chain exists of: [ 1032.605755][T25462] fs_reclaim --> &nsock->tx_lock --> sk_lock-AF_INET [ 1032.605755][T25462] [ 1032.618382][T25462] Possible unsafe locking scenario: [ 1032.618382][T25462] [ 1032.625831][T25462] CPU0 CPU1 [ 1032.631199][T25462] ---- ---- [ 1032.636563][T25462] lock(sk_lock-AF_INET); [ 1032.640989][T25462] lock(&nsock->tx_lock); [ 1032.647930][T25462] lock(sk_lock-AF_INET); [ 1032.654875][T25462] lock(fs_reclaim); [ 1032.658890][T25462] [ 1032.658890][T25462] *** DEADLOCK *** [ 1032.658890][T25462] [ 1032.667035][T25462] 2 locks held by syz.1.5582/25462: [ 1032.672243][T25462] #0: ffff8880799d5c68 (&pipe->mutex){+.+.}-{4:4}, at: splice_to_socket+0xf5/0xf00 [ 1032.681673][T25462] #1: ffff88807a27f518 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sendmsg+0x21/0x50 [ 1032.690828][T25462] [ 1032.690828][T25462] stack backtrace: [ 1032.696733][T25462] CPU: 1 UID: 0 PID: 25462 Comm: syz.1.5582 Not tainted syzkaller #0 PREEMPT(full) [ 1032.696757][T25462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1032.696769][T25462] Call Trace: [ 1032.696779][T25462] [ 1032.696788][T25462] dump_stack_lvl+0x189/0x250 [ 1032.696822][T25462] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1032.696850][T25462] ? __pfx__printk+0x10/0x10 [ 1032.696877][T25462] ? print_lock_name+0xde/0x100 [ 1032.696903][T25462] print_circular_bug+0x2ee/0x310 [ 1032.696932][T25462] check_noncircular+0x134/0x160 [ 1032.696959][T25462] validate_chain+0xb9b/0x2140 [ 1032.696987][T25462] ? iov_iter_bvec_advance+0x226/0x230 [ 1032.697016][T25462] __lock_acquire+0xab9/0xd20 [ 1032.697039][T25462] ? kmem_cache_alloc_node_noprof+0x48/0x710 [ 1032.697066][T25462] lock_acquire+0x120/0x360 [ 1032.697085][T25462] ? kmem_cache_alloc_node_noprof+0x48/0x710 [ 1032.697118][T25462] fs_reclaim_acquire+0x72/0x100 [ 1032.697135][T25462] ? kmem_cache_alloc_node_noprof+0x48/0x710 [ 1032.697163][T25462] kmem_cache_alloc_node_noprof+0x48/0x710 [ 1032.697190][T25462] ? __alloc_skb+0x112/0x2d0 [ 1032.697212][T25462] __alloc_skb+0x112/0x2d0 [ 1032.697232][T25462] tcp_stream_alloc_skb+0x3d/0x340 [ 1032.697251][T25462] tcp_sendmsg_locked+0x1c7f/0x5540 [ 1032.697289][T25462] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 1032.697305][T25462] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1032.697329][T25462] ? __local_bh_enable_ip+0x12d/0x1c0 [ 1032.697356][T25462] tcp_sendmsg+0x2f/0x50 [ 1032.697373][T25462] __sock_sendmsg+0x19c/0x270 [ 1032.697417][T25462] sock_sendmsg+0x158/0x230 [ 1032.697445][T25462] ? __pfx_sock_sendmsg+0x10/0x10 [ 1032.697477][T25462] ? __asan_memset+0x22/0x50 [ 1032.697503][T25462] ? iov_iter_bvec+0xb8/0x180 [ 1032.697526][T25462] splice_to_socket+0x8f5/0xf00 [ 1032.697556][T25462] ? __pfx_splice_to_socket+0x10/0x10 [ 1032.697588][T25462] ? futex_private_hash_put+0x4b/0x280 [ 1032.697618][T25462] ? bpf_lsm_file_permission+0x9/0x20 [ 1032.697640][T25462] ? security_file_permission+0x75/0x290 [ 1032.697669][T25462] ? rw_verify_area+0x255/0x4d0 [ 1032.697687][T25462] ? __pfx_splice_to_socket+0x10/0x10 [ 1032.697707][T25462] do_splice+0xc79/0x1660 [ 1032.697739][T25462] ? __pfx_do_splice+0x10/0x10 [ 1032.697770][T25462] __se_sys_splice+0x2e1/0x460 [ 1032.697795][T25462] ? __pfx___se_sys_splice+0x10/0x10 [ 1032.697819][T25462] ? __x64_sys_splice+0x21/0xf0 [ 1032.697841][T25462] do_syscall_64+0xfa/0xfa0 [ 1032.697863][T25462] ? lockdep_hardirqs_on+0x9c/0x150 [ 1032.697884][T25462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.697902][T25462] ? clear_bhb_loop+0x60/0xb0 [ 1032.697922][T25462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1032.697940][T25462] RIP: 0033:0x7fa7a938eec9 [ 1032.697959][T25462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1032.697976][T25462] RSP: 002b:00007fa7aa301038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1032.697995][T25462] RAX: ffffffffffffffda RBX: 00007fa7a95e5fa0 RCX: 00007fa7a938eec9 [ 1032.698009][T25462] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 1032.698020][T25462] RBP: 00007fa7a9411f91 R08: 0000000000010500 R09: 0000000000000000 [ 1032.698032][T25462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1032.698043][T25462] R13: 00007fa7a95e6038 R14: 00007fa7a95e5fa0 R15: 00007ffda17c59f8 [ 1032.698064][T25462] [ 1032.762340][ C0] net_ratelimit: 7 callbacks suppressed [ 1032.762362][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1032.764135][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1033.082201][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1033.802310][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1033.812209][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1034.122891][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1034.842244][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1034.842287][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1035.172451][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1035.882264][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1037.962225][ C1] net_ratelimit: 5 callbacks suppressed [ 1037.962247][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1037.962287][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1038.292548][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1039.002228][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1039.002287][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1039.322388][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1040.042221][ C1] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1040.042286][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1040.362457][ C0] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 1041.082262][ C0] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1041.322222][T14291] Bluetooth: hci0: command 0x206a tx timeout